# Latest **URL:** https://discuss.elastic.co/latest.md?page=1305 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1306 --- ## [Brand New Installation of ElasticSearch and Kibana on Windows. Kibana is not able to connect to ElasticSearch](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490)
**Author:** [@webdada](https://discuss.elastic.co/u/webdada)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 2:43pm UTC](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490 "2022-01-17T14:43:21Z")
Both are on latest 7.16.3 version. Elasticsearch-7.16.3 Elasticsearch starts fine, I was able to access http://localhost:9200/ Kibana command line start error: log \[20:15:25.611\] \[warning\]\[process\] Error \[Prod… --- ## [How do I protect indexes](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585)
**Author:** [@kzltp](https://discuss.elastic.co/u/kzltp)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 2:09pm UTC](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585 "2022-01-17T14:09:41Z")
I use elasticsarch 7.16. I wanna any indexes not delete. Any user(included in superuser) can't delete any indexes. How do i do that. --- ## [Date incorrectly parsed](https://discuss.elastic.co/t/date-incorrectly-parsed/294571)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 2:03pm UTC](https://discuss.elastic.co/t/date-incorrectly-parsed/294571 "2022-01-17T14:03:09Z")
Hello, i can't get this date parsed correctly 20220113T21:00:18.965901 date { match =\> \["fill\_date", "yyyMMdd'T'HH:mm:ss.SSSSSS"\] target =\> "@timestamp" } Best --- ## [Calculate ratio beetwin count and unique count](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 1:51pm UTC](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588 "2022-01-17T13:51:48Z")
Hello, I have a list of tickets for a computeur support. I would have in a tab the ratio beetwin the count of exchange and the unique count of ticket number, for different typologies, like that: Is it possible in a … --- ## [Log4j on Elasticsearch 7.9.2](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093)
**Author:** [@h4h3hj](https://discuss.elastic.co/u/h4h3hj)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 12:33pm UTC](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093 "2022-01-17T12:33:12Z")
Hi Everyone, As we know the vulnerability (CVE-2021-44228) impacts multiple versions of the Apache Log4j2 I can see Elastic has updated about this Supported versions of Elasticsearch (6.8.9+, 7.8+) used with recent ve… --- ## [Elastic agent - configuration for "custom logs" integration?](https://discuss.elastic.co/t/elastic-agent-configuration-for-custom-logs-integration/293886)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 12:30pm UTC](https://discuss.elastic.co/t/elastic-agent-configuration-for-custom-logs-integration/293886 "2022-01-17T12:30:30Z")
Where can I find any sort of reference for the available parameters for the "Custom logs" integration? --- ## [Browser was closed unexpectedly!](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 12:21pm UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581 "2022-01-17T12:21:19Z")
Hi, I am trying to print a PDF of my dashboard but all I keep getting is this error: "Browser was closed unexpectedly! Check the server logs for more info." What does this mean? Can you please try and help me with this?… --- ## [Logstash parse strings before a valid json](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578)
**Author:** [@Calin\_Tatar](https://discuss.elastic.co/u/Calin_Tatar)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:59am UTC](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578 "2022-01-17T11:59:58Z")
Hello, i have the following log : Received stock info for v2, payload: {'id': '1234dads', 'sku': '1QA0QWQ-1JFQQQ'} and i would like to add a new field with phase before json ,i tried the following config but is now worki… --- ## [Please suggest on how to configure Kibana Dashboard Proxy URL](https://discuss.elastic.co/t/please-suggest-on-how-to-configure-kibana-dashboard-proxy-url/294575)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:53am UTC](https://discuss.elastic.co/t/please-suggest-on-how-to-configure-kibana-dashboard-proxy-url/294575 "2022-01-17T11:53:39Z")
Hello Team, I have ELK stack running on Docker container. I wanted to configure the Kibana dashboard through virtual host so that I can access it with XYZ.com domain. \ ProxyPreserveHost On ServerN… --- ## [Kibana page goes unresponsive everytime i select sum buckets in Kibana 7.6.3](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573)
**Author:** [@emohan](https://discuss.elastic.co/u/emohan)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:45am UTC](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573 "2022-01-17T11:45:06Z")
I want to sum count based on common bucket and so i try sum bucket aggregation which results in page going unresponsive. I am on Kibana 7.6.3 version. This is similar to previous post: Is this bug still existing? --- ## [Mean aggregation over cadinality aggregation, over previous composite aggregation](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 10:52am UTC](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374 "2022-01-17T10:52:21Z")
My use case require to obtain an average over previous cardinality aggregation, this aggregations works over the buckets generated by a composite aggregation "calendar histogram" that breaks the timeline in calendar days… --- ## [Snapshot & Restore Policies](https://discuss.elastic.co/t/snapshot-restore-policies/294567)
**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 10:49am UTC](https://discuss.elastic.co/t/snapshot-restore-policies/294567 "2022-01-17T10:49:58Z")
Hi all, Im using s3 repository to snapshot & restore indices. Clusters configured to have 10+ different snapshot policies that mainly based on index names. I leave a certain amount of time between each policy to preven… --- ## [Metricbeat and Elasticsearch Breaker Limit](https://discuss.elastic.co/t/metricbeat-and-elasticsearch-breaker-limit/294419)
**Author:** [@MichaelCoetzee](https://discuss.elastic.co/u/MichaelCoetzee)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 10:38am UTC](https://discuss.elastic.co/t/metricbeat-and-elasticsearch-breaker-limit/294419 "2022-01-17T10:38:32Z")
Hi All. We have a Kubernetes cluster with Elasticsearch and Metricbeat We collect quite a lot of data with Metricbeat and sometimes our Elasticsearch cluster might go down during some maintenance and as i understand it… --- ## [How to run multiple instances in docker container?](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 10:18am UTC](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390 "2022-01-17T10:18:48Z")
I want to run multiple config files in docker container. pipelines.yml file : - pipeline.id: main path.config: "/usr/share/logstash/config/conf.d/\*.conf" - pipeline.id: i2c\_req\_res path.config: "/usr/share/logstas… --- ## [Ingest strategy](https://discuss.elastic.co/t/ingest-strategy/294561)
**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 9:56am UTC](https://discuss.elastic.co/t/ingest-strategy/294561 "2022-01-17T09:56:56Z")
Hi there, as a (broader) follow up on this topic, I am creating this new one about ingest strategy, as I am utterly running out of ideas. My use case has many client machines, each logging various metrics (pretty common… --- ## [How to index a certain number of words from each text?](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 9:54am UTC](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506 "2022-01-17T09:54:13Z")
How can only the first two words of each text be indexed ?? --- ## [I deleted index like files into OS when I had a diskspace problem and now have to fix it](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558)
**Author:** [@marlybyliganget](https://discuss.elastic.co/u/marlybyliganget)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 9:31am UTC](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558 "2022-01-17T09:31:10Z")
Hi guys I have a problem with Elasticsearch cluster I deleted index like files into OS, when I had a diskspace problem I deleted index through this command find ./data/nodes/0/indices -type d -mtime +30 -exec rm -rf … --- ## [Elastic Agent - State persistence in Docker](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 8:49am UTC](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352 "2022-01-17T08:49:50Z")
Hi, I am looking for best practice guidance when running the Elastic Agent and integrations in Docker containers. I have no issues getting them running (the documentation needs a bit of love as there are some inconsisten… --- ## [Create TermAggregation with the wildcard field in Java code](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424)
**Author:** [@Tiffany](https://discuss.elastic.co/u/Tiffany)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 7:50am UTC](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424 "2022-01-17T07:50:39Z")
Hi, I want to create a termAggregation query with wildcard in Java API. It works in Elasticsearch console, but not in Java code. Would you mind shedding some lights? Thank you! Below query works in console { "aggrega… --- ## [Authentication Options for Scroll API Call](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:58am UTC](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543 "2022-01-17T07:58:22Z")
Hi Elastic Experts, I am hoping you can help me. I am building Power BI templates for my clients using the Scroll API method where they want to retrieve results in excess of 10,000 records. I have built the templates u… --- ## [NOT ABLE TO PARSE SPECIFIC CHUNK OF LOG USING GROK](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541 "2022-01-17T07:49:21Z")
Hi, I have a sample log from a switch. I am trying to parse it in to fields but some how I dont know why it is not allowing me to parse capital letters like let me show you Now this is when I worte PROG then it takes… --- ## [How to create filed / how can i find distribute field](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530)
**Author:** [@JWKim1](https://discuss.elastic.co/u/JWKim1)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 7:40am UTC](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530 "2022-01-17T07:40:07Z")
my field with im & serial is not distributed it have to distributed with "&" but it is not working in "im" field how can i find distribute setting? --- ## [Elasticsearch Kibana "Discover" returns no results, but exact same query in "Dev Tools" returns results](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479)
**Author:** [@wishfulwatermelon](https://discuss.elastic.co/u/wishfulwatermelon)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479 "2022-01-17T07:28:18Z")
I was trying to look for data on my index pattern in "Discover". However, it returns no results. I then looked for data on the same index pattern in "Dev Tools" and copied/pasted over the same Request, which returned to… --- ## [Filebeat docker input type labels are not shown](https://discuss.elastic.co/t/filebeat-docker-input-type-labels-are-not-shown/294534)
**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 6:40am UTC](https://discuss.elastic.co/t/filebeat-docker-input-type-labels-are-not-shown/294534 "2022-01-17T06:40:10Z")
Hi all, I use filebeat and logstash for store my all datas. My docker setup and log files are in /home/docker/containers folder. (not in /var/lib/docker path) The problem is when i was colleting my logs, the docker fie… --- ## [Kibana lens grouping data by string pattern](https://discuss.elastic.co/t/kibana-lens-grouping-data-by-string-pattern/294125)
**Author:** [@Realsnack](https://discuss.elastic.co/u/Realsnack)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 6:02am UTC](https://discuss.elastic.co/t/kibana-lens-grouping-data-by-string-pattern/294125 "2022-01-17T06:02:59Z")
Hello, we have some finance transactions saved in Elasticsearch and I would like to create a visualization on the data. All of the records have field "messageType" with a string value and I would need to group the reco… --- ## [How to keep an ES cluster happy during a K8s(!) node update](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736)
**Author:** [@jugosag](https://discuss.elastic.co/u/jugosag)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 5:17am UTC](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736 "2022-01-17T05:17:43Z")
Hi all, I am looking for general guidance on how to keep an Elasticsearch cluster on K8s happy while doing a K8s node update. Motivation We are running an HA microservice-based SaaS application on Kubernetes, we have i… --- ## [Elasticsearch password set error in both auto and interactive](https://discuss.elastic.co/t/elasticsearch-password-set-error-in-both-auto-and-interactive/294524)
**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 5:13am UTC](https://discuss.elastic.co/t/elasticsearch-password-set-error-in-both-auto-and-interactive/294524 "2022-01-17T05:13:53Z")
when i execute ./bin/Elasticsearch-setup-passwords auto or interactive then it's shows me an error Exception in thread "main" SettingsException\[Failed to load settings from \[elasticsearch.yml\]\]; nested: MarkedYAMLExcept… --- ## [Create Search Engine Locally for Elastic Search App](https://discuss.elastic.co/t/create-search-engine-locally-for-elastic-search-app/294522)
**Author:** [@shahabj13](https://discuss.elastic.co/u/shahabj13)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:30am UTC](https://discuss.elastic.co/t/create-search-engine-locally-for-elastic-search-app/294522 "2022-01-17T03:30:58Z")
How can I create a search engine locally rather than connect that to the cloud endpoint? this documentation didn't help me too much. --- ## [Increasing queue size](https://discuss.elastic.co/t/increasing-queue-size/294520)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 3:25am UTC](https://discuss.elastic.co/t/increasing-queue-size/294520 "2022-01-17T03:25:34Z")
Hi, I'm ingesting Netflow data using Filebeat 7.14.0 and writing the output into Elasticsearch. I'm trying to tweak the various configuration settings in order to improve the performance (currently, it seems like filebe… --- ## [Need to map ip address from logs to map with corresponding hostname](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499)
**Author:** [@ArchitG358](https://discuss.elastic.co/u/ArchitG358)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 1:52am UTC](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499 "2022-01-17T01:52:33Z")
I have logs that includes IP address I want to map IP address to its hostname (eg, AWS ec2) or its organisation. Just like whatsmyipaddress does. Need suggestions or plugins that can help do this. I am open to get any … [Previous page](https://discuss.elastic.co/latest.md?page=1304) [Next page](https://discuss.elastic.co/latest.md?page=1306)