# Latest **URL:** https://discuss.elastic.co/latest.md?page=1551 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1552 --- ## [Elastic server](https://discuss.elastic.co/t/elastic-server/279831)
**Author:** [@111479](https://discuss.elastic.co/u/111479)\ **Replies:** 5\ **Last updated:** [July 29, 2021, 8:54am UTC](https://discuss.elastic.co/t/elastic-server/279831 "2021-07-29T08:54:39Z")
Hi, i am want to install an elastic server what are the requirement i need to do it? for exmpale : ram, cpu, operation system? thank you. --- ## [Metricbeat errors due to missing manage permission](https://discuss.elastic.co/t/metricbeat-errors-due-to-missing-manage-permission/279867)
**Author:** [@MaximK](https://discuss.elastic.co/u/MaximK)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 8:49am UTC](https://discuss.elastic.co/t/metricbeat-errors-due-to-missing-manage-permission/279867 "2021-07-29T08:49:13Z")
Metricbeat configured with user elastic I have error org.elasticsearch.ElasticsearchSecurityException: action \[indices:admin/rollover\] is unauthorized for user \[remote\_monitoring\_user\] with roles \[remote\_monitoring\_col… --- ## [No SQL tracing for .net 5](https://discuss.elastic.co/t/no-sql-tracing-for-net-5/279609)
**Author:** [@Danny\_Stommen](https://discuss.elastic.co/u/Danny_Stommen)\ **Replies:** 5\ **Last updated:** [July 29, 2021, 8:27am UTC](https://discuss.elastic.co/t/no-sql-tracing-for-net-5/279609 "2021-07-29T08:27:27Z")
Hi, Basically I'm experiecing the same issue as described here: Which should be fixed here: However, I still don't have any traces for any SQL transaction. Our API is running .NET 5 (inside kubernetes). Elastic.Ap… --- ## [Migration of kibana plugin](https://discuss.elastic.co/t/migration-of-kibana-plugin/279803)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 8:25am UTC](https://discuss.elastic.co/t/migration-of-kibana-plugin/279803 "2021-07-29T08:25:18Z")
We have a kibana plugin generated in version 7.0.1 we want to migrate it to 7.10.2 version . We have some doubts:- Will it possible to directly migrate that plugin to version 7.10.2 or we need to take intermediate step… --- ## [There are no ingest nodes in this cluster, unable to forward request to an ingest node](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/279740)
**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\ **Replies:** 6\ **Last updated:** [July 29, 2021, 8:21am UTC](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/279740 "2021-07-29T08:21:26Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Filebeat autodiscover for Kubernetes uses inconsistent log files path by default](https://discuss.elastic.co/t/filebeat-autodiscover-for-kubernetes-uses-inconsistent-log-files-path-by-default/279834)
**Author:** [@NicolasCa](https://discuss.elastic.co/u/NicolasCa)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 8:10am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-for-kubernetes-uses-inconsistent-log-files-path-by-default/279834 "2021-07-29T08:10:32Z")
Hi, I have trouble when deploying Filebeat in my Kubernetes cluster (v1.21.1) using ECK. The deployment spec is the following: apiVersion: beat.k8s.elastic.co/v1beta1 kind: Beat metadata: name: filebeat spec: type:… --- ## [Filebeat running on Kubernetes connected to Elasticsearch using SSL](https://discuss.elastic.co/t/filebeat-running-on-kubernetes-connected-to-elasticsearch-using-ssl/279946)
**Author:** [@jllorente](https://discuss.elastic.co/u/jllorente)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 7:30am UTC](https://discuss.elastic.co/t/filebeat-running-on-kubernetes-connected-to-elasticsearch-using-ssl/279946 "2021-07-29T07:30:54Z")
I would like to use filebeat on Kubernetes and connect it to a secured Elasticsearch server, using certificates. I did a search to find how to do this but only found an un-answered related question. After some test I go… --- ## [How to output a specific fields of JSON data in logstash](https://discuss.elastic.co/t/how-to-output-a-specific-fields-of-json-data-in-logstash/279944)
**Author:** [@Takky](https://discuss.elastic.co/u/Takky)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 7:28am UTC](https://discuss.elastic.co/t/how-to-output-a-specific-fields-of-json-data-in-logstash/279944 "2021-07-29T07:28:45Z")
I want to know how to select and output some fields from JSON data with many fields. For example, there is the following input JSON data. \[input\] { "layers1": { "field01": { "sample01": "5", "… --- ## [Logstash-paloalto loss of data](https://discuss.elastic.co/t/logstash-paloalto-loss-of-data/279504)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 7:17am UTC](https://discuss.elastic.co/t/logstash-paloalto-loss-of-data/279504 "2021-07-29T07:17:17Z")
Hi evreyone, I'm not sure if I had to post this here or in a paloalto forum. Problem: My logstash take the logs that are coming from paloalto, this type of log have a precise structure explained here : Threat Log Fie… --- ## [Elasticsearch service enabled, vendor disabled issue](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934)
**Author:** [@ritesh.aduri45](https://discuss.elastic.co/u/ritesh.aduri45)\ **Replies:** 3\ **Last updated:** [July 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934 "2021-07-29T06:58:52Z")
\[root@hib-vm-siemlog elasticsearch\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail… --- ## [APM Service Tracing not working as expected](https://discuss.elastic.co/t/apm-service-tracing-not-working-as-expected/279813)
**Author:** [@varunpappu](https://discuss.elastic.co/u/varunpappu)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 5:08am UTC](https://discuss.elastic.co/t/apm-service-tracing-not-working-as-expected/279813 "2021-07-29T05:08:43Z")
\*\*I have set up 6 plus micro-services and running an Ajax request from a static web page on every service. I am able to see the services in the APM module but the service map does not connect all the services together fr… --- ## [Is there any way of restricting access to Kibana based on IP address/subnets?](https://discuss.elastic.co/t/is-there-any-way-of-restricting-access-to-kibana-based-on-ip-address-subnets/279810)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 4\ **Last updated:** [July 29, 2021, 4:45am UTC](https://discuss.elastic.co/t/is-there-any-way-of-restricting-access-to-kibana-based-on-ip-address-subnets/279810 "2021-07-29T04:45:34Z")
Hi all, I know you can restrict access to Elasticsearch nodes using IP filtering. But I believe this does not restrict access to Kibana. Is there a similar mechanism to IP filters for Kibana? The end result we are look… --- ## [Dissect filter sometimes not working](https://discuss.elastic.co/t/dissect-filter-sometimes-not-working/279927)
**Author:** [@jeffrey008](https://discuss.elastic.co/u/jeffrey008)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 4:43am UTC](https://discuss.elastic.co/t/dissect-filter-sometimes-not-working/279927 "2021-07-29T04:43:32Z")
Logstash cannot find the pattern in my log. It sometimes can dissect successfully but sometimes not. \[2021-07-29T04:18:35,253\]\[WARN \]\[org.logstash.dissect.Dissector\]\[main\]\[0b28d6955374719d4eec09ce396e5505f458a3d25e49b40… --- ## [Logstash - Error parsing csv :exception=\>java.lang.ArrayIndexOutOfBoundsException](https://discuss.elastic.co/t/logstash-error-parsing-csv-exception-java-lang-arrayindexoutofboundsexception/279884)
**Author:** [@deadloss](https://discuss.elastic.co/u/deadloss)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 4:41am UTC](https://discuss.elastic.co/t/logstash-error-parsing-csv-exception-java-lang-arrayindexoutofboundsexception/279884 "2021-07-29T04:41:50Z")
I am trying to sync logs from csv, sometimes I get this error \[2021-07-28T14:49:03,857\]\[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"message", :source=\>"M5804240304", :exception=\>java.lang.ArrayIndexOut… --- ## [Invalid zlib data](https://discuss.elastic.co/t/invalid-zlib-data/279823)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 4:26am UTC](https://discuss.elastic.co/t/invalid-zlib-data/279823 "2021-07-29T04:26:26Z")
Hi Team, Getting the following error in Discover in Kibana 7.13.4 - Error: invalid zlib data at search\_interceptor\_EnhancedSearchInterceptor.handleSearchError (https://new-kibana.viapplogs.net/41022/bundles/plu… --- ## [How to display custom metrics of "openTelemetry" by "service.name" ？](https://discuss.elastic.co/t/how-to-display-custom-metrics-of-opentelemetry-by-service-name/279824)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 3:26am UTC](https://discuss.elastic.co/t/how-to-display-custom-metrics-of-opentelemetry-by-service-name/279824 "2021-07-29T03:26:04Z")
I have reported some custom metrics through "openTeletemtry". I would like to be able to customize the data charts in the "metrics" module within "APM".Or is there another way to generate different graphs by different "s… --- ## [Logstash does not create index in Elasticsearch (Windows 10)](https://discuss.elastic.co/t/logstash-does-not-create-index-in-elasticsearch-windows-10/279796)
**Author:** [@Lucas\_Yoshioka](https://discuss.elastic.co/u/Lucas_Yoshioka)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 12:35am UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-in-elasticsearch-windows-10/279796 "2021-07-29T00:35:13Z")
Hi guys, I am trying run ELK, but for some reason Logstash does not create my indexes in Elasticsearch. I installed both and added their /bin path to my environment variables. Here is the conf file I am using: input { … --- ## [Config check, filtering out users](https://discuss.elastic.co/t/config-check-filtering-out-users/279915)
**Author:** [@sancla](https://discuss.elastic.co/u/sancla)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 12:12am UTC](https://discuss.elastic.co/t/config-check-filtering-out-users/279915 "2021-07-29T00:12:05Z")
Hey guys, I'm a bit new to elastic so I can hope a 'specialist' can help me out here. I am trying to filter out some security log records from our Exchange servers and it does not seem to be working. The config is test… --- ## [Updated nodes no longer show up in Kibana monitoring](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776)
**Author:** [@JSieminski](https://discuss.elastic.co/u/JSieminski)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 11:50pm UTC](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776 "2021-07-28T23:50:44Z")
I have a 8 server cluster, with each server running 4 instances of elasticsearch on it (ie.. ELK001, ELK001-a, ELK001-b, ELK001-c). I have started the rolling update process from 7.7 to 7.13.4. After updating ELK001 to 7… --- ## [Kibana query performance](https://discuss.elastic.co/t/kibana-query-performance/279363)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 13\ **Last updated:** [July 28, 2021, 11:46pm UTC](https://discuss.elastic.co/t/kibana-query-performance/279363 "2021-07-28T23:46:53Z")
Hello, I am currently drawing graphs and charts from Kibana, but it takes longer than the time that I started to draw. Compared to the beginning, there are obviously more data, but I am not sure it is still count as slo… --- ## [No logs for this cluster in Stack Monitoring](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850)
**Author:** [@ranvijaysanu](https://discuss.elastic.co/u/ranvijaysanu)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 11:42am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850 "2021-07-28T11:42:10Z")
Hi Team, I have setup elasticsearch, kibana and filebeat. I have configured elasticsearch module using autodiscover based on hints and it is sending logs to the kibana.But In the Stack Monitoring Section under Logs I ca… --- ## [Elasticsearch - refresh config](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904)
**Author:** [@Brian\_Z](https://discuss.elastic.co/u/Brian_Z)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 11:38pm UTC](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904 "2021-07-28T23:38:51Z")
I'm using elastic cloud and I need to configure synonyms. I've done that successfully by uploading a zip file containing a elasticsearch/dictionaries/synonyms.txt file and creating an index that uses them by doing: PUT … --- ## [Alias Index visualization](https://discuss.elastic.co/t/alias-index-visualization/279871)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 11:24pm UTC](https://discuss.elastic.co/t/alias-index-visualization/279871 "2021-07-28T23:24:31Z")
Hi all, I'm wondering if it is possible to visualize data of 2 differently named indices in a single index pattern. For example , i have a1 index and b1 index. I have a\* index pattern. Is it possible to give alias fo… --- ## [Unable to add node to the Elasticsearch cluster](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487)
**Author:** [@Sathiraju\_Eswar](https://discuss.elastic.co/u/Sathiraju_Eswar)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 11:20pm UTC](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487 "2021-07-28T23:20:39Z")
I am newbie to elastic search clustering. I am trying to setup a simple cluster with two nodes(not adviced) for experimental purpose. My nodes are my laptop and my desktop. The master node elastic search configuration : … --- ## [Excluded\_files doesn't seem to work](https://discuss.elastic.co/t/excluded-files-doesnt-seem-to-work/279918)
**Author:** [@prandelicious](https://discuss.elastic.co/u/prandelicious)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 10:32pm UTC](https://discuss.elastic.co/t/excluded-files-doesnt-seem-to-work/279918 "2021-07-28T22:32:07Z")
I used the default excluded\_files example: excluded\_files: - '(?i)\\.sw\[nopx\]$' - ~$ - /\\.git($|/) but it still logs temporary files created by vim like .\.swp or ~\. I also trie… --- ## [How to setup xpack On elasticsearch-oss-6.5.4](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887)
**Author:** [@xujun738](https://discuss.elastic.co/u/xujun738)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 9:45pm UTC](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887 "2021-07-28T21:45:56Z")
How to setup xpack On elasticsearch-oss-6.5.4,before 6.3 ,we can install xpack by the plugin form,after 6.3,it was installed in basic version by default but not in OSS --- ## [Alternatives to the Dev Tools Console](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 8:56pm UTC](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911 "2021-07-28T20:56:07Z")
The Dev Tools Console is nice but very basic. I am trying to find an alternative that retains all the niceties of the Console (e.g auto-highlight, intellisense, etc...), but also provide other features such as ability t… --- ## [Markdown codeblock syntax highlighting](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 8:39pm UTC](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549 "2021-07-28T20:39:55Z")
Is there a way to show syntax highlighting on canvas markdown? Using three backticks then the code like in vscode or right here in this editor as I type this: "\`\`\`sql SELECT \* FROM users \`\`\`\` " Would highlight/bol… --- ## [Filtering syslog message](https://discuss.elastic.co/t/filtering-syslog-message/279877)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/filtering-syslog-message/279877 "2021-07-28T20:18:19Z")
hello, I'm new to ELK and I'm trying to use logstash to consume logs from a syslog server I have, how do I extract the messages that arrive inside the message field? here is a log sample: "\<133\>Jul 28 09:59:11 10.128.x… --- ## [Multiple Pipeline not working](https://discuss.elastic.co/t/multiple-pipeline-not-working/279907)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 8:04pm UTC](https://discuss.elastic.co/t/multiple-pipeline-not-working/279907 "2021-07-28T20:04:01Z")
I'm trying to configure several pipelines, but only the first pipeline is working, below are my configuration files and the latest logstash log messages pipelines.yml: # This file is where you define your pipelines. Yo… [Previous page](https://discuss.elastic.co/latest.md?page=1550) [Next page](https://discuss.elastic.co/latest.md?page=1552)