# Latest **URL:** https://discuss.elastic.co/latest.md?page=1420 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1421 --- ## [Tag Cloud - Split Words](https://discuss.elastic.co/t/tag-cloud-split-words/287493)
**Author:** [@mazenrb](https://discuss.elastic.co/u/mazenrb)\ **Replies:** 3\ **Last updated:** [October 24, 2021, 1:48pm UTC](https://discuss.elastic.co/t/tag-cloud-split-words/287493 "2021-10-24T13:48:31Z")
Hello all, i am trying to analyze spotify data. Therefore i would like to create a Tag Cloud for analyzing the most used words in song names. When i set up a Word/Tag Cloud and choose my field. The hole song name is co… --- ## [Can't replace character with Backslash with gsub](https://discuss.elastic.co/t/cant-replace-character-with-backslash-with-gsub/287501)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 2\ **Last updated:** [October 24, 2021, 10:35am UTC](https://discuss.elastic.co/t/cant-replace-character-with-backslash-with-gsub/287501 "2021-10-24T10:35:09Z")
Hi all. I am trying to replace the pound character in a field value with the backslash but am truggling to get it to work. The field looks like this: PoundedUNC =\> "##Network#Share#Name$" and I would like to turn it int… --- ## [Filebeat index not created](https://discuss.elastic.co/t/filebeat-index-not-created/287506)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 13\ **Last updated:** [October 24, 2021, 5:59am UTC](https://discuss.elastic.co/t/filebeat-index-not-created/287506 "2021-10-24T05:59:44Z")
Hi Guys, I spent hours trying to get filebeat to index a custom log file but I am not having any luck in seeing any of the data ingest. I provided all of my setup details on stack overflow (formatting of yaml here is o… --- ## [Span types](https://discuss.elastic.co/t/span-types/287485)
**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\ **Replies:** 1\ **Last updated:** [October 24, 2021, 5:25am UTC](https://discuss.elastic.co/t/span-types/287485 "2021-10-24T05:25:17Z")
Hi everyone! I’m quite new with APM and I’m only using db.mysql.query span type. I’m wondering which are the supported span types as I couldn’t find any list in the documentation. Or is it an arbitrary string? If yes,… --- ## [After using pipeline to pipeline comunication in pipelines.yml, the other pipelines are not working](https://discuss.elastic.co/t/after-using-pipeline-to-pipeline-comunication-in-pipelines-yml-the-other-pipelines-are-not-working/287455)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 6\ **Last updated:** [October 23, 2021, 10:02pm UTC](https://discuss.elastic.co/t/after-using-pipeline-to-pipeline-comunication-in-pipelines-yml-the-other-pipelines-are-not-working/287455 "2021-10-23T22:02:56Z")
Hi, when I use pipeline to pipeline comunication in pipelines.yml the other pipelines in the file stop working. if I comment those lines the other pipelines start to work. this is my pipelines.yml, the first pipeline … --- ## [Mac Login logging (and general Elastic Security questions)](https://discuss.elastic.co/t/mac-login-logging-and-general-elastic-security-questions/287503)
**Author:** [@K\_Birt](https://discuss.elastic.co/u/K_Birt)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 8:57pm UTC](https://discuss.elastic.co/t/mac-login-logging-and-general-elastic-security-questions/287503 "2021-10-23T20:57:32Z")
Hello! I have been tasked with creating an SIEM for my company. First off, the header for this section is "Integrate free and open SIEM, and endpoint, to prevent, detect, and respond to threats" (I added the emphasis o… --- ## [Filebeat не читает последнюю строку файла](https://discuss.elastic.co/t/filebeat/287500)
**Author:** [@IVHN](https://discuss.elastic.co/u/IVHN)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 8:03pm UTC](https://discuss.elastic.co/t/filebeat/287500 "2021-10-23T20:03:39Z")
Добрый день. Столкнулся со следующей проблемой - filebeat не читает последнюю строку файла. Вот, например, есть файлик (input.log) со следующим содержимым {7,1560,2}, {7,1562,3}, {7,1564,4}, {7,1565,5}, {7,1571,6} Fi… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/287245)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 5\ **Last updated:** [October 23, 2021, 7:31pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/287245 "2021-10-23T19:31:26Z")
Hello, I tried setting up TLS on the HTTP layer in Elasticsearch and after the process I am getting an error "Kibana server is not ready yet". root@ip-pri.ip:~# systemctl status kibana ● kibana.service - Kibana Loa… --- ## [Snaphsot repository Read Only URL via FTP](https://discuss.elastic.co/t/snaphsot-repository-read-only-url-via-ftp/287497)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 6:04pm UTC](https://discuss.elastic.co/t/snaphsot-repository-read-only-url-via-ftp/287497 "2021-10-23T18:04:44Z")
I have an Elasticsearch cluster of 3 nodes with version 7.15.0. I want to add a read-only URL repository soi can fetch a snapshot for restore. PUT /\_snapshot/ftp\_snaphoot { "type": "url", "settings": { "url": "… --- ## [Kibana is not able to visit with error code 503 and 000](https://discuss.elastic.co/t/kibana-is-not-able-to-visit-with-error-code-503-and-000/287434)
**Author:** [@KypMon](https://discuss.elastic.co/u/KypMon)\ **Replies:** 1\ **Last updated:** [October 23, 2021, 5:29pm UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-visit-with-error-code-503-and-000/287434 "2021-10-23T17:29:29Z")
I just follow along the tutorial helm-charts/elasticsearch/examples/security at main · elastic/helm-charts · GitHub and helm-charts/kibana/examples/security at main · elastic/helm-charts · GitHub Elasticsearch all works… --- ## [Elastic agent not sending data stream](https://discuss.elastic.co/t/elastic-agent-not-sending-data-stream/286893)
**Author:** [@AdE\_GoD](https://discuss.elastic.co/u/AdE_GoD)\ **Replies:** 2\ **Last updated:** [October 23, 2021, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-data-stream/286893 "2021-10-23T14:58:31Z")
Hi everyone, I've been wanting to try elastic-agent for quite some time now so I booted up a machine and tried to configure everything, but I've encountered an error that for the love of me I simply cannot fix. I have … --- ## [Do we require licence to enable xpack.security feature](https://discuss.elastic.co/t/do-we-require-licence-to-enable-xpack-security-feature/287427)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 2:17pm UTC](https://discuss.elastic.co/t/do-we-require-licence-to-enable-xpack-security-feature/287427 "2021-10-23T14:17:24Z")
Hello Team, I just wanted to know, If I wanted to use the alerting, monitoring and user administration RBAC feature in ELK stack. Do I require a license for the same? I also wanted to know, if I would like to do integr… --- ## [Error shows "Kibana server is not ready yet" after TLS configuration](https://discuss.elastic.co/t/error-shows-kibana-server-is-not-ready-yet-after-tls-configuration/287484)
**Author:** [@Shoaib\_Hasan](https://discuss.elastic.co/u/Shoaib_Hasan)\ **Replies:** 1\ **Last updated:** [October 23, 2021, 2:24pm UTC](https://discuss.elastic.co/t/error-shows-kibana-server-is-not-ready-yet-after-tls-configuration/287484 "2021-10-23T14:24:32Z")
I did not facing any issue when configured below code: xpack.license.self\_generated.type: basic xpack.monitoring.collection.enabled: true xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.mon… --- ## [Canvas - Timefilter issue](https://discuss.elastic.co/t/canvas-timefilter-issue/287425)
**Author:** [@r.pollak](https://discuss.elastic.co/u/r.pollak)\ **Replies:** 11\ **Last updated:** [October 23, 2021, 2:15pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425 "2021-10-23T14:15:01Z")
Hi together, without using a time filter, the graph shows several data. All date have a timestamp of 23. September 2021 After adding a time filer with a time range "last year" the graphs shows no more data. Can… --- ## [Packetbeat parsing MongoDB 5.0](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-5-0/287490)
**Author:** [@chinaxushi](https://discuss.elastic.co/u/chinaxushi)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 1:47pm UTC](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-5-0/287490 "2021-10-23T13:47:55Z")
In version 5.0, MongoDB deprecates the following opcodes: OP\_REPLY OP\_UPDATE OP\_INSERT OP\_QUERY \[1\] OP\_GET\_MORE OP\_DELETE OP\_KILL\_CURSORS Instead of these opcodes, use OP\_MSG. Now op\_ MSG information cannot be pars… --- ## [New pfSense integration added to Github, is there's any planned support for Elastic Agent FreeBSD OS?](https://discuss.elastic.co/t/new-pfsense-integration-added-to-github-is-theres-any-planned-support-for-elastic-agent-freebsd-os/286970)
**Author:** [@eldadpuzach](https://discuss.elastic.co/u/eldadpuzach)\ **Replies:** 6\ **Last updated:** [October 23, 2021, 2:08pm UTC](https://discuss.elastic.co/t/new-pfsense-integration-added-to-github-is-theres-any-planned-support-for-elastic-agent-freebsd-os/286970 "2021-10-23T14:08:09Z")
Hello Elastic team:) is it possible to utilize the new pfSense integration to ship logs from PfSense to Elastic Cloud? AFAIK there's no Elastic Agent available for FreeBSD OS.. tnx🙏 --- ## [Finding unique dates](https://discuss.elastic.co/t/finding-unique-dates/287489)
**Author:** [@cassebas](https://discuss.elastic.co/u/cassebas)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 12:54pm UTC](https://discuss.elastic.co/t/finding-unique-dates/287489 "2021-10-23T12:54:10Z")
I have a dataset about deliveries, with a datetime in the format yyyy-mm-dd hh:mm:ss (for example: "29-2-2020 13:31:00"). Now I wan't to count the number of unique days in the set. I tried using cardinality in combinati… --- ## [Logstash pass through Index Templates](https://discuss.elastic.co/t/logstash-pass-through-index-templates/287487)
**Author:** [@gose](https://discuss.elastic.co/u/gose)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 12:21pm UTC](https://discuss.elastic.co/t/logstash-pass-through-index-templates/287487 "2021-10-23T12:21:08Z")
I send all my data through Logstash. Each time there's a new Elastic release, I have to export the Index Templates for each Beat I'm using (Filebeat, Metricbeat, Heartbeat, & APM Server) and then hand-load them into Ela… --- ## [How good is to clear the field data cache on a regular basis](https://discuss.elastic.co/t/how-good-is-to-clear-the-field-data-cache-on-a-regular-basis/287400)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [October 23, 2021, 10:41am UTC](https://discuss.elastic.co/t/how-good-is-to-clear-the-field-data-cache-on-a-regular-basis/287400 "2021-10-23T10:41:11Z")
I have big daily indices and sometimes the indexing get stopped or delayed. When i clear the cache, everything goes back to normal. So I was thinking of clearing the cache , especially field cache in every 20-30 minutes … --- ## [Permission error for custom log integration on Fleet-managed Agent](https://discuss.elastic.co/t/permission-error-for-custom-log-integration-on-fleet-managed-agent/287486)
**Author:** [@Panagiota\_Mitsopoulo](https://discuss.elastic.co/u/Panagiota_Mitsopoulo)\ **Replies:** 0\ **Last updated:** [October 23, 2021, 9:36am UTC](https://discuss.elastic.co/t/permission-error-for-custom-log-integration-on-fleet-managed-agent/287486 "2021-10-23T09:36:22Z")
Hello! I have a Nodejs app that ingests logs into Elasticsearch Service deployment 7.15.1 using Filebeat. More of less this is the example I've been doing adapted to my needs Ingest logs from a Node.js web application u… --- ## [Importing prebuilt kibana dashboards: "0 objects imported"](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 7:35am UTC](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008 "2021-10-23T07:35:04Z")
Hey there :slight\_smile: I am experiencing issues importing prebuilt dashboards in kibana from https://elastic-content-share.eu/ , i follow the installation procedure but i dont get new dashboards available in "saved ob… --- ## [Multiline logs are not working using filebeat](https://discuss.elastic.co/t/multiline-logs-are-not-working-using-filebeat/287466)
**Author:** [@kemisetti\_pavan\_kuma](https://discuss.elastic.co/u/kemisetti_pavan_kuma)\ **Replies:** 0\ **Last updated:** [October 22, 2021, 8:33pm UTC](https://discuss.elastic.co/t/multiline-logs-are-not-working-using-filebeat/287466 "2021-10-22T20:33:38Z")
Hi, I have been trying to parse multiline logs by using the sample provided in the filebeat documentation. Not sure of the reason why the logs are not being parse as a single event. Below is my filebeat.yaml file confi… --- ## [Dealing with changes in field datatype](https://discuss.elastic.co/t/dealing-with-changes-in-field-datatype/286952)
**Author:** [@raonic](https://discuss.elastic.co/u/raonic)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 6:41pm UTC](https://discuss.elastic.co/t/dealing-with-changes-in-field-datatype/286952 "2021-10-18T18:41:08Z")
Hello, I have an Elasticsearch index where fields are configured by clients (indirectly) i.e., the clients configure the datatype for these fields through an interface and then I have a workflow which creates the actual… --- ## [Get Current Top 5 Over Time with Date Histogram](https://discuss.elastic.co/t/get-current-top-5-over-time-with-date-histogram/287473)
**Author:** [@dmer](https://discuss.elastic.co/u/dmer)\ **Replies:** 0\ **Last updated:** [October 22, 2021, 10:47pm UTC](https://discuss.elastic.co/t/get-current-top-5-over-time-with-date-histogram/287473 "2021-10-22T22:47:57Z")
Suppose I have an index filled with Person records, and I want to get the doc counts for the top 5 names (based on today) over the past week. To clarify, I don't want the top 5 names each day, instead I want to show the … --- ## [Accessing search API using api key and acces token-based authentication](https://discuss.elastic.co/t/accessing-search-api-using-api-key-and-acces-token-based-authentication/287468)
**Author:** [@parkerjgit](https://discuss.elastic.co/u/parkerjgit)\ **Replies:** 0\ **Last updated:** [October 22, 2021, 9:04pm UTC](https://discuss.elastic.co/t/accessing-search-api-using-api-key-and-acces-token-based-authentication/287468 "2021-10-22T21:04:50Z")
Hi, I need some help accessing the Search API. I Have elastic cloud setup as azure managed service. I can access the cloud Service API using API key-based authentication: curl -X GET -H "Authorization: ApiKey \"… --- ## [Jvm.options with 7.15.0](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 9\ **Last updated:** [October 22, 2021, 7:29pm UTC](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254 "2021-10-22T19:29:33Z")
I know the newer version handles ram automatically and that's great. But I'm seeing the java option sets Xms and Xmx both to 1024m even though I have 96GB of ram on my machine. Should I just ignore this? 51108 ? SLsl … --- ## [How do I export the Composable Templates from beats?](https://discuss.elastic.co/t/how-do-i-export-the-composable-templates-from-beats/287453)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 0\ **Last updated:** [October 22, 2021, 6:09pm UTC](https://discuss.elastic.co/t/how-do-i-export-the-composable-templates-from-beats/287453 "2021-10-22T18:09:43Z")
How can I manually add the beats composable index templates? The instructions here: Load the Elasticsearch index template | Winlogbeat Reference \[7.15\] | Elastic only export the legacy template. I prefer to review the … --- ## [Appsearch support for large attachments](https://discuss.elastic.co/t/appsearch-support-for-large-attachments/287104)
**Author:** [@Michael\_Sor](https://discuss.elastic.co/u/Michael_Sor)\ **Replies:** 4\ **Last updated:** [October 22, 2021, 6:03pm UTC](https://discuss.elastic.co/t/appsearch-support-for-large-attachments/287104 "2021-10-22T18:03:00Z")
We are trying to figure the best solution for handling attachments with Appsearch. I saw a thread regarding a hard 10MB limit for file. To overcome Appsearch limitation is to build a custom intermediary solution to parse… --- ## [Elastic Endpoint - Filebeat - Java Error](https://discuss.elastic.co/t/elastic-endpoint-filebeat-java-error/282676)
**Author:** [@mikemitchell](https://discuss.elastic.co/u/mikemitchell)\ **Replies:** 7\ **Last updated:** [October 22, 2021, 5:28pm UTC](https://discuss.elastic.co/t/elastic-endpoint-filebeat-java-error/282676 "2021-10-22T17:28:07Z")
I'm receiving an error message on all of my endpoints utilizing the filebeat agent spawned by the System integration for Windows. I was wondering if it is based on the Java installation of my windows machines or the file… --- ## [Possibility to use single index template for all application indices](https://discuss.elastic.co/t/possibility-to-use-single-index-template-for-all-application-indices/285741)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 14\ **Last updated:** [October 22, 2021, 5:19pm UTC](https://discuss.elastic.co/t/possibility-to-use-single-index-template-for-all-application-indices/285741 "2021-10-22T17:19:16Z")
Hi Team, I have multiple applications running and each has their application logs captured by filebeat and it sends to logstash. Below is the logstash configuration /etc/logstash/conf.d/logstash.conf file. ( showing o… [Previous page](https://discuss.elastic.co/latest.md?page=1419) [Next page](https://discuss.elastic.co/latest.md?page=1421)