# Latest **URL:** https://discuss.elastic.co/latest.md?page=1387 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1388 --- ## [ConnectionError: connect ECONNREFUSED](https://discuss.elastic.co/t/connectionerror-connect-econnrefused/289287)
**Author:** [@Maks\_7v](https://discuss.elastic.co/u/Maks_7v)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 9:28am UTC](https://discuss.elastic.co/t/connectionerror-connect-econnrefused/289287 "2021-11-16T09:28:01Z")
I've configured Elasticsearch in k8s with a separate master, data, and ingest nodes. xpack.security.enabled is set to true I'm trying to connect a Node.js application to Elasticsearch using Elasticsearch-js client but … --- ## [Elastic gives error when I enable SSL](https://discuss.elastic.co/t/elastic-gives-error-when-i-enable-ssl/289349)
**Author:** [@Jorge\_Dionisio](https://discuss.elastic.co/u/Jorge_Dionisio)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 4:25pm UTC](https://discuss.elastic.co/t/elastic-gives-error-when-i-enable-ssl/289349 "2021-11-16T16:25:35Z")
Hi everyone, I'm trying to enable SSL on the transport and ssl layer in Elasticsearch. My configuration is: cluster.name: elasticsearch node.name: jd-elk-01 path.data: "/var/lib/elasticsearch" path.logs: "/var/log/ela… --- ## [User authentication problem](https://discuss.elastic.co/t/user-authentication-problem/289202)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 9:53pm UTC](https://discuss.elastic.co/t/user-authentication-problem/289202 "2021-11-16T21:53:51Z")
Hi, we have a problem with Kibana and XPack. We send out a URL to a specific dashboard to one of our users. When he authenticate with his credentials, he gets a server error. After refreshing the page, he gets onto the … --- ## [Convert my sql to elasticsearch without logstash](https://discuss.elastic.co/t/convert-my-sql-to-elasticsearch-without-logstash/289291)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 7:45pm UTC](https://discuss.elastic.co/t/convert-my-sql-to-elasticsearch-without-logstash/289291 "2021-11-16T19:45:03Z")
is there a way other than using logstash to convert mysql to Elasticsearch. I just got a new task, to create a generic processor to convert mysql to Elasticsearch --- ## [Logging not happening on elastic Kubernetes Environment](https://discuss.elastic.co/t/logging-not-happening-on-elastic-kubernetes-environment/289107)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 7\ **Last updated:** [November 16, 2021, 7:34pm UTC](https://discuss.elastic.co/t/logging-not-happening-on-elastic-kubernetes-environment/289107 "2021-11-16T19:34:48Z")
We are using Elastic on Kubernetes (ECK) Enterprise edition, we could not able to see the index creation, search request logs. In general logs will get generated inside /logs/logfile. But log files are not available for … --- ## [Logstash - XML parsing including nested objects](https://discuss.elastic.co/t/logstash-xml-parsing-including-nested-objects/289323)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 6:10pm UTC](https://discuss.elastic.co/t/logstash-xml-parsing-including-nested-objects/289323 "2021-11-16T18:10:46Z")
Problem - Unable to convert object fields to flat fields upon parsing the XML Input - Dynamic Soap xml Example - \ **Author:** [@kyats5000](https://discuss.elastic.co/u/kyats5000)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 6:02pm UTC](https://discuss.elastic.co/t/using-mutate-rename-source-and-destination-json-plugin-question-for-filter/289337 "2021-11-16T18:02:21Z") HI there I am trying to find out what the syntax is for renaming fields from an incoming json message. We dropped the message at first to remove metadata but it is unclear to me in subsequent segments of the pipeline co… --- ## [Log parsing issue](https://discuss.elastic.co/t/log-parsing-issue/289306)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 5\ **Last updated:** [November 16, 2021, 6:00pm UTC](https://discuss.elastic.co/t/log-parsing-issue/289306 "2021-11-16T18:00:33Z")
I am having a log in the following format:- {"@timestamp":"2021-08-04T09:57:25.141Z","@metadata":{"beat":"filebeat","type":"\_doc","version":"7.6.3"},"log":{"offset":10413931,"file":{"path":"api/api.log"}},"message":"\[ER… --- ## [Logstahs Filter](https://discuss.elastic.co/t/logstahs-filter/289078)
**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\ **Replies:** 9\ **Last updated:** [November 16, 2021, 5:57pm UTC](https://discuss.elastic.co/t/logstahs-filter/289078 "2021-11-16T17:57:46Z")
Can we apply 2 filter in 1 logstash conf file. I wanted to parse 1 log twice and send the message to multiple outputs. e-g 1 filter to remove some fields and send the message to output 2nd filter doing another check an… --- ## [CSV quote char inside data](https://discuss.elastic.co/t/csv-quote-char-inside-data/289290)
**Author:** [@nosql\_injection](https://discuss.elastic.co/u/nosql_injection)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 5:44pm UTC](https://discuss.elastic.co/t/csv-quote-char-inside-data/289290 "2021-11-16T17:44:38Z")
Hi there, I'm trying to ingest syslog data with the CSV filter. I guess the issue is related to the " inside the URL part (acme.org&iid={"-123456\*\*"\*\*:4}&sid=123458&tid=123) of the log, which is the same char as the "… --- ## [Does ES2 Support scroll and search\_after for Retrieving \>10K Data](https://discuss.elastic.co/t/does-es2-support-scroll-and-search-after-for-retrieving-10k-data/289104)
**Author:** [@theodoreandrew](https://discuss.elastic.co/u/theodoreandrew)\ **Replies:** 5\ **Last updated:** [November 16, 2021, 5:27pm UTC](https://discuss.elastic.co/t/does-es2-support-scroll-and-search-after-for-retrieving-10k-data/289104 "2021-11-16T17:27:17Z")
Hey guys, I have a question about ES version 2. Does ES2 support scroll and search\_after for retrieving \>10K data? If ES2 doesn't support scroll and search\_after, how can I retrieve \>10K data on ES2? Thanks … --- ## [Creating pipeline Using beats in Windows and sending logs to logstash in linux](https://discuss.elastic.co/t/creating-pipeline-using-beats-in-windows-and-sending-logs-to-logstash-in-linux/289191)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 4:30pm UTC](https://discuss.elastic.co/t/creating-pipeline-using-beats-in-windows-and-sending-logs-to-logstash-in-linux/289191 "2021-11-16T16:30:09Z")
Hi, I am creating a pipeline using beats in windows to extract logs in form of txt file in multiple directories and send it to the Linux(server) to logstash to es/kibana. While running logstash conf pipeline I am getti… --- ## [Dropdown select filter not working](https://discuss.elastic.co/t/dropdown-select-filter-not-working/288518)
**Author:** [@karwei](https://discuss.elastic.co/u/karwei)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 4:41pm UTC](https://discuss.elastic.co/t/dropdown-select-filter-not-working/288518 "2021-11-16T16:41:21Z")
Working with v7.14.1. I'm trying to add a dropdown select filter to my workpad in Canvas, but it is not giving me the list of items in the dropdown. The preview data shows the list. essql query="SELECT appId FROM \\"oe.… --- ## [Fielddata error indexing string fields](https://discuss.elastic.co/t/fielddata-error-indexing-string-fields/289105)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 4:18pm UTC](https://discuss.elastic.co/t/fielddata-error-indexing-string-fields/289105 "2021-11-16T16:18:25Z")
In notes of Part 5 of crash course I see By default, every string gets mapped twice as a text field and as a keyword multi-field. Each field type is primed for different types of requests. However, when I try to aggr… --- ## [Corelation Id not working](https://discuss.elastic.co/t/corelation-id-not-working/289243)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 4:08pm UTC](https://discuss.elastic.co/t/corelation-id-not-working/289243 "2021-11-16T16:08:21Z")
We are passing co-relation id from postman GET request using Http header. But co-relation id is not getting printed in the logs. We would like to use co-relation id to monitor the logs to debug the issues. Can you guide … --- ## [Unable to verify the first certificate - kibana/elasticsearch](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate-kibana-elasticsearch/289294)
**Author:** [@slashlinux](https://discuss.elastic.co/u/slashlinux)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate-kibana-elasticsearch/289294 "2021-11-16T15:49:30Z")
Hi teams, I'm trying to configure xpack for Elasticsearch/kibana, I've activated the trial license for Elasticsearch, configured xpack for kibana/Elasticsearch and also I've generated ca.crt, node1-elk.crt, node1-elk.ke… --- ## [Search\_after queries are not performing as expected](https://discuss.elastic.co/t/search-after-queries-are-not-performing-as-expected/289174)
**Author:** [@manuel.pancorbo](https://discuss.elastic.co/u/manuel.pancorbo)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/search-after-queries-are-not-performing-as-expected/289174 "2021-11-16T15:08:42Z")
Hi all! I'm working on building a searcher for a site. This site generates a lot of writes (new or modified documents) so we need to use some mechanism to ensure pagination consistency by using certain criteria (freshne… --- ## [CORS problem when using self hosted tile map server](https://discuss.elastic.co/t/cors-problem-when-using-self-hosted-tile-map-server/289102)
**Author:** [@mehrdad22](https://discuss.elastic.co/u/mehrdad22)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 3:03pm UTC](https://discuss.elastic.co/t/cors-problem-when-using-self-hosted-tile-map-server/289102 "2021-11-16T15:03:14Z")
Hi there. I'm ran a self hosted OSM tile server with this repo. map is working well and functional and accessible with leaflet demo. when I use tile map link ( http://map.company.org:8080/tile/{z}/{x}/{y}.png) for serv… --- ## [Visualising](https://discuss.elastic.co/t/visualising/289212)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 2:55pm UTC](https://discuss.elastic.co/t/visualising/289212 "2021-11-16T14:55:00Z")
So, I have managed to get data into elastic, in this case cpu, and uptime. What I want now is to display the latest cpu and uptime value for each host. I have gone into dashboard visualise and created a table with host… --- ## [Sort Parent by Count of Unique Values of a Child Field](https://discuss.elastic.co/t/sort-parent-by-count-of-unique-values-of-a-child-field/289333)
**Author:** [@amarjotbhullar](https://discuss.elastic.co/u/amarjotbhullar)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 1:49pm UTC](https://discuss.elastic.co/t/sort-parent-by-count-of-unique-values-of-a-child-field/289333 "2021-11-16T13:49:09Z")
Hi, I am currently working on a feature where I have a parent child relationship between driver and trips taken by driver. I need to sort drivers by unique count of no. of cars driven irrespective of number of trips tak… --- ## [Filebeat drop\_fields processors module does not work](https://discuss.elastic.co/t/filebeat-drop-fields-processors-module-does-not-work/289318)
**Author:** [@bilgicsin](https://discuss.elastic.co/u/bilgicsin)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 11:55am UTC](https://discuss.elastic.co/t/filebeat-drop-fields-processors-module-does-not-work/289318 "2021-11-16T11:55:12Z")
Hi, We have elastic gold licence. we use filebeat agent to send logs logstash, on logstash we do some transformation and send logs to elasticsearh. Before I was dropping default values on logstash but now I want to dro… --- ## [I can't record the current date from the log string in the @timestamp field](https://discuss.elastic.co/t/i-cant-record-the-current-date-from-the-log-string-in-the-timestamp-field/289201)
**Author:** [@vanro](https://discuss.elastic.co/u/vanro)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 1:29pm UTC](https://discuss.elastic.co/t/i-cant-record-the-current-date-from-the-log-string-in-the-timestamp-field/289201 "2021-11-16T13:29:30Z")
Hello, I can't record the current date from the log string in the @timestamp field and convert the time field from the string type to the date type. Can you tell me what I'm doing wrong? My configuration is shown below.. … --- ## [Change advanced settings via API?](https://discuss.elastic.co/t/change-advanced-settings-via-api/289205)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 1:02pm UTC](https://discuss.elastic.co/t/change-advanced-settings-via-api/289205 "2021-11-16T13:02:30Z")
I can't see how to change an advanced setting via the API. If I use /api/saved\_objects/\_bulk\_create and don't use overwrite then I get a 409 conflict failure, and if I do use overwrite then it appears that the entire set… --- ## [Big-ish line missing n Elasticsearch 7.9.0](https://discuss.elastic.co/t/big-ish-line-missing-n-elasticsearch-7-9-0/289145)
**Author:** [@Rayyan](https://discuss.elastic.co/u/Rayyan)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 12:48pm UTC](https://discuss.elastic.co/t/big-ish-line-missing-n-elasticsearch-7-9-0/289145 "2021-11-16T12:48:54Z")
We are using a standalone Elasticsearch on EC2 and the stack looks like Application (JSON) --\> Fluent Bit --\> Elasticsearch (7.9.0) on EC2 --\> Kibana on EC2 We have a scenario wherein if the application generated JSON l… --- ## [How to extract fields of an array with logstash?](https://discuss.elastic.co/t/how-to-extract-fields-of-an-array-with-logstash/289289)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:36am UTC](https://discuss.elastic.co/t/how-to-extract-fields-of-an-array-with-logstash/289289 "2021-11-16T11:36:18Z")
hello! i have a field with this format value: \["x@correo.es","x@correo.com"\] and i want to use a scanner tu extract the nested fields with something like this: ruby { code =\> " event.set('prueba', ev… --- ## [Heartbeat monitor fails with io error 'EOF'](https://discuss.elastic.co/t/heartbeat-monitor-fails-with-io-error-eof/288644)
**Author:** [@SanderP](https://discuss.elastic.co/u/SanderP)\ **Replies:** 3\ **Last updated:** [November 16, 2021, 11:34am UTC](https://discuss.elastic.co/t/heartbeat-monitor-fails-with-io-error-eof/288644 "2021-11-16T11:34:10Z")
Hi, I'm trying to do a check on philips-hue.com and my monitor is not giving the correct response. It is showing an io error with EOF in the message. I've been trying to find out why it fails, but am not successful yet: … --- ## [Oracle 32bit on 64bit machine](https://discuss.elastic.co/t/oracle-32bit-on-64bit-machine/289301)
**Author:** [@sc19](https://discuss.elastic.co/u/sc19)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:33am UTC](https://discuss.elastic.co/t/oracle-32bit-on-64bit-machine/289301 "2021-11-16T11:33:26Z")
Hello everyone, I have 32 bit two instances ORACLE database (test and production) on Microsoft Windows Server 2019 (64bit), and I want to install metricbeat service on that machine, but after instalation process, I've g… --- ## [ML - Updated analytics task state to \[failed\] with reason \[Limit of total fields \[1000\] has been exceeded\]](https://discuss.elastic.co/t/ml-updated-analytics-task-state-to-failed-with-reason-limit-of-total-fields-1000-has-been-exceeded/288886)
**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 11:24am UTC](https://discuss.elastic.co/t/ml-updated-analytics-task-state-to-failed-with-reason-limit-of-total-fields-1000-has-been-exceeded/288886 "2021-11-16T11:24:48Z")
Hi, I want to setup ML job with outlier detection for http statuses 4xx and 5xx. I use ELK stack version 7.15.1. This is the json of ML job. { "id": "ml-http-4xx", "create\_time": 1636545614078, "version": "7.15.… --- ## [Logstash Error](https://discuss.elastic.co/t/logstash-error/289310)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 11:04am UTC](https://discuss.elastic.co/t/logstash-error/289310 "2021-11-16T11:04:27Z")
Hi, I am running the logstash config file and I am getting the error shown below. \[ERROR\]\[logstash.outputs.Elasticsearch\]\[main\] Failed to install template {:message=\>"Got response code '400' contacting Elasticsearch at … --- ## [Logstash Elasticsearch filer query to filter data from existing data](https://discuss.elastic.co/t/logstash-elasticsearch-filer-query-to-filter-data-from-existing-data/289304)
**Author:** [@DeepakStile](https://discuss.elastic.co/u/DeepakStile)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:02am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filer-query-to-filter-data-from-existing-data/289304 "2021-11-16T11:02:38Z")
I am trying to add existing data from Elasticsearch index to a current event of logstash using Elasticsearch filter current logstash event is id,status,date 123456789,ByMobile,Success Existing Data like id,status,da… [Previous page](https://discuss.elastic.co/latest.md?page=1386) [Next page](https://discuss.elastic.co/latest.md?page=1388)