# Latest **URL:** https://discuss.elastic.co/latest.md?page=1464 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1465 --- ## [Elastic Cloud Enterprise 2.12.0 Released](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-12-0-released/285005)
**Author:** [@Olivier\_Bierlaire](https://discuss.elastic.co/u/Olivier_Bierlaire)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 12:59pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-12-0-released/285005 "2021-09-23T12:59:16Z")
We are pleased to announce that ECE 2.12.0 has been released today. Release notes: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-2.12.0.html --- ## [Filebeat output to existing index](https://discuss.elastic.co/t/filebeat-output-to-existing-index/284329)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 6\ **Last updated:** [September 23, 2021, 12:47pm UTC](https://discuss.elastic.co/t/filebeat-output-to-existing-index/284329 "2021-09-23T12:47:30Z")
Hi everyone, I'm trying to configure a filebeat output to an existing index but apparently i can't correctly set the template name and pattern. output.elasticsearch.index: "sai5x" setup.template.name: "sai5x" setup.tem… --- ## [Canvas on AWS](https://discuss.elastic.co/t/canvas-on-aws/284088)
**Author:** [@Niteesh\_Hegde](https://discuss.elastic.co/u/Niteesh_Hegde)\ **Replies:** 3\ **Last updated:** [September 23, 2021, 12:40pm UTC](https://discuss.elastic.co/t/canvas-on-aws/284088 "2021-09-23T12:40:21Z")
How can I use Kibana Canvas in AWS managed ElasticSearch. I could not find it in 7.10.2. No such feature in Opensearch 1..0 as well. I do not want to self host ES/Kibana --- ## [Help with configuring APM elastic agent](https://discuss.elastic.co/t/help-with-configuring-apm-elastic-agent/284984)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 9\ **Last updated:** [September 23, 2021, 12:39pm UTC](https://discuss.elastic.co/t/help-with-configuring-apm-elastic-agent/284984 "2021-09-23T12:39:51Z")
hello, I'm setting up APM for my single node ELK stack and unfamiliar with JAVA parameters . The apm-server has been set up correctly . The instructions to set up were being followed from Kibana's APM tutorial . what … --- ## [Calculate time difference between two timestamps and filter on a field](https://discuss.elastic.co/t/calculate-time-difference-between-two-timestamps-and-filter-on-a-field/285003)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 12:25pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-timestamps-and-filter-on-a-field/285003 "2021-09-23T12:25:29Z")
Hey I am trying to implement a query to calculate a difference between two timestamps but filter on a field. The solution Getting duration by using bucket script works well but my use case is the following: I have, let'… --- ## [Shard Awareness Question](https://discuss.elastic.co/t/shard-awareness-question/284941)
**Author:** [@Dauni](https://discuss.elastic.co/u/Dauni)\ **Replies:** 3\ **Last updated:** [September 23, 2021, 12:11pm UTC](https://discuss.elastic.co/t/shard-awareness-question/284941 "2021-09-23T12:11:49Z")
Hello, We are running an ES 5.16 cluster in 3 DC's (total of 15 hosts, each host is 8 cpu / 32 GB ram and we have heap set to 16GB). DC1 = zone1 (1 master node, 6 data nodes) DC2 = zone2 (1 master node, 6 data nodes) … --- ## [Multiple Terms filters not working](https://discuss.elastic.co/t/multiple-terms-filters-not-working/284077)
**Author:** [@Jay2](https://discuss.elastic.co/u/Jay2)\ **Replies:** 9\ **Last updated:** [September 23, 2021, 11:48am UTC](https://discuss.elastic.co/t/multiple-terms-filters-not-working/284077 "2021-09-23T11:48:53Z")
Hi, I am new to the DSL and im using the below DSL query: {"from":0,"min\_score":0.5,"query":{"bool":{"filter":\[{"terms":{"extension":\["bmp","jpg","tif","img","png","gif","jpeg"\]}},{"terms":{"userContentType":\["webpage"\]… --- ## [Unable to use scripted field in TSVB sum aggregation..Please help](https://discuss.elastic.co/t/unable-to-use-scripted-field-in-tsvb-sum-aggregation-please-help/244026)
**Author:** [@Ashima\_Sachdeva](https://discuss.elastic.co/u/Ashima_Sachdeva)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 11:32am UTC](https://discuss.elastic.co/t/unable-to-use-scripted-field-in-tsvb-sum-aggregation-please-help/244026 "2021-09-23T11:32:14Z")
unable to use scripted field in TSVB sum aggregation...only index pattern fields are coming in drop down. --- ## [Configure filebeat such that a log with variable length records can be uploaded to an index](https://discuss.elastic.co/t/configure-filebeat-such-that-a-log-with-variable-length-records-can-be-uploaded-to-an-index/284997)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 11:31am UTC](https://discuss.elastic.co/t/configure-filebeat-such-that-a-log-with-variable-length-records-can-be-uploaded-to-an-index/284997 "2021-09-23T11:31:08Z")
configure filebeat such that a log with variable length records can be uploaded to an index. The index is created by the upload a file feature provided by kibana regards shini --- ## [Allow winlogbeat to use more processing power](https://discuss.elastic.co/t/allow-winlogbeat-to-use-more-processing-power/284996)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 11:24am UTC](https://discuss.elastic.co/t/allow-winlogbeat-to-use-more-processing-power/284996 "2021-09-23T11:24:10Z")
Hi, is there a setting to allow winlogbeat to use more CPU resources? We are currently testing a config file with about 1700 lines of filtering. We also have another config file with less filtering (about 300) currently… --- ## [Analytics and clickthrough not available due to permission issues](https://discuss.elastic.co/t/analytics-and-clickthrough-not-available-due-to-permission-issues/283904)
**Author:** [@reka.gay](https://discuss.elastic.co/u/reka.gay)\ **Replies:** 5\ **Last updated:** [September 23, 2021, 11:01am UTC](https://discuss.elastic.co/t/analytics-and-clickthrough-not-available-due-to-permission-issues/283904 "2021-09-23T11:01:40Z")
I have enterprise-search running as a service - which means that I have changed ownership of its logs to the enterprise-search user (otherwise it crashes on startup) For some reason however, it doesn't show any query st… --- ## [Repurposing master node as data node](https://discuss.elastic.co/t/repurposing-master-node-as-data-node/284993)
**Author:** [@elastic-learner](https://discuss.elastic.co/u/elastic-learner)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 10:58am UTC](https://discuss.elastic.co/t/repurposing-master-node-as-data-node/284993 "2021-09-23T10:58:54Z")
I have a 3 node es cluster with all nodes having all roles. I want to convert these nodes to dedicated master nodes and add extra dedicated data nodes. For this the best approach is to evacuate all the shards from the no… --- ## [Migrate from standalone to cluster instances](https://discuss.elastic.co/t/migrate-from-standalone-to-cluster-instances/284991)
**Author:** [@supportth](https://discuss.elastic.co/u/supportth)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 10:48am UTC](https://discuss.elastic.co/t/migrate-from-standalone-to-cluster-instances/284991 "2021-09-23T10:48:59Z")
I have one node cluster of Elasticsearch With installed Elasticsearch, kibana, apm-server I have about 5 TB of indices my elk version is { "name" : "elk-old", "cluster\_name" : "elasticsearch", "cluster\_uuid" : … --- ## [Failed to query metric data from kibana](https://discuss.elastic.co/t/failed-to-query-metric-data-from-kibana/284598)
**Author:** [@nehasinha1807](https://discuss.elastic.co/u/nehasinha1807)\ **Replies:** 1\ **Last updated:** [September 23, 2021, 10:13am UTC](https://discuss.elastic.co/t/failed-to-query-metric-data-from-kibana/284598 "2021-09-23T10:13:44Z")
I deployed ELK Lite and metricbeat on linux in order to observe metrics for my application. but when I open kibana UI and click metric, it shows this error: Error while fetching resource Error Internal Server Error (5… --- ## [Logstash SNMP input plugin: no data extracted](https://discuss.elastic.co/t/logstash-snmp-input-plugin-no-data-extracted/284982)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:31am UTC](https://discuss.elastic.co/t/logstash-snmp-input-plugin-no-data-extracted/284982 "2021-09-23T09:31:06Z")
Hi, I am using the SNMP input plugin with the following configurations: input { snmp { walk =\> \["1.3.6.1.2.1.1"\] hosts =\> \[{host =\> "udp:XXXXXXXX/161" community =\> "public" version =\> "2c" retries =\> 2 time… --- ## [Understand the use of certificate requirements while adding a New Agent](https://discuss.elastic.co/t/understand-the-use-of-certificate-requirements-while-adding-a-new-agent/284981)
**Author:** [@Mann\_Mehta](https://discuss.elastic.co/u/Mann_Mehta)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:30am UTC](https://discuss.elastic.co/t/understand-the-use-of-certificate-requirements-while-adding-a-new-agent/284981 "2021-09-23T09:30:02Z")
Here we see, in the production deployment it provide the certificate-based configuration command. Wanted to understand the use of certificate authorities, ES certificate, fleet server certificate, and fleet server ce… --- ## [How to filter in filebeat yml file](https://discuss.elastic.co/t/how-to-filter-in-filebeat-yml-file/284978)
**Author:** [@bae\_park](https://discuss.elastic.co/u/bae_park)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:25am UTC](https://discuss.elastic.co/t/how-to-filter-in-filebeat-yml-file/284978 "2021-09-23T09:25:07Z")
While using kafka input, I want to output only when json data contains a specific string. I tried setting "include\_lines" in filebeat.yml, but it was not filtered properly. When the filebit.yml setting is as follows an… --- ## [Kibana Drilldown - URL auth](https://discuss.elastic.co/t/kibana-drilldown-url-auth/284950)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 1\ **Last updated:** [September 23, 2021, 9:23am UTC](https://discuss.elastic.co/t/kibana-drilldown-url-auth/284950 "2021-09-23T09:23:27Z")
Hi Kibana-brains, I am looking at using the URL drilldown in kibana to kick off some actions in an external site. I need to authenticate/authorise these calls in the external system and was wondering if, assuming we hav… --- ## [Upgrade from 7.9.2 to 7.13](https://discuss.elastic.co/t/upgrade-from-7-9-2-to-7-13/284976)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/upgrade-from-7-9-2-to-7-13/284976 "2021-09-23T09:22:55Z")
Is there anything we need to be aware of while upgrading from Elasticsearch 7.9.2 to 7.13? I do understand that minor version releases will not be having the breaking changes, and includes patches and bugfixes. --- ## [Logstash 7.13 and Elasticsearch 7.9.2 compatibility](https://discuss.elastic.co/t/logstash-7-13-and-elasticsearch-7-9-2-compatibility/284962)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 9:15am UTC](https://discuss.elastic.co/t/logstash-7-13-and-elasticsearch-7-9-2-compatibility/284962 "2021-09-23T09:15:15Z")
I do understand that we need to have the same version of components for elastic stack, but would like to know whether 7.13 version of logstash can run with 7.9.2 version of Elasticsearch. --- ## [CentOS 7: Metadata file does not match checksum during yum update](https://discuss.elastic.co/t/centos-7-metadata-file-does-not-match-checksum-during-yum-update/284913)
**Author:** [@Daniel\_S](https://discuss.elastic.co/u/Daniel_S)\ **Replies:** 21\ **Last updated:** [September 23, 2021, 9:10am UTC](https://discuss.elastic.co/t/centos-7-metadata-file-does-not-match-checksum-during-yum-update/284913 "2021-09-23T09:10:27Z")
Hi, I am getting an error message: elasticsearch-7.x/primary FAILED https://artifacts.elastic.co/packages/7.x/yum/repodata/primary.xml.gz: \[Errno -1\] Metadata file does no… --- ## [Filebeat installed on EulerOS server and trying to start the service but its failing. Please advise](https://discuss.elastic.co/t/filebeat-installed-on-euleros-server-and-trying-to-start-the-service-but-its-failing-please-advise/283427)
**Author:** [@Amit\_Johari](https://discuss.elastic.co/u/Amit_Johari)\ **Replies:** 4\ **Last updated:** [September 23, 2021, 8:50am UTC](https://discuss.elastic.co/t/filebeat-installed-on-euleros-server-and-trying-to-start-the-service-but-its-failing-please-advise/283427 "2021-09-23T08:50:25Z")
OS version: EulerOS release 2.0 (SP8) ARCH: Linux HOBB14-RK01-PROD-CN-01 4.19.36-vhulk1905.1.0.h276.eulerosv2r8.aarch64 #1 SMP Mon Apr 1 00:00:00 UTC 2019 aarch64 aarch64 aarch64 GNU/Linux Error: \[root@HOBB14-RK01-PRO… --- ## [Save discover search results, view deleted documents](https://discuss.elastic.co/t/save-discover-search-results-view-deleted-documents/284973)
**Author:** [@Tadija](https://discuss.elastic.co/u/Tadija)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 8:41am UTC](https://discuss.elastic.co/t/save-discover-search-results-view-deleted-documents/284973 "2021-09-23T08:41:56Z")
We have setup ILM for our test environments so logs are deleted after 2 days. Our QA workflow includes testing stuff on test branches and creating tickets for issues they encounter. They sometime put a link to Kibana wh… --- ## [Sudden spike in CPU](https://discuss.elastic.co/t/sudden-spike-in-cpu/284972)
**Author:** [@kehers](https://discuss.elastic.co/u/kehers)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 8:41am UTC](https://discuss.elastic.co/t/sudden-spike-in-cpu/284972 "2021-09-23T08:41:24Z")
I noticed a sudden spike in CPU (then response times) in our Elasticsearch instance this morning. Surprisingly, the health was green through this. Is there a way to properly investigate what could be the cause? --- ## [Grok parsing and skipping lines](https://discuss.elastic.co/t/grok-parsing-and-skipping-lines/284864)
**Author:** [@Mira\_9](https://discuss.elastic.co/u/Mira_9)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 8:38am UTC](https://discuss.elastic.co/t/grok-parsing-and-skipping-lines/284864 "2021-09-23T08:38:42Z")
Hey! i have to parse the output of a command linux,extract specific fields and skip some lines.I'm trying but its not working. SSID: "#SOMB-875-LY5C" Mode: Managed RSSI: 1 dBm SNR: 0 dB noise: -89 dBm Chann… --- ## [No Elastic Security Events but Agents status is "green"](https://discuss.elastic.co/t/no-elastic-security-events-but-agents-status-is-green/284731)
**Author:** [@Eldoro](https://discuss.elastic.co/u/Eldoro)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 8:33am UTC](https://discuss.elastic.co/t/no-elastic-security-events-but-agents-status-is-green/284731 "2021-09-23T08:33:19Z")
Hallo, after updaten from 7.13 to 7.14 the logging of the elastic security events is now longer working. The status of the agent is still "green". If I query the logs I get the following error: GET .ds-logs-elastic\_a… --- ## [Nodejs APM not working due to /intake/v2/events timeout in version 7.14](https://discuss.elastic.co/t/nodejs-apm-not-working-due-to-intake-v2-events-timeout-in-version-7-14/284929)
**Author:** [@chamiduz](https://discuss.elastic.co/u/chamiduz)\ **Replies:** 9\ **Last updated:** [September 23, 2021, 8:27am UTC](https://discuss.elastic.co/t/nodejs-apm-not-working-due-to-intake-v2-events-timeout-in-version-7-14/284929 "2021-09-23T08:27:43Z")
Hi, I am trying to set up APM for a nodejs app. however data is not coming to Elasticsearch and I can see the below error in the console. I'm using the docker-compose from this link { "log.level":"error", "@time… --- ## [Pulling data from a statsd server](https://discuss.elastic.co/t/pulling-data-from-a-statsd-server/284625)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 7:39am UTC](https://discuss.elastic.co/t/pulling-data-from-a-statsd-server/284625 "2021-09-23T07:39:45Z")
Hi, I need to pull data from a statsd server,whats the best approach to do this? Im trying to import the statsd metrics from a spark jobs using metricbeats but metricbeat is getting the following error ... spark-5a9… --- ## [Elastic cluster is unreachable - Logstash with docker](https://discuss.elastic.co/t/elastic-cluster-is-unreachable-logstash-with-docker/284964)
**Author:** [@Rashmika\_Gamage](https://discuss.elastic.co/u/Rashmika_Gamage)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 7:02am UTC](https://discuss.elastic.co/t/elastic-cluster-is-unreachable-logstash-with-docker/284964 "2021-09-23T07:02:25Z")
I have created a ELK cluster with 3 elastic nodes with docker compose. I am getting an error from logstash. I have been trying with several ways. Appreciate you help. My docker-compose.yml version: '2.2' services: es… --- ## [A markdown to show which filter is applied](https://discuss.elastic.co/t/a-markdown-to-show-which-filter-is-applied/284681)
**Author:** [@Anuj\_Zope](https://discuss.elastic.co/u/Anuj_Zope)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 6:57am UTC](https://discuss.elastic.co/t/a-markdown-to-show-which-filter-is-applied/284681 "2021-09-23T06:57:59Z")
Hi! I am using Kibana 7.10. So on a SUMMARY Dashboard lets say I have a table of subjects. I have linked the Subject names as such that clicking it takes you to the Subject Dashboard and filters that dashboard for the … [Previous page](https://discuss.elastic.co/latest.md?page=1463) [Next page](https://discuss.elastic.co/latest.md?page=1465)