# Latest **URL:** https://discuss.elastic.co/latest.md?page=1309 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1310 --- ## [\[ANNOUNCEMENT\] - spring-elasticsearch 7.1 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-7-1-released/294315)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:44pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-7-1-released/294315 "2022-01-13T18:44:01Z")
The spring-elasticsearch team is pleased to announce the spring-elasticsearch-7.1 release! Spring factories for Elasticsearch Usage Add this library to you project: \ \fr.pilato.spring\ … --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.16 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-16-released/294313)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:41pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-16-released/294313 "2022-01-13T18:41:05Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.16 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias, template creation and index lifecyc… --- ## [Unique feilds count](https://discuss.elastic.co/t/unique-feilds-count/294268)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 9\ **Last updated:** [January 13, 2022, 6:25pm UTC](https://discuss.elastic.co/t/unique-feilds-count/294268 "2022-01-13T18:25:16Z")
How can i right DSL query for count of unique value in fields (Colom) for one day. where unique value is greater than 15 SQL example: select /+parallel(15)/ fruits ,count(1) from all\_items where LOAD\_DATE=trunc(sysda… --- ## [Share visualization in editable mode in iFrame](https://discuss.elastic.co/t/share-visualization-in-editable-mode-in-iframe/293920)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 5:25pm UTC](https://discuss.elastic.co/t/share-visualization-in-editable-mode-in-iframe/293920 "2022-01-13T17:25:46Z")
Hi, is it possible to share visualization in editable mode? If I share dashboard in edit mode, I see the gearwheel in the corner for choosing option "edit visualization" but when I click on it, my iFrame just spreads … --- ## [Usage coordinator node before ingest node and data node](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149)
**Author:** [@acidborn601](https://discuss.elastic.co/u/acidborn601)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:42pm UTC](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149 "2022-01-13T16:42:42Z")
Hi all! We have cluster with 3 dedicated master nodes, 4 dedicated ingest nodes and 28 dedicated data nodes. Data sent to ingest nodes from filebeat. Max.performance indexing on this configuration ~200000 tps. Question… --- ## [How to escape new line character?](https://discuss.elastic.co/t/how-to-escape-new-line-character/294254)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:17pm UTC](https://discuss.elastic.co/t/how-to-escape-new-line-character/294254 "2022-01-13T16:17:22Z")
"MethodParameter" =\> "{\\r\\n \\"getCardholderBalance\\": {\\r\\n \\"acquirer\\": {\\r\\n \\"id\\": \\"testdemo\\",\\r\\n \\"userId\\": \\"xxxxx\\",\\r\\n \\"password\\": \\"xxxxxxxxxxxxxxx\\"\\r\\n },\\r\\n \\"card\\": {\\r\\n… --- ## [Winlogbeat sending data to default index](https://discuss.elastic.co/t/winlogbeat-sending-data-to-default-index/294210)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:00pm UTC](https://discuss.elastic.co/t/winlogbeat-sending-data-to-default-index/294210 "2022-01-13T16:00:28Z")
Trying to setup winlogbeat but it seems to be sending documents only to default index - winlogbeat-7\* instead of the one I explicity mentioned in the winlogbeat.yml. I must be missing something basic but can't figure out… --- ## [Enrich processor limitations](https://discuss.elastic.co/t/enrich-processor-limitations/294295)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 3:33pm UTC](https://discuss.elastic.co/t/enrich-processor-limitations/294295 "2022-01-13T15:33:26Z")
Hey, I'm working with enrich processor to add data from my already existing logs to the ones that are being ingested. What makes it challenging is the fact that the logs that are the »source« of information are also con… --- ## [How to remove date and time in message](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 2:59pm UTC](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280 "2022-01-13T14:59:56Z")
Hi, how can i remove the date and time from the message field? and above all is it possible? example screen shot: --- ## [Delete value from filed in recursive way](https://discuss.elastic.co/t/delete-value-from-filed-in-recursive-way/294088)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 2:44pm UTC](https://discuss.elastic.co/t/delete-value-from-filed-in-recursive-way/294088 "2022-01-13T14:44:29Z")
Hi I need to remove from a few fields in the recursive way some value so I've tried in two steps but without success, can You check what's wrong input data: "ue\_stat" =\> "undefined-undefined", "s\_gw" =\> "122.123.205… --- ## [Cisco module in FIlbeat - General doubt](https://discuss.elastic.co/t/cisco-module-in-filbeat-general-doubt/294212)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 2:41pm UTC](https://discuss.elastic.co/t/cisco-module-in-filbeat-general-doubt/294212 "2022-01-13T14:41:10Z")
I have to enable multiple filesets in the Cisco Module of Filebeat. Is that possible? Can I set a document\_type for each fileset such as ASA, IOS, NEXUS, etc while configuring the modules? It is required for me to fil… --- ## [Grok error with filebeat's nginx module while parsing default nginx logs](https://discuss.elastic.co/t/grok-error-with-filebeats-nginx-module-while-parsing-default-nginx-logs/294286)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 2:25pm UTC](https://discuss.elastic.co/t/grok-error-with-filebeats-nginx-module-while-parsing-default-nginx-logs/294286 "2022-01-13T14:25:59Z")
Hi, I am trying to setup filebeat in a kubernetes cluster. I only want to gather logs from specific pods. I decided to run filebeat as daemonset and use the autodiscover and hints. So I can decide by setting pod annotat… --- ## [Elasticsearch - Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/elasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/294287)
**Author:** [@makeshkumar](https://discuss.elastic.co/u/makeshkumar)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/294287 "2022-01-13T14:00:12Z")
Hi Team, We are using the ELK stack and we are getting the below error in our logstash pods logs . Logs are sending slowly or some time it is not at all processing the logs . Note: We checked the elasatic search servi… --- ## [Kibana was available (Was degraded)](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:55pm UTC](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193 "2022-01-13T13:55:56Z")
Hello all, I am using version 7.16.2 for my elastic stack. I have a three node cluster implementation. when I updated the stack to 7.16.2, I noticed following in my logs log \[12:00:44.067\] \[info\]\[status\] Kibana is… --- ## [Is it possible to connect Logstash 7.16 with Elasticsearch "8.1.0-SNAPSHOT"](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-7-16-with-elasticsearch-8-1-0-snapshot/294272)
**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-logstash-7-16-with-elasticsearch-8-1-0-snapshot/294272 "2022-01-13T13:55:30Z")
is it possible to connect Logstash 7.16 with Elasticsearch "8.1.0-SNAPSHOT" --- ## [Trying to use our own certificates for kibana/elasticsearch but page doesn't load after](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729)
**Author:** [@g0nz0](https://discuss.elastic.co/u/g0nz0)\ **Replies:** 5\ **Last updated:** [January 13, 2022, 1:51pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729 "2022-01-13T13:51:34Z")
Hello, I've manage to build our ELK environment on Ubuntu 20.0.4 (not Docker) and setup Elastiflow, it works great and I followed this guide which also uses self certs, so we just access using https://1.2.3.4:5601 for e… --- ## [Logstash with docker logs and tags](https://discuss.elastic.co/t/logstash-with-docker-logs-and-tags/294278)
**Author:** [@Spyros\_Agriopoulos](https://discuss.elastic.co/u/Spyros_Agriopoulos)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 1:33pm UTC](https://discuss.elastic.co/t/logstash-with-docker-logs-and-tags/294278 "2022-01-13T13:33:57Z")
Hello, I am trying to send a docker log from one machine with filebeat and add a tag to it, and when it reaches logstash it should mutate it and the give it an ilm\_rollover\_alias. The log appears in kibana, but with the … --- ## [How to enable cache in logstash](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-enable-cache-in-logstash/294126 "2022-01-13T13:29:33Z")
Hello, I currently have an elk cluster composed as follows: Beats= is the agent installed in linux machine and send logs to Logstash Logstash= filter logs and send logs to elk -Beats --\> Logstash --\> Elasticsearch m… --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182)
**Author:** [@Spyros\_Agriopoulos](https://discuss.elastic.co/u/Spyros_Agriopoulos)\ **Replies:** 6\ **Last updated:** [January 13, 2022, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182 "2022-01-13T13:22:14Z")
Hello guys, I am trying to setup an ELK stack with docker compose and TLS, and I get this message from kibana's logs. Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:920… --- ## [Script Query - Returning multiple values on aggregation](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 7\ **Last updated:** [January 13, 2022, 1:19pm UTC](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095 "2022-01-13T13:19:49Z")
Aggregation Result "aggregations": { "649": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "ALLOGENE THERAPEUTICS", … --- ## [Exiting: 1 error: error loading config file: invalid config: yaml: line 13: did not find expected key](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-13-did-not-find-expected-key/294162)
**Author:** [@awis](https://discuss.elastic.co/u/awis)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-13-did-not-find-expected-key/294162 "2022-01-13T13:18:03Z")
Hi there, I'm trying to connect Filebeat Snort module with my Elasticsearch and when i run command .\\filebeat.exe setup -e on Windows 10 Pro VM, I got this error. This is my configuration for filebeat.yml filebeat.in… --- ## [Search DATE between 2 DATE points in data](https://discuss.elastic.co/t/search-date-between-2-date-points-in-data/294265)
**Author:** [@Dvesters](https://discuss.elastic.co/u/Dvesters)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:14pm UTC](https://discuss.elastic.co/t/search-date-between-2-date-points-in-data/294265 "2022-01-13T13:14:45Z")
Hi all, I have data from an HR system I have the following dates available for absenteeism (also for holidays) SickLeave\_StartDate 01-01-2021 SickLeave\_EndDate 03-03-2021 So this person is sick from January 1 to Marc… --- ## [Execute sql queries in elassandra \[elastic search\]](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260)
**Author:** [@kvaishnavi97](https://discuss.elastic.co/u/kvaishnavi97)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 1:06pm UTC](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260 "2022-01-13T13:06:12Z")
Hi, I am using Elassandra \[Combination of Elasticsearch + Cassandra\], I want to execute sql queries in Elasticsearch, But I am getting one exception. I gone inside the elassandra pod, tried this cmd \`curl -XPOST http:/… --- ## [How to find empty values in a kibana query](https://discuss.elastic.co/t/how-to-find-empty-values-in-a-kibana-query/293642)
**Author:** [@Nijanthan](https://discuss.elastic.co/u/Nijanthan)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 1:05pm UTC](https://discuss.elastic.co/t/how-to-find-empty-values-in-a-kibana-query/293642 "2022-01-13T13:05:50Z")
I'm getting the logs with statusCode 200 and empty statuscodes , I need to find the logs with empty statuscode I've tried using statusCode:" " but it didn't worked Hint: The statuscode for success can be written as sta… --- ## [Rules don't create alert when value 0 or index not exist](https://discuss.elastic.co/t/rules-dont-create-alert-when-value-0-or-index-not-exist/294251)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 1:02pm UTC](https://discuss.elastic.co/t/rules-dont-create-alert-when-value-0-or-index-not-exist/294251 "2022-01-13T13:02:58Z")
Kibana v 7.13.3 Hi! I created Rule with "Index threshold". I set INDEX (I chose index pattern for datastream and "Time field") WHEN count() OVER all documents IS BELOW 10000 FOR THE LAST 10 minutes Problem: When e… --- ## [A file written by master to the store cannot be accessed on the node](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247)
**Author:** [@mihai.prichindel](https://discuss.elastic.co/u/mihai.prichindel)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 12:18pm UTC](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247 "2022-01-13T12:18:43Z")
I am using Elasticsearch 7.8.0. When I want to make backups, most of the time everything is working fine, but from time to time I am getting the following error and backup fails: \[2021-06-02T09:50:25,297\]\[WARN \]\[r.supp… --- ## [Elastic/fleet-server cannot create/write to index - insufficient permissions](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181)
**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 11:57am UTC](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181 "2022-01-13T11:57:18Z")
Hi, I am trying to log a variety of custom metrics to Elasticsearch through TCP, each in their own index. Until now I was working with a custom deployment of the ELK stack, and simply sending these metrics in JSON form … --- ## [Transform API is not updating automaticly when i add some data in the source index](https://discuss.elastic.co/t/transform-api-is-not-updating-automaticly-when-i-add-some-data-in-the-source-index/294263)
**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 11:28am UTC](https://discuss.elastic.co/t/transform-api-is-not-updating-automaticly-when-i-add-some-data-in-the-source-index/294263 "2022-01-13T11:28:47Z")
I am using a API transform to get specific metrics here my query PUT \_transform/index-transform { "description": "Calculate the duration of an event from multiple status updates (based on its uniqueID)", "frequency… --- ## [FSCrawler 2.9 -supported versions of Elastic](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 11:07am UTC](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256 "2022-01-13T11:07:34Z")
We are using FSCrawler 2.7 with Elastics 7.10.2. Does the new version of FSCrawler 2.9 support Elastics 7.10.2 or do we have to upgrade to 7.16.2? --- ## [Value too large to output (49839 bytes) logstash error](https://discuss.elastic.co/t/value-too-large-to-output-49839-bytes-logstash-error/294170)
**Author:** [@ZZ.IT](https://discuss.elastic.co/u/ZZ.IT)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 11:02am UTC](https://discuss.elastic.co/t/value-too-large-to-output-49839-bytes-logstash-error/294170 "2022-01-13T11:02:33Z")
We are using ELK stack on windows server 2016. ELK stack has version 7.16.2. We are sending data from filebeat to logstash using pipeline and the pipeline har grok plugin. On sending the data we are getting the error i… [Previous page](https://discuss.elastic.co/latest.md?page=1308) [Next page](https://discuss.elastic.co/latest.md?page=1310)