# Latest **URL:** https://discuss.elastic.co/latest.md?page=1265 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1266 --- ## [Permission denied when i'm trying to use elasticsearch command](https://discuss.elastic.co/t/permission-denied-when-im-trying-to-use-elasticsearch-command/296629)
**Author:** [@Arkoos62](https://discuss.elastic.co/u/Arkoos62)\ **Replies:** 5\ **Last updated:** [February 11, 2022, 2:52pm UTC](https://discuss.elastic.co/t/permission-denied-when-im-trying-to-use-elasticsearch-command/296629 "2022-02-11T14:52:07Z")
Hello there, I am trying to configure basic security on my Elasticsearch production but i'm getting error when i try to launch a command from the path /usr/share/Elasticsearch/bin i'm getting this error ./elasticsearch… --- ## [Ingest pipeline set processor error; \[value\] required property is missing](https://discuss.elastic.co/t/ingest-pipeline-set-processor-error-value-required-property-is-missing/296798)
**Author:** [@ben5556](https://discuss.elastic.co/u/ben5556)\ **Replies:** 4\ **Last updated:** [February 11, 2022, 2:48pm UTC](https://discuss.elastic.co/t/ingest-pipeline-set-processor-error-value-required-property-is-missing/296798 "2022-02-11T14:48:13Z")
I am trying to add a field as below within one of our ingest pipelines "set": { "field": "upstream\_response\_time\_int", "copy\_from": "upstream\_response\_time" } But it gives the below error even though t… --- ## [No way to specify filebeat 8.0.0 data stream and index template pattern](https://discuss.elastic.co/t/no-way-to-specify-filebeat-8-0-0-data-stream-and-index-template-pattern/296979)
**Author:** [@rouke-broersma](https://discuss.elastic.co/u/rouke-broersma)\ **Replies:** 3\ **Last updated:** [February 11, 2022, 2:45pm UTC](https://discuss.elastic.co/t/no-way-to-specify-filebeat-8-0-0-data-stream-and-index-template-pattern/296979 "2022-02-11T14:45:18Z")
In filebeat 7.x we were able to specify custom index template and rollover\_alias for the indexes used by filebeat. We use this to split which indices different filebeats send their logs to because some filebeats collect … --- ## [Multiple paths logstash output](https://discuss.elastic.co/t/multiple-paths-logstash-output/296831)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 10:51am UTC](https://discuss.elastic.co/t/multiple-paths-logstash-output/296831 "2022-02-10T10:51:22Z")
Hi, filebeat config: filebeat.inputs: - type: log enabled: true paths: - D:\\elastic\_stack\\testLog\\\* - D:\\elastic\_stack\\LogWal\\\* So in logstash i want for the first path did the split of the message and add fie… --- ## [How to find docs that contain the exact specified terms](https://discuss.elastic.co/t/how-to-find-docs-that-contain-the-exact-specified-terms/295758)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 14\ **Last updated:** [February 11, 2022, 2:29pm UTC](https://discuss.elastic.co/t/how-to-find-docs-that-contain-the-exact-specified-terms/295758 "2022-02-11T14:29:10Z")
Hi, I'm trying to get docs that contain the exact specified terms. Terms query doesn't match because it also returns docs with additional terms. Create index : PUT my-index { "mappings": { "properties": { … --- ## [Two index Pattern with same name after importation](https://discuss.elastic.co/t/two-index-pattern-with-same-name-after-importation/296155)
**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 1:58pm UTC](https://discuss.elastic.co/t/two-index-pattern-with-same-name-after-importation/296155 "2022-02-11T13:58:50Z")
Hello, I have two index pattern with the same name. I have some visualization on the second index pattern but i need move the visualization to the first Index Pattern. and delete the second index pattern after. Do yo… --- ## [Master not discovered exception](https://discuss.elastic.co/t/master-not-discovered-exception/296977)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 1:26pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception/296977 "2022-02-11T13:26:15Z")
Hello, I build a 11 node Elastic cluster (3M, 5D, 3 Ingest nodes), using ansible playbook. Which is working perfectly fine with out SSL & TLS. But when i enable SSL & TLS, i'am getting the below error message in master… --- ## [Custom component template](https://discuss.elastic.co/t/custom-component-template/296974)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/custom-component-template/296974 "2022-02-11T13:05:21Z")
Hello, Can see now after upgrading to 7.16.2 that we have a new component template as part of logs-system.application index template. What this component template logs-system.application@custom should be used for? Sho… --- ## [Security information not being output on startup (8.0.0-rc2)](https://discuss.elastic.co/t/security-information-not-being-output-on-startup-8-0-0-rc2/296393)
**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\ **Replies:** 7\ **Last updated:** [February 11, 2022, 12:53pm UTC](https://discuss.elastic.co/t/security-information-not-being-output-on-startup-8-0-0-rc2/296393 "2022-02-11T12:53:22Z")
Tried setting up Elasticsearch 8.0.0-rc2 on macOS to test the new security configuration. Despite what the documentation says, no password, enrollment token, etc. is being output on first startup. Instead, the following … --- ## [Permanent password for elasticsearch on kubernetes](https://discuss.elastic.co/t/permanent-password-for-elasticsearch-on-kubernetes/296419)
**Author:** [@hasanaki](https://discuss.elastic.co/u/hasanaki)\ **Replies:** 4\ **Last updated:** [February 11, 2022, 12:13pm UTC](https://discuss.elastic.co/t/permanent-password-for-elasticsearch-on-kubernetes/296419 "2022-02-11T12:13:58Z")
hi, problem: I create secret.yml, I want Kibana and Elastic to use it. but Elasticsearch can not apply the password from secret.yml and i have to set password whit elasticsearch-setup-password interactive. so each time… --- ## [\[status\_exception\] error while executing search in Kibana](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 12:03pm UTC](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942 "2022-02-11T12:03:45Z")
Hi, I'm getting this error in discover and dashboards. \[status\_exception\] error while executing search Though it seems to be working for different time periods... It gives this error when i select for a particular ti… --- ## [Getting class not found exception when invoking logstash http input with queue type as persisted](https://discuss.elastic.co/t/getting-class-not-found-exception-when-invoking-logstash-http-input-with-queue-type-as-persisted/296970)
**Author:** [@Sivakumar\_Lakshminar](https://discuss.elastic.co/u/Sivakumar_Lakshminar)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:40am UTC](https://discuss.elastic.co/t/getting-class-not-found-exception-when-invoking-logstash-http-input-with-queue-type-as-persisted/296970 "2022-02-11T11:40:02Z")
Hello All, I am trying to setup ELK for internal event monitoring for our platform. Need help with the below, Using logstash-7.10.2 with bundled jdk. with setting as per below snippets. It is working fine when trying … --- ## [How to create a timeline](https://discuss.elastic.co/t/how-to-create-a-timeline/296969)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-create-a-timeline/296969 "2022-02-11T11:34:46Z")
Hello Community, I have a question regarding updating data. I wrote a script in Python to create a random csv file. The CSV file contains: \_id, name, status and date. Now here is my Question: If I have a lane e.g. id;… --- ## [Index in elastic](https://discuss.elastic.co/t/index-in-elastic/296909)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 11:16am UTC](https://discuss.elastic.co/t/index-in-elastic/296909 "2022-02-11T11:16:05Z")
Hello, I'm new to elastic, tell me if it's possible to do such a thing, create an index pattern, for example “index-\*” without adding %{+YYYY.MM.dd} , but so that an index like this is automatically created on the onset … --- ## [Pipelines for each device source](https://discuss.elastic.co/t/pipelines-for-each-device-source/296962)
**Author:** [@jokem48](https://discuss.elastic.co/u/jokem48)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 10:47am UTC](https://discuss.elastic.co/t/pipelines-for-each-device-source/296962 "2022-02-11T10:47:20Z")
Hi, new to the ELK setup. We are exploring to use ELK as our SIEM. Right now we have a log forwarder collecting syslog from various network sources, like cisco, fortinet and even juniper /f5? In order to break down thos… --- ## [Elastic Agent - error getting cgroup stats: error fetching stats for controller io](https://discuss.elastic.co/t/elastic-agent-error-getting-cgroup-stats-error-fetching-stats-for-controller-io/296906)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 9:55pm UTC](https://discuss.elastic.co/t/elastic-agent-error-getting-cgroup-stats-error-fetching-stats-for-controller-io/296906 "2022-02-10T21:55:58Z")
Hi, Elastic-Agent 7.17 and getting this error for the agents on Raspberry Pi Model 4 - Debian Bullseye elastic-agent filebeat metrcbeat osquerybeat error getting cgroup stats: error fetching stats for controller io… --- ## [Date format err in query?](https://discuss.elastic.co/t/date-format-err-in-query/296964)
**Author:** [@kin122](https://discuss.elastic.co/u/kin122)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 10:38am UTC](https://discuss.elastic.co/t/date-format-err-in-query/296964 "2022-02-11T10:38:21Z")
hi,i got a error in the following query. but its ok in this format Officially, the two formats are the same. I'm confused, please tell me the reason --- ## [Finding the first occurrence of all Unique IDs within a term](https://discuss.elastic.co/t/finding-the-first-occurrence-of-all-unique-ids-within-a-term/296908)
**Author:** [@SkipJ](https://discuss.elastic.co/u/SkipJ)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 10:35am UTC](https://discuss.elastic.co/t/finding-the-first-occurrence-of-all-unique-ids-within-a-term/296908 "2022-02-11T10:35:12Z")
I'm trying to create a visualization that captures all new users a from the last month (now/M-1 to now/M), then capture the amount of sessions they've ran from counting their unique session IDs. The challenge I'm facing… --- ## [Where is .NET client for App Search?](https://discuss.elastic.co/t/where-is-net-client-for-app-search/296773)
**Author:** [@Woland](https://discuss.elastic.co/u/Woland)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 10:33am UTC](https://discuss.elastic.co/t/where-is-net-client-for-app-search/296773 "2022-02-11T10:33:04Z")
It seems like one of the most popular enterprise languages is being ignored for App Search, are there any concrete plans on adding support or do we need to implement client ourselves in order to enable app search? --- ## [3.0.0 Released](https://discuss.elastic.co/t/3-0-0-released/296957)
**Author:** [@atorok](https://discuss.elastic.co/u/atorok)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 10:12am UTC](https://discuss.elastic.co/t/3-0-0-released/296957 "2022-02-11T10:12:34Z")
We are pleased to announce that a new major, ECE 3.0.0 has been released today. Release notes: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-3.0.0.html --- ## [Is it possible for buckets\_path to reference a scripted\_metric aggregation?](https://discuss.elastic.co/t/is-it-possible-for-buckets-path-to-reference-a-scripted-metric-aggregation/296953)
**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 9:03am UTC](https://discuss.elastic.co/t/is-it-possible-for-buckets-path-to-reference-a-scripted-metric-aggregation/296953 "2022-02-11T09:03:30Z")
I am working on the kibana\_sample\_data\_logs index. I ran the following aggregation: GET kibana\_sample\_data\_logs/\_search?size=0 { "query": { "match\_all": {} }, "aggs": { "doc\_buckets\_for\_terms\_aggregation… --- ## [Netflow v9 upload bytes and download bytes](https://discuss.elastic.co/t/netflow-v9-upload-bytes-and-download-bytes/296951)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 8:59am UTC](https://discuss.elastic.co/t/netflow-v9-upload-bytes-and-download-bytes/296951 "2022-02-11T08:59:27Z")
Hi all, I have configured netflow v9 and try to use elk to monitor the upload and download bytes. I tried to upload the file (4MB) from local (192.168.x.x ) to the ftp server (211.x.x.x), log is like this Convers… --- ## [Kibana Discover Filter "There aren't any options available"](https://discuss.elastic.co/t/kibana-discover-filter-there-arent-any-options-available/296821)
**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\ **Replies:** 4\ **Last updated:** [February 11, 2022, 8:29am UTC](https://discuss.elastic.co/t/kibana-discover-filter-there-arent-any-options-available/296821 "2022-02-11T08:29:45Z")
Hi, I created a new role to seperate access to see only filebeat logs from specific Openshift namespaces. So far so good. The user with the role can only see logs from the granted namespaces. Granted Kibana privileg… --- ## [PUT "ignore\_malformed" on index\_template](https://discuss.elastic.co/t/put-ignore-malformed-on-index-template/296861)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 3\ **Last updated:** [February 11, 2022, 8:17am UTC](https://discuss.elastic.co/t/put-ignore-malformed-on-index-template/296861 "2022-02-11T08:17:42Z")
Hi, Is it possible to insert the parameter "ignore\_malformed" on a template by a PUT? My actual config is: GET \_template/http-access { "http-access" : { "order" : 0, "version" : 60001, "index\_patterns" … --- ## [Bitbucket and Elastic security question!](https://discuss.elastic.co/t/bitbucket-and-elastic-security-question/296855)
**Author:** [@Simha\_Gontmaher](https://discuss.elastic.co/u/Simha_Gontmaher)\ **Replies:** 3\ **Last updated:** [February 11, 2022, 8:17am UTC](https://discuss.elastic.co/t/bitbucket-and-elastic-security-question/296855 "2022-02-11T08:17:22Z")
Hi everyone, Your advice would be very much appreciated! Is Elasticsearch version 6.8.22 or Elastic 7.16.2 considered vulnerable? Do we need to perform any manual mitigation? Also, having the Elasticsearch version 6.5… --- ## [NiFi + ElasticSearch + filebeat](https://discuss.elastic.co/t/nifi-elasticsearch-filebeat/296946)
**Author:** [@iconm](https://discuss.elastic.co/u/iconm)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 8:13am UTC](https://discuss.elastic.co/t/nifi-elasticsearch-filebeat/296946 "2022-02-11T08:13:21Z")
I urgently need to create a pipeline in NiFi that accepts syslog on local UDP port 514 and sends it to Elasticsearch. And I have to use filebeat and build a simple Nifi pipeline that collects data from local /var /log/m… --- ## [ES 7.13.2 - Not starting up - elasticsearch.bat error Invalid initial heap size](https://discuss.elastic.co/t/es-7-13-2-not-starting-up-elasticsearch-bat-error-invalid-initial-heap-size/296945)
**Author:** [@Jothi\_Kiruthika](https://discuss.elastic.co/u/Jothi_Kiruthika)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 8:08am UTC](https://discuss.elastic.co/t/es-7-13-2-not-starting-up-elasticsearch-bat-error-invalid-initial-heap-size/296945 "2022-02-11T08:08:16Z")
HI I am trying to start up ES by running Elasticsearch.bat. I have created an options file under JVM.options.d folder setting the heap size to 2 gb as below - -Xms2g -Xmx2g But When running the batch file, i get the … --- ## [Custom rally docker image](https://discuss.elastic.co/t/custom-rally-docker-image/296874)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 8:07am UTC](https://discuss.elastic.co/t/custom-rally-docker-image/296874 "2022-02-11T08:07:57Z")
Hi, I am extending rally docker image. getting permission denied issue. for COPY or RUN eg RUN mkfifo /logs ---\> permission denied. I am new to esrally kindly help --- ## [Get indexed Elasticsearch document body from Logstash](https://discuss.elastic.co/t/get-indexed-elasticsearch-document-body-from-logstash/296865)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 8:01am UTC](https://discuss.elastic.co/t/get-indexed-elasticsearch-document-body-from-logstash/296865 "2022-02-11T08:01:42Z")
Hi, Is there a way to see the exact body of a document that Logstash indexed? I'm using the Elasticsearch output plugin. Context: in our production environment, some data is output into Elasticsearch by Logstash. In El… --- ## [Adding multiple input files](https://discuss.elastic.co/t/adding-multiple-input-files/296832)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 5\ **Last updated:** [February 11, 2022, 7:05am UTC](https://discuss.elastic.co/t/adding-multiple-input-files/296832 "2022-02-11T07:05:19Z")
Hello, Is it possible to add two inputs files in filebeat.yml? Example:- - /etc/filebeat/inputs.d/\*.yml - /etc/filebeat-oss/inputs.d/\*.yml I wanna add these two files in filebeat.yml under filebeat.config.inp… [Previous page](https://discuss.elastic.co/latest.md?page=1264) [Next page](https://discuss.elastic.co/latest.md?page=1266)