# Latest **URL:** https://discuss.elastic.co/latest.md?page=1347 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1348 --- ## [Logstash starts but doesn’t do anything](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 2:06pm UTC](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637 "2021-12-14T14:06:51Z")
Im trying to get some data in my logstash but my service doesn't seem to work properly. When I check my logstash status I get the following: ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.se… --- ## [Log4j 2 delete action error](https://discuss.elastic.co/t/log4j-2-delete-action-error/291807)
**Author:** [@Jeffy](https://discuss.elastic.co/u/Jeffy)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 1:38pm UTC](https://discuss.elastic.co/t/log4j-2-delete-action-error/291807 "2021-12-14T13:38:32Z")
when I configured action delete policy for rolling over log, logger alerts error said: access denied(UserInformation related) and the rolling log shows file permission as rwx---r-- can further advise? --- ## [Elastic cloud on Azure, coworkers can't reach my deployment in cloud.elastic.co](https://discuss.elastic.co/t/elastic-cloud-on-azure-coworkers-cant-reach-my-deployment-in-cloud-elastic-co/291752)
**Author:** [@rebeccabl](https://discuss.elastic.co/u/rebeccabl)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 1:31pm UTC](https://discuss.elastic.co/t/elastic-cloud-on-azure-coworkers-cant-reach-my-deployment-in-cloud-elastic-co/291752 "2021-12-14T13:31:57Z")
Hello there! We are having several issues, but the most problematic at this point is that only I am able to see the cluster in cloud.elastic.co where as my coworkers cannot. All of us can get into the Kibana, and we ha… --- ## [Does 7.16.1 work for anyone?](https://discuss.elastic.co/t/does-7-16-1-work-for-anyone/291767)
**Author:** [@richard.penarroya](https://discuss.elastic.co/u/richard.penarroya)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 1:05pm UTC](https://discuss.elastic.co/t/does-7-16-1-work-for-anyone/291767 "2021-12-14T13:05:29Z")
Following the latest announcements regarding log4j vulnerabilities, we have updated our Elastic platform from 7.16.0 to 7.16.1. Just after this update, Elasticsearch failed to index anything.... be it data coming from … --- ## [Help with Grok pattern with space in field?](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 5\ **Last updated:** [December 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695 "2021-12-14T13:03:56Z")
I have the following logs looks like: query: s03.amazon.com IN A + (21.12.21.21) query: s2.tabtest.com IN AAAA +++ (213.12.21.21) query: t4.asaptest.com OUT TD OP- (21.124.21.21) I need output to look like this: hos… --- ## [Kibana Canvas Shape On Top](https://discuss.elastic.co/t/kibana-canvas-shape-on-top/291782)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 12:39pm UTC](https://discuss.elastic.co/t/kibana-canvas-shape-on-top/291782 "2021-12-14T12:39:30Z")
Hello everyone! I have a canvas dashboard with hyperlinks. I used a square shape with transparent background and white borders, and put the hyperlinks inside. The problem is, when the links are behind the square, you … --- ## [Elastic data nodes are randomly getting unresponsive](https://discuss.elastic.co/t/elastic-data-nodes-are-randomly-getting-unresponsive/291793)
**Author:** [@fschoell](https://discuss.elastic.co/u/fschoell)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 12:21pm UTC](https://discuss.elastic.co/t/elastic-data-nodes-are-randomly-getting-unresponsive/291793 "2021-12-14T12:21:21Z")
Hello, we run an Elasticsearch cluster with 12 data nodes of which groups of 4 share a larger dom server and are run in linux containers (dom servers are currently 48 core CPUs with 1.5 TB of memory and large SSD arrays)… --- ## [Kibana not connecting to Elasticsearch when providing external Certificate](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-when-providing-external-certificate/290511)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 12\ **Last updated:** [December 14, 2021, 12:01pm UTC](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-when-providing-external-certificate/290511 "2021-12-14T12:01:15Z")
Hi Team, I was Using Elastic Cloud On Kubernetes . So for my Elasticsearch and Kibana I want to use my own Certificates, But when provided the certificates I was getting issues like the Kibana not able to connect to Ela… --- ## [Logstash - comparison 2 fields](https://discuss.elastic.co/t/logstash-comparison-2-fields/291692)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 11:47am UTC](https://discuss.elastic.co/t/logstash-comparison-2-fields/291692 "2021-12-14T11:47:48Z")
Hello. I would like to compare 2 fields using logstash. To be more precise, i would like to know id the content of one field is included into the other one, using ( regex) i tried this configuration if ( \[test\]\[fi… --- ## [Message field not searchable in container logs from Kubernetes integration](https://discuss.elastic.co/t/message-field-not-searchable-in-container-logs-from-kubernetes-integration/290443)
**Author:** [@Nico\_Krijnen](https://discuss.elastic.co/u/Nico_Krijnen)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 11:10am UTC](https://discuss.elastic.co/t/message-field-not-searchable-in-container-logs-from-kubernetes-integration/290443 "2021-12-14T11:10:11Z")
We are using Elatic Cloud to collect logs from a Kubernetes cluster using fleet-managed Elastic Agents. When enabling the Kubernetes integration in a policy, the Agents automatically pick up container logs. That is real… --- ## [Is that possible to use certificates signed by openssl instead of elasticsearch-certutil?](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724)
**Author:** [@v\_melnyk](https://discuss.elastic.co/u/v_melnyk)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:51am UTC](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724 "2021-12-14T10:51:06Z")
Hello, I'd like to sign the nodes' certificates by openssl (instead of Elasticsearch-certutil). Is that ever possible? When I have a PKCS12 keystore made by Elasticsearch-certutil, everything works like a charm. Here's… --- ## [Input Duration Reverting back to Picosecs after changing to Secs](https://discuss.elastic.co/t/input-duration-reverting-back-to-picosecs-after-changing-to-secs/291081)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 10:48am UTC](https://discuss.elastic.co/t/input-duration-reverting-back-to-picosecs-after-changing-to-secs/291081 "2021-12-14T10:48:26Z")
After I have updated pico to secs and saved. Upon editing the field it does not retain the update to seconds. I am running kibana v 7.14.0 Anyone have any ideas what I might be doing wrong? Thanks in advance --- ## [Secure log4j for elasticsearch](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684)
**Author:** [@beci](https://discuss.elastic.co/u/beci)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:47am UTC](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684 "2021-12-14T10:47:12Z")
Hello, We have a server with logstash and Elasticsearch installed on it, I updated these two items to 7.16.1. When I search for files that say "\* log4j \*", there are always items mentioning version 2.11.1 of log4j : /… --- ## [Scripted Field on Date in Kibana?](https://discuss.elastic.co/t/scripted-field-on-date-in-kibana/291754)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 10:44am UTC](https://discuss.elastic.co/t/scripted-field-on-date-in-kibana/291754 "2021-12-14T10:44:40Z")
Is there any way to create scripted field on Empty Date field? I want to find pending number of SMS when message Submitted but not Delivered. I am getting Submitted date but delivered Date Empty. if (doc\['SubmittedOn'\].… --- ## [\[7.16\] Enabling Elastic APM Server on Kibana](https://discuss.elastic.co/t/7-16-enabling-elastic-apm-server-on-kibana/291469)
**Author:** [@ZikPhil](https://discuss.elastic.co/u/ZikPhil)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:40am UTC](https://discuss.elastic.co/t/7-16-enabling-elastic-apm-server-on-kibana/291469 "2021-12-14T10:40:22Z")
Hello, I just deployed a brand new ES/Kibana/Fleet cluster and have setup my agents just fine. I decided to start using the APM Server integration inside Elastic Agent since I am already using it for everything else. I'… --- ## [Auditbeat scan rate setting module: file\_integrity](https://discuss.elastic.co/t/auditbeat-scan-rate-setting-module-file-integrity/291756)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 7:29am UTC](https://discuss.elastic.co/t/auditbeat-scan-rate-setting-module-file-integrity/291756 "2021-12-14T07:29:00Z")
My goal is to get the exact number of logs along the path specified in auditbeat in elastic to build a schedule for receiving logs by day in kibana. The problem is that I get several duplicates of the same log in elasti… --- ## [Infinite extent for field "times": \[Infinity, -Infinity\] when data size set as 0 or larger than 10000](https://discuss.elastic.co/t/infinite-extent-for-field-times-infinity-infinity-when-data-size-set-as-0-or-larger-than-10000/291775)
**Author:** [@sunryan](https://discuss.elastic.co/u/sunryan)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:25am UTC](https://discuss.elastic.co/t/infinite-extent-for-field-times-infinity-infinity-when-data-size-set-as-0-or-larger-than-10000/291775 "2021-12-14T10:25:25Z")
I am trying to use Vega to plot a scatter drawing, but always get a warning "Infinite extent for field "times": \[Infinity, -Infinity\]" when I set the data size as 0 or a number larger than 10000.Any help would be appreci… --- ## [Time picker with enddate relative to startdate](https://discuss.elastic.co/t/time-picker-with-enddate-relative-to-startdate/290892)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 10:22am UTC](https://discuss.elastic.co/t/time-picker-with-enddate-relative-to-startdate/290892 "2021-12-14T10:22:33Z")
Hi All, This might be a stupid question but here goes..! We have log data within Elasticsearch that I want to summarise in a visualisation so that it gives me the count of records from 0800 yesterday until 0800 today. … --- ## [Iterate over searchResponse](https://discuss.elastic.co/t/iterate-over-searchresponse/291648)
**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:06am UTC](https://discuss.elastic.co/t/iterate-over-searchresponse/291648 "2021-12-14T10:06:20Z")
I'd like to iterate over my searchResponse so I can use the value from an id field in every found document in order to do a new search where this id matches another one in another index. So first I'm doing this var… --- ## [Kibana index pattern creation through UI and REST leading to duplicates](https://discuss.elastic.co/t/kibana-index-pattern-creation-through-ui-and-rest-leading-to-duplicates/291553)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:00am UTC](https://discuss.elastic.co/t/kibana-index-pattern-creation-through-ui-and-rest-leading-to-duplicates/291553 "2021-12-14T10:00:27Z")
Found similar issue reported in Same index-pattern created with kibana UI and REST command which got auto-closed due to lack of response. Version: Kibana-oss 7.10.2 Issue: Say an index pattern say journal-2021.07.27 is… --- ## [URL Handlebars referencing value from other column (drilldown workaround)](https://discuss.elastic.co/t/url-handlebars-referencing-value-from-other-column-drilldown-workaround/291612)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 9:55am UTC](https://discuss.elastic.co/t/url-handlebars-referencing-value-from-other-column-drilldown-workaround/291612 "2021-12-14T09:55:21Z")
Hi, to get you in the context, my main goal was to find out if its possible to create dashboard drill down which would refer to different index with different name of columns but values would match e.g. index1 has colum… --- ## [Multiple filebeat config files](https://discuss.elastic.co/t/multiple-filebeat-config-files/291769)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 9:47am UTC](https://discuss.elastic.co/t/multiple-filebeat-config-files/291769 "2021-12-14T09:47:23Z")
I have two different logs format at input so I want to use multiple filebeat yml files and those pointing out to different logstash port my logstash configuration is based on these inputs filebeat1.yml filebeat.input… --- ## [Elasticsearch Engineering Observability - What do I do on the .YAML menu screen in the terminal?](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133)
**Author:** [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Replies:** 11\ **Last updated:** [December 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133 "2021-12-14T09:23:06Z")
It comes up with a menu (shown in the first picture). The lab doesn't tell you anything about this and then goes on to tell you to do more code (second picture). What do I do with the menu after I type: "nano filebeat.… --- ## [Example dashboard module hasn't appeared](https://discuss.elastic.co/t/example-dashboard-module-hasnt-appeared/291766)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 9:07am UTC](https://discuss.elastic.co/t/example-dashboard-module-hasnt-appeared/291766 "2021-12-14T09:07:55Z")
Hi! I configured Filebeat with module kafka. /opt/filebeat/config/filebeat.ym filebeat.inputs: - type: log enabled: false paths: - /var/log/\*.log - type: filestream enabled: false paths: - /var/log/\*.l… --- ## [Heartbeat autodiscover kubernetes pod](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pod/290629)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 9:02am UTC](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pod/290629 "2021-12-14T09:02:41Z")
Hi I want heartbeat to find every single kubernetes pod and send it to Elasticsearch uptime, however all I am able to currently get is the kubernetes nodes. Below is the config. apiVersion: v1 kind: ConfigMap metadata:… --- ## [Legacy index templates - будут ли продолжать работать, или нужно мигрировать?](https://discuss.elastic.co/t/legacy-index-templates/291764)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:58am UTC](https://discuss.elastic.co/t/legacy-index-templates/291764 "2021-12-14T08:58:24Z")
Добрый день! У меня имеется несколько сотен темплейтов для индексов, которые теперь находятся в секции "Legacy index templates" в Kibana. Будут ли продолжать работать эти темплейты, или в одно обновление вдруг перестанут… --- ## [Can not get any logs after create a datastream](https://discuss.elastic.co/t/can-not-get-any-logs-after-create-a-datastream/291629)
**Author:** [@bilgicsin](https://discuss.elastic.co/u/bilgicsin)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 8:48am UTC](https://discuss.elastic.co/t/can-not-get-any-logs-after-create-a-datastream/291629 "2021-12-14T08:48:11Z")
Hi Everyone! I am trying to change my data to the datastream. Normally I can get logs, I can see indice first. After I create a datastream I could not get any logs even though logs keep coming. I followed this steps: … --- ## [ECK Operator not resetting shard\_allocation setting to "all"](https://discuss.elastic.co/t/eck-operator-not-resetting-shard-allocation-setting-to-all/291763)
**Author:** [@phoerious](https://discuss.elastic.co/u/phoerious)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:40am UTC](https://discuss.elastic.co/t/eck-operator-not-resetting-shard-allocation-setting-to-all/291763 "2021-12-14T08:40:08Z")
Hi, I've always had the the problem that the ECK operator does not reset the shard\_allocation cluster setting after restarting a node. The result is that after a rolling restart over night, I end up with hundreds of una… --- ## [Scripted\_fields for child records in elasticsearch](https://discuss.elastic.co/t/scripted-fields-for-child-records-in-elasticsearch/291761)
**Author:** [@BIRENDRA](https://discuss.elastic.co/u/BIRENDRA)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:25am UTC](https://discuss.elastic.co/t/scripted-fields-for-child-records-in-elasticsearch/291761 "2021-12-14T08:25:10Z")
Hi Team, I have a requirement where I have to put a flag as True or False if my parent record has child records exists in the elastic index. For this purpose I am making use of scripted field but I guess I cannot use it… --- ## [Little help needed with crawler content exclusion 7.14](https://discuss.elastic.co/t/little-help-needed-with-crawler-content-exclusion-7-14/291154)
**Author:** [@sanderunive](https://discuss.elastic.co/u/sanderunive)\ **Replies:** 8\ **Last updated:** [December 14, 2021, 8:18am UTC](https://discuss.elastic.co/t/little-help-needed-with-crawler-content-exclusion-7-14/291154 "2021-12-14T08:18:06Z")
Hi all, Currently our company is in transition between 2 CMS systems. We therefore have different implemenations on the old and the new CMS to prevent certain elements from being indexed by the Elastic Crawler, mainly f… [Previous page](https://discuss.elastic.co/latest.md?page=1346) [Next page](https://discuss.elastic.co/latest.md?page=1348)