# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1802

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1803

---

## [How to get Fleet Agent to use CA Cert w/ Elasticsearch?](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238)

<div class="topic-metadata">

**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\
**Replies:** 3\
**Last updated:** [March 4, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238 "2021-03-04T17:45:49Z")

</div>

I'm trying to get logs sent to my Elasticsearch instance w/ Elastic Cloud Enterprise (Self Hosted), and i'm seeing the following error in the logs: {"file.name":"pipeline/output.go","file.line":154},"message":"Failed t…

---

## [Problems changing @timestamp value](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009)

<div class="topic-metadata">

**Author:** [@tstrul](https://discuss.elastic.co/u/tstrul)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 4:48pm UTC](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009 "2021-03-04T16:48:03Z")

</div>

Hi all, Im working on moving cloudfront real-time logs from kinessis to our ELK stack using functionbeat. I'm trying to convert logs timestamp (unix format) to regular date and use it in @timestemp field. unfortunatel…

---

## [I can't able get system & host uptime metric beat](https://discuss.elastic.co/t/i-cant-able-get-system-host-uptime-metric-beat/265690)

<div class="topic-metadata">

**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 4:43pm UTC](https://discuss.elastic.co/t/i-cant-able-get-system-host-uptime-metric-beat/265690 "2021-03-04T16:43:22Z")

</div>

this is my system module but i am not getting uptime of the host Module: system Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.9/metricbeat-module-system.html module: system period: 10s metricsets: cpu …

---

## [Dealing with multiple number of values from the same input - Logstash](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 4:27pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101 "2021-03-04T16:27:41Z")

</div>

I have recently started using Logstash so still new at this. The use-case I am working on is that I want to ship a log file with Logstash that has different lengths of lines in it. The length of line (the number of attri…

---

## [How to Copy Elasticsearch Volume Data into Another Server Machine](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 4:22pm UTC](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262 "2021-03-04T16:22:47Z")

</div>

Hi All, Below is the content which i have to copy that data of ES which is having more than 4GB root@server ~ # du -sh /var/lib/docker/volumes/uat\_esdata/\_data/ 4.1G /var/lib/docker/volumes/uat\_esdata/\_data/ root@serve…

---

## [Failed to set monitoring pipeline \[xpack\_monitoring\_2\] And process cluster event (put-pipeline-xpack\_monitoring\_2)](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 12\
**Last updated:** [March 4, 2021, 4:13pm UTC](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754 "2021-03-04T16:13:36Z")

</div>

Hi All, Below is the Error im getting in Elasticsearch container logs 'failed to set monitoring pipeline \[xpack\_monitoring\_2\] Org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process c…

---

## [Is date\_nanos supported in Logs UI](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 3:53pm UTC](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863 "2021-03-04T15:53:28Z")

</div>

Is date\_nanos supported in the logs UI? It doesn't seem like it.

---

## [Erreur filebeat/elasticsearch](https://discuss.elastic.co/t/erreur-filebeat-elasticsearch/265925)

<div class="topic-metadata">

**Author:** [@steph-ipi-69](https://discuss.elastic.co/u/steph-ipi-69)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 3:01pm UTC](https://discuss.elastic.co/t/erreur-filebeat-elasticsearch/265925 "2021-03-04T15:01:17Z")

</div>

Bonjour, je tente d'installer sur une redhat (Red Hat Enterprise Linux release 8.3 (Ootpa)) le triplé ealastisearch/filebeat/kibana depuis les infos github (https://github.com/molu8bits/squid-filebeat-kibana). Lorsque …

---

## [Threshold Detection Ignoring Group By Field](https://discuss.elastic.co/t/threshold-detection-ignoring-group-by-field/264873)

<div class="topic-metadata">

**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\
**Replies:** 6\
**Last updated:** [March 4, 2021, 3:02pm UTC](https://discuss.elastic.co/t/threshold-detection-ignoring-group-by-field/264873 "2021-03-04T15:02:10Z")

</div>

Hi I have upgraded to 7.11.0 and now 7.11.1 and I think there is an issue with Threshold detections. I have a simple detection based on my FW logs. It looks for flow\_denied or flow\_dropped messages and raises a detect…

---

## [How can I stream data from ES to Azure Blob (not snapshot)?](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240)

<div class="topic-metadata">

**Author:** [@Andrei\_Budaes-Tanaru](https://discuss.elastic.co/u/Andrei_Budaes-Tanaru)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240 "2021-03-04T14:24:22Z")

</div>

Hi Guys, My company is using Elasticsearch for one of our projects to collect event data from an app. As the number of users increased on the app so did the analytics needs. We are keeping data in for about 3 months for…

---

## [Elasticsearch,yaml](https://discuss.elastic.co/t/elasticsearch-yaml/266247)

<div class="topic-metadata">

**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-yaml/266247 "2021-03-04T14:14:33Z")

</div>

I am using managed elasticsearch on AWS. I want to edit some configuration in elasticsearch.yaml file. Can anyone suggest where is Elastiucsearch.yaml is located?

---

## [I cannot load kibana from browser and got different errors when reloading it](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236)

<div class="topic-metadata">

**Author:** [@Zhifei](https://discuss.elastic.co/u/Zhifei)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 12:32pm UTC](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236 "2021-03-04T12:32:34Z")

</div>

I cannot load kibana from browser, sometimes I got the following error when reloading kibana: {"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\<ht…

---

## [Nodejs Elastic Client Setup is not working](https://discuss.elastic.co/t/nodejs-elastic-client-setup-is-not-working/266233)

<div class="topic-metadata">

**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 12:25pm UTC](https://discuss.elastic.co/t/nodejs-elastic-client-setup-is-not-working/266233 "2021-03-04T12:25:33Z")

</div>

I have setup elastic using eck guide this is working fine. i was able to run logstash by importing certificates. now im trying to write a nodejs api project to use my elastic search. trying some examples from docs const…

---

## [Not able to copy from field data1 to field data2 in an existing index in ES](https://discuss.elastic.co/t/not-able-to-copy-from-field-data1-to-field-data2-in-an-existing-index-in-es/266224)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 12:24pm UTC](https://discuss.elastic.co/t/not-able-to-copy-from-field-data1-to-field-data2-in-an-existing-index-in-es/266224 "2021-03-04T12:24:00Z")

</div>

Hi all, I'm trying to copy data from field "updated" to "STATEMENT\_DATE". POST /test\_mycns\_com/\_update\_by\_query { { "query" : { "match\_all" : {} } }, "script" : { "source": "ctx.\_source.STATEMENT\_…

---

## [Elastic Security for Android and iOS](https://discuss.elastic.co/t/elastic-security-for-android-and-ios/266232)

<div class="topic-metadata">

**Author:** [@kal1s](https://discuss.elastic.co/u/kal1s)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 12:23pm UTC](https://discuss.elastic.co/t/elastic-security-for-android-and-ios/266232 "2021-03-04T12:23:37Z")

</div>

Hi Guys, We are designing a security solution for Desktop and Mobile and we considering Elastic Security for Desktop, and Checkpoint Harmony Mobile for Mobile. We're thinking, In the future will be possible to protect …

---

## [How to create multiple node in one cluster](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227)

<div class="topic-metadata">

**Author:** [@Moksedul\_Islam\_16](https://discuss.elastic.co/u/Moksedul_Islam_16)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227 "2021-03-04T11:40:32Z")

</div>

I have tried to create 3 nodes in my ES for "production", "development", "testing" using command: bin/elasticsearch -Epath.data=data1 -Epath.logs=log1 My elasticsearch.yml file located at admin:///etc/elasticsearch and…

---

## [Label an exact timestamp with event name](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685)

<div class="topic-metadata">

**Author:** [@jlbassereau](https://discuss.elastic.co/u/jlbassereau)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 11:06am UTC](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685 "2021-03-04T11:06:56Z")

</div>

Hello, I order to be able to compare metrics when a new version of application is installed, I would like to be able to label a precise timestamp as "version x of the app deployed" with a visible label on graphs. Is th…

---

## [Adding languages to App Search](https://discuss.elastic.co/t/adding-languages-to-app-search/266082)

<div class="topic-metadata">

**Author:** [@ToftStade](https://discuss.elastic.co/u/ToftStade)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:18am UTC](https://discuss.elastic.co/t/adding-languages-to-app-search/266082 "2021-03-04T10:18:36Z")

</div>

I would like to have swedish as a language in App Search. Is is possible to contribute in making that happen? If not, is there a way to add it manually?

---

## [Sometimes filebeat stops collecting/flushing events](https://discuss.elastic.co/t/sometimes-filebeat-stops-collecting-flushing-events/266187)

<div class="topic-metadata">

**Author:** [@M0rdecay](https://discuss.elastic.co/u/M0rdecay)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:17am UTC](https://discuss.elastic.co/t/sometimes-filebeat-stops-collecting-flushing-events/266187 "2021-03-04T10:17:34Z")

</div>

Hello! Please help me figure out the situation Sometimes Filebeat stops collecting/flushing events. On the graph, it looks like this: This does not look like a problem with one of the inputs, since events stop comin…

---

## [Geoip with GeoIP2-Connection-Type](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089)

<div class="topic-metadata">

**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 10:50am UTC](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089 "2021-03-03T10:50:11Z")

</div>

Hello I tried to use this DB for enrichment but it throws "Unsupported database type GeoIP2-Connection-Type" error Is there any chance this will be supported in the future? logstash config geoip { …

---

## [Elastic http securing: access denied ("java.io.FilePermission" "/etc/pki/tls/private" "read")](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:09am UTC](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202 "2021-03-04T10:09:41Z")

</div>

Hi Elastic 7.11.1 I am trying to secure http protcol. But I am getting 2021-03-04T11:15:13,050\]\[ERROR\]\[o.e.b.Bootstrap \] \[dev-dc2-rk\] Exception java.security.AccessControlException: access denied ("java.io.F…

---

## [Detection Rules Triggered although ports are closed!](https://discuss.elastic.co/t/detection-rules-triggered-although-ports-are-closed/266207)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 10:05am UTC](https://discuss.elastic.co/t/detection-rules-triggered-although-ports-are-closed/266207 "2021-03-04T10:05:44Z")

</div>

Hi, In SEIM, I can see some detection rules are triggered like although the related ports are already closed: signal.rule.name: "Telnet Port Activity" (which works on port 23) and signal.rule.name: "SMTP on Port 26/…

---

## [Logstash tcp input error : Error in Netty pipeline: java.io.IOException: Connection reset by peer](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 9:58am UTC](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206 "2021-03-04T09:58:32Z")

</div>

Hi, I still couldn't find any answer to this issue. In our case, we are collecting logs from checkpoint. Anyone can help? Thanks.

---

## [Compiling elastic-agent for linux/mips64](https://discuss.elastic.co/t/compiling-elastic-agent-for-linux-mips64/266157)

<div class="topic-metadata">

**Author:** [@kn1ght0w1](https://discuss.elastic.co/u/kn1ght0w1)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:52am UTC](https://discuss.elastic.co/t/compiling-elastic-agent-for-linux-mips64/266157 "2021-03-04T09:52:23Z")

</div>

Hi All, I am trying to compile elastic-agent for linux/mips64 and I am getting a bit beyond myself. I cloned the GIT repo and ran the following to try and get it to compile: SNAPSHOT=true DEV=true PLATFORMS=linux/mips6…

---

## [Fit size of filebeat](https://discuss.elastic.co/t/fit-size-of-filebeat/266109)

<div class="topic-metadata">

**Author:** [@The\_Guaz](https://discuss.elastic.co/u/The_Guaz)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:38am UTC](https://discuss.elastic.co/t/fit-size-of-filebeat/266109 "2021-03-04T09:38:18Z")

</div>

Hi, Generally filebeat mapping creating a lot of unused fields in my elasticsearch environment. I wonder, because size of the logs are excessivelly large (around 5-6 GB per day). Can I somehow delete unused mapping from…

---

## [Filebeat autodiscover kubernetes appenders error](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-appenders-error/266108)

<div class="topic-metadata">

**Author:** [@QCU266](https://discuss.elastic.co/u/QCU266)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:37am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-appenders-error/266108 "2021-03-04T09:37:19Z")

</div>

I want to use appenders like @icoolchn , so I test @icoolchn 's configuration, but the filebeat reports the following error(filebeat version 7.9.3): 2021-03-02T12:28:24.673Z INFO instance/beat.go:456 filebeat stopped. 2…

---

## [Filebeat: failed FilterLogEventsRequestRequestCanceled](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097)

<div class="topic-metadata">

**Author:** [@vishwas\_rajput](https://discuss.elastic.co/u/vishwas_rajput)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097 "2021-03-04T09:36:42Z")

</div>

Hi, I am using Filebeat 7.11.1 to fetch CloudWatch logs using given configuration filebeat.inputs: - type: aws-cloudwatch log\_group\_arn: arn:aws:logs:XXX:XXX:\* log\_group\_name: /aws/ …

---

## [Need to set following variables on AWS managed ES](https://discuss.elastic.co/t/need-to-set-following-variables-on-aws-managed-es/266199)

<div class="topic-metadata">

**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 8:56am UTC](https://discuss.elastic.co/t/need-to-set-following-variables-on-aws-managed-es/266199 "2021-03-04T08:56:20Z")

</div>

reindex.remote.whitelist=\<source\_cluster\_hostnames\_or\_ip\_range\>:9200,\<another\_vpc\_hostname\>:9200 script.painless.regex.enabled=true How I am going to set these variables inside the Elasticsearch cluster domain?

---

## [ECK Operator stuck in ApplyingChanges state after upgrade to 1.4.0](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726)

<div class="topic-metadata">

**Author:** [@barracuda-charles](https://discuss.elastic.co/u/barracuda-charles)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 8:25am UTC](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726 "2021-03-04T08:25:52Z")

</div>

I recently upgraded to 1.4.0 and the operator is stuck in the ApplyingChanges state. I expanded a few volumes on data nodes which caused the cluster to enter a yellow state temporarily however the operator stayed green t…

---

## [How to check in which way elasticsearch is running?](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813)

<div class="topic-metadata">

**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\
**Replies:** 5\
**Last updated:** [March 4, 2021, 8:09am UTC](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813 "2021-03-04T08:09:53Z")

</div>

Hi All, Greetings...! Kindly help me with following two questions.. 1.How to check in which mode elastic is running? In my project when I do Service elasticsearch status, it shows its failed, but this node is joined t…

[Previous page](https://discuss.elastic.co/latest.md?page=1801)

[Next page](https://discuss.elastic.co/latest.md?page=1803)
