# Latest **URL:** https://discuss.elastic.co/latest.md?page=1963 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1964 --- ## [Cannot connect locally run Logstash to influxdb in docker container](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 9:52pm UTC](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280 "2020-12-01T21:52:05Z")
Hello, I'm running Influxdb in docker container and trying to connect from logstash which is running locally. I've enabled the influxdb-logstash plugin to connect to influxdb output { stdout { codec =\> rubydebug … --- ## [Filebeat HA servers](https://discuss.elastic.co/t/filebeat-ha-servers/256703)
**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 6:17pm UTC](https://discuss.elastic.co/t/filebeat-ha-servers/256703 "2020-12-02T18:17:51Z")
I have a requirement where the log file that I am trying to pull can be on 1 of 4 servers at any given time. It is for my application that is in a HA cluster on 4 servers. Can i install filebeat on all 4 servers and make… --- ## [How to reindex data after 7.10 update](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101 "2020-12-02T18:15:41Z")
Hello all. We just completed our nice 7.10 update and I have read in the docs that it is necessary for us to reindex the data on ES after an upgrade. We are using 5 ES boxes and Logstash. Could someone point me to/pro… --- ## [APM agent not communicating with APM-Server](https://discuss.elastic.co/t/apm-agent-not-communicating-with-apm-server/257104)
**Author:** [@GeoffRx](https://discuss.elastic.co/u/GeoffRx)\ **Replies:** 5\ **Last updated:** [December 2, 2020, 6:03pm UTC](https://discuss.elastic.co/t/apm-agent-not-communicating-with-apm-server/257104 "2020-12-02T18:03:56Z")
APM agent cannot contact APM-Server. The servers with the APM agent hard coded in web.config (in .NET FullFramework) have been giving us the following error message in Event Viewer: Timestamp: 11/30/2020 2:41:58 PM Mes… --- ## [Filebeat AWS Module & ELB fileset, got error in parsing NLB log](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-got-error-in-parsing-nlb-log/257281)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 10:08pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-got-error-in-parsing-nlb-log/257281 "2020-12-01T22:08:54Z")
Hi there: I am using filebeat 7.9.3 with aws module and elb fileset enabled, running inside k8s. It is able to parse ALB log, but failed in paring Network load balancer log. The error message I got is error.message … --- ## [Can you connect elastic search-ui to elasticsearch instead of app search?](https://discuss.elastic.co/t/can-you-connect-elastic-search-ui-to-elasticsearch-instead-of-app-search/254312)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 6\ **Last updated:** [December 2, 2020, 5:04pm UTC](https://discuss.elastic.co/t/can-you-connect-elastic-search-ui-to-elasticsearch-instead-of-app-search/254312 "2020-12-02T17:04:51Z")
I have a sample app I set up using elastic search-ui. It connects to elastic app-search and returns results from a single-engine. I need to have multiple indexes or engines. According to this thread you cannot query mul… --- ## [Can I do an OR logic Filter?](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 5:03pm UTC](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395 "2020-12-02T17:03:49Z")
I'm trying to build an OR logic facet (aggregation). From what I understand the best way to filter a query for an aggregation value is to use the filter clause. That is because a filter limits the results without having … --- ## [How to sort by distance in aggregation?](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391)
**Author:** [@isma-el](https://discuss.elastic.co/u/isma-el)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:47pm UTC](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391 "2020-12-02T16:47:34Z")
Hello, is it possible to sort by geodistance in an aggregation ? I can't find a way to achieve this. I need aggregations to remove duplicates according to multiple terms, bu I need to sort the results by geodistance. … --- ## [How to extract data from filename using logstash?](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 4:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371 "2020-12-02T16:46:30Z")
I am using filebeat to monitor a directory for new files that get dropped in every hour. The files are then sent to logstash to be parsed before being sent to ES. The filenames are in this format aldb-E6-20201015232941.… --- ## [Use rank feature query as multiplier to the relevance score](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388)
**Author:** [@praveshjain1991](https://discuss.elastic.co/u/praveshjain1991)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:32pm UTC](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388 "2020-12-02T16:32:51Z")
As per the documentation, the rank feature query score is added to the overall query score. Since the relevance score itself is not bounded - the actual store depends on the data in your indices - how do I make the rank… --- ## [Concat String results in aggregation](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385)
**Author:** [@Yoandy\_Perez\_Villazo](https://discuss.elastic.co/u/Yoandy_Perez_Villazo)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:04pm UTC](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385 "2020-12-02T16:04:02Z")
He, I'm trying build a query with aggregation included, the aggregation define a sum of numeric values and i need further retrieve the \_ids list of items concatenated ... this is part of my aggregation ... "aggs": … --- ## [Kibana Rest API redirects to login](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799)
**Author:** [@Ludo\_Vic](https://discuss.elastic.co/u/Ludo_Vic)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 3:37pm UTC](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799 "2020-12-02T15:37:54Z")
Hi, I'm new to ElasticSearch and Kibana. I'm trying to use Kibana's REST API, but the response i get are redirections to /login whatever the request i try. For example : $ curl -v -u user:passwd -X GET "127.0.0.1:5601… --- ## [DSL query works with search but not update\_by\_query](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:36pm UTC](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378 "2020-12-02T15:36:59Z")
Hi, If i run the following search query i get back the documents i expect, def get\_results(): search = es.search( index = "logs-\*", body = { "from": 0, "size": 10000, "query"… --- ## [AWS Cloudfront](https://discuss.elastic.co/t/aws-cloudfront/257165)
**Author:** [@Roxbip](https://discuss.elastic.co/u/Roxbip)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:32pm UTC](https://discuss.elastic.co/t/aws-cloudfront/257165 "2020-12-02T15:32:36Z")
Hi all, I'm new to elasticsearch and all this world. I installed EFK stack with some helm charts. my version is 6.8.13 for my stack and its on Kubernetes. All is working fine for now. I want to take my logs from AWS… --- ## [Embedding Kibana dashboard in HTML Anonymously](https://discuss.elastic.co/t/embedding-kibana-dashboard-in-html-anonymously/256653)
**Author:** [@nathansegers](https://discuss.elastic.co/u/nathansegers)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:18pm UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-in-html-anonymously/256653 "2020-12-02T15:18:15Z")
Hi there, I am using latest Elasticsearch and Kibana version through Elastic Cloud. I wish to embed a Kibana dashboard into a HTML, but I seem to have encountered some problems. I have tried the options to setup the N… --- ## [Weird validation behaviour with allow\_leading\_wildcard](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374)
**Author:** [@barakm](https://discuss.elastic.co/u/barakm)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:09pm UTC](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374 "2020-12-02T15:09:38Z")
The following query: { "query": { "bool": { "must": \[ { "query\_string": { "query": "\*Created", "allow\_leading\_w… --- ## [NoNodeAvailableException](https://discuss.elastic.co/t/nonodeavailableexception/257081)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 12\ **Last updated:** [December 2, 2020, 3:07pm UTC](https://discuss.elastic.co/t/nonodeavailableexception/257081 "2020-12-02T15:07:34Z")
Добрый день. Проблема следующая. Есть кластер, в котором три ноды и мастер. Есть три автомата которые настроены каждый на свою ноду. Переодически валится ошибка NoNodeAvailableException ... При этом сам кластер не сообща… --- ## [Does LDAP Active Directory Authentication works with Basic License](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:58pm UTC](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369 "2020-12-02T14:58:55Z")
Hi Team, Does the LDAP Active Directory Authentication works with Basic license? Thanks, Ajesh --- ## [LogStash Not Receiving Logs](https://discuss.elastic.co/t/logstash-not-receiving-logs/257370)
**Author:** [@darkmatter](https://discuss.elastic.co/u/darkmatter)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-logs/257370 "2020-12-02T14:48:45Z")
I'm looking for a little help troubleshooting a LogStash Docker issues. I'm using Docker ELK and having trouble with Logstash receiving any data and more specifically syslog data. I've confirmed that the host is receivi… --- ## [Slow response time on Swiftype search](https://discuss.elastic.co/t/slow-response-time-on-swiftype-search/257189)
**Author:** [@petas](https://discuss.elastic.co/u/petas)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 2:33pm UTC](https://discuss.elastic.co/t/slow-response-time-on-swiftype-search/257189 "2020-12-02T14:33:57Z")
Hi, We are experiencing very slow response times from Swiftype. From our express app, we are using a very simple search query to Swiftype, and we get response times of 600-6000ms. This feels very unstable and slow. Do y… --- ## [Login problem after embeddding our Kibana Dashboard to an external site](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:31pm UTC](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878 "2020-12-02T14:31:34Z")
We have a login problem after embeddding our Kibana Dashboard to an external site. After copying the iFrame code of a dashboard and embeddding it, when we try to login into Kibana the login page just gets reloaded and i… --- ## [Docker compose how to enable read only mode?](https://discuss.elastic.co/t/docker-compose-how-to-enable-read-only-mode/257348)
**Author:** [@Christophvh](https://discuss.elastic.co/u/Christophvh)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 2:00pm UTC](https://discuss.elastic.co/t/docker-compose-how-to-enable-read-only-mode/257348 "2020-12-02T14:00:12Z")
Hi, I had a local working docker setup for version 7.9.3 I want want to upgrade to 7.10 I don't care for lost data I just want to upgrade on my local machine. The production setup is on cloud and is already updated. I … --- ## [ES 7.9.2 and mail notification](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 1:33pm UTC](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360 "2020-12-02T13:33:51Z")
HI Folks, I would like to test mail notification. here is the part of my elk.yml: xpack.notification.email: default\_account: exchange\_account account.exchange\_account.profile: outlook account.exchange\_account.ema… --- ## [Logstash pipelines - 2 simple questions](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306 "2020-12-02T13:12:25Z")
Hi there, I have 2 simple questions regarding logstash pipelines: Is it possible in a pipeline - if I made a change and need this change a filter e.g. to take effect - to restart only this single pipeline.id? Or can I… --- ## [Postgresql queries in ELK](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:43pm UTC](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371 "2020-12-02T12:43:23Z")
Hi, I installed metricbeat to provide metrics from postgresql and it works, but main goal was to analize queries in elastic and build dashboard for custom queries. As I started to configure, any statements from databas… --- ## [External alerts via API](https://discuss.elastic.co/t/external-alerts-via-api/257293)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:26pm UTC](https://discuss.elastic.co/t/external-alerts-via-api/257293 "2020-12-02T12:26:21Z")
Hi I am using the /detection\_engine/signals/search endpoint to grab detections but this endpoint doesn't include External alerts (eg. Crowdstrike). Is there an endpoint or other method to programmatically collect extern… --- ## [Logstash splitting and tagging events](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571)
**Author:** [@John\_Smith](https://discuss.elastic.co/u/John_Smith)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:02pm UTC](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571 "2020-12-02T12:02:15Z")
I need to ingest following json as separated events { "test1": {some nested json here}, "test2": {some nested json here}, "test3": {some nested json here}, "test4": {some nested json here} } I have 3 problems: When … --- ## [Index management](https://discuss.elastic.co/t/index-management/254724)
**Author:** [@antoteo](https://discuss.elastic.co/u/antoteo)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:00pm UTC](https://discuss.elastic.co/t/index-management/254724 "2020-12-02T12:00:38Z")
Hello i have a case that people will upload their dataset excels csvs and other with python. their data will have different types, i want them to be able to search from all data. I know create one index in every upload b… --- ## [Discover: Result window is too large, from + size must be less than or equal to: \[10000\]](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 11:44am UTC](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112 "2020-12-02T11:44:58Z")
Hi All, In an ES 6.8.6 cluster, I created an index pattern in Kibana and when I went to discover tab, I got the error Discover: Result window is too large, from + size must be less than or equal to: \[10000\] but was \[20… --- ## [Is there a good way to run benchmark to logstash on GKE?](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:37am UTC](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350 "2020-12-02T11:37:50Z")
Here is an official tool but seems old: https://github.com/elastic/logstash-benchmark-tools Google provides a way but for security: https://cloud.google.com/blog/products/containers-kubernetes/gke-cis-benchmarks-deliver… [Previous page](https://discuss.elastic.co/latest.md?page=1962) [Next page](https://discuss.elastic.co/latest.md?page=1964)