# Latest **URL:** https://discuss.elastic.co/latest.md?page=1531 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1532 --- ## [Logstash is getting reset after 40 sec ,low uptime](https://discuss.elastic.co/t/logstash-is-getting-reset-after-40-sec-low-uptime/281029)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 4:15pm UTC](https://discuss.elastic.co/t/logstash-is-getting-reset-after-40-sec-low-uptime/281029 "2021-08-11T16:15:21Z")
Hi, I checked the logstash status, after every 40-sec logstash is getting started, Getting error message-How to solve this? Aug 11 09:38:38 learning-1 logstash\[4057\]: ERROR: Failed to parse YAML file "/etc/logstash/lo… --- ## [Other space's reports are visible](https://discuss.elastic.co/t/other-spaces-reports-are-visible/281099)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 4:08pm UTC](https://discuss.elastic.co/t/other-spaces-reports-are-visible/281099 "2021-08-11T16:08:43Z")
I really like Kibana's Spaces feature. It sorts of containerises all Kibana settings and objects. I can even set the dark theme for a space, and the light theme for the other. however, it was a surprise for me seeing al… --- ## [SOLVED - Logstash http output to Kafka REST Proxy](https://discuss.elastic.co/t/solved-logstash-http-output-to-kafka-rest-proxy/281098)
**Author:** [@stevetu21](https://discuss.elastic.co/u/stevetu21)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/solved-logstash-http-output-to-kafka-rest-proxy/281098 "2021-08-11T16:02:44Z")
Wanted to share a solution that I found to Logstash http output to Kafka-REST-Proxy and Logstash to Confluent kafka rest proxy. Was running into the same issue trying to use the http output to write a confluent Kafka RES… --- ## [Indicator Match Detection Rule Error - indicators.map is not a function](https://discuss.elastic.co/t/indicator-match-detection-rule-error-indicators-map-is-not-a-function/280941)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 3:27pm UTC](https://discuss.elastic.co/t/indicator-match-detection-rule-error-indicators-map-is-not-a-function/280941 "2021-08-11T15:27:48Z")
I have not had any issues with this rule until just this morning, but when I click into an Indicator Match Detection Rule we have, the page seems to start loading just fine, but then it gives an error: Error: indicators… --- ## [Filebeat modules](https://discuss.elastic.co/t/filebeat-modules/280852)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 13\ **Last updated:** [August 11, 2021, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-modules/280852 "2021-08-11T15:18:57Z")
I have, hopefully, a very simple question: We have filebeat (zeek module) running on SERVER A. Filebeat takes it to kafka where it is then pulled down by logstash. The zeek.conf file in logstash is completely barren. It… --- ## [\[heartbeat\]how to get performace test on heartbeat](https://discuss.elastic.co/t/heartbeat-how-to-get-performace-test-on-heartbeat/274304)
**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 3:02pm UTC](https://discuss.elastic.co/t/heartbeat-how-to-get-performace-test-on-heartbeat/274304 "2021-08-11T15:02:25Z")
Hi Elastic friends, Have a question for the performance of heartbeat. Assuming there’re 90K targets need to be monitored via heartbeat, in some case, like there’re 30% to 50% targets, maybe even worse, there’re 60%~80%… --- ## [Filebeat on Ubuntu hosts getting sporadic error: "Error decoding JSON:"](https://discuss.elastic.co/t/filebeat-on-ubuntu-hosts-getting-sporadic-error-error-decoding-json/258783)
**Author:** [@humbeGar](https://discuss.elastic.co/u/humbeGar)\ **Replies:** 9\ **Last updated:** [August 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-on-ubuntu-hosts-getting-sporadic-error-error-decoding-json/258783 "2021-08-11T14:40:03Z")
Description We are using Filebeat to collect data from multiple systems (~300 different hosts) and OSes ( Windows, Ubuntu, Mac OS). We are collecting around 125Million events coming from .ndjson files per week using Fil… --- ## [Date range filter not returning match if doc\_values is false](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089)
**Author:** [@AMAirfree](https://discuss.elastic.co/u/AMAirfree)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089 "2021-08-11T14:30:49Z")
Hello ! I've been confronted to a problem with one of my queries since upgrading my ElasticSearch version to 7.14. I'm filtering nested objects containing a date property, it used to work correctly but ever since the u… --- ## [Searches with two or more words?](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:28pm UTC](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088 "2021-08-11T14:28:14Z")
Hi Devs, I need help with something about elasticsearch. I have a database full of products related to electronics and computers. I'm using elasticsearch but when I want to do a search like "Dell Laptop" it doesn't ret… --- ## [Query to find if a field exists in last 7 hours](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 2:20pm UTC](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056 "2021-08-11T14:20:44Z")
I am trying to find documents containing opsgenieAction:create in the last 7 hours. I constructed the following query but somehow the result is not as expected. can someone help to find what is wrong here? Query : GET… --- ## [Gcp-pubsub error creating input](https://discuss.elastic.co/t/gcp-pubsub-error-creating-input/281084)
**Author:** [@raiz](https://discuss.elastic.co/u/raiz)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:20pm UTC](https://discuss.elastic.co/t/gcp-pubsub-error-creating-input/281084 "2021-08-11T14:20:38Z")
Hello, I'm trying to run filebeat -e and getting this error: 2021-08-11T14:14:24.729Z INFO \[monitoring\] log/log.go:130 Stopping metrics logging. 2021-08-11T14:14:24.729Z INFO instance/beat.go:412 filebeat stopped. 2021… --- ## [Discovered bug/security issue? Elastic built-in user authentication](https://discuss.elastic.co/t/discovered-bug-security-issue-elastic-built-in-user-authentication/280842)
**Author:** [@hodops](https://discuss.elastic.co/u/hodops)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 2:18pm UTC](https://discuss.elastic.co/t/discovered-bug-security-issue-elastic-built-in-user-authentication/280842 "2021-08-11T14:18:37Z")
Hello, First time poster here. I've discovered something rather interesting that I'd like someone who understands the underlying authentication a bit better than myself to take a look at. When using ECE We all know th… --- ## [Requesting help with synonym's combined with a query string](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066)
**Author:** [@BramFr](https://discuss.elastic.co/u/BramFr)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 1:57pm UTC](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066 "2021-08-11T13:57:19Z")
Hi everybody, Just stepping in to the world of ES so I'm sorry if I am a bit of a newbie. Currently I'm stuck at a point in ES and I can't seem to find an awser online, perhaps one of you could be of assistance. What … --- ## [How to select or return specific part from Split ingest pipeline](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146 "2021-08-11T13:52:19Z")
I have created one split ingest pipeline, it is working fine. But I want to return only the first part of the text. GET \_ingest/pipeline/\_simulate { "pipeline":{ "processors":\[ { "split":{ "fi… --- ## ["Should" is not working in DSL](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063)
**Author:** [@tarekilani](https://discuss.elastic.co/u/tarekilani)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:46pm UTC](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063 "2021-08-11T13:46:16Z")
Hello, I'm querying elasticsearch using DSL in "dev tools". I have the following code : "query": { "bool" : { "must": \[ {"range": { "@timestamp": { "gte": "now-10m/… --- ## [Unable to configure security in Stack 7.14.0](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074 "2021-08-11T13:26:02Z")
I have been able to get 7.14.0 installed and running in my test environment. I have ElasticSearch, Kibana and Logstash installed. If I do not make any changes to the yml files I can start and access Kibana, although I … --- ## [Vulnerability - HTTP DELETE Method Enabled](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057)
**Author:** [@sujivisva](https://discuss.elastic.co/u/sujivisva)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 1:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057 "2021-08-11T13:21:41Z")
We are using ElasticSearch software for our application in our Project. But we are getting the following vulnerabilities from the security team HTTP DELETE Method Enabled The Web server contains a flaw that may allow a… --- ## [Elastic-agent in a docker container](https://discuss.elastic.co/t/elastic-agent-in-a-docker-container/281068)
**Author:** [@NatSav](https://discuss.elastic.co/u/NatSav)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 1:20pm UTC](https://discuss.elastic.co/t/elastic-agent-in-a-docker-container/281068 "2021-08-11T13:20:49Z")
Hi all. Im trying to run an elastic-agent inside a docker container and im encountering a few issues. I know that docker isnt technically supported however I think im nearly there and im going to persevere with it. I h… --- ## [Minimal snapshots](https://discuss.elastic.co/t/minimal-snapshots/280962)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 12:28pm UTC](https://discuss.elastic.co/t/minimal-snapshots/280962 "2021-08-11T12:28:31Z")
Under the Data management section on the elastic.co/subscriptions page I see an entry for "Minimal snapshots". What is that referring to? I can not find any information in the documentation. --- ## [Elastic.Apm.StackExchange.Redis Instrumentation Does Not Report Keys](https://discuss.elastic.co/t/elastic-apm-stackexchange-redis-instrumentation-does-not-report-keys/267693)
**Author:** [@Brandon\_Liles](https://discuss.elastic.co/u/Brandon_Liles)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 12:15pm UTC](https://discuss.elastic.co/t/elastic-apm-stackexchange-redis-instrumentation-does-not-report-keys/267693 "2021-08-11T12:15:03Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: dotnet 1.8.1 Browser version: Edge 89 Original install method (e.g. download page, yum, deb, from sou… --- ## [CEPH Storage For Elasticsearch](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 11:59am UTC](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775 "2021-08-11T11:59:09Z")
We are planning to create an Elasticsearch cluster over Kubernetes, and for this CEPH distributed file system would be used as Storage, I understand that elastic recommends using local storage, however are there any know… --- ## [How to Map dynamic columns of a class in Elastic](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042)
**Author:** [@SUSANTA\_PRADHAN](https://discuss.elastic.co/u/SUSANTA_PRADHAN)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042 "2021-08-11T11:02:11Z")
I have a class say Employee having two columns like Key and Value. I get response from one api response like (the response has key value pairs like key1: value1 and the response is dynamic in nature) { "notes":\[ "title… --- ## [Parsing query part from Apache log](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048)
**Author:** [@Greg\_R](https://discuss.elastic.co/u/Greg_R)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:22am UTC](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048 "2021-08-11T11:22:14Z")
Greetings I'm completly new to Elastic ; I've set up Apache to send logs to ElasticSearch through FileBeat (I'm not using LogStash). I can see the logs entries in Kibana. Now I'd like to use the parameters from the que… --- ## [Kafka-Elastic search sink connector showing high CPU usage](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043)
**Author:** [@kushaq\_flier](https://discuss.elastic.co/u/kushaq_flier)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:06am UTC](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043 "2021-08-11T11:06:20Z")
I am using elastic search sink connector in distributed mode(2 instance). With task of 8 and about 20 to 25 topics to be sink’ed to elastic search. Even when there are no records to sink, the worker java process is show… --- ## [Logstash SSL configuration invalid SecretKeyFactory not available](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939 "2021-08-11T11:02:46Z")
Hi folks, I am facing following error and I am out of options to fix it: \[2021-08-10T14:43:44,743\]\[ERROR\]\[logstash.inputs.beats \]\[test\_pipeline\] SSL configuration invalid {:exception=\>Java::JavaLang::IllegalArgument… --- ## [Query\_string not match with Should Condions](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038)
**Author:** [@enrico.bellanti](https://discuss.elastic.co/u/enrico.bellanti)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 11:00am UTC](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038 "2021-08-11T11:00:43Z")
My intention is to find a word in all documents which have this condions: ("type" =\> "Faq") OR ("type" =\> "NormativeDoc") OR ("type" =\> "Document" AND "profile\_id\_document" =\> X). I tried this but it doesn't work: $pa… --- ## [Counting Files in Folders](https://discuss.elastic.co/t/counting-files-in-folders/281023)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 10:51am UTC](https://discuss.elastic.co/t/counting-files-in-folders/281023 "2021-08-11T10:51:38Z")
Hi, Is there a way to capture the number of files that exist in a folder where the file has not been modified for a period of time? I have a requirement to capture this information, and then build alarms of the back of… --- ## [Bar chart Visualisation](https://discuss.elastic.co/t/bar-chart-visualisation/280799)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 10:25am UTC](https://discuss.elastic.co/t/bar-chart-visualisation/280799 "2021-08-11T10:25:30Z")
{ "aggs": { "3": { "terms": { "field": "Client.keyword", "order": { "\_key": "asc" }, "size": 2000 }, "aggs": { "2": { "date\_histogram": … --- ## [Filtering for wildcard domains](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 10:08am UTC](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834 "2021-08-11T10:08:38Z")
Hi there, I have to write a query that has to find documents where one of the fields (type: text, also available: keyword) matches a list of wildcard domains. I know that it's sub-optimal but that's what I have to work … --- ## [Strigo issue during Elasticsearch engineer course](https://discuss.elastic.co/t/strigo-issue-during-elasticsearch-engineer-course/281021)
**Author:** [@SnivleM](https://discuss.elastic.co/u/SnivleM)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 10:05am UTC](https://discuss.elastic.co/t/strigo-issue-during-elasticsearch-engineer-course/281021 "2021-08-11T10:05:49Z")
Everything was working fine, until I was logged out for inactivity. Since then I can't get my kibana to work. All I get is the following error: I have tried restarting multiple times, different browser, restarted the… [Previous page](https://discuss.elastic.co/latest.md?page=1530) [Next page](https://discuss.elastic.co/latest.md?page=1532)