# Latest **URL:** https://discuss.elastic.co/latest.md?page=1345 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1346 --- ## [Beats are not vulnerable to Log4j2 RCE](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992)
**Author:** [@dave101](https://discuss.elastic.co/u/dave101)\ **Replies:** 2\ **Last updated:** [December 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992 "2021-12-15T14:27:46Z")
Hi there, maybe some can confirm the follow for us. A few days ago we read this article concerning the log4j vulnerability. Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 Here it … --- ## [Elastic Machine Learning NLP (Elastic 8.0)](https://discuss.elastic.co/t/elastic-machine-learning-nlp-elastic-8-0/291993)
**Author:** [@zangero98](https://discuss.elastic.co/u/zangero98)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-nlp-elastic-8-0/291993 "2021-12-15T14:23:00Z")
Hello, im currently writing a thesis about elastic machine learning. I would like to specify the NLP topic with use cases that can be realized with elastic NLP. Until now i only analyzed the prebuild languageid model a… --- ## [ElasticSearch 7.9.2 getting issue with Query latency and Flush latency](https://discuss.elastic.co/t/elasticsearch-7-9-2-getting-issue-with-query-latency-and-flush-latency/291245)
**Author:** [@balac](https://discuss.elastic.co/u/balac)\ **Replies:** 2\ **Last updated:** [December 15, 2021, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-2-getting-issue-with-query-latency-and-flush-latency/291245 "2021-12-15T13:55:32Z")
Hi , In Elasticsearch:7.9.2 we are getting Query latency and Flush Latency alert. We setup this new cluster and moved it from standalone ES cluster to 3 node cluster in kubernetes. We are monitoring ES cluster with Zabb… --- ## [Mongodb jdbc using in logstash](https://discuss.elastic.co/t/mongodb-jdbc-using-in-logstash/291311)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 4\ **Last updated:** [December 15, 2021, 8:03am UTC](https://discuss.elastic.co/t/mongodb-jdbc-using-in-logstash/291311 "2021-12-15T08:03:58Z")
trying to write log from mongodb using jdbc see configuration file: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/mongodb-driver-core-3.4.2.jar" jdbc\_driver\_class =\>… --- ## [Kibana is not getting connected to elastic search](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630)
**Author:** [@aravi](https://discuss.elastic.co/u/aravi)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 1:16pm UTC](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630 "2021-12-15T13:16:08Z")
We are not bale to open up the kibana portal due to the probable socket timed out error while reaching the Elasticsearch. Recently we have made a change to disable the xpack-security in the Elasticsearch. Please be infor… --- ## [Monitor Fstab entry using metricbeat](https://discuss.elastic.co/t/monitor-fstab-entry-using-metricbeat/291980)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 1:15pm UTC](https://discuss.elastic.co/t/monitor-fstab-entry-using-metricbeat/291980 "2021-12-15T13:15:16Z")
Hello, Can we monitor Fstab entry in metricbeat? --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 4\ **Last updated:** [December 15, 2021, 12:59pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777 "2021-12-15T12:59:54Z")
Hello everyone. i have a trouble with elastic. the logs stop come in since 16:40 and here is the log of logstash \` \> \[2021-12-14T16:57:20,948\]\[WARN \]\[logstash.outputs.elasticsearch\]\[pipeline\_ocp4\] Could not index event… --- ## [Unable to initialize Fleet as i get internal server error in kibana logs and on GUI "Default policy could not be added. system is not installed, add system to \`xpack.fleet.packages\` or remove it from system-1" i'm using 3 nodes cluster for elasticsearch](https://discuss.elastic.co/t/unable-to-initialize-fleet-as-i-get-internal-server-error-in-kibana-logs-and-on-gui-default-policy-could-not-be-added-system-is-not-installed-add-system-to-xpack-fleet-packages-or-remove-it-from-system-1-im-using-3-nodes-cluster-for-elasticsearch/291555)
**Author:** [@amr\_hamdy](https://discuss.elastic.co/u/amr_hamdy)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 12:47pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-as-i-get-internal-server-error-in-kibana-logs-and-on-gui-default-policy-could-not-be-added-system-is-not-installed-add-system-to-xpack-fleet-packages-or-remove-it-from-system-1-im-using-3-nodes-cluster-for-elasticsearch/291555 "2021-12-15T12:47:39Z")
--- ## [Is there a way to update the Elastic index field data through Kibana console - preferably through Discover feature](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700)
**Author:** [@Pradeep\_Nukatoti](https://discuss.elastic.co/u/Pradeep_Nukatoti)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700 "2021-12-15T12:44:46Z")
Hello Folks, I'm looking for a way to update the Elastic index field data through Kibana console through discover, I was able to pull the data and display it as a table but I don't see a way to update it and ES index.… --- ## [Building oss tar from source code Elasticsearch 7.10](https://discuss.elastic.co/t/building-oss-tar-from-source-code-elasticsearch-7-10/291966)
**Author:** [@dhina](https://discuss.elastic.co/u/dhina)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 12:10pm UTC](https://discuss.elastic.co/t/building-oss-tar-from-source-code-elasticsearch-7-10/291966 "2021-12-15T12:10:43Z")
Hi, References Is there a way we could build the oss version of the Elasticsearch from source code. We have a requirement like, we have to build the Elasticsearch OSS from source code and use it instead of downloadi… --- ## [Appending a result from a search to the result of another search](https://discuss.elastic.co/t/appending-a-result-from-a-search-to-the-result-of-another-search/291956)
**Author:** [@perbejder](https://discuss.elastic.co/u/perbejder)\ **Replies:** 2\ **Last updated:** [December 15, 2021, 12:10pm UTC](https://discuss.elastic.co/t/appending-a-result-from-a-search-to-the-result-of-another-search/291956 "2021-12-15T12:10:56Z")
Hi I have two indexes. One with data from our Windows servers and another with information from our CMDB. I want to make a count of servers that have send data to Elastic within the last 24 hours from the Windows inde… --- ## [Filter documents from search result](https://discuss.elastic.co/t/filter-documents-from-search-result/291965)
**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 12:08pm UTC](https://discuss.elastic.co/t/filter-documents-from-search-result/291965 "2021-12-15T12:08:30Z")
Hi, i have some data on a index in Elasticsearch that it displayed as follow "hits" : { "total" : { "value" : 7, "relation" : "eq" }, "max\_score" : 1.0, "hits" : \[ { "\_index" :… --- ## [How does the "Alert me if a group stops reporting data" setting work?](https://discuss.elastic.co/t/how-does-the-alert-me-if-a-group-stops-reporting-data-setting-work/291963)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 12:06pm UTC](https://discuss.elastic.co/t/how-does-the-alert-me-if-a-group-stops-reporting-data-setting-work/291963 "2021-12-15T12:06:24Z")
Hi, I have a configuration similar to the one described in the documentation with grouping alerts by host.name. Now, one of my hosts, which was found before, was replaced by a new host, but since this change, I get NO… --- ## [Dynamic range in charts and alerts](https://discuss.elastic.co/t/dynamic-range-in-charts-and-alerts/291961)
**Author:** [@vishal\_bisa](https://discuss.elastic.co/u/vishal_bisa)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 11:53am UTC](https://discuss.elastic.co/t/dynamic-range-in-charts-and-alerts/291961 "2021-12-15T11:53:06Z")
Hi Team, I have a query here regarding the Kibana dashboard where I have a guage chart to display the license count for a particular tool and also set up a watcher alert if the count is less than specific value, but now… --- ## [Fleet initialization behind a corporate proxy fails with "unable to get local issuer certificate", ignoring proxy settings](https://discuss.elastic.co/t/fleet-initialization-behind-a-corporate-proxy-fails-with-unable-to-get-local-issuer-certificate-ignoring-proxy-settings/291647)
**Author:** [@soerenkornetzkimiele](https://discuss.elastic.co/u/soerenkornetzkimiele)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 11:18am UTC](https://discuss.elastic.co/t/fleet-initialization-behind-a-corporate-proxy-fails-with-unable-to-get-local-issuer-certificate-ignoring-proxy-settings/291647 "2021-12-15T11:18:58Z")
I am running Elasticsearch and Kibana on Linux (Ubuntu 20.04 LTS) in a corporate environment, which requires an SSL-inspection proxy to access the Internet. Because of the SSL-inspection proxy, the private root certific… --- ## [Unable to allocate index](https://discuss.elastic.co/t/unable-to-allocate-index/291919)
**Author:** [@usrrandom](https://discuss.elastic.co/u/usrrandom)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 10:57am UTC](https://discuss.elastic.co/t/unable-to-allocate-index/291919 "2021-12-15T10:57:22Z")
Hi all, My ES index is showing red. It is a single node and has no replicas. Its running on version 5.5 On checking allocation status, I get the following { "index": "tm", "shard": 0, "primary": true, … --- ## [How to detect log4shell in the application logs?](https://discuss.elastic.co/t/how-to-detect-log4shell-in-the-application-logs/291947)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 10:40am UTC](https://discuss.elastic.co/t/how-to-detect-log4shell-in-the-application-logs/291947 "2021-12-15T10:40:21Z")
Hi folks, I wonder if anyone of you guys have already tried to find possible log4shell exploit based on the logs in your elastic cluster using kibana. I am aware that this can be done using the Elastic Security as descr… --- ## [Tracking the cause of write queues](https://discuss.elastic.co/t/tracking-the-cause-of-write-queues/291865)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 5\ **Last updated:** [December 15, 2021, 10:30am UTC](https://discuss.elastic.co/t/tracking-the-cause-of-write-queues/291865 "2021-12-15T10:30:59Z")
Hello, I've been trying to find the cause of a high load the happens randomly on one of my hot nodes for a couple of months. Currently I have a 25 nodes cluster, with 3 dedicated masters, 18 warm nodes and 4 hot nodes,… --- ## [Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://localhost:5601/api/status fails: fail to execute the HTTP GET request](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-http-get-request-to-http-localhost-5601-api-status-fails-fail-to-execute-the-http-get-request/291933)
**Author:** [@M\_Solis](https://discuss.elastic.co/u/M_Solis)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 9:20am UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-http-get-request-to-http-localhost-5601-api-status-fails-fail-to-execute-the-http-get-request/291933 "2021-12-15T09:20:51Z")
Hello Everyone, I'm new to ELK Stack. Im trying to run the winlogbeat on a windows server but I'm experiencing some issues. Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http:/… --- ## [Querying nested objects](https://discuss.elastic.co/t/querying-nested-objects/291850)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 3\ **Last updated:** [December 15, 2021, 9:17am UTC](https://discuss.elastic.co/t/querying-nested-objects/291850 "2021-12-15T09:17:50Z")
hello, I have an index called session\_details, here is an example of a document: { "clientIdAsString" : "100", "sessionStart" : "2021-12-14T17:14:49.000Z", "user\_id" : "0Bl301Me7x080r5o2K8m9D86Z", "wz\_s… --- ## [Painless - check if string contains word](https://discuss.elastic.co/t/painless-check-if-string-contains-word/291914)
**Author:** [@sagar\_cherukuri](https://discuss.elastic.co/u/sagar_cherukuri)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 7:50am UTC](https://discuss.elastic.co/t/painless-check-if-string-contains-word/291914 "2021-12-15T07:50:32Z")
Is it possible to check if a string contains the word in a nested array? I am accessing the fields through params.\_source and I have created a painless script as below, but it's throwing me errors at contains(). How to c… --- ## [How to remove "Part-of \" columns in Kibana CSV](https://discuss.elastic.co/t/how-to-remove-part-of-func-columns-in-kibana-csv/290861)
**Author:** [@DoesitMatter](https://discuss.elastic.co/u/DoesitMatter)\ **Replies:** 5\ **Last updated:** [December 15, 2021, 7:09am UTC](https://discuss.elastic.co/t/how-to-remove-part-of-func-columns-in-kibana-csv/290861 "2021-12-15T07:09:01Z")
Hi there, I'm wondering how can i remove the "Part of Unique\_count()".... Is there any important information contained in this "Part of..."? Thanks! Regards, Alloy --- ## [CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected?](https://discuss.elastic.co/t/cve-2021-44228-aka-log4shell-is-logstash-and-or-elasticsearch-affected/291415)
**Author:** [@jzandbergen](https://discuss.elastic.co/u/jzandbergen)\ **Replies:** 14\ **Last updated:** [December 15, 2021, 6:22am UTC](https://discuss.elastic.co/t/cve-2021-44228-aka-log4shell-is-logstash-and-or-elasticsearch-affected/291415 "2021-12-15T06:22:09Z")
Hi All, I was wondering if logstash and/or Elasticsearch is affected by this CVE? More information about this zeroday can be found here: Log4Shell: RCE 0-day exploit found in log4j 2, a popular Java logging package | L… --- ## [Not Able to Open Kibana in Browser due to 'unsafe-eval'](https://discuss.elastic.co/t/not-able-to-open-kibana-in-browser-due-to-unsafe-eval/291833)
**Author:** [@Mohammed.Asaduzzaman](https://discuss.elastic.co/u/Mohammed.Asaduzzaman)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 6:23am UTC](https://discuss.elastic.co/t/not-able-to-open-kibana-in-browser-due-to-unsafe-eval/291833 "2021-12-15T06:23:45Z")
All, I am not able to open Elastic Kibana Dashboard on my browser. The browser states "Something went wrong" and to try to refresh the page. Refreshing the page does not do anything. I get the following error: Refused … --- ## [Kibana 5.6.16 Internal error](https://discuss.elastic.co/t/kibana-5-6-16-internal-error/291874)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 6:19am UTC](https://discuss.elastic.co/t/kibana-5-6-16-internal-error/291874 "2021-12-15T06:19:18Z")
We've an ES cluster version 5.6.16 running on docker and kibana version 5.6.16. When running "Indices" under "monitoring" tab on kibana getting Internal server error as below. Monitoring: Error 500 Internal Server Erro… --- ## [Auditbeat update document\_id](https://discuss.elastic.co/t/auditbeat-update-document-id/291902)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 6:18am UTC](https://discuss.elastic.co/t/auditbeat-update-document-id/291902 "2021-12-15T06:18:01Z")
Good day! I am sending auditbeat logs to elasticserch via logstash. In logstash output, added document\_id parameter to update document id in elasticserch: if "xml" in \[tags\] { elasticsearch { hosts =\> \[ "loc… --- ## [Native memory leak with frequent index delete/create](https://discuss.elastic.co/t/native-memory-leak-with-frequent-index-delete-create/290070)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 5:36am UTC](https://discuss.elastic.co/t/native-memory-leak-with-frequent-index-delete-create/290070 "2021-12-15T05:36:54Z")
As part of some flow, we used to create and delete an index just to do smoke test kind of regularly. Over months, we saw native memory is growing very badly. And finally, it touches max limits of OS memory and crashes. … --- ## [NGINX Ingress controller + Filebeat with NGINX module](https://discuss.elastic.co/t/nginx-ingress-controller-filebeat-with-nginx-module/291824)
**Author:** [@anton-johansson](https://discuss.elastic.co/u/anton-johansson)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 5:26am UTC](https://discuss.elastic.co/t/nginx-ingress-controller-filebeat-with-nginx-module/291824 "2021-12-15T05:26:33Z")
Hey! We're using the NGINX Ingress Controller (GitHub - kubernetes/ingress-nginx: NGINX Ingress Controller for Kubernetes), hosted in our Kubernetes cluster. We're using Filebeat deployed as a DaemonSet that parses logs … --- ## [Metric beat error](https://discuss.elastic.co/t/metric-beat-error/291899)
**Author:** [@Deepanshu\_Saini](https://discuss.elastic.co/u/Deepanshu_Saini)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 5:17am UTC](https://discuss.elastic.co/t/metric-beat-error/291899 "2021-12-15T05:17:39Z")
Hi Whenever , I am running cmd metricbeat -e -c /etc/metricbeat/metricbeat.yml. I am getting following 2021-12-15T05:07:59.529Z ERROR mongodb/mongodb.go:98 Error establishing direct connection to mongo node at \[x.x.x.x:… --- ## [Map unable to show result when filters are applied](https://discuss.elastic.co/t/map-unable-to-show-result-when-filters-are-applied/290625)
**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\ **Replies:** 6\ **Last updated:** [December 15, 2021, 4:25am UTC](https://discuss.elastic.co/t/map-unable-to-show-result-when-filters-are-applied/290625 "2021-12-15T04:25:13Z")
Hello, I just started using Kibana not long ago and encounter some problems. For my current dataset, I do not have any map geo data but only country names. So I had to do a terms join method with an external map geo data… [Previous page](https://discuss.elastic.co/latest.md?page=1344) [Next page](https://discuss.elastic.co/latest.md?page=1346)