# Latest **URL:** https://discuss.elastic.co/latest.md?page=1225 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1226 --- ## [\[Filebeat System\] Syslog dashboard ECS](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 10:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065 "2022-03-09T10:47:11Z")
Hello Everyone, on the Dashboard "Syslog dashboard ECS" there is the following Visualization: This Visualization is a Markdown: Can someone tell me where to find the path /dashboard/Filebeat-syslog-dashboard-ecs … --- ## [Make several fields from one nested field](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177)
**Author:** [@voverm](https://discuss.elastic.co/u/voverm)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:40am UTC](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177 "2022-03-09T10:40:26Z")
Hello! I've an index which has a field called properties (besides the one that is defined in the top-level) in mappings with this structure: "properties": { "type": "nested", "properties": { "code": { "typ… --- ## [Authenticating issue when using iframe outside the kibana](https://discuss.elastic.co/t/authenticating-issue-when-using-iframe-outside-the-kibana/299196)
**Author:** [@Hashika\_Maduranga](https://discuss.elastic.co/u/Hashika_Maduranga)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 10:29am UTC](https://discuss.elastic.co/t/authenticating-issue-when-using-iframe-outside-the-kibana/299196 "2022-03-09T10:29:13Z")
When I used Kibana visualization on my web page it was not working correctly. I just used Kibana configuration (kibana.yml) xpack.security.authc.providers: basic.basic1: order: 0 anonymous.anonymous1: order… --- ## [Docker-compose + fleet + RUM + APM on version\>= 7.16](https://discuss.elastic.co/t/docker-compose-fleet-rum-apm-on-version-7-16/298964)
**Author:** [@jan499](https://discuss.elastic.co/u/jan499)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:25am UTC](https://discuss.elastic.co/t/docker-compose-fleet-rum-apm-on-version-7-16/298964 "2022-03-09T10:25:21Z")
We have Elasticsearch, Kibana and APM running happily on version 7. However, we want to move to version 8, and because of that we first try to get a working version 7.17. My kibana claims that the APM agent is running a… --- ## [Elasticsearch with React.js: match\_phrase](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958)
**Author:** [@Karina\_Ivanova](https://discuss.elastic.co/u/Karina_Ivanova)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958 "2022-03-09T10:23:34Z")
Hello, I'm quite new to Elasticsearch and React and I'm trying to build an app that fetches .json data through API. Everything works fine but I can't get my head around two things: how to use Match phrase query and how … --- ## [High memory taken by segments.terms\_memory\_in\_bytes](https://discuss.elastic.co/t/high-memory-taken-by-segments-terms-memory-in-bytes/299134)
**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\ **Replies:** 11\ **Last updated:** [March 9, 2022, 10:18am UTC](https://discuss.elastic.co/t/high-memory-taken-by-segments-terms-memory-in-bytes/299134 "2022-03-09T10:18:11Z")
Hello Experts, ES : 6.4 We have 21 data nodes cluster. Seeing high memory consumed by segments.terms\_memory\_in\_bytes which causing circuit breaker issues for us. Wanted to understand why segments are taking so much mem… --- ## [Elastic search upgrade from 7.14.2 to 8.0 or near to that](https://discuss.elastic.co/t/elastic-search-upgrade-from-7-14-2-to-8-0-or-near-to-that/298961)
**Author:** [@Vinay\_Menon1](https://discuss.elastic.co/u/Vinay_Menon1)\ **Replies:** 7\ **Last updated:** [March 9, 2022, 10:17am UTC](https://discuss.elastic.co/t/elastic-search-upgrade-from-7-14-2-to-8-0-or-near-to-that/298961 "2022-03-09T10:17:38Z")
Hi Team, I need to upgrade Elasticsearch from 7.14.2 which I see in stack management to 8.0 or near to that version I am also using heartbeat, metricbeat & logstash as well on the on few of the servers to collect data/… --- ## [Monitoring Azure using Elastic Cloud](https://discuss.elastic.co/t/monitoring-azure-using-elastic-cloud/298948)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 9:45am UTC](https://discuss.elastic.co/t/monitoring-azure-using-elastic-cloud/298948 "2022-03-09T09:45:46Z")
Hello, We have infrastructure in Azure, we are starting with deployments and need to monitor everything. There are applications, kubernetes, microservices, containers, logs.... I've been watching some video of how to c… --- ## [Can we have save query as a sub feature in Kibana](https://discuss.elastic.co/t/can-we-have-save-query-as-a-sub-feature-in-kibana/299061)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 9:16am UTC](https://discuss.elastic.co/t/can-we-have-save-query-as-a-sub-feature-in-kibana/299061 "2022-03-09T09:16:24Z")
If we have a separate access/privilege in role for Kibana to save query it will be great. As without write access we can give this privilege to users. --- ## [Canvas showing couldn't update workpad errors](https://discuss.elastic.co/t/canvas-showing-couldnt-update-workpad-errors/299027)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 9:16am UTC](https://discuss.elastic.co/t/canvas-showing-couldnt-update-workpad-errors/299027 "2022-03-09T09:16:01Z")
Hi there! I'm new to Canvas and I'm trying to use the service on one of my instances where I'm running other services as well. And while I'm using Canvas I'm seeing some errors showing Couldn't update workpad / Intern… --- ## [Integration of kibana widgets in angular app](https://discuss.elastic.co/t/integration-of-kibana-widgets-in-angular-app/298929)
**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 9:15am UTC](https://discuss.elastic.co/t/integration-of-kibana-widgets-in-angular-app/298929 "2022-03-09T09:15:03Z")
Hi Elastic Team, I have a working angular app, a nodejs backend and a privately hosted ELK instance. Currently, everything is going good with kibana dashboard. But, now I want to display widgets generated by the kiban… --- ## [Elasticsearch Output および Grok FilterでのECSに関するWariningについて](https://discuss.elastic.co/t/elasticsearch-output-grok-filter-ecs-warining/299188)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-output-grok-filter-ecs-warining/299188 "2022-03-09T09:03:29Z")
Elasticsearch、Kibana、LogstashおよびFilebeatをバージョン7.16.3から8.1.0へアップグレードしたところ、以下のようなLogstashのWaringが出力されました。 \[WARN \]\[logstash.filters.grok \]\[パイプライン名\] ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 … --- ## [Elasticsearch and Docker Generating http\_ca.crt](https://discuss.elastic.co/t/elasticsearch-and-docker-generating-http-ca-crt/299011)
**Author:** [@SwampyFox](https://discuss.elastic.co/u/SwampyFox)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-and-docker-generating-http-ca-crt/299011 "2022-03-09T08:40:26Z")
I have followed the instructions on installing Elasticsearch on Docker for version 8.0.1. I am able to run the curl command against "https://localhost:9200" with the http\_ca.crt and the password generated for the elasti… --- ## [AWS IoT data to Elastc Cloud](https://discuss.elastic.co/t/aws-iot-data-to-elastc-cloud/298755)
**Author:** [@Keo](https://discuss.elastic.co/u/Keo)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 7:50am UTC](https://discuss.elastic.co/t/aws-iot-data-to-elastc-cloud/298755 "2022-03-09T07:50:52Z")
Hi, Do you have recommendation on how to send data from an AWS IoT Core MQTT Broker to an Elasticsearch instance that is managed using ElasticCloud ? The only lead I have so far is to use a combination of AWS Cloudwatc… --- ## [Snapshot and restore for a Cluster](https://discuss.elastic.co/t/snapshot-and-restore-for-a-cluster/299082)
**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 7:08am UTC](https://discuss.elastic.co/t/snapshot-and-restore-for-a-cluster/299082 "2022-03-09T07:08:40Z")
I have a cluster with three nodes (1 master, 2 data and master eligible) in my primary region. I need to take a snapshot of this cluster. If primary region goes down, I will spin up one node in secondary region and rest… --- ## [Any setting in CSV filter to disable auto datatype conversion and keep everything in string?](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163)
**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\ **Replies:** 6\ **Last updated:** [March 9, 2022, 6:59am UTC](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163 "2022-03-09T06:59:42Z")
In both version 7.x and 8, with a very simple csv filter configuration below, for no reason some fields are mapped as "date". In the documentation, there is a switch "convert" that we can customize datatype conversion fr… --- ## [Elasticsearch Cluster Ingest Node Sizing](https://discuss.elastic.co/t/elasticsearch-cluster-ingest-node-sizing/298971)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 6:55am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ingest-node-sizing/298971 "2022-03-09T06:55:23Z")
Hi Team, We're planning to add a new Ingest node to running ES cluster, this node is dedicated only for data ingestion. How to do capacity planning for ingest node, does this memory optimized or CPU optimized, to ingest… --- ## [Сжатие старых логов](https://discuss.elastic.co/t/topic/297130)
**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\ **Replies:** 10\ **Last updated:** [March 9, 2022, 6:55am UTC](https://discuss.elastic.co/t/topic/297130 "2022-03-09T06:55:08Z")
Здравствуйте. эластик с кибаной собираются логи с домена (сбор логов осуществляется через ForwardedEvents .evtx) В Logstash настроен фильтр которые собирает нужные event id filter { if "slog" in \[tags\] { if \[winlo… --- ## [Logstash agent stopped due to error "Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\\`"](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 6:43am UTC](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168 "2022-03-09T06:43:41Z")
Hi, I am new to ELK stack and have installed the three components on my SUSE linux 12 server. Running java 17.0.2. My logstash-plain.log repeats the java error for the agent which stops with below error: \[2022-03-09T0… --- ## [Analyze fortigate logs with elastic security](https://discuss.elastic.co/t/analyze-fortigate-logs-with-elastic-security/299173)
**Author:** [@sawa00011](https://discuss.elastic.co/u/sawa00011)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 6:40am UTC](https://discuss.elastic.co/t/analyze-fortigate-logs-with-elastic-security/299173 "2022-03-09T06:40:05Z")
I am logging Fortigate with Elastic Agent 7.16.3 and sending logs to Elastic Cloud. I would like to apply Elastic Security Rules to these logs and alert on them. There are about 650 rules by default, but I believe that… --- ## [Create kibana visualization & dashboard - templates ndjson](https://discuss.elastic.co/t/create-kibana-visualization-dashboard-templates-ndjson/298609)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 6\ **Last updated:** [March 9, 2022, 6:32am UTC](https://discuss.elastic.co/t/create-kibana-visualization-dashboard-templates-ndjson/298609 "2022-03-09T06:32:20Z")
Hi, Is there a tool/method to create a template(ndjson) for a dashboard & its visualizations; so that we can replicate the same structure with a different name for another index pattern. Thanks Chandrakanth --- ## [Need to extract specific message from log](https://discuss.elastic.co/t/need-to-extract-specific-message-from-log/299171)
**Author:** [@sushant12](https://discuss.elastic.co/u/sushant12)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 6:29am UTC](https://discuss.elastic.co/t/need-to-extract-specific-message-from-log/299171 "2022-03-09T06:29:13Z")
address space usage: 1827991552 bytes/1743MB} {rss usage: 389292032 bytes/371MB} \[pid: 19335|app: 0|req: 17171/48113\] 10.195.0.169 () {50 vars in 816 bytes} \[Mon Feb 21 04:06:57 2022\] GET /web/test\_name?name=sush =\> gene… --- ## [Alternative for SQL transaction in Elastic-search](https://discuss.elastic.co/t/alternative-for-sql-transaction-in-elastic-search/299166)
**Author:** [@Muhammad\_Hamza](https://discuss.elastic.co/u/Muhammad_Hamza)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:36am UTC](https://discuss.elastic.co/t/alternative-for-sql-transaction-in-elastic-search/299166 "2022-03-09T05:36:39Z")
Is there any alternative to SQL Transactions in Elastic-search? I want to perform multiple bulk indexing operations in batches and if any batch fails at some point, I would like to revert the whole indexing process. --- ## [Replacing all instances of a string in nested JSON](https://discuss.elastic.co/t/replacing-all-instances-of-a-string-in-nested-json/299152)
**Author:** [@7armyant](https://discuss.elastic.co/u/7armyant)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 4:39am UTC](https://discuss.elastic.co/t/replacing-all-instances-of-a-string-in-nested-json/299152 "2022-03-09T04:39:17Z")
Hi Gurus, I'm new to logstash and have had little success with the following. I have been trying to relace all instances of a sting in nested JSON. Below is the JSON in question: "{"totalCount": 2, "nextPageKey": n… --- ## [Scripted fields not working for nested value in Kibana 7.x](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647)
**Author:** [@frankfenomena](https://discuss.elastic.co/u/frankfenomena)\ **Replies:** 7\ **Last updated:** [March 9, 2022, 4:38am UTC](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647 "2022-03-09T04:38:50Z")
My scripted field works as intended in older version of kibana 5.x, but we use 7.x in a different environment and the same scripted field does not work. I've searched for what the syntax change would be in 7.x but could… --- ## [Why and how to use elastic charts?](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836)
**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 3:26am UTC](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836 "2022-03-09T03:26:05Z")
I found the @elastic/charts library on official github profile of elastic. So, can I create visualizations (ones which are displayed in a kibana dashboard) by consuming Elasticsearch rest api and @elastic/charts ? If y… --- ## [Apm agent on openshift](https://discuss.elastic.co/t/apm-agent-on-openshift/297770)
**Author:** [@shandiaji](https://discuss.elastic.co/u/shandiaji)\ **Replies:** 6\ **Last updated:** [March 9, 2022, 1:57am UTC](https://discuss.elastic.co/t/apm-agent-on-openshift/297770 "2022-03-09T01:57:43Z")
hy everyone, im newbie at elastic apm and i want to install apm agent on openshift, anyone can help me how to deploy apm agent on openshift or anyone have a guide how to deploy apm agent on openshift or link? Thanks be… --- ## [How to filebeat logs to elastic cloud](https://discuss.elastic.co/t/how-to-filebeat-logs-to-elastic-cloud/299098)
**Author:** [@sulfred](https://discuss.elastic.co/u/sulfred)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 1:41am UTC](https://discuss.elastic.co/t/how-to-filebeat-logs-to-elastic-cloud/299098 "2022-03-09T01:41:54Z")
I am trying the Elastic Cloud. I want to send logs to the cloud with filebeat. I am keep receiving errors: pipeline/output.go:154 Failed to connect to backoff(elasticsearch(https://cloud-name-instance.aws.elastic-clou… --- ## [.management-beats index - can I delete it?](https://discuss.elastic.co/t/management-beats-index-can-i-delete-it/299147)
**Author:** [@lag](https://discuss.elastic.co/u/lag)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 11:30pm UTC](https://discuss.elastic.co/t/management-beats-index-can-i-delete-it/299147 "2022-03-08T23:30:14Z")
We are preparing for Elastic 8.0 and one of the critical errors we have is .management-beats index that was created prior to 7.0. We are not using this functionality and since beats central management has been discontin… --- ## [Newbie to Linux/elastic. I'm having trouble setting up elasticsearch](https://discuss.elastic.co/t/newbie-to-linux-elastic-im-having-trouble-setting-up-elasticsearch/298687)
**Author:** [@elasticScrub](https://discuss.elastic.co/u/elasticScrub)\ **Replies:** 19\ **Last updated:** [March 8, 2022, 11:19pm UTC](https://discuss.elastic.co/t/newbie-to-linux-elastic-im-having-trouble-setting-up-elasticsearch/298687 "2022-03-08T23:19:49Z")
As the title says I'm new to Elasticsearch and Linux in general. I have setup an Ubuntu server in VirtualBox for installing Elasticsearch. I followed the guide listed on installing it and am currently stuck on this step. … [Previous page](https://discuss.elastic.co/latest.md?page=1224) [Next page](https://discuss.elastic.co/latest.md?page=1226)