# Latest **URL:** https://discuss.elastic.co/latest.md?page=1985 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1986 --- ## [Stack Monitoring shows "No monitoring data found"](https://discuss.elastic.co/t/stack-monitoring-shows-no-monitoring-data-found/254502)
**Author:** [@kavier](https://discuss.elastic.co/u/kavier)\ **Replies:** 6\ **Last updated:** [November 21, 2020, 4:21am UTC](https://discuss.elastic.co/t/stack-monitoring-shows-no-monitoring-data-found/254502 "2020-11-21T04:21:26Z")
Hi all, Our Single Node Elastic Stack's Stack Monitoring was working all along and stopped working suddenly. We've took a look at https://github.com/elastic/kibana/issues/33760 but not much information obtained too. W… --- ## [How to migrate elastic version 5.6.5?](https://discuss.elastic.co/t/how-to-migrate-elastic-version-5-6-5/255313)
**Author:** [@balainit](https://discuss.elastic.co/u/balainit)\ **Replies:** 6\ **Last updated:** [November 21, 2020, 4:14am UTC](https://discuss.elastic.co/t/how-to-migrate-elastic-version-5-6-5/255313 "2020-11-21T04:14:20Z")
Hi everyone, how to migrate 57 nodes and 58 nodes to the new one, the data volume is 1T, thank you all --- ## [How to change kibana's password complexity setting](https://discuss.elastic.co/t/how-to-change-kibanas-password-complexity-setting/256209)
**Author:** [@shawn\_sun](https://discuss.elastic.co/u/shawn_sun)\ **Replies:** 1\ **Last updated:** [November 21, 2020, 2:51am UTC](https://discuss.elastic.co/t/how-to-change-kibanas-password-complexity-setting/256209 "2020-11-21T02:51:35Z")
Such as title, I need to improve the PASSWORD Complexity of the kibana user. my kibana is Basic license，if there have any method meet the need. defalt setting just 6 characters: --- ## [GROK Date/time filter not working](https://discuss.elastic.co/t/grok-date-time-filter-not-working/256201)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 2\ **Last updated:** [November 21, 2020, 2:26am UTC](https://discuss.elastic.co/t/grok-date-time-filter-not-working/256201 "2020-11-21T02:26:20Z")
Getting logstash failure when parsing the date/time stamp from my log. This seems to work in the GROK Debugger but fails when logstash filters it. Can someone please help to filter the date/time stamp into "date"? In GR… --- ## [How to handle gaps in date histogram (missing values) in Kibana and Elastic Search?](https://discuss.elastic.co/t/how-to-handle-gaps-in-date-histogram-missing-values-in-kibana-and-elastic-search/255430)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 11:07pm UTC](https://discuss.elastic.co/t/how-to-handle-gaps-in-date-histogram-missing-values-in-kibana-and-elastic-search/255430 "2020-11-20T23:07:30Z")
Our indices have missing values from time to time, and when that happens, what I’d like to see in date histogram plots is to simply ignore missing values and connect the lines before and after. Please see this example pl… --- ## [ES 7.10 ignores analyzer in "as\_you\_type" fields](https://discuss.elastic.co/t/es-7-10-ignores-analyzer-in-as-you-type-fields/256113)
**Author:** [@\_ZN3val](https://discuss.elastic.co/u/_ZN3val)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 10:06pm UTC](https://discuss.elastic.co/t/es-7-10-ignores-analyzer-in-as-you-type-fields/256113 "2020-11-20T22:06:14Z")
Hello, Since an upgrade from 7.9 to 7.10, ES tokenizes "as\_you\_type" fields with a "simple" analyzer differently, causing less results to be returned. While this analyzer should split on any non-letter, it stopped split… --- ## [WinlogBeat shipping custom event log to ES, Parsing woes](https://discuss.elastic.co/t/winlogbeat-shipping-custom-event-log-to-es-parsing-woes/256186)
**Author:** [@SigmazGFX](https://discuss.elastic.co/u/SigmazGFX)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 7:58pm UTC](https://discuss.elastic.co/t/winlogbeat-shipping-custom-event-log-to-es-parsing-woes/256186 "2020-11-20T19:58:46Z")
Hey gang.. Some of our devs have been working on Application API's and are using windows events to store errors and audits and the like. I have winlogbeat picking up these events and shipping them into the winlogbeat-\* … --- ## [Group by and sum](https://discuss.elastic.co/t/group-by-and-sum/256190)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 9:20pm UTC](https://discuss.elastic.co/t/group-by-and-sum/256190 "2020-11-20T21:20:16Z")
hi all and sorry for my poor english I tried with no success to create an aggregation query that group hits by a field "category" and get a sum of field "eventCount". Please help --- ## [QueueResizingEsThreadPoolExecutor exception](https://discuss.elastic.co/t/queueresizingesthreadpoolexecutor-exception/256189)
**Author:** [@Igor\_Domshchikov](https://discuss.elastic.co/u/Igor_Domshchikov)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 9:04pm UTC](https://discuss.elastic.co/t/queueresizingesthreadpoolexecutor-exception/256189 "2020-11-20T21:04:28Z")
At some point during 35k endurance load test of my java web app which fetches static data from Elasticsearch, I am start getting following elasticsearch exception: Caused by: org.elasticsearch.common.util.concurrent.EsR… --- ## [Using custom JVM options files in jvm.options.d/ shows duplicate JVM args](https://discuss.elastic.co/t/using-custom-jvm-options-files-in-jvm-options-d-shows-duplicate-jvm-args/256188)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 8:43pm UTC](https://discuss.elastic.co/t/using-custom-jvm-options-files-in-jvm-options-d-shows-duplicate-jvm-args/256188 "2020-11-20T20:43:42Z")
I have a custom.options file in my config/jvm.options.d/ directory with the following contents: -Xms2g -Xmx2g When looking at the running Elasticsearch process, I see that there are two sets of command line parameters … --- ## [MetricBeat Logstash Monitoring Error](https://discuss.elastic.co/t/metricbeat-logstash-monitoring-error/256048)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 8:21pm UTC](https://discuss.elastic.co/t/metricbeat-logstash-monitoring-error/256048 "2020-11-20T20:21:15Z")
Running Elastic Stack 7.10.0 and am trying to modernize the monitoring by implementing Metricbeat. Elasticsearch and Kibana run on one server and logstash is running on a different server. I've got both Elasticsearch a… --- ## [Painless forEach + Replace failing](https://discuss.elastic.co/t/painless-foreach-replace-failing/256058)
**Author:** [@ramiriskis](https://discuss.elastic.co/u/ramiriskis)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 7:03pm UTC](https://discuss.elastic.co/t/painless-foreach-replace-failing/256058 "2020-11-20T19:03:46Z")
Hi guys, I'm trying to write a script within watcher that applies a transform to each log before sending it through slack. My current script is like this: "script": { "source": """ ctx… --- ## [Logstash not sending data to elastic](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic/256176)
**Author:** [@DedSec](https://discuss.elastic.co/u/DedSec)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 6:50pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic/256176 "2020-11-20T18:50:15Z")
Hello, I have a logstash file and when I am running the command sudo logstash -f bug.conf logstash starts but there is no data in ELK This is my bug.conf file: input { file { path =\> "/Users/siddharth/Desktop/program… --- ## [Filter with criteria before sum aggregation](https://discuss.elastic.co/t/filter-with-criteria-before-sum-aggregation/256051)
**Author:** [@erv](https://discuss.elastic.co/u/erv)\ **Replies:** 0\ **Last updated:** [November 19, 2020, 11:17pm UTC](https://discuss.elastic.co/t/filter-with-criteria-before-sum-aggregation/256051 "2020-11-19T23:17:35Z")
Hey everyone! I'm having a hard time with the following issue. Suppose I have the following three documents: { "entity\_id": "A", "stringField1": "SF1A", "stringField2": "SF2", "numericField": 10, … --- ## [Filebeat connect with Kafka Kerberos(SASL\_SSL) not working](https://discuss.elastic.co/t/filebeat-connect-with-kafka-kerberos-sasl-ssl-not-working/256175)
**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 6:46pm UTC](https://discuss.elastic.co/t/filebeat-connect-with-kafka-kerberos-sasl-ssl-not-working/256175 "2020-11-20T18:46:28Z")
Continuing the discussion from \[Filebeat connect with Kafka Kerberos(SASL\_SSL) not working\](https://discuss.elastic.co/t/filebeat-connect-with-kafka-kerberos-sasl-ssl-not-working/246160/10): @ascherbakov686, can you ple… --- ## [Get a link to single document page in Discover section in Kibana](https://discuss.elastic.co/t/get-a-link-to-single-document-page-in-discover-section-in-kibana/256126)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 6:25pm UTC](https://discuss.elastic.co/t/get-a-link-to-single-document-page-in-discover-section-in-kibana/256126 "2020-11-20T18:25:33Z")
I am building a search page for a web application that is backed with Elasticsearch. In that web app I want to let the user search and filter the data and the result of the search should show some fields of the documents… --- ## [Date Joda parse does not work](https://discuss.elastic.co/t/date-joda-parse-does-not-work/256163)
**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 5:58pm UTC](https://discuss.elastic.co/t/date-joda-parse-does-not-work/256163 "2020-11-20T17:58:53Z")
Hi, I am trying to parse date to field @timestamp. My timestamp looks like below: "Timestamp" : "11/20/2020 3:32:01 PM" I tried: date { match =\> \[ "Timestamp", "MM/dd/yyyy HH:mm:ss a" \] remove\_field =\> \["Timestamp"\] … --- ## [Unable to do Cross Cluster Searching in AWS with Instances in Separate Regions](https://discuss.elastic.co/t/unable-to-do-cross-cluster-searching-in-aws-with-instances-in-separate-regions/252707)
**Author:** [@jim1](https://discuss.elastic.co/u/jim1)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 5:53pm UTC](https://discuss.elastic.co/t/unable-to-do-cross-cluster-searching-in-aws-with-instances-in-separate-regions/252707 "2020-11-20T17:53:08Z")
Hello, I have two clusters installed on EC2 instances in separate regions in AWS. I am trying to use the cross cluster search feature in order to query both clusters from one central location. When I try to connect to t… --- ## [Setting up Enterprise Search with cloudflare SSL](https://discuss.elastic.co/t/setting-up-enterprise-search-with-cloudflare-ssl/256119)
**Author:** [@z.nader](https://discuss.elastic.co/u/z.nader)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 2:16pm UTC](https://discuss.elastic.co/t/setting-up-enterprise-search-with-cloudflare-ssl/256119 "2020-11-20T14:16:22Z")
Hello everyone, I am trying to setup enterprise search on a Ubuntu 18.04 with Apache2 the domain is proxied using cloudflare and so is the SSL certification. I am using a PEM certificate. I have tried to tell entrepri… --- ## [Logstash add @version which is not in the original document](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144)
**Author:** [@amralieg](https://discuss.elastic.co/u/amralieg)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 4:23pm UTC](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144 "2020-11-20T16:23:04Z")
Hi, I have this logstash config that moves data between 2 elasticsearch, when I run it I get this error, any idea how to solve this? input { elasticsearch { hosts =\> \["\"\] user =\> "\*\*" … --- ## [Logstash imap plugin read a lot of Duplication email](https://discuss.elastic.co/t/logstash-imap-plugin-read-a-lot-of-duplication-email/256150)
**Author:** [@shawn\_sun](https://discuss.elastic.co/u/shawn_sun)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 3:59pm UTC](https://discuss.elastic.co/t/logstash-imap-plugin-read-a-lot-of-duplication-email/256150 "2020-11-20T15:59:28Z")
version： logstash7.8.0 and elasticsearch7.8.0 When I use Logstash imap input plugin to read email from IMAP server，The elasticsearch recive many repeat email this is logstash.conf input { imap { host =\> "imap.ma… --- ## [Dashboard Creation Restrictions](https://discuss.elastic.co/t/dashboard-creation-restrictions/255849)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 3:58pm UTC](https://discuss.elastic.co/t/dashboard-creation-restrictions/255849 "2020-11-20T15:58:51Z")
Hi, I am wanting to create two groups of users. Can create Dashboards but not delete any Can use others Dashboards but not create/delete any Both groups should only see the dashboards created by for them by admin or … --- ## [Match single keyword search term against multiple index keywords](https://discuss.elastic.co/t/match-single-keyword-search-term-against-multiple-index-keywords/256145)
**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 3:41pm UTC](https://discuss.elastic.co/t/match-single-keyword-search-term-against-multiple-index-keywords/256145 "2020-11-20T15:41:06Z")
We are looking to match a search term keyword against multiple keywords in the index. For example if someone searches on "1780pixel" the intention would be that this matches both the keywords "1780" and "pixel" in the i… --- ## [Parsing Windows DHCP Logs with Filebeat Microsoft Module](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/254814)
**Author:** [@kkojouri](https://discuss.elastic.co/u/kkojouri)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 3:22pm UTC](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/254814 "2020-11-20T15:22:33Z")
Hello, We're trying to use the new microsoft.yml module in Filebeat 7.9.0 to ingest and parse Windows DHCP logs. The configuration seems pretty straightfoward, we just pointed it to the default C:\\Windows\\System32\\dhcp\\… --- ## [How to find problematic search which contributes to high load and CPU usages?](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 10\ **Last updated:** [November 20, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091 "2020-11-20T15:21:51Z")
Recently our cluster has seen spikes of high load on some nodes. My hunch is that it has to do with some specific searches, but how do you determine which searches are causing it? I have seen some posts here saying that… --- ## [Filebeat removed, but still logging](https://discuss.elastic.co/t/filebeat-removed-but-still-logging/255956)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-removed-but-still-logging/255956 "2020-11-20T15:18:53Z")
I wanted to uninstall Filebeat (since I'm not there yet), so I did sudo yum remove filebeat. Successful. However, there are still logs generted as below. How come filebeat generate logs when it's uninstalled? 2020-11-1… --- ## [How to use apm.setUserContext in Angular with the logged in user info](https://discuss.elastic.co/t/how-to-use-apm-setusercontext-in-angular-with-the-logged-in-user-info/256110)
**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 3:13pm UTC](https://discuss.elastic.co/t/how-to-use-apm-setusercontext-in-angular-with-the-logged-in-user-info/256110 "2020-11-20T15:13:11Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Angular 8 Hi, I'm trying to use the Angular Rum agent for a frontend application. It's working and sendin… --- ## [How to generate certificate to enable alerting in Kibana?](https://discuss.elastic.co/t/how-to-generate-certificate-to-enable-alerting-in-kibana/255658)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 3:08pm UTC](https://discuss.elastic.co/t/how-to-generate-certificate-to-enable-alerting-in-kibana/255658 "2020-11-20T15:08:29Z")
Hi, As documented here, I understand that there are 3 main steps / prerequisites to enable alerting in Kibana; Set up Kibana to work with Elastic Stack security features. Set up TLS encryption between Kibana and Ela… --- ## [Enable Xpack on Docker single node, getting "You do not have permission to access the requested page"](https://discuss.elastic.co/t/enable-xpack-on-docker-single-node-getting-you-do-not-have-permission-to-access-the-requested-page/255911)
**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 3:08pm UTC](https://discuss.elastic.co/t/enable-xpack-on-docker-single-node-getting-you-do-not-have-permission-to-access-the-requested-page/255911 "2020-11-20T15:08:10Z")
I followed the example laid out here. https://github.com/elastic/stack-docs/blob/master/docs/en/getting-started/get-started-docker.asciidoc Had to make a couple of modifications due to only wanting a single node. I will… --- ## [Elasticsearch hadpop error :java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.spark.serialization.ScalaMetadataExtractor](https://discuss.elastic.co/t/elasticsearch-hadpop-error-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-spark-serialization-scalametadataextractor/256136)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-hadpop-error-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-spark-serialization-scalametadataextractor/256136 "2020-11-20T15:00:52Z")
Receiving following error after upgrading to spark 3.0.0 with any of the version of elasticsearch-hadoop jar \ \org.elasticsearch\ \elasticsearch-hadoop\