# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1520

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1521

---

## [I'm auto-logged-in as my anonymous user and cannot log in as administrator anymore](https://discuss.elastic.co/t/im-auto-logged-in-as-my-anonymous-user-and-cannot-log-in-as-administrator-anymore/281810)

<div class="topic-metadata">

**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 2:48pm UTC](https://discuss.elastic.co/t/im-auto-logged-in-as-my-anonymous-user-and-cannot-log-in-as-administrator-anymore/281810 "2021-08-18T14:48:33Z")

</div>

I added the following to my kibana.yml for the sake of embedding visualizations, but now when I log in to the Kibana web portal, I'm auto-logged-in as dashboard\_viewer and cannot log out or choose to log in as the elast…

---

## [Ingress for ECK Kibana](https://discuss.elastic.co/t/ingress-for-eck-kibana/281734)

<div class="topic-metadata">

**Author:** [@telapo](https://discuss.elastic.co/u/telapo)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 2:47pm UTC](https://discuss.elastic.co/t/ingress-for-eck-kibana/281734 "2021-08-18T14:47:35Z")

</div>

Hi, I have followed the documentation to deploy ECK on Kubernetes (local testing on docker for mac), and everything is working fine, elastic is up and running and Kibana is connected to it. I can port forward it, and I a…

---

## [Ignore anomalies if the bucket count is lower than some threshold](https://discuss.elastic.co/t/ignore-anomalies-if-the-bucket-count-is-lower-than-some-threshold/281836)

<div class="topic-metadata">

**Author:** [@one](https://discuss.elastic.co/u/one)\
**Replies:** 0\
**Last updated:** [August 18, 2021, 2:41pm UTC](https://discuss.elastic.co/t/ignore-anomalies-if-the-bucket-count-is-lower-than-some-threshold/281836 "2021-08-18T14:41:08Z")

</div>

I am investigating anomalies as the mean value of a field over buckets. So far, the results seem to be correct. However, in the domain I am working with, if the number of documents in the buckets is lower than some thres…

---

## [How can I parse 2 log files to 2 index in Kibana](https://discuss.elastic.co/t/how-can-i-parse-2-log-files-to-2-index-in-kibana/281711)

<div class="topic-metadata">

**Author:** [@MT2021](https://discuss.elastic.co/u/MT2021)\
**Replies:** 5\
**Last updated:** [August 18, 2021, 2:31pm UTC](https://discuss.elastic.co/t/how-can-i-parse-2-log-files-to-2-index-in-kibana/281711 "2021-08-18T14:31:10Z")

</div>

Hi ELK community, I am a absolutely newbie in the Elasticsearch. I am getting a stuck in creating 2 pipelines towards 2 indexes of 2 log file (2 services in corresponding). My topo likes that: Filebeat ==\> logstash =…

---

## [Complex bucket aggregation](https://discuss.elastic.co/t/complex-bucket-aggregation/281689)

<div class="topic-metadata">

**Author:** [@Tkachleo](https://discuss.elastic.co/u/Tkachleo)\
**Replies:** 3\
**Last updated:** [August 18, 2021, 1:13pm UTC](https://discuss.elastic.co/t/complex-bucket-aggregation/281689 "2021-08-18T13:13:37Z")

</div>

Hi, I need some help with a complex aggregation. I have these 3 documents: { "id": 1, "@timestamp": "2021-08-17 12:00:00", "result": "FAIL" }, { "id": 2, "@timestamp": "2021-08-17 12:05:00", "result": "PAS…

---

## [Kibana OIDC Keycloak 401 Unauthorized](https://discuss.elastic.co/t/kibana-oidc-keycloak-401-unauthorized/281739)

<div class="topic-metadata">

**Author:** [@cawwot](https://discuss.elastic.co/u/cawwot)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 12:58pm UTC](https://discuss.elastic.co/t/kibana-oidc-keycloak-401-unauthorized/281739 "2021-08-18T12:58:49Z")

</div>

Trying to integrate Keycloak OIDC with Kibana to allow logins from keycloak users. Upon selecting the "login with keycloak" icon, I am correctly redirected to keycloak to login. after entering the credentials of a keyclo…

---

## [Multiple service name for apm for java webapps for single tomcat server](https://discuss.elastic.co/t/multiple-service-name-for-apm-for-java-webapps-for-single-tomcat-server/281792)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [August 18, 2021, 12:40pm UTC](https://discuss.elastic.co/t/multiple-service-name-for-apm-for-java-webapps-for-single-tomcat-server/281792 "2021-08-18T12:40:23Z")

</div>

Hi, I am running multiple war files in single tomcat server. Had a doubt if we set the following property at tomcat level how will we differentiate at application level. set CATALINA\_OPTS=%CATALINA\_OPTS% -Delastic.apm…

---

## [Logstash file input not processing (windows)](https://discuss.elastic.co/t/logstash-file-input-not-processing-windows/281720)

<div class="topic-metadata">

**Author:** [@alejandroalv87](https://discuss.elastic.co/u/alejandroalv87)\
**Replies:** 5\
**Last updated:** [August 18, 2021, 12:23pm UTC](https://discuss.elastic.co/t/logstash-file-input-not-processing-windows/281720 "2021-08-18T12:23:43Z")

</div>

I am trying to process an apache log file to logstash and file is not getting process. My config file here: input { file { path =\> "C:\\Users\\alejandro.alvarez\\Downloads\\elasticsearch\_kibana\\data\\logs\\apache\_access.lo…

---

## [Use Filebeat for CSV logs?](https://discuss.elastic.co/t/use-filebeat-for-csv-logs/281722)

<div class="topic-metadata">

**Author:** [@ChrisClem1](https://discuss.elastic.co/u/ChrisClem1)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 12:21pm UTC](https://discuss.elastic.co/t/use-filebeat-for-csv-logs/281722 "2021-08-18T12:21:51Z")

</div>

I am new to elastic. I have many gigabytes of csv logs that I want to load into elastic. I assume that I use filebeat. What do I need to configure in filebeat apart from the path to the logs (/home/assessor/Desktop/audi…

---

## [Java GRPC Client not ending spans and not reporting to APM](https://discuss.elastic.co/t/java-grpc-client-not-ending-spans-and-not-reporting-to-apm/280643)

<div class="topic-metadata">

**Author:** [@YvesAndre](https://discuss.elastic.co/u/YvesAndre)\
**Replies:** 18\
**Last updated:** [August 18, 2021, 11:34am UTC](https://discuss.elastic.co/t/java-grpc-client-not-ending-spans-and-not-reporting-to-apm/280643 "2021-08-18T11:34:34Z")

</div>

Kibana version: 7.13.4 Elasticsearch version: 7.13.4 APM Server version: 7.13.4 APM Agent language and version: Java 8, apm-agent-attach, apm-agent-api, elastic-apm-agent 1.25.0 Browser version: Chrome Original inst…

---

## [Port need to open for filebeat and logstash](https://discuss.elastic.co/t/port-need-to-open-for-filebeat-and-logstash/281762)

<div class="topic-metadata">

**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 10:21am UTC](https://discuss.elastic.co/t/port-need-to-open-for-filebeat-and-logstash/281762 "2021-08-18T10:21:15Z")

</div>

Hi friends, I have open using firewalld port 5044 in ELK server. I i open source IP and source Port in ELK server. However i am hitting connection refuse when i telnet to logstash from beats server telnet 192.168.1.101…

---

## [Elasticsearch Net, "all shards failed" when one node is shut down, 7.11.1](https://discuss.elastic.co/t/elasticsearch-net-all-shards-failed-when-one-node-is-shut-down-7-11-1/281712)

<div class="topic-metadata">

**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\
**Replies:** 7\
**Last updated:** [August 18, 2021, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-net-all-shards-failed-when-one-node-is-shut-down-7-11-1/281712 "2021-08-18T10:19:08Z")

</div>

Hi! I have a three nodes cluster setup on version 7.11.1, with this configuration file: bootstrap.memory\_lock: false cluster.initial\_master\_nodes: - STHLM-04 - STHLM-05 - STHLM-06 cluster.name: ELASTIC-TEST disco…

---

## [System.ValueTuple and .NetFramework 4.7.2](https://discuss.elastic.co/t/system-valuetuple-and-netframework-4-7-2/281768)

<div class="topic-metadata">

**Author:** [@Saket](https://discuss.elastic.co/u/Saket)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 10:03am UTC](https://discuss.elastic.co/t/system-valuetuple-and-netframework-4-7-2/281768 "2021-08-18T10:03:06Z")

</div>

APM Agent language and version: .NET Framework and 1.11.0 Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): The primary reference could not be resolved beca…

---

## [API call for ML job Kibana settings](https://discuss.elastic.co/t/api-call-for-ml-job-kibana-settings/281763)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 9:31am UTC](https://discuss.elastic.co/t/api-call-for-ml-job-kibana-settings/281763 "2021-08-18T09:31:24Z")

</div>

Hi, I am creating datafeeds and ML jobs via API calls and they are working just fine, but I always have to open Kibana and select Synchronize saved objects if I want them to show up in the UI. Is there a way to do the …

---

## [Question about installing APM server on Windows Platform](https://discuss.elastic.co/t/question-about-installing-apm-server-on-windows-platform/281655)

<div class="topic-metadata">

**Author:** [@afan](https://discuss.elastic.co/u/afan)\
**Replies:** 5\
**Last updated:** [August 18, 2021, 9:25am UTC](https://discuss.elastic.co/t/question-about-installing-apm-server-on-windows-platform/281655 "2021-08-18T09:25:17Z")

</div>

Hi all, I'm a newbie here and trying to setup APM server on Windows platform. ElasticSearch and kibana both were setup already and when I am trying to install the APM server, I found below error when I check the APM se…

---

## [Avoid logging password when using hint based autodiscover](https://discuss.elastic.co/t/avoid-logging-password-when-using-hint-based-autodiscover/281797)

<div class="topic-metadata">

**Author:** [@Rasmus\_Breinholm\_Rom](https://discuss.elastic.co/u/Rasmus_Breinholm_Rom)\
**Replies:** 0\
**Last updated:** [August 18, 2021, 9:24am UTC](https://discuss.elastic.co/t/avoid-logging-password-when-using-hint-based-autodiscover/281797 "2021-08-18T09:24:49Z")

</div>

Hi When using Hint based autodiscover, it is possible to configure usernames and password for modules like MySql using labels on a docker container. The problem with this is that all labels are logged into elasticsearc…

---

## [Trouble with adding and removing indexes using core Kibana Api](https://discuss.elastic.co/t/trouble-with-adding-and-removing-indexes-using-core-kibana-api/274853)

<div class="topic-metadata">

**Author:** [@kibanaPluginDev](https://discuss.elastic.co/u/kibanaPluginDev)\
**Replies:** 7\
**Last updated:** [August 18, 2021, 9:20am UTC](https://discuss.elastic.co/t/trouble-with-adding-and-removing-indexes-using-core-kibana-api/274853 "2021-08-18T09:20:29Z")

</div>

We are really facing problems in implementing elasticsearch requests from Kibana Plugin using the core kibana API for elasticsearch? Also referred migration examples and the legacy to new platform migration document. Cou…

---

## [Configure APM to collect jmx metrics](https://discuss.elastic.co/t/configure-apm-to-collect-jmx-metrics/281646)

<div class="topic-metadata">

**Author:** [@Jalil](https://discuss.elastic.co/u/Jalil)\
**Replies:** 4\
**Last updated:** [August 18, 2021, 9:15am UTC](https://discuss.elastic.co/t/configure-apm-to-collect-jmx-metrics/281646 "2021-08-18T09:15:34Z")

</div>

Dear all, Since some days ago, I'm trying to collect jmx metrics from java app and index them to ES in order to visualize them in kibana but without any result. APM is already configured but it don't give me all metric…

---

## [Observability logs - Alert log stoppage](https://discuss.elastic.co/t/observability-logs-alert-log-stoppage/281414)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 7\
**Last updated:** [August 18, 2021, 9:09am UTC](https://discuss.elastic.co/t/observability-logs-alert-log-stoppage/281414 "2021-08-18T09:09:33Z")

</div>

Hello, I am able to create log stoppage alert using threshold alert type in logs-ovservability. Is there any way to add multiple index names in this observalibilty-logs settings?, so that I can create multiple alerts f…

---

## [Property totalHits always 0](https://discuss.elastic.co/t/property-totalhits-always-0/281789)

<div class="topic-metadata">

**Author:** [@Christophe\_NOWOSAD](https://discuss.elastic.co/u/Christophe_NOWOSAD)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 9:09am UTC](https://discuss.elastic.co/t/property-totalhits-always-0/281789 "2021-08-18T09:09:09Z")

</div>

Hello, I am using Elastic client in our Springboot API (client version 6.5.4). My application is using 2 different indexes, one is on version 6, the second on version 7. For the version 6, everything is working fine, …

---

## [Using Kibana REST API to generate visualization](https://discuss.elastic.co/t/using-kibana-rest-api-to-generate-visualization/281554)

<div class="topic-metadata">

**Author:** [@U2P](https://discuss.elastic.co/u/U2P)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 9:06am UTC](https://discuss.elastic.co/t/using-kibana-rest-api-to-generate-visualization/281554 "2021-08-18T09:06:32Z")

</div>

Hello everyone, I'm looking to generate dashboards and visualizations using the Kibana API and run a Python script. I watch a lot of other threads but couldn't find what I needed. The context: A python script parses…

---

## [Having issues translating query dsl to NEST](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585)

<div class="topic-metadata">

**Author:** [@woal\_idal](https://discuss.elastic.co/u/woal_idal)\
**Replies:** 5\
**Last updated:** [August 18, 2021, 9:05am UTC](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585 "2021-08-18T09:05:01Z")

</div>

I have a console application that will read the logs from elasticsearch and insert those logs to a database. However I am having an issue with the count api implementation in NEST. Whenever, I type the following in the C…

---

## [Journalbeat and logfiles](https://discuss.elastic.co/t/journalbeat-and-logfiles/281013)

<div class="topic-metadata">

**Author:** [@colttt](https://discuss.elastic.co/u/colttt)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 7:42am UTC](https://discuss.elastic.co/t/journalbeat-and-logfiles/281013 "2021-08-18T07:42:30Z")

</div>

Hello short question, is it possible that journalbeat also read normal logfiles (like from nginx/apache) or does it read just journald? And if yes, have I to pay attention to something? thanks in advanced!

---

## [Create a custom ECS settings via github repo](https://discuss.elastic.co/t/create-a-custom-ecs-settings-via-github-repo/280769)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 7:41am UTC](https://discuss.elastic.co/t/create-a-custom-ecs-settings-via-github-repo/280769 "2021-08-18T07:41:41Z")

</div>

Hi, I'm trying to generate ecs template with custom settings. For that, I used this repo GitHub - elastic/ecs: Elastic Common Schema. Command used : python scripts/generator.py --template-settings template.json --ref …

---

## [Logstash data unload](https://discuss.elastic.co/t/logstash-data-unload/281506)

<div class="topic-metadata">

**Author:** [@onlinekap](https://discuss.elastic.co/u/onlinekap)\
**Replies:** 8\
**Last updated:** [August 18, 2021, 7:30am UTC](https://discuss.elastic.co/t/logstash-data-unload/281506 "2021-08-18T07:30:17Z")

</div>

Hello, I am newbie here.. I have a bunch of ELK indexes that returns below output when querying via POSTMAN GET request. \</\> { "took": 5, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0…

---

## ["Precomputed hashes" on client side](https://discuss.elastic.co/t/precomputed-hashes-on-client-side/281774)

<div class="topic-metadata">

**Author:** [@jidetashuo](https://discuss.elastic.co/u/jidetashuo)\
**Replies:** 0\
**Last updated:** [August 18, 2021, 6:46am UTC](https://discuss.elastic.co/t/precomputed-hashes-on-client-side/281774 "2021-08-18T06:46:55Z")

</div>

I found documentation on "Precomputed hashes" on client side but it does not mention how,how I can generate murmur hash outside of ElasticSearch and later use that to find cardinality

---

## [Elasticsearch Restful API query string](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 1\
**Last updated:** [August 18, 2021, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707 "2021-08-18T06:16:46Z")

</div>

The query String in Kibana is : system:APC AND host: F12\*R2R\* AND message:"Turn to Phase \[F12P7\]" , and I want to query through Restful API like below: String bodycontent="{" +" \\"\_source\\": \[\\"@timest…

---

## [Kibana Timestamp](https://discuss.elastic.co/t/kibana-timestamp/281761)

<div class="topic-metadata">

**Author:** [@irfanifse](https://discuss.elastic.co/u/irfanifse)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 4:08am UTC](https://discuss.elastic.co/t/kibana-timestamp/281761 "2021-08-18T04:08:05Z")

</div>

Hi, I have requirement on Timestamp Time range calculation for particular hours Eg: if a document comes to kibana at 9AM i need to find how many document came from that time and waiting for further process from respect…

---

## [Secondary rollup of existing rollup index](https://discuss.elastic.co/t/secondary-rollup-of-existing-rollup-index/281706)

<div class="topic-metadata">

**Author:** [@pavan\_v](https://discuss.elastic.co/u/pavan_v)\
**Replies:** 0\
**Last updated:** [August 17, 2021, 2:51pm UTC](https://discuss.elastic.co/t/secondary-rollup-of-existing-rollup-index/281706 "2021-08-17T14:51:24Z")

</div>

Hi, I have an index which is created from a Rollup job. Its content is as follows: "hits": { "total": 4, "max\_score": 1, "hits": \[ { "\_index": "my\_rollup\_1m\_2021.08.17", "\_type": "\_doc…

---

## [Endpoint-security State changed to DEGRADED: Protecting with policy](https://discuss.elastic.co/t/endpoint-security-state-changed-to-degraded-protecting-with-policy/281308)

<div class="topic-metadata">

**Author:** [@Alexey\_Shalin](https://discuss.elastic.co/u/Alexey_Shalin)\
**Replies:** 4\
**Last updated:** [August 17, 2021, 3:18am UTC](https://discuss.elastic.co/t/endpoint-security-state-changed-to-degraded-protecting-with-policy/281308 "2021-08-17T03:18:09Z")

</div>

Good Day, After some mins after staring agent Elastic Agent .. status changed from Health to UnHealth (with Endpoint Security Integration) I check logs and find line: endpoint-security State changed to DEGRADED: Protec…

[Previous page](https://discuss.elastic.co/latest.md?page=1519)

[Next page](https://discuss.elastic.co/latest.md?page=1521)
