# Latest **URL:** https://discuss.elastic.co/latest.md?page=831 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 832 --- ## [Not able to use Filebeat-OSS AWS-S3 input](https://discuss.elastic.co/t/not-able-to-use-filebeat-oss-aws-s3-input/322595)
**Author:** [@Gaurav\_yadav1](https://discuss.elastic.co/u/Gaurav_yadav1)\ **Replies:** 1\ **Last updated:** [January 7, 2023, 2:04am UTC](https://discuss.elastic.co/t/not-able-to-use-filebeat-oss-aws-s3-input/322595 "2023-01-07T02:04:59Z")
I am getting - Exiting: Failed to start crawler: starting input failed: error while initializing input: Error creating input. No such input type exist: 'aws-s3' What is the difference between Filebeat and Filebeat-OSS? … --- ## [How can display horizontal bar on the Timelion? (or another chart)](https://discuss.elastic.co/t/how-can-display-horizontal-bar-on-the-timelion-or-another-chart/320661)
**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\ **Replies:** 4\ **Last updated:** [December 10, 2022, 3:28am UTC](https://discuss.elastic.co/t/how-can-display-horizontal-bar-on-the-timelion-or-another-chart/320661 "2022-12-10T03:28:11Z")
Help this please. (sample json too) Thanks. --- ## [Kibana Security Analyst Lab Issue](https://discuss.elastic.co/t/kibana-security-analyst-lab-issue/322650)
**Author:** [@david.mew](https://discuss.elastic.co/u/david.mew)\ **Replies:** 0\ **Last updated:** [January 7, 2023, 1:26am UTC](https://discuss.elastic.co/t/kibana-security-analyst-lab-issue/322650 "2023-01-07T01:26:10Z")
I am taking the training and I have several questions about the labs... Lab 6.2 is where I am having issues... #6, where is the all types drop down menu? I clicked on ML but don't see anomaly chart. #7 where is the .m… --- ## [Agent stuck on updating after install](https://discuss.elastic.co/t/agent-stuck-on-updating-after-install/322641)
**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 9:37pm UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-after-install/322641 "2023-01-06T21:37:45Z")
Continuing the discussion from Agent stuck on updating but still send index: We are also seeing this. We have Fleet deployed in ECK. We have 2 fleet servers listed in Kibana, one url is the k8s internal Cluster DNS FQ… --- ## [Embedding dashboard by value renderer throws error for all filters having filter.meta.value type as string](https://discuss.elastic.co/t/embedding-dashboard-by-value-renderer-throws-error-for-all-filters-having-filter-meta-value-type-as-string/316738)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 0\ **Last updated:** [October 17, 2022, 7:36am UTC](https://discuss.elastic.co/t/embedding-dashboard-by-value-renderer-throws-error-for-all-filters-having-filter-meta-value-type-as-string/316738 "2022-10-17T07:36:53Z")
Hi, I have embedded an existing dashboard using getDashboardContainerByValueRenderer in a custom plugin. When I apply a filter which has filter.meta.value as string for eg. filter for a field present i.e. Field: exists,… --- ## [Constant logstash s3 input plugin restart due to failing to open TCP connection to the target s3 bucket](https://discuss.elastic.co/t/constant-logstash-s3-input-plugin-restart-due-to-failing-to-open-tcp-connection-to-the-target-s3-bucket/322637)
**Author:** [@maltesersabc](https://discuss.elastic.co/u/maltesersabc)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 8:03pm UTC](https://discuss.elastic.co/t/constant-logstash-s3-input-plugin-restart-due-to-failing-to-open-tcp-connection-to-the-target-s3-bucket/322637 "2023-01-06T20:03:30Z")
Background: We are using logstash s3 input plugin to ingest the logs from s3 bucket in AWS, however, we observed in the logstash plain logs, there are constant plugin errors that lead to the restart of the plugin. And t… --- ## [Filebeat CrashLoopBackOff](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 8\ **Last updated:** [January 6, 2023, 7:32pm UTC](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830 "2023-01-06T19:32:57Z")
After installing filebeat from the new Helm 8.5 in our cluster k8s, 5 of the pods are stuck in CrashLoopBackOff: {"log.level":"error","@timestamp":"2022-12-08T21:13:19.258Z","log.origin":{"file.name":"instance/beat.go",… --- ## [Get all value for a field with the JAVA API](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 5\ **Last updated:** [January 6, 2023, 6:19pm UTC](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566 "2023-01-06T18:19:21Z")
Hello, How can i get all the value that correspond to a specific field ? For example i want all the existing value for the field "affaireName", check the exemple below : SearchRequest request = SearchRequest.of(a -\> a… --- ## [Kibana/enterprise search SSL connection error](https://discuss.elastic.co/t/kibana-enterprise-search-ssl-connection-error/322329)
**Author:** [@RRdev](https://discuss.elastic.co/u/RRdev)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 6:05pm UTC](https://discuss.elastic.co/t/kibana-enterprise-search-ssl-connection-error/322329 "2023-01-06T18:05:30Z")
I'm trying to stablish an https connection between Kibana and Enterprise Search, but I'm having this error: "Could not perform access check to Enterprise Search: FetchError: request to api/ent/v2/internal/client\_config … --- ## [Bug in Cisco Module for Filebeat 7.17.8](https://discuss.elastic.co/t/bug-in-cisco-module-for-filebeat-7-17-8/322633)
**Author:** [@mmh13](https://discuss.elastic.co/u/mmh13)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 5:12pm UTC](https://discuss.elastic.co/t/bug-in-cisco-module-for-filebeat-7-17-8/322633 "2023-01-06T17:12:28Z")
Hey, When trying to run Filebeat 7.17.8 with the Cisco module enabled we found that new amp events were not being ingested. The var.first\_interval parameter was respected and initially populated the index with amp even… --- ## [Flattened fields vs subobjects=false](https://discuss.elastic.co/t/flattened-fields-vs-subobjects-false/322631)
**Author:** [@bdentino](https://discuss.elastic.co/u/bdentino)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 4:45pm UTC](https://discuss.elastic.co/t/flattened-fields-vs-subobjects-false/322631 "2023-01-06T16:45:43Z")
Hi everyone, Can someone help me understand the fundamental differences between a 'flattened' field type and an 'object' field type with subobjects=false? AIUI, everything under a 'flattened' object is indexed as a keyw… --- ## [Kibana ignoring requestTimeout setting](https://discuss.elastic.co/t/kibana-ignoring-requesttimeout-setting/322627)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 4:03pm UTC](https://discuss.elastic.co/t/kibana-ignoring-requesttimeout-setting/322627 "2023-01-06T16:03:35Z")
Hello, I'm having some issues with some requests that timeout on Dev Tools and returns stream timeout. I change the elasticsearch.requestTimeout setting to 300000 which means 5 minutes, but Kibana stills timeout around… --- ## [Filebeat Kubernetes autodiscover with post "processor" specific field with another filebeat module](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503)
**Author:** [@kgfathur](https://discuss.elastic.co/u/kgfathur)\ **Replies:** 7\ **Last updated:** [January 6, 2023, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503 "2023-01-06T16:03:09Z")
I have setup filbeat on Kubernetes (ECK) with sample and guide from docs: Role Based Access Control for Beats | Elastic Cloud on Kubernetes \[2.5\] Run Filebeat on Kubernetes | Filebeat Reference \[8.5\] Version: ECK: … --- ## [Using two date ranges in one Watcher](https://discuss.elastic.co/t/using-two-date-ranges-in-one-watcher/322554)
**Author:** [@mariusk](https://discuss.elastic.co/u/mariusk)\ **Replies:** 3\ **Last updated:** [January 6, 2023, 3:26pm UTC](https://discuss.elastic.co/t/using-two-date-ranges-in-one-watcher/322554 "2023-01-06T15:26:24Z")
I have a group of indices (tracking-v1-\*) containing documents representing parts of a fibre optic network (one document per day and construction crew). I want to create a Watcher that generates a daily report, showing t… --- ## [Kibana Dashboard for two different indices with seperate time filters](https://discuss.elastic.co/t/kibana-dashboard-for-two-different-indices-with-seperate-time-filters/322591)
**Author:** [@rvadiga](https://discuss.elastic.co/u/rvadiga)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 2:56pm UTC](https://discuss.elastic.co/t/kibana-dashboard-for-two-different-indices-with-seperate-time-filters/322591 "2023-01-06T14:56:05Z")
Hi Team, I do have a requirement to build a Kibana dashboard with two different time filters from two Elastic indices. User should be able to compare the performance one index with another with different time periods, … --- ## [Visualization doesn't follow time picker value in the dashboard](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-value-in-the-dashboard/322616)
**Author:** [@Ashish\_Grover](https://discuss.elastic.co/u/Ashish_Grover)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 2:54pm UTC](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-value-in-the-dashboard/322616 "2023-01-06T14:54:56Z")
I m making some visualization and i m taking timestamp on x axis but my timestamp on x axis is not updating with current time. --- ## [How to sync data between Azure SQL Database with Elasticsearch through Logstash](https://discuss.elastic.co/t/how-to-sync-data-between-azure-sql-database-with-elasticsearch-through-logstash/322560)
**Author:** [@seerj29](https://discuss.elastic.co/u/seerj29)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 2:36pm UTC](https://discuss.elastic.co/t/how-to-sync-data-between-azure-sql-database-with-elasticsearch-through-logstash/322560 "2023-01-06T14:36:37Z")
Hi everyone, I'm trying to find a way to sync data between Azure SQL Database with Elasticsearch using Logstash. I found an article about doing this with the JBDC plugin, but if I understood correctly this is only for … --- ## [Block certain strings from ingestion](https://discuss.elastic.co/t/block-certain-strings-from-ingestion/322326)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 6\ **Last updated:** [January 6, 2023, 1:36pm UTC](https://discuss.elastic.co/t/block-certain-strings-from-ingestion/322326 "2023-01-06T13:36:01Z")
Hi, There are few back end applications which depend/listen to queues, if there are no messages in queue it will print as INFO level logs "NO MESSAGES AVAILABLE in queue". Is there a way where i can block this particula… --- ## [Mutual TLS authentication between Kibana and Elasticsearch keeping client\_authentication "required"](https://discuss.elastic.co/t/mutual-tls-authentication-between-kibana-and-elasticsearch-keeping-client-authentication-required/322529)
**Author:** [@alex\_kuz](https://discuss.elastic.co/u/alex_kuz)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 1:34pm UTC](https://discuss.elastic.co/t/mutual-tls-authentication-between-kibana-and-elasticsearch-keeping-client-authentication-required/322529 "2023-01-06T13:34:59Z")
I'm trying to enable mutual TLS between all the components. I managed to set up TLS between Kibana and Elasticsearch. But it doesn't work as I would expect. I want to keep "xpack.security.http.ssl.client\_authentication" … --- ## [Customize panel time range on visualizations on a dashboard via app state, global state or another way by URL](https://discuss.elastic.co/t/customize-panel-time-range-on-visualizations-on-a-dashboard-via-app-state-global-state-or-another-way-by-url/320740)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 1:34pm UTC](https://discuss.elastic.co/t/customize-panel-time-range-on-visualizations-on-a-dashboard-via-app-state-global-state-or-another-way-by-url/320740 "2023-01-06T13:34:05Z")
I have a dashboard with visualizations. When I click on a visualization's options and select Customize time range, selecting a range updates the key dashboardStateManagerPanels in the browser's Sessions storage, to show … --- ## [AbuseCH and enrichment on custom pipeline](https://discuss.elastic.co/t/abusech-and-enrichment-on-custom-pipeline/322480)
**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 1:29pm UTC](https://discuss.elastic.co/t/abusech-and-enrichment-on-custom-pipeline/322480 "2023-01-06T13:29:20Z")
Hi there, I have a simple question about abuseCH integration and field enrichment of abuseCH to an other index. When a create my enrich policy, I don't have an error: PUT /\_enrich/policy/abusechurl-enrich-policy { … --- ## [Error dialing x509: certificate signed by unknown authority](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority/322258)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 11:18am UTC](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority/322258 "2023-01-06T11:18:08Z")
I configured them but still got this error Error dialing x509: certificate signed by unknown authority --- ## [Services are running actively but can not access kibana](https://discuss.elastic.co/t/services-are-running-actively-but-can-not-access-kibana/322463)
**Author:** [@Zahid\_Ali](https://discuss.elastic.co/u/Zahid_Ali)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 11:00am UTC](https://discuss.elastic.co/t/services-are-running-actively-but-can-not-access-kibana/322463 "2023-01-06T11:00:37Z")
Hi Team, I have set up Two VM's in which elasticsearch (version: 7.17.6) and kibana (version: 7.17.6) is installed on one VM both are running with SSL, filebeat (version: 7.17.6) and wazuh manager (version: 4.3.10) is i… --- ## [Alert based on two messages](https://discuss.elastic.co/t/alert-based-on-two-messages/320876)
**Author:** [@Alex\_Lavrov](https://discuss.elastic.co/u/Alex_Lavrov)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 10:48am UTC](https://discuss.elastic.co/t/alert-based-on-two-messages/320876 "2023-01-06T10:48:19Z")
Hello, I have several messages that are ingested together and have same "batchId" field. I need to check a condition (simple calculation), based on two fields from messages that have the same "batchId" (and couple of mo… --- ## [Grok Filter not working with File beat Log Message](https://discuss.elastic.co/t/grok-filter-not-working-with-file-beat-log-message/322605)
**Author:** [@Prakash111](https://discuss.elastic.co/u/Prakash111)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 8:58am UTC](https://discuss.elastic.co/t/grok-filter-not-working-with-file-beat-log-message/322605 "2023-01-06T08:58:03Z")
I'm using file beat for as log collector. my log data : 2023-01-05T11:57:48.179Z \[ERROR\] ABC Company {"Pod": "7d45bf43lbr", "Service": "liveX", "failed to create patch:": "invalid JSON Document"} I supposed to get Key… --- ## [Can not create new index , Client request timeout (502)](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516)
**Author:** [@Madushan\_Pathirana](https://discuss.elastic.co/u/Madushan_Pathirana)\ **Replies:** 3\ **Last updated:** [January 6, 2023, 8:04am UTC](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516 "2023-01-06T08:04:07Z")
Hi, elasticsearch worked fine when I install it first. After two weeks, now when I try to create new index it return below error PUT customer response {"statusCode":502,"error":"Bad Gateway","message":"Client request … --- ## [I want to dissable depriciated TLSv1.0 and tlsv1.1](https://discuss.elastic.co/t/i-want-to-dissable-depriciated-tlsv1-0-and-tlsv1-1/321609)
**Author:** [@udittiwari](https://discuss.elastic.co/u/udittiwari)\ **Replies:** 3\ **Last updated:** [January 6, 2023, 7:55am UTC](https://discuss.elastic.co/t/i-want-to-dissable-depriciated-tlsv1-0-and-tlsv1-1/321609 "2023-01-06T07:55:00Z")
How can i dissable the depriciated TLS in my server? its urgent can some one help? --- ## [Compare fields and report](https://discuss.elastic.co/t/compare-fields-and-report/322468)
**Author:** [@pclokcer](https://discuss.elastic.co/u/pclokcer)\ **Replies:** 4\ **Last updated:** [January 6, 2023, 7:39am UTC](https://discuss.elastic.co/t/compare-fields-and-report/322468 "2023-01-06T07:39:46Z")
example data { "timestamp": "2023-01-04T14:00:00.00Z", "url": "http://localhost/test", "trace\_id": "asdasdasd" } { "timestamp": "2023-01-04T14:01:00.000Z", "url": "http://localhost/test", "trace\_id": "asdasdasd" … --- ## [Queries not working with node js](https://discuss.elastic.co/t/queries-not-working-with-node-js/322590)
**Author:** [@Hemabh\_Ravee\_Fox](https://discuss.elastic.co/u/Hemabh_Ravee_Fox)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 5:52am UTC](https://discuss.elastic.co/t/queries-not-working-with-node-js/322590 "2023-01-06T05:52:24Z")
I am using the following query to get the total unique values for the field website - GET events\_test2/\_search { "size": 0, "aggs": { "unique\_websites": { "terms": { "field": "website", "si… --- ## [Alert for every document based on the field value](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237)
**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\ **Replies:** 4\ **Last updated:** [December 9, 2022, 5:45am UTC](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237 "2022-12-09T05:45:22Z")
Hi, We have a requirement in which we have to setup alerting system based on the field value of the document. So document will be like this { ........ ........ breach: "false"/"true" ........ } Based of the 'breach' f… [Previous page](https://discuss.elastic.co/latest.md?page=830) [Next page](https://discuss.elastic.co/latest.md?page=832)