# Latest **URL:** https://discuss.elastic.co/latest.md?page=816 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 817 --- ## [Can not collect logs if I installed beats on local machine or azure vm](https://discuss.elastic.co/t/can-not-collect-logs-if-i-installed-beats-on-local-machine-or-azure-vm/323313)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 10:32am UTC](https://discuss.elastic.co/t/can-not-collect-logs-if-i-installed-beats-on-local-machine-or-azure-vm/323313 "2023-01-17T10:32:25Z")
Hi folks, I have issue for log collecting when I installed the beats on outside of AWS Ec2 instances. My log architecture is beats \>\> kafka (ec2 vm) \>\> logstash (ec2 vm) \>\> elastic cloud I can collect the logs if I i… --- ## [.alerts-security.alerts-default\* indice removed suddenly](https://discuss.elastic.co/t/alerts-security-alerts-default-indice-removed-suddenly/323434)
**Author:** [@raghiboon](https://discuss.elastic.co/u/raghiboon)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 10:03pm UTC](https://discuss.elastic.co/t/alerts-security-alerts-default-indice-removed-suddenly/323434 "2023-01-18T22:03:56Z")
Hi everybody. i just removed .alerts-security.alerts-default-0000 suddenly after i was working with rules and made my dashboards. is there a way to recreate it? because it gives me this error: Bulk indexing of signals… --- ## [Multipipeline configuration](https://discuss.elastic.co/t/multipipeline-configuration/323272)
**Author:** [@SaM9](https://discuss.elastic.co/u/SaM9)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 9:55pm UTC](https://discuss.elastic.co/t/multipipeline-configuration/323272 "2023-01-18T21:55:31Z")
How can I create a pipeline configuration in Logstash for two different logs that I'm receiving from syslog, the syslog auditd log and the web server log, and separate them to get different outputs? I have tried using an… --- ## [Limitations for Managed Logstash pipelines](https://discuss.elastic.co/t/limitations-for-managed-logstash-pipelines/323450)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 7:29pm UTC](https://discuss.elastic.co/t/limitations-for-managed-logstash-pipelines/323450 "2023-01-18T19:29:04Z")
Hello, I want to start using the managed pipelines in the Kibana GUI. From the documentation it is not really clear what the limitations are. As an example if you want to include a Ruby script I presume this script must… --- ## [Issue apm agent with backend requests username:password@url](https://discuss.elastic.co/t/issue-apm-agent-with-backend-requests-username-password-url/322903)
**Author:** [@Klauck](https://discuss.elastic.co/u/Klauck)\ **Replies:** 5\ **Last updated:** [January 18, 2023, 8:27pm UTC](https://discuss.elastic.co/t/issue-apm-agent-with-backend-requests-username-password-url/322903 "2023-01-18T20:27:49Z")
Hi, we are making a request to an external service with basic auth in the url e.g. like https://fooUser:fooPwd@url with apm agent not started this works very fine. with apm agent started we are getting an unauth from t… --- ## [Has anyone see/solved this kibana error?](https://discuss.elastic.co/t/has-anyone-see-solved-this-kibana-error/323325)
**Author:** [@mwitmer](https://discuss.elastic.co/u/mwitmer)\ **Replies:** 8\ **Last updated:** [January 18, 2023, 6:17pm UTC](https://discuss.elastic.co/t/has-anyone-see-solved-this-kibana-error/323325 "2023-01-18T18:17:34Z")
{"type":"log","@timestamp":"2023-01-17T13:02:00Z","tags":\["error","elasticsearch","data"\],"pid":818,"message":"\[ResponseError\]: Response Error"} Getting A LOT of these errors and the dashboards are not updating. --- ## [Unable to move the reports from Ansible to logstash](https://discuss.elastic.co/t/unable-to-move-the-reports-from-ansible-to-logstash/322977)
**Author:** [@janaka8](https://discuss.elastic.co/u/janaka8)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 6:03pm UTC](https://discuss.elastic.co/t/unable-to-move-the-reports-from-ansible-to-logstash/322977 "2023-01-18T18:03:46Z")
Team, We have a ansible setup in our environment and even are using a Kibana Dashboard for resporting purpose. We are getting below attached error while pushing the reports from ansible logs to kibana dashboard. { "co… --- ## [SQL Return Malformed (ignored\_field\_values)](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418)
**Author:** [@T\_Eckmann](https://discuss.elastic.co/u/T_Eckmann)\ **Replies:** 6\ **Last updated:** [January 18, 2023, 5:29pm UTC](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418 "2023-01-18T17:29:49Z")
Hopefully I am not missing anything stupid. But I am working on trying to return some data using the Elasticsearch SQL functions. So far no luck. The data I am trying to get can be found in the raw data as well as when … --- ## [Setting up apm-server](https://discuss.elastic.co/t/setting-up-apm-server/323039)
**Author:** [@divnoor\_singh](https://discuss.elastic.co/u/divnoor_singh)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 5:21pm UTC](https://discuss.elastic.co/t/setting-up-apm-server/323039 "2023-01-18T17:21:37Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 4:59pm UTC](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167 "2023-01-18T16:59:53Z")
Hi! After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails with the following error log: \[2022-12-29 16:51:55\] \[debug\] ( prunsrv.c:1994) \[ 8136\] Apache Commons… --- ## [Trying to recover snapshot](https://discuss.elastic.co/t/trying-to-recover-snapshot/323428)
**Author:** [@Monica\_majua](https://discuss.elastic.co/u/Monica_majua)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 4:35pm UTC](https://discuss.elastic.co/t/trying-to-recover-snapshot/323428 "2023-01-18T16:35:54Z")
Hello everyone, I'm new to this topic, it's my first time using elastic so I'm a bit lost and confused. I have migrated from ES (elasticsearch 7.17.6) to Opendistro (elasticsearch 7.10.2) but I took a snapshot first. Now… --- ## [Can't create cluster with 2 nodes on elasticsearch version 2.2.2](https://discuss.elastic.co/t/cant-create-cluster-with-2-nodes-on-elasticsearch-version-2-2-2/323350)
**Author:** [@KaZuKi\_Yashiro](https://discuss.elastic.co/u/KaZuKi_Yashiro)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 4:34pm UTC](https://discuss.elastic.co/t/cant-create-cluster-with-2-nodes-on-elasticsearch-version-2-2-2/323350 "2023-01-18T16:34:16Z")
Hello there! :slight\_smile: We have a single node of Elasticsearch version 2.2.2 and we decided to extend this cluster to two nodes, with replicas and so. But problem is that these two nodes doesn't see each other. =( … --- ## [Error loading Kibana Dashboard](https://discuss.elastic.co/t/error-loading-kibana-dashboard/323413)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 4:01pm UTC](https://discuss.elastic.co/t/error-loading-kibana-dashboard/323413 "2023-01-18T16:01:56Z")
{"statusCode":503,"error":"Service Unavailable","message":"License is not available."} I'm getting this error when I'm enabled XPACK Security to true. If it is false it is working like a charm. --- ## [\[Metrics System\] Overview dasboard is empty](https://discuss.elastic.co/t/metrics-system-overview-dasboard-is-empty/322613)
**Author:** [@tsykorii](https://discuss.elastic.co/u/tsykorii)\ **Replies:** 6\ **Last updated:** [January 18, 2023, 3:58pm UTC](https://discuss.elastic.co/t/metrics-system-overview-dasboard-is-empty/322613 "2023-01-18T15:58:34Z")
Hello! I want to use the \[Metrics System\] Overview stock dashboard from Metricbeat as a source. But it's empty, even when I use metricbeat-\* index pattern as default. How can I change the index for such visualizations… --- ## [Logs for APM Services get mixed up when hosted on same host](https://discuss.elastic.co/t/logs-for-apm-services-get-mixed-up-when-hosted-on-same-host/322540)
**Author:** [@Nanashi](https://discuss.elastic.co/u/Nanashi)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 11:50am UTC](https://discuss.elastic.co/t/logs-for-apm-services-get-mixed-up-when-hosted-on-same-host/322540 "2023-01-05T11:50:10Z")
Hello everyone, we are currently using Elastic Stack, Kibana etc in the version of 8.5.2 and are facing a weird issue with the logs View in the APM Views. If it matters, we are sending the logs with their transaction c… --- ## [Vulnerabilities in docker image elasticsearch/elasticsearch:7.17.8](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377)
**Author:** [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\ **Replies:** 5\ **Last updated:** [January 18, 2023, 2:55pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377 "2023-01-18T14:55:48Z")
Hi, we are using elasticsearch/elasticsearch:7.17.8 docker image. We are getting few CVEs reported as high with the vulnerabilities scanning report. CVE-2021-31684 -- nimbus-jose-jwt and json-smart CVE-2020-36518 -- … --- ## [Alert actions - how to kill process?](https://discuss.elastic.co/t/alert-actions-how-to-kill-process/323366)
**Author:** [@yak990](https://discuss.elastic.co/u/yak990)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 2:30pm UTC](https://discuss.elastic.co/t/alert-actions-how-to-kill-process/323366 "2023-01-18T14:30:15Z")
Several of these alert rules are severe enough that I would want to kill the process that generated the alert. Suspicious .NET Reflection via PowerShell would be an example. It would be nice to be able to kill the proc… --- ## [Elastic search aggregations](https://discuss.elastic.co/t/elastic-search-aggregations/323335)
**Author:** [@Pablo\_Cumpe](https://discuss.elastic.co/u/Pablo_Cumpe)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 2:10pm UTC](https://discuss.elastic.co/t/elastic-search-aggregations/323335 "2023-01-18T14:10:08Z")
Hi, Im working with Elasticsearch aggregations in an particular index. I have a dought if aggregations do a full scan of the index or only do o partial scan. Does anyone have an idea about this? --- ## [Ingestion of data to Elasticsearch using lostash with incremental data](https://discuss.elastic.co/t/ingestion-of-data-to-elasticsearch-using-lostash-with-incremental-data/323416)
**Author:** [@sriteja\_chebrolu](https://discuss.elastic.co/u/sriteja_chebrolu)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 2:02pm UTC](https://discuss.elastic.co/t/ingestion-of-data-to-elasticsearch-using-lostash-with-incremental-data/323416 "2023-01-18T14:02:52Z")
Hi All, I am ingesting data from SQL to Elastic cloud If i ingest a SQL table twice it is ingesting two times but I want to ingest only the new data Suppose if a table has 10 records at first ingestion after that 2 re… --- ## [How to set new logging configuration settings as environment variables in Kibana docker container](https://discuss.elastic.co/t/how-to-set-new-logging-configuration-settings-as-environment-variables-in-kibana-docker-container/323412)
**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 1:20pm UTC](https://discuss.elastic.co/t/how-to-set-new-logging-configuration-settings-as-environment-variables-in-kibana-docker-container/323412 "2023-01-18T13:20:18Z")
Hey there, we're running Kibana in a docker container and all configuration is provided via injected environment variables - hence we do not mount a kibana.yml file. As stated in the documentation, the "syntax" for the… --- ## [Keeping anomaly scoring constant](https://discuss.elastic.co/t/keeping-anomaly-scoring-constant/323365)
**Author:** [@emi\_rose](https://discuss.elastic.co/u/emi_rose)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 1:16pm UTC](https://discuss.elastic.co/t/keeping-anomaly-scoring-constant/323365 "2023-01-18T13:16:34Z")
Hi there, I'm currently trying to configure an advanced job that detects low counts or zero counts of documents by using low\_count by field1. I basically want the job to detect any abnormal behavior at all. Some attribu… --- ## [DateTime format in CSV report is not correct. 0's are being appended for nanos](https://discuss.elastic.co/t/datetime-format-in-csv-report-is-not-correct-0s-are-being-appended-for-nanos/322612)
**Author:** [@samee\_alam](https://discuss.elastic.co/u/samee_alam)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 12:17pm UTC](https://discuss.elastic.co/t/datetime-format-in-csv-report-is-not-correct-0s-are-being-appended-for-nanos/322612 "2023-01-18T12:17:48Z")
ES and kibana version v 7.17.3 When generating CSV report, datetime format is not correct. 0's are being appended for micro and nano seconds, although document holds correct values. Tried playing around with adva… --- ## [co.elastic.clients.json.JsonpMappingException: Error deserializing co.elastic.clients.elasticsearch.\_types.mapping.VersionProperty: Unknown field 'index'](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316)
**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 12:17pm UTC](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316 "2023-01-18T12:17:04Z")
Hi, When I tried to create an index containing a field of type: "version" or "geo\_point" with 'index' : true/false (sample input below) through the Java API client (7.17.7), I am getting the following exception. Could… --- ## [ES Build failure - resolve all task dependencies](https://discuss.elastic.co/t/es-build-failure-resolve-all-task-dependencies/322823)
**Author:** [@kvmprashanth](https://discuss.elastic.co/u/kvmprashanth)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 11:53am UTC](https://discuss.elastic.co/t/es-build-failure-resolve-all-task-dependencies/322823 "2023-01-18T11:53:56Z")
I am trying to build Elasticsearch from scratch using ./gradlew localDistro command on one of the latest releases. When I build on master it works. However, when I try to build from one of the tagged (v8.5.3 or even v7.1… --- ## [Indicator Match detection rules using Value Lists not working in 8.6.0](https://discuss.elastic.co/t/indicator-match-detection-rules-using-value-lists-not-working-in-8-6-0/323192)
**Author:** [@W24800](https://discuss.elastic.co/u/W24800)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 11:36am UTC](https://discuss.elastic.co/t/indicator-match-detection-rules-using-value-lists-not-working-in-8-6-0/323192 "2023-01-18T11:36:28Z")
Hello, when I create an Indicator Match detection rule using an uploaded value list (following instructions from Create a detection rule | Elastic Security Solution \[8.11\] | Elastic), the rule fails to execute with the f… --- ## [Joining a New ES search Node to a Bootstrapped Cluster](https://discuss.elastic.co/t/joining-a-new-es-search-node-to-a-bootstrapped-cluster/323378)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 10:27am UTC](https://discuss.elastic.co/t/joining-a-new-es-search-node-to-a-bootstrapped-cluster/323378 "2023-01-18T10:27:12Z")
Hello, Is there a way to join a new ES node to an already existing bootstrapped single node cluster that already contains data? I read on some other blog posts that for this to happen, I'll have to remove the data from … --- ## [Machine learning ML gestion de configuration/crash recovery](https://discuss.elastic.co/t/machine-learning-ml-gestion-de-configuration-crash-recovery/323400)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 10:17am UTC](https://discuss.elastic.co/t/machine-learning-ml-gestion-de-configuration-crash-recovery/323400 "2023-01-18T10:17:35Z")
Bonjour, Je fais tourner des machine learning jobs sur un cluster (anomaly detection. sur elastic cloud). En terme de développement des jobs, mon workflow est compliqué car je ne vois pas comment gérer facilement les v… --- ## ["No logs for this cluster"](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932)
**Author:** [@fus80677](https://discuss.elastic.co/u/fus80677)\ **Replies:** 15\ **Last updated:** [January 18, 2023, 8:59am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932 "2023-01-18T08:59:21Z")
I've been trying to set up logging for the Stack Monitoring page, but it just won't seem to work: I enabled the elasticsearch module in filebeat with this config: # Module: elasticsearch # Docs: https://www.elastic.c… --- ## [ElasticSearch Dockercompose with plugin not starting up](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523)
**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 8:48am UTC](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523 "2023-01-18T08:48:40Z")
Hi, I followed the article here to start a multi node cluster using docker compose. i also installed mapper-size plugin for each node, manually using command - docker exec es02 elasticsearch-plugin install mapper-size… --- ## [How to specify different index name rather than the default?](https://discuss.elastic.co/t/how-to-specify-different-index-name-rather-than-the-default/323391)
**Author:** [@baalchina](https://discuss.elastic.co/u/baalchina)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 8:42am UTC](https://discuss.elastic.co/t/how-to-specify-different-index-name-rather-than-the-default/323391 "2023-01-18T08:42:29Z")
Hello, guys, I already had a es cluster, and many data in it. Now I want to stor a new nginx's access/error log to my es with filebeat+nginx module. I want the index to be the a new name such as nginx-log-20230118, rath… [Previous page](https://discuss.elastic.co/latest.md?page=815) [Next page](https://discuss.elastic.co/latest.md?page=817)