# Latest **URL:** https://discuss.elastic.co/latest.md?page=1609 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1610 --- ## [Data table PDF Report generation using watcher](https://discuss.elastic.co/t/data-table-pdf-report-generation-using-watcher/276517)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 5:17pm UTC](https://discuss.elastic.co/t/data-table-pdf-report-generation-using-watcher/276517 "2021-06-22T17:17:46Z")
Hello Everyone, I am trying to generate a PDF report to send an email with data table visualization which contains more than 700 rows and 12 columns. To see all the lines in the PDF report I have updated the "Per Page" … --- ## [Logstash error and MetricBeat stopped](https://discuss.elastic.co/t/logstash-error-and-metricbeat-stopped/276398)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 4:49pm UTC](https://discuss.elastic.co/t/logstash-error-and-metricbeat-stopped/276398 "2021-06-22T16:49:15Z")
I noticed yesterday that my Metricbeat service had stopped running on the Windows test box I have. When I start Logstash I receive the below information. \[2021-06-18T10:28:12,009\]\[WARN \]\[logstash.outputs.elasticsearch\]… --- ## [Getting an error while installing logstash websocket plugin](https://discuss.elastic.co/t/getting-an-error-while-installing-logstash-websocket-plugin/276618)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 4:37pm UTC](https://discuss.elastic.co/t/getting-an-error-while-installing-logstash-websocket-plugin/276618 "2021-06-22T16:37:10Z")
i want to install logstash websocket pluginto make a real-time communication between Elasticsearch and Logstash, through a websocket.\`this is the error that i get while installing ERROR: Installation Aborted, message: B… --- ## [Elasticsearch Python not raising error when no hits and several shards have failed](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679)
**Author:** [@mcdecoderdude](https://discuss.elastic.co/u/mcdecoderdude)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 4:36pm UTC](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679 "2021-06-22T16:36:31Z")
Elasticsearch python library is not raising error when no hits and several shards have failed. Since there are no hits being returned the error handing is not being called after the hits are yielded. This is in the scan … --- ## [Define APM permission for services](https://discuss.elastic.co/t/define-apm-permission-for-services/276663)
**Author:** [@ggio](https://discuss.elastic.co/u/ggio)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 4:05pm UTC](https://discuss.elastic.co/t/define-apm-permission-for-services/276663 "2021-06-22T16:05:13Z")
Hi, I have an ELK cluster with APM server installed. The entire stack is updated to latest version(7.13.2 right now) As far as now, my users can access to APM data through Kibana and they are able to see all applicatio… --- ## [How to create View only user in Kibana for dashboard and logs](https://discuss.elastic.co/t/how-to-create-view-only-user-in-kibana-for-dashboard-and-logs/276230)
**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 4:01pm UTC](https://discuss.elastic.co/t/how-to-create-view-only-user-in-kibana-for-dashboard-and-logs/276230 "2021-06-22T16:01:30Z")
hi all, I'm using elk cloud,now I created user but i see that the kibana\_dashboard\_only\_user ,kibana\_user is deprecated I need to be able to create user that can only view the logs and dashboard. Only admin should be … --- ## [How to query n-gram completions that match phrase prefix?](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 3:17pm UTC](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607 "2021-06-22T15:17:02Z")
How can I query my index to suggest phrases that complete the user's query? I'd like a query similar to match\_phrase\_prefix , except instead of retrieving the entire doc it returns n-grams from the doc fields that comple… --- ## [Searching by \_id returns different results when the search is repeated](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 3:06pm UTC](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577 "2021-06-22T15:06:38Z")
I'm on ES 6.8, with a 3 node cluster, and the status is green. First of all, I'm aware that I can Get by ID, but for this scenario, I am searching by ID. My question is.... Is this a bug, or just a quirk of how distrib… --- ## [Not able to connect OneDrive source](https://discuss.elastic.co/t/not-able-to-connect-onedrive-source/276205)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 6\ **Last updated:** [June 22, 2021, 2:51pm UTC](https://discuss.elastic.co/t/not-able-to-connect-onedrive-source/276205 "2021-06-22T14:51:03Z")
After i created the application in my azure portal, take the credentials and everything i need as suggested by this documentation: Connecting OneDrive | Workplace Search Guide \[7.13\] | Elastic Im founding myself withou… --- ## [Error while installing offline Elasticsearch 7.12](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659)
**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659 "2021-06-22T14:14:33Z")
Hi everyone. I'm trying to install Elasticsearch 7.12.1 on a server for a customer. The OS is Ubuntu Server 9.3.0-17 aka 20.04 (the LTS one). OpenJDK 16 included. This server is offline so I downloaded the deb packag… --- ## [Multi Metric Watcher won't trigger Action even though condition is met](https://discuss.elastic.co/t/multi-metric-watcher-wont-trigger-action-even-though-condition-is-met/276474)
**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\ **Replies:** 8\ **Last updated:** [June 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/multi-metric-watcher-wont-trigger-action-even-though-condition-is-met/276474 "2021-06-22T14:14:06Z")
Hello guys, Hope you are all doing great - need some assistance on this issue i am experiencing where when i try to Simulate this watcher - it won't trigger the "action" it just leaves action blank as if conditions were… --- ## [Geojson map does not load to elastic index](https://discuss.elastic.co/t/geojson-map-does-not-load-to-elastic-index/276512)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 2:12pm UTC](https://discuss.elastic.co/t/geojson-map-does-not-load-to-elastic-index/276512 "2021-06-22T14:12:03Z")
Hey, I'm trying to load a geojson map to an index through the use of 'Maps' in Kibana, and it works for me in one cluster but does not work in the other. The loading of the file to the index does not come to an end and… --- ## [Labels missing from Namespace definition in 1.6.0](https://discuss.elastic.co/t/labels-missing-from-namespace-definition-in-1-6-0/276631)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 12:58pm UTC](https://discuss.elastic.co/t/labels-missing-from-namespace-definition-in-1-6-0/276631 "2021-06-22T12:58:11Z")
The Namespace definition in 1.5.0 is the following: # Source: eck-operator/templates/operator-namespace.yaml apiVersion: v1 kind: Namespace metadata: name: elastic-system labels: name: elastic-system control… --- ## [Log stoppage alert using Machine learning in ELK 7.12](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105 "2021-06-22T14:02:06Z")
Hi, Please help to create a log stoppage alert for critical devices using machine learning. For example: Index "A" contains 10 Active directory server logs. Need to generate an email alert if Elasticsearch stop receiv… --- ## [Web crawler not extracting custom fields](https://discuss.elastic.co/t/web-crawler-not-extracting-custom-fields/274070)
**Author:** [@Richard\_Sudworth](https://discuss.elastic.co/u/Richard_Sudworth)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 1:59pm UTC](https://discuss.elastic.co/t/web-crawler-not-extracting-custom-fields/274070 "2021-06-22T13:59:18Z")
I'm following the instructions at Web crawler reference | Elastic App Search Documentation \[8.4\] | Elastic to get some custom fields crawled on our site, but they are not being picked up. I initially deployed with data-s… --- ## [Math operation after aggregation in kibana while using scripted fields](https://discuss.elastic.co/t/math-operation-after-aggregation-in-kibana-while-using-scripted-fields/276602)
**Author:** [@shailendra](https://discuss.elastic.co/u/shailendra)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 1:56pm UTC](https://discuss.elastic.co/t/math-operation-after-aggregation-in-kibana-while-using-scripted-fields/276602 "2021-06-22T13:56:16Z")
Hi Everyone, I have two scripted fields in my kibana index pattern, let's say "scripted field1" and "scripted field2". Now I wanted to display sum(scripted field1)/sum(scripted field2) in my visualisation. This kind o… --- ## [ML DataFrame Analytic Job on static/stream data Index](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 1:51pm UTC](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905 "2021-06-22T13:51:26Z")
Is it possible to run a ML analytic job on an index that has static data or streaming data? --- ## [Rolling to 7.13](https://discuss.elastic.co/t/rolling-to-7-13/276165)
**Author:** [@geomario](https://discuss.elastic.co/u/geomario)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 1:45pm UTC](https://discuss.elastic.co/t/rolling-to-7-13/276165 "2021-06-22T13:45:31Z")
Hola, I am pretty new to ElasticSearch. I am trying to upgrade my node from 7.6 to 7.13. It happened that when I run my new node with 7.13, the console throws a mistake. I have searched without success on how to solve i… --- ## [Winlogbeat Services v. Command Line Implementation](https://discuss.elastic.co/t/winlogbeat-services-v-command-line-implementation/276630)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 1:44pm UTC](https://discuss.elastic.co/t/winlogbeat-services-v-command-line-implementation/276630 "2021-06-22T13:44:26Z")
Hi all, I'm sending windows logs via winlogbeat (v.7.13.2) to a logstash instance (v.7.13.0), which processes the logs and sends them to an ES index "winlogs" (v.7.13.0). I've set up the pipeline (no logstash filter yet… --- ## [How to create a kind of ID card in visualisation with value of different field](https://discuss.elastic.co/t/how-to-create-a-kind-of-id-card-in-visualisation-with-value-of-different-field/276656)
**Author:** [@chriselk](https://discuss.elastic.co/u/chriselk)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 1:41pm UTC](https://discuss.elastic.co/t/how-to-create-a-kind-of-id-card-in-visualisation-with-value-of-different-field/276656 "2021-06-22T13:41:07Z")
I'm trying to create a visualization that look like an ID card for example for a servers (a custom text list of Field : Value from a document ) SERVER: myservername CPU : 8 MEM: 24GB REGION: APAC I see… --- ## [How to deploy an elastic-agent in fleet against an elasticsearch with a self-signed certificate?](https://discuss.elastic.co/t/how-to-deploy-an-elastic-agent-in-fleet-against-an-elasticsearch-with-a-self-signed-certificate/276575)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 7:31pm UTC](https://discuss.elastic.co/t/how-to-deploy-an-elastic-agent-in-fleet-against-an-elasticsearch-with-a-self-signed-certificate/276575 "2021-06-21T19:31:58Z")
Hi, I deployed a fleet server using elastic-agent, which runs fine. For the deployment of an elastic-agent I use --insecure, because the fleet server, Kibana, and elasticsearch use a self-signed certificate. I get a c… --- ## [Logstash\_7.5.2\_ Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"https://host:9200/\_bulk"}](https://discuss.elastic.co/t/logstash-7-5-2-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-https-host-9200-bulk/276635)
**Author:** [@anburethy](https://discuss.elastic.co/u/anburethy)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 1:16pm UTC](https://discuss.elastic.co/t/logstash-7-5-2-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-https-host-9200-bulk/276635 "2021-06-22T13:16:25Z")
Hi Team, We use an ELK stack and I actually ran into login issue for which I deleted some existing indexes which are old and the login issue sorted but I ran into another issue. I wasnt able to reindex not the new index… --- ## [Error in Databricks 7.6 and Elastic 7.1.1 \*\*java.lang.ClassNotFoundException: Failed to find data source: org.elasticsearch.spark.sql.\*\*](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272)
**Author:** [@mlo](https://discuss.elastic.co/u/mlo)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272 "2021-06-22T13:12:23Z")
We are running Databricks 7.6 (includes Apache Spark 3.0.1, Scala 2.12) and istalled via jip install org.elasticsearch:elasticsearch-spark-30\_2.12:7.12.1 and now I am getting this error java.lang.ClassNotFoundException:… --- ## [Transfer logs from rsyslog to logstash and view those logs in browser](https://discuss.elastic.co/t/transfer-logs-from-rsyslog-to-logstash-and-view-those-logs-in-browser/276140)
**Author:** [@vatsal](https://discuss.elastic.co/u/vatsal)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 1:02pm UTC](https://discuss.elastic.co/t/transfer-logs-from-rsyslog-to-logstash-and-view-those-logs-in-browser/276140 "2021-06-22T13:02:05Z")
Hi , I want to send syslogs from rsyslog to logstash and view those in browser. I want to do this with TLS enabled. I have tried following ways: a. configured all corresponding files. b. configured pipeline for logst… --- ## [Anomalie Detection : Need Help Please](https://discuss.elastic.co/t/anomalie-detection-need-help-please/276359)
**Author:** [@ydr175020221](https://discuss.elastic.co/u/ydr175020221)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 12:59pm UTC](https://discuss.elastic.co/t/anomalie-detection-need-help-please/276359 "2021-06-22T12:59:08Z")
Hello, I'm desperately trying to create a ML job to answer the following question: How to identify a gap for a user based on elements like: Country, City, ... Example if an user "Max" who often connects from FRANCE, … --- ## [Extract exctly/only json docs from ES Index into C# (NEST)](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856)
**Author:** [@prgmrESNet](https://discuss.elastic.co/u/prgmrESNet)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 12:55pm UTC](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856 "2021-06-22T12:55:07Z")
Hello elastic.co, New user here, hence am learning the forum rules as well. Forum Admins, if this was asked previously, pardon me. I am an intermediate .Net C# programmer and novice ElasticSearch user. Here is my issu… --- ## [File input plugin - Delimiter property not working](https://discuss.elastic.co/t/file-input-plugin-delimiter-property-not-working/276650)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 12:30pm UTC](https://discuss.elastic.co/t/file-input-plugin-delimiter-property-not-working/276650 "2021-06-22T12:30:30Z")
Hello, I have logstash \[6.7\] complaining when I set "\\r\\n" as delimiter for the file input plugin. The file I'd like logstash to handle is file incident\_sample.csv incident\_sample.csv: ASCII text, with very long lines… --- ## [Figure out which pipeline works the most?](https://discuss.elastic.co/t/figure-out-which-pipeline-works-the-most/276645)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 12:42pm UTC](https://discuss.elastic.co/t/figure-out-which-pipeline-works-the-most/276645 "2021-06-22T12:42:21Z")
Hi, we have a pretty old ELK-stack (5.5) and since a few weeks our Logstash CPU usage is through the roof. Is there a way to check which pipeline or grok pattern is causing that? --- ## [Painless doc values; how to reference grouped fields](https://discuss.elastic.co/t/painless-doc-values-how-to-reference-grouped-fields/276588)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 12:15pm UTC](https://discuss.elastic.co/t/painless-doc-values-how-to-reference-grouped-fields/276588 "2021-06-22T12:15:23Z")
I'm trying to create a scripted field but can't get the doc value. I have: def fpath = doc\['winlog.user\_data.FilePath'\].value; def first = fpath.indexOf("\\\\"); def second = first + 1 + fpath.substring(first + 1).indexO… --- ## [How do you search for many IP addresses and output only the source IP and destination IP in Dev Tools \[Kibana\]](https://discuss.elastic.co/t/how-do-you-search-for-many-ip-addresses-and-output-only-the-source-ip-and-destination-ip-in-dev-tools-kibana/276542)
**Author:** [@kanrab](https://discuss.elastic.co/u/kanrab)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 11:29am UTC](https://discuss.elastic.co/t/how-do-you-search-for-many-ip-addresses-and-output-only-the-source-ip-and-destination-ip-in-dev-tools-kibana/276542 "2021-06-22T11:29:38Z")
So the query to search for a single IP is: GET \_search { "query": { "term": { "ip\_addr": "43.225.52.0/23" } } } But this is only able to search for one IP address My original query was: GET \_… [Previous page](https://discuss.elastic.co/latest.md?page=1608) [Next page](https://discuss.elastic.co/latest.md?page=1610)