# Latest **URL:** https://discuss.elastic.co/latest.md?page=1658 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1659 --- ## [Logtash pid keeps changing](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073)
**Author:** [@cyberfence](https://discuss.elastic.co/u/cyberfence)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 3:17pm UTC](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073 "2021-05-26T15:17:54Z")
I am currently running ubuntu 18 server edition and the following is java / logstash version root@monitor:/usr/share/logstash/bin# ./logstash --version Using JAVA\_HOME defined java: /usr/lib/jvm/java-1.8.0-openjdk-amd6… --- ## [Why is the context for Span so limited compared to the context for Transaction?](https://discuss.elastic.co/t/why-is-the-context-for-span-so-limited-compared-to-the-context-for-transaction/274080)
**Author:** [@m-s-santos](https://discuss.elastic.co/u/m-s-santos)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 2:58pm UTC](https://discuss.elastic.co/t/why-is-the-context-for-span-so-limited-compared-to-the-context-for-transaction/274080 "2021-05-26T14:58:09Z")
Hello, I'm trying to add some custom information to a span's context; however, I can only change the context's labels. I'm wondering why there is this limitation. Also, the span's context can receive this db and http obj… --- ## [Granted documents query](https://discuss.elastic.co/t/granted-documents-query/274053)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 2:41pm UTC](https://discuss.elastic.co/t/granted-documents-query/274053 "2021-05-26T14:41:53Z")
Hello! How can I specify in a granted documents query that I want show only the documents that match with a service.name AND service.environment? I tried with the following query but I also saw other service.environmen… --- ## [SIngle URL for elastic cluster](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:18pm UTC](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062 "2021-05-26T14:18:13Z")
Hi, Can we create a single URL for elastic cluster if we have a cluster with 10 12 nodes so we can use a single URL in beats or logstash output. Regards, Bryce Fernandes. --- ## [Elastic search exclude few fields while reading](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065)
**Author:** [@whiletruelearn](https://discuss.elastic.co/u/whiletruelearn)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:11pm UTC](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065 "2021-05-26T14:11:55Z")
Hi, I am using elasticsearch spark connector and trying to use es.read.field.exclude to exclude reading two fields. In the documentation there is this example given es.read.field.exclude = company.income I have two … --- ## [Request handler being called every few seconds Kibana 7.10.2](https://discuss.elastic.co/t/request-handler-being-called-every-few-seconds-kibana-7-10-2/273873)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 1:57pm UTC](https://discuss.elastic.co/t/request-handler-being-called-every-few-seconds-kibana-7-10-2/273873 "2021-05-26T13:57:58Z")
I've been able to convert a few custom plugins from Kibana 7.5 to Kibana 7.10.2. However, I've noticed that my request handlers are being called every 6-7 seconds even when I'm not interacting with the page. Is this beha… --- ## [Custom CSS to render Markdown as dropdown menu that overlays other panels?](https://discuss.elastic.co/t/custom-css-to-render-markdown-as-dropdown-menu-that-overlays-other-panels/273489)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 1:29pm UTC](https://discuss.elastic.co/t/custom-css-to-render-markdown-as-dropdown-menu-that-overlays-other-panels/273489 "2021-05-26T13:29:42Z")
In the absence of a straightforward method for adding custom links to dashboards in the Kibana sidebar menu (I've created a feature request for this), I've been experimenting with custom CSS in a TSVB Markdown panel to i… --- ## [Java: cannot find symbol class RestHighLevelClient](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028)
**Author:** [@pinto](https://discuss.elastic.co/u/pinto)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 9:57am UTC](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028 "2021-05-26T09:57:42Z")
Following Java High Level REST Client Getting started documentation. Added to the POM.xml (in IntelliJ): \ ... \ \ \org.elasticsearch.client\ … --- ## [Multiple registries for filebeat](https://discuss.elastic.co/t/multiple-registries-for-filebeat/274061)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 1:19pm UTC](https://discuss.elastic.co/t/multiple-registries-for-filebeat/274061 "2021-05-26T13:19:50Z")
Hi, I wanted to know if we can have multiple registry files rather than one file having multiple values based on modules or something based on file paths. Regards, Bryce Fernandes. --- ## [Which node ip address should I specify in Multi-Node elasticsearch cluster to store data into an elasticsearch index?](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962 "2021-05-26T12:59:55Z")
Hii.I am creating a Multi-Node Elasticsearch Cluster.I will collect logs from different server's using filebeat and store them into an elasticsearch index.I am little bit confuse that which elasticsearch node ip address … --- ## [Osquery Manager Feedback - Linux AARCH64 - Raspberry Pi](https://discuss.elastic.co/t/osquery-manager-feedback-linux-aarch64-raspberry-pi/274003)
**Author:** [@n3k0](https://discuss.elastic.co/u/n3k0)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/osquery-manager-feedback-linux-aarch64-raspberry-pi/274003 "2021-05-26T12:59:18Z")
I used Linux AARCH64 successfully to install the elastic agent on two of my raspberry pi's. Which is fantastic. I wasn't expecting it to work. However, osquery searches don't appear to be working against both raspberry … --- ## [Filebeat hints-based autodiscover with \> 2 streams](https://discuss.elastic.co/t/filebeat-hints-based-autodiscover-with-2-streams/273976)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-hints-based-autodiscover-with-2-streams/273976 "2021-05-26T12:52:22Z")
I'm using hints-based autodiscover for filebeats deployed to a Kubernetes environment. Per the docs, I can direct different streams to different filesets, per the following example for nginx: co.elastic.logs/module: ngi… --- ## [Why number is not recognized as integer](https://discuss.elastic.co/t/why-number-is-not-recognized-as-integer/273917)
**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/why-number-is-not-recognized-as-integer/273917 "2021-05-26T12:23:58Z")
Hi Here is my sample data Madhya Pradesh;22.9734;78.6569;57766;764338;7558 Maharashtra;19.7515;75.7139;351005;5579897;88620 Manipur;24.6637;93.9063;6534;44089;688 Logstash considered the text and float but it doesn'… --- ## [Logstash in free version?](https://discuss.elastic.co/t/logstash-in-free-version/274050)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 12:13pm UTC](https://discuss.elastic.co/t/logstash-in-free-version/274050 "2021-05-26T12:13:57Z")
I got filebeat working with elastic search and kibana. Now i would like to get it working with logstash as an endpoint for filebeat. I'm using using a non clustered free version of ELK using no payed license. In such … --- ## [取得してきた検索結果が検索結果総数の何件目から何件目までなのかを知りたい](https://discuss.elastic.co/t/topic/271515)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 11:58am UTC](https://discuss.elastic.co/t/topic/271515 "2021-05-26T11:58:59Z")
検索結果件数が1万件以上ヒットする場合において、 sizeオプションで一度に取得する件数を指定して取得してきた検索結果が、 検索結果総数の何件目から何件目までを取ってきてるかというのはどのようにクエリをたてれば(もしくは何かしらのオプションを使用すれば)良いでしょうか？ --- ## [How to import data from 2 urls and with different index using http\_roller in logstash conf file](https://discuss.elastic.co/t/how-to-import-data-from-2-urls-and-with-different-index-using-http-roller-in-logstash-conf-file/274051)
**Author:** [@Tayfun\_UNAL](https://discuss.elastic.co/u/Tayfun_UNAL)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 11:57am UTC](https://discuss.elastic.co/t/how-to-import-data-from-2-urls-and-with-different-index-using-http-roller-in-logstash-conf-file/274051 "2021-05-26T11:57:45Z")
input { http\_poller { urls =\> { "1" =\> { type =\> "article" method =\> GET url =\> "https://personel.klu.edu.tr/elasticsearch/datasets/makale\_bilgisi.json" headers =\> { Accept =\> "application/… --- ## [Token filter reference](https://discuss.elastic.co/t/token-filter-reference/274048)
**Author:** [@Lucia\_Grodecka](https://discuss.elastic.co/u/Lucia_Grodecka)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 11:52am UTC](https://discuss.elastic.co/t/token-filter-reference/274048 "2021-05-26T11:52:48Z")
Hello. I can help with Token filter reference. I have a csv dataset that I loaded via machine learning. I work in Discover. I can write here a stemmer token filter, shingle and stop token. Where and what command to use?… --- ## [Geo-bounding box query does not support \`topLeft\` & \`bottomLeft\`](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 11:36am UTC](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792 "2021-05-26T11:36:55Z")
The documentation states that: More over the names topLeft , bottomRight , topRight and bottomLeft are supported However, using topLeft & bottomRight causes an error: { "error": { "root\_cause": \[ { … --- ## [Time filter resets to 15min in dashboard links](https://discuss.elastic.co/t/time-filter-resets-to-15min-in-dashboard-links/273768)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 11:15am UTC](https://discuss.elastic.co/t/time-filter-resets-to-15min-in-dashboard-links/273768 "2021-05-26T11:15:36Z")
Hi, I am using markdown viz in Kibana to link my dashboards. I would expect that the time range selected in the first dashboard will get passed down to the next one. But this isn't happening. Every time I click on a lin… --- ## [Rubydocs for Logstash Event API](https://discuss.elastic.co/t/rubydocs-for-logstash-event-api/273996)
**Author:** [@Robert\_Labrie](https://discuss.elastic.co/u/Robert_Labrie)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 11:14am UTC](https://discuss.elastic.co/t/rubydocs-for-logstash-event-api/273996 "2021-05-26T11:14:11Z")
I'm trying to find the actual RubyDocs for the Event class and I can't find them. Seems they moved at one point from logstash-lib to logstash-core but the references I can find don't even mention the get and set methods … --- ## [CyberArk filebeat xsl translator file](https://discuss.elastic.co/t/cyberark-filebeat-xsl-translator-file/260664)
**Author:** [@PersonaZ](https://discuss.elastic.co/u/PersonaZ)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 11:06am UTC](https://discuss.elastic.co/t/cyberark-filebeat-xsl-translator-file/260664 "2021-05-26T11:06:27Z")
We are trying to send from CyberArk vault to filebeat. Has anyone been able to use a xsl translator file for the vault to send to appropriate information to ELK filebeat? We seen it communicating but I believe the xsl fi… --- ## [Browser was closed unexpectedly error when sending report](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 10:56am UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671 "2021-05-26T10:56:57Z")
Hi In ElasticCloud 7.12 and I have a watcher with a reporting action which sends a report at 5pm each day. It works about 50% of the time with the other times producing the following error "Reporting generation failed… --- ## [CLA checking in Pull Request for Elasticsearch](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989)
**Author:** [@bhargavkn](https://discuss.elastic.co/u/bhargavkn)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 10:55am UTC](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989 "2021-05-26T10:55:58Z")
Hi, I have created a Pull Request and signed Contributors License Agreement but the cla-checker-service bot is failing. I tried closing the PR as well as creating a new one, but the CLA checker still fails. Can someone … --- ## [Fleet - add fields](https://discuss.elastic.co/t/fleet-add-fields/274044)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 10:39am UTC](https://discuss.elastic.co/t/fleet-add-fields/274044 "2021-05-26T10:39:08Z")
Hi, We currently use winlogbeats and logstash, within the winlogbeats.yml processors, we add fields to help identify the organization as well as use that within the elasticsearch output as the format of the index name s… --- ## [Plugin versions](https://discuss.elastic.co/t/plugin-versions/273787)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 10:12am UTC](https://discuss.elastic.co/t/plugin-versions/273787 "2021-05-26T10:12:01Z")
Hi everyone, What is the best way of versioning plugins. If we plan to have multiple versions of our plugin, and support multiple versions of ElasticSearch how would we do that? Is there anyway that we say that our pl… --- ## [APM Sample Apps?](https://discuss.elastic.co/t/apm-sample-apps/273935)
**Author:** [@parogne](https://discuss.elastic.co/u/parogne)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 9:58am UTC](https://discuss.elastic.co/t/apm-sample-apps/273935 "2021-05-26T09:58:14Z")
I am looking for some resources. I need to do a POC on APM and I would love to be able to get ahold of some bare bones sample code to demo what the different data streams look like in the APM Dashboards. I tried search… --- ## [READ ONLY LATEST RECORDS FROM AN INDEX USING SPARK-SCALA API](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 9:49am UTC](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035 "2021-05-26T09:49:59Z")
i want to read only the latest records from an index so i am passing the below query in my spark-scala code conf.set("es.query","""{ "query": { "match\_all": {} }, "sort": \[ { "@timestamp": { "order": "desc" } } … --- ## [Sharing files among different folders in kibana 7.10.2](https://discuss.elastic.co/t/sharing-files-among-different-folders-in-kibana-7-10-2/273813)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 9:36am UTC](https://discuss.elastic.co/t/sharing-files-among-different-folders-in-kibana-7-10-2/273813 "2021-05-26T09:36:27Z")
Hi Team, I had created a new file inside src\\core\\server\\core\_app\\refresh\_service.ts and trying to access it at src\\plugins\\data\\public\\ui\\search\_bar\\search\_bar.tsx I am getting linting errors, even I am not able to b… --- ## [An existing connection was forcibly closed on remote host](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-on-remote-host/274031)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 9:28am UTC](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-on-remote-host/274031 "2021-05-26T09:28:39Z")
Hi, I have Elk setup of 3 nodes version 7.11.1. It's a new setup and currently I am testing few beats and modules. I have a central server where logs are present and i am using heartbeat, metricbeat, filebeat for same. … --- ## [Data not updating automatically when I change my MySQL table](https://discuss.elastic.co/t/data-not-updating-automatically-when-i-change-my-mysql-table/273536)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 9:25am UTC](https://discuss.elastic.co/t/data-not-updating-automatically-when-i-change-my-mysql-table/273536 "2021-05-26T09:25:05Z")
Hi! I'm having some issues at the moment of updating my data in Kibana when I change any info from MySQL table. I don't really know if it's possible. Can someone help me? Thanks! [Previous page](https://discuss.elastic.co/latest.md?page=1657) [Next page](https://discuss.elastic.co/latest.md?page=1659)