# Latest **URL:** https://discuss.elastic.co/latest.md?page=1308 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1309 --- ## [Range queries with custom format dates](https://discuss.elastic.co/t/range-queries-with-custom-format-dates/292852)
**Author:** [@vincen.zo](https://discuss.elastic.co/u/vincen.zo)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 10:31am UTC](https://discuss.elastic.co/t/range-queries-with-custom-format-dates/292852 "2022-01-14T10:31:07Z")
Hi, I am having some troubles using single and multiple range clauses in queries with date fields that use dynamic mappings. I frist create an empty index with the following dynamic mappings, including a custom date fo… --- ## [HTTPJSON input : share request identifier among events](https://discuss.elastic.co/t/httpjson-input-share-request-identifier-among-events/293924)
**Author:** [@thopic](https://discuss.elastic.co/u/thopic)\ **Replies:** 5\ **Last updated:** [January 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/httpjson-input-share-request-identifier-among-events/293924 "2022-01-14T10:23:41Z")
Hi, I've been struggling for a long time to configure my filebeat to request RESTful APIs when the response is a JSON array of multiple objects. Because I want to sum a metric over time (this metric is present in each … --- ## [Elastic Security Integeration with Huawei firewall](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868)
**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 10:02am UTC](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868 "2022-01-14T10:02:59Z")
any idea about elastic security integration with Huawei firewall ? any workaround as Huawei integration is not listed in elastic security builtin integrations ? --- ## [Filebeat ingesta de AWS CloudTrail](https://discuss.elastic.co/t/filebeat-ingesta-de-aws-cloudtrail/294184)
**Author:** [@Elisa\_LB](https://discuss.elastic.co/u/Elisa_LB)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 9:46am UTC](https://discuss.elastic.co/t/filebeat-ingesta-de-aws-cloudtrail/294184 "2022-01-14T09:46:31Z")
Buenas tardes, Estoy teniendo inconvenientes con la ingesta de AWS CloudTrail mediante filebeat, tengo el agente conectado a la consola de Elastic Cloud y la configuración del modulo de aws en filebeat desde la consola … --- ## [Failed to load metata when restarting elasticsearch](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709)
**Author:** [@bruce2](https://discuss.elastic.co/u/bruce2)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 8:23am UTC](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709 "2022-01-14T08:23:05Z")
When I restart a node of the elasticsearch cluster, it failed to start. I set log level to trace. The logs is like below: \[2022-01-05T19:2...\]\[TRACE\]\[o.e.g.PersistedClusterStateService\] \[HOSTNAME\] found index metadata … --- ## [How to configure Elasticsearch outputs and credentials when using Elastic Agent?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-outputs-and-credentials-when-using-elastic-agent/294379)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-outputs-and-credentials-when-using-elastic-agent/294379 "2022-01-14T08:17:29Z")
Hi, I managed to set up Fleet-managed Elastic Agent on a host. I installed the System integration so the Elastic Agent gather logs and metrics. The agent is healthy according to the Fleet's Agents page on Kibana. Howeve… --- ## [Syncing SQL data with Elastic](https://discuss.elastic.co/t/syncing-sql-data-with-elastic/294372)
**Author:** [@Satyan\_Gupta](https://discuss.elastic.co/u/Satyan_Gupta)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 7:27am UTC](https://discuss.elastic.co/t/syncing-sql-data-with-elastic/294372 "2022-01-14T07:27:02Z")
Hello Everyone, I am new to elastic and facing issue to keep my sql database in sync with elastic. Here is my logstash config file. input { jdbc { jdbc\_driver\_library =\> "C:\\Users\\satyang.sw\\Desktop\\ELK\_Stack\\log… --- ## [Kibana Yellow Status due to new encryptedSavedObjects encryptionkey](https://discuss.elastic.co/t/kibana-yellow-status-due-to-new-encryptedsavedobjects-encryptionkey/294362)
**Author:** [@ikbal](https://discuss.elastic.co/u/ikbal)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 6:56am UTC](https://discuss.elastic.co/t/kibana-yellow-status-due-to-new-encryptedsavedobjects-encryptionkey/294362 "2022-01-14T06:56:55Z")
Hello everyone, I currently having issues with Kibana where the xpack.encryptedSavedObjects.encryptionKey been changed to a new one. I forgot to backup the old key and now using the new key. After restarting the kibana,… --- ## [Logstash User Survey](https://discuss.elastic.co/t/logstash-user-survey/294248)
**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 6:48am UTC](https://discuss.elastic.co/t/logstash-user-survey/294248 "2022-01-14T06:48:19Z")
Hi, I know it's been a while ago, but I ran into the post about Logstash user survey Logstash User Survey Results | Elastic Blog recently and I found the blog really useful, since it also includes the link to the raw fi… --- ## [Confused about Explicit Mapping in Synonym Graph](https://discuss.elastic.co/t/confused-about-explicit-mapping-in-synonym-graph/294368)
**Author:** [@learningmore](https://discuss.elastic.co/u/learningmore)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 6:35am UTC](https://discuss.elastic.co/t/confused-about-explicit-mapping-in-synonym-graph/294368 "2022-01-14T06:35:31Z")
I've read the document on Synonym Graph, but I am still confused about explicit mapping. Assume that we have the following data: horse mouse chicken rooster duck cow Let's assume the synonym file has the following ent… --- ## [SURICATA LOGS NOT SHOWING UP IN NETWORK EVENTS IN ELASTIC SIEM](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 13\ **Last updated:** [January 14, 2022, 6:30am UTC](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176 "2022-01-14T06:30:27Z")
Hi, I have installed elastic agent, on my host machine. I created a policy named suricata and I have added integrations of endpoint security and suricata. At the host end I have installed centos and have installed suric… --- ## [How to copy from Kibana Logs easily?](https://discuss.elastic.co/t/how-to-copy-from-kibana-logs-easily/294140)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 5:32am UTC](https://discuss.elastic.co/t/how-to-copy-from-kibana-logs-easily/294140 "2022-01-14T05:32:01Z")
I use Kibana to view the Logs, and I want to copy some lines from it. However, when copying, I get something like the following in my clipboard: 16:55:10.943 MyTag \[Debug\] my message 16:55:10.956 AnotherTag \[Info\] anoth… --- ## [Incomplete data transfer on winlogbeat 7.16.1](https://discuss.elastic.co/t/incomplete-data-transfer-on-winlogbeat-7-16-1/293607)
**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 3:40am UTC](https://discuss.elastic.co/t/incomplete-data-transfer-on-winlogbeat-7-16-1/293607 "2022-01-14T03:40:11Z")
hi, We upgraded ELK clusters to v7.16.1 on 2021/12/21. (winlogbeat v7.4.2) Everything is fine. And our AD servers updated patch 'KB5008218' on 2021/21/27. Winlogbeat transferred incomplete data to logstash! Our wind… --- ## [Updating documents within a Hot-Warm-Cold Index Management Lifecycle](https://discuss.elastic.co/t/updating-documents-within-a-hot-warm-cold-index-management-lifecycle/294314)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:43pm UTC](https://discuss.elastic.co/t/updating-documents-within-a-hot-warm-cold-index-management-lifecycle/294314 "2022-01-13T18:43:41Z")
Hello, I have set up an index lifecycle policy with rollover enable either for a max index size of 50gb or 30 days. The indices will move to a warm phase on rollover and to a cold phase after 90 days. Phase descriptio… --- ## [Variables in webhook](https://discuss.elastic.co/t/variables-in-webhook/294092)
**Author:** [@angelolol](https://discuss.elastic.co/u/angelolol)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 1:27am UTC](https://discuss.elastic.co/t/variables-in-webhook/294092 "2022-01-14T01:27:20Z")
Hi, I created a rule with a post-action using webhook so how I can get source ip or hostname in the body . Thanks --- ## [Aggregating Case Information](https://discuss.elastic.co/t/aggregating-case-information/291836)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 12:20am UTC](https://discuss.elastic.co/t/aggregating-case-information/291836 "2022-01-14T00:20:10Z")
Hello, I would like to aggregate case information monthly into certain reports, for example, how many cases were opened in the last month, status, etc.. I know all cases are stored as saved objects, and I was looking i… --- ## [Get parent field from join mapping](https://discuss.elastic.co/t/get-parent-field-from-join-mapping/294341)
**Author:** [@tleduong](https://discuss.elastic.co/u/tleduong)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 11:26pm UTC](https://discuss.elastic.co/t/get-parent-field-from-join-mapping/294341 "2022-01-13T23:26:58Z")
I have a join mapping relationship where units is the parent and wells is child. I'm trying to run this query to return the child but also include a field from the parent. This would only return the parent ID. How do i … --- ## [CrashLoopBackOff on ECK startup with Dynamic Local Persistant Volume via OpenEBS](https://discuss.elastic.co/t/crashloopbackoff-on-eck-startup-with-dynamic-local-persistant-volume-via-openebs/294338)
**Author:** [@svelem](https://discuss.elastic.co/u/svelem)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 10:48pm UTC](https://discuss.elastic.co/t/crashloopbackoff-on-eck-startup-with-dynamic-local-persistant-volume-via-openebs/294338 "2022-01-13T22:48:05Z")
Hello, We have a :wheel\_of\_dharma: cluster with 1 master ( 1 core, 4g memory ) 2 worknodes ( 2 core, 8g memory ) When starting my data & master nodes resut in a CrashLoopBackOff. I've been trying to debug the issue… --- ## [Deprecating less popular technology support in es-hadoop](https://discuss.elastic.co/t/deprecating-less-popular-technology-support-in-es-hadoop/294336)
**Author:** [@Keith\_Massey](https://discuss.elastic.co/u/Keith_Massey)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 10:07pm UTC](https://discuss.elastic.co/t/deprecating-less-popular-technology-support-in-es-hadoop/294336 "2022-01-13T22:07:33Z")
We are deprecating support for Apache Pig, Apache Storm, Hadoop 1, Spark 1, and Scala 2.10 on Spark 2 (we are still supporting Scala 2.11 and 2.12 on Spark 2). See Deprecating old technology by masseyke · Pull Request #1… --- ## [Elastic Agent is Healthy, but no data streams](https://discuss.elastic.co/t/elastic-agent-is-healthy-but-no-data-streams/294224)
**Author:** [@harwinds](https://discuss.elastic.co/u/harwinds)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 10:06pm UTC](https://discuss.elastic.co/t/elastic-agent-is-healthy-but-no-data-streams/294224 "2022-01-13T22:06:34Z")
Hi, I'm running fleet managed elastic agent on Elastic 7.15.1. I've multiple agents running on Linux and Windows endpoints. All agents are showing healthy. On both Linux and Windows, custom certificate is added to system… --- ## [Frequent log in kibana 7.16.2](https://discuss.elastic.co/t/frequent-log-in-kibana-7-16-2/294148)
**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 10:06pm UTC](https://discuss.elastic.co/t/frequent-log-in-kibana-7-16-2/294148 "2022-01-13T22:06:07Z")
After upgrading Kibana 7.11.1 to 7.16.2, we are seeing continuous log in Kibana log file. Also, ES queries is being printed in log. We are seeing such continuous log in Kibana 7.11.1 after successful startup. But We ar… --- ## [App Search is returning domains that were not added](https://discuss.elastic.co/t/app-search-is-returning-domains-that-were-not-added/294335)
**Author:** [@mbil](https://discuss.elastic.co/u/mbil)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 9:57pm UTC](https://discuss.elastic.co/t/app-search-is-returning-domains-that-were-not-added/294335 "2022-01-13T21:57:43Z")
App Search is returning domains that were not added in the " Web Crawler" section. What could be the cause and how can I prevent it from happening? How to remove these domains ? --- ## [The crawler finishes the execution with errors](https://discuss.elastic.co/t/the-crawler-finishes-the-execution-with-errors/294331)
**Author:** [@mbil](https://discuss.elastic.co/u/mbil)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 9:45pm UTC](https://discuss.elastic.co/t/the-crawler-finishes-the-execution-with-errors/294331 "2022-01-13T21:45:30Z")
The crawler finishes the execution with errors almost every day. Where can I find the error messages that might indicate the reason for them? --- ## [Unable to seeing any of the “pew pew” lines on the Network tab in Elastic Security](https://discuss.elastic.co/t/unable-to-seeing-any-of-the-pew-pew-lines-on-the-network-tab-in-elastic-security/294283)
**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-seeing-any-of-the-pew-pew-lines-on-the-network-tab-in-elastic-security/294283 "2022-01-13T13:56:49Z")
i am following the elastic blog " Collecting and analyzing Zeek data with Elastic Security" everything is working except I am not able to seeing any of the “pew pew” lines on the Network tab in Elastic Security. i hav… --- ## [Error fetching data for metricset beat.state: error making http request: Get "https://xxx.xxxx.cloudapp.azure.com:5066/state": dial tcp connect: connection refused](https://discuss.elastic.co/t/error-fetching-data-for-metricset-beat-state-error-making-http-request-get-https-xxx-xxxx-cloudapp-azure-com-5066-state-dial-tcp-connect-connection-refused/294003)
**Author:** [@aviad.co1](https://discuss.elastic.co/u/aviad.co1)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 9:08pm UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-beat-state-error-making-http-request-get-https-xxx-xxxx-cloudapp-azure-com-5066-state-dial-tcp-connect-connection-refused/294003 "2022-01-13T21:08:42Z")
Hi, I'm Build remote monitoring cluster elastic stack to monitor elastic production environment. I'm install metricbeats on the target and success to configure elasticsearch-xpack and kibana-xpack, and I see metrics on… --- ## [Filebeat deployed as deamonset reports wrong image versions for containers](https://discuss.elastic.co/t/filebeat-deployed-as-deamonset-reports-wrong-image-versions-for-containers/294329)
**Author:** [@vikas1389](https://discuss.elastic.co/u/vikas1389)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 8:46pm UTC](https://discuss.elastic.co/t/filebeat-deployed-as-deamonset-reports-wrong-image-versions-for-containers/294329 "2022-01-13T20:46:00Z")
Hey Team- seeing filebeat is reporting older image where is container has latest image- I see lot of logs like below on filebeat- what could be issue 2022-01-13T20:29:34.022Z INFO log/harvester.go:333 File is inactive: … --- ## [Stuck with lots of empty indices for every beat version I've ever used](https://discuss.elastic.co/t/stuck-with-lots-of-empty-indices-for-every-beat-version-ive-ever-used/294204)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 6\ **Last updated:** [January 13, 2022, 8:10pm UTC](https://discuss.elastic.co/t/stuck-with-lots-of-empty-indices-for-every-beat-version-ive-ever-used/294204 "2022-01-13T20:10:14Z")
Hello, I run a small 2-node cluster with a kitchen sink of beats and elastic agents on approx. 20 hosts. Nevertheless, I have a ton of indices and I'm hitting the cluster.max\_shards\_per\_node. There is not much data in … --- ## [Web Crawler Setup: "Content Verification" for Domain fails](https://discuss.elastic.co/t/web-crawler-setup-content-verification-for-domain-fails/293055)
**Author:** [@b0r1sp](https://discuss.elastic.co/u/b0r1sp)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 7:54pm UTC](https://discuss.elastic.co/t/web-crawler-setup-content-verification-for-domain-fails/293055 "2022-01-13T19:54:13Z")
Hi, I'd like to setup a domain for a web crawler - it fails in the last step "Content Verification" with: "The web server at http://www.test.de redirected us to a different domain URL (http://www.test.com/). If you wan… --- ## [Fail to create AgentComponents using ElasticApmModule.CreateAgentComponents](https://discuss.elastic.co/t/fail-to-create-agentcomponents-using-elasticapmmodule-createagentcomponents/294085)
**Author:** [@juliano.maciel](https://discuss.elastic.co/u/juliano.maciel)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 7:40pm UTC](https://discuss.elastic.co/t/fail-to-create-agentcomponents-using-elasticapmmodule-createagentcomponents/294085 "2022-01-13T19:40:20Z")
Kibana version : 7.16.2 Elasticsearch version : 7.16.2 APM Server version : 7.16.2 APM Agent language and version : dotnet framework 4.8 - Elastic.Apm 1.12.0 Elastic.Apm.AspNetFullFramework 1.12.0 Hello, I'm perf… --- ## [Ansible roles being deprecated and to support Version 8.0.0?](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233)
**Author:** [@Andrew\_DeMarsh](https://discuss.elastic.co/u/Andrew_DeMarsh)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 7:38pm UTC](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233 "2022-01-13T19:38:11Z")
Hey I've found notices in Elastic's git repos inside the Ansible roles that I currently use for rolling out Elasticsearch in our different environments saying: This Ansible role is being deprecated and will not be upda… [Previous page](https://discuss.elastic.co/latest.md?page=1307) [Next page](https://discuss.elastic.co/latest.md?page=1309)