# Latest **URL:** https://discuss.elastic.co/latest.md?page=1542 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1543 --- ## [\[LogStash::Runner\] runner - Logstash shut down](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406)
**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 9:29am UTC](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406 "2021-08-04T09:29:16Z")
I am trying to configure http\_poller for logstash. But I've encountered this error. location : /etc/logstash/conf.d/logstash\_http\_poller input { http\_poller { urls =\> {\* urlname =\> "https://randomu… --- ## [SMB as path.repo for snapshotg](https://discuss.elastic.co/t/smb-as-path-repo-for-snapshotg/280346)
**Author:** [@cheapsupps](https://discuss.elastic.co/u/cheapsupps)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 9:28am UTC](https://discuss.elastic.co/t/smb-as-path-repo-for-snapshotg/280346 "2021-08-04T09:28:23Z")
I have pointed the path.repo to my windows smb share. However, this smb share requires username and password. Is there anyway I can add the username and password to the elasticsearch.yml file? I am using docker. --- ## [\[7.10.2\] Querying for "fields" produces HTML entities despite use of "html\_strip"](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348)
**Author:** [@jamesjenkins](https://discuss.elastic.co/u/jamesjenkins)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 9:08am UTC](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348 "2021-08-04T09:08:35Z")
We are currently indexing using this analyzer for our text fields: lowercase\_keyword: { type: 'custom', char\_filter: \['html\_strip'\], tokenizer: 'keyword', filter: \['asciifolding',… --- ## [Differences between light\_spanish and spanish stemmers](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366)
**Author:** [@Daniel\_Rojas](https://discuss.elastic.co/u/Daniel_Rojas)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 9:07am UTC](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366 "2021-08-04T09:07:08Z")
We're using the light\_spanish stemmer, but we've had some issues with some specific words, for example, if I search "papa", it doesn't show results that contain "papas". So, I tested the spanish stemmer, and it solves th… --- ## [Find removed IPs from list in new data](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067)
**Author:** [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:54am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067 "2021-08-04T08:54:07Z")
I have a file containing list of IPs and i want to check in the new data if there is any missing IP. --- ## [Elasticsearch wont start after implementing TLS](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306)
**Author:** [@azxqw](https://discuss.elastic.co/u/azxqw)\ **Replies:** 10\ **Last updated:** [August 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306 "2021-08-04T08:52:13Z")
Hi all, I have a bit of a problem. I implemented TLS im my stack as per the instructions. Hoewever - now elasticsearch wont start, and it's throwing this exception: java.security.NoSuchAlgorithmException: Algorithm Hm… --- ## [Kibana install and run](https://discuss.elastic.co/t/kibana-install-and-run/279534)
**Author:** [@eeeun23](https://discuss.elastic.co/u/eeeun23)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 8:46am UTC](https://discuss.elastic.co/t/kibana-install-and-run/279534 "2021-08-04T08:46:39Z")
After Elasticsearch runs well, an error message appears when running Kibana. "Cannot delete files/directories outside the current working directory. Can be overridden with the force option." So I entered the code. bi… --- ## [What is the version map memory?](https://discuss.elastic.co/t/what-is-the-version-map-memory/280332)
**Author:** [@eyecan](https://discuss.elastic.co/u/eyecan)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 8:46am UTC](https://discuss.elastic.co/t/what-is-the-version-map-memory/280332 "2021-08-04T08:46:36Z")
Hello, In the cluster or node stats API there is a field version\_map\_memory. What is the version map? Thanks! --- ## [Timestamp copy problem with Timezone](https://discuss.elastic.co/t/timestamp-copy-problem-with-timezone/279992)
**Author:** [@Kubix0](https://discuss.elastic.co/u/Kubix0)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 3:31pm UTC](https://discuss.elastic.co/t/timestamp-copy-problem-with-timezone/279992 "2021-07-29T15:31:21Z")
Hey there, my first topic here. Wanted to ask some help because I can´t find a answer/solution for my problem. So, I have a Logstash filter that copy the @timestamp filed to make Timestamp more friendly for elastalert. … --- ## [Table](https://discuss.elastic.co/t/table/280299)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:34am UTC](https://discuss.elastic.co/t/table/280299 "2021-08-04T08:34:38Z")
I would like to remove the value "0" or null from the table. In the table, I have implemented serial difference aggregation but it shows all the value which includes 0 and null. I would like to exclude this. Thank … --- ## [Calculate a new field into new index](https://discuss.elastic.co/t/calculate-a-new-field-into-new-index/280266)
**Author:** [@shifenglim](https://discuss.elastic.co/u/shifenglim)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:12am UTC](https://discuss.elastic.co/t/calculate-a-new-field-into-new-index/280266 "2021-08-04T08:12:43Z")
I am displaying my data in grafana using elasticseach as a datasource and using a plugin there called metaqueries to help do a calculation on elasticsearch's field like: A: queryA B: queryB C: queryC D: (A+B) / C I … --- ## [Edit the max sub buckets in aggregation based | query on multiple indexes](https://discuss.elastic.co/t/edit-the-max-sub-buckets-in-aggregation-based-query-on-multiple-indexes/280285)
**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\ **Replies:** 6\ **Last updated:** [August 4, 2021, 7:53am UTC](https://discuss.elastic.co/t/edit-the-max-sub-buckets-in-aggregation-based-query-on-multiple-indexes/280285 "2021-08-04T07:53:39Z")
Hi, I having 2 questions: 1. I'm trying to create a graph and want more than 3 subbuckets,my steps are as follow: using 'aggregation based ' --\> 'line' --\> choose my index then i choose the X and Y axis and want mor… --- ## [Filebeat sending two logs in nginx module](https://discuss.elastic.co/t/filebeat-sending-two-logs-in-nginx-module/279951)
**Author:** [@boris\_asapov](https://discuss.elastic.co/u/boris_asapov)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 7:43am UTC](https://discuss.elastic.co/t/filebeat-sending-two-logs-in-nginx-module/279951 "2021-08-04T07:43:10Z")
hi all, i've configured nginx module in filebeat , send access log to ELK stack ( logstash ) and its working fine but somehow filebeat sending two logs to logstash instead of one my logstash index is : index =\> "%{\[b… --- ## [Searching with special characters doesn't work](https://discuss.elastic.co/t/searching-with-special-characters-doesnt-work/279631)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 7:31am UTC](https://discuss.elastic.co/t/searching-with-special-characters-doesnt-work/279631 "2021-08-04T07:31:22Z")
For example i created a document with book names: \[ { "book\_name": "newbook@@@1", "author": "jhon doe" }, { "book\_name": "oldbook@@@1\_\_\_2", "author": "jhon dave" } \] And if i search with search query : "@@@" ,… --- ## [Cloudtrail to Logstash automatic roll over on prefix date](https://discuss.elastic.co/t/cloudtrail-to-logstash-automatic-roll-over-on-prefix-date/280376)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 2:19am UTC](https://discuss.elastic.co/t/cloudtrail-to-logstash-automatic-roll-over-on-prefix-date/280376 "2021-08-04T02:19:09Z")
Hi, I am trying to ingest cloudtrail logs to logstash to detect a certain event. I have installed logstash-codec-cloudtrail plugin and was able to ingest cloudtrail logs if i point to a specific folder. Currently i am … --- ## [Refresh in pipeline: output and/or filter](https://discuss.elastic.co/t/refresh-in-pipeline-output-and-or-filter/278044)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 6\ **Last updated:** [August 4, 2021, 6:54am UTC](https://discuss.elastic.co/t/refresh-in-pipeline-output-and-or-filter/278044 "2021-08-04T06:54:33Z")
Hi, in logstash pipeline consecutive documents are consumed from RabbitMQ. Sometimes need to perform lookup on already imported documents via filter-\>elasticsearch-\>query\_template. However, lookup doesn't query the lat… --- ## [How to use ingest pipelines and processors](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-and-processors/279576)
**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\ **Replies:** 10\ **Last updated:** [August 4, 2021, 5:48am UTC](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-and-processors/279576 "2021-08-04T05:48:07Z")
So thankful if someone could help me out. I have synced data from a mongodb to elastic with Monstache. Some of the data is mapped so when I make searches, the presentation of the data is rather messy and unstructured, n… --- ## [Pass 2 values for Kibana drilldown](https://discuss.elastic.co/t/pass-2-values-for-kibana-drilldown/280360)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 4:44am UTC](https://discuss.elastic.co/t/pass-2-values-for-kibana-drilldown/280360 "2021-08-04T04:44:08Z")
Hi all, I'm having a dashboard where for Drilldown, i need to pass 2 field values i.e company id and computer id to drill down into computer of a particular company. But Kibana drilldown only supports 1 value, I'm unab… --- ## [Index files from a folder in GCS bucket using logstash GCS plugin](https://discuss.elastic.co/t/index-files-from-a-folder-in-gcs-bucket-using-logstash-gcs-plugin/280384)
**Author:** [@madhanbaskar](https://discuss.elastic.co/u/madhanbaskar)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 5:12am UTC](https://discuss.elastic.co/t/index-files-from-a-folder-in-gcs-bucket-using-logstash-gcs-plugin/280384 "2021-08-04T05:12:42Z")
Hi, I have a scenario where in the gcs bucket has multiple folders like dev and qa. Now by using logstash GCS plugin I have to read only the files from dev folder and not from qa. How is this possible? The below config… --- ## [Esrally when gave "index": "\_all", it executes search queries on all the indices instead of search only the defined indices](https://discuss.elastic.co/t/esrally-when-gave-index-all-it-executes-search-queries-on-all-the-indices-instead-of-search-only-the-defined-indices/280207)
**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 5:04am UTC](https://discuss.elastic.co/t/esrally-when-gave-index-all-it-executes-search-queries-on-all-the-indices-instead-of-search-only-the-defined-indices/280207 "2021-08-04T05:04:58Z")
I have a requirement to do a simultaneous multiple search query execution in 3 indices . So I defiend them in below track.json and added "index": "\_all", as per the answer of Can't configure multiple indices on which … --- ## [Unable to configure Wildcard certificate in Elasticsearch](https://discuss.elastic.co/t/unable-to-configure-wildcard-certificate-in-elasticsearch/280379)
**Author:** [@Sathish22](https://discuss.elastic.co/u/Sathish22)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 4:56am UTC](https://discuss.elastic.co/t/unable-to-configure-wildcard-certificate-in-elasticsearch/280379 "2021-08-04T04:56:12Z")
Hi Team, We are facing issue replacing wildcard certificate with self-signed certificate, due to below issue. Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadP… --- ## [Number of CPU cores and Number of nodes relationship](https://discuss.elastic.co/t/number-of-cpu-cores-and-number-of-nodes-relationship/280323)
**Author:** [@sourabhsuman](https://discuss.elastic.co/u/sourabhsuman)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 4:42am UTC](https://discuss.elastic.co/t/number-of-cpu-cores-and-number-of-nodes-relationship/280323 "2021-08-04T04:42:21Z")
What is the relation between the number of CPU cores, threads, and node sizing. What is the impact in these two cases allocator HOT of 64 CPU and 512 RAM vs 32 CPU & 256 RAM. The allocator HOT nod count changed from 6 to… --- ## [Records not indexed with Logstash](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124)
**Author:** [@deadloss](https://discuss.elastic.co/u/deadloss)\ **Replies:** 8\ **Last updated:** [August 4, 2021, 4:41am UTC](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124 "2021-08-04T04:41:36Z")
I am facing this issue, the number of events out by elasticsearch output plugin(using logstash monitoring api) is equal to records in csv this means all records in csv are sent to ES but unfortunately the records are alw… --- ## [Description Failed to start elasticSearch source code compiling on Windows](https://discuss.elastic.co/t/description-failed-to-start-elasticsearch-source-code-compiling-on-windows/280177)
**Author:** [@liuliugang](https://discuss.elastic.co/u/liuliugang)\ **Replies:** 8\ **Last updated:** [August 4, 2021, 3:27am UTC](https://discuss.elastic.co/t/description-failed-to-start-elasticsearch-source-code-compiling-on-windows/280177 "2021-08-04T03:27:37Z")
How do I set es.path.conf? Is there a file explaining the setting method of this parameter in the project? Please advise. Thank you IntelliJ IDEA version:2021.1 Elasticsearch version:7.10.0 Jdk version:14.0.2 Gra… --- ## [Rollover Index reaches maximum number](https://discuss.elastic.co/t/rollover-index-reaches-maximum-number/280312)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 3:02am UTC](https://discuss.elastic.co/t/rollover-index-reaches-maximum-number/280312 "2021-08-04T03:02:32Z")
Hello Team I am using Elasticsearch version 7.8.0 I am having Rollover define for my indices. I would like to understand , what will happen if my index reaches maximum numbers : my-index-999999 Will its stop after t… --- ## [Not able to login to Kibana](https://discuss.elastic.co/t/not-able-to-login-to-kibana/280350)
**Author:** [@Harnoor\_Singh](https://discuss.elastic.co/u/Harnoor_Singh)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 2:53am UTC](https://discuss.elastic.co/t/not-able-to-login-to-kibana/280350 "2021-08-04T02:53:49Z")
I restored my elasticsearch and Kibana instance on AWS instance. I had to create all indices and users again. I updated kibana.yml with new user credential to connect to elasticsearch. Yet none of the built in users or n… --- ## [Setting up security and alerting in basic license cluster](https://discuss.elastic.co/t/setting-up-security-and-alerting-in-basic-license-cluster/280296)
**Author:** [@azxqw](https://discuss.elastic.co/u/azxqw)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 2:50am UTC](https://discuss.elastic.co/t/setting-up-security-and-alerting-in-basic-license-cluster/280296 "2021-08-04T02:50:34Z")
Hi I want to enable the security settings to use the alerting capabillites of the stack. What i dont understand from the user guide is this - do i need to do what is told on every node in the cluster? --- ## [Dynamic rollover alias and template name](https://discuss.elastic.co/t/dynamic-rollover-alias-and-template-name/280371)
**Author:** [@tong6462](https://discuss.elastic.co/u/tong6462)\ **Replies:** 6\ **Last updated:** [August 4, 2021, 1:32am UTC](https://discuss.elastic.co/t/dynamic-rollover-alias-and-template-name/280371 "2021-08-04T01:32:57Z")
Hi. Could it be possible to allow using variables in the properties " ilm\_rollover\_alias " as well as " template\_name " in the Elasticsearch output, like we can do with the "index" property? Index lifecycle error ille… --- ## [Kibana can't find the index](https://discuss.elastic.co/t/kibana-cant-find-the-index/280076)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 1:12am UTC](https://discuss.elastic.co/t/kibana-cant-find-the-index/280076 "2021-08-04T01:12:54Z")
I have registered the following index in elasticsearch. # curl --user {usr}:{pw} -X GET http://localhost:9200/\_cat/indices/test-\*?v health status index uuid pri rep docs.count docs.deleted st… --- ## [Metricbeat azure module - Simultaneously fetch multi-dimensional metric values](https://discuss.elastic.co/t/metricbeat-azure-module-simultaneously-fetch-multi-dimensional-metric-values/280326)
**Author:** [@ag\_joeb](https://discuss.elastic.co/u/ag_joeb)\ **Replies:** 0\ **Last updated:** [August 3, 2021, 2:03pm UTC](https://discuss.elastic.co/t/metricbeat-azure-module-simultaneously-fetch-multi-dimensional-metric-values/280326 "2021-08-03T14:03:30Z")
I'm trying to fetch Cosmos DB metrics from azure using metricbeat's azure module. An example: - module: azure metricsets: - monitor enabled: true period: 30s client\_id: '\' client\_secret: '\