# Latest **URL:** https://discuss.elastic.co/latest.md?page=1837 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1838 --- ## [Winlogbeat does not properly handle CN's with comma(s) in name](https://discuss.elastic.co/t/winlogbeat-does-not-properly-handle-cns-with-comma-s-in-name/264362)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 9:15pm UTC](https://discuss.elastic.co/t/winlogbeat-does-not-properly-handle-cns-with-comma-s-in-name/264362 "2021-02-15T21:15:10Z")
Hi All, I was looking at some Winlogbeat events, and I noticed that it doesn't seem to be properly handling CN's with comma(s) in them. Example (backslashes present to show escapes): Have a user like so: Admin\\\\, user … --- ## [Grok timestamp (can't match pattern)](https://discuss.elastic.co/t/grok-timestamp-cant-match-pattern/263816)
**Author:** [@Frankie\_Braybon](https://discuss.elastic.co/u/Frankie_Braybon)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 8:35pm UTC](https://discuss.elastic.co/t/grok-timestamp-cant-match-pattern/263816 "2021-02-15T20:35:24Z")
The log line I am trying to make patterns on: Sent from filebeat to logstash. \[Log Level- \[1\],\[2021-01-05 15:19:28:410 GMT+0000\], Thread ID: -858872064 HEALTH CHECK STATUS : 0, HealthCheck/Src/HealthCheckManager.cpp,… --- ## [Logstash not sending the logs to elk and kibana](https://discuss.elastic.co/t/logstash-not-sending-the-logs-to-elk-and-kibana/264357)
**Author:** [@Tugsan\_Tuncer](https://discuss.elastic.co/u/Tugsan_Tuncer)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 7:55pm UTC](https://discuss.elastic.co/t/logstash-not-sending-the-logs-to-elk-and-kibana/264357 "2021-02-15T19:55:40Z")
Hİ all, i am trying configure filebeats send the logs to kibana but I was not successful.my setup is on kubernetes. I tried In My Spring Boot Project.Please help me logstash.conf: input { beats { port =\> 5000 typ… --- ## [How to set Kibana Discover startpage to do 'nothing'](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334)
**Author:** [@DanielV](https://discuss.elastic.co/u/DanielV)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 7:54pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334 "2021-02-15T19:54:03Z")
My company's Kibana startpage is "Discover". By default no index is selected. Default timeframe is now - 15m. Some users complain that it takes long to load the first page. It takes about 21 seconds for this default que… --- ## [Kibana error - more issues found during setup](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125 "2021-02-15T19:46:46Z")
Using Kibana: v7.10.2 ElasticSearch:7.10.2 When trying to create an Index, I go to the indices option on Index Management page and get the following error: Error Loading indices Cannot read property 'aliases' of unde… --- ## [Kibana shows browser compatibity issue](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 4\ **Last updated:** [February 15, 2021, 7:37pm UTC](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252 "2021-02-15T19:37:34Z")
My kibana is running on ubuntu box and properly configured the kibana.yml, but when i browse the UI, it shows your browser does not meet the security requirements for kibana My browser is already latest version. Can som… --- ## [Kibana Scripted - How to get a string between the second and the third slash](https://discuss.elastic.co/t/kibana-scripted-how-to-get-a-string-between-the-second-and-the-third-slash/264188)
**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:34pm UTC](https://discuss.elastic.co/t/kibana-scripted-how-to-get-a-string-between-the-second-and-the-third-slash/264188 "2021-02-15T19:34:59Z")
Hey Guys, I am trying to get a string from a file path field in Kibana. I am not quite sure how to go about it. C:/path/\[application\]/file.log. The first two slashes are constant however, the slashes after \[applicatio… --- ## [Self-healing alerts in Kibana Alerts](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350)
**Author:** [@slord](https://discuss.elastic.co/u/slord)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:14pm UTC](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350 "2021-02-15T19:14:32Z")
I'm using the Index action in Kibana Alerts, and I've got a metric threshold alert. I want to have something in the index to say when an alert is resolved - I've tried adding {{context.alertState}} to the payload but th… --- ## [Geo\_point in logstash](https://discuss.elastic.co/t/geo-point-in-logstash/264240)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 7:05pm UTC](https://discuss.elastic.co/t/geo-point-in-logstash/264240 "2021-02-15T19:05:45Z")
Hi I used syslog to send log to logstash ( logstash 7.10) I used this grok in logstash.conf ##################### geoip { source =\> "source.ip" target =\> "source.geo" } geoip { source =\> "destination.ip" target… --- ## [How to enable ILM policy for an index](https://discuss.elastic.co/t/how-to-enable-ilm-policy-for-an-index/264019)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 6:58pm UTC](https://discuss.elastic.co/t/how-to-enable-ilm-policy-for-an-index/264019 "2021-02-15T18:58:50Z")
I created ILM policy to move after 1 day from the hot phase to the warm phase. But it didn't work. I want to make "managed": true for the above output and enable policy for index. When looking at the index template… --- ## [Ingest-converter not mapping some fields properly?](https://discuss.elastic.co/t/ingest-converter-not-mapping-some-fields-properly/263644)
**Author:** [@Daniel314](https://discuss.elastic.co/u/Daniel314)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 6:54pm UTC](https://discuss.elastic.co/t/ingest-converter-not-mapping-some-fields-properly/263644 "2021-02-15T18:54:45Z")
Background: at my organization, we heavily use Logstash and kafka to deal with buffering and spikes in the traffic flowing to ElasticSearch, as well as scaling processing horizontally. Because of this, the "ingest" pipe… --- ## [Using aliases to optimize queries from a dashboard](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 6:03pm UTC](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275 "2021-02-15T18:03:17Z")
Good afternoon, at the moment I am consulting what is the best way to optimize the way many users consult from the dashboard. We have index\_patterns that store information for more than one year and when users filter the… --- ## [Cannot resolve org.elasticsearch:elasticsearch-plugin-classloader:7.11.0](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304)
**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 5:36pm UTC](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304 "2021-02-15T17:36:27Z")
Hi, I tried to use dependency \ \org.elasticsearch.client\ \elasticsearch-rest-high-level-client\ \7.11.0\ \ but I got except… --- ## [Filebeat 7.11 is not publishing application log into AWS MSK-2.2.1, getting error kafka: client has run out of available brokers to talk](https://discuss.elastic.co/t/filebeat-7-11-is-not-publishing-application-log-into-aws-msk-2-2-1-getting-error-kafka-client-has-run-out-of-available-brokers-to-talk/264339)
**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 5:27pm UTC](https://discuss.elastic.co/t/filebeat-7-11-is-not-publishing-application-log-into-aws-msk-2-2-1-getting-error-kafka-client-has-run-out-of-available-brokers-to-talk/264339 "2021-02-15T17:27:55Z")
Hi All, I am unable to post data from filebeat agent to AWS MSK 2.2.1 . Initially I was used filebeat version 7.10.0.As per the elastic team advice I have upgraded into 7.11.0. I used TLS configuration and please find … --- ## [Logstash fails to restart after the queue size is full](https://discuss.elastic.co/t/logstash-fails-to-restart-after-the-queue-size-is-full/263278)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 4:56pm UTC](https://discuss.elastic.co/t/logstash-fails-to-restart-after-the-queue-size-is-full/263278 "2021-02-15T16:56:56Z")
Hi Team, We have enabled persistent queue on our logstash servers. queue.path is /var/lib/logstash queue.max\_bytes=30gb The logstash queue was full and I had restarted logstash service. Logstash fails to restart with… --- ## [Restoring from snapshot locally "Some repositories contain errors"](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 4:53pm UTC](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299 "2021-02-15T16:53:26Z")
Hi, I have setup a local version of elasticsearch and kibana. I want to restore an index from production to this local version. I have created an s3 "repository" under Stack Management \> Snapshot and Restore. After c… --- ## [ELK 7.10 - Indicator index patterns: Value lists](https://discuss.elastic.co/t/elk-7-10-indicator-index-patterns-value-lists/264287)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 4:22pm UTC](https://discuss.elastic.co/t/elk-7-10-indicator-index-patterns-value-lists/264287 "2021-02-15T16:22:24Z")
Hello, I am trying to create a indicator match rule in ELK 7.10 where i have to give the indicator index pattern. Is there any default indicator index in ELK 7.10 or do i need to create a new indicator index with IOC lo… --- ## [Kibana index pattern not saved](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 7\ **Last updated:** [February 15, 2021, 4:09pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321 "2021-02-15T16:09:29Z")
I have an ELK stack running on the Kubernetes cluster with security enabled. Everything is running fine and I am able to push data to an index. After logging in to Kibana as an admin user, and I to "Discover" it asks me … --- ## [Scripted fields vs runtime fields](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 10:57pm UTC](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962 "2021-02-11T22:57:45Z")
Hello, i have read the introduction of runtime fields under And i'm wondering where the differences to the "old" scripted fields are beside the ability define them in a mapping and not only in a query? Is it simply a… --- ## [ES regexp not working properly](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 3:09pm UTC](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297 "2021-02-15T15:09:39Z")
Hello, I want to query my index and get documents where "@" is present in my "cust\_email" field. GET my\_index/\_search { "sort": \[ { "last\_updated\_date": {"order":"desc"}} \], "\_source": \[ "cust\_email"\], … --- ## [Everything you Always Wanted to Know about Filebeat \* But Were Afraid to Ask](https://discuss.elastic.co/t/everything-you-always-wanted-to-know-about-filebeat-but-were-afraid-to-ask/264323)
**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 2:32pm UTC](https://discuss.elastic.co/t/everything-you-always-wanted-to-know-about-filebeat-but-were-afraid-to-ask/264323 "2021-02-15T14:32:57Z")
I just published in the community channel from Elastic an video that introduces Filebeat. If you want to understand more about this Beat and get yourself hands-on with this technology then it may be a 1 hour very well sp… --- ## [Monitoring on Elasticsearch](https://discuss.elastic.co/t/monitoring-on-elasticsearch/263597)
**Author:** [@Chen\_Levi](https://discuss.elastic.co/u/Chen_Levi)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 1:48pm UTC](https://discuss.elastic.co/t/monitoring-on-elasticsearch/263597 "2021-02-15T13:48:21Z")
Hi I'm totally confused and hopefully i'll be able to explain the problem we have. i have two Elasticsearch (elastic cloud) clusters version 7.9.2 i was struggling to get the metrics i want and finally noticed the al… --- ## [Big troubles upgrading elastic cluter](https://discuss.elastic.co/t/big-troubles-upgrading-elastic-cluter/264302)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 1:33pm UTC](https://discuss.elastic.co/t/big-troubles-upgrading-elastic-cluter/264302 "2021-02-15T13:33:38Z")
Hi, I got a big issue upgrading my elastic cluster. I think the only option is to stop all 5 servers, restore the FS backup I have and re-start the 5 servers. I would like to get advice to restart my cluster. Thank y… --- ## [Parse a document with Painless](https://discuss.elastic.co/t/parse-a-document-with-painless/264182)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 1:25pm UTC](https://discuss.elastic.co/t/parse-a-document-with-painless/264182 "2021-02-15T13:25:06Z")
Hello, In my index i have the field http.request.body.original (see also image below): {"customerNr":"9203521","sendMethod":"TOUR","partialDelivery":false,"isTourTimetable":false,"deliveryAddressId":"8100000000000154… --- ## [Trying external-plugin-test on "real setup" fails with "Cannot resolve type description for co.elastic.apm.agent.bci.classloading.LookupExposer"](https://discuss.elastic.co/t/trying-external-plugin-test-on-real-setup-fails-with-cannot-resolve-type-description-for-co-elastic-apm-agent-bci-classloading-lookupexposer/260923)
**Author:** [@mputz86](https://discuss.elastic.co/u/mputz86)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 1:20pm UTC](https://discuss.elastic.co/t/trying-external-plugin-test-on-real-setup-fails-with-cannot-resolve-type-description-for-co-elastic-apm-agent-bci-classloading-lookupexposer/260923 "2021-02-15T13:20:24Z")
Hey there, when I try out the external-plugin-test from integration-tests, it fails with "Cannot resolve type description for co.elastic.apm.agent.bci.classloading.LookupExposer". So probably something is missing / not… --- ## [Data migration from mongodb to elasticsearch](https://discuss.elastic.co/t/data-migration-from-mongodb-to-elasticsearch/264311)
**Author:** [@Pankaj1](https://discuss.elastic.co/u/Pankaj1)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 12:42pm UTC](https://discuss.elastic.co/t/data-migration-from-mongodb-to-elasticsearch/264311 "2021-02-15T12:42:27Z")
I am doing data migration from mongodb to elasticsearch by using logstash . I am using jdbc mongodb jar as a plugin . I have aggregation query to get the records from mongodb and insert into elasticsearch . The issues… --- ## [Unable to generate report TypeError: FieldFormat is not a constructor](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/264213)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 12:12pm UTC](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/264213 "2021-02-15T12:12:40Z")
Hi Team, I am not able to generate CSV report from Kibana. Getting error: Couldn't create report for search TypeError: FieldFormat is not a constructor I am able to download CSV report for old saved object. Thank… --- ## [Can't open Kibana](https://discuss.elastic.co/t/cant-open-kibana/264290)
**Author:** [@SafiaSo](https://discuss.elastic.co/u/SafiaSo)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 12:01pm UTC](https://discuss.elastic.co/t/cant-open-kibana/264290 "2021-02-15T12:01:11Z")
Hi, I'm running ELK on a Centos 7 . But I can't open kibana on the browser ! Systemctl status kibana shows that kibana is running . I need help please. --- ## [Highlight field is empty](https://discuss.elastic.co/t/highlight-field-is-empty/264177)
**Author:** [@jrartiga](https://discuss.elastic.co/u/jrartiga)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 11:42am UTC](https://discuss.elastic.co/t/highlight-field-is-empty/264177 "2021-02-15T11:42:03Z")
Hi all, I'm using the https://search-api.swiftype.com/api/v1/engines API and I'm concern about why for some results the highlight field comes empty, that field always should return values right? I was reading the docum… --- ## [Suggestion to Deploy Azure Elasticsearch (Self-Managed) deployment](https://discuss.elastic.co/t/suggestion-to-deploy-azure-elasticsearch-self-managed-deployment/263971)
**Author:** [@verma.s](https://discuss.elastic.co/u/verma.s)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 11:17am UTC](https://discuss.elastic.co/t/suggestion-to-deploy-azure-elasticsearch-self-managed-deployment/263971 "2021-02-15T11:17:12Z")
Hello Team, We have requirement to deploy Elasticsearch (Self-Managed) marketplace solution in our Azure environment, Need clarification on couple of doubts. Is it possible to use our own OS image instead of default. I… [Previous page](https://discuss.elastic.co/latest.md?page=1836) [Next page](https://discuss.elastic.co/latest.md?page=1838)