# Latest **URL:** https://discuss.elastic.co/latest.md?page=1572 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1573 --- ## [Communication issue between beats and logstash](https://discuss.elastic.co/t/communication-issue-between-beats-and-logstash/278748)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 7:03am UTC](https://discuss.elastic.co/t/communication-issue-between-beats-and-logstash/278748 "2021-07-15T07:03:52Z")
We had deployed ECK:1.3.0 and deployed elasticsearch, kibana (7.9.0) and filebeat (7.9.2) . we had given file beat configuration as below: Note: here we are deploying filebeat as a daemon set. # Filebeat apiVersion: be… --- ## [How does the "jaeger client" data access "APM" via "OpenTelemetry"?](https://discuss.elastic.co/t/how-does-the-jaeger-client-data-access-apm-via-opentelemetry/278375)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 6:47am UTC](https://discuss.elastic.co/t/how-does-the-jaeger-client-data-access-apm-via-opentelemetry/278375 "2021-07-15T06:47:37Z")
APM Server version 7.13.2 elasticSearch: 7.13.2 kibana: 7.13.2 Questions: 1.The error rate module in the Overview screen shows "No data to display", and the "Error rate" in the Transactions screen is N/A. How do I set … --- ## [Kibana array of objects visibility after \_source field deprecation](https://discuss.elastic.co/t/kibana-array-of-objects-visibility-after-source-field-deprecation/278143)
**Author:** [@israelst](https://discuss.elastic.co/u/israelst)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 6:43am UTC](https://discuss.elastic.co/t/kibana-array-of-objects-visibility-after-source-field-deprecation/278143 "2021-07-15T06:43:16Z")
Since Kibana 7.12 - the "\_source" field is no longer used by default in favor of the new field API. This totally broke our ability to view array of objects in Discover. What used to be shown as JSON, is now being flatte… --- ## [High Search Rejected](https://discuss.elastic.co/t/high-search-rejected/278700)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 6:09am UTC](https://discuss.elastic.co/t/high-search-rejected/278700 "2021-07-15T06:09:00Z")
Hi, My ELasticsearch thread pool search has very high rejected ration. I have sufficient 72 CPU nodes. node\_name name active queue rejected ES10 search 7 0 22703 ES07 search 0 0 0 … --- ## [Kibana Reporting - How to Get POST URL of a Dashboard Programatically?](https://discuss.elastic.co/t/kibana-reporting-how-to-get-post-url-of-a-dashboard-programatically/278625)
**Author:** [@peteryann](https://discuss.elastic.co/u/peteryann)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 6:12am UTC](https://discuss.elastic.co/t/kibana-reporting-how-to-get-post-url-of-a-dashboard-programatically/278625 "2021-07-15T06:12:00Z")
Is there a way to programmatically retrieve the POST URL of dashboards? I could not find any reference on Automating Report Generation. My scenario: Retrieve all my dashboards via the REST API using /api/saved\_object… --- ## [How to login screen change in kibana 7.13.0?](https://discuss.elastic.co/t/how-to-login-screen-change-in-kibana-7-13-0/274950)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 6:03am UTC](https://discuss.elastic.co/t/how-to-login-screen-change-in-kibana-7-13-0/274950 "2021-07-15T06:03:01Z")
how to login screen change in kibana 7.13.0? I tried following the above link 7.10.0 guide, but I couldn't change the elastic logo on the login page. How can I change the login page screen logo? I would appreciate i… --- ## [Unable to load kibana dash board](https://discuss.elastic.co/t/unable-to-load-kibana-dash-board/278737)
**Author:** [@Sachin\_05](https://discuss.elastic.co/u/Sachin_05)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 5:58am UTC](https://discuss.elastic.co/t/unable-to-load-kibana-dash-board/278737 "2021-07-15T05:58:39Z")
Hi I am getting the below error while loading the kibana dashboard could someone please help me resolve this. Loading index pattern filebeat-: {"\_index":".kibana\_7.13.3\_001","\_type":"index-pattern","\_id":"filebeat-","f… --- ## [Kibana cannot connect to ES cluster - Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-cannot-connect-to-es-cluster-unable-to-retrieve-version-information-from-elasticsearch-nodes/278185)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 5:50am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-es-cluster-unable-to-retrieve-version-information-from-elasticsearch-nodes/278185 "2021-07-15T05:50:36Z")
Kibana and ES version: 7.13.2 I am running cluster of 5 nodes (3 ES data & master nodes and 2 coordinating nodes) and one Kibana. Whole cluster is running in docker swarm on the same network. My ES cluster works fine, I… --- ## [org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/278411)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 5:10am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/278411 "2021-07-15T05:10:21Z")
org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed It is said that all shards fail, what is happening? The index in question shows that the health was green. What do I need to do to avoid… --- ## [Logstash restarts with "ConcurrentModificationException"](https://discuss.elastic.co/t/logstash-restarts-with-concurrentmodificationexception/278738)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 5:03am UTC](https://discuss.elastic.co/t/logstash-restarts-with-concurrentmodificationexception/278738 "2021-07-15T05:03:20Z")
Hi, I have an issue with logstash restarting itself showing “ConcurrentModificationException“ error before stoping and starting again, does anyone have any idea what it might be about? --- ## [Error opening file for writing on windows 10](https://discuss.elastic.co/t/error-opening-file-for-writing-on-windows-10/278619)
**Author:** [@Johnsprenger](https://discuss.elastic.co/u/Johnsprenger)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 4:39am UTC](https://discuss.elastic.co/t/error-opening-file-for-writing-on-windows-10/278619 "2021-07-15T04:39:56Z")
Hello friends. I can't install elastic on my Windows 10 computer. Just showing “error opening file for writing” error. I don't understand why this error is showing and how to solve this problem. Any suggestions will be a… --- ## [413 Request Entity Too Large - metricbeat error on elected MASTER node](https://discuss.elastic.co/t/413-request-entity-too-large-metricbeat-error-on-elected-master-node/278732)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 3:46am UTC](https://discuss.elastic.co/t/413-request-entity-too-large-metricbeat-error-on-elected-master-node/278732 "2021-07-15T03:46:27Z")
Is there a limitation that metricbeat can collect from the elected MASTER node? I have 300 data nodes with metricbeats having no issue running but when it comes to the collecting metrics from the elected MASTER, i encou… --- ## [Display log.level](https://discuss.elastic.co/t/display-log-level/278501)
**Author:** [@yango](https://discuss.elastic.co/u/yango)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 3:34am UTC](https://discuss.elastic.co/t/display-log-level/278501 "2021-07-15T03:34:10Z")
Is there any way to display log.level field in kibana while using filebeat/auditbeat? --- ## [Error when restart logstash LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError](https://discuss.elastic.co/t/error-when-restart-logstash-logstash-hostunreachableerror/278687)
**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 2:36am UTC](https://discuss.elastic.co/t/error-when-restart-logstash-logstash-hostunreachableerror/278687 "2021-07-15T02:36:45Z")
Hello I install Logstash in Ubuntu 18. After changed ip from 192.168.186.147 to 192.168.186.157 I also fixed the .yml and conf.d but it's cant restart with error. /var/log/logstash/logstash-plain.log \[2021-07-14T22:18… --- ## [Attempted to send a bulk request to elasticsearch, but no there are no living connections in the connection pool](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool/277307)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 1:50am UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-no-there-are-no-living-connections-in-the-connection-pool/277307 "2021-07-15T01:50:43Z")
I am getting the following error in the log of logstash. $ tail /var/log/logstash/logstash-plain.log \[2021-06-29T01:17:53,584\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[9acc851acb29a066b989c90cdd9ba461ce676a2f7643e20… --- ## [Kibana Scatter Plot Graph - Lines in the middle](https://discuss.elastic.co/t/kibana-scatter-plot-graph-lines-in-the-middle/277887)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 10:58pm UTC](https://discuss.elastic.co/t/kibana-scatter-plot-graph-lines-in-the-middle/277887 "2021-07-14T22:58:19Z")
Hi All, I'm trying to draw 2 black lines in a cross manner right in the middle of the graph. Any suggestions? I'll post a snap and the code below. { "$schema": "https://vega.github.io/schema/vega-lite/v5.json", … --- ## [Must\_not with an exception](https://discuss.elastic.co/t/must-not-with-an-exception/278301)
**Author:** [@bcam135](https://discuss.elastic.co/u/bcam135)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 9:05pm UTC](https://discuss.elastic.co/t/must-not-with-an-exception/278301 "2021-07-14T21:05:55Z")
In basic terms, I have a current kibana alert and the query is set up to exclude all systems that have 800-999 in the hostname with the extraction query code below. That works fine. However, I would I would like to exc… --- ## [Problem with strigo for Metrics Fundamentals](https://discuss.elastic.co/t/problem-with-strigo-for-metrics-fundamentals/278710)
**Author:** [@Jack\_Shirazi](https://discuss.elastic.co/u/Jack_Shirazi)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 8:35pm UTC](https://discuss.elastic.co/t/problem-with-strigo-for-metrics-fundamentals/278710 "2021-07-14T20:35:30Z")
--- ## ["name" field](https://discuss.elastic.co/t/name-field/278713)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 8:30pm UTC](https://discuss.elastic.co/t/name-field/278713 "2021-07-14T20:30:41Z")
Hey, just wondering if I can use the "name" field in grok patterns. when I use it, the error appears to be like this: \["Error"\], "id"=\>"692aaaf9cd6aedfa9e73788106ef94fc1d968d10a1586c197812a6e14d84010a"}\]=\>\[{"thread\_id"=\>… --- ## [Environment setup for modifying logstash plugin](https://discuss.elastic.co/t/environment-setup-for-modifying-logstash-plugin/278712)
**Author:** [@pjohnson](https://discuss.elastic.co/u/pjohnson)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 7:52pm UTC](https://discuss.elastic.co/t/environment-setup-for-modifying-logstash-plugin/278712 "2021-07-14T19:52:47Z")
Is there a tutorial for setting up your environment for modifying an existing logstash ruby plugin i.e. what version of java to use, jruby to use, how to install jars etc. How to write a Logstash output plugin | Logstash… --- ## [Filter Visualizations on a Dashboard using the default time range (dashboard upper right corner) on filter conditions using fields other than index pattern primary time field](https://discuss.elastic.co/t/filter-visualizations-on-a-dashboard-using-the-default-time-range-dashboard-upper-right-corner-on-filter-conditions-using-fields-other-than-index-pattern-primary-time-field/278209)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 7:48pm UTC](https://discuss.elastic.co/t/filter-visualizations-on-a-dashboard-using-the-default-time-range-dashboard-upper-right-corner-on-filter-conditions-using-fields-other-than-index-pattern-primary-time-field/278209 "2021-07-14T19:48:24Z")
Hi, is it possible to have a multiple "Time Field" index pattern ?. I would like to use the default time filter in a dashboard to filter dynamically 3 visualizations this way: Index pattern time field = field1\* Dashbo… --- ## [Elasticsearch Query DSL help need to sort on timestamp](https://discuss.elastic.co/t/elasticsearch-query-dsl-help-need-to-sort-on-timestamp/278634)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 7:02pm UTC](https://discuss.elastic.co/t/elasticsearch-query-dsl-help-need-to-sort-on-timestamp/278634 "2021-07-14T19:02:07Z")
i need your Help Expertes, i need to update this query to be able to get the result filtered on Prim\_id alphabetic and timestamp ascending, each Prim\_id is present in a log-event sorted on timestamp (log time). i mean ,… --- ## [Creating external case from Elastic to XSOAR](https://discuss.elastic.co/t/creating-external-case-from-elastic-to-xsoar/278354)
**Author:** [@randomguyneedhelp](https://discuss.elastic.co/u/randomguyneedhelp)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 6:53pm UTC](https://discuss.elastic.co/t/creating-external-case-from-elastic-to-xsoar/278354 "2021-07-14T18:53:21Z")
Hi, I will like to know if there are such integration between Elastic and XSOAR. Understand there are integrations for such functions with ServiceNow, JIRA and IBM Resilient, however I am trying to make use Cortex XSOAR… --- ## [Adding MS Teams connector to an alert](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 6:47pm UTC](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462 "2021-07-14T18:47:40Z")
I was able to create a connector of type Microsoft Teams. I expected to find documentation for how to configure a watcher where the action would be "teams" or something. The only thing I have found is for Webhook action W… --- ## [Scripted fields: Coalesce](https://discuss.elastic.co/t/scripted-fields-coalesce/278515)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 6:46pm UTC](https://discuss.elastic.co/t/scripted-fields-coalesce/278515 "2021-07-14T18:46:47Z")
Hello!!! i want to write a scripted fields that do the following calculation. how should i do it. Procuser = coalesce (ProcUserExpanded, ProcUser) --- ## [Rules export in excel and exception search under rule](https://discuss.elastic.co/t/rules-export-in-excel-and-exception-search-under-rule/278703)
**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 6:29pm UTC](https://discuss.elastic.co/t/rules-export-in-excel-and-exception-search-under-rule/278703 "2021-07-14T18:29:08Z")
is there a way to download all elastic rules into excel and also exceptions under each rule into excel from ealsticsearch Also how to use search option under exceptions? --- ## [Need Help : To Parse XML and Json data received via TCP syslog in logstash](https://discuss.elastic.co/t/need-help-to-parse-xml-and-json-data-received-via-tcp-syslog-in-logstash/278650)
**Author:** [@Shruti\_Gupta](https://discuss.elastic.co/u/Shruti_Gupta)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 5:45pm UTC](https://discuss.elastic.co/t/need-help-to-parse-xml-and-json-data-received-via-tcp-syslog-in-logstash/278650 "2021-07-14T17:45:43Z")
I am receiving google apigee logs in syslog at 5444 port. Logs are being generating via multiple applications and format is also different like XML and Json. Need help how can we configure logstash.conf to parse both ty… --- ## [Logstash crashing](https://discuss.elastic.co/t/logstash-crashing/278590)
**Author:** [@cdhgold](https://discuss.elastic.co/u/cdhgold)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 5:28pm UTC](https://discuss.elastic.co/t/logstash-crashing/278590 "2021-07-14T17:28:19Z")
I'm using OSS version 7.10 of both filebeat and logstash on RHEL 7.3 Elastisearch "destination" is a Elastisearch 7.10 AWS Elastisearch domain I can run a curl and insert data into the AWS ES however logstash keeps cra… --- ## [Is it possible to pass variables from init to script\_params?](https://discuss.elastic.co/t/is-it-possible-to-pass-variables-from-init-to-script-params/278680)
**Author:** [@davidpellerin](https://discuss.elastic.co/u/davidpellerin)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-variables-from-init-to-script-params/278680 "2021-07-14T16:45:28Z")
Just wondering if it's possible to pass along variables from the "init" section of the Ruby filter plugin to the script\_params? In my case the data I am looking up is something I only want to do once: ruby { init =\>… --- ## [Connection refused port 5044](https://discuss.elastic.co/t/connection-refused-port-5044/277149)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:35pm UTC](https://discuss.elastic.co/t/connection-refused-port-5044/277149 "2021-07-14T16:35:43Z")
Hi, When i want to validate the logstash server certificate with this command : curl -v --cacert /etc/logstash/config/certs/logstash.crt https://logstash.ad-it.fr:5044 Rebuilt URL to: https://192.168.1.30:5044/ \* Try… [Previous page](https://discuss.elastic.co/latest.md?page=1571) [Next page](https://discuss.elastic.co/latest.md?page=1573)