# Latest **URL:** https://discuss.elastic.co/latest.md?page=1940 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1941 --- ## [Missing Converter handling for full class name=org.postgresql.util.PGobject, simple name=PGobject](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/258645)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 8:52pm UTC](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/258645 "2020-12-14T20:52:09Z")
Getting this error trying to use logstash jjdbc to extract complex objects from postgres. Converting to TEXT did not work as well \]\[WARN \]\[logstash.inputs.jdbc \]\[rivi-poc\_people\]\[ed94f8a65daf945d07d8fd7ebea8d75acad… --- ## [Indexing realtime data to elastic search](https://discuss.elastic.co/t/indexing-realtime-data-to-elastic-search/258486)
**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 8:50pm UTC](https://discuss.elastic.co/t/indexing-realtime-data-to-elastic-search/258486 "2020-12-14T20:50:54Z")
Hi, I am creating a new user profiling system. I am using Elasticsearch to store user data for fast search. User profiles have various data like registration-data, comment-added-data, reply-data, etc. So whenever the … --- ## [Elasticsearch error: missing authentication credentials for REST request \[/logstash-filebeat-2020.12.11/\_mapping\]](https://discuss.elastic.co/t/elasticsearch-error-missing-authentication-credentials-for-rest-request-logstash-filebeat-2020-12-11-mapping/258435)
**Author:** [@mjcammilleri](https://discuss.elastic.co/u/mjcammilleri)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 8:21pm UTC](https://discuss.elastic.co/t/elasticsearch-error-missing-authentication-credentials-for-rest-request-logstash-filebeat-2020-12-11-mapping/258435 "2020-12-14T20:21:37Z")
Hi Everyone, This could be an issue that crosses with Grafana, but I'm hoping for some insight here. I am able to access the Elasticsearch API using my active token. I can test using curl in various python scripts to pu… --- ## [Problems with Java and Elasticsearch: JVM flavor 'sun6' not understood](https://discuss.elastic.co/t/problems-with-java-and-elasticsearch-jvm-flavor-sun6-not-understood/258510)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 7:56pm UTC](https://discuss.elastic.co/t/problems-with-java-and-elasticsearch-jvm-flavor-sun6-not-understood/258510 "2020-12-14T19:56:49Z")
Hello! I'm preparing a Raspberry Pi 4 as a development environment, and I've hit a snag having installed and configured Java. I've installed Elastic from the official documentation here on Elastic for Debian. However,… --- ## [Unusual Parent-Child Relationship Query and process parent hyphen value](https://discuss.elastic.co/t/unusual-parent-child-relationship-query-and-process-parent-hyphen-value/258570)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 7:18pm UTC](https://discuss.elastic.co/t/unusual-parent-child-relationship-query-and-process-parent-hyphen-value/258570 "2020-12-14T19:18:12Z")
Hello, I'm noticing a large amount of detections on the "Unusual Parent-Child Relationship" detection rule whichs seems to be related to the fact that some processes don't have a parent process. Data source are sysmon f… --- ## [How can i connect to cluster when master node changed?](https://discuss.elastic.co/t/how-can-i-connect-to-cluster-when-master-node-changed/258490)
**Author:** [@hamidreza\_ghadir](https://discuss.elastic.co/u/hamidreza_ghadir)\ **Replies:** 4\ **Last updated:** [December 14, 2020, 7:15pm UTC](https://discuss.elastic.co/t/how-can-i-connect-to-cluster-when-master-node-changed/258490 "2020-12-14T19:15:13Z")
Hi, I have a cluster with three nodes on docker. MasterNode: 0.0.0.0:9200, Node2: 0.0.0.0:9201, Node3: 0.0.0.0:9202 I use Nest in .NetCore Application. and i connect to cluster with http://:9200/ and this connection … --- ## [How to deal with non-auto generated ids while index](https://discuss.elastic.co/t/how-to-deal-with-non-auto-generated-ids-while-index/258626)
**Author:** [@arash\_rahimi](https://discuss.elastic.co/u/arash_rahimi)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 6:56pm UTC](https://discuss.elastic.co/t/how-to-deal-with-non-auto-generated-ids-while-index/258626 "2020-12-14T18:56:55Z")
Hi, I read the elastic documents and saw there I should use auto-generated ids to speed up the search index but because of my data model & query model I cant use auto-generated ids and so after indexing a million documen… --- ## [Push\_previous\_map\_as\_event if fields exist](https://discuss.elastic.co/t/push-previous-map-as-event-if-fields-exist/250566)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 39\ **Last updated:** [December 14, 2020, 6:31pm UTC](https://discuss.elastic.co/t/push-previous-map-as-event-if-fields-exist/250566 "2020-12-14T18:31:00Z")
Hi, I need help figuring out a way for Logstash to check if a specific filed exists for a specific task\_id and then aggregate those fields using push\_previous\_map\_as\_event. For example, my current aggregate filter looks… --- ## [Failed to find geo\_point field \[destination.geo.location\]](https://discuss.elastic.co/t/failed-to-find-geo-point-field-destination-geo-location/256966)
**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\ **Replies:** 8\ **Last updated:** [December 14, 2020, 5:17pm UTC](https://discuss.elastic.co/t/failed-to-find-geo-point-field-destination-geo-location/256966 "2020-12-14T17:17:02Z")
Hello everyone, I am having some problems with geo.location showing up on that maps with errors. This is my errors" query\_shard\_exception at \`shard\` 0 \`index\` .ds-logs-windows.security-default-000001 \`node\` stUuKb8ZR4… --- ## [Beats 7.10.1 Security Update](https://discuss.elastic.co/t/beats-7-10-1-security-update/258160)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [December 9, 2020, 4:24pm UTC](https://discuss.elastic.co/t/beats-7-10-1-security-update/258160 "2020-12-09T16:24:56Z")
Beats Denial of Service issue (ESA-2020-16) A denial of service flaw when parsing malformed TLS public keys was discovered in Go, the language used to implement Beats. If Beats is configured to listen for Syslog over TL… --- ## [Field have the same value](https://discuss.elastic.co/t/field-have-the-same-value/258604)
**Author:** [@Dea\_Agra](https://discuss.elastic.co/u/Dea_Agra)\ **Replies:** 5\ **Last updated:** [December 14, 2020, 5:08pm UTC](https://discuss.elastic.co/t/field-have-the-same-value/258604 "2020-12-14T17:08:05Z")
I don't know why logstash keep parsing the same value for the different field. Here I attach my logstash configuration input { file { start\_position =\> "beginning" sincedb\_path =\> "/dev/null" path =\> \[ "/home/elasticse… --- ## [Elasticsearch Audit not supported, but still got entries](https://discuss.elastic.co/t/elasticsearch-audit-not-supported-but-still-got-entries/258337)
**Author:** [@djordan66](https://discuss.elastic.co/u/djordan66)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-audit-not-supported-but-still-got-entries/258337 "2020-12-14T16:53:53Z")
We're running a cluster on Elasticsearch 7.9.3-1 We have 3 head/master nodes, 14 data nodes, and a kibana index node in the cluster. I was asked to get audit logging running on our cluster to keep an eye on users, but … --- ## [Best practices for docker container application log shipping with Filebeat to Logstash](https://discuss.elastic.co/t/best-practices-for-docker-container-application-log-shipping-with-filebeat-to-logstash/258613)
**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 4:52pm UTC](https://discuss.elastic.co/t/best-practices-for-docker-container-application-log-shipping-with-filebeat-to-logstash/258613 "2020-12-14T16:52:25Z")
Hi, I have a docker service of two containers. They both have a web server component which produces access, error and debug logs and one container has special module attached to the web server component, which produces … --- ## [Problem when setting Kibana server as a proxy for Tiles Maps Download and Maps Visualizations](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594)
**Author:** [@Manuel\_Wong](https://discuss.elastic.co/u/Manuel_Wong)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 4:16pm UTC](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594 "2020-12-14T16:16:21Z")
Hello All, We have a KIbana/Elasticsearch environment where the servers have access to the internet through a proxy. The web browser clients from which the users access to Kibana are also running from an environment tha… --- ## [Detection rules](https://discuss.elastic.co/t/detection-rules/257785)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 4:08pm UTC](https://discuss.elastic.co/t/detection-rules/257785 "2020-12-14T16:08:00Z")
How can I check when I make a detection rule if another rule has been activated? That is, if I want to make a rule that verifies an incident I would like to check if another rule that is strictly related to IDS has alrea… --- ## [Is there a way to configure Elasticsearch for languages with 4 letters like DNA?](https://discuss.elastic.co/t/is-there-a-way-to-configure-elasticsearch-for-languages-with-4-letters-like-dna/258586)
**Author:** [@Popop\_Lldas](https://discuss.elastic.co/u/Popop_Lldas)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 2:17pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-elasticsearch-for-languages-with-4-letters-like-dna/258586 "2020-12-14T14:17:13Z")
There was a question on this subject in 2018, but it hasn't been fully addressed yet. https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis The DNA is a two-bit system so I assume regualr full-text searc… --- ## [Analyzers at search/query time vs at index time](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 3:24pm UTC](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175 "2020-12-14T15:24:50Z")
Hello! My team and I are using analyzers both at search/query and when data is indexed. After revewing the Elastic documentation and a few web searches, I have not found a conclusive answerto my questions. I have two q… --- ## [Elastic webhook output](https://discuss.elastic.co/t/elastic-webhook-output/258546)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 3:15pm UTC](https://discuss.elastic.co/t/elastic-webhook-output/258546 "2020-12-14T15:15:53Z")
Hello, I wanna know please if the webhook in the watcher send output in a JSON format ? cause I am getting some errors in my webhook and I don't know if it's because the output is not in JSON format, or cause I didn't k… --- ## [Showing saved dashboards in other plugins](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501)
**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 3:10pm UTC](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501 "2020-12-14T15:10:27Z")
hi how we can use of saved dashboards in other plugins besides of dashboard plugin and apply filters to that dynamically --- ## [Grok filter TIMESTAMP\_ISO8601 appears in Kibana as String](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-appears-in-kibana-as-string/258240)
**Author:** [@SecretSquizza](https://discuss.elastic.co/u/SecretSquizza)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 2:48pm UTC](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-appears-in-kibana-as-string/258240 "2020-12-14T14:48:14Z")
Hi all, I done a bit of rooting around google but can't find any definitive answers, so i decided to humble myself and request help directly. The problem i have is that, like many incoming messages, my log entry contai… --- ## [How to create a drilldown on dashboard for Vega-lite vis](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632)
**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 2:14pm UTC](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632 "2020-12-14T14:14:37Z")
I am trying to create drilldown from vega vis to dashboard but it doesn't work. For example, for tables, this works correctly, by clicking on the magnifying glass icon, you can select the drilldown created. Kibana v… --- ## [Ideas to Normalize and join](https://discuss.elastic.co/t/ideas-to-normalize-and-join/258543)
**Author:** [@surphix](https://discuss.elastic.co/u/surphix)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 2:08pm UTC](https://discuss.elastic.co/t/ideas-to-normalize-and-join/258543 "2020-12-14T14:08:43Z")
Hello everyone, I am working on a project to integrate two existing indexes (30-50M records each) into one by joining across a common field. Unfortunately as I understand Elasticsearch does not support joins like SQL. I… --- ## [MS SQL+ ELASTICSEARCH](https://discuss.elastic.co/t/ms-sql-elasticsearch/258563)
**Author:** [@pmate](https://discuss.elastic.co/u/pmate)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 1:02pm UTC](https://discuss.elastic.co/t/ms-sql-elasticsearch/258563 "2020-12-14T13:02:21Z")
Hy everybody! I am new in elasticsearch and beginner in docker also. I need to know what is the best way to connect an ms sql data base to an elastichsearch docker instance? Thanks for Help! --- ## [Filebeat Cisco Umbrella module](https://discuss.elastic.co/t/filebeat-cisco-umbrella-module/256811)
**Author:** [@Massimo\_Brogioni](https://discuss.elastic.co/u/Massimo_Brogioni)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 12:30pm UTC](https://discuss.elastic.co/t/filebeat-cisco-umbrella-module/256811 "2020-12-14T12:30:31Z")
Hi, I am trying to configure filebeat to get logs from Cisco Umbrella but something don't work. The logs are in a bucket Cisco managed. If I try to list the bucket I am successful, with: /usr/local/bin/aws s3 ls s3://… --- ## [Elastic cluster "Received ban for the parent \[channel closed\]", Apache Metron "listener timeout after waiting for"](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 13\ **Last updated:** [December 14, 2020, 12:16pm UTC](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535 "2020-12-14T12:16:32Z")
Hello, we using ES cluster with 3 nodes, each datanode. We faced with problem that sometimes we can't write into our cluster using Apache Metron : java.io.IOException: listener timeout after waiting for \[60000\] ms at or… --- ## [Appeared \_grokparsefailure, unable to parse specific lines from log file](https://discuss.elastic.co/t/appeared-grokparsefailure-unable-to-parse-specific-lines-from-log-file/258566)
**Author:** [@Polak](https://discuss.elastic.co/u/Polak)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 10:50am UTC](https://discuss.elastic.co/t/appeared-grokparsefailure-unable-to-parse-specific-lines-from-log-file/258566 "2020-12-14T10:50:57Z")
I have this kind of log: https://pastebin.com/ztXijyNV I would like to drop all events except the lines with "INFO -- :". Logs are gathered by filebeat and then they are send to logstash. Important data are in log insid… --- ## [Elasticsearch Saved Search with Group By](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 15\ **Last updated:** [December 14, 2020, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823 "2020-12-14T11:47:36Z")
index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: OPEN ticket\_updated\_time: 2020-12… --- ## [Client requested protocol tlsv1 is not enabled or supported in server context](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/258114)
**Author:** [@Usman](https://discuss.elastic.co/u/Usman)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 11:45am UTC](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/258114 "2020-12-14T11:45:24Z")
Hi, we are using ELK stack version 7.9.0 , when we try to connect logstash with elastic it give us error . 'client requested protocol tlsv1 is not enabled or supported in server context' when we specify following para… --- ## [Index name based on docker-compose service name](https://discuss.elastic.co/t/index-name-based-on-docker-compose-service-name/258468)
**Author:** [@fulkon](https://discuss.elastic.co/u/fulkon)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 11:45am UTC](https://discuss.elastic.co/t/index-name-based-on-docker-compose-service-name/258468 "2020-12-14T11:45:24Z")
Is there any way to set index name based on docker-compose service name? Corresponding name is in container.labels.com\_docker\_compose\_service field. Tried this in input: - type: container paths: - '/… --- ## [Cannot read property 'split' of undefined \[Winlogbeat\]](https://discuss.elastic.co/t/cannot-read-property-split-of-undefined-winlogbeat/258365)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 11:03am UTC](https://discuss.elastic.co/t/cannot-read-property-split-of-undefined-winlogbeat/258365 "2020-12-14T11:03:23Z")
Hello, everyone! We have troubles with our winlogbeat agent. Sometimes it writes error message "TypeError: Cannot read property 'split' of undefined at C:\\Program Files\\Winlogbeat/module/security/config/winlogbeat-secur… [Previous page](https://discuss.elastic.co/latest.md?page=1939) [Next page](https://discuss.elastic.co/latest.md?page=1941)