# Latest **URL:** https://discuss.elastic.co/latest.md?page=1372 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1373 --- ## [Indeces with current date while using Index Life Management with file beat](https://discuss.elastic.co/t/indeces-with-current-date-while-using-index-life-management-with-file-beat/289222)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 5\ **Last updated:** [November 28, 2021, 4:05pm UTC](https://discuss.elastic.co/t/indeces-with-current-date-while-using-index-life-management-with-file-beat/289222 "2021-11-28T16:05:34Z")
For bootstrapping an index for using ILM, with filebeat , the following command was used PUT lp\_index-otherfgtraffull-000001 { "aliases": { "lp\_index-otherfgtraffull": { "is\_write\_index": true } } } … --- ## [Does JDBC Stream Have A Lot Of Cost For The Database?](https://discuss.elastic.co/t/does-jdbc-stream-have-a-lot-of-cost-for-the-database/290361)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [November 28, 2021, 12:56pm UTC](https://discuss.elastic.co/t/does-jdbc-stream-have-a-lot-of-cost-for-the-database/290361 "2021-11-28T12:56:17Z")
Hi! I have a query that I cannot convert from JDBC\_stream to JDBC\_static. How much cost does the plugin have for the database? I am parsing logs and I want to know is that okay to use this plugin? Does it have to access … --- ## [Plugin: WARN: End has already been called](https://discuss.elastic.co/t/plugin-warn-end-has-already-been-called/288837)
**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\ **Replies:** 3\ **Last updated:** [November 28, 2021, 11:11am UTC](https://discuss.elastic.co/t/plugin-warn-end-has-already-been-called/288837 "2021-11-28T11:11:49Z")
Hi, I have developed a small instrumentation plugin for the Java APM agent. The advice class follows the pattern suggested in the documentation: public static class AdviceClass { @Advice.OnMethodEnter(suppress = Thr… --- ## [Logstash 7.5 GC too frequently to work](https://discuss.elastic.co/t/logstash-7-5-gc-too-frequently-to-work/290331)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 2\ **Last updated:** [November 28, 2021, 8:44am UTC](https://discuss.elastic.co/t/logstash-7-5-gc-too-frequently-to-work/290331 "2021-11-28T08:44:46Z")
thank you for read my problem , sorry for bother you !!! 1. Env logstash version 7.5.0 java version java -version openjdk version "1.8.0\_312" OpenJDK Runtime Environment (build 1.8.0\_312-b07) OpenJDK 64-Bit Server VM … --- ## [JDBC Limit equivalent?](https://discuss.elastic.co/t/jdbc-limit-equivalent/290346)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 4\ **Last updated:** [November 28, 2021, 6:35am UTC](https://discuss.elastic.co/t/jdbc-limit-equivalent/290346 "2021-11-28T06:35:09Z")
Hi! I was wondering what would be the equivalent of the limit in JDBC static? it does not accept the limit 10 in my query string. --- ## [JDBC - SQL Query Issue](https://discuss.elastic.co/t/jdbc-sql-query-issue/290345)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [November 27, 2021, 8:59pm UTC](https://discuss.elastic.co/t/jdbc-sql-query-issue/290345 "2021-11-27T20:59:52Z")
Hi! I have a database in MySQL and I want to fetch some info based on IP addresses I get from my client logs. There are ip\_from(VARCHAR 50), ip\_to(VARCHAR 50), ip\_from\_int(INT 10), and ip\_to\_int(INT 10) plus a name(VARCH… --- ## [Upgrading Elasticsearch](https://discuss.elastic.co/t/upgrading-elasticsearch/289319)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 7\ **Last updated:** [November 28, 2021, 1:34am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch/289319 "2021-11-28T01:34:02Z")
Dear team, I want to upgrade my ES cluster to a newer version. This is the version I\`m using: According to the bellow page: I just want to know can I upgrade my cluster with Rolling Upgrade ? Or which way should … --- ## [Running FSCrawler in Debian 10, results in \`command not found\`](https://discuss.elastic.co/t/running-fscrawler-in-debian-10-results-in-command-not-found/290095)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 5\ **Last updated:** [November 28, 2021, 12:05am UTC](https://discuss.elastic.co/t/running-fscrawler-in-debian-10-results-in-command-not-found/290095 "2021-11-28T00:05:22Z")
I'm trying to run fscrawler on Debian 10. I have downloded both fscrawler-es7-2.8-SNAPSHOT.zip and fscrawler-es7-2.7.zip then exctract them to /home/myname/fscrawler, but running these codes always results in command not… --- ## [Point In Time Search using wild card index](https://discuss.elastic.co/t/point-in-time-search-using-wild-card-index/290329)
**Author:** [@rohith511](https://discuss.elastic.co/u/rohith511)\ **Replies:** 0\ **Last updated:** [November 27, 2021, 9:36am UTC](https://discuss.elastic.co/t/point-in-time-search-using-wild-card-index/290329 "2021-11-27T09:36:02Z")
Sometime back when we created elastic we created multiple indexes with same initial pattern and these are dynamic suffix. (eg : microservice\_logs\_XYZ , microservice\_logs\_abc , microservice\_logs\_pqr etc..) Not sure the… --- ## [Survey about open source software development](https://discuss.elastic.co/t/survey-about-open-source-software-development/290337)
**Author:** [@sheng](https://discuss.elastic.co/u/sheng)\ **Replies:** 0\ **Last updated:** [November 27, 2021, 4:30pm UTC](https://discuss.elastic.co/t/survey-about-open-source-software-development/290337 "2021-11-27T16:30:02Z")
Hello, I hope this is the right place to ask, but I’m currently looking for participants for my survey that I’m doing for my master thesis. The research deals with the relationship between agile practices and open sourc… --- ## [NotSslRecordException: not an SSL/TLS record while adding New Node to Cluster](https://discuss.elastic.co/t/notsslrecordexception-not-an-ssl-tls-record-while-adding-new-node-to-cluster/289334)
**Author:** [@ankurthakur](https://discuss.elastic.co/u/ankurthakur)\ **Replies:** 2\ **Last updated:** [November 27, 2021, 6:44pm UTC](https://discuss.elastic.co/t/notsslrecordexception-not-an-ssl-tls-record-while-adding-new-node-to-cluster/289334 "2021-11-27T18:44:03Z")
Hi, Hope everyone is doing well! We are having trouble adding a New Node to a Cluster which has SSL enabled using XPack Security. Before I write further, please keep the below things in mind: Installed same version o… --- ## [Email alerts on kibana dashboard](https://discuss.elastic.co/t/email-alerts-on-kibana-dashboard/290312)
**Author:** [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Replies:** 1\ **Last updated:** [November 27, 2021, 5:44pm UTC](https://discuss.elastic.co/t/email-alerts-on-kibana-dashboard/290312 "2021-11-27T17:44:49Z")
Hi Team, Is it possible to implement email alerts on community edition. Kindly, suggest . Thanks! --- ## [Should I keep beat version in index-template?](https://discuss.elastic.co/t/should-i-keep-beat-version-in-index-template/290335)
**Author:** [@noFancyStuff](https://discuss.elastic.co/u/noFancyStuff)\ **Replies:** 0\ **Last updated:** [November 27, 2021, 4:27pm UTC](https://discuss.elastic.co/t/should-i-keep-beat-version-in-index-template/290335 "2021-11-27T16:27:37Z")
Hi there, Hi have a very basic ES setup with winlogbeat configured with default options everywhere. By default, Winlogbeat loads index templates named winlogbeat-%{\[agent.version\]}-\* in ES. Because of that, any changes… --- ## [Elasticsearch as a primary storage](https://discuss.elastic.co/t/elasticsearch-as-a-primary-storage/290196)
**Author:** [@xtapodi](https://discuss.elastic.co/u/xtapodi)\ **Replies:** 5\ **Last updated:** [November 26, 2021, 4:17am UTC](https://discuss.elastic.co/t/elasticsearch-as-a-primary-storage/290196 "2021-11-26T04:17:42Z")
We have lots of users(30-200 million). Each user has N(30-100) attributes. The attribute can be of type integer, text, timestamp or counter. Schema is not defined. We are looking for a database to which we can index and… --- ## [Elastic exam path](https://discuss.elastic.co/t/elastic-exam-path/290298)
**Author:** [@DianaPio](https://discuss.elastic.co/u/DianaPio)\ **Replies:** 1\ **Last updated:** [November 27, 2021, 4:35am UTC](https://discuss.elastic.co/t/elastic-exam-path/290298 "2021-11-27T04:35:12Z")
I’ve question regarding Elastic Certification. There are three exams available. Is there any order in the Exam path or can I select an exam proper to my tasks? Thank you. --- ## [Elastic agent - Fleet x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-fleet-x509-certificate-signed-by-unknown-authority/256330)
**Author:** [@111412](https://discuss.elastic.co/u/111412)\ **Replies:** 1\ **Last updated:** [October 4, 2021, 11:48am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-x509-certificate-signed-by-unknown-authority/256330 "2021-10-04T11:48:12Z")
The error message is as follows :rofl: {"log.level":"error","@timestamp":"2020-11-23T15:59:58.735+0800","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/output.go","file.line":154},"message":… --- ## [Getting a filebeat error when trying to send filebeat logs to elasticsearch](https://discuss.elastic.co/t/getting-a-filebeat-error-when-trying-to-send-filebeat-logs-to-elasticsearch/290319)
**Author:** [@mandude77](https://discuss.elastic.co/u/mandude77)\ **Replies:** 6\ **Last updated:** [November 26, 2021, 10:23pm UTC](https://discuss.elastic.co/t/getting-a-filebeat-error-when-trying-to-send-filebeat-logs-to-elasticsearch/290319 "2021-11-26T22:23:57Z")
Please advise --- ## [Filebeat fails when I configure an ingest-pipeline on filebeat.yml](https://discuss.elastic.co/t/filebeat-fails-when-i-configure-an-ingest-pipeline-on-filebeat-yml/290314)
**Author:** [@feliperuiz](https://discuss.elastic.co/u/feliperuiz)\ **Replies:** 15\ **Last updated:** [November 26, 2021, 9:59pm UTC](https://discuss.elastic.co/t/filebeat-fails-when-i-configure-an-ingest-pipeline-on-filebeat-yml/290314 "2021-11-26T21:59:27Z")
Hi. I have a filebeat working OK and shipping csv logs to ELK cloud. I have created a new ingest-pipeline on ELK, that takes the message and create some fields: \[ { "csv": { "field": "message", "targe… --- ## [Elastic node can't start due to removed index setting](https://discuss.elastic.co/t/elastic-node-cant-start-due-to-removed-index-setting/290115)
**Author:** [@vvp199303](https://discuss.elastic.co/u/vvp199303)\ **Replies:** 5\ **Last updated:** [November 26, 2021, 6:50pm UTC](https://discuss.elastic.co/t/elastic-node-cant-start-due-to-removed-index-setting/290115 "2021-11-26T18:50:10Z")
Hi. I have a trouble with Elastic cluster (v 7.13.0) . Аfter adding an { "index.mapper.dynamic" : false } option for one index in cluster I was unable to restart cluster node. Also, I can't change "index.mapper.dynamic… --- ## [Is there a procedure on integrating wazuh with ldap?](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632)
**Author:** [@nour.megahed](https://discuss.elastic.co/u/nour.megahed)\ **Replies:** 1\ **Last updated:** [November 26, 2021, 6:22pm UTC](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632 "2021-11-26T18:22:23Z")
is there a procedure on integrating wazuh with ldap? --- ## [Syslog firewall filter](https://discuss.elastic.co/t/syslog-firewall-filter/290220)
**Author:** [@algira37](https://discuss.elastic.co/u/algira37)\ **Replies:** 2\ **Last updated:** [November 26, 2021, 5:04pm UTC](https://discuss.elastic.co/t/syslog-firewall-filter/290220 "2021-11-26T17:04:48Z")
Hello guys, I'm very new in this field, I would like to filter this log from raspberry pi syslog firewall: Nov 25 22:21:22 raspberrypi kernel: \[26172.577441\] DROP UNMATCHED IN-world:IN=eth0 OUT= MAC=01:00:5e:00:00:fb:a… --- ## [Rename recursively field names in nested structure without changing the structure](https://discuss.elastic.co/t/rename-recursively-field-names-in-nested-structure-without-changing-the-structure/290209)
**Author:** [@Isotta\_Blue](https://discuss.elastic.co/u/Isotta_Blue)\ **Replies:** 2\ **Last updated:** [November 26, 2021, 1:03pm UTC](https://discuss.elastic.co/t/rename-recursively-field-names-in-nested-structure-without-changing-the-structure/290209 "2021-11-26T13:03:26Z")
Hello, I have an event which is nested like this: { "test1": null, "test2": null, "test3": { "test31": null, "test32": null, }, "test4":{ "test5": \[ { … --- ## [Elasticsearch partial update based on Aggregation result](https://discuss.elastic.co/t/elasticsearch-partial-update-based-on-aggregation-result/290198)
**Author:** [@orivard](https://discuss.elastic.co/u/orivard)\ **Replies:** 4\ **Last updated:** [November 26, 2021, 5:03pm UTC](https://discuss.elastic.co/t/elasticsearch-partial-update-based-on-aggregation-result/290198 "2021-11-26T17:03:09Z")
I want to update partially all objects that are based on aggregation result. Here is my object: { "name": "name", "identificationHash": "aslkdakldjka", "isDupe": false, ... } My goal is to set isDupe to "true" for… --- ## [Table visualization: calculate percentage](https://discuss.elastic.co/t/table-visualization-calculate-percentage/290304)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 3\ **Last updated:** [November 26, 2021, 4:49pm UTC](https://discuss.elastic.co/t/table-visualization-calculate-percentage/290304 "2021-11-26T16:49:34Z")
Hi all. Let's say that I have the following documents in an index { "user": "foo", "cost": 10, "revenue": 12 }, { "user": "bar", "cost": 20, "revenue": 25 } { "user": "foo", "cost": 15, "reve… --- ## [Logstash complex IF condition](https://discuss.elastic.co/t/logstash-complex-if-condition/290047)
**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\ **Replies:** 3\ **Last updated:** [November 26, 2021, 4:17pm UTC](https://discuss.elastic.co/t/logstash-complex-if-condition/290047 "2021-11-26T16:17:23Z")
Dear, would you know how to write complex IF condition on Logstash? I would like to add new tag once two fields have different values, except of some combinations of them. What works: if \[event\]\[code\] == "1" and \[proces… --- ## [Auditbeat+logstash+splunk](https://discuss.elastic.co/t/auditbeat-logstash-splunk/290310)
**Author:** [@alejandromariani](https://discuss.elastic.co/u/alejandromariani)\ **Replies:** 0\ **Last updated:** [November 26, 2021, 4:01pm UTC](https://discuss.elastic.co/t/auditbeat-logstash-splunk/290310 "2021-11-26T16:01:53Z")
Good afternoon, I am working on an integration between auditbeat + logstash + splunk I have my auditbeat configuration from one of my nodes, pointing to my logstash cat auditbeat.yml ###################### Auditbeat … --- ## [Metricbeat stack monitoring : i/o timeout when connecting to the same node](https://discuss.elastic.co/t/metricbeat-stack-monitoring-i-o-timeout-when-connecting-to-the-same-node/290307)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 0\ **Last updated:** [November 26, 2021, 3:51pm UTC](https://discuss.elastic.co/t/metricbeat-stack-monitoring-i-o-timeout-when-connecting-to-the-same-node/290307 "2021-11-26T15:51:55Z")
Hi guys, I am trying to setup Stack monitoring using metricbeat to move away from legacy collection. We run on v7.11.2 and RHEL7 with below setup: node 1: Elasticsearch, logstash, kibana node 2: Elasticsearch node 3:… --- ## [Aggregation string response to get buckets](https://discuss.elastic.co/t/aggregation-string-response-to-get-buckets/290306)
**Author:** [@silviya](https://discuss.elastic.co/u/silviya)\ **Replies:** 0\ **Last updated:** [November 26, 2021, 3:35pm UTC](https://discuss.elastic.co/t/aggregation-string-response-to-get-buckets/290306 "2021-11-26T15:35:38Z")
Hi , I have a aggregation response in the format of string . i need to get the bucket counts . Is this possible to get bucket counts from string without taking from search response please help! Thanks in advance --- ## [Filebeat multiline matching Docker log](https://discuss.elastic.co/t/filebeat-multiline-matching-docker-log/290301)
**Author:** [@exactlyaron](https://discuss.elastic.co/u/exactlyaron)\ **Replies:** 0\ **Last updated:** [November 26, 2021, 3:02pm UTC](https://discuss.elastic.co/t/filebeat-multiline-matching-docker-log/290301 "2021-11-26T15:02:18Z")
Hello, After a bit of assistance with multiline pattern matching. I'm using filebeat autodiscover Docker provider which is fine sending the logs to logstash, but pattern matching on timestamp doesn't seem to be working… --- ## [NEST vs Elastic query inconsistency](https://discuss.elastic.co/t/nest-vs-elastic-query-inconsistency/290282)
**Author:** [@Perrow](https://discuss.elastic.co/u/Perrow)\ **Replies:** 1\ **Last updated:** [November 26, 2021, 2:03pm UTC](https://discuss.elastic.co/t/nest-vs-elastic-query-inconsistency/290282 "2021-11-26T14:03:19Z")
I'm updating an application that used Elastic 1.6 to version 7.15. I've gotten indexing to work and some searching but for some reason filters aren't working. The queries are built dynamically and I think I've managed to… [Previous page](https://discuss.elastic.co/latest.md?page=1371) [Next page](https://discuss.elastic.co/latest.md?page=1373)