# Latest **URL:** https://discuss.elastic.co/latest.md?page=1378 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1379 --- ## [Error when using lens with time shift](https://discuss.elastic.co/t/error-when-using-lens-with-time-shift/289802)
**Author:** [@lifer](https://discuss.elastic.co/u/lifer)\ **Replies:** 5\ **Last updated:** [November 23, 2021, 11:51am UTC](https://discuss.elastic.co/t/error-when-using-lens-with-time-shift/289802 "2021-11-23T11:51:53Z")
Hi guys! I've tried the new lens time shift feature, everything works fine with dates indexed as "strict\_date\_time", but when I try that on index with dates indexed as "epoch\_millis" I get the following error: Is th… --- ## [Receiving data via HTTPs or Ingest Pipelines](https://discuss.elastic.co/t/receiving-data-via-https-or-ingest-pipelines/289849)
**Author:** [@sc12](https://discuss.elastic.co/u/sc12)\ **Replies:** 6\ **Last updated:** [November 23, 2021, 11:44am UTC](https://discuss.elastic.co/t/receiving-data-via-https-or-ingest-pipelines/289849 "2021-11-23T11:44:53Z")
Hello, I've been searching on the forums and haven't been able to find an answer to the problem I'm facing. The issue I'm facing: I am trying to send data via REST Api to an Elastic Cloud instance, in my head, I am su… --- ## [Logstash and Beats with mTLS](https://discuss.elastic.co/t/logstash-and-beats-with-mtls/289941)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 11:27am UTC](https://discuss.elastic.co/t/logstash-and-beats-with-mtls/289941 "2021-11-23T11:27:12Z")
Hi, I have a working TLS connection between Beats and Logstash. What I now want is mTLS so that only Beats with a valid certificate can connect to Logstash. For policy reasons I can't use the certutil Tool within Elasti… --- ## [Mustache variable in email alert](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 10:45am UTC](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917 "2021-11-23T10:45:50Z")
I feel like I'm missing a simple step, but is there a simple way to access Mustache variables within an email alert? Everything I try comes up blank. Do I need to query for these values elsewhere? --- ## [CPU Total/Free Virtual Machine with vSphere Module \[Metricbeat 7.15.2\]](https://discuss.elastic.co/t/cpu-total-free-virtual-machine-with-vsphere-module-metricbeat-7-15-2/289449)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 5\ **Last updated:** [November 23, 2021, 10:26am UTC](https://discuss.elastic.co/t/cpu-total-free-virtual-machine-with-vsphere-module-metricbeat-7-15-2/289449 "2021-11-23T10:26:45Z")
Hi, everyone I have configured vSphere module in Metricbeat 7.15.2 in order to get metrics from my VMware hosts and VMs. Metricbeat send all VM memory metrics, here you are: vsphere.virtualmachine.memory.free.guest.by… --- ## [Query with multiple keywords](https://discuss.elastic.co/t/query-with-multiple-keywords/289929)
**Author:** [@Leitner](https://discuss.elastic.co/u/Leitner)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 10:23am UTC](https://discuss.elastic.co/t/query-with-multiple-keywords/289929 "2021-11-23T10:23:32Z")
Hi everyone, I'm new on Elasticsearch. So sorry for my question :slight\_smile: I want build a query in the console. With a single keyword it works great: But with multiple keywords the Value of the hits is always 0… --- ## [High level rest client connection](https://discuss.elastic.co/t/high-level-rest-client-connection/289899)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 9:58am UTC](https://discuss.elastic.co/t/high-level-rest-client-connection/289899 "2021-11-23T09:58:23Z")
Hello. Questions about maintaining the connection of "Elasticsearch-Rest-High-Level-Client" in Java. RestClient.builder is created using a connection. But when i am using it on a 365-day server, do i have to connect and… --- ## [Filebeat : module mysql and Problem with \\n in mysql slow query log](https://discuss.elastic.co/t/filebeat-module-mysql-and-problem-with-n-in-mysql-slow-query-log/289869)
**Author:** [@toger](https://discuss.elastic.co/u/toger)\ **Replies:** 0\ **Last updated:** [November 22, 2021, 7:42pm UTC](https://discuss.elastic.co/t/filebeat-module-mysql-and-problem-with-n-in-mysql-slow-query-log/289869 "2021-11-22T19:42:01Z")
We are using filebeat with active mysql module to send to ES slow query multiline. On kibana mysql slowlog discover view, the field mysql.slowlog.query is EMPTY in the Data Table (because of ^M or \\n in the sql query). … --- ## [Rightsizing elastic batch size and number of workers](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 9:33am UTC](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803 "2021-11-23T09:33:47Z")
I am trying to right size my configs for the logstashes that I have feeding my elastic stack. They are pushing filebeat and winlogbeat data. Right now they seem to be fairly underutilized and I am seeing a little bit of … --- ## [Endgame not detecting malware](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165)
**Author:** [@TimoG](https://discuss.elastic.co/u/TimoG)\ **Replies:** 7\ **Last updated:** [November 23, 2021, 9:25am UTC](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165 "2021-11-23T09:25:24Z")
Hi, we are currently evaluating the Elastic Agent to be used as endpoint security solution within our company. We are especially interested in the features provided by Endgame. To get a feeling for the system I have se… --- ## [Kibana health check for ingress health check?](https://discuss.elastic.co/t/kibana-health-check-for-ingress-health-check/289553)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 9:08am UTC](https://discuss.elastic.co/t/kibana-health-check-for-ingress-health-check/289553 "2021-11-23T09:08:19Z")
What's a lightweight endpoint that I can specify for a health check (to be used for alb.ingress.kubernetes.io/healthcheck-path)? I've seen /health suggested, but that takes a quarter of a second to send vast quantities … --- ## [Kerberos support in Logstash Jdbc input plugin](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921)
**Author:** [@jitentiwari82](https://discuss.elastic.co/u/jitentiwari82)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921 "2021-11-23T08:45:37Z")
Hi Guys, I am trying to use Kerberos authentication to read data from Oracle database through Logstash JDBC plug-in . Has Kerberos support for database connection through JDBC input plugin been added ? Can someone plea… --- ## [Snapshot repository fails to verify](https://discuss.elastic.co/t/snapshot-repository-fails-to-verify/289902)
**Author:** [@vishnu\_rao](https://discuss.elastic.co/u/vishnu_rao)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 6:24am UTC](https://discuss.elastic.co/t/snapshot-repository-fails-to-verify/289902 "2021-11-23T06:24:26Z")
Continuing the discussion from Snapshot to minio S3 error: @DavidTurner When you say each node.. is it worker node of the cluster or the pods on which the Elasticsearch Application is hosted ? Kindly let me know pls an… --- ## [Is it possible to search in random files with random texts in it with Elastic Search?](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863)
**Author:** [@Sahin\_Kasap](https://discuss.elastic.co/u/Sahin_Kasap)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 8:25am UTC](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863 "2021-11-23T08:25:48Z")
Hello, I am developing a backend and I have big pdf files(~20 MB), which I want to search words inside. I could upload the texts inside them to Sql or somewhere and search inside them, but this would be slow and pdf's h… --- ## [Report not being generated in Kibana 7.11](https://discuss.elastic.co/t/report-not-being-generated-in-kibana-7-11/289325)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 8:24am UTC](https://discuss.elastic.co/t/report-not-being-generated-in-kibana-7-11/289325 "2021-11-23T08:24:10Z")
Dear team, when we introduced security in our Elasticstack our reports stops to be generated. Here below log output: {"type":"log","@timestamp":"2021-11-16T13:33:37+01:00","tags":\["info","plugins","reporting","queue-j… --- ## [ES 7.10 docker performance issues](https://discuss.elastic.co/t/es-7-10-docker-performance-issues/289911)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 7:11am UTC](https://discuss.elastic.co/t/es-7-10-docker-performance-issues/289911 "2021-11-23T07:11:28Z")
Good morning. I'm running some tests on using docker to spin up multiple nodes and cluster them together on a single bare metal server.... but having major query performance issues. For my test I only have 2 nodes with… --- ## [Filebeat cannot connect to ELK](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076)
**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 6:36am UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076 "2021-11-23T06:36:18Z")
Hey, i'm trying to input the apache2 visualize dashboard but when i run this command said connection refused everytime i try try to connect to my ELK in my VM1 with my webserver with apache2 and filebeat, the connect… --- ## [Elasticseach multi data path，every shard only stored into one data path](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 6\ **Last updated:** [November 23, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895 "2021-11-23T06:29:38Z")
when i use Elasticsearch to store my data,i have a Confuse，every Elasticsearch process I have config multi data path，but I find every shard of indices is only stored one data path，I want to know if one shard can be store… --- ## [Closing the Index released the RAM and Inodes?](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 7\ **Last updated:** [November 23, 2021, 5:49am UTC](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897 "2021-11-23T05:49:12Z")
Hi Team, I have around 150 Indices open and my server has around 64 GB of RAM and 8 core CPU. Soon I believe my system would start complaining about RAM and inodes. Hence wanted to confirm if I close the index will that… --- ## [Sort order case insensitive](https://discuss.elastic.co/t/sort-order-case-insensitive/289882)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 4:21am UTC](https://discuss.elastic.co/t/sort-order-case-insensitive/289882 "2021-11-23T04:21:36Z")
hello, I already have an index created from logstash and I want to do a sort order case insensitive on a field. I need help. thank you --- ## [Mapper Size Plugin VS real Index Size](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 3\ **Last updated:** [November 23, 2021, 3:17am UTC](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793 "2021-11-23T03:17:12Z")
Hello guys, hope you are doing well. Im having a little problem, or not understanding something. My problem is: In order to make a metrics dashboard about index sizes and other metrics, i have enabled Mapper Size Pl… --- ## [Elastic cluster Performance issue](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703)
**Author:** [@Krishna\_Kumar](https://discuss.elastic.co/u/Krishna_Kumar)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 2:38am UTC](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703 "2021-11-23T02:38:49Z")
Hi All, We have a set-up of Pipeline: Beats Agents--\>AWS MSK--\>LogStash--\>Elasticsearch. In which application team sends their application logs through this pipeline. We have 8 AWS ec2 instances which is running on Auto… --- ## [Elastic Agent environment variables file](https://discuss.elastic.co/t/elastic-agent-environment-variables-file/289713)
**Author:** [@Craig\_Lawson](https://discuss.elastic.co/u/Craig_Lawson)\ **Replies:** 3\ **Last updated:** [November 22, 2021, 11:58pm UTC](https://discuss.elastic.co/t/elastic-agent-environment-variables-file/289713 "2021-11-22T23:58:49Z")
Hi all, I'm not 100% sure where to submit a request to change so figured I would start here... While installing elastic agent using the generic linux package I have battled for some time to get it to work with a web pr… --- ## [Sorting case insensitive](https://discuss.elastic.co/t/sorting-case-insensitive/289875)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 11:31pm UTC](https://discuss.elastic.co/t/sorting-case-insensitive/289875 "2021-11-22T23:31:00Z")
Hello, can i add a property to make sorting against a field case insensitive in logstash. Thank you. --- ## [How far back in time does the Elastic Endpoint Security platform grab logs?](https://discuss.elastic.co/t/how-far-back-in-time-does-the-elastic-endpoint-security-platform-grab-logs/289447)
**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 10:32pm UTC](https://discuss.elastic.co/t/how-far-back-in-time-does-the-elastic-endpoint-security-platform-grab-logs/289447 "2021-11-22T22:32:45Z")
We recently deployed elastic agent with endpoint security enabled across an environment and started seeing event logs from months prior to the agent being installed. This is brilliant from a visibility point of view, how… --- ## [Trouble with sending logs from filebeat to elasticsearch](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761)
**Author:** [@Butovoboy](https://discuss.elastic.co/u/Butovoboy)\ **Replies:** 7\ **Last updated:** [November 22, 2021, 10:24pm UTC](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761 "2021-11-22T22:24:14Z")
Hello, everyone! I have an Elasticsearch with kibana started in docker. And I also have filebeat running running on the server and sending logs to Elasticsearch. So, I have there is no logs in kibana, but all dashboards… --- ## [Runtime field with text type and runtime field usage within dynamic\_templates](https://discuss.elastic.co/t/runtime-field-with-text-type-and-runtime-field-usage-within-dynamic-templates/289876)
**Author:** [@vlasami](https://discuss.elastic.co/u/vlasami)\ **Replies:** 0\ **Last updated:** [November 22, 2021, 9:19pm UTC](https://discuss.elastic.co/t/runtime-field-with-text-type-and-runtime-field-usage-within-dynamic-templates/289876 "2021-11-22T21:19:43Z")
Hi, We've been experimenting with the use of the (query time) runtime fields as a possible solution for the mapping explosion problem we currently see. Found the list of supported types for the runtime fields (Elastics… --- ## [Filebeat : resource 'filebeat' exists, but it is not an alias](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228 "2021-11-22T21:10:32Z")
I have ELB set up running in kubernetes. But seeing following logs in filebeats 2021-11-15T18:08:27.786Z ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://elasti… --- ## [Auto kill queries taking more time](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 6\ **Last updated:** [November 22, 2021, 9:02pm UTC](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775 "2021-11-22T21:02:09Z")
We are using 7.3 ES. Due to few bad queries fired by end user, ES CPU/Memory jumps to very high and impacts all others. We want to know any way to stop those long-running queries and return 429 or some status, so the cli… --- ## [Kibana iFrame with NodeJS Reverse proxy](https://discuss.elastic.co/t/kibana-iframe-with-nodejs-reverse-proxy/289363)
**Author:** [@jorisvo2](https://discuss.elastic.co/u/jorisvo2)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 8:45pm UTC](https://discuss.elastic.co/t/kibana-iframe-with-nodejs-reverse-proxy/289363 "2021-11-22T20:45:02Z")
Hi everybody :slight\_smile: I've a quick question for you ! Somebody here have already created a reverse proxy with NodeJS to get an access to Kibana Dashboard without need to be logged ? The only answers on Google is… [Previous page](https://discuss.elastic.co/latest.md?page=1377) [Next page](https://discuss.elastic.co/latest.md?page=1379)