# Latest **URL:** https://discuss.elastic.co/latest.md?page=819 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 820 --- ## [TSDS - manual rollover](https://discuss.elastic.co/t/tsds-manual-rollover/323227)
**Author:** [@Sako](https://discuss.elastic.co/u/Sako)\ **Replies:** 0\ **Last updated:** [January 16, 2023, 8:17am UTC](https://discuss.elastic.co/t/tsds-manual-rollover/323227 "2023-01-16T08:17:18Z")
Hi, I try to use Timeseries Data Streams (TSDS) for telemetry data from network devices to use the new downsampling features later on. I also use ILM to automate the rollover and lifecycle for the TSDS. Under certain c… --- ## [Will this thing work regarding updation of Kibana dashboard through python](https://discuss.elastic.co/t/will-this-thing-work-regarding-updation-of-kibana-dashboard-through-python/323298)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 7:12am UTC](https://discuss.elastic.co/t/will-this-thing-work-regarding-updation-of-kibana-dashboard-through-python/323298 "2023-01-17T07:12:27Z")
This is a code that I wrote by taking references from many sites: import requests headers = { 'Content-Type': 'application/json', 'kbn-version': '8.4.1' } data = { "options": { "query": { … --- ## [How to set kibana basePath on cloud kibana instance](https://discuss.elastic.co/t/how-to-set-kibana-basepath-on-cloud-kibana-instance/323291)
**Author:** [@dinesh.mandrekar](https://discuss.elastic.co/u/dinesh.mandrekar)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 7:09am UTC](https://discuss.elastic.co/t/how-to-set-kibana-basepath-on-cloud-kibana-instance/323291 "2023-01-17T07:09:55Z")
kibana instance on cloud elastic does not allow setting basePath in kibana user settings. Is there an alternate solution for this? --- ## [Logstash Mutate Convert Not Working](https://discuss.elastic.co/t/logstash-mutate-convert-not-working/323289)
**Author:** [@Johanes\_Mistrialdo](https://discuss.elastic.co/u/Johanes_Mistrialdo)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 6:18am UTC](https://discuss.elastic.co/t/logstash-mutate-convert-not-working/323289 "2023-01-17T06:18:41Z")
Hi All, I've created logstash ruby filter like this (ignore my val.each loop, I'm tring to convert all field to string): However, I still cannot convert my field to string (the field is showed as date field): My … --- ## [Can I create a index in the WARM Phase directly with Elastic ILM](https://discuss.elastic.co/t/can-i-create-a-index-in-the-warm-phase-directly-with-elastic-ilm/323224)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 5:00am UTC](https://discuss.elastic.co/t/can-i-create-a-index-in-the-warm-phase-directly-with-elastic-ilm/323224 "2023-01-17T05:00:20Z")
I am indexing my data using ILM Policy and Indexing Template. So, the index moves from one Phase to another(Hot, Warm , Cold and Delete) after the completion of assigned time period for that Phase. Now, I got a requirem… --- ## [Kibana security\_exception Error](https://discuss.elastic.co/t/kibana-security-exception-error/323215)
**Author:** [@vibuverma07](https://discuss.elastic.co/u/vibuverma07)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 4:54am UTC](https://discuss.elastic.co/t/kibana-security-exception-error/323215 "2023-01-17T04:54:27Z")
Getting this error on Kibana 8.5.2 \[ERROR\]\[http\] ResponseError: security\_exception: \[security\_exception\] Reason: action \[indices:admin/resolve/index\] is unauthorized for user \[temporarykibanasuperuser\] with effective ro… --- ## [E-Commerce Search Engine - Per User Data](https://discuss.elastic.co/t/e-commerce-search-engine-per-user-data/323265)
**Author:** [@panko](https://discuss.elastic.co/u/panko)\ **Replies:** 3\ **Last updated:** [January 17, 2023, 4:15am UTC](https://discuss.elastic.co/t/e-commerce-search-engine-per-user-data/323265 "2023-01-17T04:15:30Z")
Hello, We do something like a typical e-commerce platform with custom product search based on Elasticsearch (a service which simply send queries to Elasticsearch). Our product search service worked flawlessly, but recen… --- ## [Winlogbeat Alert for certain users in Windows PC](https://discuss.elastic.co/t/winlogbeat-alert-for-certain-users-in-windows-pc/322506)
**Author:** [@amis349](https://discuss.elastic.co/u/amis349)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 3:24am UTC](https://discuss.elastic.co/t/winlogbeat-alert-for-certain-users-in-windows-pc/322506 "2023-01-17T03:24:11Z")
Okay I have looked around and found different iterations of a solution. However I am running into a road block, the winlogbeats (below) are not dropping the events for that targetusername or even the event ID. All logs a… --- ## [How to track the user commands in Kibana?](https://discuss.elastic.co/t/how-to-track-the-user-commands-in-kibana/323092)
**Author:** [@Shiva\_Subramaniyan](https://discuss.elastic.co/u/Shiva_Subramaniyan)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 1:49am UTC](https://discuss.elastic.co/t/how-to-track-the-user-commands-in-kibana/323092 "2023-01-17T01:49:14Z")
Hi, We have already installed auditbeat and metricbeat agents (version 7.10.2) on our RHEL / Linux servers and we want to track the "commands" that the user had executed on the server through Kibana dashboards. We do no… --- ## [Importing index field](https://discuss.elastic.co/t/importing-index-field/323155)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 1:22am UTC](https://discuss.elastic.co/t/importing-index-field/323155 "2023-01-17T01:22:17Z")
Hi folks, I have issues on lacking field on index in elk of beats (filebeat, auditbeat and winlogbeat). current my log flows is log source hosts \>\> kafka \>\> logstash \>\> elastic cloud (elk). according to my understandi… --- ## [How use disk-aware allocator setting?](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190)
**Author:** [@RichiCoder](https://discuss.elastic.co/u/RichiCoder)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 12:26am UTC](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190 "2023-01-17T00:26:06Z")
Howdy! I'd love to use the recently added support for disk usage in the desired balance allocator as I just upgraded to 8.6 in Elastic Cloud. However, it looks like by default cluster.routing.allocation.balance.disk\_usa… --- ## [Logstash with stomp plugin](https://discuss.elastic.co/t/logstash-with-stomp-plugin/323279)
**Author:** [@bulaklak](https://discuss.elastic.co/u/bulaklak)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 11:34pm UTC](https://discuss.elastic.co/t/logstash-with-stomp-plugin/323279 "2023-01-16T23:34:51Z")
Hi all, I'm looking into connecting Logstash with ActiveMQ. However, the stomp plugin I need isn't included with default Logstash. I have tried to install the logstash-input-stomp plugin, but it isn't working. Any direc… --- ## [Err Empty Response From Kibana](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677)
**Author:** [@Surendra\_Gupta](https://discuss.elastic.co/u/Surendra_Gupta)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 11:28pm UTC](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677 "2023-01-16T23:28:42Z")
Hi @xeraa I am getting Err Empty Response from Kibana after multiple refresh i am getting elk screen and after that while fetching apm i am getting this issue can you please hlep me to solve this we have 16 gb ram … --- ## [Garbage Collection of my java/spring application keeps spiking](https://discuss.elastic.co/t/garbage-collection-of-my-java-spring-application-keeps-spiking/323277)
**Author:** [@RuchikG](https://discuss.elastic.co/u/RuchikG)\ **Replies:** 2\ **Last updated:** [January 16, 2023, 10:40pm UTC](https://discuss.elastic.co/t/garbage-collection-of-my-java-spring-application-keeps-spiking/323277 "2023-01-16T22:40:56Z")
We have a java application built on java and spring which connects to Elastic Search cluster with version 7.6.1. We are using spring-data-elasticsearch dependency with version 4.0.0 RELEASE and elasticsearch dependecy wi… --- ## [Import CSV file into nested fields](https://discuss.elastic.co/t/import-csv-file-into-nested-fields/323278)
**Author:** [@markedperf](https://discuss.elastic.co/u/markedperf)\ **Replies:** 4\ **Last updated:** [January 16, 2023, 10:00pm UTC](https://discuss.elastic.co/t/import-csv-file-into-nested-fields/323278 "2023-01-16T22:00:41Z")
I'm trying to import a CSV file into nested fields. Trying to follow the aggregate example #4, is coming up short for me. This partially works, but not really what I'm looking for. I'd just like the values grouped in … --- ## [Help with grok filter on ingest pipeline](https://discuss.elastic.co/t/help-with-grok-filter-on-ingest-pipeline/321568)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 4\ **Last updated:** [January 16, 2023, 8:17pm UTC](https://discuss.elastic.co/t/help-with-grok-filter-on-ingest-pipeline/321568 "2023-01-16T20:17:51Z")
Hello, I'm trying to use the following grok filter, but I'm getting a message saying it's in an invalid json format, but I think my filter is written correctly. can you help me with this? filter: (%{TIMESTAMP\_ISO8601:t… --- ## [Dashboard: "options list" entries sorting](https://discuss.elastic.co/t/dashboard-options-list-entries-sorting/322753)
**Author:** [@hkhalil](https://discuss.elastic.co/u/hkhalil)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 8:01pm UTC](https://discuss.elastic.co/t/dashboard-options-list-entries-sorting/322753 "2023-01-16T20:01:57Z")
Hi, We are using filtering controls in our dashboards ("Options List"). Specifically, one of our controls is for the following field: "session\_id": { "type": "text", "fields": { "keyword": { … --- ## [Is it possible to delete security index and then create it automatically on restart of Elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 9\ **Last updated:** [January 16, 2023, 7:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434 "2023-01-16T19:57:34Z")
x pack is enabled and now I want to delete security index. Then will it be automatically created on restart of Elasticsearch and will all the built users be created? --- ## [Generate xpack SSL certificates with longer expiry date](https://discuss.elastic.co/t/generate-xpack-ssl-certificates-with-longer-expiry-date/323275)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 2\ **Last updated:** [January 16, 2023, 7:56pm UTC](https://discuss.elastic.co/t/generate-xpack-ssl-certificates-with-longer-expiry-date/323275 "2023-01-16T19:56:39Z")
When we generate SSL certificates with elasticsearch-certutil, we get them with the expiry of 3 years Is there a way that we can generate the certificates with longer expiry date such as 5 years or so. Is it possible t… --- ## [Cant seem to connect to Elastic Search or Kibana](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200)
**Author:** [@jrp30506](https://discuss.elastic.co/u/jrp30506)\ **Replies:** 7\ **Last updated:** [January 16, 2023, 7:24pm UTC](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200 "2023-01-16T19:24:05Z")
Afternoon everyone. I recently built an ELK stack on Ubuntu 22.04 by following instructions I found by searching for the installation procedure. I followed the article to the letter and after completion, when trying to c… --- ## [A question about a potential vulnerability in Kibana](https://discuss.elastic.co/t/a-question-about-a-potential-vulnerability-in-kibana/323195)
**Author:** [@frenkel](https://discuss.elastic.co/u/frenkel)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 7:23pm UTC](https://discuss.elastic.co/t/a-question-about-a-potential-vulnerability-in-kibana/323195 "2023-01-16T19:23:20Z")
Hi, There is this CVE about a vulnerability in JsonWebToken: https://nvd.nist.gov/vuln/detail/CVE-2022-23529 This is a vulnerability about insecure input validation in jwt.verify function, in JsonWebToken versions \<= … --- ## [Upgrade from version 8.5 to 8.6 - license error](https://discuss.elastic.co/t/upgrade-from-version-8-5-to-8-6-license-error/323032)
**Author:** [@thiavs](https://discuss.elastic.co/u/thiavs)\ **Replies:** 6\ **Last updated:** [January 16, 2023, 5:14pm UTC](https://discuss.elastic.co/t/upgrade-from-version-8-5-to-8-6-license-error/323032 "2023-01-16T17:14:03Z")
After updating from version 8.5 to 8.6, my fleet server does not work, I cannot see my agents online, in the logs I have the following situation: Reason: current license is non-compliant for \[categorize-text-agg\]","l… --- ## [Anonymous login for kibana embed fix](https://discuss.elastic.co/t/anonymous-login-for-kibana-embed-fix/323060)
**Author:** [@Prashant2](https://discuss.elastic.co/u/Prashant2)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 5:09pm UTC](https://discuss.elastic.co/t/anonymous-login-for-kibana-embed-fix/323060 "2023-01-16T17:09:56Z")
I need to embed the kibana dashboard to. my react app. Where do I need to add the kibana.yml file anonymous login https://dub-test-new.kb.us-central1.gcp.cloud.es.io:9243/ this is the link to my kibana dashboard. --- ## [In Kibana Agg Based Metric, how to show in the results only the highest (doc\_count wise) '1 min' bucket?](https://discuss.elastic.co/t/in-kibana-agg-based-metric-how-to-show-in-the-results-only-the-highest-doc-count-wise-1-min-bucket/322257)
**Author:** [@tds21](https://discuss.elastic.co/u/tds21)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 5:04pm UTC](https://discuss.elastic.co/t/in-kibana-agg-based-metric-how-to-show-in-the-results-only-the-highest-doc-count-wise-1-min-bucket/322257 "2023-01-16T17:04:49Z")
I created an Agg Based Metric with: METRICS - Max Bucket aggregation, that has bucket terms agg for source IP, which basically counts the top source IP and returns it BUCKETS - Date Histogram with timestamp field, wi… --- ## [Logstash doesn't work in Windows correctly Please help!](https://discuss.elastic.co/t/logstash-doesnt-work-in-windows-correctly-please-help/323161)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 4:07pm UTC](https://discuss.elastic.co/t/logstash-doesnt-work-in-windows-correctly-please-help/323161 "2023-01-16T16:07:14Z")
Hi, I try to run logstash in windows with the command: .\\bin\\logstash.bat -f D:\\Elastic\\logstash-8.6.0\\config\\conf.d\\bo\_firmas\_electronicas.conf But I have this message: \[2023-01-13T16:01:57,544\]\[ERROR\]\[logstash.agent… --- ## [Increased Search Latency post enabling writes to index](https://discuss.elastic.co/t/increased-search-latency-post-enabling-writes-to-index/323258)
**Author:** [@zeus7](https://discuss.elastic.co/u/zeus7)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 4:01pm UTC](https://discuss.elastic.co/t/increased-search-latency-post-enabling-writes-to-index/323258 "2023-01-16T16:01:32Z")
Hi, I m observing high search latency (8x-10x) post enabling writes on an index. I m having an index on production having continuous writes (avg write operations/sec = ~5k) and it is having search latency of 2-4sec. I… --- ## [Where is Filestream integration?](https://discuss.elastic.co/t/where-is-filestream-integration/323245)
**Author:** [@Guillaume\_Bouchez](https://discuss.elastic.co/u/Guillaume_Bouchez)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 3:58pm UTC](https://discuss.elastic.co/t/where-is-filestream-integration/323245 "2023-01-16T15:58:25Z")
I'm Using fleet and elastic-agent integration for collecting logs, and I recently discovered a warning from elastic\_agent.filebeat, stating that logs inputs are deprecated and to use filetream inputs instead. Fine with… --- ## [Kibana Visualize Lens not showing nested fields](https://discuss.elastic.co/t/kibana-visualize-lens-not-showing-nested-fields/322691)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 3:47pm UTC](https://discuss.elastic.co/t/kibana-visualize-lens-not-showing-nested-fields/322691 "2023-01-16T15:47:26Z")
I'm not sure what I did wrong, but Kibana Lenses aren't showing me the nested field inventory.equipment. In terms of what I did, I set up an index and added a document with this script: PUT warehouse POST warehouse/\_ma… --- ## [Mise a jour 8.4 -\> 8.6 / pb Kibana](https://discuss.elastic.co/t/mise-a-jour-8-4-8-6-pb-kibana/323168)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 3:45pm UTC](https://discuss.elastic.co/t/mise-a-jour-8-4-8-6-pb-kibana/323168 "2023-01-16T15:45:32Z")
Bonjour, J'ai ELK installé via des dockers un pour Elasticsearch et un pour Kibana. Je mets à jour celui pour Elasticsearch vers la version 8.6 puis celui pour Kibana vers la version 8.6. Je précise que j'ai un disque … --- ## [Failed to start Elasticsearch on windows](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211)
**Author:** [@FoamQuicksand](https://discuss.elastic.co/u/FoamQuicksand)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 3:26pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211 "2023-01-16T15:26:36Z")
I failed to start Elasticsearch8.5.1 and 8.6.0 locally, but 8.2.2 and 8.4.1 can start normally. anyone know what the problem？ report errors: warning: ignoring JAVA\_HOME=C:\\Program Files\\Java\\jdk-17.0.4.1; using bundle… [Previous page](https://discuss.elastic.co/latest.md?page=818) [Next page](https://discuss.elastic.co/latest.md?page=820)