# Latest **URL:** https://discuss.elastic.co/latest.md?page=1369 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1370 --- ## [Elasticsearch multiple connections using python](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458)
**Author:** [@Zouhair](https://discuss.elastic.co/u/Zouhair)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458 "2021-11-30T15:00:50Z")
Hi, I am using python to connect to my Elasticsearch and execute a search query. I have noticed that the python Elasticsearch module is making 2 connexion to the specified cluster. is that normal ? if not how can i co… --- ## [APM metrics in Kibana not showing when collected with metricbeat](https://discuss.elastic.co/t/apm-metrics-in-kibana-not-showing-when-collected-with-metricbeat/290324)
**Author:** [@ccontini](https://discuss.elastic.co/u/ccontini)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 2:54pm UTC](https://discuss.elastic.co/t/apm-metrics-in-kibana-not-showing-when-collected-with-metricbeat/290324 "2021-11-30T14:54:56Z")
Kibana version: 7.15.2 Elasticsearch version: 7.15.2 APM Server version: 7.15.2 APM Agent language and version: Not using APM agent Original install method: Elastic cloud Is there anything special in your setup? I a… --- ## [Unable to bind specific network interface to logstash](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556)
**Author:** [@hari97](https://discuss.elastic.co/u/hari97)\ **Replies:** 6\ **Last updated:** [November 30, 2021, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556 "2021-11-30T14:32:12Z")
I have two interfaces eth0 and eth2. Network traffic of systems reaching to eth2 interface. I have Logstash instance which was working good for network traffic of default network interface (eth0). My requirement is log… --- ## [Kiaban - Controls (Option list) on date field use timestamp](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409)
**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\ **Replies:** 3\ **Last updated:** [November 30, 2021, 2:31pm UTC](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409 "2021-11-30T14:31:27Z")
Hi All, I'm new on Kibana and I have a question about controls. In Discovery section I can see the list of my fields and one of them is important for me: dt\_reference\_date which is in this format YYYY-MM-DD HH:ii:ss. … --- ## [Fleet server - debug logs](https://discuss.elastic.co/t/fleet-server-debug-logs/290441)
**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\ **Replies:** 3\ **Last updated:** [November 30, 2021, 2:00pm UTC](https://discuss.elastic.co/t/fleet-server-debug-logs/290441 "2021-11-30T14:00:23Z")
Hi all, Just updated to 7.15.1, and trying to configure fleet. Having some problems, but cannot find logs and spesific errors to trace. So i need to learn how to enable debug logging for Fleet Server Just found debug … --- ## [\[WARN\] Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 12:55pm UTC](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495 "2021-11-30T12:55:48Z")
Elasticsearch.log file error \[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[node-1\] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/:9200, remoteAddress=/… --- ## [Issue while running FSCrawler on new install of Windows Server 2016](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524)
**Author:** [@Steveh15](https://discuss.elastic.co/u/Steveh15)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 12:42pm UTC](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524 "2021-11-30T12:42:36Z")
Hello, My apologies if I have missed any data but I am new to ES. I get the following error when trying to run FSCrawler: Error: Could not find or load main class Files\\Elasticsearch\\fscrawler-es7-2.7.config.log4j2.xm… --- ## [Custom Logs integration on Fleet: Select custom index](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542)
**Author:** [@alessio.dalbianco](https://discuss.elastic.co/u/alessio.dalbianco)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 12:16pm UTC](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542 "2021-11-30T12:16:25Z")
Hello, we are trying to setup a Custom Log integration in order to grab some logs from our servers. The logs are correctly captured, however there is no way to specify a custom index, Fleet creates its own data stream w… --- ## [Is there a way to clean .kibana\* indices? I got 22 of them!](https://discuss.elastic.co/t/is-there-a-way-to-clean-kibana-indices-i-got-22-of-them/290287)
**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 11:07am UTC](https://discuss.elastic.co/t/is-there-a-way-to-clean-kibana-indices-i-got-22-of-them/290287 "2021-11-30T11:07:03Z")
I'm running a cluster on Elastic Cloud, in which I have 3 index. But my cluster is also filled with plenty of "system indices" I never really wanted: .kibana-event-log-7.15.2-000001 .kibana\_task\_manager\_7.15.2\_001 .se… --- ## [How can I use "AnalyticsPlugin" to build my own Elasticsearch Node?](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548)
**Author:** [@ZheHu](https://discuss.elastic.co/u/ZheHu)\ **Replies:** 0\ **Last updated:** [November 30, 2021, 10:29am UTC](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548 "2021-11-30T10:29:49Z")
Hi, community! I'm a freshman to Elasticsearch, recently, when I tried to build embedded test environment through InternalSettingsPreparer.prepareEnvironment(), I found that AnalyticsPlugin cannot be used (I want to use… --- ## [Field available in Discover is not available in Visualizations](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987)
**Author:** [@WimM](https://discuss.elastic.co/u/WimM)\ **Replies:** 6\ **Last updated:** [November 30, 2021, 10:06am UTC](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987 "2021-11-30T10:06:56Z")
Hi We've setup ELK/Kibana for one of our applications and using the Discover "Top 5" feature we could quickly identify a specific issue: I wanted to get this exact same thing (top 5 of field "message") in a Visualiza… --- ## [How to send data via Logstash](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 10\ **Last updated:** [November 30, 2021, 9:30am UTC](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947 "2021-11-30T09:30:13Z")
Hello, yes. This should be very common but I cannot send data to Elasticsearch-or I cannot find it there. Either way I am haven trouble using the data. What I am doing: Filebeat sends a collection of Log-Files to Logst… --- ## [Custom watcher - new document inserted](https://discuss.elastic.co/t/custom-watcher-new-document-inserted/290284)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 9:05am UTC](https://discuss.elastic.co/t/custom-watcher-new-document-inserted/290284 "2021-11-30T09:05:01Z")
Hi, how can I create an alert triggered when a document is inserted in a particular index? The alert should trigger an email with the content of the document. Someone can help me with a custom watcher? Thanks --- ## [How to merge aggregation bucket in Elasticsearch?](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 7\ **Last updated:** [November 30, 2021, 9:04am UTC](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230 "2021-11-30T09:04:53Z")
Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "terms" : { … --- ## [How add prefix to the fields using kv filter](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 7\ **Last updated:** [November 30, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150 "2021-11-30T09:00:20Z")
Hi I am adding prefix to the fields using kv filter, It's working to the some of the fields in the json message. Example: Filed name is resource.network.imageid while adding prefix as aws.datasource using kv filter I … --- ## [Time Difference with "took" and python timer](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 8:07am UTC](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445 "2021-11-30T08:07:10Z")
Hello everyone, I am very new in Elasticsearch and also in forum. I have created an index, then I have created some queries. When I checked the "took" time from kibana for my queries, it is between 7 and 10ms. However, w… --- ## [How to set the timeout for every search](https://discuss.elastic.co/t/how-to-set-the-timeout-for-every-search/290477)
**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-set-the-timeout-for-every-search/290477 "2021-11-30T08:05:37Z")
Hello, how can I set the timeout for the searches? Sometimes the server takes too long to respond, way after the timeout of my webserver, so it has no sense that the ELK keeps working on that query I have a single node … --- ## [Kibana Alerts](https://discuss.elastic.co/t/kibana-alerts/290462)
**Author:** [@paddy3267](https://discuss.elastic.co/u/paddy3267)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 7:49am UTC](https://discuss.elastic.co/t/kibana-alerts/290462 "2021-11-30T07:49:04Z")
Hi, is it possible to create Kibana alerts via a config file (preferably YAML), or Kibana GUI is the only way to do so? Thanks! --- ## [Watcher Transform - Replace newline character on specific field in multiple documents](https://discuss.elastic.co/t/watcher-transform-replace-newline-character-on-specific-field-in-multiple-documents/290479)
**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 7:46am UTC](https://discuss.elastic.co/t/watcher-transform-replace-newline-character-on-specific-field-in-multiple-documents/290479 "2021-11-30T07:46:59Z")
Hi, I'm currently building a watcher script to send data to 3rd party API, however the 3rd party API can't process the newline character ("\\n") input. Some of my documents have newline character in specific field. there … --- ## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910)
**Author:** [@njain213](https://discuss.elastic.co/u/njain213)\ **Replies:** 19\ **Last updated:** [November 30, 2021, 7:45am UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910 "2021-11-30T07:45:54Z")
Hello Team, In reference to No data after CSV Export - Kibana I am also facing exact same issue. Could you please help me in fixing it? Note:- I am using kibana 7.9.3. --- ## [Indices recovering after a red - yellow state leads to writes stucked?](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 7:40am UTC](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522 "2021-11-30T07:40:15Z")
Hi, There is something I don't understand, and I don't know if it is something peculiar. When my cluster ES (42 nodes with 32GB, 20000 shards in a old 5.6 version = we aim to go to a 7.x at the end of Q1 2022, we must … --- ## [How could I reserve message filed with json.keys\_under\_root is set](https://discuss.elastic.co/t/how-could-i-reserve-message-filed-with-json-keys-under-root-is-set/290275)
**Author:** [@xxdoor](https://discuss.elastic.co/u/xxdoor)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 7:35am UTC](https://discuss.elastic.co/t/how-could-i-reserve-message-filed-with-json-keys-under-root-is-set/290275 "2021-11-30T07:35:22Z")
Hi, I'm using filebeat to collect my logs from servers. I'm confused whether it's possible to reserve message filed when I set json.keys\_under\_root true. The fields I hava set: - type: docker containers: path: "… --- ## [Issue with visualizing a field in Kibana even when elasticsearch has its mapping](https://discuss.elastic.co/t/issue-with-visualizing-a-field-in-kibana-even-when-elasticsearch-has-its-mapping/290521)
**Author:** [@sanba06c](https://discuss.elastic.co/u/sanba06c)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 7:20am UTC](https://discuss.elastic.co/t/issue-with-visualizing-a-field-in-kibana-even-when-elasticsearch-has-its-mapping/290521 "2021-11-30T07:20:01Z")
Hello, I'm using Kibana and can filter for some specific values, but failed to filter some other fields. The following screenshots illustrate the current issue: I can successfully filter the value "http.Request.uri". O… --- ## [Action \[indices:admin/rollover\] is unauthorized for user \[remote\_monitoring\_user\] with roles](https://discuss.elastic.co/t/action-indices-admin-rollover-is-unauthorized-for-user-remote-monitoring-user-with-roles/288481)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 1\ **Last updated:** [November 30, 2021, 7:16am UTC](https://discuss.elastic.co/t/action-indices-admin-rollover-is-unauthorized-for-user-remote-monitoring-user-with-roles/288481 "2021-11-30T07:16:09Z")
Hi Elastic 7.15.1 After configuring metricbeat module elasticsearc-xpack, I am getting the following error in elasticsearch log files: \[2021-11-04T18:04:32,698\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner\] \[XXXXXXXXXXXXX\] po… --- ## [Will Kibana Basic License Expire?](https://discuss.elastic.co/t/will-kibana-basic-license-expire/290415)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 6:57am UTC](https://discuss.elastic.co/t/will-kibana-basic-license-expire/290415 "2021-11-30T06:57:01Z")
Hi Im building Kibana from GitHub - elastic/kibana at v7.4.2. Will that basic license expire anytime? Regards Ram --- ## [Filebeat: Time different between ingest time and Message log time](https://discuss.elastic.co/t/filebeat-time-different-between-ingest-time-and-message-log-time/290394)
**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 6:31am UTC](https://discuss.elastic.co/t/filebeat-time-different-between-ingest-time-and-message-log-time/290394 "2021-11-30T06:31:06Z")
Hello, Currently, I am using Elasticsearch v7.11 and filebeat v7.15 And I am retrieving owa logs from a directory on exchange. I noticed that the "@timestamp" and log message was way different. After further troubleshoo… --- ## [Configuration of beats that come with elastic-agent and fleet](https://discuss.elastic.co/t/configuration-of-beats-that-come-with-elastic-agent-and-fleet/290489)
**Author:** [@poulaone](https://discuss.elastic.co/u/poulaone)\ **Replies:** 2\ **Last updated:** [November 30, 2021, 6:23am UTC](https://discuss.elastic.co/t/configuration-of-beats-that-come-with-elastic-agent-and-fleet/290489 "2021-11-30T06:23:27Z")
Hello, I search information about the beats configurations through elastic-agent and fleet. For exemple, for the filebeat agent installed with elastic-agent, how can i disable metrics or enable a path monitoring ? Tha… --- ## [How to check for key exist script query parameters?](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 0\ **Last updated:** [November 30, 2021, 6:12am UTC](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514 "2021-11-30T06:12:12Z")
Is there any way to return null if there is no corresponding value? example) Since params do not have a field4 value, I want the null value to be returned to the syn variable. "aggs": { "countries": { "terms"… --- ## [Msearch c фильтрацией по индексу](https://discuss.elastic.co/t/msearch-c/289753)
**Author:** [@One\_Two](https://discuss.elastic.co/u/One_Two)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 5:15am UTC](https://discuss.elastic.co/t/msearch-c/289753 "2021-11-30T05:15:03Z")
Здравствуйте. Помогите пожалуйста составить запрос для поиска по нескольким индексам и данные дополнительно отфильтровать с разными фильтрами для каждого индекса. Сейчас у меня фильтрация происходит по всем индексам один… --- ## [The index shard is lost, and the cluster status is green](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332)
**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 1:57am UTC](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332 "2021-11-30T01:57:05Z")
Elasticsearchversion (bin/Elasticsearch --version): Version: 7.3.1 Plugins installed: JVM version (java -version): jdk 8 OS version : Linux Description of the problem including expected versus actual behavior: The … [Previous page](https://discuss.elastic.co/latest.md?page=1368) [Next page](https://discuss.elastic.co/latest.md?page=1370)