# Latest **URL:** https://discuss.elastic.co/latest.md?page=1876 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1877 --- ## [Logstash to Logstash communication issue with domain based SSL signed certification](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796)
**Author:** [@alexbennet](https://discuss.elastic.co/u/alexbennet)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 3:09pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-issue-with-domain-based-ssl-signed-certification/260796 "2021-01-25T15:09:16Z")
We are implementing application log monitoring on ELK flow from filebeat (logstash output) -\> on-prem logstash server(beats input & lumberjack output) -\> aws logstash server (beats input & elastic output) -\> elasticear… --- ## [Convert seconds into minutes after sum aggregation](https://discuss.elastic.co/t/convert-seconds-into-minutes-after-sum-aggregation/261927)
**Author:** [@albie.morken](https://discuss.elastic.co/u/albie.morken)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 2:42pm UTC](https://discuss.elastic.co/t/convert-seconds-into-minutes-after-sum-aggregation/261927 "2021-01-25T14:42:08Z")
I have an es index which contains the documents to indicate the time spent in seconds by an user in an activity like the one below { "UserName" : "User1", "Activity" : "Interacting", "TimeSpent" : 5… --- ## [Unable to create a Kibana Index pattern](https://discuss.elastic.co/t/unable-to-create-a-kibana-index-pattern/262005)
**Author:** [@Maria\_Elle](https://discuss.elastic.co/u/Maria_Elle)\ **Replies:** 9\ **Last updated:** [January 25, 2021, 2:38pm UTC](https://discuss.elastic.co/t/unable-to-create-a-kibana-index-pattern/262005 "2021-01-25T14:38:50Z")
I am using an Ubuntu machine, and I have just finished downloading all of ELK onto it, I now want to create a Kibana Index pattern with Filebeat but it is not allowing me to do so. How can I fix this issue or find out wh… --- ## [Packetbeat "hanging" on high speed network](https://discuss.elastic.co/t/packetbeat-hanging-on-high-speed-network/262117)
**Author:** [@Antonio\_Augusto\_Sant](https://discuss.elastic.co/u/Antonio_Augusto_Sant)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 1:56pm UTC](https://discuss.elastic.co/t/packetbeat-hanging-on-high-speed-network/262117 "2021-01-25T13:56:50Z")
Gentlemen, I've configured packetbeat on a machine with plenty resources (72GB RAM, 24 cores Intel Xeon X5670), and its listening on two 10gb interfaces, that combined are reaching about 1gbps during peak hours. On this… --- ## [Nodes crashed and kNN questions](https://discuss.elastic.co/t/nodes-crashed-and-knn-questions/262097)
**Author:** [@doc113](https://discuss.elastic.co/u/doc113)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 1:44pm UTC](https://discuss.elastic.co/t/nodes-crashed-and-knn-questions/262097 "2021-01-25T13:44:00Z")
Good time of day! Faced with an inexplicable thing - during the kNN search, the servers fall (in different order and not always (e.g. two success searches, one fail etc). Cluster: master 4cpu, 4gb coordinator 8cpu, 8… --- ## [Mapping defined in templates merges incorrectly ( multi-fields )](https://discuss.elastic.co/t/mapping-defined-in-templates-merges-incorrectly-multi-fields/262109)
**Author:** [@korali](https://discuss.elastic.co/u/korali)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 1:23pm UTC](https://discuss.elastic.co/t/mapping-defined-in-templates-merges-incorrectly-multi-fields/262109 "2021-01-25T13:23:34Z")
Elasticsearch version : 7.10.0 When I create an index that matched two templates(templates -\> index patterns) (A field in a mapping defined in the two templates that have a multi-fields defined) and trying to insert a d… --- ## [Kibana: Kibana's service started but Kibana not launched (Kibana multiple instances configuration)](https://discuss.elastic.co/t/kibana-kibanas-service-started-but-kibana-not-launched-kibana-multiple-instances-configuration/262021)
**Author:** [@ade.syseng](https://discuss.elastic.co/u/ade.syseng)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 1:12pm UTC](https://discuss.elastic.co/t/kibana-kibanas-service-started-but-kibana-not-launched-kibana-multiple-instances-configuration/262021 "2021-01-25T13:12:36Z")
Hi, I'm just learning to implement Elastic Stack on Docker swarm configuration with global mode. My issue is Kibana's service started but Kibana not launched (not working). PS I have followed this guidance. My global … --- ## [How to make custom template out of default Filebeat template](https://discuss.elastic.co/t/how-to-make-custom-template-out-of-default-filebeat-template/262075)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 10:06am UTC](https://discuss.elastic.co/t/how-to-make-custom-template-out-of-default-filebeat-template/262075 "2021-01-25T10:06:15Z")
Dear all, I setup a new template as follow to distinguish filebeat file names. The problem I have is that this new template has no mapping configured ... how can I make this new index template inherit from default fileb… --- ## [Doc\_as\_upsert along with script in Elasticsearch output plugin](https://discuss.elastic.co/t/doc-as-upsert-along-with-script-in-elasticsearch-output-plugin/262106)
**Author:** [@Ahmed\_Sharara](https://discuss.elastic.co/u/Ahmed_Sharara)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 12:55pm UTC](https://discuss.elastic.co/t/doc-as-upsert-along-with-script-in-elasticsearch-output-plugin/262106 "2021-01-25T12:55:57Z")
Hello, I'm using logstash to index data from Kafka to Elasticsearch. There are multiple events with the same id. I'm using doc\_as\_upsert in logstash to update existing documents with the new values based on the \_id. sa… --- ## [Logs mixed - same path on different servers](https://discuss.elastic.co/t/logs-mixed-same-path-on-different-servers/261799)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 12:44pm UTC](https://discuss.elastic.co/t/logs-mixed-same-path-on-different-servers/261799 "2021-01-25T12:44:09Z")
i have 2 services running on apache: mail + drive the logs are getting mixed because they are on the same path (but on different servers). - type: log tags: \['drive'\] fields\_under\_root: true fields: '@metadat… --- ## [Import filebeat ingest pipeline](https://discuss.elastic.co/t/import-filebeat-ingest-pipeline/262104)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 12:36pm UTC](https://discuss.elastic.co/t/import-filebeat-ingest-pipeline/262104 "2021-01-25T12:36:02Z")
Hi, I'm upgrading my cluster from version 7.4.0 to 7.10.2. I noticed that there's grok pattern warning, I think due to old filebeat pipeline : Terraform is used to push pipeline in our cluster but no json versions … --- ## [Data Type changes after Lifecycle creation](https://discuss.elastic.co/t/data-type-changes-after-lifecycle-creation/262103)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 12:33pm UTC](https://discuss.elastic.co/t/data-type-changes-after-lifecycle-creation/262103 "2021-01-25T12:33:22Z")
Good morning, I have syslog with special fields. These logs are being processed by Elastic-Agent (Filebeat). I created some extra fields in the datastream with numeric data type. These fields are being filled by a KV-pr… --- ## [Drill down Dashboard](https://discuss.elastic.co/t/drill-down-dashboard/261782)
**Author:** [@mohamed.farhan](https://discuss.elastic.co/u/mohamed.farhan)\ **Replies:** 4\ **Last updated:** [January 25, 2021, 12:29pm UTC](https://discuss.elastic.co/t/drill-down-dashboard/261782 "2021-01-25T12:29:50Z")
Can we drill-down the data-table dashboard? I have tried with a pie chart, works fine. The thing is, i would like to know can we drill-down in data-table? --- ## [Strange index size](https://discuss.elastic.co/t/strange-index-size/261703)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 14\ **Last updated:** [January 25, 2021, 12:18pm UTC](https://discuss.elastic.co/t/strange-index-size/261703 "2021-01-25T12:18:31Z")
Hi, I have 2 clusters, running, 7.10 on different locations. They index the same kind of logging so are set up identically. I conduct searches via kibana on local as well as remote indices in those 2 clusters. Now here… --- ## [Logstash Upgrade](https://discuss.elastic.co/t/logstash-upgrade/262100)
**Author:** [@Rithesh\_Subramanian](https://discuss.elastic.co/u/Rithesh_Subramanian)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 11:56am UTC](https://discuss.elastic.co/t/logstash-upgrade/262100 "2021-01-25T11:56:44Z")
Hi, I had used logstash-6.2.2 and now i hadupgraded to logstash-7.10.1. I am using logstash package for linux. I am using filebeat as a log shipper. Both the filebeat version and logstash version are same. But after up… --- ## [Sophos log configuration](https://discuss.elastic.co/t/sophos-log-configuration/262099)
**Author:** [@santosh](https://discuss.elastic.co/u/santosh)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 11:52am UTC](https://discuss.elastic.co/t/sophos-log-configuration/262099 "2021-01-25T11:52:48Z")
I have been trying to pull the logs from Sophos device with the following configuration but looks like something is wrong in the configuration as I can't see any log messages in the Kibana dashboard. Any pointers? I have… --- ## [SSL certificate reload](https://discuss.elastic.co/t/ssl-certificate-reload/262090)
**Author:** [@raivis.krumins](https://discuss.elastic.co/u/raivis.krumins)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 11:34am UTC](https://discuss.elastic.co/t/ssl-certificate-reload/262090 "2021-01-25T11:34:22Z")
I want to use hashicorp vault to manage logstash ssl certs on kubernetes. I am using logstash helm chart --version 7.10.1 These pod annotations work as expected: podAnnotations: vault.hashicorp.com/agent-inject: "tr… --- ## [OIDC with Elasticsearch](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946)
**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946 "2021-01-25T11:32:20Z")
It seems every bit of documentation that I read has conflicting advice, and I'm stumped on this one. First of, I've never worked with OIDC or SAML before so this is my first exploration. I'm trying to configure SSO so i… --- ## [javax.net.ssl.SSLHandshakeException](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 11:10am UTC](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065 "2021-01-25T11:10:38Z")
Hi, Recently I'm receiving this warning(caught exception while handling client http traffic) in my elasticsearch logs. The cluster health is green and there are no unassigned shards. Here are my Logs. --- ## [Folder shared for elastcisearch logs](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634)
**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\ **Replies:** 5\ **Last updated:** [January 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634 "2021-01-25T10:34:13Z")
Hi! I want to store elasticsearch, kibana and logstash logs in a shared folder. Is that possible? I need to have a certain structure for the folder path? I am using 6.5 ELK version. Thanks for your help! --- ## [Traceback errors in Lab 8.1 -- Data Analysis with Kibana](https://discuss.elastic.co/t/traceback-errors-in-lab-8-1-data-analysis-with-kibana/261835)
**Author:** [@clark.r.lindstrom.ct](https://discuss.elastic.co/u/clark.r.lindstrom.ct)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 10:21am UTC](https://discuss.elastic.co/t/traceback-errors-in-lab-8-1-data-analysis-with-kibana/261835 "2021-01-25T10:21:32Z")
I'm getting Traceback errors when executing the instructions on 8.1 -- Dataset Discovery. I run the first python script under 1) Load the data and the first line of the output is: "ValueError Traceb… --- ## [Elasticsearch Query with dynamic filters](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072)
**Author:** [@shoaib\_akram](https://discuss.elastic.co/u/shoaib_akram)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072 "2021-01-25T09:20:41Z")
hi I need your help to build a query to use multiple dynamic filter. like if i provide a filter "a" on Field "A" it search on the basis of "a" else do nothing if i provide a filter "b" on Field "B" it search on the ba… --- ## [Restore of elasticsearch data fails with CorruptIndexException\[checksum failed (hardware problem?)](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 5\ **Last updated:** [January 25, 2021, 9:00am UTC](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619 "2021-01-25T09:00:41Z")
Hi Team, We trying to restore a backup that we had taken a couple of days ago on a freshly installed elasticsearch cluster. The steps we followed are mentioned below: Installed an elasticsearch chart and pushed some d… --- ## [Different index name based on metricset and backend logic of metricbeat](https://discuss.elastic.co/t/different-index-name-based-on-metricset-and-backend-logic-of-metricbeat/262070)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 8:43am UTC](https://discuss.elastic.co/t/different-index-name-based-on-metricset-and-backend-logic-of-metricbeat/262070 "2021-01-25T08:43:49Z")
Hi experts, My design is metricbeat -\> logstash -\> elasticsearch -\> kibana Would like your adive, should i have different index for different metric set? For isntance, performance-cpu, performance-memory,... is htis … --- ## [Fields description](https://discuss.elastic.co/t/fields-description/262038)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 8:43am UTC](https://discuss.elastic.co/t/fields-description/262038 "2021-01-25T08:43:14Z")
Hi, I'm working to import tons of basketball's stats so I was thinking if there is a way to add a description to every field in Kibana's dashboards or visualizations. For instance, in the Discover tab, I would find it … --- ## [Aggregating entities from transaction documents using transforms](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828)
**Author:** [@kbirk](https://discuss.elastic.co/u/kbirk)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 8:37am UTC](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828 "2021-01-25T08:37:00Z")
Hello, We have an application that models transactional data. Each document describes a single transaction between two entities. Our current import process is done in two phases. First we ingest all the transactions in… --- ## [Logstash No such process](https://discuss.elastic.co/t/logstash-no-such-process/262068)
**Author:** [@111360](https://discuss.elastic.co/u/111360)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 8:35am UTC](https://discuss.elastic.co/t/logstash-no-such-process/262068 "2021-01-25T08:35:26Z")
Всем привет! Подскажите в logstash падает ошибка Closed - other error C:/HTTP/Test4/log/2020-12-09/all.21-00.log: (No such process - C:/Test4/log/2020-12-09/all.21-00.log, \["org/jruby/RubyFile.java:990:in stat'", "C:/s… --- ## [Reindex because new mapping, how keep old name indice, rename?](https://discuss.elastic.co/t/reindex-because-new-mapping-how-keep-old-name-indice-rename/262002)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 8:34am UTC](https://discuss.elastic.co/t/reindex-because-new-mapping-how-keep-old-name-indice-rename/262002 "2021-01-25T08:34:47Z")
Bonjour, Je souhaite faire évoluer mon mapping pour retirer les données inutiles en \_source et ne mettre que les champs utiles dans elasticsearch. Normalement Il sera pris en compte a la prochaine création de l'index. … --- ## [Index randomly fetches wrong results and wrong numeric type](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 8:16am UTC](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893 "2021-01-25T08:16:34Z")
Hi, I have a situation I have not seen before... In my test index I have just 25 records. I am noticing the following inconsistent problems upon a simple search request to the alias (which is pointing to this single in… --- ## [Can not to delete child document](https://discuss.elastic.co/t/can-not-to-delete-child-document/262064)
**Author:** [@Mamo](https://discuss.elastic.co/u/Mamo)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 8:00am UTC](https://discuss.elastic.co/t/can-not-to-delete-child-document/262064 "2021-01-25T08:00:32Z")
logstash version: 6.4.2 elasticsearch version: 6.4.2 output { elasticsearch { host =\> \[...\] action =\> "delete" index =\> "test" document\_id =\> "%{childId}" routing =\> "%{parentId}" } } or outpu… [Previous page](https://discuss.elastic.co/latest.md?page=1875) [Next page](https://discuss.elastic.co/latest.md?page=1877)