# Latest **URL:** https://discuss.elastic.co/latest.md?page=1537 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1538 --- ## [Http\_poller skip SSL validation](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 3\ **Last updated:** [August 8, 2021, 6:41pm UTC](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713 "2021-08-08T18:41:22Z")
Is there a way to skip SSL server certificate validation? I'm trying to hit a local server with a self-signed cert but i get errors of course. I saw for other plugins that this was added as an option but nothing for ht… --- ## [How can we populate from different index using reference id stored in main index as in Mongodb](https://discuss.elastic.co/t/how-can-we-populate-from-different-index-using-reference-id-stored-in-main-index-as-in-mongodb/279724)
**Author:** [@singhrohitdangi](https://discuss.elastic.co/u/singhrohitdangi)\ **Replies:** 5\ **Last updated:** [August 8, 2021, 6:30pm UTC](https://discuss.elastic.co/t/how-can-we-populate-from-different-index-using-reference-id-stored-in-main-index-as-in-mongodb/279724 "2021-08-08T18:30:32Z")
Hi, Actually, I am a beginner at elastic. I want to use elastic for a music app so we can assume all the possible entities of a music app i.e Spotify. I have a doubt that can we populate from the second index (assume=\> … --- ## [APM not showing all Traces for Reactive Java Framework Service](https://discuss.elastic.co/t/apm-not-showing-all-traces-for-reactive-java-framework-service/280605)
**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\ **Replies:** 1\ **Last updated:** [August 8, 2021, 5:31pm UTC](https://discuss.elastic.co/t/apm-not-showing-all-traces-for-reactive-java-framework-service/280605 "2021-08-08T17:31:56Z")
We have one Java Service which uses Reactive Framework and connects with MongoDB. We added APM Agent with Service then we are not seeing complete tracing in APM. We just get one span(Java Controller API) and no Span for … --- ## [Logstash crashes when I run .bat file from powershell](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245)
**Author:** [@realj4ke](https://discuss.elastic.co/u/realj4ke)\ **Replies:** 4\ **Last updated:** [August 8, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245 "2021-08-08T16:59:05Z")
Below is the error that I get when I try to run logstash after downloading the .zip file from the official website. .\\logstash.bat -f logstash.conf Using JAVA\_HOME defined java: C:\\P… --- ## [Tokenizer works after Synonym (graph) token filter too?](https://discuss.elastic.co/t/tokenizer-works-after-synonym-graph-token-filter-too/280297)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 2\ **Last updated:** [August 8, 2021, 4:21pm UTC](https://discuss.elastic.co/t/tokenizer-works-after-synonym-graph-token-filter-too/280297 "2021-08-08T16:21:36Z")
I'm using Elasticsearch 7.7 on AWS Elasticsearch Service. I thought token filters works after tokenizers and tokenizers do nothing after token filters. (like Tokenizers = \> Token filters =\> END) But it seems tokenizer… --- ## [Can I install ELastic Search twice as a windows service?](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 10\ **Last updated:** [August 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022 "2021-08-08T15:22:00Z")
For reasons that may be uninteresting to many, I find myself needing to run two instances of ElasticSearch on the same Windows machine. I have unzipped the 7.13.4 archive into two separate directories and set them up and… --- ## [Data nodes left cluster](https://discuss.elastic.co/t/data-nodes-left-cluster/280725)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [August 8, 2021, 3:01pm UTC](https://discuss.elastic.co/t/data-nodes-left-cluster/280725 "2021-08-08T15:01:38Z")
Today i noticed that two data nodes left the cluster although disk ,cpu,ram was fine but i can't find the reason in log Currently i am using latest version ELK 7.13.2.I am running 3 master nodes plus 6 data nodes and 2 … --- ## [Detection Rule: Alert when botnet website is accessed](https://discuss.elastic.co/t/detection-rule-alert-when-botnet-website-is-accessed/280733)
**Author:** [@xahmi](https://discuss.elastic.co/u/xahmi)\ **Replies:** 0\ **Last updated:** [August 8, 2021, 2:18pm UTC](https://discuss.elastic.co/t/detection-rule-alert-when-botnet-website-is-accessed/280733 "2021-08-08T14:18:17Z")
Hello, I added a botnet list to Elasticsearch with logstash. I would like to create now an alert when the destination.address = matchs to an entry from my index. How would you do that with detection rules? Kind regard… --- ## [Correct way of configuring metricbeat](https://discuss.elastic.co/t/correct-way-of-configuring-metricbeat/279929)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [August 8, 2021, 10:40am UTC](https://discuss.elastic.co/t/correct-way-of-configuring-metricbeat/279929 "2021-08-08T10:40:46Z")
I am running 11 nodes of elasticsearch cluster which include the following Three master nodes Six data nodes 2 coordinate nodes Earlier i installed and setup metricbeat in all nodes but it leads to consumption of high… --- ## [The external-identities API](https://discuss.elastic.co/t/the-external-identities-api/280696)
**Author:** [@TTCD](https://discuss.elastic.co/u/TTCD)\ **Replies:** 2\ **Last updated:** [August 8, 2021, 2:05am UTC](https://discuss.elastic.co/t/the-external-identities-api/280696 "2021-08-08T02:05:10Z")
Hey everyone, I am trying to set up Workplace Search with SharePoint and OneDrive connectors. I have worked my way through the documentation for each respected product. After getting each set up, I get the notice that s… --- ## [Logstash not seeing updates in logs by spring boot](https://discuss.elastic.co/t/logstash-not-seeing-updates-in-logs-by-spring-boot/280717)
**Author:** [@Kapil\_Soni](https://discuss.elastic.co/u/Kapil_Soni)\ **Replies:** 0\ **Last updated:** [August 7, 2021, 8:58pm UTC](https://discuss.elastic.co/t/logstash-not-seeing-updates-in-logs-by-spring-boot/280717 "2021-08-07T20:58:33Z")
New Logs generated by Spring Boot is not updating in Kibana. Logstash =\> ES =\> Kibana I'm using spring logback.xml with RollingFileAppender & SizeAndTimeBasedRollingPolicy to generate log file. Here is my logstash.con… --- ## [Regexp containing double quotes](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662)
**Author:** [@Olaph](https://discuss.elastic.co/u/Olaph)\ **Replies:** 2\ **Last updated:** [August 7, 2021, 7:12pm UTC](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662 "2021-08-07T19:12:49Z")
Hello, I am trying to search values that contains numbers or numbers in a quotes (no other character types except whitespaces). I was not able to use double-quotes character in character class. I have tried both \\" and… --- ## [Snapshot watcher - when there are more multiple repositories to be watched](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246)
**Author:** [@achybala](https://discuss.elastic.co/u/achybala)\ **Replies:** 7\ **Last updated:** [August 7, 2021, 1:39pm UTC](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246 "2021-08-07T13:39:38Z")
Hi, With the help from multiple discussions in this forum, I'm able to create a watcher to look for any snapshots in 'failed' state in a given snapshot repository. { "trigger": { "schedule": { "interval": "60s" … --- ## [Elasticsearch 7.14 fails to start on Ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-14-fails-to-start-on-ubuntu-20-04/280705)
**Author:** [@theonlycharithperera](https://discuss.elastic.co/u/theonlycharithperera)\ **Replies:** 2\ **Last updated:** [August 7, 2021, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-7-14-fails-to-start-on-ubuntu-20-04/280705 "2021-08-07T11:56:53Z")
When I first installed it using apt-get everything went smoothly and I was able to start it as a service and verified it was working by using curl: Later I noticed that it was using a lot of memory (2GB), so I stopped t… --- ## [Deleted ingest pipeline, doh! - Can't get it Back](https://discuss.elastic.co/t/deleted-ingest-pipeline-doh-cant-get-it-back/280687)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 11\ **Last updated:** [August 7, 2021, 8:27am UTC](https://discuss.elastic.co/t/deleted-ingest-pipeline-doh-cant-get-it-back/280687 "2021-08-07T08:27:52Z")
Hey there, I configured Fleet in the console, installed/enrolled an agent down on my server and configured an integration.. Moments later i got logs and kibana was happy. I'm an idiot and accidently deleted the ingest … --- ## [Kibana startup Fatal error](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669)
**Author:** [@AmirHossein\_Sohrabi](https://discuss.elastic.co/u/AmirHossein_Sohrabi)\ **Replies:** 3\ **Last updated:** [August 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669 "2021-08-07T04:40:37Z")
I'm using an ubuntu 16.04 server on a VM. and installed elasticsearch and kibana both version 7.14. elasticsearch works properly. but when I start the kibana service first it logs running on "systemctl status kibana" … --- ## [How to give hidden file path in input.conf for file input plugin](https://discuss.elastic.co/t/how-to-give-hidden-file-path-in-input-conf-for-file-input-plugin/280617)
**Author:** [@priyankab](https://discuss.elastic.co/u/priyankab)\ **Replies:** 2\ **Last updated:** [August 7, 2021, 3:02am UTC](https://discuss.elastic.co/t/how-to-give-hidden-file-path-in-input-conf-for-file-input-plugin/280617 "2021-08-07T03:02:00Z")
input{ file { exclude =\> "\*.gz" path =\> "/home/abc/work/.productLogs/.auditLogs/.auditLog" type =\> "audit" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" stat\_interval =\> 5 ignore\_older =\> 0 } } --- ## [How do I relate 2 objects with no common field?](https://discuss.elastic.co/t/how-do-i-relate-2-objects-with-no-common-field/280688)
**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 10:13pm UTC](https://discuss.elastic.co/t/how-do-i-relate-2-objects-with-no-common-field/280688 "2021-08-06T22:13:51Z")
Input Data: \* Operating Systems CSVs \* Fields: OperatingSystem, general\_availability, end\_of\_life \* Examples: \* OperatingSystem------ general\_availability------end\_of\_life \* RHEL 7.9----------------------… --- ## [Mapping: How to do your own calculations](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641)
**Author:** [@NoobUser404](https://discuss.elastic.co/u/NoobUser404)\ **Replies:** 2\ **Last updated:** [August 6, 2021, 9:59pm UTC](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641 "2021-08-06T21:59:45Z")
How can we do our own calculations through mappings? I've try this configuration but I get an error: PUT nameIndex/\_mapping { "runtime": { "cpuIndex": { "type": "long", "script": { "source": "e… --- ## [Compress elasticsearch bulkrequest using java high level rest client and bulk processor](https://discuss.elastic.co/t/compress-elasticsearch-bulkrequest-using-java-high-level-rest-client-and-bulk-processor/280425)
**Author:** [@Praveen\_Atluri](https://discuss.elastic.co/u/Praveen_Atluri)\ **Replies:** 7\ **Last updated:** [August 6, 2021, 9:32pm UTC](https://discuss.elastic.co/t/compress-elasticsearch-bulkrequest-using-java-high-level-rest-client-and-bulk-processor/280425 "2021-08-06T21:32:36Z")
Is there anyway to compress the elasticsearch bulk request payload using java high level rest client and bulk processor? I have tried below requestConfigBuilder.setContentCompressionEnabled(true); But it do… --- ## [Elastic search TLS certificate setup, handshake failed. unexpected remote node](https://discuss.elastic.co/t/elastic-search-tls-certificate-setup-handshake-failed-unexpected-remote-node/280684)
**Author:** [@Syed\_Hami](https://discuss.elastic.co/u/Syed_Hami)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 8:59pm UTC](https://discuss.elastic.co/t/elastic-search-tls-certificate-setup-handshake-failed-unexpected-remote-node/280684 "2021-08-06T20:59:00Z")
I am getting this issue : stacktrace": \["org.elasticsearch.transport.ConnectTransportException: \[my-server01\]\[172.17.0.2:9300\] handshake failed. unexpected remote node {my-server02}{C5Yp3aubR9ySTOAYm7txiA}{ZvtLxxD3SU6v… --- ## [Attach a label to ES query so that to distinguish between the multiple responses](https://discuss.elastic.co/t/attach-a-label-to-es-query-so-that-to-distinguish-between-the-multiple-responses/280683)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 2\ **Last updated:** [August 6, 2021, 8:42pm UTC](https://discuss.elastic.co/t/attach-a-label-to-es-query-so-that-to-distinguish-between-the-multiple-responses/280683 "2021-08-06T20:42:51Z")
Hi, I am issuing multiple queries (MultiSearch in python Elasticsearch DSL) for ES index and I need a way to set a label 'type' (which could be one of several values) for each query, so that it would be present in the r… --- ## [Kibana detections doesn't generate signals ( Query Result available at Discover )](https://discuss.elastic.co/t/kibana-detections-doesnt-generate-signals-query-result-available-at-discover/280682)
**Author:** [@soufiane\_adn](https://discuss.elastic.co/u/soufiane_adn)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 7:44pm UTC](https://discuss.elastic.co/t/kibana-detections-doesnt-generate-signals-query-result-available-at-discover/280682 "2021-08-06T19:44:27Z")
Hello Team, any help concerning detection signals. we have result available on discover and rule query created on KIBANA but without any alert generated. on rule creation, we tried Quick query preview and it give us r… --- ## [How to enrich a set of linked documents with a field value from one document?](https://discuss.elastic.co/t/how-to-enrich-a-set-of-linked-documents-with-a-field-value-from-one-document/280673)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 5:12pm UTC](https://discuss.elastic.co/t/how-to-enrich-a-set-of-linked-documents-with-a-field-value-from-one-document/280673 "2021-08-06T17:12:06Z")
I have several log sources (files) that are being ingested by filebeat. There will be several (say, 5-20) log lines that are all linked by a single field (I'll call it the transaction id). In just one of the many logs th… --- ## [Can I pass an array into a plugin through a field](https://discuss.elastic.co/t/can-i-pass-an-array-into-a-plugin-through-a-field/280672)
**Author:** [@R.L](https://discuss.elastic.co/u/R.L)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 4:50pm UTC](https://discuss.elastic.co/t/can-i-pass-an-array-into-a-plugin-through-a-field/280672 "2021-08-06T16:50:48Z")
I am currently writing a custom java plugin for Logstash. One of the input settings is an array. This array might be set in another field within the logstash event. so basically I want to be able to do this: #array\_f… --- ## [Trying to Get Grok Pattern for Error.log](https://discuss.elastic.co/t/trying-to-get-grok-pattern-for-error-log/280670)
**Author:** [@shailesh](https://discuss.elastic.co/u/shailesh)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 4:37pm UTC](https://discuss.elastic.co/t/trying-to-get-grok-pattern-for-error-log/280670 "2021-08-06T16:37:33Z")
Hello Guts - i am trying to write a Grok Pattern for the below log file 20210621.00h02m29s RESPONSE: sent 127.0.0.1 status 502 (Tunnel Connection Failed) for 'xxxx.com:443/ for the above log line i am trying to parse … --- ## [Filebeat stops publishing logs to Kafka without any error message](https://discuss.elastic.co/t/filebeat-stops-publishing-logs-to-kafka-without-any-error-message/280654)
**Author:** [@rribeiro](https://discuss.elastic.co/u/rribeiro)\ **Replies:** 1\ **Last updated:** [August 6, 2021, 4:15pm UTC](https://discuss.elastic.co/t/filebeat-stops-publishing-logs-to-kafka-without-any-error-message/280654 "2021-08-06T16:15:29Z")
Hi, An instance of Filebeat 7.13.0 (running on Openshift) stops publishing logs to Kafka after some time. The source logs are read from a NFS volume and are rotated every 5 minutes (a timestamp is added to the filename… --- ## [Elasticsearch NodeJS client shows inaccessible node as alive](https://discuss.elastic.co/t/elasticsearch-nodejs-client-shows-inaccessible-node-as-alive/280664)
**Author:** [@anishsana](https://discuss.elastic.co/u/anishsana)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 3:21pm UTC](https://discuss.elastic.co/t/elasticsearch-nodejs-client-shows-inaccessible-node-as-alive/280664 "2021-08-06T15:21:20Z")
I have a simple function in NodeJS which creates an Elasticsearch client with a cluster of nodes and returns one of the node URLs that is active: // Elastic cluster nodes const ELASTIC\_CLUSTER\_NODES = \[ 'http://node… --- ## [Performance of Elasticsearch for number of documents vs number of properties in a document](https://discuss.elastic.co/t/performance-of-elasticsearch-for-number-of-documents-vs-number-of-properties-in-a-document/280497)
**Author:** [@firabby](https://discuss.elastic.co/u/firabby)\ **Replies:** 3\ **Last updated:** [August 6, 2021, 3:55pm UTC](https://discuss.elastic.co/t/performance-of-elasticsearch-for-number-of-documents-vs-number-of-properties-in-a-document/280497 "2021-08-06T15:55:50Z")
I want to store timeseries data in elasticsearch. But I am not sure how I should model the document. Let's say, the document looks like this. { "timestamp": "iso 8601 date time", "common\_property1": "value", "common\_pr… --- ## [Kibana not starting up after enabling https (Single node) , seems to be missing credentials?](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 4\ **Last updated:** [August 6, 2021, 3:48pm UTC](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659 "2021-08-06T15:48:32Z")
Hello, I'm using Kibana 7.14 and had enabled https recently . All the services logstash and elasticsearch start up successfully while kibana fails . I had been looking at the kibana logs and they show this {"type":"log… [Previous page](https://discuss.elastic.co/latest.md?page=1536) [Next page](https://discuss.elastic.co/latest.md?page=1538)