# Latest **URL:** https://discuss.elastic.co/latest.md?page=1642 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1643 --- ## [Reading Cluster Settings in Plugin](https://discuss.elastic.co/t/reading-cluster-settings-in-plugin/274920)
**Author:** [@jessebs](https://discuss.elastic.co/u/jessebs)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 8:32pm UTC](https://discuss.elastic.co/t/reading-cluster-settings-in-plugin/274920 "2021-06-03T20:32:12Z")
I am writing a plugin and would like to configure it through the cluster settings API. I found some examples of using a non-default plugin constructor which receives Settings, but these settings only seem to contain wha… --- ## [Journalbeats - Error Creating Reader for Local Journal](https://discuss.elastic.co/t/journalbeats-error-creating-reader-for-local-journal/273064)
**Author:** [@Jimbuctoo](https://discuss.elastic.co/u/Jimbuctoo)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 8:32pm UTC](https://discuss.elastic.co/t/journalbeats-error-creating-reader-for-local-journal/273064 "2021-06-03T20:32:03Z")
I am working on an issue with Journalbeats v7.9.2 where I am unable to get the service to start after the initial Journalbeats install. I am working in a number of Linux environments and the same version of Journalbeats … --- ## [Occasional Index Management timeout](https://discuss.elastic.co/t/occasional-index-management-timeout/273969)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 10\ **Last updated:** [June 3, 2021, 7:18pm UTC](https://discuss.elastic.co/t/occasional-index-management-timeout/273969 "2021-06-03T19:18:11Z")
Occasionally (generally at least once per day) when attempting to access data in Kibana, I'll get a strange series of timeouts. I generally first notice it because Discover view gets an error saying "Error: Could not loc… --- ## [Signal Field Schema Documentation](https://discuss.elastic.co/t/signal-field-schema-documentation/274912)
**Author:** [@Amorik](https://discuss.elastic.co/u/Amorik)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 7:06pm UTC](https://discuss.elastic.co/t/signal-field-schema-documentation/274912 "2021-06-03T19:06:27Z")
Detection's creates the .siem-signals index responsible for housing alerts generated by the system. While it conforms to ECS the fields under signal.\* are not documented GitHub - elastic/ecs: Elastic Common Schema. Is th… --- ## [Permission to view all indices and create dashboards](https://discuss.elastic.co/t/permission-to-view-all-indices-and-create-dashboards/274227)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 6\ **Last updated:** [June 3, 2021, 5:29pm UTC](https://discuss.elastic.co/t/permission-to-view-all-indices-and-create-dashboards/274227 "2021-06-03T17:29:01Z")
I am looking to give permission SAML user to read all indices and I have done the following: assign the following permissions with role indices\_viewer Confirm role mapping is setup However users are still getting 403,… --- ## [Winlogbeat or Endpoint Security](https://discuss.elastic.co/t/winlogbeat-or-endpoint-security/274909)
**Author:** [@lepepa9493](https://discuss.elastic.co/u/lepepa9493)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 6:20pm UTC](https://discuss.elastic.co/t/winlogbeat-or-endpoint-security/274909 "2021-06-03T18:20:36Z")
hi! What is the difference between the data winlogbeat and endpoint security send? Do I need both? Thanks for your advice --- ## [RE: "File structure cannot be determined" - Visualize data from a log file](https://discuss.elastic.co/t/re-file-structure-cannot-be-determined-visualize-data-from-a-log-file/274671)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 4\ **Last updated:** [June 3, 2021, 6:16pm UTC](https://discuss.elastic.co/t/re-file-structure-cannot-be-determined-visualize-data-from-a-log-file/274671 "2021-06-03T18:16:51Z")
Hello everyone, I keep on getting a "File structure cannot be determined" error message whenever I try to manually upload a JSON .txt and/or .csv wayy under 100MB (as pictured). Links to dataset: KDD Cup 1999 Data NSL-… --- ## [Logs de DEBUG: Removing ban for the parent](https://discuss.elastic.co/t/logs-de-debug-removing-ban-for-the-parent/274771)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 6:09pm UTC](https://discuss.elastic.co/t/logs-de-debug-removing-ban-for-the-parent/274771 "2021-06-03T18:09:52Z")
Buenas tardes, Desde ayer observamos que se producen unos logs en todos los nodos del cluster informando lo siguiente: {"type": "server", "timestamp": "2021-06-02T14:25:33,171Z", "level": "DEBUG", "component": "o.e.a.… --- ## [Metricbeats does not ship data](https://discuss.elastic.co/t/metricbeats-does-not-ship-data/274904)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 5:38pm UTC](https://discuss.elastic.co/t/metricbeats-does-not-ship-data/274904 "2021-06-03T17:38:54Z")
Hi I have successfuly connected metric beat to the elastic cloud instance. I have setup dashboards, indexes and mapping. However, I can not open dashboards and there is no data under "observability-metrics". This are lo… --- ## [Query regarding Azure module in Metricbeat](https://discuss.elastic.co/t/query-regarding-azure-module-in-metricbeat/273469)
**Author:** [@adhiraj-g](https://discuss.elastic.co/u/adhiraj-g)\ **Replies:** 4\ **Last updated:** [June 3, 2021, 5:36pm UTC](https://discuss.elastic.co/t/query-regarding-azure-module-in-metricbeat/273469 "2021-06-03T17:36:15Z")
Hi There, For Azure Module in metricbeat, we are required to create a service principal with relevant access permissions in order to access metrics data from Azure. In case of Azure setup with multiple ADs, how do we m… --- ## [Dynamically creating a Kibana dashboard](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903)
**Author:** [@blackberrySherbet](https://discuss.elastic.co/u/blackberrySherbet)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903 "2021-06-03T18:00:00Z")
I want my users to run a script (bash or python or anything) with some data as input and that script should create a new Kibana dashboard for the user to visualize the data they gave the script as input. How can I do thi… --- ## [Discover is not working for range between \ - "now "](https://discuss.elastic.co/t/discover-is-not-working-for-range-between-date-now/274641)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:52pm UTC](https://discuss.elastic.co/t/discover-is-not-working-for-range-between-date-now/274641 "2021-06-03T16:52:22Z")
I have a strange problem. In discovery tab, if I specify time between lets say Jun 1, 2021@ 07:56:46 -\> now I get no results However if I search Jun 1, 2021@ 07:56:46 -\>Jun 1, 2021@ 10:00:46 everyth… --- ## [Error loading config file: yaml: line 177: could not find expected ':'](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-177-could-not-find-expected/274430)
**Author:** [@1234](https://discuss.elastic.co/u/1234)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 5:32pm UTC](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-177-could-not-find-expected/274430 "2021-06-03T17:32:49Z")
\# These settings simplify using Filebeat with the Elastic Cloud (https://cloud.elastic.co/) #The cloud.id setting overwrites the output.elasticsearch.hosts and setup.kibana.host options. You can find the cloud.id in… --- ## [Problem with detection \[rules\]](https://discuss.elastic.co/t/problem-with-detection-rules/274443)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:51pm UTC](https://discuss.elastic.co/t/problem-with-detection-rules/274443 "2021-06-03T16:51:55Z")
I have successfully transferred logs from winlog to logstash on prem to elastic/kibana cloud. I have created index pattern and discovered data. In order to test if everything works fine I went have created a new user on … --- ## [Kibana - FATAL ERROR: Zone Allocation failed - process out of memory](https://discuss.elastic.co/t/kibana-fatal-error-zone-allocation-failed-process-out-of-memory/274893)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:34pm UTC](https://discuss.elastic.co/t/kibana-fatal-error-zone-allocation-failed-process-out-of-memory/274893 "2021-06-03T16:34:04Z")
Hello all, Hope you are doing well! I have been struggling with starting Kibana server from yesterday. so after starting Elasticsearch cluster, when i start Kibana, it takes hours and gives me the following errors. can … --- ## [🎉 Elastic Stack 7.13 released](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 4:23pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899 "2021-06-03T16:23:09Z")
New in Elastic 7.13 Search massive amounts of data cost-effectively with searchable snapshots and the new frozen tier. Plus, find and deploy Elastic directly from the Microsoft Azure console and natively integrate data f… --- ## [Lengthy label is getting cropped](https://discuss.elastic.co/t/lengthy-label-is-getting-cropped/274829)
**Author:** [@Yashaswini](https://discuss.elastic.co/u/Yashaswini)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 4:08pm UTC](https://discuss.elastic.co/t/lengthy-label-is-getting-cropped/274829 "2021-06-03T16:08:57Z")
How can u split x-axis label into multiple lines --- ## [Logstash date filter](https://discuss.elastic.co/t/logstash-date-filter/274864)
**Author:** [@Kamikaze\_K](https://discuss.elastic.co/u/Kamikaze_K)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 3:49pm UTC](https://discuss.elastic.co/t/logstash-date-filter/274864 "2021-06-03T15:49:40Z")
I have logs that I am parsing and the date does not contain the year which should be default current year. The field that I get after grok etc is 06/25 11:33:19.9 PM and 06/25 11:33:19.9 PM etc I am trying to use the d… --- ## [Precision Threshold of Count in Canvas](https://discuss.elastic.co/t/precision-threshold-of-count-in-canvas/274664)
**Author:** [@Amy\_Collins](https://discuss.elastic.co/u/Amy_Collins)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 3:33pm UTC](https://discuss.elastic.co/t/precision-threshold-of-count-in-canvas/274664 "2021-06-03T15:33:10Z")
Hi, Is there a way to set the precision threshold when performing a unique/distinct count using Canvas? I need the count to be as accurate as possible. All hints and tips welcome. --- ## [ESRALLY Continuous index](https://discuss.elastic.co/t/esrally-continuous-index/274800)
**Author:** [@contregm](https://discuss.elastic.co/u/contregm)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 3:15pm UTC](https://discuss.elastic.co/t/esrally-continuous-index/274800 "2021-06-03T15:15:17Z")
I haven't run it in a while but I am trying to run the esrally elastic logs-continuous-index-and-query but cannot seem to find the data for this anymore. --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/274889)
**Author:** [@Roshaan\_Zafar](https://discuss.elastic.co/u/Roshaan_Zafar)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch/274889 "2021-06-03T14:48:54Z")
Hi I just wanted to know that is elasticsearch platinum only cloud based not locally? Actually I am asking because I need to connect odbc elastic with power bi and it supports elasticsearch platinum only while I wanted… --- ## [Parsing json logs using logstash](https://discuss.elastic.co/t/parsing-json-logs-using-logstash/274240)
**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\ **Replies:** 10\ **Last updated:** [June 3, 2021, 2:15pm UTC](https://discuss.elastic.co/t/parsing-json-logs-using-logstash/274240 "2021-06-03T14:15:03Z")
Hi I want to parse the json logs using logstash and send them to elastic .There are multiple nested fields in my logs but I want very specific fields for eg , here is my log format : { "\_index": "ekslogs-2021.05.27", … --- ## [Logstash data not visible in Kibana](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880)
**Author:** [@Reszel](https://discuss.elastic.co/u/Reszel)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880 "2021-06-03T14:05:38Z")
Hello guys, I'm newbie to ELK and i was trying to connect Logstash to Kibana/Elastic with my own configuration. Logstash seems to be running, but Kibana can't see any data, when i try to create index pattern. Here is my … --- ## [Metrcbeat withlogstach](https://discuss.elastic.co/t/metrcbeat-withlogstach/274877)
**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 1:45pm UTC](https://discuss.elastic.co/t/metrcbeat-withlogstach/274877 "2021-06-03T13:45:33Z")
logs not found to kibana --- ## [Scheduler Java Input plugin Logstash](https://discuss.elastic.co/t/scheduler-java-input-plugin-logstash/274876)
**Author:** [@aalagia](https://discuss.elastic.co/u/aalagia)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 1:37pm UTC](https://discuss.elastic.co/t/scheduler-java-input-plugin-logstash/274876 "2021-06-03T13:37:17Z")
Hi, I try to write a java plugin for Logstash, i need to schedule my program with a parameter passed in the configuration file. I tried to use the Java Timer for this but doesn't work. The pipeline execute the code but … --- ## [Using an image as a map in a kibana dashboard](https://discuss.elastic.co/t/using-an-image-as-a-map-in-a-kibana-dashboard/274713)
**Author:** [@Marc2](https://discuss.elastic.co/u/Marc2)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 1:13pm UTC](https://discuss.elastic.co/t/using-an-image-as-a-map-in-a-kibana-dashboard/274713 "2021-06-03T13:13:52Z")
Hello everybody. The thing is I must use a a facory layout I got in an image as a map in a dashboard and I don't know how. I guess I should add coordenates to that image and then upload it in some way. Is there anybody… --- ## [Xml filter Xpath not Working](https://discuss.elastic.co/t/xml-filter-xpath-not-working/274847)
**Author:** [@venmaniselvan](https://discuss.elastic.co/u/venmaniselvan)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 12:21pm UTC](https://discuss.elastic.co/t/xml-filter-xpath-not-working/274847 "2021-06-03T12:21:20Z")
Hello, I have the following below XML: \ \CUSTINQ2104001\ \MOB\ \abcfinance:referenceNumConsumer\ \ **Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 12:15pm UTC](https://discuss.elastic.co/t/cannot-view-logs-in-observability-log-app/274257 "2021-06-03T12:15:55Z") I have a asp.net core web app (mvc) project that will write the logs using Serilog to Elasticsearch. I created the index pattern in Kibana and I can view the logs that was written to elasticsearch under Discover. But whe… --- ## [Pagination with field collapse](https://discuss.elastic.co/t/pagination-with-field-collapse/274863)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 11:27am UTC](https://discuss.elastic.co/t/pagination-with-field-collapse/274863 "2021-06-03T11:27:01Z")
How is it possible to implement pagination in elastic search when we are field collapsing and returning top 5 results from each index. GET /my-index-000001/\_search { "query": { "match": { "message": "GET /se… --- ## [Logstash - beats input - NullPointerException](https://discuss.elastic.co/t/logstash-beats-input-nullpointerexception/274862)
**Author:** [@George\_Kossionis](https://discuss.elastic.co/u/George_Kossionis)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 11:19am UTC](https://discuss.elastic.co/t/logstash-beats-input-nullpointerexception/274862 "2021-06-03T11:19:28Z")
Using the following filebeat config in OCP: filebeat.autodiscover: providers: - type: kubernetes node: ${NODE\_NAME} templates: - condition: equals: … [Previous page](https://discuss.elastic.co/latest.md?page=1641) [Next page](https://discuss.elastic.co/latest.md?page=1643)