# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1573

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1574

---

## [ELK and Outsystems logs](https://discuss.elastic.co/t/elk-and-outsystems-logs/277504)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:31pm UTC](https://discuss.elastic.co/t/elk-and-outsystems-logs/277504 "2021-07-14T16:31:18Z")

</div>

Hi, I am just wondering if anyone has integrated outsystems logs with ELK stack. What is the best approach for this? I have come across logstash accelerators on Github which runs pipelines. But if I am already runnin…

---

## [Logstash email output](https://discuss.elastic.co/t/logstash-email-output/277538)

<div class="topic-metadata">

**Author:** [@Khairul\_Anuar\_bin\_Ab](https://discuss.elastic.co/u/Khairul_Anuar_bin_Ab)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:29pm UTC](https://discuss.elastic.co/t/logstash-email-output/277538 "2021-07-14T16:29:30Z")

</div>

I'm trying to send an email using logstash, however logstash keep sending the same email every minutes. The output configuration as per below. Any ideas what went wrong? output { email { to =\> "zyx@gmail.com" body =\>…

---

## [Logstash running but not listening on input port](https://discuss.elastic.co/t/logstash-running-but-not-listening-on-input-port/277799)

<div class="topic-metadata">

**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:24pm UTC](https://discuss.elastic.co/t/logstash-running-but-not-listening-on-input-port/277799 "2021-07-14T16:24:03Z")

</div>

Hi community, I have a logstash pipeline, It works well when I start the pipeline with command line. But when start as a service , there is no input port listening even the service is running. Please have a look This i…

---

## [Can I crawl intranet web?](https://discuss.elastic.co/t/can-i-crawl-intranet-web/278684)

<div class="topic-metadata">

**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\
**Replies:** 2\
**Last updated:** [July 14, 2021, 4:20pm UTC](https://discuss.elastic.co/t/can-i-crawl-intranet-web/278684 "2021-07-14T16:20:50Z")

</div>

I can crawl external webs but when I tried to crawl a web that is only accessible from my internal net I couldn't do. I far as I've read it seems feasible, right? I've search the web but I couldn't find any post/topic t…

---

## [Why logstash shut down when I use output to log.txt?](https://discuss.elastic.co/t/why-logstash-shut-down-when-i-use-output-to-log-txt/277837)

<div class="topic-metadata">

**Author:** [@111418](https://discuss.elastic.co/u/111418)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:18pm UTC](https://discuss.elastic.co/t/why-logstash-shut-down-when-i-use-output-to-log-txt/277837 "2021-07-14T16:18:06Z")

</div>

I have a log index "log\_index\_0701" and there is about 9000000 logs in this index. I want to output this index log as a txt file but logstash always shut down when I output. Here is my config input{ elasti…

---

## [Winlogbeat failed to connect Logstash server after ssl configuration](https://discuss.elastic.co/t/winlogbeat-failed-to-connect-logstash-server-after-ssl-configuration/278542)

<div class="topic-metadata">

**Author:** [@Rojal\_Paul](https://discuss.elastic.co/u/Rojal_Paul)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/winlogbeat-failed-to-connect-logstash-server-after-ssl-configuration/278542 "2021-07-14T16:09:43Z")

</div>

I iam posting teh photos of my logstash pipeline, and result of winlogbear output when i tried the test, it's refusing the connection. cd ..

---

## [Why ILM is impractical for managing logs / what curator can and cannot do better](https://discuss.elastic.co/t/why-ilm-is-impractical-for-managing-logs-what-curator-can-and-cannot-do-better/276563)

<div class="topic-metadata">

**Author:** [@m.passing](https://discuss.elastic.co/u/m.passing)\
**Replies:** 4\
**Last updated:** [July 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/why-ilm-is-impractical-for-managing-logs-what-curator-can-and-cannot-do-better/276563 "2021-07-14T16:09:29Z")

</div>

In our setup we have been using curator since a long time, but recent features (namely cold nodes with searchable snapshots), are not supported by it. I want to point out the issues we are having with ILM and the workaro…

---

## [Snapshot 문제](https://discuss.elastic.co/t/snapshot/278689)

<div class="topic-metadata">

**Author:** [@mkkang66](https://discuss.elastic.co/u/mkkang66)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 4:04pm UTC](https://discuss.elastic.co/t/snapshot/278689 "2021-07-14T16:04:52Z")

</div>

"Snapshot and Restore"에서 policy를 작성, 수행, 삭제를 몇 건을 반복하고 최종적으로 policy는 삭제했으나 어떤 것이 계속해서 snapshot을 만들고 있음. "Policies"에는 현재 아무것도 없음. Repository는 1개 있음(type:"fs", compression:true, location:"/data2" \<- NAS) 확인할 수 없지만 계속 돌고…

---

## [ILM stalled by waiting for shard to be active](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618)

<div class="topic-metadata">

**Author:** [@AdamZ](https://discuss.elastic.co/u/AdamZ)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 3:26pm UTC](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618 "2021-07-14T15:26:45Z")

</div>

Hello! I have an ILM Policy configured but it stops at rollover phase. I checked one of the indexes with this query: GET /apm-7.10.0-error-000001/\_ilm/explain?human And the response is: { "indices" : { "apm-7.…

---

## [Could a Master node work as a Coordinating only-role?](https://discuss.elastic.co/t/could-a-master-node-work-as-a-coordinating-only-role/278626)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 3:25pm UTC](https://discuss.elastic.co/t/could-a-master-node-work-as-a-coordinating-only-role/278626 "2021-07-14T15:25:35Z")

</div>

hey there, I have an infrastructure composed by 3 MASTER + 3 DATA nodes and every client will communicate only with MASTER nodes. are MASTER nodes acting as a Coordinating or not? To relieve DATA nodes regarding resou…

---

## [Example showing how to best use fuzzy multiterm/phrase matching?](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598)

<div class="topic-metadata">

**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 3:20pm UTC](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598 "2021-07-14T15:20:30Z")

</div>

I'm looking for a complete example showing how you can effectively perform fuzzy phrase matching, to get useful results as a user types text. So far, the closest I've got is splitting the search query string into words …

---

## [Displaying ElasticSearch search results in a table with customizable onClick behavior](https://discuss.elastic.co/t/displaying-elasticsearch-search-results-in-a-table-with-customizable-onclick-behavior/278645)

<div class="topic-metadata">

**Author:** [@Manuel\_Pedro\_Gomez\_C](https://discuss.elastic.co/u/Manuel_Pedro_Gomez_C)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 2:44pm UTC](https://discuss.elastic.co/t/displaying-elasticsearch-search-results-in-a-table-with-customizable-onclick-behavior/278645 "2021-07-14T14:44:12Z")

</div>

Hello! I'm looking to present some aggregated information in the form of tables that do some custom actions when clicked on each row. While I was thinking that the EuiBasicTable component would work for my purposes, I'm…

---

## [How to install specific older version of elasticsearch in Mac OS](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683 "2021-07-14T14:43:38Z")

</div>

Hi all, I'm trying to install Elasticsearch using Homebrew version. I'm trying to install Elasticsearch 7.13.2 version. But when the use the below command, brew install elastic/tap/elasticsearch-full The latest vers…

---

## [Date histogram 6 months interval](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526)

<div class="topic-metadata">

**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\
**Replies:** 6\
**Last updated:** [July 14, 2021, 2:34pm UTC](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526 "2021-07-14T14:34:02Z")

</div>

Hello, I just wonder whether I can draw the vertical bar with 6 months interval. I see that it supports other units but I cannot find an example of having half a year interval. Thank you!

---

## [Invalid SSL cert error when connecting to elasticsearch using DBeaver](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510)

<div class="topic-metadata">

**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510 "2021-07-14T13:46:43Z")

</div>

I have trouble using SSL keystore or truststore to connect to Elasticsearch client using DBeaver. This is an elastic stack on k8s installation on my local machine. I followed the official tutorial to set up a connection …

---

## [Kibana - Count on the data with filter condition is on last data category](https://discuss.elastic.co/t/kibana-count-on-the-data-with-filter-condition-is-on-last-data-category/278642)

<div class="topic-metadata">

**Author:** [@Hoai\_Le](https://discuss.elastic.co/u/Hoai_Le)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-count-on-the-data-with-filter-condition-is-on-last-data-category/278642 "2021-07-14T14:16:47Z")

</div>

Hi all. I am a newbie, I need your help. Let say i have the log like this: 14/Jul/2021:00:00:05 CONTRACT\_NO1 SUCESS content1 14/Jul/2021:00:00:06 CONTRACT\_NO1 SUCESS content2 14/Jul/2021:00:00:07 CONTRACT\_NO2 SUCESS co…

---

## [Index lifecycle policy does not apply to newly created timeseries indexes](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993)

<div class="topic-metadata">

**Author:** [@PMDubuc](https://discuss.elastic.co/u/PMDubuc)\
**Replies:** 17\
**Last updated:** [July 14, 2021, 2:03pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993 "2021-07-14T14:03:21Z")

</div>

I'm using version 7.8.1 of the elastic stack for indexing log files with filebeat into daily logstash-yyyy-mm-dd indexes. I've created an index pattern and template for the indexes and a Logstash\_Index\_Retention policy …

---

## [Get contents of a array list of a document in aggregations](https://discuss.elastic.co/t/get-contents-of-a-array-list-of-a-document-in-aggregations/278674)

<div class="topic-metadata">

**Author:** [@Krishna\_Mohan\_K](https://discuss.elastic.co/u/Krishna_Mohan_K)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 1:59pm UTC](https://discuss.elastic.co/t/get-contents-of-a-array-list-of-a-document-in-aggregations/278674 "2021-07-14T13:59:41Z")

</div>

Hi All, I am new to ES. As a part of document we have dates, type and array objects. I have written an ES query with aggregations to date, type. I am trying to get list of array objects inside type aggregation. Please …

---

## [Kibana suddenly rounding number field to single digit](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 12\
**Last updated:** [July 14, 2021, 1:41pm UTC](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003 "2021-07-14T13:41:16Z")

</div>

Hi All, Apologies in advance as this is likely to be a stupid error on my part but it's got me stumped at the moment. I'm running Elasticsearch and Kibana 7.12 and for some months have been using Logstash to input logg…

---

## [Can you tell me on average what would be the consumption of the agent filebeat?](https://discuss.elastic.co/t/can-you-tell-me-on-average-what-would-be-the-consumption-of-the-agent-filebeat/278669)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 1:37pm UTC](https://discuss.elastic.co/t/can-you-tell-me-on-average-what-would-be-the-consumption-of-the-agent-filebeat/278669 "2021-07-14T13:37:09Z")

</div>

Can you tell me on average what would be the consumption of the agent filebeat? I know it depends on many things, but if there is an indication like this: if it's just a file that generates so many lines per second, the …

---

## [Logstash resarting with error](https://discuss.elastic.co/t/logstash-resarting-with-error/278666)

<div class="topic-metadata">

**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 1:17pm UTC](https://discuss.elastic.co/t/logstash-resarting-with-error/278666 "2021-07-14T13:17:12Z")

</div>

Hey, I have 3 logstash instances running but each gets restarted after a while with this error: \[2021-07-14T14:35:23,972\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>java.lang.IllegalStateEx…

---

## [ERROR Failed to complete action: restore. \<class 'curator.exceptions.FailedExecution'\>: Exception encountered](https://discuss.elastic.co/t/error-failed-to-complete-action-restore-class-curator-exceptions-failedexecution-exception-encountered/278595)

<div class="topic-metadata">

**Author:** [@Es\_P\_T](https://discuss.elastic.co/u/Es_P_T)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/error-failed-to-complete-action-restore-class-curator-exceptions-failedexecution-exception-encountered/278595 "2021-07-14T13:03:30Z")

</div>

Hi ES, Below is my code and I am trying to take a snapshot from one cluster and restore it in different cluster using Elasticsearch Curator. 1: action: restore description: \>- Restore all indi…

---

## [.NET Agent Public API question: user.name?](https://discuss.elastic.co/t/net-agent-public-api-question-user-name/278661)

<div class="topic-metadata">

**Author:** [@DR4296](https://discuss.elastic.co/u/DR4296)\
**Replies:** 1\
**Last updated:** [July 14, 2021, 12:59pm UTC](https://discuss.elastic.co/t/net-agent-public-api-question-user-name/278661 "2021-07-14T12:59:05Z")

</div>

Greetings All I have a Desktop Win32 application that I added Elastic APM logging to a few months back, using the Public API of the .NET Agent. At the time, I added the creation of a Transaction.Labels\["username"\] to r…

---

## [How do I combine fields from 2 different docs (and indices) within Kibana?](https://discuss.elastic.co/t/how-do-i-combine-fields-from-2-different-docs-and-indices-within-kibana/277819)

<div class="topic-metadata">

**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\
**Replies:** 7\
**Last updated:** [July 14, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-do-i-combine-fields-from-2-different-docs-and-indices-within-kibana/277819 "2021-07-14T12:48:03Z")

</div>

Hello, We are trying to get an index with docs combining fields from 2 different (already existing) indices. We tried using the transform, but got an index with both docs, still separate however. We are not sure if we u…

---

## [Index operation rejected with Service Not Available error / Master Node Failed in logs](https://discuss.elastic.co/t/index-operation-rejected-with-service-not-available-error-master-node-failed-in-logs/278657)

<div class="topic-metadata">

**Author:** [@Steve\_Robinson](https://discuss.elastic.co/u/Steve_Robinson)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 12:25pm UTC](https://discuss.elastic.co/t/index-operation-rejected-with-service-not-available-error-master-node-failed-in-logs/278657 "2021-07-14T12:25:09Z")

</div>

We noticed an index op fail with the error: {"ok":false,"message":"The requested resource is currently unavailable."} today. When investigating the server logs during this time, it appears as if the master node in our c…

---

## [Fix x-axis for a stacked bar chart](https://discuss.elastic.co/t/fix-x-axis-for-a-stacked-bar-chart/278216)

<div class="topic-metadata">

**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\
**Replies:** 3\
**Last updated:** [July 14, 2021, 12:09pm UTC](https://discuss.elastic.co/t/fix-x-axis-for-a-stacked-bar-chart/278216 "2021-07-14T12:09:44Z")

</div>

How can I fix my x-axis for a stacked bar chart? please help! i use kibana 7.13.2

---

## [Ignore filter i fnot in index is not working for the TSVB visualisation uniquely in the version 7.13.1](https://discuss.elastic.co/t/ignore-filter-i-fnot-in-index-is-not-working-for-the-tsvb-visualisation-uniquely-in-the-version-7-13-1/278641)

<div class="topic-metadata">

**Author:** [@Marouane\_K](https://discuss.elastic.co/u/Marouane_K)\
**Replies:** 4\
**Last updated:** [July 14, 2021, 12:03pm UTC](https://discuss.elastic.co/t/ignore-filter-i-fnot-in-index-is-not-working-for-the-tsvb-visualisation-uniquely-in-the-version-7-13-1/278641 "2021-07-14T12:03:54Z")

</div>

I filtred on a field that is not present in a tsvb visualisation (Metric) All visualisations in the dashboard responded appropriately (kept showing data even they don't have the filtered field ) but the tsvb visualisat…

---

## [Filebeat fails to process kibana json logs “failed to format message from \*json-.log “in a docker enviroment with logstash](https://discuss.elastic.co/t/filebeat-fails-to-process-kibana-json-logs-failed-to-format-message-from-json-log-in-a-docker-enviroment-with-logstash/278295)

<div class="topic-metadata">

**Author:** [@Annette1](https://discuss.elastic.co/u/Annette1)\
**Replies:** 7\
**Last updated:** [July 14, 2021, 11:40am UTC](https://discuss.elastic.co/t/filebeat-fails-to-process-kibana-json-logs-failed-to-format-message-from-json-log-in-a-docker-enviroment-with-logstash/278295 "2021-07-14T11:40:32Z")

</div>

Problem description - since I have installed logstash I am seeing the following in kibana logs - failed to format message from /var/lib/docker/.containers/xxx-json.log If I remove logstash and send directly through ela…

---

## [Reconciliation between two index data in Kibana visualisation in realtime](https://discuss.elastic.co/t/reconciliation-between-two-index-data-in-kibana-visualisation-in-realtime/277775)

<div class="topic-metadata">

**Author:** [@amar.molaka](https://discuss.elastic.co/u/amar.molaka)\
**Replies:** 2\
**Last updated:** [July 14, 2021, 11:18am UTC](https://discuss.elastic.co/t/reconciliation-between-two-index-data-in-kibana-visualisation-in-realtime/277775 "2021-07-14T11:18:43Z")

</div>

I have a requirement to perform reconciliation / join between 2 indexes. Say, Person A ( index A ) has Cars AAA, BBB, CCC, DDD Person B ( index B ) has Cars BBB, EEE We wanted to build a widget ( pie chart / table ) …

---

## [From parameter in delete by query API](https://discuss.elastic.co/t/from-parameter-in-delete-by-query-api/278636)

<div class="topic-metadata">

**Author:** [@Sourav\_Patra](https://discuss.elastic.co/u/Sourav_Patra)\
**Replies:** 0\
**Last updated:** [July 14, 2021, 10:02am UTC](https://discuss.elastic.co/t/from-parameter-in-delete-by-query-api/278636 "2021-07-14T10:02:19Z")

</div>

I am trying to use the \[delete\_by\_query\](https://www.elastic.co/guide/en/elasticsearch/reference/7.x/docs-delete-by-query.html) API to keep a maximum of 5 documents for a user that are most recent. I am using the sort pa…

[Previous page](https://discuss.elastic.co/latest.md?page=1572)

[Next page](https://discuss.elastic.co/latest.md?page=1574)
