# Latest **URL:** https://discuss.elastic.co/latest.md?page=1341 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1342 --- ## [Uptime Investigate Dropdown Link Uptime Monitor to Host Metrics/Logs](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 6\ **Last updated:** [December 17, 2021, 1:57pm UTC](https://discuss.elastic.co/t/uptime-investigate-dropdown-link-uptime-monitor-to-host-metrics-logs/288419 "2021-12-17T13:57:08Z")
Hi All, In the Kibana UI \> Uptime \> Monitors, each monitor is listed. If you expand a monitor, there is a dropdown menu on the right hand side called Investigate, in the menu there are options like Show host logs and Sh… --- ## [ES 6.7.1 "The system could not find the environment option that was entered" JDK 11.0.13](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315)
**Author:** [@angelo.pluskwa](https://discuss.elastic.co/u/angelo.pluskwa)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:48pm UTC](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315 "2021-12-17T13:48:20Z")
OS: Windows Server 2008 R2 ES: 6.7.1 Java: JDK Temurin-11.0.13+8 When Elasticsearch is installed as a service with "Elasticsearch-service.bat install" using the mentioned JDK, the Elasticsearch service will crash on s… --- ## [Search documents with apostrophes in fields](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162)
**Author:** [@Gabriel\_DE\_RAMECOURT](https://discuss.elastic.co/u/Gabriel_DE_RAMECOURT)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 1:47pm UTC](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162 "2021-12-17T13:47:00Z")
Hello, I am quite new to Elascticsearch and try to write and search documents. I have no problem writing documents, but I have one when I try searching for documents using a word that is stored in a field with an apost… --- ## [Winlogbeat - Need Help with Drop\_fields](https://discuss.elastic.co/t/winlogbeat-need-help-with-drop-fields/291926)
**Author:** [@0xf](https://discuss.elastic.co/u/0xf)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 1:41pm UTC](https://discuss.elastic.co/t/winlogbeat-need-help-with-drop-fields/291926 "2021-12-17T13:41:15Z")
So basically what i would like to do is drop everything from the fields and manually include a few. So to say, i want to drop every field that im not putting/specifying in this config file. In this case i tried to spec… --- ## [Missing binaries - error 404 Elastic's Repo](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 1:30pm UTC](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105 "2021-12-17T13:30:28Z")
Hi there, you announced version 7.16.1 of your stack, but I get error 404 since yesterday when I try to download the newest metricbet and journalbeat. Please check your repository. Thanks https://www.elastic.co/downl… --- ## [Agent 1.28.1 ERROR No Log4j 2 configuration file found](https://discuss.elastic.co/t/agent-1-28-1-error-no-log4j-2-configuration-file-found/291668)
**Author:** [@coynef](https://discuss.elastic.co/u/coynef)\ **Replies:** 23\ **Last updated:** [December 17, 2021, 1:23pm UTC](https://discuss.elastic.co/t/agent-1-28-1-error-no-log4j-2-configuration-file-found/291668 "2021-12-17T13:23:36Z")
APM Agent language and version: 1.28.1 Hi In testing the latest version of the java agent the following error appeared... 2021-12-13 12:59:25,268 elastic-apm-server-healthcheck ERROR No Log4j 2 configuration file foun… --- ## [Metricbeat only sending some kube-state-metrics to elastic](https://discuss.elastic.co/t/metricbeat-only-sending-some-kube-state-metrics-to-elastic/292142)
**Author:** [@bagdus](https://discuss.elastic.co/u/bagdus)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 12:50pm UTC](https://discuss.elastic.co/t/metricbeat-only-sending-some-kube-state-metrics-to-elastic/292142 "2021-12-17T12:50:40Z")
Hello I've been struggling with an issue i have with metricbeats kubernetes module. Specifically the processing of kube-state-metrics. Versions: kube-state-metrics 2.2.4 Metricbeat/ELK 7.15 The issue: Scraping of k… --- ## [Missing logs due to kafka error](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307 "2021-12-17T12:36:54Z")
Hey guys, i have set up ELK with kafka where logs are sent to different kafka topics which then are sent to logstash indices. My problem is kafka went down for 2 days and i cannot see the logs for those two days in kiban… --- ## [In Kibana vega can we give index pattern with filters in data source](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243)
**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:09pm UTC](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243 "2021-12-17T12:09:50Z")
Hi I have to show all the data on index pattern with some filters. In discover I have school and I want to filter out all the students in grade 5. When I add the filter and see in discover it has 6000 records. But all re… --- ## [How to create configure date filter data nested](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 11:27am UTC](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273 "2021-12-17T11:27:19Z")
I have some nested data in my log in the form of unix time, and I am trying to convert it to a time stamp, this is an example of the data I want to convert into a time stamp, { "upstream\_uri": "\\/request", "route":… --- ## [Add Index Mapping to Indices](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 10:16am UTC](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281 "2021-12-17T10:16:39Z")
I have updated my Index Template with a new mapping that is and Alias to an existing field. I now want to add that to all past indices. Do I use the mapping API to add it? Is there and example? Thanks in advance. --- ## [Fleet re-scanning files](https://discuss.elastic.co/t/fleet-re-scanning-files/291580)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 10:07am UTC](https://discuss.elastic.co/t/fleet-re-scanning-files/291580 "2021-12-17T10:07:00Z")
Hello, I have a question about re-scanning log files. In Filebeat we have the registry file where we can delete the filebeat.registry\_file How this applies on Fleet? What I want to do specifically is to wipe an entir… --- ## [Kibana's stack-monitoring partly broken after stack upgrade from 7.13 to 7.15](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 8\ **Last updated:** [December 17, 2021, 9:54am UTC](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183 "2021-12-17T09:54:36Z")
Hello. We upgraded our Elastic stack (Elasticsearch nodes, logstash, beats, kibana) from 7.13 to 7.15.0. Everything is working well except that in Kibana, Stack Monitoring (Cluster Overview) we are getting some weird ti… --- ## [Stack trace is not parsed](https://discuss.elastic.co/t/stack-trace-is-not-parsed/292179)
**Author:** [@Andrew\_Vyhidnyi](https://discuss.elastic.co/u/Andrew_Vyhidnyi)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 9:23am UTC](https://discuss.elastic.co/t/stack-trace-is-not-parsed/292179 "2021-12-17T09:23:02Z")
Kibana version:7.15.2 Elasticsearch version:7.15.2 APM Server version: 7.15.2 APM Agent language and version: opentelemetry/java 1.9.1 and OLTP exporter Description of the problem including expected versus actual beh… --- ## [Long Query string from mysql.slowlog doesn't show on table but show on json](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887)
**Author:** [@budums](https://discuss.elastic.co/u/budums)\ **Replies:** 5\ **Last updated:** [December 17, 2021, 9:14am UTC](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887 "2021-12-17T09:14:38Z")
hi I already setup filebeat on database server to get slow log query and send to Elasticsearch. but on kibana at Discover menu if query string from slowlog is too long doesn't show on table view and I set expand fi… --- ## [Modificación formato campo number-duration](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:09am UTC](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280 "2021-12-17T09:09:19Z")
Buenos días, ¿Se puede cambiar el formato del campo number de 0,0.\[000\] a 0.00,\[000\]? Tengo un campo en el índice tipo number con un formato DURATION (Default: number) la entrada en segundos y la salida en minutos. Has… --- ## [SIEM Event Correlation rule returns no data](https://discuss.elastic.co/t/siem-event-correlation-rule-returns-no-data/291197)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 9:06am UTC](https://discuss.elastic.co/t/siem-event-correlation-rule-returns-no-data/291197 "2021-12-17T09:06:06Z")
Kibana version 7.14.1 I am creating an Event Correlation rule in SIEM and the preview does not return any results. If I do the same query in Dev Tools it works. I see that the preview runs some kind of java script but … --- ## [Dec 17th, 2021: \[EN\] Getting Started with the Elasticsearch Python Client](https://discuss.elastic.co/t/dec-17th-2021-en-getting-started-with-the-elasticsearch-python-client/290535)
**Author:** [@Claire\_Burn](https://discuss.elastic.co/u/Claire_Burn)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2021-en-getting-started-with-the-elasticsearch-python-client/290535 "2021-12-17T08:00:52Z")
Getting Started With The Elasticsearch Python Client An Introduction To Elasticsearch With Python Elastic provides its own client for most languages, including of course - Python! There are two official Elasticsearch cli… --- ## [Is Elasticsearch 7.4.0 vulnerable to Log4j?](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263)
**Author:** [@Ranith\_D](https://discuss.elastic.co/u/Ranith_D)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263 "2021-12-17T08:20:23Z")
Im using Elasticsearch 7.4.0 and want to know if its vulnerable for Log4j --- ## [How to install Elasticsearch on Kubernetes using Helm (3 nodes) and production SSL certificates](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433)
**Author:** [@Peter\_Schwarz](https://discuss.elastic.co/u/Peter_Schwarz)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433 "2021-12-17T08:05:17Z")
Hi I am having a bad time trying to install Elasticsearch (3 nodes) on Kubernetes using HELM + Production certificates. I am using the following config: clusterName: "my-cluster" nodeGroup: "master" roles: master:… --- ## [Detection rules for Log4J?s](https://discuss.elastic.co/t/detection-rules-for-log4j-s/292021)
**Author:** [@n2x4](https://discuss.elastic.co/u/n2x4)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 7:46am UTC](https://discuss.elastic.co/t/detection-rules-for-log4j-s/292021 "2021-12-17T07:46:50Z")
Curious if anyone has rules in Elastic SIEM for log4j. I didn't see anything in the rule feed on Github and was wondering if there will be native rules for this. --- ## [Host.name FQDN](https://discuss.elastic.co/t/host-name-fqdn/292252)
**Author:** [@Anton75](https://discuss.elastic.co/u/Anton75)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 4:00am UTC](https://discuss.elastic.co/t/host-name-fqdn/292252 "2021-12-17T04:00:38Z")
Hi! Is it possible to get FQDN hostname from agent host (like hostname -f in Linux)? In my case filebeat sends short hostname, like hostname -s. Hosts are RedHat 7.9. Thank you. --- ## [Logstash is not starting.. i have installed a new version of Logstash 7.16.1 , it crashes saying fatal error](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [December 17, 2021, 5:05am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026 "2021-12-17T05:05:27Z")
Logstash is not starting, I have installed Logstash 7.16.1, this is the error i am getting in logstash \[2021-12-15T17:28:43,113\]\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources. \[2… --- ## [How to build elasticsearch docker image from source](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251)
**Author:** [@111494](https://discuss.elastic.co/u/111494)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 3:55am UTC](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251 "2021-12-17T03:55:57Z")
I want to make Elasticsearch docker image from source, but I dont know how. Can anyone tell me how? Thanks~ --- ## [Need to bind logstash to eth0](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236)
**Author:** [@Nie](https://discuss.elastic.co/u/Nie)\ **Replies:** 11\ **Last updated:** [December 17, 2021, 3:03am UTC](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236 "2021-12-17T03:03:09Z")
I'm wondering why I am not seeing 5044 listener on the logstash server. I am seeing tcp port listeners on 9200 and 9600 when I execute "netstat -na". However, it's bound to loopback ip which is 127.0.0.1. Also, I can't… --- ## [ECK Filebeat Association backend for kibana is not configured](https://discuss.elastic.co/t/eck-filebeat-association-backend-for-kibana-is-not-configured/292249)
**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:51am UTC](https://discuss.elastic.co/t/eck-filebeat-association-backend-for-kibana-is-not-configured/292249 "2021-12-17T02:51:34Z")
When I start my filebeat, an error occurs Association backend for kibana is not configured Association backend for Elasticsearch is not configured kibana yaml file apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana met… --- ## [Updating Logstash from an older version](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245)
**Author:** [@b3owu1f](https://discuss.elastic.co/u/b3owu1f)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:43am UTC](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245 "2021-12-17T02:43:44Z")
Greetings I have an unsupported operational Logstash I was required to update due to the Log4j2 vulnerability. The service was implemented long ago without documentation by crew already out of the company. Looking aroun… --- ## [Beats deployment error on ECK 1.2.0](https://discuss.elastic.co/t/beats-deployment-error-on-eck-1-2-0/242260)
**Author:** [@ssurenr](https://discuss.elastic.co/u/ssurenr)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 10:18am UTC](https://discuss.elastic.co/t/beats-deployment-error-on-eck-1-2-0/242260 "2020-07-28T10:18:13Z")
I tried to deploy a simple metrics beat CRD with the following manifest (Taken from the samples). apiVersion: beat.k8s.elastic.co/v1beta1 kind: Beat metadata: name: heartbeat namespace: elastic-system spec: type: … --- ## [Cannot compute used swap when total swap is 0 and free swap is 0 : Elastic Search 6.8.21](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225)
**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 11:03pm UTC](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225 "2021-12-16T23:03:16Z")
Hi All, We have moved up into the version of Elasticsearch 6.8.21 We are getting logs of this continuously 2021-12-16T21:16:19,858\]\[WARN \]\[o.e.m.o.O.Swap \] \[BLAH\] cannot compute used swap when total swap is … --- ## [Logstash failing to ingest multi-line json log file... I think](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:56pm UTC](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851 "2021-12-16T21:56:05Z")
I am having trouble getting my data ingested by logstash... I think... but I'm just learning about how to do this. Someone else stood up Cloud Custodian, and is dumping logs to an s3 bucket, and I am attempting to inge… [Previous page](https://discuss.elastic.co/latest.md?page=1340) [Next page](https://discuss.elastic.co/latest.md?page=1342)