# Latest **URL:** https://discuss.elastic.co/latest.md?page=1775 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1776 --- ## [Packetbeat will not GET Kibana HTTPS](https://discuss.elastic.co/t/packetbeat-will-not-get-kibana-https/267210)
**Author:** [@Elks2020](https://discuss.elastic.co/u/Elks2020)\ **Replies:** 6\ **Last updated:** [March 20, 2021, 4:09am UTC](https://discuss.elastic.co/t/packetbeat-will-not-get-kibana-https/267210 "2021-03-20T04:09:35Z")
Hello everyone, I need help to figure-out the following problem to be fixed where the packetbeat won't start! :tired\_face: ' ' ' packetbeat\[523584\]: Exiting: error connecting to Kibana: fail to get the Kibana version… --- ## [Alerts don't fire](https://discuss.elastic.co/t/alerts-dont-fire/267174)
**Author:** [@ShadwDrgn](https://discuss.elastic.co/u/ShadwDrgn)\ **Replies:** 11\ **Last updated:** [March 19, 2021, 11:41pm UTC](https://discuss.elastic.co/t/alerts-dont-fire/267174 "2021-03-19T23:41:21Z")
I feel like the attached image should not be possible since it's checking every minute and CLEARLY should be active, but is in an okay state? Alerts only become active one time for me... Once they recover, they seem to n… --- ## [Logstash new install: response code '403' contacting Elasticsearch](https://discuss.elastic.co/t/logstash-new-install-response-code-403-contacting-elasticsearch/267862)
**Author:** [@kmp](https://discuss.elastic.co/u/kmp)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 8:45pm UTC](https://discuss.elastic.co/t/logstash-new-install-response-code-403-contacting-elasticsearch/267862 "2021-03-19T20:45:20Z")
Posting this for the record, should anyone else run into the same problem... LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError: Got response code '403' contacting Elasticsearch at URL 'https://es0… --- ## [Kibana shows empty pages](https://discuss.elastic.co/t/kibana-shows-empty-pages/267848)
**Author:** [@iatalay](https://discuss.elastic.co/u/iatalay)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 8:30pm UTC](https://discuss.elastic.co/t/kibana-shows-empty-pages/267848 "2021-03-19T20:30:47Z")
Hi We have install Elasticsearch and Kibana 7.11.1 on RHEL 8.3. (Also I tried RHEL 7.9 for Kibana). We also have installed search-guard plugin. Some of the pages on Kibana are empty, show nothing. Tried firefox, chro… --- ## [How to set up a highly available elasticsearch cluster locally?](https://discuss.elastic.co/t/how-to-set-up-a-highly-available-elasticsearch-cluster-locally/267803)
**Author:** [@Belgacem\_Ghiloufi](https://discuss.elastic.co/u/Belgacem_Ghiloufi)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 8:05pm UTC](https://discuss.elastic.co/t/how-to-set-up-a-highly-available-elasticsearch-cluster-locally/267803 "2021-03-19T20:05:13Z")
I am new to Elasticsearch and I want to set up a highly available Elasticsearch cluster on one machine to test and learn how to use Elasticsearch. I hope that when the master node fails, one of the other nodes will take … --- ## [Managed index templates, composition, and ECS](https://discuss.elastic.co/t/managed-index-templates-composition-and-ecs/266734)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 8:04pm UTC](https://discuss.elastic.co/t/managed-index-templates-composition-and-ecs/266734 "2021-03-19T20:04:40Z")
We are upgrading to Elastic 7 and at the same time attempting to move our entire pipeline to ECS. I'm wondering how template composition fits in with everything. We primarily store transient logs and I'm wondering what … --- ## [Index mapping changed from object to nested and reindex](https://discuss.elastic.co/t/index-mapping-changed-from-object-to-nested-and-reindex/266373)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 5:26pm UTC](https://discuss.elastic.co/t/index-mapping-changed-from-object-to-nested-and-reindex/266373 "2021-03-19T17:26:04Z")
Hello I want to change an index property which is object (default) to nested type and keep the data. The process I'm following is creating a new index with the new mappings then use the reindex API. The problem comes wh… --- ## [Visualization- ASA Flows by Network Bytes not showing in GB or MB](https://discuss.elastic.co/t/visualization-asa-flows-by-network-bytes-not-showing-in-gb-or-mb/267825)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 5:20pm UTC](https://discuss.elastic.co/t/visualization-asa-flows-by-network-bytes-not-showing-in-gb-or-mb/267825 "2021-03-19T17:20:38Z")
Hi Team, I would like to know how i can have the below graph show the GB/MB in the Y-Axis. Now its showing as Just the number , i need to change it to show as eg 1GB or 2GB etc. Please help Thanks, Ajesh --- ## [Elastic Agent to Logstash](https://discuss.elastic.co/t/elastic-agent-to-logstash/266341)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 4:50pm UTC](https://discuss.elastic.co/t/elastic-agent-to-logstash/266341 "2021-03-19T16:50:36Z")
Hi, I was wondering if there are any plans to allow for shipping Agent collected Logs to Logstash, this is to allow for further enrichment. I have had a quick google but could not find anything on this subject. Thanks… --- ## [Kibana : internal server error](https://discuss.elastic.co/t/kibana-internal-server-error/267790)
**Author:** [@Salvatore\_Minervini](https://discuss.elastic.co/u/Salvatore_Minervini)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/kibana-internal-server-error/267790 "2021-03-19T16:07:32Z")
hi all, I'm new on kubernates and ELK and "i beg your pardon" if i wil lask something stupid, i googled a while for a solution but i found nothing so i decide to ask help.... in our configuration on kubernates, we hav… --- ## [\_index field filter performance VS index name in url](https://discuss.elastic.co/t/index-field-filter-performance-vs-index-name-in-url/266572)
**Author:** [@Abbass](https://discuss.elastic.co/u/Abbass)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 3:33pm UTC](https://discuss.elastic.co/t/index-field-filter-performance-vs-index-name-in-url/266572 "2021-03-19T15:33:18Z")
From performance perspective, does filtering on \_index field behave as if i've set the index name in the URL? GET log-\*/\_doc/\_search { "query": { "bool": { "must": \[ { "term": { … --- ## [Logstash CSV adding multiple rows by splitting a column value](https://discuss.elastic.co/t/logstash-csv-adding-multiple-rows-by-splitting-a-column-value/267766)
**Author:** [@venkat\_s](https://discuss.elastic.co/u/venkat_s)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 3:22pm UTC](https://discuss.elastic.co/t/logstash-csv-adding-multiple-rows-by-splitting-a-column-value/267766 "2021-03-19T15:22:54Z")
Hello, I am importing csv file to elasticsearch using logstash. I need to duplicate a row based on a comma separated column values. This is how the data looks. I want to add multiple rows based on the number of valu… --- ## ["No Added Sugar" and "Added Sugar" term match](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730)
**Author:** [@Alan88](https://discuss.elastic.co/u/Alan88)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 3:17pm UTC](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730 "2021-03-19T15:17:01Z")
I'm looking for a way to tell elasticsearch that "no added sugar" and "added sugar" are separate phrases and should be indexed accordingly. I do not want them to conflate or conflict with each other. Docs example: "Col… --- ## [How to Get a Raw Logs Copy from elasticsearch](https://discuss.elastic.co/t/how-to-get-a-raw-logs-copy-from-elasticsearch/266326)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 6\ **Last updated:** [March 19, 2021, 3:11pm UTC](https://discuss.elastic.co/t/how-to-get-a-raw-logs-copy-from-elasticsearch/266326 "2021-03-19T15:11:42Z")
Hi Team, We are currently sending all our audit logs to elasticsearch cluster using filebeat and auditbeat ( Logstash is not used) , Can we get the raw copy of logs or some log forwarder can be used in elasticsearch to … --- ## [Logstash file input/output with multiline codec](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552)
**Author:** [@liuke](https://discuss.elastic.co/u/liuke)\ **Replies:** 8\ **Last updated:** [March 19, 2021, 3:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552 "2021-03-19T15:03:50Z")
Hello, i'm new in logstash and i'm encountering some troubles on building a config that works properly with my needings. What i want to do is: -Input files from multiples folders (application logs, so with java excepti… --- ## [\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/267798)
**Author:** [@sourabhjain104](https://discuss.elastic.co/u/sourabhjain104)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 2:57pm UTC](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/267798 "2021-03-19T14:57:13Z")
Hello, I am very new to ELK, I am trying to setup ELK (7.11.2) in my local windows 10 laptop. I am able to successfully run Elasticsearch and Kibana but I have issue with Logstash. I tried to figure out this issue by … --- ## [Add local json file into elasticsearch](https://discuss.elastic.co/t/add-local-json-file-into-elasticsearch/267819)
**Author:** [@feyn\_mak](https://discuss.elastic.co/u/feyn_mak)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 2:48pm UTC](https://discuss.elastic.co/t/add-local-json-file-into-elasticsearch/267819 "2021-03-19T14:48:13Z")
Hi, how do i add a json file e.g { "0": "passage 1", "1":"passage 2", "2":"passage 3" } into elasticsearch? Thank you so much for your help! --- ## [Multiple spliting in a single string using logstash](https://discuss.elastic.co/t/multiple-spliting-in-a-single-string-using-logstash/267817)
**Author:** [@Kiran\_Gupta](https://discuss.elastic.co/u/Kiran_Gupta)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 2:12pm UTC](https://discuss.elastic.co/t/multiple-spliting-in-a-single-string-using-logstash/267817 "2021-03-19T14:12:37Z")
I had a string called regions\_of\_interest which holds the following value "California - San Diego,New Zealand - Auckland,Asia - Hong Kong" I want to split this string multiple times, First with the comma(,) and then wit… --- ## [Search in all given filed but it return only match filed. so i can send those value on front end](https://discuss.elastic.co/t/search-in-all-given-filed-but-it-return-only-match-filed-so-i-can-send-those-value-on-front-end/267770)
**Author:** [@mayank\_hardiya](https://discuss.elastic.co/u/mayank_hardiya)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 9:16am UTC](https://discuss.elastic.co/t/search-in-all-given-filed-but-it-return-only-match-filed-so-i-can-send-those-value-on-front-end/267770 "2021-03-19T09:16:53Z")
My query - client.search({ index: indexname, body: { query: { multi\_match: { query: req.query.search, fields: \["description","name","hostname","username","category\_name"\], } }, } }, it return - \[ { "\_index"… --- ## [Latest Timestamp Machine learning doesn't change](https://discuss.elastic.co/t/latest-timestamp-machine-learning-doesnt-change/267362)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 5\ **Last updated:** [March 19, 2021, 1:52pm UTC](https://discuss.elastic.co/t/latest-timestamp-machine-learning-doesnt-change/267362 "2021-03-19T13:52:14Z")
Elasticsearch: Platinum 7.10.1 Kibana: 7.10.1 Hi, I am creating Machine learning jobs in real time. The questions are: What kind of information Latest Timestamp provides? and Why the Latest Timestamp remains the sa… --- ## [Data tiering (hot, warm and cold storage)](https://discuss.elastic.co/t/data-tiering-hot-warm-and-cold-storage/267814)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 1:29pm UTC](https://discuss.elastic.co/t/data-tiering-hot-warm-and-cold-storage/267814 "2021-03-19T13:29:35Z")
Hello, I am a self-funded student with a homelab wherein I am capturing honeypot logs. I have a workstation with SSD storage wherein one disk holds the VMs OS (Ubuntu server 20.04.2 LTS), and the second SSD contains a da… --- ## [Modsecurity Json log parsing](https://discuss.elastic.co/t/modsecurity-json-log-parsing/267807)
**Author:** [@mirko.spezie](https://discuss.elastic.co/u/mirko.spezie)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 1:35pm UTC](https://discuss.elastic.co/t/modsecurity-json-log-parsing/267807 "2021-03-19T13:35:01Z")
Hi, I'm trying to parse with no success the modsecurity json log. This is the output: { "\_index": "modsecurity-2021.03.17", "\_type": "\_doc", "\_id": "oQRWQngB6w34lfYfAQp6", "\_version": 1, … --- ## [Control visualization is not working as expected](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 1:14pm UTC](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602 "2021-03-19T13:14:07Z")
Hello everybody, I am comparing the same control visualisation for two different timespans. No other filter is being applied. With control visualisation, I mean this visualisation type: At first, I choose a timespa… --- ## [Can elasticsearch help in seo](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622)
**Author:** [@fatheyabelslam](https://discuss.elastic.co/u/fatheyabelslam)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 12:10pm UTC](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622 "2021-03-19T12:10:39Z")
Hi, I working with yoast.js The main use of it is to analyze content and return score of content based on google requirements for best content structure And i think :thinking: that elasticsearch is the best in unders… --- ## [Custom Dashboard APM](https://discuss.elastic.co/t/custom-dashboard-apm/267443)
**Author:** [@Helmy\_Me](https://discuss.elastic.co/u/Helmy_Me)\ **Replies:** 7\ **Last updated:** [March 19, 2021, 11:48am UTC](https://discuss.elastic.co/t/custom-dashboard-apm/267443 "2021-03-19T11:48:07Z")
Hi, I try to create Custom Dashboard (APM), but I still Confuse to create visuallens (chart) to every single transaction in single Dashboard. example : I want to create Latency (response time) for transaction like Login… --- ## [How to restrict access to specific indices when the user get the space privilege](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876)
**Author:** [@empire](https://discuss.elastic.co/u/empire)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 11:39am UTC](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876 "2021-03-19T11:39:19Z")
Hi, I have a role defined as below. would like to know if the indices restriction still work when the user is allowed to get access to the "vulcano" space. e.g will the user in this role still be restricted to only hav… --- ## [Watcher Script for Monitoring Shard Size](https://discuss.elastic.co/t/watcher-script-for-monitoring-shard-size/267761)
**Author:** [@Learner4](https://discuss.elastic.co/u/Learner4)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 7:53am UTC](https://discuss.elastic.co/t/watcher-script-for-monitoring-shard-size/267761 "2021-03-19T07:53:17Z")
I'm trying to create a Watcher Script to monitor the Shard size for all the indices. Example - If shard size reaches more than 30 GB, an alert should get trigger from Watcher \*\*GET \_cat/shards?v&s=store:desc&format=json&… --- ## [Elasticsearch bulk insertion issue: 403 request throttled due to too many requests](https://discuss.elastic.co/t/elasticsearch-bulk-insertion-issue-403-request-throttled-due-to-too-many-requests/267748)
**Author:** [@divakar](https://discuss.elastic.co/u/divakar)\ **Replies:** 16\ **Last updated:** [March 19, 2021, 11:13am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insertion-issue-403-request-throttled-due-to-too-many-requests/267748 "2021-03-19T11:13:36Z")
I have following cluster configuration of ES on AWS: Instance Type: t2.small.elasticsearch Number of Nodes: 1 EBS Volume Type: GP2 EBS Volume Size: 10 GiB Heap size: 1 GiB I am trying to index around 20000 document… --- ## [Mulitline pattern in docker autodiscover](https://discuss.elastic.co/t/mulitline-pattern-in-docker-autodiscover/267647)
**Author:** [@d01](https://discuss.elastic.co/u/d01)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 11:06am UTC](https://discuss.elastic.co/t/mulitline-pattern-in-docker-autodiscover/267647 "2021-03-19T11:06:39Z")
I have the following logs coming from a docker container: 2021-03-17T13:43:43+0000 DEBUG \[\_\_main\_\_.\\] Debug 2021-03-17T13:43:43+0000 INFO \[\_\_main\_\_.\\] Info 2021-03-17T13:43:43+0000 WARNI… --- ## [Filebeat error when importing logs](https://discuss.elastic.co/t/filebeat-error-when-importing-logs/267395)
**Author:** [@Liliana\_Novais](https://discuss.elastic.co/u/Liliana_Novais)\ **Replies:** 8\ **Last updated:** [March 19, 2021, 10:27am UTC](https://discuss.elastic.co/t/filebeat-error-when-importing-logs/267395 "2021-03-19T10:27:33Z")
Hello, I configured my elasticsearch with file beat. When my file is changed I get the following error from filebeat: can someone helpme understand this error? [Previous page](https://discuss.elastic.co/latest.md?page=1774) [Next page](https://discuss.elastic.co/latest.md?page=1776)