# Latest **URL:** https://discuss.elastic.co/latest.md?page=1799 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1800 --- ## [Enterprise search](https://discuss.elastic.co/t/enterprise-search/266340)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 6:53pm UTC](https://discuss.elastic.co/t/enterprise-search/266340 "2021-03-05T18:53:39Z")
enterprise search is able to start and shows the below message but i am not able to connect to it and getting connection refused error. URL: http://10.156.86.236:7000 If this is your first time starting Enterprise Sea… --- ## [Remove/Hide metrics column from DataTable visualization](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 6:44pm UTC](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403 "2021-03-05T18:44:34Z")
Hi, I need some help in structuring Datatable visualization so that I can download the CSV without Metrics column. If I try to create a DataTable visualization, it adds Mandatorily "Metrics" column. Business need is to a… --- ## [Create complex document and integration questions](https://discuss.elastic.co/t/create-complex-document-and-integration-questions/266058)
**Author:** [@wilson93](https://discuss.elastic.co/u/wilson93)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 6:36pm UTC](https://discuss.elastic.co/t/create-complex-document-and-integration-questions/266058 "2021-03-05T18:36:10Z")
I have watched both video and tried elastic search dashboard i got few questions : i wish to let my search show multiple document, now i uploaded document json for products what is the best practice for adding other … --- ## [Ingest pipeline differences with Logstash and Beats](https://discuss.elastic.co/t/ingest-pipeline-differences-with-logstash-and-beats/266302)
**Author:** [@b133](https://discuss.elastic.co/u/b133)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:11pm UTC](https://discuss.elastic.co/t/ingest-pipeline-differences-with-logstash-and-beats/266302 "2021-03-05T17:11:27Z")
I want to bifurcate my logs using Logstash. When I sent logs directly from Filebeat to Elasticsearch, the log fields were all properly parsed and converted to appropriate variable types. I have since changed the Filebea… --- ## [Synthetic Monitoring currently using elastic super user in run.sh file](https://discuss.elastic.co/t/synthetic-monitoring-currently-using-elastic-super-user-in-run-sh-file/266368)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 6:14pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-currently-using-elastic-super-user-in-run-sh-file/266368 "2021-03-05T18:14:53Z")
Hi Team, What is the minimum user permission required to run synthetic monitoring. I don't want to provide superuser privilege to users who all deploy the synthetic monitoring using docker. sh run.sh 7.11.0 '-E outpu… --- ## [Enrich workplace search indices](https://discuss.elastic.co/t/enrich-workplace-search-indices/266333)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:18pm UTC](https://discuss.elastic.co/t/enrich-workplace-search-indices/266333 "2021-03-05T17:18:17Z")
Hello, I use workplace search to benefit from the connectors, in particular Sharepoint connector. I need to make some post-processing to my documents (cleaning, alignment, enrichment via an external API), so I use Logs… --- ## [Ship logs from filebeat to logstash via NGINX reverse proxy](https://discuss.elastic.co/t/ship-logs-from-filebeat-to-logstash-via-nginx-reverse-proxy/266395)
**Author:** [@ccooper](https://discuss.elastic.co/u/ccooper)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 4:55pm UTC](https://discuss.elastic.co/t/ship-logs-from-filebeat-to-logstash-via-nginx-reverse-proxy/266395 "2021-03-05T16:55:16Z")
My architecture is as follows where only port 80 and 443 are open on the NGINX proxy server: \[filebeat\] -\> \[NGINX - reverse proxy\] -\> \[logstash\] I am attempting to ship logs from filebeat to logstash via an NGINX rever… --- ## [Filebeat logging - ERROR \[logstash\] logstash/async.go:280 Failed to publish events caused by: read tcp](https://discuss.elastic.co/t/filebeat-logging-error-logstash-logstash-async-go-280-failed-to-publish-events-caused-by-read-tcp/266330)
**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 4:27pm UTC](https://discuss.elastic.co/t/filebeat-logging-error-logstash-logstash-async-go-280-failed-to-publish-events-caused-by-read-tcp/266330 "2021-03-05T16:27:52Z")
I am trying to figure out if these timeouts are a bad thing or just notifications of no consequence. From a cmd I can telnet to 10.10.98.102:5044 and the port opens. There is a cert there that I can see with a cURL. T… --- ## [Logstash - how to parse rsyslog date field from logs message into @timestamp (UTC)](https://discuss.elastic.co/t/logstash-how-to-parse-rsyslog-date-field-from-logs-message-into-timestamp-utc/265897)
**Author:** [@Jenisha\_Ramanathan](https://discuss.elastic.co/u/Jenisha_Ramanathan)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:27pm UTC](https://discuss.elastic.co/t/logstash-how-to-parse-rsyslog-date-field-from-logs-message-into-timestamp-utc/265897 "2021-03-05T16:27:40Z")
Hi Team, I am trying to monitor Linux logs with rsyslog and kibana. Able to receive the logs from rsyslog client to rsyslog server and load the data to elastic. Getting the reported time in kibana ( UTC format ) but we … --- ## [S3snssqs - multiline support?](https://discuss.elastic.co/t/s3snssqs-multiline-support/266370)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:21pm UTC](https://discuss.elastic.co/t/s3snssqs-multiline-support/266370 "2021-03-05T16:21:33Z")
Hi we are trying to read our log usign s3snssqs ; this all works great but the only thing is when we want to detect multiline logs .. The module doesn't seem to support codec =\> multiline in order to use a pattern mis… --- ## [Configuration for Cisco ASA logs](https://discuss.elastic.co/t/configuration-for-cisco-asa-logs/266258)
**Author:** [@rudraram](https://discuss.elastic.co/u/rudraram)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 4:14pm UTC](https://discuss.elastic.co/t/configuration-for-cisco-asa-logs/266258 "2021-03-05T16:14:56Z")
Hello Team, Can you provide some guidance on how to get Cisco ASA logs to ELK? Documentation here https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-cisco.html doesnt say where to install the filebeat… --- ## [Performing a conditional mutation to circumvent parsing issue](https://discuss.elastic.co/t/performing-a-conditional-mutation-to-circumvent-parsing-issue/266349)
**Author:** [@nectide](https://discuss.elastic.co/u/nectide)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:13pm UTC](https://discuss.elastic.co/t/performing-a-conditional-mutation-to-circumvent-parsing-issue/266349 "2021-03-05T16:13:24Z")
Hi, I'm a newcomer to Logstash, so bear with me. My logstash logs are reporting: \[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"… --- ## [Kibana multiple user problem](https://discuss.elastic.co/t/kibana-multiple-user-problem/266351)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 4:10pm UTC](https://discuss.elastic.co/t/kibana-multiple-user-problem/266351 "2021-03-05T16:10:14Z")
I have setup two users one user is super and other one is non superuser for non superuser i have a custom role for user user2(non superuser) GET /\_security/role/pb\_log { "pb\_log" : { "cluster" : \[ "manage"… --- ## [Indexes are not going to Warm Tier](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:55pm UTC](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389 "2021-03-05T15:55:14Z")
Trying to get indexes to go into warm for 30 days. Am I doing something incorrect? --- ## [Highlight. Different tags for different words in one highlight request. For one field](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388)
**Author:** [@boralex](https://discuss.elastic.co/u/boralex)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:43pm UTC](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388 "2021-03-05T15:43:59Z")
Good day I have a question: Can I use several different tags for different words in one highlight request? Is it possible? For example (Let I have one text field): I have a request with phrases that should definitely… --- ## [KQL syntax for serial difference/delta filter](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100 "2021-03-05T15:39:55Z")
hi guys, my numeric data is coming aggregating , so i am using aggregation "sum of serial difference of values" to take delta...how do i put this delta in KQL filter in search box... example value1 : 20 value 2: 50 … --- ## [Filter to query](https://discuss.elastic.co/t/filter-to-query/266264)
**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 3:37pm UTC](https://discuss.elastic.co/t/filter-to-query/266264 "2021-03-05T15:37:13Z")
Hello I've got following Filter option (as an example): source.ip : "10.10.10.10" and from.domain : "domain.com" or source.ip: "40.40.40.40" and from.domain : "otherdomain.com" How do I "translate" this filter to an… --- ## [Monitors can only support up to 10 triggers](https://discuss.elastic.co/t/monitors-can-only-support-up-to-10-triggers/266163)
**Author:** [@larrya](https://discuss.elastic.co/u/larrya)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:23pm UTC](https://discuss.elastic.co/t/monitors-can-only-support-up-to-10-triggers/266163 "2021-03-05T15:23:03Z")
I have a monitor with 10 triggers. When I attempt to create another trigger, I see this error message: Failed to create the trigger \[illegal\_argument\_exception\] Monitors can only support up to 10 triggers. How … --- ## [How to Create New User in Kibana](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 2:37pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826 "2021-03-05T14:37:35Z")
Hi, I have created the new user in Kibana via kibana UI. But i am unable to login with that id. Getting Error as:- {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Note:- I am able to login with System use… --- ## [Synthetic monitoring of an API with performance metrics](https://discuss.elastic.co/t/synthetic-monitoring-of-an-api-with-performance-metrics/266331)
**Author:** [@Moritz\_Rieger](https://discuss.elastic.co/u/Moritz_Rieger)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 2:16pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-of-an-api-with-performance-metrics/266331 "2021-03-05T14:16:44Z")
Hi elastic team, I really love the idea of synthetic monitoring and having it integrated in the uptime monitoring app. At the moment, I am working on an API as a product project and would love to use synthetic monitorin… --- ## [Relative URLs/paths with no leading slash](https://discuss.elastic.co/t/relative-urls-paths-with-no-leading-slash/265550)
**Author:** [@krzyszto9](https://discuss.elastic.co/u/krzyszto9)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 2:10pm UTC](https://discuss.elastic.co/t/relative-urls-paths-with-no-leading-slash/265550 "2021-03-05T14:10:50Z")
Hello everyone! Some websites like http://www.gilacountyaz.gov/government/assessor/index.php have a bunch of internal links that should be absolute paths, but do not have the leading slash. This causes a web crawler to… --- ## [Auditd events created while Auditbeat is down](https://discuss.elastic.co/t/auditd-events-created-while-auditbeat-is-down/266369)
**Author:** [@alanoe](https://discuss.elastic.co/u/alanoe)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 12:47pm UTC](https://discuss.elastic.co/t/auditd-events-created-while-auditbeat-is-down/266369 "2021-03-05T12:47:55Z")
I'm designing a filesystem operations (file creation, file deletion, file open, permissions change, etc) and process executions tracking application using Auditbeat. This tracking app should not lose events in any case, … --- ## [Kibana Data Table visualization - advanced filter](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:39pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358 "2021-03-05T13:39:02Z")
I am creating Kibana Dashboard based on log data. I want to create Data Table for the most common warnings, with some stacktrace info (if exists). Each entry can contain multiple stacktrace messages, but the first one … --- ## [How does the "version" tag works in the Json export of a visualization in Kibana?](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954)
**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\ **Replies:** 5\ **Last updated:** [March 5, 2021, 1:35pm UTC](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954 "2021-03-05T13:35:37Z")
Hi Team, This is regarding version control of the kibana visualizations, we are planning to export the Json files and then put them into git. Now when i am exporting the files as Json, there is a version Tag there(PFA … --- ## [Beats dahsboards error \[ esaggs\] JSON parse: Unexpected chararter at line 1 column 1 of the JSON data](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 1:25pm UTC](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343 "2021-03-05T13:25:09Z")
Hello, I am trying ELK 8.0.0 from code source as dev cluster, and used the same configuration of my prod cluster (Version 7.10.1) but when I installed beats (version 7.11.1) I am getting errors in the dashboards as you … --- ## [Cannot access kibana dashobards through iframe code after configuring TLS/SSL encryption in ELK stack](https://discuss.elastic.co/t/cannot-access-kibana-dashobards-through-iframe-code-after-configuring-tls-ssl-encryption-in-elk-stack/266346)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:14pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-dashobards-through-iframe-code-after-configuring-tls-ssl-encryption-in-elk-stack/266346 "2021-03-05T13:14:01Z")
Hii.I want to share my kibana dashboards through iframe code with my colleague.When I run kibana on http everything works fine.But when I share dashboards after configuring TLS/SSL on my elk stack my colleague cannot acc… --- ## [How to fix a rule on x axis using time](https://discuss.elastic.co/t/how-to-fix-a-rule-on-x-axis-using-time/266285)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:13pm UTC](https://discuss.elastic.co/t/how-to-fix-a-rule-on-x-axis-using-time/266285 "2021-03-05T13:13:15Z")
hello all, I am trying to fix a fixed line to the x acse where time = 15:30 so that I can notice the bars that took longer than 15:30. what have i done wrong? tha is my Code: { "$schema": "https://vega.github.io/… --- ## [Share Kibana Dashboard](https://discuss.elastic.co/t/share-kibana-dashboard/266316)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:56pm UTC](https://discuss.elastic.co/t/share-kibana-dashboard/266316 "2021-03-05T12:56:17Z")
Hi All, I want to share my dashboard with the client without the 'Edit' button but the 'save query' button should be enabled. --- ## [Pull fields in the kibana watcher](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779)
**Author:** [@richis](https://discuss.elastic.co/u/richis)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:51pm UTC](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779 "2021-03-05T12:51:20Z")
Hi all, I have created a watcher. I am new to this concept so finding it difficult to achieve. The watcher is created successfully but, i am trying to get the fields that i have in my log. With the help of google search … --- ## [.monitoring-es-7-\* with Data fields conflicts](https://discuss.elastic.co/t/monitoring-es-7-with-data-fields-conflicts/265882)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:49pm UTC](https://discuss.elastic.co/t/monitoring-es-7-with-data-fields-conflicts/265882 "2021-03-05T12:49:59Z")
Hi, I've just setup up Metricbeat to start monitoring my ES cluster. I started receiving data from my Metricbeat instance, but on Kibana while trying to see that monitoring data I'm receiving bunch of data types confli… [Previous page](https://discuss.elastic.co/latest.md?page=1798) [Next page](https://discuss.elastic.co/latest.md?page=1800)