# Latest **URL:** https://discuss.elastic.co/latest.md?page=1873 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1874 --- ## [Do i need a paid license to configure user-name password?](https://discuss.elastic.co/t/do-i-need-a-paid-license-to-configure-user-name-password/262316)
**Author:** [@pemfir](https://discuss.elastic.co/u/pemfir)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 5:56am UTC](https://discuss.elastic.co/t/do-i-need-a-paid-license-to-configure-user-name-password/262316 "2021-01-27T05:56:20Z")
I work for a company and at this stage doing very preliminary research on toy data on one single server. Do I need a paid license to configure username/password in elastic-search stack ? In particular do I need a paid … --- ## [Request rejected(400) without details(root-cause) in 6.2.4](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185)
**Author:** [@Long\_Quanzheng](https://discuss.elastic.co/u/Long_Quanzheng)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 1:39am UTC](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185 "2021-01-27T01:39:19Z")
Hi, how do I troubleshoot rejected request ElasticSearch 6.2.4? The request got Error: elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] As the returned but there is no detail… --- ## [Some visualisations does not show data in \[Metricbeat Zookeeper\] Overview dasboard in kibana](https://discuss.elastic.co/t/some-visualisations-does-not-show-data-in-metricbeat-zookeeper-overview-dasboard-in-kibana/262287)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 12:48am UTC](https://discuss.elastic.co/t/some-visualisations-does-not-show-data-in-metricbeat-zookeeper-overview-dasboard-in-kibana/262287 "2021-01-27T00:48:26Z")
I have loaded metricbeat dashboards in kibana.In \[Metricbeat Zookeeper\] Overview dashboard, Packets received / sent section does not display any data. I am unable to figure out why it is happening. All other visualisatio… --- ## [Filebeat is running but not sending logs to logstash](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/262283)
**Author:** [@ats](https://discuss.elastic.co/u/ats)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 11:09pm UTC](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/262283 "2021-01-26T23:09:00Z")
Hi folks, I configured filebeat on a ubuntu instance in aws and sending logs to Logstash but it's not sending to Logstash. Here is my filebeat yml file # ---------------------------- Elasticsearch Output -------------… --- ## [Enterprise Search and SSL](https://discuss.elastic.co/t/enterprise-search-and-ssl/262053)
**Author:** [@christopher.farmer](https://discuss.elastic.co/u/christopher.farmer)\ **Replies:** 5\ **Last updated:** [January 26, 2021, 10:10pm UTC](https://discuss.elastic.co/t/enterprise-search-and-ssl/262053 "2021-01-26T22:10:08Z")
Has anyone gotten Workplace Search to work over port 443? I believe I have set everything up correctly, but ES/WS will not start. I get this, which doesn't really tell me anything and the logs don't either. Enterprise… --- ## [Elasticsearch possible same \_id for parent-child](https://discuss.elastic.co/t/elasticsearch-possible-same-id-for-parent-child/262217)
**Author:** [@J\_Kit](https://discuss.elastic.co/u/J_Kit)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 9:38pm UTC](https://discuss.elastic.co/t/elasticsearch-possible-same-id-for-parent-child/262217 "2021-01-26T21:38:00Z")
Hi As I designing the elastic search for parent-child document type, I encounter this situation where my the parent and Child database table is different. And when I combine both into the parent child, the will be pos… --- ## [Watcher email configuration postfix 7.5](https://discuss.elastic.co/t/watcher-email-configuration-postfix-7-5/262262)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 5:24pm UTC](https://discuss.elastic.co/t/watcher-email-configuration-postfix-7-5/262262 "2021-01-26T17:24:44Z")
Hi, I was using this configuration in elasticsearch.yml for the email, but a friend told me that I was suposed to use the local postfix for the email, currently is pointing to the relay. xpack.notification.email.account… --- ## [Windows local Firewall management](https://discuss.elastic.co/t/windows-local-firewall-management/262277)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 9:01pm UTC](https://discuss.elastic.co/t/windows-local-firewall-management/262277 "2021-01-26T21:01:58Z")
Hello, Most EDR's offer integrated Windows Firewall management. Is that something that is on the Elastic Endpoint Security roadmap? Grtz Willem --- ## [Define a global default type for a string](https://discuss.elastic.co/t/define-a-global-default-type-for-a-string/262281)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:56pm UTC](https://discuss.elastic.co/t/define-a-global-default-type-for-a-string/262281 "2021-01-26T20:56:52Z")
Hello, Can I ask elasticsearch to treat incoming strings as keyword , for any future created index without a matched template? Something like global template Thanks --- ## [Remove aggregated sums that equal to 0 from visualization](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271)
**Author:** [@thedevelpr](https://discuss.elastic.co/u/thedevelpr)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 8:52pm UTC](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271 "2021-01-26T20:52:45Z")
\[Kibana 7.9.0v\] I've been trying to remove fields from a bar graph in which their sum is 0. Currently, I am doing a sum aggregation for products sold and displaying it on a bar graph. The sums are correct and the produ… --- ## [Metricbeat AWS module endpoint not working correctly](https://discuss.elastic.co/t/metricbeat-aws-module-endpoint-not-working-correctly/261589)
**Author:** [@cjm3625](https://discuss.elastic.co/u/cjm3625)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 8:43pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module-endpoint-not-working-correctly/261589 "2021-01-26T20:43:56Z")
aws.yml is as follows regions: us-iso-east-1 endpoint: us-iso-east-1.c2s.ic.gov period: 5m metricsets: - ec2 The error is ListMetricsRequest failed: send request failed. followed by a proxy error driven by … --- ## [High RAM usage by data nodes (Kubernetes)](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008)
**Author:** [@itsron](https://discuss.elastic.co/u/itsron)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 7:58pm UTC](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008 "2021-01-26T19:58:32Z")
We are running v7.10.1 on Kubernetes. We've 4 data nodes each with 4 cpus and 16gb RAM (8gb heap). Currently it has only metricbeat and filebeat writing data into it which is a total of ~1.5M docs/hour (~10GB/day,retaine… --- ## [Repo for zip/tar logstash plugins](https://discuss.elastic.co/t/repo-for-zip-tar-logstash-plugins/262166)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 6:16pm UTC](https://discuss.elastic.co/t/repo-for-zip-tar-logstash-plugins/262166 "2021-01-26T18:16:30Z")
Hello, I am looking for a link to a repo or some location that can provide me logstash plugin zip/tar files. My servers do not have internet connection/access. So I am looking to install logstash plugins offline. However… --- ## [OAuth authentication](https://discuss.elastic.co/t/oauth-authentication/262081)
**Author:** [@atira](https://discuss.elastic.co/u/atira)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 5:49pm UTC](https://discuss.elastic.co/t/oauth-authentication/262081 "2021-01-26T17:49:03Z")
Hi, Is it somehow possible to use 2-legged OAuth authentication, specifically client\_credentials and password type, with Heartbeat? The goal is to request a token by a single request to the oauth server, extract the to… --- ## [Efficient way of querying multiple ElasticSearch Indexes at once | Tools for visualization other than kibana](https://discuss.elastic.co/t/efficient-way-of-querying-multiple-elasticsearch-indexes-at-once-tools-for-visualization-other-than-kibana/261874)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 5:30pm UTC](https://discuss.elastic.co/t/efficient-way-of-querying-multiple-elasticsearch-indexes-at-once-tools-for-visualization-other-than-kibana/261874 "2021-01-26T17:30:57Z")
Hello Team, We explored kibana, however it seems very limited to our need. Can you please suggest, what are others recommended tools for visualization by joining multiple indexes from ElasticSearch. And how we can que… --- ## [No error in logstash. But no data in kibana](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 5:08pm UTC](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143 "2021-01-26T17:08:35Z")
I don't see any indices created in amazon ES. architecture filebeat-\> logstash-\> amazon ES. filebeat conf filebeat.inputs: - type: log paths: - /var/test.log fields: tags: test environment: uflek … --- ## [Filebeat error: Exiting: Error in initing input: the processor dissect doesn't exist](https://discuss.elastic.co/t/filebeat-error-exiting-error-in-initing-input-the-processor-dissect-doesnt-exist/262255)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 4:16pm UTC](https://discuss.elastic.co/t/filebeat-error-exiting-error-in-initing-input-the-processor-dissect-doesnt-exist/262255 "2021-01-26T16:16:08Z")
I am getting this error when I start the filebeat container in kubernetes: 2021-01-26T15:59:47.358Z INFO input/input.go:88 Starting input of type: log; ID: 11352026245999945754 2021-01-26T15:59… --- ## [Input command not executing](https://discuss.elastic.co/t/input-command-not-executing/262137)
**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 4:48pm UTC](https://discuss.elastic.co/t/input-command-not-executing/262137 "2021-01-26T16:48:12Z")
Hello, I'm trying to run a command every 10 seconds but it's not working. Here's my conf file : input { exec { command =\> "/home/xxx/CICFlow/bin/cfm \> '/tmp/logstash.log'" interval =\> 10 } } --- ## [Building Elasticsearch source code stuck at 99%](https://discuss.elastic.co/t/building-elasticsearch-source-code-stuck-at-99/262242)
**Author:** [@Amr\_Rady](https://discuss.elastic.co/u/Amr_Rady)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 4:46pm UTC](https://discuss.elastic.co/t/building-elasticsearch-source-code-stuck-at-99/262242 "2021-01-26T16:46:32Z")
I am trying to build the source code but it stuck at 99% --- ## [Unable to set custom index name in metricbeat taml file](https://discuss.elastic.co/t/unable-to-set-custom-index-name-in-metricbeat-taml-file/262252)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 3:51pm UTC](https://discuss.elastic.co/t/unable-to-set-custom-index-name-in-metricbeat-taml-file/262252 "2021-01-26T15:51:11Z")
I tried to set custom index name however it was not working. below are my config setup.ilm.enabled: false output.elasticsearch.index: "%{\[metricset.name\]}-=-%{\[event.module\]}%{+yyyy.MM.dd}" setup.template.name: "%{… --- ## [How to filter out IP from auth.log](https://discuss.elastic.co/t/how-to-filter-out-ip-from-auth-log/262231)
**Author:** [@john8](https://discuss.elastic.co/u/john8)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 1:23pm UTC](https://discuss.elastic.co/t/how-to-filter-out-ip-from-auth-log/262231 "2021-01-26T13:23:56Z")
hello newbie here I am running ELK on VMWare16 I need a little bit of help I have enabled the filebeat module called system but I am unable to get the clientip from there it falls under the message category Filebeat.y… --- ## [XML Logs in single-line challenge](https://discuss.elastic.co/t/xml-logs-in-single-line-challenge/262249)
**Author:** [@Igor\_Teresco](https://discuss.elastic.co/u/Igor_Teresco)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 3:39pm UTC](https://discuss.elastic.co/t/xml-logs-in-single-line-challenge/262249 "2021-01-26T15:39:12Z")
Have some applications writing their logs as a single line XML files, no LF, no CR... Is there a way to get them uploaded by FileBeat to LogStash? --- ## [Another Kibana instance appears to be migrating the index](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145)
**Author:** [@Jambo80](https://discuss.elastic.co/u/Jambo80)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145 "2021-01-26T15:27:06Z")
Hi I am relatively new to ELK and recently upgraded from 6.X to 6.8.13. When I start Kibana I now see the following error: "tags":\["warning","migrations"\],"pid":15615,"message":"Another Kibana instance appears to be mi… --- ## [Loading Incremental data into Elastic Search](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 3:12pm UTC](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180 "2021-01-26T15:12:34Z")
I am getting Json response from JIRA using Api containing issue details and loading those as logs in Elasticsearch. This activity we are doing continuously. So every time we need to provide an incremental data. In data w… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091)
**Author:** [@jayanth\_m](https://discuss.elastic.co/u/jayanth_m)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091 "2021-01-26T15:09:13Z")
Im getting Kibana server is not ready yet error when Opening Kibana dashboard After Looking into the logs, I observed below error: {"type":"log","@timestamp":"2021-01-25T11:11:14Z","tags":\["error","elasticsearch","data… --- ## [Kibana TSVB data is not displayed on legend](https://discuss.elastic.co/t/kibana-tsvb-data-is-not-displayed-on-legend/261909)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 2:52pm UTC](https://discuss.elastic.co/t/kibana-tsvb-data-is-not-displayed-on-legend/261909 "2021-01-26T14:52:19Z")
Hi guys , lately i installed the ELK 7.10.0 and created 2 time series graphs in TSVB , so the problem is that when i put the cursor on a point on the first graph it show me the values on the legend of that graph but no… --- ## [KIbana "Kibana server is not ready yet" -- routing disabled during upgrade](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 6\ **Last updated:** [January 26, 2021, 2:50pm UTC](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245 "2021-01-26T14:50:53Z")
Hi. So I think I made the mistake of upgrading to v7.10 Kibana with my cluster routing disabled, and as a result Kibana is stuck migrating. It's constantly producing log messages along the line of; \["info", "savedobj… --- ## [Dissect on a multiline message field](https://discuss.elastic.co/t/dissect-on-a-multiline-message-field/262122)
**Author:** [@abev](https://discuss.elastic.co/u/abev)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 2:50pm UTC](https://discuss.elastic.co/t/dissect-on-a-multiline-message-field/262122 "2021-01-26T14:50:13Z")
I have a multiline message field and I have to extract a field with tokenizer from a starting point to the end of the line. How can I select as ending point the new line? --- ## [Upgrading Kibana to 7.10.2 hangs while migrating](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197)
**Author:** [@IslandMan](https://discuss.elastic.co/u/IslandMan)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197 "2021-01-26T13:53:31Z")
Opening a new thread as suggested by @rudolf. So I've restored .kibana\_\* from a snapshot and started a 7.10.2 kibana server that in turn starts the migration. These are the logs it producses: Jan 26 08:03:50 ip-10-164… --- ## [Setting up Metricbeat to pull Exchange Perfmon](https://discuss.elastic.co/t/setting-up-metricbeat-to-pull-exchange-perfmon/261845)
**Author:** [@zachswill](https://discuss.elastic.co/u/zachswill)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 1:44pm UTC](https://discuss.elastic.co/t/setting-up-metricbeat-to-pull-exchange-perfmon/261845 "2021-01-26T13:44:07Z")
Trying to get Metricbeat to collect the exchange perfmon counters. Here is my current config. Any thoughts? I am getting counter not found. module: windows metricsets: \[perfmon\] period: 30s perfmon.ignore\_non\_existe… [Previous page](https://discuss.elastic.co/latest.md?page=1872) [Next page](https://discuss.elastic.co/latest.md?page=1874)