# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1789

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1790

---

## [Elasticsearch pricing](https://discuss.elastic.co/t/elasticsearch-pricing/266971)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-pricing/266971 "2021-03-11T18:27:38Z")

</div>

Hello everyone, i was looking at elasticsearch pricing. I found this link: https://www.elastic.co/pricing/ which says the "Standard" version is $ 16 a month. But I don't understand why, with this configurator: http…

---

## [Logstash read configuration values from properties file](https://discuss.elastic.co/t/logstash-read-configuration-values-from-properties-file/266894)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 2\
**Last updated:** [March 11, 2021, 6:12pm UTC](https://discuss.elastic.co/t/logstash-read-configuration-values-from-properties-file/266894 "2021-03-11T18:12:30Z")

</div>

Hello Team, Could you please help me understand is there an option to keep configuration variables outside of pipeline. for example if i have 4 pipeline with elasticsearch as input and output for this most of the confi…

---

## [Output syslog : limited output size?](https://discuss.elastic.co/t/output-syslog-limited-output-size/266986)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 6:00pm UTC](https://discuss.elastic.co/t/output-syslog-limited-output-size/266986 "2021-03-11T18:00:37Z")

</div>

Hello ! I have one kafka input to grab winlogbeat logs. Regarding output, I have one elasticsearch output and one syslog output : output { syslog { host =\> "1.2.3.4" port =\> 777 protocol =\> "tcp" codec =\> json …

---

## [Elastic Agent rolled with Sysmon](https://discuss.elastic.co/t/elastic-agent-rolled-with-sysmon/266987)

<div class="topic-metadata">

**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 5:49pm UTC](https://discuss.elastic.co/t/elastic-agent-rolled-with-sysmon/266987 "2021-03-11T17:49:08Z")

</div>

Hi, I was always under the impression that you needed to deploy Sysmon along side the Agent however I have just accidentaly educated myself during a lab re-build and can see that Sysmon is rolled with the Agent. Howeve…

---

## [Email and Slack alerts based on logs in Elasticsearch](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888)

<div class="topic-metadata">

**Author:** [@pks](https://discuss.elastic.co/u/pks)\
**Replies:** 2\
**Last updated:** [March 11, 2021, 5:29pm UTC](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888 "2021-03-11T17:29:42Z")

</div>

Hi! I am unable to figure out from the pricing page whether or not alerting from Kibana based on patterns found in Elasticsearch logs is free. I want to create alerts from Kibana to monitor application logs and send aler…

---

## [Metricbeat.system.memory fields are sending incorrect values](https://discuss.elastic.co/t/metricbeat-system-memory-fields-are-sending-incorrect-values/266973)

<div class="topic-metadata">

**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 4:08pm UTC](https://discuss.elastic.co/t/metricbeat-system-memory-fields-are-sending-incorrect-values/266973 "2021-03-11T16:08:38Z")

</div>

It seems metricbeat system memory module is sending used memory value into free memory and free memory into used. For example: System.memory.total = 29320122368 system.memory.free = 280305664 system.memory. used = 29…

---

## [Gantt chart on Kibana using version 7.11](https://discuss.elastic.co/t/gantt-chart-on-kibana-using-version-7-11/265917)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 7\
**Last updated:** [March 11, 2021, 3:51pm UTC](https://discuss.elastic.co/t/gantt-chart-on-kibana-using-version-7-11/265917 "2021-03-11T15:51:48Z")

</div>

Hi all, I am having difficulties visualising a Gantt chart on Kibana, could someone help me. I have the following data set: Date, Start and end time and times (HH:mm) as content of the other field, all those Field,…

---

## [Customize Kibana Versions In contribution code](https://discuss.elastic.co/t/customize-kibana-versions-in-contribution-code/266917)

<div class="topic-metadata">

**Author:** [@Aditya\_kumar\_kar](https://discuss.elastic.co/u/Aditya_kumar_kar)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 3:50pm UTC](https://discuss.elastic.co/t/customize-kibana-versions-in-contribution-code/266917 "2021-03-11T15:50:14Z")

</div>

Hi all, I want to connect my elastic search 7.11.0 with the recent contribution code. In this code, the version is mentioned 8.0.0. I want to know where I have to edit the versions and the steps to edit other required c…

---

## [How to change the color's in treemap in lens in Kibana?](https://discuss.elastic.co/t/how-to-change-the-colors-in-treemap-in-lens-in-kibana/266883)

<div class="topic-metadata">

**Author:** [@Saurabh\_Patil](https://discuss.elastic.co/u/Saurabh_Patil)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 3:46pm UTC](https://discuss.elastic.co/t/how-to-change-the-colors-in-treemap-in-lens-in-kibana/266883 "2021-03-11T15:46:41Z")

</div>

Hey, I am trying to create treemap using lens in kibana. But I am not able to change the color's. So, is there any method for changing the color's ? Thank you

---

## [Metrics from metricbeat do not display in elk but exist in metricbeat console](https://discuss.elastic.co/t/metrics-from-metricbeat-do-not-display-in-elk-but-exist-in-metricbeat-console/266966)

<div class="topic-metadata">

**Author:** [@111451](https://discuss.elastic.co/u/111451)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 3:26pm UTC](https://discuss.elastic.co/t/metrics-from-metricbeat-do-not-display-in-elk-but-exist-in-metricbeat-console/266966 "2021-03-11T15:26:44Z")

</div>

docker-compose.yml metricbeat: container\_name: metricbeat user: root #To read the docker socket image: docker.elastic.co/beats/metricbeat:7.11.1 logging: options: max-file: "3" max-…

---

## [Reindex data will not copy all documents](https://discuss.elastic.co/t/reindex-data-will-not-copy-all-documents/266967)

<div class="topic-metadata">

**Author:** [@dslavescu](https://discuss.elastic.co/u/dslavescu)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 3:42pm UTC](https://discuss.elastic.co/t/reindex-data-will-not-copy-all-documents/266967 "2021-03-11T15:42:03Z")

</div>

Hello, I am trying to migrate data from an ES cluster 5.5.6 to ES 7.6.2, using an intermediate cluster ES 6.8 in order to reindex the data and prepare the mapping for ES 7.6.2 version. I am using a python script to aut…

---

## [Sum up multi Vega graphs in one](https://discuss.elastic.co/t/sum-up-multi-vega-graphs-in-one/266867)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 3:41pm UTC](https://discuss.elastic.co/t/sum-up-multi-vega-graphs-in-one/266867 "2021-03-11T15:41:00Z")

</div>

Hi all, I've done several Vega Timeline visualizations and now I want all of them to be summarized in a one single diagram instead of individually and with different colors, like this example her: here are a few of m…

---

## [Kibana create form panel](https://discuss.elastic.co/t/kibana-create-form-panel/266837)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 3\
**Last updated:** [March 11, 2021, 3:37pm UTC](https://discuss.elastic.co/t/kibana-create-form-panel/266837 "2021-03-11T15:37:08Z")

</div>

Hello everyone, I have question about Elastic Cloud: If I wanted to create a form in Kibana that contains a button that will trigger a REST call. Can I do it? Can I embed Javascript code? Thanks

---

## [Escaping characters in search](https://discuss.elastic.co/t/escaping-characters-in-search/266955)

<div class="topic-metadata">

**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/escaping-characters-in-search/266955 "2021-03-11T14:05:06Z")

</div>

So this may be an issue with my mapping or something else. Im using FSCrawler to crawl a index and put the docs in Elastic, that works fine the issue comes when i try and search on it, im using default FSCrawler and Ela…

---

## [Xml filter on nested element](https://discuss.elastic.co/t/xml-filter-on-nested-element/266619)

<div class="topic-metadata">

**Author:** [@StashLogs](https://discuss.elastic.co/u/StashLogs)\
**Replies:** 11\
**Last updated:** [March 11, 2021, 2:06pm UTC](https://discuss.elastic.co/t/xml-filter-on-nested-element/266619 "2021-03-11T14:06:12Z")

</div>

Hello, I am using the jdbc streaming plugin to add a new field to a record. This new field is an array of objects ( history ) as seen below: record: { id: "1", someXMLField: \<some xml value here\>, hi…

---

## [Elastic apm agent Read timed out issue](https://discuss.elastic.co/t/elastic-apm-agent-read-timed-out-issue/266818)

<div class="topic-metadata">

**Author:** [@shurankain](https://discuss.elastic.co/u/shurankain)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 2:00pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-read-timed-out-issue/266818 "2021-03-11T14:00:20Z")

</div>

We are using kibana 7.7 and co.elastic.apm:apm-agent-attach:1.21.0 and getting error soon after apm server starts. It makes our services visible in kibana, but anyway it logs such errors every 5 minutes: \[elastic-apm-rem…

---

## [GUI for Explicit Index Mapping management](https://discuss.elastic.co/t/gui-for-explicit-index-mapping-management/266941)

<div class="topic-metadata">

**Author:** [@Paulo\_Azevedo](https://discuss.elastic.co/u/Paulo_Azevedo)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 1:37pm UTC](https://discuss.elastic.co/t/gui-for-explicit-index-mapping-management/266941 "2021-03-11T13:37:40Z")

</div>

Hello, I'm making an ElasticSearch POC and looking for a GUI to manage explicit index mapping. Already tried ElasticSearchHQ and Kibana but coudn't find a way to manage the explicit mappings. Can somebody help please? T…

---

## [Problem with Elastic APM](https://discuss.elastic.co/t/problem-with-elastic-apm/266277)

<div class="topic-metadata">

**Author:** [@Luis\_Garavatti](https://discuss.elastic.co/u/Luis_Garavatti)\
**Replies:** 28\
**Last updated:** [March 11, 2021, 1:23pm UTC](https://discuss.elastic.co/t/problem-with-elastic-apm/266277 "2021-03-11T13:23:34Z")

</div>

Hi Guys! We have a problem with our Elastic APM, since yesterday we have not been able to view the data I looked at the logs of the apm server and did not find any problems, but if I search in the other day (the last m…

---

## [Auditbeat 7.x file integrity module](https://discuss.elastic.co/t/auditbeat-7-x-file-integrity-module/266738)

<div class="topic-metadata">

**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 1:16pm UTC](https://discuss.elastic.co/t/auditbeat-7-x-file-integrity-module/266738 "2021-03-11T13:16:41Z")

</div>

Hello, I am using auditbeat to track file changes via the file integrity module. This works for a couple of minutes and logs the changes to files, but then stops working and no changes are detected anymore. Running audi…

---

## [\[error connecting to Elasticsearch at https:certificate signed by unknown authority](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-at-https-certificate-signed-by-unknown-authority/266678)

<div class="topic-metadata">

**Author:** [@Ana\_11](https://discuss.elastic.co/u/Ana_11)\
**Replies:** 3\
**Last updated:** [March 9, 2021, 1:22pm UTC](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-at-https-certificate-signed-by-unknown-authority/266678 "2021-03-09T13:22:05Z")

</div>

Hi I have enabled secure communication in my elasticsearch deployment. https is enabled and elasticsearch and kibana is working as expected. Now when im trying to ingest the winlogbeat logs im getting the following erro…

---

## [Why kafka consumer always Re-joining group?](https://discuss.elastic.co/t/why-kafka-consumer-always-re-joining-group/266944)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 12:36pm UTC](https://discuss.elastic.co/t/why-kafka-consumer-always-re-joining-group/266944 "2021-03-11T12:36:11Z")

</div>

Logstash version: 6.3.0 Here is the log, and this info is always repeating: \[2021-03-11T20:25:47,359\]\[INFO \]\[org.apache.kafka.clients.consumer.internals.AbstractCoordinator\] \[Consumer clientId=logstash-0, groupId=nginx…

---

## [Enabled xpack.security.authc.api\_key.enabled=true but \_security/api\_key still not working](https://discuss.elastic.co/t/enabled-xpack-security-authc-api-key-enabled-true-but-security-api-key-still-not-working/266831)

<div class="topic-metadata">

**Author:** [@PaulMess](https://discuss.elastic.co/u/PaulMess)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 12:30pm UTC](https://discuss.elastic.co/t/enabled-xpack-security-authc-api-key-enabled-true-but-security-api-key-still-not-working/266831 "2021-03-11T12:30:52Z")

</div>

Hello, I stared a ES Cluster with xpack.security.authc.api\_key.enabled=true, If I check node settings inform that is enabled "security" : { "authc" : { "api\_key" : { …

---

## [Can't compile elasticsearch from source: error: release version 11 not supported](https://discuss.elastic.co/t/cant-compile-elasticsearch-from-source-error-release-version-11-not-supported/266797)

<div class="topic-metadata">

**Author:** [@Kazimazi](https://discuss.elastic.co/u/Kazimazi)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 12:24pm UTC](https://discuss.elastic.co/t/cant-compile-elasticsearch-from-source-error-release-version-11-not-supported/266797 "2021-03-11T12:24:51Z")

</div>

First and foremost I'm kinda new, so I might be missing something very basic. I'm trying to compile elasticsearch from source from master branch (060b3aadd60116e6055e3fc35f472687719b7658). I've installed openjdk15 on a …

---

## [Synthetic Monitoring Https URL monitoring error ERR\_CERT\_AUTHORITY\_INVALID](https://discuss.elastic.co/t/synthetic-monitoring-https-url-monitoring-error-err-cert-authority-invalid/266938)

<div class="topic-metadata">

**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 12:13pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-https-url-monitoring-error-err-cert-authority-invalid/266938 "2021-03-11T12:13:54Z")

</div>

// Go to https://hostname:8443/ await page.goto('https://hostname:8443/'); Hi Team, When I am using HTTPS protocol and I am getting below error, Please suggest I need to provide some extra configuration for HTTPS URLs…

---

## [Java RestHighLevelClient gives different exception responses on a repeated request](https://discuss.elastic.co/t/java-resthighlevelclient-gives-different-exception-responses-on-a-repeated-request/266930)

<div class="topic-metadata">

**Author:** [@eivind.ronnevik](https://discuss.elastic.co/u/eivind.ronnevik)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 11:06am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-gives-different-exception-responses-on-a-repeated-request/266930 "2021-03-11T11:06:41Z")

</div>

Hi everyone, I am hitting this "strange" behavior related to search\_phase\_execution\_exceptions that I don't really understand and would like to know the underlying reasons for. A bit of context; I'm running ES 7.8.1, t…

---

## [Unable to write not equal condition with filebeat processor](https://discuss.elastic.co/t/unable-to-write-not-equal-condition-with-filebeat-processor/266934)

<div class="topic-metadata">

**Author:** [@Sourabh\_Sharma1](https://discuss.elastic.co/u/Sourabh_Sharma1)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 11:44am UTC](https://discuss.elastic.co/t/unable-to-write-not-equal-condition-with-filebeat-processor/266934 "2021-03-11T11:44:36Z")

</div>

\` dissect: tokenizer: '"%{pid|integer} - %{service.name} - %{service.status}"' field: "message" target\_prefix: "" drop\_event: when: not: equals: pid|integer: "105" smaple logs: "321 - App01 - WebServer is st…

---

## [I need to leave a string field in the date field. I've done several things but I'm not sure how to do it. Follow my files](https://discuss.elastic.co/t/i-need-to-leave-a-string-field-in-the-date-field-ive-done-several-things-but-im-not-sure-how-to-do-it-follow-my-files/266804)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 11:43am UTC](https://discuss.elastic.co/t/i-need-to-leave-a-string-field-in-the-date-field-ive-done-several-things-but-im-not-sure-how-to-do-it-follow-my-files/266804 "2021-03-11T11:43:31Z")

</div>

I need to leave a string field in the date field. I've done several things but I'm not sure how to do it. Follow my files. input{ file{ path =\> "/etc/logstash/unico/FM099-Registro\\ de\\ Indisponibilidade\\ -\\ 2021.xl…

---

## [How to make solr clod secure](https://discuss.elastic.co/t/how-to-make-solr-clod-secure/266931)

<div class="topic-metadata">

**Author:** [@Arpan\_Jain](https://discuss.elastic.co/u/Arpan_Jain)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 11:28am UTC](https://discuss.elastic.co/t/how-to-make-solr-clod-secure/266931 "2021-03-11T11:28:49Z")

</div>

I am using logstash to save events in elastic search and solr cloud. I want to know is there any plugin or something else through which i can do solr basic authentication.

---

## [Distinguishing between log files when sending multiple log files from filebeat to logstash](https://discuss.elastic.co/t/distinguishing-between-log-files-when-sending-multiple-log-files-from-filebeat-to-logstash/266043)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 17\
**Last updated:** [March 11, 2021, 11:27am UTC](https://discuss.elastic.co/t/distinguishing-between-log-files-when-sending-multiple-log-files-from-filebeat-to-logstash/266043 "2021-03-11T11:27:39Z")

</div>

I'm trying to collect multiple logs from filebeat and send them to logstash. I would like to use logstash's filter to process each log file individually, but I'm having trouble. For example, first I want to rename the …

---

## [If I buy elastic license, can I use all the features without the cloud?](https://discuss.elastic.co/t/if-i-buy-elastic-license-can-i-use-all-the-features-without-the-cloud/266914)

<div class="topic-metadata">

**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 11:24am UTC](https://discuss.elastic.co/t/if-i-buy-elastic-license-can-i-use-all-the-features-without-the-cloud/266914 "2021-03-11T11:24:11Z")

</div>

Hello everyone, I have setup cluster of 3 nodes, I want to use security features like alerting. For alerting I need a license. If I buy elastic license, can I use the features without migrating to the cloud?

[Previous page](https://discuss.elastic.co/latest.md?page=1788)

[Next page](https://discuss.elastic.co/latest.md?page=1790)
