# Latest **URL:** https://discuss.elastic.co/latest.md?page=1804 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1805 --- ## [No release file issue](https://discuss.elastic.co/t/no-release-file-issue/263367)
**Author:** [@Abhishek\_Singh1](https://discuss.elastic.co/u/Abhishek_Singh1)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 7:29pm UTC](https://discuss.elastic.co/t/no-release-file-issue/263367 "2021-03-03T19:29:00Z")
Hi, I am trying to reinstall elasticsearch & Kibana in my Ubuntu 20.04 OS. There was some issue with Kibana loading, I tried fixing the yml files of both of them but port 5601 kept showing Kibana server is not ready yet… --- ## [JDBC Input](https://discuss.elastic.co/t/jdbc-input/266028)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:26pm UTC](https://discuss.elastic.co/t/jdbc-input/266028 "2021-03-03T19:26:51Z")
Investigating data ingest using the JDBC input plugin to pull from a SQL database. Is there a way to configure the query to only pull records based on time? The table I'm pulling from has an updated\_on column. As an e… --- ## [Bytes not showing proper human readable](https://discuss.elastic.co/t/bytes-not-showing-proper-human-readable/266143)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [March 3, 2021, 7:11pm UTC](https://discuss.elastic.co/t/bytes-not-showing-proper-human-readable/266143 "2021-03-03T19:11:54Z")
I have daily value which is in bytes but not properly getting converted to Human readable format { "totalsize": 17439122738118656 } this is = 17.4 PB now when I try to draw that up in kibana it shows only 15.5PB. … --- ## [Filebeat /usr/local/bin/docker-entrypoint line 8: exec: filebeat: not found](https://discuss.elastic.co/t/filebeat-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/265927)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 7\ **Last updated:** [March 3, 2021, 6:59pm UTC](https://discuss.elastic.co/t/filebeat-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/265927 "2021-03-03T18:59:41Z")
Hi There, I faced typical problem with filebeat. No matter which user (filebeat or root) I'm trying to launch filebeat 7.9.2 i'm getting: filebeat | /usr/local/bin/docker-entrypoint: line 8: exec: filebeat: not foun… --- ## [Recommendation for specific analyser settings](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150)
**Author:** [@Veran](https://discuss.elastic.co/u/Veran)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 6:24pm UTC](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150 "2021-03-03T18:24:11Z")
Hello, I have been using Elasticsearch to create a search system based on data from RDBMS. I have documents with only 8 fields, where each field contains text data. This data represents best practice recommendations from… --- ## [ElasticSerch returns an error if the query contains strings with brackets and other characters](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611)
**Author:** [@mor\_mor](https://discuss.elastic.co/u/mor_mor)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611 "2021-03-03T17:39:47Z")
Description: The application has the ability to filter the date by key values. For example, if you need to display all items in which "Result: success"; For one of the keys, the value is always in the form of a JS objec… --- ## [Exclusions for elastic EQL rules](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144 "2021-03-03T17:39:46Z")
Hi, We are trying to create exclusions for one of the new EQL rules - remote execution via file shares Within the detection there is no relevent info to base an exclusion, from the timeline we see the events and fields… --- ## [How to Restrict Enterprise Search to a specific Domain Origin](https://discuss.elastic.co/t/how-to-restrict-enterprise-search-to-a-specific-domain-origin/265907)
**Author:** [@MCL](https://discuss.elastic.co/u/MCL)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 5:28pm UTC](https://discuss.elastic.co/t/how-to-restrict-enterprise-search-to-a-specific-domain-origin/265907 "2021-03-03T17:28:31Z")
Hi, We just set up enterprise search for our website. We use the query suggestion api (/api/as/v1/engines/{ENGINE\_NAME}/query\_suggestion) on our frontend. Since our endpoint and public key are exposed, how can we rest… --- ## [Merge multiple fields in document into json array](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:09pm UTC](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036 "2021-03-03T17:09:56Z")
Hi, I have following document Ingesting into Elasticsearch using the logstash \_source": { "server\_name": "abc", "server\_ip": "0.0.0.0", "server\_location: "us" "type" : "… --- ## [For large texts, indexing with offsets or term vectors is recommended](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115)
**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 4:47pm UTC](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115 "2021-03-03T16:47:01Z")
I have an index that contains the text of files. Most files aren't that large, but some do have more than 1,000,000 characters. I'm using the default unified highlighter when displaying results to the end users. When a s… --- ## [I see timeout excpetion in logstash](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 4:20pm UTC](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140 "2021-03-03T16:20:59Z")
Below is the error message in logstash-plain.log \[2021-03-03T16:00:46,719\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]\[main\]\[ed5928ede48a4919694eb040ed1411b2d0e6482d5881ff856cc046fe3412681f\] An exceptionCaught() eve… --- ## [Elastic-Agent - filebeat and metricbeat - Error Log help](https://discuss.elastic.co/t/elastic-agent-filebeat-and-metricbeat-error-log-help/264054)
**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 4:05pm UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-and-metricbeat-error-log-help/264054 "2021-03-03T16:05:05Z")
I have ElasticSearch and Kibana running as dockers I documented it here: https://github.com/cwobuzz/Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/blob/master/.README.md My Elastic-Agent is pushing Endpoint s… --- ## [Upgrade Assistant: Internal Server Error](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955)
**Author:** [@adsr](https://discuss.elastic.co/u/adsr)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 4:03pm UTC](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955 "2021-03-03T16:03:25Z")
Hello everyone, after upgrading to 7.11.1 (coming from 7.5.0) I notice that the "Upgrade Assistant" reports an Internal Server Error: I tried starting kibana with logging.verbose: true but can't seem to see any "usef… --- ## [Does elastic Security agent replace the use of Auditbeat, packetbeat, and filebeat agents?](https://discuss.elastic.co/t/does-elastic-security-agent-replace-the-use-of-auditbeat-packetbeat-and-filebeat-agents/266021)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 3:43pm UTC](https://discuss.elastic.co/t/does-elastic-security-agent-replace-the-use-of-auditbeat-packetbeat-and-filebeat-agents/266021 "2021-03-03T15:43:00Z")
I was watching a webinar of SIEM with version 7.2 of elastic, and the speaker use multiples agents (Auditbeat, packetbeat, and filebeat agents) to feed SIEM, and now with elastic 7.11 there is a new agent, Endpoint, I wa… --- ## [Disable auto refresh](https://discuss.elastic.co/t/disable-auto-refresh/264653)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 3:24pm UTC](https://discuss.elastic.co/t/disable-auto-refresh/264653 "2021-03-03T15:24:51Z")
Hello, i was trying to disable auto refresh in Kibana. I would like to completely disable it. But timepicker:refreshInterval "pause": true is not working no matter what i do. It always goes back to enable and 10sec. Ki… --- ## [Can you confirm this is false positive?](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119)
**Author:** [@ThiruKumaran](https://discuss.elastic.co/u/ThiruKumaran)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 3:09pm UTC](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119 "2021-03-03T15:09:05Z")
Hi, Could you please check this file, as I think it is a false detection. his file has been falsely detected as malware link for the issue : https://www.virustotal.com/gui/file/4f8248e9f80ce5c367f75956a2f6b77262e72964… --- ## [Running the script in elasticsearch docker-compose](https://discuss.elastic.co/t/running-the-script-in-elasticsearch-docker-compose/265832)
**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:37pm UTC](https://discuss.elastic.co/t/running-the-script-in-elasticsearch-docker-compose/265832 "2021-03-03T14:37:49Z")
Hi all, I am facing a issue after running the script from the docker-compose to install s3 plugin and restart the elastic search. Its failing with an error as mentioned below. Can anyone help how can we successfully ru… --- ## [Delete a inherited field mapping with another template](https://discuss.elastic.co/t/delete-a-inherited-field-mapping-with-another-template/266127)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 2:31pm UTC](https://discuss.elastic.co/t/delete-a-inherited-field-mapping-with-another-template/266127 "2021-03-03T14:31:26Z")
Hi Folks, is it possible to delete a field mapping parameter ("ignore\_above") which is defined in a default template with a "special" template (with higher order) ? Background: i am using legacy templates at the momen… --- ## [Kibana Ports reported as vulnerability for TLS v 1.0 and 1.1](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111 "2021-03-03T14:30:31Z")
Hi All We are using Kibana Version 6.6.2. Recently our security scans for vulnerable ports reported Kibana port (5061) for using TLS 1.0 and TLS 1.1. I could not find any documentation on the blogs on how to disable ol… --- ## [No nginx metric graphs](https://discuss.elastic.co/t/no-nginx-metric-graphs/265330)
**Author:** [@fortega](https://discuss.elastic.co/u/fortega)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/no-nginx-metric-graphs/265330 "2021-03-03T14:05:33Z")
Hi. I have installed metricbeat on the Nginx server to send the data to the ELK server. I have loaded the dashboards but no data appears in the graphs. The version used by Metricbeat and ELK is 1.10.1 and Nginx is 1.16.… --- ## [Error if FunctionBeat´s lambda name is changed](https://discuss.elastic.co/t/error-if-functionbeat-s-lambda-name-is-changed/265996)
**Author:** [@jpm](https://discuss.elastic.co/u/jpm)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 1:39pm UTC](https://discuss.elastic.co/t/error-if-functionbeat-s-lambda-name-is-changed/265996 "2021-03-03T13:39:35Z")
I'm trying to deploy Functionbeat lambda in AWS with a custom name. If I deploy it with the default name, cloudwatch, it works successfully but if I change the default name to any other name, once deployed it doesn't wor… --- ## [Create time series with fields date as long mapping](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 17\ **Last updated:** [March 3, 2021, 1:05pm UTC](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833 "2021-03-03T13:05:46Z")
Hi all, sorry for my poor english I have a index with a eventTime field mapped as long, So when I create a time series no date field is found by kibana. Is there a way (with a pre script???) to say to kibana "consider… --- ## [How to config Logstash receive and pars logs from port and file path at the same time](https://discuss.elastic.co/t/how-to-config-logstash-receive-and-pars-logs-from-port-and-file-path-at-the-same-time/266112)
**Author:** [@asan](https://discuss.elastic.co/u/asan)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 1:00pm UTC](https://discuss.elastic.co/t/how-to-config-logstash-receive-and-pars-logs-from-port-and-file-path-at-the-same-time/266112 "2021-03-03T13:00:47Z")
Hi I've been configured my Logstash input to read logs for two of my network devices from "/var/log" path file and it was working correctly but when i installed netflow plugin on logstash it started not reading the pat… --- ## [APM section UI in Kibana v7.11](https://discuss.elastic.co/t/apm-section-ui-in-kibana-v7-11/265475)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 12:58pm UTC](https://discuss.elastic.co/t/apm-section-ui-in-kibana-v7-11/265475 "2021-03-03T12:58:53Z")
Hello everyone I updated my cluster to version 7.11.0 but in the APM section i cant understand the following 2 sectors. (see image attached as well) Where does this latency field refer to (see number 1)? Why throu… --- ## [How to visualise the comparison of two bar plots in a single plot?](https://discuss.elastic.co/t/how-to-visualise-the-comparison-of-two-bar-plots-in-a-single-plot/265789)
**Author:** [@choobani](https://discuss.elastic.co/u/choobani)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 12:06pm UTC](https://discuss.elastic.co/t/how-to-visualise-the-comparison-of-two-bar-plots-in-a-single-plot/265789 "2021-03-03T12:06:00Z")
I have two different datasets from two different timeframes, I want to compute the difference between them and visualize it like the following plot. Is it possible to do so in Kibana? As you see it's not a time series … --- ## [Forecast still works on a machine that is not being monitored anymore](https://discuss.elastic.co/t/forecast-still-works-on-a-machine-that-is-not-being-monitored-anymore/266004)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 12:04pm UTC](https://discuss.elastic.co/t/forecast-still-works-on-a-machine-that-is-not-being-monitored-anymore/266004 "2021-03-03T12:04:33Z")
I have a machine that is not being monitored anymore, since 15 january. but I can still do a forecast, is there a way to handle this? other than to do a delete by query on the ML index? --- ## [Tag logs files from different directories](https://discuss.elastic.co/t/tag-logs-files-from-different-directories/266066)
**Author:** [@Warren\_Hansen](https://discuss.elastic.co/u/Warren_Hansen)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 11:59am UTC](https://discuss.elastic.co/t/tag-logs-files-from-different-directories/266066 "2021-03-03T11:59:58Z")
Hi, I have the same kind of log file that uses the same grok patterns to match, however they are in different folders and I want to tag them accordingly. How would I go about it? Would something like this work: fi… --- ## [Kibana in Docker does not show snapshot result](https://discuss.elastic.co/t/kibana-in-docker-does-not-show-snapshot-result/265814)
**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:22pm UTC](https://discuss.elastic.co/t/kibana-in-docker-does-not-show-snapshot-result/265814 "2021-03-01T14:22:01Z")
Hi, I have Elasticsearch 7.11.1 and Kibana 7.11.1 installed using docker with volume bindings below. elastic7111: image: docker.elastic.co/elasticsearch/elasticsearch:7.11.1 container\_name: elastic7111 … --- ## [Embed Discover app into Kibana app plugin](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411)
**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 11:30am UTC](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411 "2021-03-03T11:30:21Z")
I am developing a Kibana application plugin, and would like to embed the discover app into one of the pages. There does not seem to be much documentation on how to use the embeddables, and if that would even work for a s… --- ## [Filebeat json.message\_key tries to parse string as json](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943)
**Author:** [@YG\_BE](https://discuss.elastic.co/u/YG_BE)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 11:10am UTC](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943 "2021-03-03T11:10:48Z")
Hello, When trying to send logs from my kubernetes cluster on AKS running Filebeat 7.5, I'm running into the following error messages: Error decoding JSON: invalid character 'N' looking for beginning of value E… [Previous page](https://discuss.elastic.co/latest.md?page=1803) [Next page](https://discuss.elastic.co/latest.md?page=1805)