# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1951

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1952

---

## [Elasticsearch ODBC Connector (AWS ES domain) Does Not Work with IAM Credentials](https://discuss.elastic.co/t/elasticsearch-odbc-connector-aws-es-domain-does-not-work-with-iam-credentials/258050)

<div class="topic-metadata">

**Author:** [@mcburn13](https://discuss.elastic.co/u/mcburn13)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 9:41pm UTC](https://discuss.elastic.co/t/elasticsearch-odbc-connector-aws-es-domain-does-not-work-with-iam-credentials/258050 "2020-12-08T21:41:41Z")

</div>

I installed the 64bit ODBC connector, and was able to connect to my AWS Elasticsearch domain when i turned off it's access policy. I created an IAM user, added to the policy and it then cannot connect to it.

---

## [AD/LDAP Authentication failure](https://discuss.elastic.co/t/ad-ldap-authentication-failure/258040)

<div class="topic-metadata">

**Author:** [@Chay\_Chait](https://discuss.elastic.co/u/Chay_Chait)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 7:14pm UTC](https://discuss.elastic.co/t/ad-ldap-authentication-failure/258040 "2020-12-08T19:14:44Z")

</div>

Hi Team, We have configured the required settings as shown in the documents for elastic search integration with AD authentication and created all the required groups and users at AD end but when I try to login with the …

---

## [If you save dashboard as json, does it save visualization as well?](https://discuss.elastic.co/t/if-you-save-dashboard-as-json-does-it-save-visualization-as-well/258052)

<div class="topic-metadata">

**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 9:34pm UTC](https://discuss.elastic.co/t/if-you-save-dashboard-as-json-does-it-save-visualization-as-well/258052 "2020-12-08T21:34:07Z")

</div>

Hi. I am trying to create development environment and production environment for Kibana dashboard (two separate VMs). Idea is to work on dev environment, export json -\> import json in production environment. If I work …

---

## [Logstash filter for firewall packet drops](https://discuss.elastic.co/t/logstash-filter-for-firewall-packet-drops/258042)

<div class="topic-metadata">

**Author:** [@hassan.rana](https://discuss.elastic.co/u/hassan.rana)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 8:48pm UTC](https://discuss.elastic.co/t/logstash-filter-for-firewall-packet-drops/258042 "2020-12-08T20:48:03Z")

</div>

I am trying to parse logs from an aggregate syslog server to logstash. I have been successful in shipping the logs from the syslog server to logstash. I can see multiple fields from the log that are being setup like (hos…

---

## [Filebeat dashboards are not loaded in kibana---filebeat version 7.10](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-filebeat-version-7-10/257933)

<div class="topic-metadata">

**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\
**Replies:** 4\
**Last updated:** [December 8, 2020, 8:11pm UTC](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-filebeat-version-7-10/257933 "2020-12-08T20:11:49Z")

</div>

2020-12-08T09:58:34.256+0530 INFO instance/beat.go:299 Setup Beat: filebeat; Version: 7.10.0 2020-12-08T09:58:34.256+0530 DEBUG \[beat\] instance/beat.go:325 Initializing output plugins 2020-12-08T09:58…

---

## [Sorting by something other than timestamp in Logs app](https://discuss.elastic.co/t/sorting-by-something-other-than-timestamp-in-logs-app/257897)

<div class="topic-metadata">

**Author:** [@ippolito](https://discuss.elastic.co/u/ippolito)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 7:13pm UTC](https://discuss.elastic.co/t/sorting-by-something-other-than-timestamp-in-logs-app/257897 "2020-12-08T19:13:23Z")

</div>

Hi. Is there a way to sort by a different field in the Observability/Logs app? Since we have multiple logging servers feeding a kafka queue, our logs don't necessarily arrive in the same order they're generated. We'd lik…

---

## [Filebeat redis module not working](https://discuss.elastic.co/t/filebeat-redis-module-not-working/257806)

<div class="topic-metadata">

**Author:** [@Amy\_Peng](https://discuss.elastic.co/u/Amy_Peng)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 6:48pm UTC](https://discuss.elastic.co/t/filebeat-redis-module-not-working/257806 "2020-12-08T18:48:27Z")

</div>

Hi all, I'm using filebeat 7.6.2 and my redis version is 6.0.3. From this reference below, I supposed my redis log would be parsed automatically and easily get all the useful fields. But redis module isn't working…

---

## [org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: id is missing](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084)

<div class="topic-metadata">

**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\
**Replies:** 4\
**Last updated:** [December 8, 2020, 6:40pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084 "2020-12-08T18:40:05Z")

</div>

При операции Bulk проиходит данная ошибка. Не очень понятно почему? Это ошибка потому что id пустой или не находит данное ID в БД? Там две операции, одна с добавление записи в в один индекс, вторая с удаление записи из…

---

## [How to install multiple filebeat services in same host (Windows Server)?](https://discuss.elastic.co/t/how-to-install-multiple-filebeat-services-in-same-host-windows-server/257879)

<div class="topic-metadata">

**Author:** [@noobman2logstash](https://discuss.elastic.co/u/noobman2logstash)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 6:39pm UTC](https://discuss.elastic.co/t/how-to-install-multiple-filebeat-services-in-same-host-windows-server/257879 "2020-12-08T18:39:34Z")

</div>

Hi i need help figuring out this issue as i want to run two filebeat services that points to two deferent directories in the c drive. we currently have a team using filebeat pointing to redis and now i want to install a …

---

## [How do I add a Custom Field to FileBeat with a Module?](https://discuss.elastic.co/t/how-do-i-add-a-custom-field-to-filebeat-with-a-module/257909)

<div class="topic-metadata">

**Author:** [@mstacy](https://discuss.elastic.co/u/mstacy)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-do-i-add-a-custom-field-to-filebeat-with-a-module/257909 "2020-12-08T18:34:23Z")

</div>

Below is the top portion of my filebeat yaml. This configuration works adequately. However I would like to append additional data to the events in order to better distinguish the source of the logs. I have gone throug…

---

## [Dashboard filter does not include fields from the index used in Vega visualization](https://discuss.elastic.co/t/dashboard-filter-does-not-include-fields-from-the-index-used-in-vega-visualization/258033)

<div class="topic-metadata">

**Author:** [@ege](https://discuss.elastic.co/u/ege)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 6:34pm UTC](https://discuss.elastic.co/t/dashboard-filter-does-not-include-fields-from-the-index-used-in-vega-visualization/258033 "2020-12-08T18:34:12Z")

</div>

Hi, I am trying to add an on-click signal to add a filter when clicked on each sector of a pie-chart using Vega. Even though the filter is added, it is not affected on the chart and shows an error within the filter. T…

---

## [Kibana 7.10 Pagination + Rows per page not working](https://discuss.elastic.co/t/kibana-7-10-pagination-rows-per-page-not-working/258013)

<div class="topic-metadata">

**Author:** [@jcotter91](https://discuss.elastic.co/u/jcotter91)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 6:21pm UTC](https://discuss.elastic.co/t/kibana-7-10-pagination-rows-per-page-not-working/258013 "2020-12-08T18:21:34Z")

</div>

Kibana version : 7.10 Elasticsearch version : 7.10 Metricbeat version: 7.10 Browser: Google Chrome 87.0.4280.66 (Official Build) (64-bit) Revision fd98a29dd59b36f71e4741332c9ad5bda42094bf-refs/branch-heads/42…

---

## [Logstash monitoring with Metricbeat "logstash-xpack" module - data not collected and not sent to ES](https://discuss.elastic.co/t/logstash-monitoring-with-metricbeat-logstash-xpack-module-data-not-collected-and-not-sent-to-es/258006)

<div class="topic-metadata">

**Author:** [@Ilya\_Geller](https://discuss.elastic.co/u/Ilya_Geller)\
**Replies:** 7\
**Last updated:** [December 8, 2020, 6:18pm UTC](https://discuss.elastic.co/t/logstash-monitoring-with-metricbeat-logstash-xpack-module-data-not-collected-and-not-sent-to-es/258006 "2020-12-08T18:18:03Z")

</div>

Hi, I'm running version 7.7 of Logstash and Metricbeat, and I'm trying to setup stack monitoring using the metricbeat xpack modules. So far I've enabled the elasticsearch-xpack module and it works fine, ES and Kibana m…

---

## [Filebeat isn\`t collecting logs of short living containers like cronjobs](https://discuss.elastic.co/t/filebeat-isn-t-collecting-logs-of-short-living-containers-like-cronjobs/254984)

<div class="topic-metadata">

**Author:** [@Patrick\_Erber](https://discuss.elastic.co/u/Patrick_Erber)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 6:12pm UTC](https://discuss.elastic.co/t/filebeat-isn-t-collecting-logs-of-short-living-containers-like-cronjobs/254984 "2020-12-08T18:12:31Z")

</div>

Hello, Filebeat isn\`t collecting logs of short living containers like cronjobs. We are using filebeat version 7.9.3 and also kubernetes autodiscovery. I've created a cronjob which prints just one line and exits afterw…

---

## [Currency Format](https://discuss.elastic.co/t/currency-format/257999)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 9\
**Last updated:** [December 8, 2020, 4:23pm UTC](https://discuss.elastic.co/t/currency-format/257999 "2020-12-08T16:23:48Z")

</div>

Hi all, My data in Elasticsearch index are numbers (integer, long, float) and amounts in euros € currency whitout affecting those are just a number. I would like to display all amounts with euro € signe. Unfortunately…

---

## [Not able to see latest logs in discover in kibana](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 10\
**Last updated:** [December 8, 2020, 5:23pm UTC](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688 "2020-12-08T17:23:20Z")

</div>

Hi Team, I am not able to see latest logs in discover tab in kibana. the last logs I can see is of 1 Dec 2020 but not after that. I can see folders getting created till today in /opt/elasticsearch/nodes/0/indices/, the…

---

## [Auto-logout in Elastic managed service Kibana](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 8\
**Last updated:** [December 8, 2020, 5:09pm UTC](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092 "2020-12-08T17:09:11Z")

</div>

Hi, I'm presenting a Kibana dashboard on television and after like 6 hours the session automatically logouts and requires to log in again with username and password. I'd like to disable the session from disconnection o…

---

## [Elasticsearch Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021)

<div class="topic-metadata">

**Author:** [@TerryQ](https://discuss.elastic.co/u/TerryQ)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021 "2020-12-08T16:55:03Z")

</div>

Do these security vulnerabilities apply to the OSS distributions of Elasticsearch? From https://www.elastic.co/community/security/ Thanks

---

## [Inconsistency in no of total hits in results](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023)

<div class="topic-metadata">

**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\
**Replies:** 5\
**Last updated:** [December 8, 2020, 4:47pm UTC](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023 "2020-12-08T16:47:34Z")

</div>

Hi All, I am using below query for one of the our use cases & we are observing weird thing on total hits count - means assume I hit the below request first time then total hits in result would be 64 and if I hit second …

---

## [Fortigate parsing logs](https://discuss.elastic.co/t/fortigate-parsing-logs/258028)

<div class="topic-metadata">

**Author:** [@sg\_tanoe](https://discuss.elastic.co/u/sg_tanoe)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 4:42pm UTC](https://discuss.elastic.co/t/fortigate-parsing-logs/258028 "2020-12-08T16:42:28Z")

</div>

I would like to know how can I adapt log fields from a fortigate? In case, I want to get a result with a variety of field numbers over multiple lines.

---

## [Elasticsearch Index with INDEX\_CREATED status progress](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872)

<div class="topic-metadata">

**Author:** [@mohamedshokry](https://discuss.elastic.co/u/mohamedshokry)\
**Replies:** 7\
**Last updated:** [December 8, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872 "2020-12-08T16:30:42Z")

</div>

Hello, I have a simple question: Is there an API to show current progress on an Elasticsearch index during different phases like 'INDEX\_CREATED'? I know that there is an API to check current recovery, but since the ind…

---

## [Do search templates improve performance?](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018)

<div class="topic-metadata">

**Author:** [@kartoffelsack](https://discuss.elastic.co/u/kartoffelsack)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 4:08pm UTC](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018 "2020-12-08T16:08:16Z")

</div>

Coming from a relational background I know that using precompiled queries can also help boosting database query performance. To my understanding search templates are the the equivalent to precompiled queries. Though al…

---

## [Kibana query to remote cluster causes null pointer exception](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024)

<div class="topic-metadata">

**Author:** [@bwink](https://discuss.elastic.co/u/bwink)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 4:02pm UTC](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024 "2020-12-08T16:02:44Z")

</div>

Cluster#1 7.10.0 Kibana#1 7.10.0 Cluster#2 7.9.2 Kibana#2 7.9.2 Problem#1 I have a local Kibana (kibana#1) to a local cluster (cluster#1) and everything works perfectly on querying an index pattern. I set up a diffe…

---

## [Kafka monitoring using JMX input plugin](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936)

<div class="topic-metadata">

**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 5:33am UTC](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936 "2020-12-08T05:33:05Z")

</div>

I read some tech notes on using jolokio jars to get logstash to consume JMX data from kafka and send it ES. Also came across the JMX input plugin. Installed and configured it and I am able to get the JMX metrics from ka…

---

## [Hive table with Elasticsearch](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736)

<div class="topic-metadata">

**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 3:33pm UTC](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736 "2020-12-08T15:33:55Z")

</div>

Need help in connecting or synchronised hive table with Elasticsearch.can any one share steps

---

## [Body meta tag significance](https://discuss.elastic.co/t/body-meta-tag-significance/257917)

<div class="topic-metadata">

**Author:** [@sadat1985](https://discuss.elastic.co/u/sadat1985)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 3:24pm UTC](https://discuss.elastic.co/t/body-meta-tag-significance/257917 "2020-12-08T15:24:51Z")

</div>

We have a meta tag with the name 'body'. \<meta class="swiftype" name="body" data-type="text" content="word1 word 2 word3"/\> Though the HTML of all the pages have tag, it looks like only the content if the above tag is…

---

## [Handling MQRFH2 header in logstash](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016)

<div class="topic-metadata">

**Author:** [@hassan2sn](https://discuss.elastic.co/u/hassan2sn)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 3:10pm UTC](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016 "2020-12-08T15:10:10Z")

</div>

Hi Guys, Can you please suggest , how to handle incoming MQRFH2 header in logstash, this is going to the dead letter queue, whenever there is an MQRFH2 / usr folder header in request

---

## [LogStash - Upload using MySQL](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604)

<div class="topic-metadata">

**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\
**Replies:** 12\
**Last updated:** [December 8, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604 "2020-12-08T14:52:52Z")

</div>

I am new to the world of ELK and trying to learn. But Logstash is proving to be a big hurdle. I tried loading data from a CSV file and that caused lot of issues and I have been unable to upload using CSV. So I tried a ne…

---

## [ROW\_NUMBER in ES SQL](https://discuss.elastic.co/t/row-number-in-es-sql/257923)

<div class="topic-metadata">

**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\
**Replies:** 7\
**Last updated:** [December 8, 2020, 2:17pm UTC](https://discuss.elastic.co/t/row-number-in-es-sql/257923 "2020-12-08T14:17:34Z")

</div>

Hello, does the command ROW\_NUMBER() exist for ES SQL? When not, is there something equivalent to it? Can someone do an example, please? With best regards

---

## [Convert DateTime to integer](https://discuss.elastic.co/t/convert-datetime-to-integer/257924)

<div class="topic-metadata">

**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 2:15pm UTC](https://discuss.elastic.co/t/convert-datetime-to-integer/257924 "2020-12-08T14:15:05Z")

</div>

Hello, we have strings in the format "2020-11-10T12:43:58" saved in Kibana. When using ES SQL, we want to convert these strings into an integer or float so that the integer/float increases as the DateTime increases as …

[Previous page](https://discuss.elastic.co/latest.md?page=1950)

[Next page](https://discuss.elastic.co/latest.md?page=1952)
