# Latest **URL:** https://discuss.elastic.co/latest.md?page=1781 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1782 --- ## [Cross referencing from multiple indexes](https://discuss.elastic.co/t/cross-referencing-from-multiple-indexes/267164)
**Author:** [@kevvvlar](https://discuss.elastic.co/u/kevvvlar)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:18am UTC](https://discuss.elastic.co/t/cross-referencing-from-multiple-indexes/267164 "2021-03-17T08:18:22Z")
I am building an app where I need to match users based on several parameters. I have two elastic search indexes, one with the user's likes and dislikes, one with some metadata about the user. /user\_profile/abc12345 { "… --- ## [Error 500 while creating s3 snapshot repo](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239)
**Author:** [@aditiparnami](https://discuss.elastic.co/u/aditiparnami)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:16am UTC](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239 "2021-03-17T08:16:59Z")
I'm getting HTTP 500 status whenever I try to create the snapshot repository on an AWS S3 bucket. I have updated the AWS access key, secret key, and session token into the elasticsearch-keystore and reloaded the secure … --- ## [Geo\_shape: linestring with data from csv](https://discuss.elastic.co/t/geo-shape-linestring-with-data-from-csv/266977)
**Author:** [@vincedt09](https://discuss.elastic.co/u/vincedt09)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 7:33am UTC](https://discuss.elastic.co/t/geo-shape-linestring-with-data-from-csv/266977 "2021-03-17T07:33:14Z")
Hi! I am working on a project that involves drawing a line in kibana using data from a csv file. Csv file: latitude,longitude 44.453538,26.086064 44.455499,26.086069 44.457815,26.086090 44.459435,26.086106 Conf… --- ## [Logstash node name show '0.0.0.0' on kibana](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 7:05am UTC](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450 "2021-03-17T07:05:13Z")
OS version: CentOS 6.9 kibana version: 6.3.0 logstash version: 6.3.0 Add two logstash nodes, one node is normal, and the other show '0.0.0.0' How does kibana get the hostname of the operation system? Thanks!!! --- ## [Heartbeat TCP monitor does not return a "connection refused" message](https://discuss.elastic.co/t/heartbeat-tcp-monitor-does-not-return-a-connection-refused-message/266687)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 8\ **Last updated:** [March 17, 2021, 6:44am UTC](https://discuss.elastic.co/t/heartbeat-tcp-monitor-does-not-return-a-connection-refused-message/266687 "2021-03-17T06:44:11Z")
Hi, we've moved the monitoring of an application from Nagios to Heartbeat. Now we noticed a difference, which is causing some trouble. A TCP check in Nagios for a specific port returns a "connection refused" as result,… --- ## [Questions about index.allocation.max\_retries?](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:39am UTC](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437 "2021-03-17T05:39:15Z")
Yesterday we had a cluster node status that turned yellow with an unsuccessful allocation of a shard of an index, when a colleague found the following exception in the logs: \[2021-03-16T17:34:24,934\]\[WARN \]\[o.e.a.b.Tran… --- ## [data-error-message="Elastic did not load properly. Check the server output for more information. kbn\_legacy\_browser\_error](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337)
**Author:** [@Satyasree](https://discuss.elastic.co/u/Satyasree)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 5:45am UTC](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337 "2021-03-17T05:45:01Z")
Hi All I have enabled Xpack security for Elasticsearch and Kibana which are hosted in IBM Cloud Kubernetes environment. Please find elasticsearch values.yml file clusterName: "elasticsearch" nodeGroup: "master" mast… --- ## [Could not index event to elasticsearch error](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:33am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379 "2021-03-17T05:33:48Z")
Hello guys, I am getting following error about my filter and I have no clue why it is happening. I have included details. Filter filter { if "cost\_management" in \[tags\] { fingerprint { source =\> "message" targe… --- ## [Resource not found exception in discovery](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 4:38am UTC](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613 "2021-03-17T04:38:03Z")
Hello, We are starting to get lots of reports of random resource not found errors when searching in discovery. It looks like the issue goes back to a version conflict for the search on elasticsearch. I am little bit of… --- ## [Fortinet.tmp.\*](https://discuss.elastic.co/t/fortinet-tmp/267213)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 8\ **Last updated:** [March 17, 2021, 4:28am UTC](https://discuss.elastic.co/t/fortinet-tmp/267213 "2021-03-17T04:28:17Z")
Hi, I'm trying out fortinet filebeat plugin. Running ELK with 7.10.1 and filebeat 7.10.1 However, I'm getting a strange input values into the documents (in the filebeat-\* index) This is my config - module: fortin… --- ## [I want to process bellow log format with the help of gork filter](https://discuss.elastic.co/t/i-want-to-process-bellow-log-format-with-the-help-of-gork-filter/267396)
**Author:** [@onkarborade](https://discuss.elastic.co/u/onkarborade)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 4:01pm UTC](https://discuss.elastic.co/t/i-want-to-process-bellow-log-format-with-the-help-of-gork-filter/267396 "2021-03-16T16:01:55Z")
I have below log format want to gork it, any help will be appreciated. \[0916/131436.858:ERROR:process\_reader\_win.cc(127)\] NtOpenThread: {Access Denied} A process has requested access to an object, but has not been grant… --- ## [Logstash timeout execution grok prevent data to be indexing](https://discuss.elastic.co/t/logstash-timeout-execution-grok-prevent-data-to-be-indexing/267440)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 3:37am UTC](https://discuss.elastic.co/t/logstash-timeout-execution-grok-prevent-data-to-be-indexing/267440 "2021-03-17T03:37:38Z")
Hi all I have an weird situation on logstash. A while a go when i parse the log, some of the log that i got sometime have grok time out and that log got indexed fine, but a few days ago, the log stop indexing at all, n… --- ## [Timestamp processor truncates timestamp and fails to parse](https://discuss.elastic.co/t/timestamp-processor-truncates-timestamp-and-fails-to-parse/267190)
**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\ **Replies:** 6\ **Last updated:** [March 17, 2021, 3:09am UTC](https://discuss.elastic.co/t/timestamp-processor-truncates-timestamp-and-fails-to-parse/267190 "2021-03-17T03:09:00Z")
Hello, I have log messages with a mytimesmap field. This field contains microseconds precision RFC3339/ISO8601 (UTC) style timestamp like 2021-03-14T13:25:49.008906Z. So I'd like to overwrite @timestamp field with myti… --- ## [First time seen value](https://discuss.elastic.co/t/first-time-seen-value/267420)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 1:54am UTC](https://discuss.elastic.co/t/first-time-seen-value/267420 "2021-03-17T01:54:36Z")
Hi, is this possible to somehow find first time seen value, or new value for field etc? I would like to find on my dashboard only unknow values for specific field (but sometimes I have like 200 values so building query I… --- ## [Kibana Alerting](https://discuss.elastic.co/t/kibana-alerting/266590)
**Author:** [@Roey](https://discuss.elastic.co/u/Roey)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 1:45am UTC](https://discuss.elastic.co/t/kibana-alerting/266590 "2021-03-17T01:45:49Z")
Hey, I'm using Kibana 7.9.1 and recently I've started to explore Monitoring and Alerting, I have few questions: I have a monitor with an active trigger, the alert has been triggered for some reason only once. Besides,… --- ## [Elastic Mail Watcher escape html in logs](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374)
**Author:** [@rLenhard](https://discuss.elastic.co/u/rLenhard)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 1:35am UTC](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374 "2021-03-17T01:35:40Z")
Hi, I created an email watcher witch html-body. Some of the logs I am returning with ctx.payload.hits.hits have html tags in their value: Is there a way to escape the return so the tags in the value are displayed as ta… --- ## [What can I include in a webhook body/playload?](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 12:26am UTC](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430 "2021-03-17T00:26:09Z")
Dear all =) When setting up an Elastic watcher that triggers a webhook, how do I know what info I can include in the body/payload? Does there exist a list of all info I can include? Hugs, Sandra =) --- ## [How to exclude fields from being indexed in ElasticSearch?](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:54pm UTC](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427 "2021-03-16T23:54:50Z")
I am trying to utilize ElasticSearch to store large sets of data. Most of the data will be searchable, however, there are some field that will be there just so the data is stored and returned upon request. Here is my ma… --- ## [ECK responds empty via curl](https://discuss.elastic.co/t/eck-responds-empty-via-curl/266893)
**Author:** [@Tomonori-YOSHIKAWA](https://discuss.elastic.co/u/Tomonori-YOSHIKAWA)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 11:51pm UTC](https://discuss.elastic.co/t/eck-responds-empty-via-curl/266893 "2021-03-16T23:51:29Z")
I have deployed ECK and BANZAI logging on AKS, then trying sent logs to elasticsearch via fluentd. No index have found on the Kibana discovery, I deployed a CentOS pod and verified its HTTP connectivity. But empty resp… --- ## [Range query through custom window time](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:48pm UTC](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428 "2021-03-16T23:48:14Z")
I have this query in Dev Tools that I do when my boss asks that counts how many cards were used in 90 days window: GET transactions/\_search { "size": 0, "query": { "range": { "timestamp": { "gte": "now-90d/d",… --- ## [Visualization using one field as term but label with another field](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:23pm UTC](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429 "2021-03-16T23:23:17Z")
Hello. Like in here I want to use a different display label for the X-axis. How can I do that? --- ## [Elasticsearch service stops right after running](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219)
**Author:** [@liorh](https://discuss.elastic.co/u/liorh)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 11:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219 "2021-03-16T23:10:00Z")
Hi all Elastic is very new to me. I've installed elastic 7.11.1. Once I start the service, it seem to be running but another refresh and it's not :confused: Could you help me solve it? Thank you very much Lior --- ## [Ingest pipeline error when accessing a field](https://discuss.elastic.co/t/ingest-pipeline-error-when-accessing-a-field/265847)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 10\ **Last updated:** [March 16, 2021, 10:06pm UTC](https://discuss.elastic.co/t/ingest-pipeline-error-when-accessing-a-field/265847 "2021-03-16T22:06:12Z")
I get this error message for the last Renameprocessor (Refer the last rule in Ingest Template). Iam running the Testpipeline. What is the right way to access the targetResources\[userPrincipalName\] in json. "error": { … --- ## [How to apply filter using NEST (.NET)](https://discuss.elastic.co/t/how-to-apply-filter-using-nest-net/267423)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 9:44pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-using-nest-net/267423 "2021-03-16T21:44:06Z")
I am trying to query my server using the .NET library NEST (GitHub - elastic/elasticsearch-net: Elasticsearch.Net & NEST) I want my query to find any data where source = "abc" and source\_id in (" 123","145","158m") I e… --- ## [ILM with Python Client](https://discuss.elastic.co/t/ilm-with-python-client/261469)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 9:37pm UTC](https://discuss.elastic.co/t/ilm-with-python-client/261469 "2021-03-16T21:37:35Z")
Hi All, I'm currently using Elasticsearch client for Python 3. I'm trying to import IlmClient module, but I received following error. \>\>\> from elasticsearch.client import IlmClient Traceback (most recent call last): … --- ## [Automatic IP reputation check](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 8:45pm UTC](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215 "2021-03-16T20:45:12Z")
Hi All, Is there any way to do ip reputation check automatically with logstash or elasticsearch without manually effort for checking reputation against each ip? --- ## [\[Metricbeat 7.9\] x509: certificate is valid for instance, not localhost](https://discuss.elastic.co/t/metricbeat-7-9-x509-certificate-is-valid-for-instance-not-localhost/266849)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 8:00pm UTC](https://discuss.elastic.co/t/metricbeat-7-9-x509-certificate-is-valid-for-instance-not-localhost/266849 "2021-03-16T20:00:27Z")
Hello, I'm trying to send data from Metricbeat 7.9 to an already-tls-working Elasticsearch 7.9 but without success...It is a test environment, everything on same server(Elasticsearch, Kibana and Metricbeat) my metricbe… --- ## [Elastic Endgame Lab issue](https://discuss.elastic.co/t/elastic-endgame-lab-issue/267412)
**Author:** [@shutzi25](https://discuss.elastic.co/u/shutzi25)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 7:11pm UTC](https://discuss.elastic.co/t/elastic-endgame-lab-issue/267412 "2021-03-16T19:11:47Z")
Hi, In the Elastic Endgame free training, Strigo Lab: http://ec2-3-64-54-139.eu-central-1.compute.amazonaws.com/instructions/labs.html#\_lab\_1\_elastic\_endgame\_sensor\_deployment In the very first part when you Copy to … --- ## [Unable to export logs from AKS cluster to kibana for specific pods](https://discuss.elastic.co/t/unable-to-export-logs-from-aks-cluster-to-kibana-for-specific-pods/267277)
**Author:** [@sanjeevsharma-1](https://discuss.elastic.co/u/sanjeevsharma-1)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 7:02pm UTC](https://discuss.elastic.co/t/unable-to-export-logs-from-aks-cluster-to-kibana-for-specific-pods/267277 "2021-03-16T19:02:06Z")
We are using filebeat.yaml configuration(which is similar to https://github.com/elastic/beats/blob/master/deploy/kubernetes/filebeat/filebeat-daemonset.yaml) to migrate or export all the logs from AKS cluster to Kibana a… --- ## [Create repository ONLY if no other repo exists with the same name](https://discuss.elastic.co/t/create-repository-only-if-no-other-repo-exists-with-the-same-name/267409)
**Author:** [@Kevin\_Gonzalez](https://discuss.elastic.co/u/Kevin_Gonzalez)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 6:17pm UTC](https://discuss.elastic.co/t/create-repository-only-if-no-other-repo-exists-with-the-same-name/267409 "2021-03-16T18:17:36Z")
Maybe this could be an enhancement request, or could already be implemented on newest versions of elasticsearch (+7.6.2) idk.. Here is the thing: When I create a repository everything works fine, BUT elasticsearch allo… [Previous page](https://discuss.elastic.co/latest.md?page=1780) [Next page](https://discuss.elastic.co/latest.md?page=1782)