# Latest **URL:** https://discuss.elastic.co/latest.md?page=1257 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1258 --- ## [ES\_API point to Cluster IP](https://discuss.elastic.co/t/es-api-point-to-cluster-ip/297325)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 1:28am UTC](https://discuss.elastic.co/t/es-api-point-to-cluster-ip/297325 "2022-02-17T01:28:36Z")
Hai everyone. Just curious about one thing regarding Elasticsearch. Before this we know that ES\_API can link to ES database IP. Can I get accurate information if ES\_API can also point to cluster IP? Thanks a lot. --- ## [Multi-indice facet filtering](https://discuss.elastic.co/t/multi-indice-facet-filtering/297391)
**Author:** [@merijnkruithof](https://discuss.elastic.co/u/merijnkruithof)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 1:13am UTC](https://discuss.elastic.co/t/multi-indice-facet-filtering/297391 "2022-02-17T01:13:18Z")
Hi all, I'm very new to Elasticsearch, so I hope that you guys understand what I'm saying. We have two indices (training\_programs and vacancies). Those indices share some fields, such as education\_level, and fields tha… --- ## [API key: unable to find apikey with id \](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id-id/297401)
**Author:** [@inbox.ex](https://discuss.elastic.co/u/inbox.ex)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 1:11am UTC](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id-id/297401 "2022-02-17T01:11:12Z")
I was able to create ApiKey from Elasticsearch console. But, when i try to Post Document to the ES url using PostMan, i am getting this error. (subject). does it take time for the apikey to become effective ? the url … --- ## [Not loading pipeline - ConfigurationError](https://discuss.elastic.co/t/not-loading-pipeline-configurationerror/297422)
**Author:** [@Sconic](https://discuss.elastic.co/u/Sconic)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 11:56pm UTC](https://discuss.elastic.co/t/not-loading-pipeline-configurationerror/297422 "2022-02-16T23:56:16Z")
I've updated the output of our pipeline to change the index that some documents get added to but I'm getting a configuration error when trying to start Logstash, I can't for the life of me find what I'm missing. I'm usin… --- ## [SQL Module missing in Metricbeat](https://discuss.elastic.co/t/sql-module-missing-in-metricbeat/297423)
**Author:** [@vPilot](https://discuss.elastic.co/u/vPilot)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 10:49pm UTC](https://discuss.elastic.co/t/sql-module-missing-in-metricbeat/297423 "2022-02-16T22:49:52Z")
Since the PostgreSQL module doesn't support replication monitoring, or custom queries like the MySQL module, I am hoping to use the SQL module to connect and run the queries I need against Postgres. However, I am not see… --- ## [Read encrypted windows event logs](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 10:30pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380 "2022-02-16T22:30:31Z")
Hello community, for security reasons I have some eventlogs encrypted with an certificate. Windows native its possible to decrypt them in order to get access again. Is it also possible with winlogbeat or filebeat? Be… --- ## [Configuring the Transport Client to work with a Secured Cluster](https://discuss.elastic.co/t/configuring-the-transport-client-to-work-with-a-secured-cluster/296476)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 9:40pm UTC](https://discuss.elastic.co/t/configuring-the-transport-client-to-work-with-a-secured-cluster/296476 "2022-02-16T21:40:31Z")
hey there, following this doc page I was trying to use Transport Client. ES cluster is already configured to use SSL and Basic Auth and it works properly. I would like to give an answer to my doubt, following step #4, … --- ## [Error fetching data for metricset linux.pageinfo](https://discuss.elastic.co/t/error-fetching-data-for-metricset-linux-pageinfo/297049)
**Author:** [@CaSi](https://discuss.elastic.co/u/CaSi)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 9:05pm UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-linux-pageinfo/297049 "2022-02-16T21:05:33Z")
Hello, I am using metricbeat 7.16.3 on centos 8 stream. The ‘pageinfo’ metricset in the linux module spams my logs with this error message: ERROR module/wrapper.go:259 Error fetching data for metricset li… --- ## [Does node APM agent supports grpc framework](https://discuss.elastic.co/t/does-node-apm-agent-supports-grpc-framework/297055)
**Author:** [@vinodmb](https://discuss.elastic.co/u/vinodmb)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 7:22pm UTC](https://discuss.elastic.co/t/does-node-apm-agent-supports-grpc-framework/297055 "2022-02-16T19:22:55Z")
I am trying to integrate elastic apm in my node application, we are using express for http endpoints and grpc for service to service communication. I am able to see transactions for http calls but there is no transaction… --- ## [Logstash monitoring data not showing up in Kibana](https://discuss.elastic.co/t/logstash-monitoring-data-not-showing-up-in-kibana/297408)
**Author:** [@Pedro\_Osorio](https://discuss.elastic.co/u/Pedro_Osorio)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 7:14pm UTC](https://discuss.elastic.co/t/logstash-monitoring-data-not-showing-up-in-kibana/297408 "2022-02-16T19:14:56Z")
Hi all, I've been trying to see Logstash metrics in Kibana, but with no success. My setup is as follows: metricbeat daemonset collecting host/pods metrics shipping to elastic metricbeat deployment collecting cluster/l… --- ## [Filter on rank\_features](https://discuss.elastic.co/t/filter-on-rank-features/297181)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:13pm UTC](https://discuss.elastic.co/t/filter-on-rank-features/297181 "2022-02-16T19:13:05Z")
Hi all Back in 2017/2018 I attended Elasticon in San Francisco and got to meet a bunch of the engineers there. It was a really good experience and I got to have a lot of questions answered. One in particular was buggin… --- ## [Scripted metric aggregation inside nested aggregation: \`params.\_source\` is empty in map script](https://discuss.elastic.co/t/scripted-metric-aggregation-inside-nested-aggregation-params-source-is-empty-in-map-script/297237)
**Author:** [@asupranovich](https://discuss.elastic.co/u/asupranovich)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 2:58pm UTC](https://discuss.elastic.co/t/scripted-metric-aggregation-inside-nested-aggregation-params-source-is-empty-in-map-script/297237 "2022-02-16T14:58:49Z")
Hi community! My Elasticsearch version is 7.7.0. I'm facing a weird issue for my aggregation query. Let's say we have a car index, car data model looks like below: { "vin": "08c00679-8a58-11ec-9745-1aed518f8637", … --- ## [Logstash Pipeline Filter (\*)](https://discuss.elastic.co/t/logstash-pipeline-filter/297266)
**Author:** [@max\_cyril](https://discuss.elastic.co/u/max_cyril)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:40pm UTC](https://discuss.elastic.co/t/logstash-pipeline-filter/297266 "2022-02-16T18:40:46Z")
RE: Hi,I am struggling to write a logstash pipeline filter section i have used "TRANSFORMS" from kibana interface, it did not solve the case. \*\*\* i want to filter and only output event that correspond to the maxim… --- ## [Need to Extract field](https://discuss.elastic.co/t/need-to-extract-field/297154)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 7\ **Last updated:** [February 16, 2022, 6:36pm UTC](https://discuss.elastic.co/t/need-to-extract-field/297154 "2022-02-16T18:36:23Z")
Hi Experts, I am using logstash 7.9.3 and i have written the MongoDb connection with Elasticsearch pipeline. Data's are perfectly pushed into Elasticsearch. In that index I need to split one field. My logstash configu… --- ## [Get lines in one line logstash filter](https://discuss.elastic.co/t/get-lines-in-one-line-logstash-filter/297263)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:32pm UTC](https://discuss.elastic.co/t/get-lines-in-one-line-logstash-filter/297263 "2022-02-16T18:32:32Z")
Hi, log file example: 0101-15:17:39:012|aze|exp|id|aa|bb|ee|rr|zz|tt|jj 0101-15:17:39:012|aze|exp|id....|ERR exception nom du para: sss à System... à Web.............|Ref|lev|15|Code\_Status = 50 0101-15:17:39:0… --- ## [Logstsh parce grok add teg \_grokparsefailure](https://discuss.elastic.co/t/logstsh-parce-grok-add-teg-grokparsefailure/297251)
**Author:** [@bsilsy](https://discuss.elastic.co/u/bsilsy)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:30pm UTC](https://discuss.elastic.co/t/logstsh-parce-grok-add-teg-grokparsefailure/297251 "2022-02-16T18:30:27Z")
good day everyone! I'm trying to parse field "message" with grock but, i get \_grokparsefailure tag on 100% of documents send data using filebeat message log example "message": "10.10.10.10 - text \[15/Feb/2022:15:27:2… --- ## [Filebeat issue with json logs from ES audit](https://discuss.elastic.co/t/filebeat-issue-with-json-logs-from-es-audit/297404)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 6:29pm UTC](https://discuss.elastic.co/t/filebeat-issue-with-json-logs-from-es-audit/297404 "2022-02-16T18:29:25Z")
Hello, I have following issue. I created on latest Elasticsearch audit logs (ES ver 7.16.3) with json format, and tried to impement filebeat to sending logs to ES. My audit logs looks like as below: {"type":"audit",… --- ## [Java Client API data indexed but not available in a search, works in debug mode](https://discuss.elastic.co/t/java-client-api-data-indexed-but-not-available-in-a-search-works-in-debug-mode/297399)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 5:56pm UTC](https://discuss.elastic.co/t/java-client-api-data-indexed-but-not-available-in-a-search-works-in-debug-mode/297399 "2022-02-16T17:56:02Z")
Hi guys, I'm a bit stuck on a problem I don't understand. I'm basically doing the following, using the Java Client API in ES 7.17: RestClient restClient = RestClient.builder("...some url...") … --- ## [Latest Transform questions](https://discuss.elastic.co/t/latest-transform-questions/297293)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 6\ **Last updated:** [February 16, 2022, 5:25pm UTC](https://discuss.elastic.co/t/latest-transform-questions/297293 "2022-02-16T17:25:06Z")
Creating a latest transform using the API, I need to provide a set of unique\_keys, which can be a list of field names. Some questions: How do I reference a field in a sub object? Like within foo there is a key bar th… --- ## [Visualize data from appsearch with kibana](https://discuss.elastic.co/t/visualize-data-from-appsearch-with-kibana/296450)
**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 5:10pm UTC](https://discuss.elastic.co/t/visualize-data-from-appsearch-with-kibana/296450 "2022-02-16T17:10:15Z")
Hello, I've been trying to figure out for a long time how I can create dashboards with information I get from the AppSearch API. Is it possible and if so could you tell me how? Or could you give me the necessary documen… --- ## [Filebeat: Bug: Processor "decode\_json\_fields" with usage of "target"](https://discuss.elastic.co/t/filebeat-bug-processor-decode-json-fields-with-usage-of-target/296972)
**Author:** [@fwetzler](https://discuss.elastic.co/u/fwetzler)\ **Replies:** 13\ **Last updated:** [February 16, 2022, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-bug-processor-decode-json-fields-with-usage-of-target/296972 "2022-02-16T17:07:17Z")
OS: SLES12, CentOS 7.9 Filebeat Versions: 7.8.0, 7.16.2 After using processor "decode\_json\_fields" WITH "target: 'sometarget' it's impossible to access some extracted json fields with following processors. If you le… --- ## [Mapping Json Object and Array under the same field](https://discuss.elastic.co/t/mapping-json-object-and-array-under-the-same-field/294853)
**Author:** [@Remi\_Czternasty](https://discuss.elastic.co/u/Remi_Czternasty)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:38pm UTC](https://discuss.elastic.co/t/mapping-json-object-and-array-under-the-same-field/294853 "2022-02-16T16:38:23Z")
Hello, I'm trying to ingests logs that are json documents. As I don't know the structure of each possible logs, I'm looking into dynamic templates. And I encounter an issue because I have a case where a field is an obje… --- ## [Metricbeat dashboard setup fails](https://discuss.elastic.co/t/metricbeat-dashboard-setup-fails/296788)
**Author:** [@satherev](https://discuss.elastic.co/u/satherev)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 4:27pm UTC](https://discuss.elastic.co/t/metricbeat-dashboard-setup-fails/296788 "2022-02-16T16:27:30Z")
Good afternoon, I am unable to set up Metricbeats dashboards. Here is the error I receive: \[root@redacted metricbeat\]# metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: e… --- ## [My experiences setting up Metricbeat for monitoring an Elastic cluster](https://discuss.elastic.co/t/my-experiences-setting-up-metricbeat-for-monitoring-an-elastic-cluster/297395)
**Author:** [@jacknl](https://discuss.elastic.co/u/jacknl)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 4:21pm UTC](https://discuss.elastic.co/t/my-experiences-setting-up-metricbeat-for-monitoring-an-elastic-cluster/297395 "2022-02-16T16:21:26Z")
For those who are interested here is my experience deploying Metricbeat with a monitoring cluster ("Stack Monitoring"). In a nutshell: When you monitor a non-trivial Elasticsearch cluster, be sure to add scope: cluste… --- ## [Convert Timestamp in Elasticsearch Query Rule](https://discuss.elastic.co/t/convert-timestamp-in-elasticsearch-query-rule/297297)
**Author:** [@jdwinns](https://discuss.elastic.co/u/jdwinns)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:18pm UTC](https://discuss.elastic.co/t/convert-timestamp-in-elasticsearch-query-rule/297297 "2022-02-16T16:18:20Z")
Hi folks, I am new to the ELK stack and have a question in regards to an Elastic query rule and e-mail alert that I've created. Currently, I am including the log @timestamp field in the e-mail alert using this variable… --- ## [Problem with filebeat](https://discuss.elastic.co/t/problem-with-filebeat/296317)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 3:59pm UTC](https://discuss.elastic.co/t/problem-with-filebeat/296317 "2022-02-16T15:59:11Z")
Hello, I have a problem c filebeat 7.12. The filebeat agent is not working correctly. Initially, 2 sources of logs were configured, data is received from one source, but the second one worked for a month and the data was… --- ## [Logstash runner error](https://discuss.elastic.co/t/logstash-runner-error/297378)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 3:41pm UTC](https://discuss.elastic.co/t/logstash-runner-error/297378 "2022-02-16T15:41:43Z")
\[2022-02-16T14:02:47,966\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-02-16T14:02:47,980\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.versi… --- ## [ILM Error duration cannot be negative](https://discuss.elastic.co/t/ilm-error-duration-cannot-be-negative/297222)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 3:30pm UTC](https://discuss.elastic.co/t/ilm-error-duration-cannot-be-negative/297222 "2022-02-16T15:30:39Z")
running elk stack version 7.16.2. GET .siem-signals-default-000010/\_ilm/explain { "error" : { "root\_cause" : \[ { "type" : "illegal\_argument\_exception", "reason" : "duration cannot be negativ… --- ## [Kibana -\> interactive controls](https://discuss.elastic.co/t/kibana-interactive-controls/297172)
**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 3:22pm UTC](https://discuss.elastic.co/t/kibana-interactive-controls/297172 "2022-02-16T15:22:33Z")
Interactive controls in Kibana are great but I have not figured out a way to pass a variable from an interactive control to a visualization widget. For example: Let's say we have a pull down menu interactive control lab… --- ## [Drop ipv6 from metricbeat data](https://discuss.elastic.co/t/drop-ipv6-from-metricbeat-data/297158)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 3:18pm UTC](https://discuss.elastic.co/t/drop-ipv6-from-metricbeat-data/297158 "2022-02-16T15:18:01Z")
Hello, I want to drop ipv6 address from metricbeat host.ip document values. How can I do that? I am on 7.16-2 [Previous page](https://discuss.elastic.co/latest.md?page=1256) [Next page](https://discuss.elastic.co/latest.md?page=1258)