# Latest **URL:** https://discuss.elastic.co/latest.md?page=1932 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1933 --- ## [Logstash 7.10 Error](https://discuss.elastic.co/t/logstash-7-10-error/259022)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 7:23pm UTC](https://discuss.elastic.co/t/logstash-7-10-error/259022 "2020-12-17T19:23:46Z")
I' ve installed last version of Logstash and gives me this error for ingested pipelines: \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[....\] Encountered a retryable error. Will Retry with exponential backoff {:code=\>40… --- ## [Filtering Nested Child Objects](https://discuss.elastic.co/t/filtering-nested-child-objects/258791)
**Author:** [@mgncl](https://discuss.elastic.co/u/mgncl)\ **Replies:** 5\ **Last updated:** [December 17, 2020, 7:16pm UTC](https://discuss.elastic.co/t/filtering-nested-child-objects/258791 "2020-12-17T19:16:21Z")
I am trying to fine tune the query on a nested collection. The nested collection should match all the criteria and the size of the collection. I created a sample data set to the mimic my use case. Index { "map… --- ## [Snapsot Deletion Times Out](https://discuss.elastic.co/t/snapsot-deletion-times-out/259029)
**Author:** [@pooja\_shukla](https://discuss.elastic.co/u/pooja_shukla)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 6:58pm UTC](https://discuss.elastic.co/t/snapsot-deletion-times-out/259029 "2020-12-17T18:58:10Z")
1) Snapshot deletion is timing out using elasticsearch python client client.snapshot.delete(repository="repo\_name", snapshot="snapshot\_name") 2) We are using curator to delete old snapshot beyond a certain date, curato… --- ## [How to config hot-warm arch in elasticsearch 7.9.1](https://discuss.elastic.co/t/how-to-config-hot-warm-arch-in-elasticsearch-7-9-1/258904)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 6:52pm UTC](https://discuss.elastic.co/t/how-to-config-hot-warm-arch-in-elasticsearch-7-9-1/258904 "2020-12-17T18:52:20Z")
Configurations of hot-warm arch in elasticsearch is only changing elasticsearch.yml? --- ## [Adding new field based on AND Condition](https://discuss.elastic.co/t/adding-new-field-based-on-and-condition/259010)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 6:19pm UTC](https://discuss.elastic.co/t/adding-new-field-based-on-and-condition/259010 "2020-12-17T18:19:19Z")
Hi have below coloumns columns =\> \[ "Order Key","Cust #","Doc Type","Doc #","Order #","Order Type","Order Complete?","Order Date","Total Order Value","Total Dollar Value","TotalOrderReceivedToday","Inv #","Inv Date","Ex… --- ## [Split Json, transform result](https://discuss.elastic.co/t/split-json-transform-result/259019)
**Author:** [@Jose92](https://discuss.elastic.co/u/Jose92)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 6:13pm UTC](https://discuss.elastic.co/t/split-json-transform-result/259019 "2020-12-17T18:13:27Z")
Bonjour, je me permets de vous contacter pour avoir de l'aide sur une configuration avec logstash. Je tourne en rond depuis plusieurs jours.... Mon json ressemble à ça : ... "inventaire": { "Applicatio… --- ## [Logstash to Ingest nodes](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 6:02pm UTC](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925 "2020-12-17T18:02:33Z")
In Logstash under the pipeline directory there will be multiple .conf files that set specific grok filters. The format of the files are as follows: Input Grok Filter Output \[list of nodes\] For that Output section do … --- ## [Internals of array of strings vs. concatenated string](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640)
**Author:** [@mitar](https://discuss.elastic.co/u/mitar)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 5:59pm UTC](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640 "2020-12-17T17:59:42Z")
I am trying to better understand internals of ElasticSearch, so I would like to know if there are any differences in how ElasticSearch internally computes term statistics for the following two cases. The first case is w… --- ## [Esaggs \> field is a required parameter](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016)
**Author:** [@firstpostcommenter](https://discuss.elastic.co/u/firstpostcommenter)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:44pm UTC](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016 "2020-12-17T17:44:16Z")
Hi, In my Kibana dashboard I get the below error: \[esaggs\] \> "field" is a required parameter In my Dashboard there are around 11 panels/visualizations (panel0 to panel10) and I narrowed it down to panel7 which is caus… --- ## [.NET APM Method profiling](https://discuss.elastic.co/t/net-apm-method-profiling/259015)
**Author:** [@aaimson](https://discuss.elastic.co/u/aaimson)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 5:41pm UTC](https://discuss.elastic.co/t/net-apm-method-profiling/259015 "2020-12-17T17:41:36Z")
Kibana version: 7.9.3 Elasticsearch version: 7.9.3 APM Server version: 7.9.3 APM Agent language and version: .net core 1.7.1 Browser version: n/a Original install method (e.g. download page, yum, deb, from source, e… --- ## [Imap input plugin download attachment](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966)
**Author:** [@Aditya\_Srivastava1](https://discuss.elastic.co/u/Aditya_Srivastava1)\ **Replies:** 8\ **Last updated:** [December 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966 "2020-12-17T17:30:51Z")
Hi, I am using imap input plugin to fetch email along with attachments. Below configuration gets me multiple fields but does not get the attachment content. Can anyone help here how to download attachments while connec… --- ## [Code Execution time in Elastic APM](https://discuss.elastic.co/t/code-execution-time-in-elastic-apm/258662)
**Author:** [@sreedharbukya](https://discuss.elastic.co/u/sreedharbukya)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 5:15pm UTC](https://discuss.elastic.co/t/code-execution-time-in-elastic-apm/258662 "2020-12-17T17:15:26Z")
Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: Python, DotNet Browser version: Fresh install or upgraded from other version? upgraded Description of the… --- ## [Dashboard / Canvas based on two indices](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 6\ **Last updated:** [December 17, 2020, 5:04pm UTC](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729 "2020-12-17T17:04:35Z")
I have two indices: users & activities. Users index data looks like: { "email": "alice@gmail.com", "Name": "Alice A" }, { "email": "bob@gmail.com", "name": "Bob B" }, ... activity index data looks like… --- ## ["This Elastic installation has strict security requirements enabled that your current browser does not meet](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006)
**Author:** [@J\_Stan](https://discuss.elastic.co/u/J_Stan)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:03pm UTC](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006 "2020-12-17T17:03:30Z")
Hi All I am not able to access the Kibana UI . I am using Google Chrome (ver 87). The error I am getting is "This Elastic installation has strict security requirements enabled that your current browser does not meet.… --- ## [Populate geo\_shape values with ingest pipeline using lat/lon column values](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 4:51pm UTC](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998 "2020-12-17T16:51:34Z")
If input data has lat/lon columns, is it possible to populate geo\_shape value using lat/long columns with ingest pipeline? Imagine original index has only lat/lon column mappings and data is populated. Now using reind… --- ## [Logstash crash with FATAL error](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 4:50pm UTC](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919 "2020-12-17T16:50:08Z")
something in either my data or my logstash is killing logstash with following error. I have try this multiple time but I can't figure out what record does it gets kill on. how do I do the debug on this one? I am runni… --- ## [Elastic-Agent deb package invalid init script](https://discuss.elastic.co/t/elastic-agent-deb-package-invalid-init-script/258994)
**Author:** [@matt\_t1](https://discuss.elastic.co/u/matt_t1)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 3:56pm UTC](https://discuss.elastic.co/t/elastic-agent-deb-package-invalid-init-script/258994 "2020-12-17T15:56:57Z")
The deb package for elastic-agent v7.10.1 creates /etc/init.d/elastic-agent which is not a valid init script and interferes with the proper systemd unit at /lib/systemd/system/elastic-agent.service. --- ## [Squid Module: Splitting multiple logs which are combined as a single message in Kibana](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609)
**Author:** [@ron\_g](https://discuss.elastic.co/u/ron_g)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 3:24pm UTC](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609 "2020-12-17T15:24:09Z")
We have the problem that all logs which are send from our Squid server over Filebeat with the Squid module are combined as single messages in Kibana. The message contains 5 up to 15 entrys which are in fact single log l… --- ## [No alert in security detection dashboards after malware attack](https://discuss.elastic.co/t/no-alert-in-security-detection-dashboards-after-malware-attack/258380)
**Author:** [@Diana\_Dragoiu](https://discuss.elastic.co/u/Diana_Dragoiu)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 3:01pm UTC](https://discuss.elastic.co/t/no-alert-in-security-detection-dashboards-after-malware-attack/258380 "2020-12-17T15:01:17Z")
Hello ES team, After installing and enrolling Elastic Agent 7.10 we launched an Mimikatz.exe on our Win10 machine and received an ES Malware Alert but we do not receive an alert in Security Detections tab in Kibana. T… --- ## [Fleet AWS Integration Error - API keys not configured for metricbeat](https://discuss.elastic.co/t/fleet-aws-integration-error-api-keys-not-configured-for-metricbeat/258992)
**Author:** [@matt\_t1](https://discuss.elastic.co/u/matt_t1)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 2:39pm UTC](https://discuss.elastic.co/t/fleet-aws-integration-error-api-keys-not-configured-for-metricbeat/258992 "2020-12-17T14:39:14Z")
AWS integration version 0.3.12 allows Access and Secret keys to be specified, both for log and metric ingestion. This works for logs, but for metrics the values are not propagated to elastic-agent.yml. Configuring a sh… --- ## [Hide "Secure your data for free with Elastic" message programatically](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917)
**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 2:31pm UTC](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917 "2020-12-17T14:31:06Z")
When logging onto Kibana for the first time, I get a message "Your data is not secure. Don't lose one bit. Secure your data for free with Elastic." See PR 80344 and issue 80161. I'm maintaining a project that uses elas… --- ## [Parsing issue in Logstash grok](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:27pm UTC](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717 "2020-12-17T14:27:06Z")
I am having a grok issue. I have a log like below Login Success \[user: jsaver\] \[Source: 10.110.20.58\] How can I parse the this log with grok filter ? --- ## [Can hour and minute be appended to index name?](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:16pm UTC](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830 "2020-12-17T14:16:39Z")
I am trying to create index names with minute resolution since I am still experimenting with ELK and would like to see the effect of various changes in my logstash filter, without having to delete an existing filter (and… --- ## [Unable to revive connections error](https://discuss.elastic.co/t/unable-to-revive-connections-error/258928)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-revive-connections-error/258928 "2020-12-17T14:08:48Z")
We are experiencing an intermittent error with Kibana which shows as "Unable to revive connection" in our logs. We are running Kibana as a Docker container on the web server. It appears the Cluster continues to take in d… --- ## [Filebeat Cisco Umbrella](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779)
**Author:** [@nathanachey](https://discuss.elastic.co/u/nathanachey)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 2:01pm UTC](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779 "2020-12-17T14:01:26Z")
I'm trying to setup Filebeat to use the Cisco Umbrella module. We have the Cisco maintained bucket. The URL Cisco provides is s3://cisco-managed-us-west-1/2613934\_1b0f4f029c8f0b75a2f9a6d4e06a79d6cbbc41bb The error I'm… --- ## [Changing UTC to local time zone in a machine learning watcher](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 1:52pm UTC](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911 "2020-12-17T13:52:40Z")
Im trying to get the time of the alert to local time, but when I add the transform to the watcher I get the mail and the date, but the results are gone, it seems that the transform alters the entire result, what can I do… --- ## [ELS Watcher script free disc space](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 1:12pm UTC](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997 "2020-12-17T13:12:32Z")
Dear team, we have used a script from the els repository to set up a watcher for free disc space ratio, unfortunately script execution ends with errors but watcher interface show all is ok, we got an NPE: "script\_stack… --- ## [Most popular search results - Site Search](https://discuss.elastic.co/t/most-popular-search-results-site-search/258111)
**Author:** [@petas](https://discuss.elastic.co/u/petas)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 1:06pm UTC](https://discuss.elastic.co/t/most-popular-search-results-site-search/258111 "2020-12-17T13:06:47Z")
Hi! I'm trying to fetch the most popular search results from my Swiftype engine, but I can't find any way to do this out of the box. I am tracking clicks through recording "click throughs" (https://swiftype.com/documen… --- ## [Embed kibana dashboard/visualizations on an external webpage as iFrame](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 14\ **Last updated:** [December 17, 2020, 12:38pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279 "2020-12-17T12:38:43Z")
I am doing these below mentioned steps Create a visualization, apply the filters, then save the visualization Click "Share" at the top Copy the iframe code Paste the iframe code into your external HTML. when i paste t… --- ## [Logstash translate doesn't work](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249)
**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 12:33pm UTC](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249 "2020-12-17T12:33:56Z")
Hello, I have the following code: input { file { path =\> "/home/path/files/\*.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \[ "xx1","xx2","xx3","xx4","Response","TimeStamp",… [Previous page](https://discuss.elastic.co/latest.md?page=1931) [Next page](https://discuss.elastic.co/latest.md?page=1933)