# Latest **URL:** https://discuss.elastic.co/latest.md?page=797 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 798 --- ## [Logstash - Dateformat yyyyMMdd HHmmss](https://discuss.elastic.co/t/logstash-dateformat-yyyymmdd-hhmmss/324311)
**Author:** [@A.Klos](https://discuss.elastic.co/u/A.Klos)\ **Replies:** 3\ **Last updated:** [February 3, 2023, 2:08pm UTC](https://discuss.elastic.co/t/logstash-dateformat-yyyymmdd-hhmmss/324311 "2023-02-03T14:08:04Z")
Hi, I have still problem to get right timestamp in elastic. One Row of log looks like: 20210611 111146 SOME Date Field ... I tried: grok { match =\> \[ "message" , "%{DATA:timestamp}" \] } date { … --- ## [Index CSV Timestamp](https://discuss.elastic.co/t/index-csv-timestamp/324579)
**Author:** [@gabrile\_jaime\_gomez](https://discuss.elastic.co/u/gabrile_jaime_gomez)\ **Replies:** 6\ **Last updated:** [February 3, 2023, 1:06pm UTC](https://discuss.elastic.co/t/index-csv-timestamp/324579 "2023-02-03T13:06:11Z")
hello I want to index some csv files. I want to be indexed with the modification date, not with the date entered in Elastic. Example My file has a modification date of 01/23/2022, that is the date that I would like to… --- ## [Preparing Enterprise Search (Workplace and App Search) for Production](https://discuss.elastic.co/t/preparing-enterprise-search-workplace-and-app-search-for-production/324090)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 11:24am UTC](https://discuss.elastic.co/t/preparing-enterprise-search-workplace-and-app-search-for-production/324090 "2023-02-03T11:24:51Z")
Hi, I want to use Enterprise Search incl. Workplace and App Search at a large scale. Is there any documentation on how to prepare Enterprise Search for production? I know that there is such documentation for Kibana Kib… --- ## [Elastic cloud 8.6 read only role](https://discuss.elastic.co/t/elastic-cloud-8-6-read-only-role/324569)
**Author:** [@aneeshks1982](https://discuss.elastic.co/u/aneeshks1982)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 11:20am UTC](https://discuss.elastic.co/t/elastic-cloud-8-6-read-only-role/324569 "2023-02-03T11:20:06Z")
Hi, Can someone tell me how to create a read-only role in elastic cloud 8.6 version --- ## [Migrate Enterprise Search (Workplace and App Search) configuration between different environments (dev-\>test-\>stage-\>prod)](https://discuss.elastic.co/t/migrate-enterprise-search-workplace-and-app-search-configuration-between-different-environments-dev-test-stage-prod/324101)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 2\ **Last updated:** [February 3, 2023, 11:15am UTC](https://discuss.elastic.co/t/migrate-enterprise-search-workplace-and-app-search-configuration-between-different-environments-dev-test-stage-prod/324101 "2023-02-03T11:15:09Z")
Hi, I am planning a deployment process for Enterprise Search between different environments, starting at development and finalizing at production. My question is, how can I transport the all my configurations (App Sear… --- ## [Create data view api](https://discuss.elastic.co/t/create-data-view-api/324641)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 10:52am UTC](https://discuss.elastic.co/t/create-data-view-api/324641 "2023-02-03T10:52:23Z")
Hi I have filebeat installed on one machine. and elasticsearch and kibana on one machine. and logstash on another machine. I am using an ansible playbook which picks logs using filebeat and ships it to logstash. Eevryth… --- ## [Auditbeat : couldn't connect to any of the configured Elasticsearch hosts](https://discuss.elastic.co/t/auditbeat-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/324640)
**Author:** [@rajith\_pathiraja](https://discuss.elastic.co/u/rajith_pathiraja)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 10:46am UTC](https://discuss.elastic.co/t/auditbeat-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/324640 "2023-02-03T10:46:57Z")
Im configuring ELK SIEM and im unable to run complete " sudo auditbeat -e setup " as im getting following error Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasti… --- ## [Create multiple index str in filebeat and send logs to them with successfully rolover to next index](https://discuss.elastic.co/t/create-multiple-index-str-in-filebeat-and-send-logs-to-them-with-successfully-rolover-to-next-index/324636)
**Author:** [@Ananya](https://discuss.elastic.co/u/Ananya)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 10:18am UTC](https://discuss.elastic.co/t/create-multiple-index-str-in-filebeat-and-send-logs-to-them-with-successfully-rolover-to-next-index/324636 "2023-02-03T10:18:30Z")
Hello, I am trying to implement ilm policy. I have multiple index str so I create multiple aliases with their respective bootstrapping index to support them and set is\_write\_index to true. The logs flow to the bootstrap… --- ## [Can't add Integrations to agents](https://discuss.elastic.co/t/cant-add-integrations-to-agents/324512)
**Author:** [@NathanLau](https://discuss.elastic.co/u/NathanLau)\ **Replies:** 8\ **Last updated:** [February 3, 2023, 10:04am UTC](https://discuss.elastic.co/t/cant-add-integrations-to-agents/324512 "2023-02-03T10:04:02Z")
Hi , I have a problem with can't add integration with agents. Now sure is it kibana cannot get the integration or other not updated. let see the img as below. Please help Thanks. --- ## [Create elastic user with more roles](https://discuss.elastic.co/t/create-elastic-user-with-more-roles/324632)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 9:31am UTC](https://discuss.elastic.co/t/create-elastic-user-with-more-roles/324632 "2023-02-03T09:31:12Z")
As part of bootstrap, Can we create the builtin user "elastic" with providing more roles other than superuser role When elastic user gets created it is assigned with super user role. I need to assign few more privilege… --- ## [Logstash cann not read encrypted key](https://discuss.elastic.co/t/logstash-cann-not-read-encrypted-key/324629)
**Author:** [@AfeefGhannam](https://discuss.elastic.co/u/AfeefGhannam)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 9:23am UTC](https://discuss.elastic.co/t/logstash-cann-not-read-encrypted-key/324629 "2023-02-03T09:23:26Z")
Hi, when we create an encrypted and compatible Logstash key, Logstash can not read the key and give the following error in log: message=\>"File does not contain valid private key: /etc/logstash/certs/logstash-pkcs8.key"… --- ## [S3 optimization in elk](https://discuss.elastic.co/t/s3-optimization-in-elk/324298)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 22\ **Last updated:** [February 3, 2023, 9:03am UTC](https://discuss.elastic.co/t/s3-optimization-in-elk/324298 "2023-02-03T09:03:39Z")
Hi , We have a 8 node cluster in on premise with 3 years data (3 master + 5 data node) one data node out of this being acting as s3 for cold storage. Our s3 is getting space issues and we would like to optimize by mov… --- ## [Elastic Case Insensitive Search](https://discuss.elastic.co/t/elastic-case-insensitive-search/324527)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 12\ **Last updated:** [February 3, 2023, 8:19am UTC](https://discuss.elastic.co/t/elastic-case-insensitive-search/324527 "2023-02-03T08:19:06Z")
Hi All, I have a schema which uses Keywords to store values an example of a document would be something like this: We aggregate on a number of properties too such as make/model/colour/condition etc { "properties": {… --- ## [Not all primary shards of \[.geoip\_databases\] index are active](https://discuss.elastic.co/t/not-all-primary-shards-of-geoip-databases-index-are-active/324401)
**Author:** [@LiuJintao](https://discuss.elastic.co/u/LiuJintao)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 8:51am UTC](https://discuss.elastic.co/t/not-all-primary-shards-of-geoip-databases-index-are-active/324401 "2023-02-03T08:51:36Z")
When I start elasticsearch cluster with a single node,it throw an error: \[2023-02-01T15:34:09,249\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node1\] exception during geoip databases updateorg.elasticsearch.ElasticsearchExceptio… --- ## [Bertopic in Elasticsearch](https://discuss.elastic.co/t/bertopic-in-elasticsearch/324617)
**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 8:35am UTC](https://discuss.elastic.co/t/bertopic-in-elasticsearch/324617 "2023-02-03T08:35:12Z")
Hello, I have been training a BERTopic model and I would like to know if there is a way to import it into Elastic. I've seen that some models can be imported with Eland API but I'm not sure if this could be done. Berto… --- ## [Logging in to Kibana 8 without security for LDAP auth ES cluster](https://discuss.elastic.co/t/logging-in-to-kibana-8-without-security-for-ldap-auth-es-cluster/324250)
**Author:** [@Chel](https://discuss.elastic.co/u/Chel)\ **Replies:** 10\ **Last updated:** [February 3, 2023, 7:47am UTC](https://discuss.elastic.co/t/logging-in-to-kibana-8-without-security-for-ldap-auth-es-cluster/324250 "2023-02-03T07:47:07Z")
Hi, We have 8.5.2 cluster running with LDAP authentication(xpack security) with basic license. Earlier Versions of Kibana in 7.x we use the same username and password of elastic to login to kibana but in 8.x versions lo… --- ## [Copy a remote index using Reindex API](https://discuss.elastic.co/t/copy-a-remote-index-using-reindex-api/324548)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 7:47am UTC](https://discuss.elastic.co/t/copy-a-remote-index-using-reindex-api/324548 "2023-02-03T07:47:00Z")
Hi, I have a running Elastic node with an index. I'm constantly inserting documents into the index in a process that I can't stop. The whole process is running in a remote server. I need to make a copy of the index into… --- ## [Kibana: FATAL Error: error:0909006C:PEM routines:get\_name:no start line](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595)
**Author:** [@candy609](https://discuss.elastic.co/u/candy609)\ **Replies:** 1\ **Last updated:** [February 3, 2023, 7:34am UTC](https://discuss.elastic.co/t/kibana-fatal-error-errorpem-routinesno-start-line/324595 "2023-02-03T07:34:04Z")
Environment: Centos 7 ES verion: 7.17.8 Kibana: 7.17.8 I created a 3 nodes Elastic-cluster with xpack-security configured. I then add Kibana, Elasticseach \<-\> Kibana SSL is working, certificates were generated using e… --- ## [Elastic search does not work during operation, causing problems in restarting](https://discuss.elastic.co/t/elastic-search-does-not-work-during-operation-causing-problems-in-restarting/324556)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 3\ **Last updated:** [February 3, 2023, 7:22am UTC](https://discuss.elastic.co/t/elastic-search-does-not-work-during-operation-causing-problems-in-restarting/324556 "2023-02-03T07:22:33Z")
\[2023-02-02T18:22:39,230\]\[INFO \]\[o.e.e.NodeEnvironment \] \[name\] using \[1\] data paths, mounts \[\[/data (/dev/data)\]\], net usable\_space \[55.9gb\], net total\_space \[98.4gb\], types \[ext4\] \[2023-02-02T18:22:39,231\]\[INFO \]\[o.… --- ## [Search returning zero document and zero shards | Index was closed and then opened](https://discuss.elastic.co/t/search-returning-zero-document-and-zero-shards-index-was-closed-and-then-opened/324603)
**Author:** [@esuser27](https://discuss.elastic.co/u/esuser27)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 6:42am UTC](https://discuss.elastic.co/t/search-returning-zero-document-and-zero-shards-index-was-closed-and-then-opened/324603 "2023-02-03T06:42:05Z")
Hi Folks, I had closed few of my indices for maintenance activity and I opened them after some time. Health wise the index is green and has a shard, but my search query is getting empty results even though there are do… --- ## [Which privilege is necessary for creation of runtime field](https://discuss.elastic.co/t/which-privilege-is-necessary-for-creation-of-runtime-field/324507)
**Author:** [@shinki927](https://discuss.elastic.co/u/shinki927)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 6:17am UTC](https://discuss.elastic.co/t/which-privilege-is-necessary-for-creation-of-runtime-field/324507 "2023-02-03T06:17:46Z")
Hello, I'd like to know which cluster and index privilege are needed to create runtime field. I didn't find it in the doc. Thanks in advance --- ## [I am also facing the same issue, did someone found the solution or workaround for this](https://discuss.elastic.co/t/i-am-also-facing-the-same-issue-did-someone-found-the-solution-or-workaround-for-this/324342)
**Author:** [@mohit\_bairagi](https://discuss.elastic.co/u/mohit_bairagi)\ **Replies:** 1\ **Last updated:** [February 3, 2023, 3:50am UTC](https://discuss.elastic.co/t/i-am-also-facing-the-same-issue-did-someone-found-the-solution-or-workaround-for-this/324342 "2023-02-03T03:50:27Z")
Continuing the discussion from S3 Input Plugin Following Errors Execution Expired and Net::OpenTimeout: --- ## [How to collect multiline java stack traces from docker container stout](https://discuss.elastic.co/t/how-to-collect-multiline-java-stack-traces-from-docker-container-stout/324497)
**Author:** [@JocelynFloresz](https://discuss.elastic.co/u/JocelynFloresz)\ **Replies:** 2\ **Last updated:** [February 3, 2023, 3:21am UTC](https://discuss.elastic.co/t/how-to-collect-multiline-java-stack-traces-from-docker-container-stout/324497 "2023-02-03T03:21:09Z")
Commonly I can use the below pattern to collect logs from multiline. multiline.pattern: '^\[\[:space:\]\]+(at|\\.{3})\[\[:space:\]\]+\\b|^Caused by:' multiline.negate: false multiline.match: after But in my use case,… --- ## [Failed to find a X509ExtendedTrustManager](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager/324593)
**Author:** [@hitlll](https://discuss.elastic.co/u/hitlll)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 2:35am UTC](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager/324593 "2023-02-03T02:35:36Z")
Environment : Dokcer Image elasticsearch-7.17.8 JDK: openjdk:8u342-jdk How should I solve the problem？ --- ## [Logstash ruby filter](https://discuss.elastic.co/t/logstash-ruby-filter/324590)
**Author:** [@sheetal3](https://discuss.elastic.co/u/sheetal3)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 2:20am UTC](https://discuss.elastic.co/t/logstash-ruby-filter/324590 "2023-02-03T02:20:15Z")
Getting Error: \[2023-02-02T19:25:48,535\]\[ERROR\]\[logstash.filters.ruby \]\[main\]\[b7126651d97050c2a450765cb1ad946624dc0b4a1ea72baecc762eb17b892bdd\] Ruby exception occurred: undefined method each' for #\ … --- ## [Nested Aggregation to just get some nested type without aggregatioon](https://discuss.elastic.co/t/nested-aggregation-to-just-get-some-nested-type-without-aggregatioon/324588)
**Author:** [@Jason\_Yu1](https://discuss.elastic.co/u/Jason_Yu1)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 1:59am UTC](https://discuss.elastic.co/t/nested-aggregation-to-just-get-some-nested-type-without-aggregatioon/324588 "2023-02-03T01:59:06Z")
I am not sure if is that possible. We have a set of documents with the same testId, and each set of those docs, always only have 1 of them has the frames nested type. So I want to do the aggression with the data, there … --- ## [Synthetic browser tests are failing in Version 7.x](https://discuss.elastic.co/t/synthetic-browser-tests-are-failing-in-version-7-x/324440)
**Author:** [@lawrance.ruban](https://discuss.elastic.co/u/lawrance.ruban)\ **Replies:** 14\ **Last updated:** [February 2, 2023, 11:55pm UTC](https://discuss.elastic.co/t/synthetic-browser-tests-are-failing-in-version-7-x/324440 "2023-02-02T23:55:44Z")
We are using 7.16.x ELK version in production and Dev environment and we are running heartbeat docker container v7.17.x for uptime monitoring. The http tests are working but the browser tests are failing with below error… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/322684)
**Author:** [@magen\_lahat](https://discuss.elastic.co/u/magen_lahat)\ **Replies:** 31\ **Last updated:** [February 2, 2023, 9:16pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/322684 "2023-02-02T21:16:29Z")
hello, im a new user to elasticsearch and hoping to explore it further for my project, So I just installed elasticsearch and kibana on my ubuntu and im getting "Kibana server is not ready yet." after runnig http://loca… --- ## [Issue in Controls](https://discuss.elastic.co/t/issue-in-controls/320882)
**Author:** [@moep](https://discuss.elastic.co/u/moep)\ **Replies:** 27\ **Last updated:** [February 2, 2023, 7:06pm UTC](https://discuss.elastic.co/t/issue-in-controls/320882 "2023-02-02T19:06:34Z")
Dear Community, Im running Kibana 8.4.3 and I noticed a deprecation warning. So I used the new way for Controls. I have two fields, where I can add email addresses (sender and recipient). When Im looking for "jira@" th… --- ## [Create 1 alert monitor for missing logs on multiple index](https://discuss.elastic.co/t/create-1-alert-monitor-for-missing-logs-on-multiple-index/324526)
**Author:** [@crimson589](https://discuss.elastic.co/u/crimson589)\ **Replies:** 1\ **Last updated:** [February 2, 2023, 6:47pm UTC](https://discuss.elastic.co/t/create-1-alert-monitor-for-missing-logs-on-multiple-index/324526 "2023-02-02T18:47:11Z")
v7.8.0 I have a monitor setup on one index that basically checks if the count of a log is not 0 for the past 10 minutes. I just pick one index and setup the query like below. I set the trigger condition to (ctx.results\[… [Previous page](https://discuss.elastic.co/latest.md?page=796) [Next page](https://discuss.elastic.co/latest.md?page=798)