# Latest **URL:** https://discuss.elastic.co/latest.md?page=1645 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1646 --- ## [Http\_pollar input is not working with the certificate](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 12:26pm UTC](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748 "2021-06-02T12:26:43Z")
Hi We are using http\_poller to query elastic in logstash input with the selfsigned certificate. but not receieving any result and not prompting any error in the logstash. tls is enabled at elastic. when i run the same qu… --- ## [How to connect multiple pipelines within the same Logstash instance running inside a docker container](https://discuss.elastic.co/t/how-to-connect-multiple-pipelines-within-the-same-logstash-instance-running-inside-a-docker-container/274446)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 12:25pm UTC](https://discuss.elastic.co/t/how-to-connect-multiple-pipelines-within-the-same-logstash-instance-running-inside-a-docker-container/274446 "2021-06-02T12:25:21Z")
Currently we have a data stream in elasticsearch, lets call it app\_stream in which we are ingesting log messages from an application XMLTransformer through FileBeats(port=5044) installed on the server where the applicati… --- ## [Merge data on field bases](https://discuss.elastic.co/t/merge-data-on-field-bases/274745)
**Author:** [@Abdoul\_Kande](https://discuss.elastic.co/u/Abdoul_Kande)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 12:12pm UTC](https://discuss.elastic.co/t/merge-data-on-field-bases/274745 "2021-06-02T12:12:25Z")
Hello, I would like to do the join of two indexes based on an id column. can i have an example ? --- ## [\_template vs \_index\_template](https://discuss.elastic.co/t/template-vs-index-template/274730)
**Author:** [@Jordi\_Cabre1](https://discuss.elastic.co/u/Jordi_Cabre1)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 12:10pm UTC](https://discuss.elastic.co/t/template-vs-index-template/274730 "2021-06-02T12:10:09Z")
I've just realized that ES has a \_/\_template and a \_/\_index\_template. What are they for? I was using code: PutIndexTemplateRequest ngramTemplate = new PutIndexTemplateRequest("ngram-template") .patterns(Arrays.asList… --- ## [Query for email address within a text field](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 11:39am UTC](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742 "2021-06-02T11:39:39Z")
Hello, I'm trying to query my index that contains text field with an email address. As of now, if query for a specific domain (eg gmail), like below and it gives me the results: GET index\*/\_search { "query": { "… --- ## [Detection rule: Failed login attempts](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590)
**Author:** [@bnk](https://discuss.elastic.co/u/bnk)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 10:51am UTC](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590 "2021-06-02T10:51:35Z")
Hi, I've created my own detection rule for employees failed login attempts. It does work but when signal comes to Security -\> Detection dashboard, it do not show user.name or host.name. This is screen shot of my rule: … --- ## [Security index is unavailable](https://discuss.elastic.co/t/security-index-is-unavailable/274731)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 10:42am UTC](https://discuss.elastic.co/t/security-index-is-unavailable/274731 "2021-06-02T10:42:51Z")
Hi there, I have installed a single node node on linux (role: monitoring node) (v. 7.8.1 // elastisearch + Kibana + redis) If in the elasticsearch.yml I give this: xpack.security.enabled: false then for example a cur… --- ## [Metricbeat in customized index](https://discuss.elastic.co/t/metricbeat-in-customized-index/274586)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 10:38am UTC](https://discuss.elastic.co/t/metricbeat-in-customized-index/274586 "2021-06-02T10:38:56Z")
Am planning to use metricbeat via logstash, if i do that will mapping can be done automatically orelse i have to grok it? can i push to customized index and use the default metricbeat index --- ## [Index Policies Error](https://discuss.elastic.co/t/index-policies-error/274722)
**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 10:31am UTC](https://discuss.elastic.co/t/index-policies-error/274722 "2021-06-02T10:31:43Z")
Hi, I have a problem with ILM, index life management, since I have followed the steps that appear in this guide Configure a lifecycle policy | Elasticsearch Guide \[master\] | Elastic My current index pattern is called fi… --- ## [FileBeat error](https://discuss.elastic.co/t/filebeat-error/274709)
**Author:** [@Michael\_Dylan\_McAloo](https://discuss.elastic.co/u/Michael_Dylan_McAloo)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 10:06am UTC](https://discuss.elastic.co/t/filebeat-error/274709 "2021-06-02T10:06:08Z")
I'm using FileBeat for dissect a Snort Alert but I have this message error when I try it. Error message: --- ## [APM Java Agent error](https://discuss.elastic.co/t/apm-java-agent-error/271524)
**Author:** [@apox](https://discuss.elastic.co/u/apox)\ **Replies:** 8\ **Last updated:** [June 2, 2021, 9:54am UTC](https://discuss.elastic.co/t/apm-java-agent-error/271524 "2021-06-02T09:54:11Z")
Hi, short question: can someone tell my what is wrong with my app or with my apm server? I get this error: \[elastic-apm-server-reporter\] ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending… --- ## [Supports Canvas Linechart the feature seriesAgg and Group this by Terms](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650)
**Author:** [@miri](https://discuss.elastic.co/u/miri)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 9:28am UTC](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650 "2021-06-02T09:28:29Z")
Is it possible to use in Canvas Linechart the Aggregation seriesAgg and Group this by Terms like available in normal TSVB Visualisation? Example: There are some servers sending status information to elasticsearch: … --- ## [Best way to backup Kibana Dashboards](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718)
**Author:** [@kibanaquery](https://discuss.elastic.co/u/kibanaquery)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718 "2021-06-02T09:27:44Z")
Hi, Just wondered what the current suggestion is to back up Dashboards, the indices seem straightforward but they dont include Dashboards? I'm looking for an automated way to get them backed up rather than anything too… --- ## [Unable to bind Syslog port](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728)
**Author:** [@Sputnick](https://discuss.elastic.co/u/Sputnick)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 9:23am UTC](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728 "2021-06-02T09:23:23Z")
Hello, I am on Ubuntu 20.04 running Logstash as a collector for syslog messages from the rest of my network. I have configured java with elevated privileges but Logstash is unable to bind UDP port 514. This is a simila… --- ## [Error in Kibana 7.12](https://discuss.elastic.co/t/error-in-kibana-7-12/274605)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 12\ **Last updated:** [June 2, 2021, 9:18am UTC](https://discuss.elastic.co/t/error-in-kibana-7-12/274605 "2021-06-02T09:18:22Z")
Hi all! I've a problem on kibana that is running on my local machine.I would like to create a simple dashboard with data but in order to obtian the single data value in time I use Altair and jupyter combination in order … --- ## [Kibana Saved objects](https://discuss.elastic.co/t/kibana-saved-objects/274717)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 8:53am UTC](https://discuss.elastic.co/t/kibana-saved-objects/274717 "2021-06-02T08:53:24Z")
Hi Currently Im using below to export dashbaords curl -X POST "localhost:5601/api/saved\_objects/\_export" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d' { "type": "dashboard" }' \> /tmp/dashboard.ndjson 2\>… --- ## [Kibana visualise](https://discuss.elastic.co/t/kibana-visualise/274529)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-visualise/274529 "2021-06-02T08:43:34Z")
Hello, I am trying to create a visualization to represent the evolution of a field x in time so X axes timestamp and Y axes the field , but can't find how to represent it, for y axes there is only aggregations that ca… --- ## [Kibana Speedometer](https://discuss.elastic.co/t/kibana-speedometer/274317)
**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 8:29am UTC](https://discuss.elastic.co/t/kibana-speedometer/274317 "2021-06-02T08:29:27Z")
Can we have a needle inside the Gauge pointing to the value? Is there any way to add the needle in the gauge. I am using the latest version now (i.e, Kibana 7.12.1) --- ## [Autodiscovery setting in Metricbeat](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 7:54am UTC](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732 "2021-06-02T07:54:27Z")
I was going through this nice and comprehensive presentation by @pebrc At the point in time where the link points to, the presenter makes a configuration change to the Elasticsearch resource definition so that the label… --- ## [Kibana & Cloudfront conversion tracking](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492)
**Author:** [@GCuccureddu](https://discuss.elastic.co/u/GCuccureddu)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 7:47am UTC](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492 "2021-06-02T07:47:01Z")
Hi community, I am new to Kibana and my perspective is from business/marketing expertise. We are using AWS Cloudfront website data and I would like to understand if Kibana can bring insight to typical funnels (how peop… --- ## [Heatmap sorting working in Visualisation Editor but not in Dashboard](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814)
**Author:** [@mkostros](https://discuss.elastic.co/u/mkostros)\ **Replies:** 11\ **Last updated:** [June 2, 2021, 7:37am UTC](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814 "2021-06-02T07:37:25Z")
Hello We want to create event dashboard, which would shown, how many log events came in Day of Week and Hour of day. We have created dynamic fields for DayOfWeek and HourOfDay (number format). Which are then used in he… --- ## [Error initializing beat: error loading config file: yaml: line 19: did not find expected key](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-yaml-line-19-did-not-find-expected-key/274706)
**Author:** [@adarshr4](https://discuss.elastic.co/u/adarshr4)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 7:33am UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-yaml-line-19-did-not-find-expected-key/274706 "2021-06-02T07:33:11Z")
hi all, when am trying to sudo metricbeat modules enable elasticsearch-xpack it will triggered the following alert. Error initializing beat: error loading config file: yaml: line 19: did not find expected key please re… --- ## [Can I register snapshot repo without path.repo property in elasticsearch.yml?](https://discuss.elastic.co/t/can-i-register-snapshot-repo-without-path-repo-property-in-elasticsearch-yml/274427)
**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 7:24am UTC](https://discuss.elastic.co/t/can-i-register-snapshot-repo-without-path-repo-property-in-elasticsearch-yml/274427 "2021-06-02T07:24:08Z")
Hi Team, We are using elasticsearch 6.8.5 version in production with 3 Master and 8 data nodes. There is no path.repo property present in the production. I can't update elasticsearch.yml and restart nodes in production. … --- ## [TSVB - visualizing the difference of two datasets](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922 "2021-06-02T07:21:02Z")
Hello Elastic-Community, I get data like this: Document 1: Data.name: Total pieces, Data.value: 60, timestamp: 12:00 Document 2: Data.name: Good pieces, Data.value: 58, timestamp: 12:00 Now I want to visualize … --- ## [Unable to complete saved object migrations for the \[.kibana\] index. RequestAbortedError: The content length (823769731) is bigger than the maximum allowed string](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 6:47am UTC](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408 "2021-06-02T06:47:34Z")
kibana | {"type":"log","@timestamp":"2021-05-29T18:16:24+00:00","tags":\["info","savedobjects-service"\],"pid":6,"message":"\[.kibana\_task\_manager\] Migration completed after 9330ms"} kibana | {"type":"lo… --- ## [Filebeat setting for removing harvested files from registry file?](https://discuss.elastic.co/t/filebeat-setting-for-removing-harvested-files-from-registry-file/274679)
**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 7:17pm UTC](https://discuss.elastic.co/t/filebeat-setting-for-removing-harvested-files-from-registry-file/274679 "2021-06-01T19:17:38Z")
I am a newbie, I am running Filebeat in my application server, to transfer log files to logstash server. My Application server creates new log files once in every 3 minutes 24x7 (i.e., 480 files per day). These files are… --- ## [Set service environment from apm-server.yml](https://discuss.elastic.co/t/set-service-environment-from-apm-server-yml/274582)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 5:26am UTC](https://discuss.elastic.co/t/set-service-environment-from-apm-server-yml/274582 "2021-06-02T05:26:14Z")
Hi, I have elk stack 7.11.1 setup with apm as central server. Have configured apm for java microservice and getting data in elasticsearch properly. Have 2 questions I haven't set service environment variable in ag… --- ## [ILM Issue](https://discuss.elastic.co/t/ilm-issue/274699)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/ilm-issue/274699 "2021-06-02T05:22:16Z")
Hi I have defined a lifecycle policy and applied to an index template according to the bellow page: But unfortunately got the bellow error: Where is the problem? Thanks in advanve --- ## [Cross Cluster search, switching to an empty backup cluster](https://discuss.elastic.co/t/cross-cluster-search-switching-to-an-empty-backup-cluster/274601)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 7\ **Last updated:** [June 2, 2021, 4:59am UTC](https://discuss.elastic.co/t/cross-cluster-search-switching-to-an-empty-backup-cluster/274601 "2021-06-02T04:59:37Z")
Hello, I want to make a backup cluster for Cross Cluster search. I selected proxy\_mod, I use Haproxy as a proxy Haproxy configuration example: server work 1.1.1.1:9300 check on-marked-up shutdown-backup-sessions on-m… --- ## [How to edit the type of an existing fiend in an index](https://discuss.elastic.co/t/how-to-edit-the-type-of-an-existing-fiend-in-an-index/274694)
**Author:** [@sunoj\_vijayan](https://discuss.elastic.co/u/sunoj_vijayan)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 4:06am UTC](https://discuss.elastic.co/t/how-to-edit-the-type-of-an-existing-fiend-in-an-index/274694 "2021-06-02T04:06:04Z")
Is there any way to edit an existing type. I have a field "calculated\_weight" which is currently a string. I want it to be long so that i can calculate the sum. I tried this PUT /mm-logs-\* { "mappings": { "proper… [Previous page](https://discuss.elastic.co/latest.md?page=1644) [Next page](https://discuss.elastic.co/latest.md?page=1646)