# Latest **URL:** https://discuss.elastic.co/latest.md?page=1619 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1620 --- ## [Self monitoring won't enable 7.13](https://discuss.elastic.co/t/self-monitoring-wont-enable-7-13/276018)
**Author:** [@P\_Larsen](https://discuss.elastic.co/u/P_Larsen)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 5:24pm UTC](https://discuss.elastic.co/t/self-monitoring-wont-enable-7-13/276018 "2021-06-16T17:24:50Z")
Trying to activate Self Monitoring in 7.13. The message logged to Kibana is 2021-06-15T14:16:46+00:00","tags":\["warning","plugins","monitoring","monitoring","kibana-monitoring"\],"pid":128991,"message":"Unable to bulk … --- ## [Modjk log monitoring with filebeat](https://discuss.elastic.co/t/modjk-log-monitoring-with-filebeat/276118)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 5:22pm UTC](https://discuss.elastic.co/t/modjk-log-monitoring-with-filebeat/276118 "2021-06-16T17:22:02Z")
Hi, I want to monitor the modjk log. From Which module i can give the log path for modjk and where should i mention grok filter --- ## [Creating a premade dashboard for my custom beat](https://discuss.elastic.co/t/creating-a-premade-dashboard-for-my-custom-beat/276154)
**Author:** [@blackberrySherbet](https://discuss.elastic.co/u/blackberrySherbet)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 5:20pm UTC](https://discuss.elastic.co/t/creating-a-premade-dashboard-for-my-custom-beat/276154 "2021-06-16T17:20:15Z")
I have created my own custom beat (by following Creating a New Beat | Beats Developer Guide \[master\] | Elastic). I would like to create a new custom dashboard on Kibana every time a user uploads a new file using this cu… --- ## [Index variable substitution not working](https://discuss.elastic.co/t/index-variable-substitution-not-working/276169)
**Author:** [@devopscanada](https://discuss.elastic.co/u/devopscanada)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 4:51pm UTC](https://discuss.elastic.co/t/index-variable-substitution-not-working/276169 "2021-06-16T16:51:13Z")
I'm trying in Logstash to write different indices (see documentation) but Logtash wont' substitute the variables. My Logstash configuraiton: output { elasticsearch { hosts =\> \["http://elasticsearch-ma… --- ## [From FileBeat to Logstash](https://discuss.elastic.co/t/from-filebeat-to-logstash/276095)
**Author:** [@Michael\_Dylan\_McAloo](https://discuss.elastic.co/u/Michael_Dylan_McAloo)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 4:44pm UTC](https://discuss.elastic.co/t/from-filebeat-to-logstash/276095 "2021-06-16T16:44:46Z")
I have a dissect with filebeat, functional, but I need to pass it to logstash and I don't know how to use that same function in Logstash. Code: processors: - dissect: tokenizer: '%{timestamp} \[%{trash}\] \[… --- ## [How to migrate .kibana index from kibana 6.8 to 7.10?](https://discuss.elastic.co/t/how-to-migrate-kibana-index-from-kibana-6-8-to-7-10/276093)
**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 4:23pm UTC](https://discuss.elastic.co/t/how-to-migrate-kibana-index-from-kibana-6-8-to-7-10/276093 "2021-06-16T16:23:46Z")
Hello I am using kibana 6.8 and I have following mappings of .kibana index as described in this link: Migrating Kibana index to 6.0 | Kibana User Guide \[6.0\] | Elastic I want to upgrade .kibana index from 6.8 to 7.10 ma… --- ## [Dashboard filter does not find index fields](https://discuss.elastic.co/t/dashboard-filter-does-not-find-index-fields/276156)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 4:07pm UTC](https://discuss.elastic.co/t/dashboard-filter-does-not-find-index-fields/276156 "2021-06-16T16:07:26Z")
Hello good, I have a question, I am monitoring equipment and in the dashboard I made I have data from several indexes, what arises here is a problem, as I will filter by the (sysname) of a team and I do not get the field… --- ## [Nested Query Filter](https://discuss.elastic.co/t/nested-query-filter/276160)
**Author:** [@SAMBUDDHA\_CHAUDHURI](https://discuss.elastic.co/u/SAMBUDDHA_CHAUDHURI)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 3:37pm UTC](https://discuss.elastic.co/t/nested-query-filter/276160 "2021-06-16T15:37:23Z")
Currently I am trying to search/filter a nested Document in Elastic Search Spring Data. The Current Document Structure is: { "id": 1, "customername": "Cust@123", "policydetails": { "address": { "city": … --- ## [Winlogbeat not writing logs to extract path](https://discuss.elastic.co/t/winlogbeat-not-writing-logs-to-extract-path/276157)
**Author:** [@rudraram](https://discuss.elastic.co/u/rudraram)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 3:28pm UTC](https://discuss.elastic.co/t/winlogbeat-not-writing-logs-to-extract-path/276157 "2021-06-16T15:28:41Z")
I extracted winlogbeat to the following location C:\\Program Files (x86)\\winlogbeat-7.11.1-windows-x86\_64 when I install the service and start the service, i dont see any logs witten to logpath C:\\Program Files (x86)\\w… --- ## [Change colors for each result on stacked bar?](https://discuss.elastic.co/t/change-colors-for-each-result-on-stacked-bar/275598)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 7\ **Last updated:** [June 16, 2021, 3:24pm UTC](https://discuss.elastic.co/t/change-colors-for-each-result-on-stacked-bar/275598 "2021-06-16T15:24:20Z")
Hello I have stacked bar that is showing me success logons and failed logons. I want them to be different colors than the default but I dont see where I can change that. How do I do it? --- ## [Webcrawler](https://discuss.elastic.co/t/webcrawler/275951)
**Author:** [@cama](https://discuss.elastic.co/u/cama)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 3:11pm UTC](https://discuss.elastic.co/t/webcrawler/275951 "2021-06-16T15:11:36Z")
Hello everybody, I need help with the web crawler. I want the web crawler to use google and index all pages on a certain topic. Does it work and if so, how? Thanks for help. --- ## [Fleet: Override Elasticsearch URL at policy level](https://discuss.elastic.co/t/fleet-override-elasticsearch-url-at-policy-level/275982)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 3:04pm UTC](https://discuss.elastic.co/t/fleet-override-elasticsearch-url-at-policy-level/275982 "2021-06-16T15:04:00Z")
Hi All, Is it possible to override Elasticsearch URL for fleet on policy Level? I see in the UI we only have global setting. We use Elastic Cloud service. Use Case: For on premise agent it should connect to the publi… --- ## [Logstash Extract Elasticsearch Nested Fields](https://discuss.elastic.co/t/logstash-extract-elasticsearch-nested-fields/275451)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 28\ **Last updated:** [June 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/logstash-extract-elasticsearch-nested-fields/275451 "2021-06-16T14:13:37Z")
Hello Team I am using Elasticsearch version 7.8.0 and Logstash version 7.8.0 I am having ES Index having following mappings : "mappings" : { "properties" : { "appEvents" : { "properties" : … --- ## [Convert a legacy template into a composable template?](https://discuss.elastic.co/t/convert-a-legacy-template-into-a-composable-template/276145)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 1:06pm UTC](https://discuss.elastic.co/t/convert-a-legacy-template-into-a-composable-template/276145 "2021-06-16T13:06:07Z")
Hello There is a legacy template with a lot of good default mappings that I want to use as a base (a base template, even though it is rudundent) That being said, I want to use it as a composable template. Is there a wa… --- ## [Check whether document returned is from a read or a write index](https://discuss.elastic.co/t/check-whether-document-returned-is-from-a-read-or-a-write-index/276133)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 3\ **Last updated:** [June 16, 2021, 12:48pm UTC](https://discuss.elastic.co/t/check-whether-document-returned-is-from-a-read-or-a-write-index/276133 "2021-06-16T12:48:58Z")
I have a requirement where I want to delete the documents which match the query but only if they are in the read index , if it is in a write index I don't want the documents to be deleted. Below query deletes irrespecti… --- ## [Filtering Rules according to "Last response" Field](https://discuss.elastic.co/t/filtering-rules-according-to-last-response-field/275743)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 12:37pm UTC](https://discuss.elastic.co/t/filtering-rules-according-to-last-response-field/275743 "2021-06-16T12:37:43Z")
Hi there, As I understand, there are 3 kinds of Last response for rules - Succeeded, Warning, and Failure. I would like to filter rules according to just these 3 statuses. It appears that there is currently no way of d… --- ## [Higher CPU vs Higher Memory. Which helps in what cases?](https://discuss.elastic.co/t/higher-cpu-vs-higher-memory-which-helps-in-what-cases/272798)
**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\ **Replies:** 23\ **Last updated:** [June 16, 2021, 12:33pm UTC](https://discuss.elastic.co/t/higher-cpu-vs-higher-memory-which-helps-in-what-cases/272798 "2021-06-16T12:33:32Z")
Hi everyone, What are the cases where a higher CPU and/or faster CPU benefits the cluster more than higher memory? I am currently running on 3 Nodes that are 8 CPU 16GB RAM configurations. I will scale the cluster fir… --- ## [Highlighting | Fragments | Order:Score --- is it possible to get the score of every fragment?](https://discuss.elastic.co/t/highlighting-fragments-order-score-is-it-possible-to-get-the-score-of-every-fragment/276137)
**Author:** [@edyas](https://discuss.elastic.co/u/edyas)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 12:20pm UTC](https://discuss.elastic.co/t/highlighting-fragments-order-score-is-it-possible-to-get-the-score-of-every-fragment/276137 "2021-06-16T12:20:11Z")
When using Highlighting, fragments can be sorted by their respective score, which is a very useful feature. But is there any way to get their individual score (which must be calculated in the background for the sorting)… --- ## [Date Logstash](https://discuss.elastic.co/t/date-logstash/275816)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 12:07pm UTC](https://discuss.elastic.co/t/date-logstash/275816 "2021-06-16T12:07:21Z")
Hello Expert, I would like convert date into timestamp which is mention below.. I dont have any column with reference to date but I have just 1 line in which date is mention. what changes I can do in config file of logs… --- ## [Problem with data merging](https://discuss.elastic.co/t/problem-with-data-merging/274425)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 14\ **Last updated:** [June 16, 2021, 12:02pm UTC](https://discuss.elastic.co/t/problem-with-data-merging/274425 "2021-06-16T12:02:05Z")
Hello All, I am using jdbc input and jdbc\_streaming section in my logstash config to bring data from two different table into the same index. My logstash config is below. input { jdbc { jdbc\_connection\_str… --- ## [Can i connect two different (not clustered) elasticsearch hosts to single kibana?](https://discuss.elastic.co/t/can-i-connect-two-different-not-clustered-elasticsearch-hosts-to-single-kibana/275626)
**Author:** [@Kamil\_Siraliyev](https://discuss.elastic.co/u/Kamil_Siraliyev)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 11:20am UTC](https://discuss.elastic.co/t/can-i-connect-two-different-not-clustered-elasticsearch-hosts-to-single-kibana/275626 "2021-06-16T11:20:19Z")
I have 2 different not clustered elasticsearch hosts 192.168.1.10 and 192.168.1.85. The 192.168.1.10 server also has kibana. Question: can i connect both of them to a single kibana? Thanks. --- ## [Is it possible to choose the fields from the event before passing it for analysis?](https://discuss.elastic.co/t/is-it-possible-to-choose-the-fields-from-the-event-before-passing-it-for-analysis/276086)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 11:05am UTC](https://discuss.elastic.co/t/is-it-possible-to-choose-the-fields-from-the-event-before-passing-it-for-analysis/276086 "2021-06-16T11:05:02Z")
Is it possible to limit the number of fields we process? In anomaly detection-\>Configure datafeed the elasticsearch query is : { "bool": { "must": \[ { "match\_all": {} } \] } } I tried to… --- ## [Ingestion pipeline milliseconds](https://discuss.elastic.co/t/ingestion-pipeline-milliseconds/275967)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 10\ **Last updated:** [June 16, 2021, 10:51am UTC](https://discuss.elastic.co/t/ingestion-pipeline-milliseconds/275967 "2021-06-16T10:51:26Z")
Hi, is it possible to add, via ingestion pipeline, the current timestamp, but, in milliseconds? (Unix time) Thanks --- ## [APM Filter incoming data](https://discuss.elastic.co/t/apm-filter-incoming-data/275971)
**Author:** [@binschlag](https://discuss.elastic.co/u/binschlag)\ **Replies:** 7\ **Last updated:** [June 16, 2021, 10:50am UTC](https://discuss.elastic.co/t/apm-filter-incoming-data/275971 "2021-06-16T10:50:41Z")
Is there any possibility to filter out APM data (errors, specific urls, ...), so that apm-server does not index them to elasticsearch? Or is the only way to set the apm-server output to logstash and drop unwanted data i… --- ## [Not able call SSL configured elasticsearch API from elasticsearch plugin](https://discuss.elastic.co/t/not-able-call-ssl-configured-elasticsearch-api-from-elasticsearch-plugin/275941)
**Author:** [@Rohit\_Sawant1](https://discuss.elastic.co/u/Rohit_Sawant1)\ **Replies:** 5\ **Last updated:** [June 16, 2021, 10:36am UTC](https://discuss.elastic.co/t/not-able-call-ssl-configured-elasticsearch-api-from-elasticsearch-plugin/275941 "2021-06-16T10:36:56Z")
Hi Team, I am trying to call elasticsearch search ,createindex api from NodeClient but it is giving error message: action \[indices:data/read/search\] is unauthorized for user \[\_system\]. elasticsearch configured with SSL… --- ## [Filter on multiple indice](https://discuss.elastic.co/t/filter-on-multiple-indice/276042)
**Author:** [@dgastudio](https://discuss.elastic.co/u/dgastudio)\ **Replies:** 3\ **Last updated:** [June 16, 2021, 10:31am UTC](https://discuss.elastic.co/t/filter-on-multiple-indice/276042 "2021-06-16T10:31:34Z")
Hello. i have 2 indices, employee\_profile and employee\_shift a need to create a page, on which one, i have to list all the employees with calendar of shifts for each one right now, i'm doing a request to employee\_prof… --- ## [How to give dashboard filter as input to markdown](https://discuss.elastic.co/t/how-to-give-dashboard-filter-as-input-to-markdown/276016)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 3\ **Last updated:** [June 16, 2021, 10:01am UTC](https://discuss.elastic.co/t/how-to-give-dashboard-filter-as-input-to-markdown/276016 "2021-06-16T10:01:34Z")
Hello, I want to automatically update the markdown query input from the filter given in dashboard. what ever i give filter on that dashboard should be automatically given input to markdown so that i cant see the filter … --- ## [Using Cisco Fleet Integration](https://discuss.elastic.co/t/using-cisco-fleet-integration/276094)
**Author:** [@helferlein](https://discuss.elastic.co/u/helferlein)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 9:41am UTC](https://discuss.elastic.co/t/using-cisco-fleet-integration/276094 "2021-06-16T09:41:20Z")
Hi Elastic Users and Team. I managed to install the fleet-server on prem and added the Cisco Fleet Integration to the fleet-server itself. ELK Stack and also the fleetserver is on one virtual machine. So my thought wa… --- ## [Concatenate log](https://discuss.elastic.co/t/concatenate-log/275968)
**Author:** [@cassiopee](https://discuss.elastic.co/u/cassiopee)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 9:18am UTC](https://discuss.elastic.co/t/concatenate-log/275968 "2021-06-16T09:18:07Z")
hello, I have a beats log, who are concatenate and special characters. I wanted request one of this field but I supposed my request is blocked because a bad syntax. { "user" =\> { "name" =\> "AD-WSUS… --- ## [Error with HAProxy Dashboards \[ 7.10.2 \]](https://discuss.elastic.co/t/error-with-haproxy-dashboards-7-10-2/275834)
**Author:** [@rodrigo.gz](https://discuss.elastic.co/u/rodrigo.gz)\ **Replies:** 2\ **Last updated:** [June 15, 2021, 9:43am UTC](https://discuss.elastic.co/t/error-with-haproxy-dashboards-7-10-2/275834 "2021-06-15T09:43:16Z")
Hello! I am trying to monitor a HAProxy with metricbeat and filebeat. ( 7.10.2 ) When I do the setup and start the agent , it starts collecting metrics and logs correctly but the dashboards do not show the collected in… [Previous page](https://discuss.elastic.co/latest.md?page=1618) [Next page](https://discuss.elastic.co/latest.md?page=1620)