# Latest **URL:** https://discuss.elastic.co/latest.md?page=1921 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1922 --- ## [Logstash filter plugin needs certificate with dns name](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281)
**Author:** [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Replies:** 13\ **Last updated:** [December 24, 2020, 10:48am UTC](https://discuss.elastic.co/t/logstash-filter-plugin-needs-certificate-with-dns-name/259281 "2020-12-24T10:48:05Z")
Hi i tried to configure security in elkstack and wanted a common certificate in all nodes environments but logstash fillter plugin needs dns name to speicified else wont work, any other solution? --- ## [Enrich documents with another json file](https://discuss.elastic.co/t/enrich-documents-with-another-json-file/259004)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 1\ **Last updated:** [December 24, 2020, 10:47am UTC](https://discuss.elastic.co/t/enrich-documents-with-another-json-file/259004 "2020-12-24T10:47:57Z")
Hello, we have a server with logfiles in directories: /xxx/log1/ - test-1.log - test-2.log - enrich-log1.json /xxx/log2/ - test-1.log - test-2.log - enrich-log2.json and so on.... the json file "enrich-log\*.json" ha… --- ## [Winlogbeat unable to keep up with AD security logs](https://discuss.elastic.co/t/winlogbeat-unable-to-keep-up-with-ad-security-logs/259582)
**Author:** [@zhumphries](https://discuss.elastic.co/u/zhumphries)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 10:39am UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-keep-up-with-ad-security-logs/259582 "2020-12-24T10:39:49Z")
Hello. We have recently started using winlogbeat to collect security logs from the Domain Controllers but winlogbeat is struggling to keep up with the required ingest rate. The server in question is generating approx 30… --- ## [Strange memory leak ElasticSearch](https://discuss.elastic.co/t/strange-memory-leak-elasticsearch/258814)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 20\ **Last updated:** [December 24, 2020, 10:33am UTC](https://discuss.elastic.co/t/strange-memory-leak-elasticsearch/258814 "2020-12-24T10:33:32Z")
Hi, we have a cluster of ES. Our Heap is 31 Gb on each node. Total RAM 128 Gb on each node. And our RAM fills up over time and starts to run out, it that time we get faults of cluster. We see that "cached" constantly … --- ## [Creating watcher script if particular value ina field occurs more than five times in five minutes interval of time](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259340)
**Author:** [@lokeshbabloo](https://discuss.elastic.co/u/lokeshbabloo)\ **Replies:** 8\ **Last updated:** [December 24, 2020, 10:06am UTC](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259340 "2020-12-24T10:06:24Z")
Hi can anyone help how can we create a watcher script for the below requirement I having a field called "log\_message" contaning the below message Failed to load TermRecord for TermID= here the terminal id can be any … --- ## [Intermittent search querying issues](https://discuss.elastic.co/t/intermittent-search-querying-issues/259471)
**Author:** [@Sajjan\_Kumar\_Jain](https://discuss.elastic.co/u/Sajjan_Kumar_Jain)\ **Replies:** 8\ **Last updated:** [December 24, 2020, 9:25am UTC](https://discuss.elastic.co/t/intermittent-search-querying-issues/259471 "2020-12-24T09:25:06Z")
Hi, We are using elastic search in our backend hosted on AWS. And our backend is in Java. We have seen a pattern where queries start failing for a brief period of time with the following error: cannot write time value … --- ## [Detection Alerts - Want To Only See that Alert](https://discuss.elastic.co/t/detection-alerts-want-to-only-see-that-alert/259135)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 7\ **Last updated:** [December 24, 2020, 9:17am UTC](https://discuss.elastic.co/t/detection-alerts-want-to-only-see-that-alert/259135 "2020-12-24T09:17:42Z")
When clicking on a detection alert it shows the list with a list of other detections during a timeframe is there a way we can make it so it only shows that specific alert and not a list of others. Like make that timefr… --- ## [Error while using ssl with basic authorization](https://discuss.elastic.co/t/error-while-using-ssl-with-basic-authorization/258839)
**Author:** [@loker](https://discuss.elastic.co/u/loker)\ **Replies:** 4\ **Last updated:** [December 24, 2020, 9:19am UTC](https://discuss.elastic.co/t/error-while-using-ssl-with-basic-authorization/258839 "2020-12-24T09:19:58Z")
Hello, Here is my config: - module: couchdb metricsets: \["server"\] period: 10s hosts: \["https://xxx.xxxx.xxx.xxx:6984/\_node/\_local/\_stats"\] ssl.verification\_mode: "none" username: xxxxx password: xxxxx I w… --- ## [Filebeat Fortinet module can't run](https://discuss.elastic.co/t/filebeat-fortinet-module-cant-run/258541)
**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\ **Replies:** 5\ **Last updated:** [December 24, 2020, 9:10am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-cant-run/258541 "2020-12-24T09:10:34Z")
Hi, I'm trying to ship Fortigate300E Log to my Elasticstack with topo: Fortigate syslog port 514 -\> Filebeat (fortinet module) -\> Elasticsearch -\> Kibana. I have 2 question: First, is it possible? And when I run fileb… --- ## [Filebeat O365 Module Through proxy](https://discuss.elastic.co/t/filebeat-o365-module-through-proxy/259570)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 9:10am UTC](https://discuss.elastic.co/t/filebeat-o365-module-through-proxy/259570 "2020-12-24T09:10:20Z")
Hi all I have a problems with using the o365 module in filebeat. In our network in order to reach internet we need to go through a proxy server, and it is because of that the filebeat module cannot connect to the o365 … --- ## [Systemd version conflict / bug on journalbeat](https://discuss.elastic.co/t/systemd-version-conflict-bug-on-journalbeat/259569)
**Author:** [@DenizParlak](https://discuss.elastic.co/u/DenizParlak)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 9:06am UTC](https://discuss.elastic.co/t/systemd-version-conflict-bug-on-journalbeat/259569 "2020-12-24T09:06:16Z")
Hi all, Our journalbeat deployed on the Kubernetes cluster and stopped shipping logs to the elasticsearch via logstash suddenly. We got this error message first: /var/log/journal/ec28d502b342fad1a4d44d3a101845cf/system… --- ## [Accessing Elasticsearch index from flutter mobile app](https://discuss.elastic.co/t/accessing-elasticsearch-index-from-flutter-mobile-app/259567)
**Author:** [@Aimn\_Blbol](https://discuss.elastic.co/u/Aimn_Blbol)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 8:46am UTC](https://discuss.elastic.co/t/accessing-elasticsearch-index-from-flutter-mobile-app/259567 "2020-12-24T08:46:57Z")
I have created users Elasticsearch index in the Google Cloud Platform to integrate firestore cloud functions with Elasticsearch so that when a user is created / updated / deleted, the change will be reflected in the Elas… --- ## [Logstash takes all the collections from mongodb that has the collection string](https://discuss.elastic.co/t/logstash-takes-all-the-collections-from-mongodb-that-has-the-collection-string/259564)
**Author:** [@Siddhanta\_Das](https://discuss.elastic.co/u/Siddhanta_Das)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 8:25am UTC](https://discuss.elastic.co/t/logstash-takes-all-the-collections-from-mongodb-that-has-the-collection-string/259564 "2020-12-24T08:25:20Z")
I have a issue with the collection string in config file input. I have two collection with "properties" and "favourite\_properties". When I run the mongo conf file it retrive both the collection but I wan only one input{… --- ## [Dec 24th, 2020 \[EN\] Create stunning Lens visualizations in Kibana 7.10](https://discuss.elastic.co/t/dec-24th-2020-en-create-stunning-lens-visualizations-in-kibana-7-10/255099)
**Author:** [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2020-en-create-stunning-lens-visualizations-in-kibana-7-10/255099 "2020-12-24T08:00:17Z")
\*\*New kid on the block, Kibana Lens\*\* Millions of people already use Kibana for a wide range of purposes, but it was still a challenge for the average business user to quickly learn. Visualization… --- ## [Pass multiple values(500 more ) in kibana dashboard](https://discuss.elastic.co/t/pass-multiple-values-500-more-in-kibana-dashboard/259463)
**Author:** [@jeff\_arthur](https://discuss.elastic.co/u/jeff_arthur)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 7:39am UTC](https://discuss.elastic.co/t/pass-multiple-values-500-more-in-kibana-dashboard/259463 "2020-12-24T07:39:18Z")
Hi, How can i pass multiple values in kibana dashboard - 'add filter' - 'is one of' ? I have a txt file with 500 values ​​in it. --- ## [How to print logs in JSON format for enterprise search](https://discuss.elastic.co/t/how-to-print-logs-in-json-format-for-enterprise-search/259455)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 7:13am UTC](https://discuss.elastic.co/t/how-to-print-logs-in-json-format-for-enterprise-search/259455 "2020-12-24T07:13:20Z")
HI, I am using the following docker-compose.yml , can some one help on how to modify this to get the enterprise search logs in JSON format --- version: '3' services: elasticsearch: image: docker.elastic.co/elast… --- ## [Remove outdated java present in Elasticsearch installation](https://discuss.elastic.co/t/remove-outdated-java-present-in-elasticsearch-installation/259553)
**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 6:47am UTC](https://discuss.elastic.co/t/remove-outdated-java-present-in-elasticsearch-installation/259553 "2020-12-24T06:47:45Z")
Hi, We are running Elasticsearch 7.9.1 in our environment. We have been reported that there is outdated java version installed at path /usr/share/elasticsearch/jdk. Though we are not using it to run Elasticsearch. But t… --- ## [Delete my account](https://discuss.elastic.co/t/delete-my-account/259524)
**Author:** [@anon12945697](https://discuss.elastic.co/u/anon12945697)\ **Replies:** 1\ **Last updated:** [December 24, 2020, 5:27am UTC](https://discuss.elastic.co/t/delete-my-account/259524 "2020-12-24T05:27:30Z")
Hello dear Elastic team, Can you delete my account please? I don't need this account any more. Thank you. --- ## [Kibana stops working once winlogbeat starts](https://discuss.elastic.co/t/kibana-stops-working-once-winlogbeat-starts/259500)
**Author:** [@SSP](https://discuss.elastic.co/u/SSP)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 5:25am UTC](https://discuss.elastic.co/t/kibana-stops-working-once-winlogbeat-starts/259500 "2020-12-24T05:25:45Z")
Hello, I'm new to the whole ELK stack, followed the setup instructions/guidance and installed on CentOS 8. Java, NGINX, Elasticsearch, Kibana and logstash installed successfully, I'm able to reach the kibana web interf… --- ## [Merging indices from old server](https://discuss.elastic.co/t/merging-indices-from-old-server/259420)
**Author:** [@alfredoCo](https://discuss.elastic.co/u/alfredoCo)\ **Replies:** 3\ **Last updated:** [December 24, 2020, 5:24am UTC](https://discuss.elastic.co/t/merging-indices-from-old-server/259420 "2020-12-24T05:24:21Z")
Hello, I need to merge the data of an index from the old server into the new one. The data has been accumulating over a month now in the new server. should I copy the data via a script? or there is a build in functiona… --- ## [Elasticsearch 7.8.1， shards allocation failed](https://discuss.elastic.co/t/elasticsearch-7-8-1-shards-allocation-failed/259352)
**Author:** [@wzhanw](https://discuss.elastic.co/u/wzhanw)\ **Replies:** 5\ **Last updated:** [December 24, 2020, 5:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-shards-allocation-failed/259352 "2020-12-24T05:23:34Z")
Hi all, I'm running the ealsticsearch 7.8.1 single node cluster on my server, I got a critical error when the logstash insert document to the es. I tried to clean up the data directory and restarted the es, the error … --- ## [java.io.StreamCorruptedException: invalid internal transport message format, got (16,3,3,0)](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-16-3-3-0/257679)
**Author:** [@prashanth\_sri](https://discuss.elastic.co/u/prashanth_sri)\ **Replies:** 16\ **Last updated:** [December 24, 2020, 3:55am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-16-3-3-0/257679 "2020-12-24T03:55:13Z")
hi , i am updating my xpack security in all my cluster nodes , by using this yml.file, action.auto\_create\_index: .monitoring\*,.watches,.triggered\_watches,.watcher-history\*,.ml\* xpack.security.audit.enabled: true … --- ## [How do we include the stack trace of the error on the JavaScript client?](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436)
**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 2:34am UTC](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436 "2020-12-24T02:34:42Z")
How do we include the stack trace of the error on the JavaScript client? The API says error\_trace is an accepted common parameter, but I couldn't get the complete stack trace of the error\* I was troubleshooting : var … --- ## [Multiple auditbeat file\_integrity module configurations](https://discuss.elastic.co/t/multiple-auditbeat-file-integrity-module-configurations/259540)
**Author:** [@p\_ansell](https://discuss.elastic.co/u/p_ansell)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 1:14am UTC](https://discuss.elastic.co/t/multiple-auditbeat-file-integrity-module-configurations/259540 "2020-12-24T01:14:02Z")
I have had issues in the past with the flexibility of the auditbeat file\_integrity module configuration. On one hand I want to monitor most changes under /etc and similar directories, but on another hand I also want to m… --- ## [Elasticsearch and Logstash logs retention to 7 days](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 11:42pm UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464 "2020-12-23T23:42:12Z")
Hi guys, Is there any way to reduce the Elasticsearch and logstash app logs count to 7 days using log4j.properties? Currently as I can observe, the log rotation in /var/log/elasticsearch and /var/log/logstash has no lim… --- ## [How to Search elasticsearch Indexes name filter on Index Creation date](https://discuss.elastic.co/t/how-to-search-elasticsearch-indexes-name-filter-on-index-creation-date/259479)
**Author:** [@yael](https://discuss.elastic.co/u/yael)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 11:24pm UTC](https://discuss.elastic.co/t/how-to-search-elasticsearch-indexes-name-filter-on-index-creation-date/259479 "2020-12-23T23:24:21Z")
How can I filter the result I get from the query: GET /\_cat/indices?h=h,s,i,id,p,r,dc,dd,ss,creation.date.string to all indexes from specific creation.date. Thanks Yael --- ## [Canvas Free Filter](https://discuss.elastic.co/t/canvas-free-filter/259533)
**Author:** [@Caio\_Morgado](https://discuss.elastic.co/u/Caio_Morgado)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 10:58pm UTC](https://discuss.elastic.co/t/canvas-free-filter/259533 "2020-12-23T22:58:47Z")
I would like to know if Canvas has any manual filter option, where I can freely type what I want to filter instead of being a combo with the options. I ask this because there is a field in my index that has many varieti… --- ## [Vega : Area chart - strange datapoints](https://discuss.elastic.co/t/vega-area-chart-strange-datapoints/259465)
**Author:** [@Ganymede](https://discuss.elastic.co/u/Ganymede)\ **Replies:** 2\ **Last updated:** [December 23, 2020, 8:53pm UTC](https://discuss.elastic.co/t/vega-area-chart-strange-datapoints/259465 "2020-12-23T20:53:13Z")
Does somebody know why my data points are twisted at some positions? (fig.1) I use the same data-set in Vega-Lite and it works there. But in Vega I'm missing someting. Maybe someone can help me out in this regard beca… --- ## [How to match every element in the array](https://discuss.elastic.co/t/how-to-match-every-element-in-the-array/259536)
**Author:** [@yaddes](https://discuss.elastic.co/u/yaddes)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-to-match-every-element-in-the-array/259536 "2020-12-23T22:48:22Z")
I am trying to perform an elastic-search query that will return documents where "every" element of the nested collection has a match, not just one. For example, I have a Driver object, with the List of cars, and each ca… --- ## [Why are the arm64 builds hidden?](https://discuss.elastic.co/t/why-are-the-arm64-builds-hidden/258860)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 10:43pm UTC](https://discuss.elastic.co/t/why-are-the-arm64-builds-hidden/258860 "2020-12-23T22:43:38Z")
A few weeks ago ARM64 builds for most beats were available on the download page - now they are hidden but still on artifacts, i.e: https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.9.0-arm64.deb Can … [Previous page](https://discuss.elastic.co/latest.md?page=1920) [Next page](https://discuss.elastic.co/latest.md?page=1922)