# Latest **URL:** https://discuss.elastic.co/latest.md?page=1668 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1669 --- ## [How can I setup Alert and Actions privileges for a specific user role?](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121 "2021-05-20T14:22:23Z")
I am trying to setup roles in elasticsearch so that the user can create and setup alers in Alerts and Actions tab. I am getting "No permissions to create alerts" message in Alerts Tab. Any idea how I can setup these acce… --- ## [Kibana Local Set Up - Permissions Issue](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 2:11pm UTC](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681 "2021-05-20T14:11:03Z")
I have setup kibana as per the guide and I have checked out version as well. But while running bootstrap cmd, I have been presented with below error info If you think this is a bug, please open a bug report with the inf… --- ## [Filebeat not writing to index](https://discuss.elastic.co/t/filebeat-not-writing-to-index/273422)
**Author:** [@aidenosi](https://discuss.elastic.co/u/aidenosi)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-not-writing-to-index/273422 "2021-05-20T13:35:53Z")
Hello, I've been trying to set up Filebeat (6.8.0) on our Linux machines for a few days now but keep running into this issue where it seems that Filebeat stops communicating/writing to Elastic. Config below: filebeat:… --- ## [Multiple Logstash outputs vs pipeline-to-pipeline communcations](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:24pm UTC](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546 "2021-05-20T13:24:25Z")
Hi folks, I have following use case: I want to create one index for each kubernetes namespace (and its own lifecycle policy) and I want to use the ILM. As far as I understand I have two approaches: I have one pipelin… --- ## [Uptime monitor status missing alert variables for Recovered status](https://discuss.elastic.co/t/uptime-monitor-status-missing-alert-variables-for-recovered-status/272858)
**Author:** [@bwright1558](https://discuss.elastic.co/u/bwright1558)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 1:12pm UTC](https://discuss.elastic.co/t/uptime-monitor-status-missing-alert-variables-for-recovered-status/272858 "2021-05-20T13:12:58Z")
I have an Uptime monitor status alert with an action configured to run when "Recovered". I'm using the following message template for the action: OK - Monitor {{state.monitorName}} is {{state.statusMessage}}. Both stat… --- ## [From SQL Server Management Studio to Elastic Search: config file](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:09pm UTC](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544 "2021-05-20T13:09:03Z")
Good Evening. I'm new on the ELK stack and for the first time I'm trying to import some data from SQL Server Manamenet Studio database to the ElasticSearch. I know there is the necessity to download a driver to use the… --- ## [Painless Script - Unexpected characters](https://discuss.elastic.co/t/painless-script-unexpected-characters/273502)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 1:08pm UTC](https://discuss.elastic.co/t/painless-script-unexpected-characters/273502 "2021-05-20T13:08:03Z")
I am trying to update a doc using painless scripts. My document contain fields like "a4ayc/8" (the field name contains the character /). Document sample: { "\_index" : "user\_profile", "\_type" : "\_doc", "\_id"… --- ## [Search for text in a string](https://discuss.elastic.co/t/search-for-text-in-a-string/273457)
**Author:** [@cyberguy2891](https://discuss.elastic.co/u/cyberguy2891)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 1:06pm UTC](https://discuss.elastic.co/t/search-for-text-in-a-string/273457 "2021-05-20T13:06:15Z")
Hi, Im fairly new to elastic search and Ive been stuck on these for 8 hrs now. I have a log field like this: Retry Exhausted Error Get segment: GET request failed after 1 attempts to record the segment (final status co… --- ## [AccessDeniedException on path.data when adding Volume Claim Templates on ECK](https://discuss.elastic.co/t/accessdeniedexception-on-path-data-when-adding-volume-claim-templates-on-eck/273540)
**Author:** [@Leonardo\_Corrati1](https://discuss.elastic.co/u/Leonardo_Corrati1)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:00pm UTC](https://discuss.elastic.co/t/accessdeniedexception-on-path-data-when-adding-volume-claim-templates-on-eck/273540 "2021-05-20T13:00:57Z")
Hi, I'm trying to deploy ECK on OpenShift using Minishift. I get the following error when I define a volume claim template according to the documentation: "stacktrace": \["org.elasticsearch.bootstrap.StartupException: … --- ## [Painless Reindex Script saving long as integer](https://discuss.elastic.co/t/painless-reindex-script-saving-long-as-integer/273445)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 12:44pm UTC](https://discuss.elastic.co/t/painless-reindex-script-saving-long-as-integer/273445 "2021-05-20T12:44:12Z")
Hi all, I am trying to use a painless script as part of a reindex to multiply a long by a number, and then save it as the source field. However, when the new value is saved it is saved as an integer instead of a long re… --- ## [Error WATCHER smtp.host](https://discuss.elastic.co/t/error-watcher-smtp-host/273516)
**Author:** [@milasi99](https://discuss.elastic.co/u/milasi99)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 12:31pm UTC](https://discuss.elastic.co/t/error-watcher-smtp-host/273516 "2021-05-20T12:31:43Z")
Hi, i have the elasticsearch version 7.12, and im trying do a Watcher. I have that error: Summary{ "watch\_id": "prueba", "node": "RWT064xBSfu5wmGh9bksrA", "state"… --- ## [How Kibana Transforms work?](https://discuss.elastic.co/t/how-kibana-transforms-work/273370)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 12:19pm UTC](https://discuss.elastic.co/t/how-kibana-transforms-work/273370 "2021-05-20T12:19:41Z")
Hi, My question is Can we make Kibana Transforms do the same work as Rollup job does? As per I analyzed, Transforms is grouping and doing aggregations on events and putting them in another index. But I want to keep nu… --- ## [Logstash pipeline problem (logstash not appearing in kibana)](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 11:59am UTC](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429 "2021-05-20T11:59:38Z")
Hi guys, thank you for having me on this forum. I am trying to set up ELK for the first time. I have followed installation instructions from elastic.co with numbers of videos on yt and I have finally installed ELK. The… --- ## [Displaying field values in Alert Actions](https://discuss.elastic.co/t/displaying-field-values-in-alert-actions/273524)
**Author:** [@kanikasingla](https://discuss.elastic.co/u/kanikasingla)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 12:03pm UTC](https://discuss.elastic.co/t/displaying-field-values-in-alert-actions/273524 "2021-05-20T12:03:34Z")
Hi Team, I am trying to setup some alerts and want to include values from log fields in the message when sending action, how can I do it? --- ## [How to chain synonyms in Elasticsearch](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522)
**Author:** [@nik0219](https://discuss.elastic.co/u/nik0219)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522 "2021-05-20T12:02:39Z")
In my Application I want to create the following hierarchy: hobby -\> sport -\> football When looking for the word hobby, I want to check for the words sport and football as well, when looking for the word sport I also w… --- ## [Are there any size limits snapshot in Elasticsearch](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:48am UTC](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517 "2021-05-20T11:48:52Z")
I would like to understand if there are any size limitations when save/restore snapshots? Are there such? --- ## [Mapping two string values or create kv pair](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518 "2021-05-20T11:38:28Z")
my current pipeline in logstash after running on input log data is producing below output , i need to map it one to one..or create kv such as .. pl-3: 361 pl-4: 366 etc.... "header" =\> "Parameter … --- ## [Inline script for round off float field is not working](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:08am UTC](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454 "2021-05-20T11:08:17Z")
Hi all, I'm trying to display average of a field in visualization bucket. But when i use below code in inline text of advanced JSON for an integer value, I dont get. I dont want decimal values. { "script": { "inlin… --- ## [MongoDB Module - Memory / Connection issues over time](https://discuss.elastic.co/t/mongodb-module-memory-connection-issues-over-time/273512)
**Author:** [@Nessworthy](https://discuss.elastic.co/u/Nessworthy)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 11:03am UTC](https://discuss.elastic.co/t/mongodb-module-memory-connection-issues-over-time/273512 "2021-05-20T11:03:17Z")
Agent OS: Amazon Linux 2 AMI 2.0.20210326.0 x86\_64 HVM gp2 Type: t3.medium (v)CPUs: 2 Memory: 4GB MongoDB Version: 4.0.19 Metricbeat Version: 6.6.0 I have the following configuration for the module: - hosts: \[… --- ## [Create configuration with minimum 2 master nodes](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 10:51am UTC](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501 "2021-05-20T10:51:48Z")
I want (via ECK) to create a setup where a) there will be three nodes in total having all roles b) there will be a MINIMUM of 2 master nodes Is the following configuration on the Elasticsearch resource legit? apiVers… --- ## [Grok and curly brackets](https://discuss.elastic.co/t/grok-and-curly-brackets/273491)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 10:36am UTC](https://discuss.elastic.co/t/grok-and-curly-brackets/273491 "2021-05-20T10:36:25Z")
Dear team, I have a grok filter which needs to parse following part of line from the Haproxy logs: {\*/\*||en-US|10.12.132.200:30012||||1997-04-09-17.02.03.246664|pclient\_us} Now how do I remove the brackets from beginn… --- ## [Reindex version conflict](https://discuss.elastic.co/t/reindex-version-conflict/273352)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 4\ **Last updated:** [May 20, 2021, 10:35am UTC](https://discuss.elastic.co/t/reindex-version-conflict/273352 "2021-05-20T10:35:19Z")
Hello, What is exactly a version conflict ? An example will be appreciated. Thank you --- ## [Export to csv/excel from kibana](https://discuss.elastic.co/t/export-to-csv-excel-from-kibana/39237)
**Author:** [@jsp08](https://discuss.elastic.co/u/jsp08)\ **Replies:** 15\ **Last updated:** [May 20, 2021, 9:58am UTC](https://discuss.elastic.co/t/export-to-csv-excel-from-kibana/39237 "2021-05-20T09:58:46Z")
I have the dashboard with the graphs working without any issue. One of the requirements for my project is the ability to download the file(csv/excel). In kibana the only option i saw for downloading the file is by click… --- ## [Range-Query not working l](https://discuss.elastic.co/t/range-query-not-working-l/273496)
**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 9:49am UTC](https://discuss.elastic.co/t/range-query-not-working-l/273496 "2021-05-20T09:49:42Z")
Hello, I use: Elasticsearch-PHP ElasticsearchDSL Configurated search query: array(2) { \["index"\]=\> string(19) "my\_index\_\*" \["body"\]=\> array(4) { \["query"\]=\> array(1) { \["range"\]=\> array(… --- ## [Elasticsearch - added LDAP authentication, node won't start](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499 "2021-05-20T09:44:13Z")
Dears, ELK 7.7.0 With bellow configuration my node won't start: cluster.name: elkcluster node.name: elkcluster01 path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: 10.10.10.1 http.port: … --- ## [Uptime smtp connector?](https://discuss.elastic.co/t/uptime-smtp-connector/272897)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 9:26am UTC](https://discuss.elastic.co/t/uptime-smtp-connector/272897 "2021-05-20T09:26:29Z")
In Kibana Alerts and Actions there is a SMTP connector however for some reason you can't add a SMTP to Uptime? --- ## [GROK: help with pattern](https://discuss.elastic.co/t/grok-help-with-pattern/273396)
**Author:** [@Guillermo\_Valles\_Cas](https://discuss.elastic.co/u/Guillermo_Valles_Cas)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 9:18am UTC](https://discuss.elastic.co/t/grok-help-with-pattern/273396 "2021-05-20T09:18:38Z")
Hello!! I'm trying to get the pattern of a file in Logstash with GROK, but I do not know how to make it. The line I want to GROK is: {"type":"log","@timestamp":"2021-05-19T08:45:42+02:00","tags":\["info","plugins","actio… --- ## [How to predict N days using data frame regression model and streaming data?](https://discuss.elastic.co/t/how-to-predict-n-days-using-data-frame-regression-model-and-streaming-data/272666)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 9:11am UTC](https://discuss.elastic.co/t/how-to-predict-n-days-using-data-frame-regression-model-and-streaming-data/272666 "2021-05-20T09:11:51Z")
We have given system metrics dataset and the requirement is to predict when do we need to upgrade our servers. Basically what were trying to do is capacity planning using regression analysis. Were done with creating the … --- ## [Logstash unparsed events exceptions](https://discuss.elastic.co/t/logstash-unparsed-events-exceptions/273495)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 8:55am UTC](https://discuss.elastic.co/t/logstash-unparsed-events-exceptions/273495 "2021-05-20T08:55:10Z")
Hello, is there anybody who knows where I can find logstash events exceptions and what other healthchecks should I do for logstash --- ## [Kubernetes Module of Metricbeat does not get metrics \[7.9.2 with Kubernetes 1.21.1\]](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-metrics-7-9-2-with-kubernetes-1-21-1/272996)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 0\ **Last updated:** [May 14, 2021, 8:45am UTC](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-metrics-7-9-2-with-kubernetes-1-21-1/272996 "2021-05-14T08:45:28Z")
Hi, everyone I have been testing with a new version of Kubernetes, in this case, 1.21.1. I use Metricbeat in order to get metrics of containers, pods and nodes. Here you are my config: apiVersion: v1 kind: ConfigMap m… [Previous page](https://discuss.elastic.co/latest.md?page=1667) [Next page](https://discuss.elastic.co/latest.md?page=1669)