# Latest **URL:** https://discuss.elastic.co/latest.md?page=1291 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1292 --- ## [Duplicate Documents](https://discuss.elastic.co/t/duplicate-documents/295343)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 10:15am UTC](https://discuss.elastic.co/t/duplicate-documents/295343 "2022-01-26T10:15:07Z")
If there are communication problems, then in some cases the logs come 2 or 3 times, all the logs of one call are duplicated. Functionbeat config: functionbeat: provider: aws: deploy\_bucket: functionbeat-dep… --- ## [PHP Agent + Laravel](https://discuss.elastic.co/t/php-agent-laravel/294721)
**Author:** [@willianmaria](https://discuss.elastic.co/u/willianmaria)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 10:14am UTC](https://discuss.elastic.co/t/php-agent-laravel/294721 "2022-01-26T10:14:10Z")
Hi, the Elastic APM for PHP is working with Laravel? I'm trying with Laravel 8.x but only capture transactions. The errors aren't not being sent to the Kibana. --- ## [Timing "drift" in timeline for REST calls between different servers](https://discuss.elastic.co/t/timing-drift-in-timeline-for-rest-calls-between-different-servers/294966)
**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 10:05am UTC](https://discuss.elastic.co/t/timing-drift-in-timeline-for-rest-calls-between-different-servers/294966 "2022-01-26T10:05:50Z")
I have a C++-client (Windows) which interacts with a Java-server (Unix) using REST. Both run on different machines. For the C++-part, I have written a simple implementation to send transactions and spans directly to the … --- ## [Logstash-plugin.bat fails to find bundled Java in 7.16.1](https://discuss.elastic.co/t/logstash-plugin-bat-fails-to-find-bundled-java-in-7-16-1/295358)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 9:54am UTC](https://discuss.elastic.co/t/logstash-plugin-bat-fails-to-find-bundled-java-in-7-16-1/295358 "2022-01-26T09:54:07Z")
Hi All, I upgraded to 7.16.1 a little while back and noticed today that when I try to list the installed plugins I get the following error: C:\\APPS\\ELASTIC\\logstash-7.16.1\\bin\>logstash-plugin.bat list "Using bundled JD… --- ## [New installation - unable to start Elastic search on our harden RHEL8 image](https://discuss.elastic.co/t/new-installation-unable-to-start-elastic-search-on-our-harden-rhel8-image/295440)
**Author:** [@jokem48](https://discuss.elastic.co/u/jokem48)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 9:38am UTC](https://discuss.elastic.co/t/new-installation-unable-to-start-elastic-search-on-our-harden-rhel8-image/295440 "2022-01-26T09:38:53Z")
Fresh install in our newly created RHEL8 vm. When we download and try to start Elasticsearch for the first time, we encounter an error. systemctl status ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/l… --- ## [Siem Rule Duplication - Query Not Changed Despite Rule Edit](https://discuss.elastic.co/t/siem-rule-duplication-query-not-changed-despite-rule-edit/295433)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 9:03am UTC](https://discuss.elastic.co/t/siem-rule-duplication-query-not-changed-despite-rule-edit/295433 "2022-01-26T09:03:21Z")
Hi, We are using SIEM in Kibana for threat detection. We have a rule which uses a saved query that we duplicated. On the new rule we changed chose custom query and inserted a different query in kql. What happens is tha… --- ## [Elastic driver](https://discuss.elastic.co/t/elastic-driver/295425)
**Author:** [@bertvervaele](https://discuss.elastic.co/u/bertvervaele)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 7:13am UTC](https://discuss.elastic.co/t/elastic-driver/295425 "2022-01-26T07:13:26Z")
Hi everyone, I encountered a wierd issue with the http encoding of the Elastic driver. In some of my projects it translates the '/' to '%2f' as it should and in others it doesn't. Any ideas are welcome :slight\_smile: … --- ## [Can't login in Kibana with any of the built-in users](https://discuss.elastic.co/t/cant-login-in-kibana-with-any-of-the-built-in-users/295248)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 7:07am UTC](https://discuss.elastic.co/t/cant-login-in-kibana-with-any-of-the-built-in-users/295248 "2022-01-26T07:07:50Z")
Hi folks, I've just recently updated from 6.8.22 to 7.14.2. I configured the username and password of Kibana in the kibana keystore. My Elasticsearch cluster is up and running I can send requests via curl. I try to a… --- ## [Use global field](https://discuss.elastic.co/t/use-global-field/295420)
**Author:** [@ratseba](https://discuss.elastic.co/u/ratseba)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 6:40am UTC](https://discuss.elastic.co/t/use-global-field/295420 "2022-01-26T06:40:07Z")
Hi, I have several environments with beats and logstash who write to one Elasticsearch. Each of them have properties like: customer, environmnet type ( production, test) and type (depending on what they are for). In ea… --- ## [Filebeats for configuration file](https://discuss.elastic.co/t/filebeats-for-configuration-file/295142)
**Author:** [@ratseba](https://discuss.elastic.co/u/ratseba)\ **Replies:** 4\ **Last updated:** [January 26, 2022, 6:16am UTC](https://discuss.elastic.co/t/filebeats-for-configuration-file/295142 "2022-01-26T06:16:21Z")
Hi, I need send content of config file from some service to Elasticsearch. This file not change often (max ten times a year). This file have structure like: version=77.1.2 ActiveModule=monitoring, tts, asr LicenseNumbe… --- ## [ML: count vs low/high-count detector functions](https://discuss.elastic.co/t/ml-count-vs-low-high-count-detector-functions/293329)
**Author:** [@shabnam](https://discuss.elastic.co/u/shabnam)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 6:03am UTC](https://discuss.elastic.co/t/ml-count-vs-low-high-count-detector-functions/293329 "2022-01-26T06:03:26Z")
Hello I would like to know what is the difference between “count”, “low count”, and “high count”. I assume that “count” function includes the results from “low count”, "high count" and more ever. Please correct me if I… --- ## [How to increase query speed on search engine?](https://discuss.elastic.co/t/how-to-increase-query-speed-on-search-engine/295361)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 5:36am UTC](https://discuss.elastic.co/t/how-to-increase-query-speed-on-search-engine/295361 "2022-01-26T05:36:35Z")
Hello there, We would like to improve the query response time of a search query on the cluster, you may ask what kind of query but I cannot share that information. The query does some full-text searches, then function\_… --- ## [Calculate time difference between two different time values excluding weekends](https://discuss.elastic.co/t/calculate-time-difference-between-two-different-time-values-excluding-weekends/295413)
**Author:** [@ryann](https://discuss.elastic.co/u/ryann)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 5:10am UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-different-time-values-excluding-weekends/295413 "2022-01-26T05:10:53Z")
Currently have a logstash conf file that is gathering events with two time fields, createdDate and closedDate. Have a ruby code that calculates the time difference which is working as intended but looking for a way to ex… --- ## [Ingest Json data into Elastic Search using filebeat](https://discuss.elastic.co/t/ingest-json-data-into-elastic-search-using-filebeat/293510)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 3:06am UTC](https://discuss.elastic.co/t/ingest-json-data-into-elastic-search-using-filebeat/293510 "2022-01-26T03:06:57Z")
I attempted to import data from a json file into Elasticsearch, but my filebeat had a configuration issue in filebeat.yml or an issue with the input Because my json is regular json, but filebeat only supports ndjson, Fi… --- ## [Logstash error info : A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/logstash-error-info-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/295414)
**Author:** [@seth\_qiang](https://discuss.elastic.co/u/seth_qiang)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 2:52am UTC](https://discuss.elastic.co/t/logstash-error-info-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/295414 "2022-01-26T02:52:40Z")
hi, everyone my logstash have some errors in my logstash. as follows keywords A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:main Error: event executor terminated Exception: Java::JavaUt… --- ## [Date histogram error](https://discuss.elastic.co/t/date-histogram-error/295155)
**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\ **Replies:** 11\ **Last updated:** [January 26, 2022, 1:11am UTC](https://discuss.elastic.co/t/date-histogram-error/295155 "2022-01-26T01:11:54Z")
Hello, dear community. Have an error with date histogram. I have a cryptocurrency price base with a 5 minute interval (4 million records). Fields: { "\_source": { "time":… --- ## [Fleet - selfhosted production mode 7.16.3](https://discuss.elastic.co/t/fleet-selfhosted-production-mode-7-16-3/294381)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 12:11am UTC](https://discuss.elastic.co/t/fleet-selfhosted-production-mode-7-16-3/294381 "2022-01-26T00:11:27Z")
Hello wonderful people, I'm looking into setting up fleet. So far I have a test server ready and I have generated the certificates using elasticsearch-certutil elasticsearch CA /etc/elasticsearch/certs/elastic-stack-c… --- ## [Fail to start Kibana 7.16.2](https://discuss.elastic.co/t/fail-to-start-kibana-7-16-2/293698)
**Author:** [@chilo](https://discuss.elastic.co/u/chilo)\ **Replies:** 10\ **Last updated:** [January 26, 2022, 12:08am UTC](https://discuss.elastic.co/t/fail-to-start-kibana-7-16-2/293698 "2022-01-26T00:08:28Z")
I have Elasticsearch and kibana running on version 7.9.2 for a very long time without issues. Lately, when I started to deploy Elasticsearch and kibana 7.16.2, I see the 403 error below: {"type":"log","@timestamp":"20… --- ## [ECS Quality Dashboard - ECS Coverage of LogSources](https://discuss.elastic.co/t/ecs-quality-dashboard-ecs-coverage-of-logsources/294806)
**Author:** [@zangero98](https://discuss.elastic.co/u/zangero98)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 10:39pm UTC](https://discuss.elastic.co/t/ecs-quality-dashboard-ecs-coverage-of-logsources/294806 "2022-01-25T22:39:56Z")
Hello :slight\_smile: I'm searching for an ECS Dashboard Template to check if LogSources are sending the Logs right in view of ECS conditions (ECS coverage - Elastic Security ECS field reference | Elastic Security Soluti… --- ## [Logstash TCP Zero Window - Palo Alto logs](https://discuss.elastic.co/t/logstash-tcp-zero-window-palo-alto-logs/295396)
**Author:** [@groth](https://discuss.elastic.co/u/groth)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 10:36pm UTC](https://discuss.elastic.co/t/logstash-tcp-zero-window-palo-alto-logs/295396 "2022-01-25T22:36:06Z")
New to troubleshooting Logstash performance issues. I have a cluster of 3 load balanced virtual servers running Logstash that forward on to Elasticsearch in the cloud. We've noticed that we're not getting all of our logs… --- ## [Kibana service will not start Exit 126](https://discuss.elastic.co/t/kibana-service-will-not-start-exit-126/295286)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 6\ **Last updated:** [January 25, 2022, 10:11pm UTC](https://discuss.elastic.co/t/kibana-service-will-not-start-exit-126/295286 "2022-01-25T22:11:12Z")
Upon trying to start kibana 7.16.3 after a fresh successful install on rhel 8, I am getting the following errors. Any ideas on what the cause could be. Thank you so much for any help. \> \[root@attack-range-elastic-server… --- ## [Differences in PUT requests in ES versions](https://discuss.elastic.co/t/differences-in-put-requests-in-es-versions/295171)
**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\ **Replies:** 10\ **Last updated:** [January 25, 2022, 9:53pm UTC](https://discuss.elastic.co/t/differences-in-put-requests-in-es-versions/295171 "2022-01-25T21:53:50Z")
Hello everyone :hatched\_chick: I actively study Elasticsearch. I had to update my version ES to the latest from 5. But here I ran into a problem, the answer to which I could not find in the documentation. I used ES 5 … --- ## [Sorting a field on the view mode](https://discuss.elastic.co/t/sorting-a-field-on-the-view-mode/295251)
**Author:** [@dash5000](https://discuss.elastic.co/u/dash5000)\ **Replies:** 5\ **Last updated:** [January 25, 2022, 9:15pm UTC](https://discuss.elastic.co/t/sorting-a-field-on-the-view-mode/295251 "2022-01-25T21:15:11Z")
Hello Everyone, I was checking the sorting on the table visualization using the lens. I can sort the fields on the table in the edit mode, but i don't see the same option in the view mode. This is the drop down i see i… --- ## [Search templates {{#toJson}} with arrays: unexpected character](https://discuss.elastic.co/t/search-templates-tojson-with-arrays-unexpected-character/295398)
**Author:** [@Tristan2](https://discuss.elastic.co/u/Tristan2)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 8:58pm UTC](https://discuss.elastic.co/t/search-templates-tojson-with-arrays-unexpected-character/295398 "2022-01-25T20:58:29Z")
I'm trying to parameterize \_source in a search template but I'm encountering an error. This is my template: PUT \_scripts/stored-script { "script": { "lang": "mustache", "source": { "\_source": "{{#toJson… --- ## [CPU usage metric via CAT API misbehaving after upgrading to 7.16.3 (running in LXD)](https://discuss.elastic.co/t/cpu-usage-metric-via-cat-api-misbehaving-after-upgrading-to-7-16-3-running-in-lxd/294620)
**Author:** [@juan.domenech](https://discuss.elastic.co/u/juan.domenech)\ **Replies:** 9\ **Last updated:** [January 25, 2022, 8:43pm UTC](https://discuss.elastic.co/t/cpu-usage-metric-via-cat-api-misbehaving-after-upgrading-to-7-16-3-running-in-lxd/294620 "2022-01-25T20:43:01Z")
Problem: In a 10 core CPU, 64GB RAM system, Centos 7.9 under LXD container virtualisation Elasticsearch reports wrong CPU usage after upgrading to 7.16.3 This issue wasn't present on 7.15.1 We use this metric to track … --- ## [Could not determine ID for filter/useragent](https://discuss.elastic.co/t/could-not-determine-id-for-filter-useragent/294270)
**Author:** [@Chris\_Andrews](https://discuss.elastic.co/u/Chris_Andrews)\ **Replies:** 4\ **Last updated:** [January 25, 2022, 8:39pm UTC](https://discuss.elastic.co/t/could-not-determine-id-for-filter-useragent/294270 "2022-01-25T20:39:21Z")
We have upgraded logstash from 7.5.2 to 7.16.2 on three separate instances. The first two upgraded with no issues whatsoever, however the final upgrade encountered this problem and now logstash crashes: Stack trace: \[2… --- ## [Date fields not being treated as timestamp fields in Kibana index patterns](https://discuss.elastic.co/t/date-fields-not-being-treated-as-timestamp-fields-in-kibana-index-patterns/295310)
**Author:** [@abhinav\_chourasia](https://discuss.elastic.co/u/abhinav_chourasia)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 8:17pm UTC](https://discuss.elastic.co/t/date-fields-not-being-treated-as-timestamp-fields-in-kibana-index-patterns/295310 "2022-01-25T20:17:44Z")
I have been trying to get the mapping correct for my date values in my documents. I have come down to doing a lot of hit and trial now with it. Every time and no matter what option I try, I am not getting the date field … --- ## [Ingest Pipeline for Message Field](https://discuss.elastic.co/t/ingest-pipeline-for-message-field/295393)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 7:38pm UTC](https://discuss.elastic.co/t/ingest-pipeline-for-message-field/295393 "2022-01-25T19:38:33Z")
We are using the Custom UDP Integration within Fleet. When it collects logs, it throws all the log data into a message field. I'm not very familiar with ingest pipelines and whether or not Grok or Json would be the best … --- ## [Automation test stability trend over time](https://discuss.elastic.co/t/automation-test-stability-trend-over-time/295391)
**Author:** [@Ahsun\_Qureshi](https://discuss.elastic.co/u/Ahsun_Qureshi)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 7:30pm UTC](https://discuss.elastic.co/t/automation-test-stability-trend-over-time/295391 "2022-01-25T19:30:10Z")
Disclaimer: Fairly new to Kibana I am trying to analyse test automation results over time to understand test failures for individual tests. The relevant fields include: test.name (string) test.result (string) As an o… --- ## [Setup lifecycle of "infra" plugin wasn't completed in 10sec. Consider disabling the plugin and re-start](https://discuss.elastic.co/t/setup-lifecycle-of-infra-plugin-wasnt-completed-in-10sec-consider-disabling-the-plugin-and-re-start/294679)
**Author:** [@abhijeet\_k](https://discuss.elastic.co/u/abhijeet_k)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 6:46pm UTC](https://discuss.elastic.co/t/setup-lifecycle-of-infra-plugin-wasnt-completed-in-10sec-consider-disabling-the-plugin-and-re-start/294679 "2022-01-25T18:46:35Z")
I have integrated kibana charts in react web app using an iframe tag, I want to render multiple charts on the same page of my react app. I am facing the issue if I render multiple charts, please refer to the attached ima… [Previous page](https://discuss.elastic.co/latest.md?page=1290) [Next page](https://discuss.elastic.co/latest.md?page=1292)