# Latest **URL:** https://discuss.elastic.co/latest.md?page=1903 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1904 --- ## [Filebeat output to elasticsearch (open kerberos), publisher\_pipeline\_output WWW-Authenticate Negotiate 401 No processing](https://discuss.elastic.co/t/filebeat-output-to-elasticsearch-open-kerberos-publisher-pipeline-output-www-authenticate-negotiate-401-no-processing/260539)
**Author:** [@jing](https://discuss.elastic.co/u/jing)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 8:21am UTC](https://discuss.elastic.co/t/filebeat-output-to-elasticsearch-open-kerberos-publisher-pipeline-output-www-authenticate-negotiate-401-no-processing/260539 "2021-01-09T08:21:16Z")
Connect to elasticsearch(open kerberos )，The authentication fails, when elasticsearch responds with 401(Negotiate), nothing happens,Normal logic should go to kdc to request processing Why doesn't filebeat request kerber… --- ## [5.6 \> 7.9 upgrade, auto\_generate\_phrase\_query alternatives?](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164)
**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 7:26am UTC](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164 "2021-01-09T07:26:16Z")
Hello, I'm upgrading my codebase's ElasticSearch from 5.6 to 7.x due to some features I'd like to explore. I'm currently using GoLang & "github.com/olivere/elastic/v5" specifically. However, auto\_generate\_phrase\_query… --- ## [Performance impacts of track\_scores on sorted queries](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578)
**Author:** [@AlanN](https://discuss.elastic.co/u/AlanN)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578 "2021-01-09T06:57:12Z")
Hi, I'm attempting to wrap my head around what the performance hit is on queries with and without the track\_scores flag flipped in the sort during queries in our ElasticSearch 6.8 cluster. Unfortunately it's pretty bus… --- ## ["ecctl user list" で "The requested resource could not be found." エラーが発生](https://discuss.elastic.co/t/ecctl-user-list-the-requested-resource-could-not-be-found/260315)
**Author:** [@miz21358](https://discuss.elastic.co/u/miz21358)\ **Replies:** 5\ **Last updated:** [January 9, 2021, 5:53am UTC](https://discuss.elastic.co/t/ecctl-user-list-the-requested-resource-could-not-be-found/260315 "2021-01-09T05:53:05Z")
Elastic Cloud 内のKibana閲覧ユーザーとそのロールをecctlコマンドでコントロールしたいと考えております。 ecctlコマンド自体のインストールは成功して、"ecctl deployment list" コマンドは動いたのですが、"ecctl user list"を実行したところ、エラーが発生しました。 xxxxx@xxxx:~/.ecctl$ ecctl user list --verbose --ve… --- ## [Issue on Letsencrypt SSL kibana](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 11:02pm UTC](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005 "2021-01-08T23:02:17Z")
Hi currently trying to install SSL letsencrypt on Wazuh, i got the certificates though DNS cloudflare, but i changed the part in kibana but it wont seem to start root@wazuh:~# cat /etc/kibana/kibana.yml server.host: 0.… --- ## [Inconsistent elasticsearch input vs output plugin settings](https://discuss.elastic.co/t/inconsistent-elasticsearch-input-vs-output-plugin-settings/260586)
**Author:** [@GuillaumeN](https://discuss.elastic.co/u/GuillaumeN)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 10:58pm UTC](https://discuss.elastic.co/t/inconsistent-elasticsearch-input-vs-output-plugin-settings/260586 "2021-01-08T22:58:49Z")
Hi, The Logstash Elasticsearch output supports the "ssl\_certificate\_verification" parameter whereas the input one doesn't. This makes it more difficult when consuming data from an Elasticsearch cluster using self-signe… --- ## [Embeding dashboards as iframes within a Kibana Application](https://discuss.elastic.co/t/embeding-dashboards-as-iframes-within-a-kibana-application/259608)
**Author:** [@WhiskeyTF](https://discuss.elastic.co/u/WhiskeyTF)\ **Replies:** 8\ **Last updated:** [January 8, 2021, 10:32pm UTC](https://discuss.elastic.co/t/embeding-dashboards-as-iframes-within-a-kibana-application/259608 "2021-01-08T22:32:12Z")
Hello, I am currently working to create a plugin that can be used as a kind of configurable works space for users where they can quickly store and view multiple dashboards together. when I add a Kibana dashboard to the p… --- ## [Plugin startup fails in V7.9.3](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-3/260583)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 10:18pm UTC](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-3/260583 "2021-01-08T22:18:45Z")
My plugin is working in 7.6.0. I am now using Kibana 7.9.3 and the plugin fails yarn start with FATAL TypeError: xpackMainPlugin.registerFeature is not a function The plugin was created with the script 'node scripts/g… --- ## [Deleting individual indexes from a datastream](https://discuss.elastic.co/t/deleting-individual-indexes-from-a-datastream/259924)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 10:04pm UTC](https://discuss.elastic.co/t/deleting-individual-indexes-from-a-datastream/259924 "2021-01-08T22:04:39Z")
I have a datastream which I set up recently and as a check I set to rollover every day so I could see that it was woking as expected. That was just before Christmas and I saw it roll over once... I came back today and … --- ## [How to Look at Kibana Logs in Elastic Cloud?](https://discuss.elastic.co/t/how-to-look-at-kibana-logs-in-elastic-cloud/260564)
**Author:** [@Chris\_Carter1](https://discuss.elastic.co/u/Chris_Carter1)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 10:02pm UTC](https://discuss.elastic.co/t/how-to-look-at-kibana-logs-in-elastic-cloud/260564 "2021-01-08T22:02:53Z")
We are wanting to audit and see which dashboards are used most frequently, I know there is not a direct feature to view how often dashboards are used but If I could look at the Logs in Kibana I could parse the logs and g… --- ## [Help with installing logstash - no such file to load --logstash/build](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572)
**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 9:37pm UTC](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572 "2021-01-08T21:37:32Z")
When in the logstash folder I have tried to install logstash with the command. logstash -f logstash.conf and get the error no such file to load --logstash/build. I have supplied a screenshot. If anyone could help that wo… --- ## [Logstash 7.9 not writing to output file](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260)
**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 8:25pm UTC](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260 "2021-01-08T20:25:43Z")
I have logstash 7.9 running in centos hosts. I'm facing a strange behavior. Logstash is not writing to a file in the given path. I want to make sure logstash is working or not so I provided a path in output section but … --- ## [Having Issue Starting Winlogbeat As A Windows Service](https://discuss.elastic.co/t/having-issue-starting-winlogbeat-as-a-windows-service/260574)
**Author:** [@qcjacobo](https://discuss.elastic.co/u/qcjacobo)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 8:22pm UTC](https://discuss.elastic.co/t/having-issue-starting-winlogbeat-as-a-windows-service/260574 "2021-01-08T20:22:18Z")
I am having issues getting winlogbeat to start as a Windows service on my Windows 10 (1909) system. As you can see below, I am not getting any obvious errors when trying to install and start the Windows service. Just t… --- ## [Error when configure email account elasticseach.yml - Elastic Cloud](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560)
**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 7:49pm UTC](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560 "2021-01-08T19:49:50Z")
Hello guys, We have the problem when configuring SMTP more in ELastic Cloud SaaS Error when configure email account elasticseach.ymlfor sending alerts. When saving the configuration we get the following error: Your cha… --- ## [Create kibana visualization between 2 fields](https://discuss.elastic.co/t/create-kibana-visualization-between-2-fields/260509)
**Author:** [@vishnum](https://discuss.elastic.co/u/vishnum)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 7:03pm UTC](https://discuss.elastic.co/t/create-kibana-visualization-between-2-fields/260509 "2021-01-08T19:03:01Z")
Hi, I am new to elasticsearch and kibana. I am trying to visualize one field against another field in kibana. For example, X-axis contains the jenkins build number (field 1) and Y-axis contains number of tests ran on t… --- ## [Coordinating Node](https://discuss.elastic.co/t/coordinating-node/260570)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 6:44pm UTC](https://discuss.elastic.co/t/coordinating-node/260570 "2021-01-08T18:44:04Z")
Via the elasticsearch engineer 1 class regarding the Coordinating node it states: • Configure your client to round-robin between multiple nodes ‒ avoid having single points of failure/creating hotspots ‒ do NOT send r… --- ## [ILM stuck at check-allocation on transition to Cold Node](https://discuss.elastic.co/t/ilm-stuck-at-check-allocation-on-transition-to-cold-node/260490)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 6:06pm UTC](https://discuss.elastic.co/t/ilm-stuck-at-check-allocation-on-transition-to-cold-node/260490 "2021-01-08T18:06:44Z")
Hi folks, We are having an issue whereour index life cycle policy is not completing the check-allocation phase to the cold nodes. It doesn't seem to be causing any errors just waiting and never completing. Interestingly… --- ## [Functionbeat package command creates zip archive with credentials visible in plaintext](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569)
**Author:** [@ashort](https://discuss.elastic.co/u/ashort)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 5:30pm UTC](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569 "2021-01-08T17:30:50Z")
Hi, When I use the Functionbeat manager to package up Functionbeat and the Yaml file into a zip archive for use with AWS Lambda the zip archive is generated with the password for the Elasticsearch user in plaintext in t… --- ## [Fatal Error in Starting Kibana for Adding New Plugin](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549)
**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 5:13pm UTC](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549 "2021-01-08T17:13:39Z")
I created a plugin with plugin generator script in scripts/ folder (I used script in 7.10.1 with git checkout v7.10.1) and then i just copied it in kibana/plugins folder to check if it works on my kibana which it is vers… --- ## [How to use the last data in the Visualize?](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404)
**Author:** [@111395](https://discuss.elastic.co/u/111395)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404 "2021-01-08T16:29:17Z")
Kibana is usually obtained according to the time period。 But, I need the last data visualization。 You can understand it as looking for data by the number of times，such as last 1, last 5 kibana version:7.4.2 Thanks --- ## [Rabbitmq output plugin : dynamic values on headers not working](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475)
**Author:** [@MarineW29](https://discuss.elastic.co/u/MarineW29)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 4:25pm UTC](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475 "2021-01-08T16:25:16Z")
Hello, I have a pipeline with elasticsearch input and rabbitmq output. I would like to set dynamic values to headers in properties of the message published in RabbitMQ, but the field are not replaces with their values. … --- ## [Needed to offset the timeseries for Metricbeat dashboard visualizartions to work](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 3:54pm UTC](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541 "2021-01-08T15:54:14Z")
Hi I just need some help to try to understand why exactly my workaround worked/as necessary. We've setup some metricbeats agents and Inoticed that every visualization of the TSVB type was not working: gauges, tables, .… --- ## [Kibana Report limit lines in PDF](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387)
**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 3:31pm UTC](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387 "2021-01-08T15:31:28Z")
Hello guys! I have the following problem: I created a data table grouping by IP and the total number of lines exceeds 10K When generating the report in PDF it creates only with 1 page limiting in 50 lines. Is there a… --- ## [Question on Elastic Search Filtering](https://discuss.elastic.co/t/question-on-elastic-search-filtering/260504)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 3:17pm UTC](https://discuss.elastic.co/t/question-on-elastic-search-filtering/260504 "2021-01-08T15:17:04Z")
Hi, I have duplicates in my system but i intend to do some form of filtering on the logstash side to prevent any future duplicates from occurring (due to server restart incorrectly). For reference, my current duplicate… --- ## [Logstash not parsing metadata from logfile](https://discuss.elastic.co/t/logstash-not-parsing-metadata-from-logfile/260496)
**Author:** [@Rahul3](https://discuss.elastic.co/u/Rahul3)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 3:13pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-metadata-from-logfile/260496 "2021-01-08T15:13:44Z")
Hi, I am very new to ELK Stack, I have a requirement to parse specific metadata from a log entry, Here is a sample log entry, \[ERROR\] \[2021-01-04 14:56:41,566\] \[http-nio-8080-exec-4\] \[com.blocks.bear.server.exception.Ex… --- ## [Elastic APM .Net : How to override appsettings.json](https://discuss.elastic.co/t/elastic-apm-net-how-to-override-appsettings-json/260558)
**Author:** [@Youssef\_CHTOUROU](https://discuss.elastic.co/u/Youssef_CHTOUROU)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elastic-apm-net-how-to-override-appsettings-json/260558 "2021-01-08T14:44:03Z")
Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.1 APM Agent language and version: .net Agent (Latest) I've a asp .net core application with multiple environment (Staging, Integration, Q… --- ## [Addition of response time into Apache access fileset](https://discuss.elastic.co/t/addition-of-response-time-into-apache-access-fileset/260548)
**Author:** [@jberanek](https://discuss.elastic.co/u/jberanek)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 2:01pm UTC](https://discuss.elastic.co/t/addition-of-response-time-into-apache-access-fileset/260548 "2021-01-08T14:01:54Z")
So, I'm not sure how specific this is to our environment, but our Apache logs have response time added onto the end of one of filebeat's 'apache' module's standard formats, like: 2s 2123456 micro-seconds So, I modified… --- ## [/app/kibana redirecting (302) to /app/dashboard\_mode Kibana 7.10.1](https://discuss.elastic.co/t/app-kibana-redirecting-302-to-app-dashboard-mode-kibana-7-10-1/260540)
**Author:** [@Anmol\_Deep](https://discuss.elastic.co/u/Anmol_Deep)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 1:48pm UTC](https://discuss.elastic.co/t/app-kibana-redirecting-302-to-app-dashboard-mode-kibana-7-10-1/260540 "2021-01-08T13:48:07Z")
We embed Kibana within an Iframe in our application and forward the requests to Kibana server with basic authentications scheme. This used to work in version 6.8.1 but when i upgrade to 7.10.1 the request to /app/kiban… --- ## [\[ threat intelligence \]: Display the number of alerts generated by a specific rule](https://discuss.elastic.co/t/threat-intelligence-display-the-number-of-alerts-generated-by-a-specific-rule/260528)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 1:10pm UTC](https://discuss.elastic.co/t/threat-intelligence-display-the-number-of-alerts-generated-by-a-specific-rule/260528 "2021-01-08T13:10:45Z")
Hello, I would like to display in my canvas, the number of alertes generated the last 24 hours by a specific rule (Costume rule That I have created) Could you tell me please how can I do that ? Best regards --- ## [Filebeat disk queue messing up encoding](https://discuss.elastic.co/t/filebeat-disk-queue-messing-up-encoding/260546)
**Author:** [@Valker](https://discuss.elastic.co/u/Valker)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 1:00pm UTC](https://discuss.elastic.co/t/filebeat-disk-queue-messing-up-encoding/260546 "2021-01-08T13:00:25Z")
Hello, I believe I have found a misbehavior in the disk queue mechanism in the filebeat. When I’m adding a UTF-8 encoded json with a polish characters, on the output I am getting messed up value. Example: ^^^^^^^^^^^^… [Previous page](https://discuss.elastic.co/latest.md?page=1902) [Next page](https://discuss.elastic.co/latest.md?page=1904)