# Latest **URL:** https://discuss.elastic.co/latest.md?page=1747 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1748 --- ## [SQL query do not return whole data](https://discuss.elastic.co/t/sql-query-do-not-return-whole-data/269309)
**Author:** [@czmoku](https://discuss.elastic.co/u/czmoku)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:11pm UTC](https://discuss.elastic.co/t/sql-query-do-not-return-whole-data/269309 "2021-04-06T16:11:23Z")
Hello We facing with issue with Apache Superset + elasticsearch. Apache Superset use the SQL (this one Elasticsearch SQL: Query Elasticsearch Indices with SQL | Elastic) and we notice problems with fetching old data. Ou… --- ## [Elasticsearch plugin error while installing analysis-icu,zenity and analysis-phonetic](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237)
**Author:** [@ishan2](https://discuss.elastic.co/u/ishan2)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237 "2021-04-06T16:09:01Z")
Elastic search plugin error while installing analysis-icu: $bin/elasticsearch-plugin install analysis-icu Error: Could not find or load main class org.elasticsearch.plugins.PluginCli Caused by: java.lang.ClassNotFoundEx… --- ## [Logstash or Spark -- Elasticsearch](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313)
**Author:** [@alvgoro](https://discuss.elastic.co/u/alvgoro)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313 "2021-04-06T16:05:13Z")
Hi there! I was searching on Google and this forum but I am still undecided. I would like to develop a system which collects logs from several servers and then analyze them. I thinked about Beats to collect logs (and … --- ## [Logstash Post Install of plugins](https://discuss.elastic.co/t/logstash-post-install-of-plugins/269348)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:47pm UTC](https://discuss.elastic.co/t/logstash-post-install-of-plugins/269348 "2021-04-06T15:47:46Z")
For those who are struggeling with the install of plugins and having them install on spinning up a container I have wrote this mount the file from your volumn outside the container to Container Path: /usr/share/logstas… --- ## [Filebeat AWS S3 Module not working](https://discuss.elastic.co/t/filebeat-aws-s3-module-not-working/268781)
**Author:** [@bapa](https://discuss.elastic.co/u/bapa)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/filebeat-aws-s3-module-not-working/268781 "2021-04-06T15:42:30Z")
Hi Team, We are facing the filebeat aws s3 module issue in version 7.10 ,7.10.1, 7.11.0, 7.11.1, 7.11.2, 7.12.0 We have deployed the filebeat in k8s environment. And the ELK with ECK operator. While we tried to use th… --- ## [Data Transfer from Sql Server to Elasticsearch with SSIS and CData](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307 "2021-04-06T15:42:14Z")
I am trying to data transfer from Sql Server to Elasticsearch with SSIS (Microsoft SQL Server Integration Services) application using CData Elasticsearch Destination tool. What I am successfully for now. Using SSIS I … --- ## [Elasticsearch - Forcemerge to merge several shards](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310 "2021-04-06T15:40:48Z")
I have indexes that are created weekly, associated to an allias. The indexes were configured for two shards, and one replica per shard. The shards are very low space, around 50 mb, so I think those could be converted to … --- ## [I am getting this error when running logstash configuration pipeline through logstash.yml file](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318 "2021-04-06T15:40:23Z")
I have written a logstash configuration pipeline that receive events from syslog and stores that events in elasticsearch.When I run this pipeline through command line everything works fine,but when I run this pipeline th… --- ## [Server Company and Developer Company keep passing the buck](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343)
**Author:** [@Joanchka](https://discuss.elastic.co/u/Joanchka)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:36pm UTC](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343 "2021-04-06T15:36:05Z")
I want to upgrade my Magento to 2.4.2. The Developer Company who is doing this upgrade asked me to ensure my server has ElasticSearch 7.9.2 The Server Company installed ElasticSearch 7.9.2 on my server (I can see this … --- ## [Grok works (no grok parse failure) but doesnt create the fields](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 3:15pm UTC](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203 "2021-04-06T15:15:45Z")
Hi I have a field called "if\_speed\_in\_out", this field contains strings like this "100 Mbps:100 Mbps" i have tested the grok on kibana devs tools and works, but never create the fields defined in the grok, just get the o… --- ## [Fix for CVE-2021-22134 in 7.10.X version](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340)
**Author:** [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 2:53pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340 "2021-04-06T14:53:55Z")
Hello, do exist any plans to create a security patch for CVE-2021-22134 NVD - CVE-2021-22134 in 7.10.x version, if yes then when? Thanks --- ## [Engineering II training - lab 3.4](https://discuss.elastic.co/t/engineering-ii-training-lab-3-4/269345)
**Author:** [@James\_Roberts](https://discuss.elastic.co/u/James_Roberts)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:00pm UTC](https://discuss.elastic.co/t/engineering-ii-training-lab-3-4/269345 "2021-04-06T15:00:25Z")
Is there a lab for lesson 3.4 (Server Configuration Best Practices) I can't seem to find it. --- ## [Cannot read elasticsearch.hosts from kibana configuration](https://discuss.elastic.co/t/cannot-read-elasticsearch-hosts-from-kibana-configuration/269232)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 2:12pm UTC](https://discuss.elastic.co/t/cannot-read-elasticsearch-hosts-from-kibana-configuration/269232 "2021-04-06T14:12:51Z")
Hi all, We were trying to read the elasticsearch cluster hosts in out plugin's server-side, but we were unable to find anything in the context parameter in callback function. as shown in below code: export function de… --- ## [Logstash translate filter and converting integers to strings](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 2:48pm UTC](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803 "2021-04-06T14:48:13Z")
I am on logstash 7.11. I need a translate from an integer code to real speed value. mutate { convert =\> { "ifspeed" =\> "string" } } translate { field =\> "\[ifspeed\]" destination =\> "\[inf\_speed\]" dictionary =\> … --- ## [Elastic Agent stopped sending certain data streams](https://discuss.elastic.co/t/elastic-agent-stopped-sending-certain-data-streams/267109)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 5\ **Last updated:** [April 6, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elastic-agent-stopped-sending-certain-data-streams/267109 "2021-04-06T14:44:55Z")
Hi, I have deployed the agent along with the windows intergration. As part of this I wanted to collect Powershell logs. This was working fine however at 20:31:49.750 yestarday I received my last powershell log on the "… --- ## [Bulk API in enterprise search](https://discuss.elastic.co/t/bulk-api-in-enterprise-search/269225)
**Author:** [@Nadir\_Ait\_Lahmouch](https://discuss.elastic.co/u/Nadir_Ait_Lahmouch)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 4:53pm UTC](https://discuss.elastic.co/t/bulk-api-in-enterprise-search/269225 "2021-04-05T16:53:06Z")
Hey guys, I need some help, I am trying to index some documents into the cloud enterprise search using bulk api but i keep getting a routing error. Here's the script i wrote: for FILE in \*.json do curl -XPOST '\ **Author:** [@AquaX](https://discuss.elastic.co/u/AquaX)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 2:37pm UTC](https://discuss.elastic.co/t/using-vega-to-create-a-histogram-with-global-mean/269335 "2021-04-06T14:37:52Z") Hey everyone. EDIT: I'm using Kibana 7.11 I'm eventually trying to create one of these diagrams using Vega-Lite: It looks easy enough but I'm trying to use pre-aggregated data so I'm starting by just trying to get t… --- ## [PDF reporting option not available in free licensed version](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 2:33pm UTC](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324 "2021-04-06T14:33:28Z")
I am using a free version of Kibana and wondering whether it is allowed to generate PDF reports from dashboard or not? I do not get any option for PDF report when I click on Share on my dashboard. --- ## [Logstash workers dying randomly](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342)
**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342 "2021-04-06T14:20:33Z")
Hello, we use Logstash to collect syslog messages from network devices. The instance has one pipeline listening on UDP port 7514 with 16 workers, the filter part consists of a couple of grok patterns, mutate fileds, DNS… --- ## [Elastic Agent will not upgrade through fleet or locally](https://discuss.elastic.co/t/elastic-agent-will-not-upgrade-through-fleet-or-locally/269337)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 2:10pm UTC](https://discuss.elastic.co/t/elastic-agent-will-not-upgrade-through-fleet-or-locally/269337 "2021-04-06T14:10:06Z")
Hi, We deployed the agent to a number of devices for testing. At the time the Elastic stack and Agents were on version 7.10.1 . We have recently upgraded our stack to 7.12.0 and as you would expect the agents in fleet … --- ## [Failed to load indices and failed to load cluster](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124)
**Author:** [@FOMihai](https://discuss.elastic.co/u/FOMihai)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 2:00pm UTC](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124 "2021-04-06T14:00:10Z")
Hello, I have ELK stack installed with: Elasticsearch version 7.11 and Kibana 7.8.1 with RoR free version for security. I plan also to upgrade Kibana to a version more appropriate to elastic search 7.11. I have the… --- ## [Alerting throws "node \[es-client1\] does not have the \[remote\_cluster\_client\] role"](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073)
**Author:** [@hrak](https://discuss.elastic.co/u/hrak)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 1:15pm UTC](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073 "2021-04-06T13:15:34Z")
Hi all, My cluster consists of the following nodes: 2x coordinating node (empty node.roles) 3x master (node.roles = \['master'\]) 5x data (node.roles = \['data', 'ingest', 'ml', 'transform'\]) I have recently upgraded f… --- ## [Dropping network events for private IP range through Winlogbeat yml config](https://discuss.elastic.co/t/dropping-network-events-for-private-ip-range-through-winlogbeat-yml-config/269027)
**Author:** [@Psyhil](https://discuss.elastic.co/u/Psyhil)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 1:22pm UTC](https://discuss.elastic.co/t/dropping-network-events-for-private-ip-range-through-winlogbeat-yml-config/269027 "2021-04-06T13:22:28Z")
Hi there, We are forwarding system network event logs via winlogbeat generated by sysmon and was attempting at dropping internal traffic events using private IP ranges. Seems yml config does not supports wildcard hence… --- ## [Initial JDBC input for a tracking column type of timestamp](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 12:25pm UTC](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163 "2021-04-06T12:25:11Z")
I am trying to pull data from an MS SQL Server database. The data is refreshed on the hour and I want to pull at 15 minutes after the top of the hour. The input looks like this: input { jdbc { jdbc\_driver\_library … --- ## [How to configure apache.yml in filebeat with multiple paths in var.paths](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 10:59am UTC](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980 "2021-04-06T10:59:59Z")
i am not getting on how i can add multiple paths in var.paths parameter in apache.yml? i have configured one path but i have multiple log files with different names so how can add those paths too? # ====================… --- ## [Filters set not impacting graph?](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 10:56am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512 "2021-04-06T10:56:05Z")
I have two filters on a workpad, one for time and one for customer in this case. timefilterControl compact=true column="startTime" filterGroup="perfGroup" | render esdocs index="dynatrace-problems-" fields="customer" … --- ## [Grok filter](https://discuss.elastic.co/t/grok-filter/269194)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 10\ **Last updated:** [April 6, 2021, 10:54am UTC](https://discuss.elastic.co/t/grok-filter/269194 "2021-04-06T10:54:51Z")
Hi, I have a csv file which has currently three rows in it which are as follow: name,age,ip A,12,10.11.1.12 B,13,10.11.1 Now I want to check during the data ingestion via this csv that whether the IP is in proper fo… --- ## [Use beats to read multiline event excluding some lines in-between](https://discuss.elastic.co/t/use-beats-to-read-multiline-event-excluding-some-lines-in-between/268990)
**Author:** [@lukiovas](https://discuss.elastic.co/u/lukiovas)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 10:52am UTC](https://discuss.elastic.co/t/use-beats-to-read-multiline-event-excluding-some-lines-in-between/268990 "2021-04-06T10:52:59Z")
I have a log: server.name 2021-03-28 10:03:28.648 INFO ... --------------------------- ID: 3974 Address: https://www... Encoding: UTF-8 Http-Method: POST Content-Type: text/xml Headers: {Accept=\[\*/\*\], ... Payload: \ **Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:44am UTC](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221 "2021-04-06T10:44:18Z") the problem is with the index.max\_result\_window, we have an index of 12M records , how can we query/get all data using a script? (logstash not relevant) --- ## [How to configure logstash file to make nested object inside another nested filed from sql query?](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077 "2021-04-06T10:28:12Z")
I am new in Elasticsearch and logstash and I have an issue with nested objects. So what I want to ask is how can I create index with multiple nested fields inside another nested fields. How can I build the data inside l… [Previous page](https://discuss.elastic.co/latest.md?page=1746) [Next page](https://discuss.elastic.co/latest.md?page=1748)