# Latest **URL:** https://discuss.elastic.co/latest.md?page=1600 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1601 --- ## [Encrypted connection between Logstash and Elasticsearch](https://discuss.elastic.co/t/encrypted-connection-between-logstash-and-elasticsearch/277091)
**Author:** [@manfred](https://discuss.elastic.co/u/manfred)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 4:51am UTC](https://discuss.elastic.co/t/encrypted-connection-between-logstash-and-elasticsearch/277091 "2021-06-28T04:51:32Z")
Hi. How to encrypt communication between Logstash and Elasticsearch DB ? From what I read it uses by default plain HTTP, is there a way to make it HTTPS ? --- ## [Unhealthy kibana instance](https://discuss.elastic.co/t/unhealthy-kibana-instance/276725)
**Author:** [@Ashvin\_Bhutekar](https://discuss.elastic.co/u/Ashvin_Bhutekar)\ **Replies:** 4\ **Last updated:** [June 28, 2021, 3:59am UTC](https://discuss.elastic.co/t/unhealthy-kibana-instance/276725 "2021-06-28T03:59:09Z")
Unhealthy deployment, NO kibana instances are running. I am facing this issue after editing configuration in yml file. I changed edits back to the original configurations but still kibana instance is down. --- ## [How to delete a field completely from an index](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 6\ **Last updated:** [June 28, 2021, 3:43am UTC](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893 "2021-06-28T03:43:45Z")
I created some field in the past for testing. Let's take the "STATISTIC-PROCESS-RUNTIME-HOUR" as an example. So I was able to find a way to remove that field from my index with: POST filebeat-7.13.0-2021.05.26-000001/\_… --- ## [カスタムソースコンテンツおよびドキュメントの取得方法](https://discuss.elastic.co/t/topic/276257)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 2:41am UTC](https://discuss.elastic.co/t/topic/276257 "2021-06-28T02:41:39Z")
私はEnterpriseSearchをオンプレミス環境にインストールし、WorkplaceSearchを利用しています。 一度登録したドキュメントのIDを知るにはどのようにしたらよいでしょうか？ 登録したドキュメントを編集するにはドキュメントIDが必要なようですが、管理者ページから知る術がありません。 実際に、私は下記のURLの例に従って、ドキュメントを登録しました。 管理者ページからはソースコンテンツとして登録したドキュメン… --- ## [In Kibana data is coming at localtime+3 instead of UTC+3](https://discuss.elastic.co/t/in-kibana-data-is-coming-at-localtime-3-instead-of-utc-3/277116)
**Author:** [@Yaniv\_Etrogi](https://discuss.elastic.co/u/Yaniv_Etrogi)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 12:18am UTC](https://discuss.elastic.co/t/in-kibana-data-is-coming-at-localtime-3-instead-of-utc-3/277116 "2021-06-28T00:18:24Z")
My system Ubuntu 18.04 Elastic version 7.12 run on docker PowerShell sending data to Elastic from Windows hosts System is set to UTC+3 Elastic is set to UTC+3 My problem In Kibana data is coming at localtime+3 ins… --- ## [Request error: circuit\_breaking\_exception, \[parent\] Data too large](https://discuss.elastic.co/t/request-error-circuit-breaking-exception-parent-data-too-large/277026)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 1\ **Last updated:** [June 28, 2021, 12:10am UTC](https://discuss.elastic.co/t/request-error-circuit-breaking-exception-parent-data-too-large/277026 "2021-06-28T00:10:50Z")
We are using Elastic Cloud and some times getting this message here. Why does this happen? Is the index to big or is it the instance that is too slow? Request error: circuit\_breaking\_exception, \[parent\] Data too large… --- ## [Kibanaでログイン失敗時のログ取得など、認証系のセキュリティについて](https://discuss.elastic.co/t/kibana/277166)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 0\ **Last updated:** [June 28, 2021, 12:02am UTC](https://discuss.elastic.co/t/kibana/277166 "2021-06-28T00:02:11Z")
Elasticsearch7.8.1＋Kibana7.8.1を使っています。 BasicプランでKibanaのログイン画面で下記セキュリティ系の機能はあるでしょうか？ #1 ログイン失敗時に失敗のログを出力する（できればソースIPなども） #2 連続で何回かログイン失敗した場合は、一定時間アカウントをロックアウトする #3 パスワードの複雑度を設定する。 #1 は有料プランかと思いますが、Basicプランでも代替手段のよ… --- ## [Elastic Data Node leaves the cluster after force merge](https://discuss.elastic.co/t/elastic-data-node-leaves-the-cluster-after-force-merge/276672)
**Author:** [@gdd](https://discuss.elastic.co/u/gdd)\ **Replies:** 4\ **Last updated:** [June 27, 2021, 11:00pm UTC](https://discuss.elastic.co/t/elastic-data-node-leaves-the-cluster-after-force-merge/276672 "2021-06-27T23:00:23Z")
Elasticsearch version 7.3.2, JVM 12.0.2; Heap 15 GB. The machine remains blocked and it's not possible to access by ssh. These the node statististics just before the issue. And these are the system metrics: Anyb… --- ## [Error fetching fields for index pattern filebeat\*](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat/276967)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 5:23pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat/276967 "2021-06-24T17:23:03Z")
hello, i need help with this error that kibana gives me when i create a filebeat index; The error occurs when I create the index pattern in kibana, it generates this ID error, I have tried with another name, but still th… --- ## [Suricata Agent Integration - Unable to grab eve.json](https://discuss.elastic.co/t/suricata-agent-integration-unable-to-grab-eve-json/277076)
**Author:** [@Verax](https://discuss.elastic.co/u/Verax)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 3:00pm UTC](https://discuss.elastic.co/t/suricata-agent-integration-unable-to-grab-eve-json/277076 "2021-06-25T15:00:33Z")
Hello all, I have successfully added the Elastic Agent to my security onion host and it is correctly grabbing the Zeek logs. However, the agent doesn’t seem to be able to pull the Suricata logs even though it was doing … --- ## [Convert text value to IP](https://discuss.elastic.co/t/convert-text-value-to-ip/277146)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 10:27pm UTC](https://discuss.elastic.co/t/convert-text-value-to-ip/277146 "2021-06-27T22:27:14Z")
Hello every body, I am parsing the wallix logs by using the kv plugin kv{ source =\> "syslog\_message" value\_split =\> "=\\"" field\_split =\> "\\"\\s" } As results i get all the output as text as you can see bellow: \> { \>… --- ## [DSL aggregation query in event pair documents for showing in kibana](https://discuss.elastic.co/t/dsl-aggregation-query-in-event-pair-documents-for-showing-in-kibana/277165)
**Author:** [@irajtaghlidi](https://discuss.elastic.co/u/irajtaghlidi)\ **Replies:** 0\ **Last updated:** [June 27, 2021, 10:03pm UTC](https://discuss.elastic.co/t/dsl-aggregation-query-in-event-pair-documents-for-showing-in-kibana/277165 "2021-06-27T22:03:30Z")
I have event document pairs that each one shows the start or end of an event. Every two events have a key with the save value. for example: doc1: { startTime: 123 endTime: 0 buildId: ABC1 (shared ID) } doc2: { … --- ## [Load balancer for multi logstash](https://discuss.elastic.co/t/load-balancer-for-multi-logstash/277071)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 8:16pm UTC](https://discuss.elastic.co/t/load-balancer-for-multi-logstash/277071 "2021-06-27T20:16:17Z")
Hi, We have 2 Logstash servers. I want to put them behind a load balancer and push the data to the logstash over the HTTPS. But now, I am using the HTTP input plugin without a load balancer. Let me show you my HTTPS co… --- ## [XML Logstash](https://discuss.elastic.co/t/xml-logstash/277160)
**Author:** [@leggomyego](https://discuss.elastic.co/u/leggomyego)\ **Replies:** 1\ **Last updated:** [June 27, 2021, 7:21pm UTC](https://discuss.elastic.co/t/xml-logstash/277160 "2021-06-27T19:21:27Z")
Custom fields have been tricky because they are in an array. I can rename them fine and everything, but I am looking for a Ruby answer to my issue. For instance, if the field names are \[test\]\[test\]\[0\]\[test\], \[test\]\[test\]… --- ## [Help with Indexing log with custom time instead of timestamp](https://discuss.elastic.co/t/help-with-indexing-log-with-custom-time-instead-of-timestamp/277126)
**Author:** [@Core\_Sec](https://discuss.elastic.co/u/Core_Sec)\ **Replies:** 6\ **Last updated:** [June 27, 2021, 6:35pm UTC](https://discuss.elastic.co/t/help-with-indexing-log-with-custom-time-instead-of-timestamp/277126 "2021-06-27T18:35:27Z")
Hi everyone I've established ELK with GitHub - deviantony/docker-elk: The Elastic stack (ELK) powered by Docker and Compose. I have log with timestamp included - //{"type":"CustoumLogType","Param1":1,"Param2":1,"Param… --- ## [Create a straight line that is dynamically controlled in a Kibana line graph visualization](https://discuss.elastic.co/t/create-a-straight-line-that-is-dynamically-controlled-in-a-kibana-line-graph-visualization/277139)
**Author:** [@blackberrySherbet](https://discuss.elastic.co/u/blackberrySherbet)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 6:26pm UTC](https://discuss.elastic.co/t/create-a-straight-line-that-is-dynamically-controlled-in-a-kibana-line-graph-visualization/277139 "2021-06-27T18:26:22Z")
Hi, I need to plot a straight line in my line graph. I'm plotting temperature over time. This line would represent the ideal expected temperature. The problem is that this ideal temperature is reevaluated every 12 hour… --- ## [In Kibana data is coming at localtime+3 instead of UTC+3](https://discuss.elastic.co/t/in-kibana-data-is-coming-at-localtime-3-instead-of-utc-3/277117)
**Author:** [@Yaniv\_Etrogi](https://discuss.elastic.co/u/Yaniv_Etrogi)\ **Replies:** 1\ **Last updated:** [June 27, 2021, 5:28pm UTC](https://discuss.elastic.co/t/in-kibana-data-is-coming-at-localtime-3-instead-of-utc-3/277117 "2021-06-27T17:28:08Z")
My system Ubuntu 18.04 Elastic version 7.12 run on docker PowerShell sending data to Elastic from Windows hosts System is set to UTC+3 Elastic is set to UTC+3 My problem In Kibana data is coming at localtime +3 in… --- ## [Field names with dot notation in ES Node.js client](https://discuss.elastic.co/t/field-names-with-dot-notation-in-es-node-js-client/277147)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 1\ **Last updated:** [June 27, 2021, 4:41pm UTC](https://discuss.elastic.co/t/field-names-with-dot-notation-in-es-node-js-client/277147 "2021-06-27T16:41:11Z")
Hi, I'm trying to write a field with dot notation in the body of the Search API in Node.js Client but it doesn't work. The mapping is : "my\_field": { "type":"text", "fields": { "keyword": { "type"… --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/277142)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 2:08pm UTC](https://discuss.elastic.co/t/logstash-error/277142 "2021-06-27T14:08:13Z")
Hello team, I am getting following error on logstash pipeline. can you please help me to identify exact issue. Logstash version: 7.9 C:\\Users\\mangeshsuresh.jadhav\\Downloads\\EKL\\logstash-7.9.0\>bin\\logstash -f wubsprod.… --- ## [Harvester read/write is not working](https://discuss.elastic.co/t/harvester-read-write-is-not-working/277130)
**Author:** [@shankul](https://discuss.elastic.co/u/shankul)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 2:01pm UTC](https://discuss.elastic.co/t/harvester-read-write-is-not-working/277130 "2021-06-27T14:01:10Z")
Hi Team, We are facing some intermittent issues in Kibana logs. While checking we got to know that we are not able to process the filebeat logs and rac is that harvester is not able to write the logs as its only reading… --- ## [ELK + Elastic Security Licensing](https://discuss.elastic.co/t/elk-elastic-security-licensing/277123)
**Author:** [@termcap](https://discuss.elastic.co/u/termcap)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 1:28pm UTC](https://discuss.elastic.co/t/elk-elastic-security-licensing/277123 "2021-06-27T13:28:36Z")
Hi, I would like to know if Elastic Security/Fleet Server/Fleet Management and other features that come with the basic license are free for use for organizations or just for individuals ? I would like to use Elastic Se… --- ## [Multiline parser](https://discuss.elastic.co/t/multiline-parser/277124)
**Author:** [@bz\_Os](https://discuss.elastic.co/u/bz_Os)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 12:29pm UTC](https://discuss.elastic.co/t/multiline-parser/277124 "2021-06-27T12:29:46Z")
Hello, I am glad to joint the elastic stack community, to pars SQL logs I need to put together rows into one: juin 26 13:30:05 sqlpc mysql-slow: SELECT fk.pib, fk.id, fk.idAccount, fk.idVad, fk.somevalue, fk.somevalue… --- ## [Clean install of ES 7.13.2 on Ubuntu 20.04 hangs](https://discuss.elastic.co/t/clean-install-of-es-7-13-2-on-ubuntu-20-04-hangs/276808)
**Author:** [@Roger\_Clark](https://discuss.elastic.co/u/Roger_Clark)\ **Replies:** 6\ **Last updated:** [June 27, 2021, 11:28am UTC](https://discuss.elastic.co/t/clean-install-of-es-7-13-2-on-ubuntu-20-04-hangs/276808 "2021-06-27T11:28:02Z")
I've been trying to test a clean config of ES stack on an Ubuntu VM following Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.13\] | Elastic The system was a clean install to a 4 core 4GB VM on 20.04.2… --- ## [IP address to hostname or FQDN](https://discuss.elastic.co/t/ip-address-to-hostname-or-fqdn/277113)
**Author:** [@mashhoor\_gulati](https://discuss.elastic.co/u/mashhoor_gulati)\ **Replies:** 1\ **Last updated:** [June 27, 2021, 10:06am UTC](https://discuss.elastic.co/t/ip-address-to-hostname-or-fqdn/277113 "2021-06-27T10:06:23Z")
Hi, I'm new to Elastic Security. Network events are logged with destination IP address. Is there any way it can be translated to hostname/FQDN.? Is there any setting can be done for DNS resolution.? I'm currently run… --- ## [Search/Tag Rules with MITRE ATT&CK TTP](https://discuss.elastic.co/t/search-tag-rules-with-mitre-att-ck-ttp/277144)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 0\ **Last updated:** [June 27, 2021, 8:05am UTC](https://discuss.elastic.co/t/search-tag-rules-with-mitre-att-ck-ttp/277144 "2021-06-27T08:05:35Z")
Hi there, Not sure if there is currently a way (else, this will be a suggestion) to search rules according to TTPs. Each rule appears to have at least TTP listed when we click into the rule, but it is not part of the t… --- ## [Logstash twitter plugin parses wrong user id](https://discuss.elastic.co/t/logstash-twitter-plugin-parses-wrong-user-id/277135)
**Author:** [@Lukasz\_Geras](https://discuss.elastic.co/u/Lukasz_Geras)\ **Replies:** 2\ **Last updated:** [June 26, 2021, 9:52pm UTC](https://discuss.elastic.co/t/logstash-twitter-plugin-parses-wrong-user-id/277135 "2021-06-26T21:52:39Z")
Hi, quick question regarding parsing tweets using logstash official plugin. I had a problem parsing tweets, that comes from account other than mine. As you see, using a online converter, I identified my real twitter ID: … --- ## [Logstash not created indexes](https://discuss.elastic.co/t/logstash-not-created-indexes/276277)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 2\ **Last updated:** [June 26, 2021, 9:17pm UTC](https://discuss.elastic.co/t/logstash-not-created-indexes/276277 "2021-06-26T21:17:57Z")
Hi, pls tell me why new indexes not not displayed in Kibana logstash.json: input { file { type =\> "pikautotesttc4" path =\> "C:/Users/bezzbtsev/Desktop/pik2/RTS-PIK/dms-selenium-tests/TestSelenium/bin/Debug/Log… --- ## [Average of Date in visualisation](https://discuss.elastic.co/t/average-of-date-in-visualisation/277031)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 1\ **Last updated:** [June 26, 2021, 6:08pm UTC](https://discuss.elastic.co/t/average-of-date-in-visualisation/277031 "2021-06-26T18:08:08Z")
Hi, I have logs which gives me the time taken from the beginning of the process. From this I'd like to know if i can aggregete theses date and if i can, how to do so. Thanks by advance --- ## [Enhanced Table Plugin line/ word wrap to avoid long string fields extending off screen](https://discuss.elastic.co/t/enhanced-table-plugin-line-word-wrap-to-avoid-long-string-fields-extending-off-screen/277120)
**Author:** [@rak](https://discuss.elastic.co/u/rak)\ **Replies:** 1\ **Last updated:** [June 26, 2021, 6:00pm UTC](https://discuss.elastic.co/t/enhanced-table-plugin-line-word-wrap-to-avoid-long-string-fields-extending-off-screen/277120 "2021-06-26T18:00:43Z")
I have an issue where I have long lines of text extend off the screen causing the need for back and forth scrolling (View picture). Is there a way to have long lines of text line/word wrap so that they are displayed … --- ## [Grok filter](https://discuss.elastic.co/t/grok-filter/276671)
**Author:** [@Sarthak\_Mishra](https://discuss.elastic.co/u/Sarthak_Mishra)\ **Replies:** 13\ **Last updated:** [June 26, 2021, 1:50pm UTC](https://discuss.elastic.co/t/grok-filter/276671 "2021-06-26T13:50:56Z")
Hello, I want to create a grok filter. e.g There is a column in my csv file with all the os system listed windows,ubuntu etc. If there is any typo in the column. I want logstash to create a new field with the name "is\_o… [Previous page](https://discuss.elastic.co/latest.md?page=1599) [Next page](https://discuss.elastic.co/latest.md?page=1601)