# Latest

**URL:** https://discuss.elastic.co/latest.md?page=832

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 833

---

## [Unable to connect Elastic Cloud to my python(FastApi) app](https://discuss.elastic.co/t/unable-to-connect-elastic-cloud-to-my-python-fastapi-app/322589)

<div class="topic-metadata">

**Author:** [@Dhruv\_Extra](https://discuss.elastic.co/u/Dhruv_Extra)\
**Replies:** 0\
**Last updated:** [January 6, 2023, 5:43am UTC](https://discuss.elastic.co/t/unable-to-connect-elastic-cloud-to-my-python-fastapi-app/322589 "2023-01-06T05:43:02Z")

</div>

Here's my code: from elasticsearch import Elasticsearch es = Elasticsearch( cloud\_id="cluster-1:dXMa5Fx...", http\_auth=("elastic", "\<password\>"), ) es.info() #or from elasticsearch import Elasticsearch es = …

---

## [Auditbeat installation failed](https://discuss.elastic.co/t/auditbeat-installation-failed/322507)

<div class="topic-metadata">

**Author:** [@freemankevin](https://discuss.elastic.co/u/freemankevin)\
**Replies:** 7\
**Last updated:** [January 6, 2023, 2:55am UTC](https://discuss.elastic.co/t/auditbeat-installation-failed/322507 "2023-01-06T02:55:41Z")

</div>

error message：x509: certificate signed by unknown authority \[root@efk ~\]# curl -f https://localhost:8220/api/status -k {"name":"fleet-server","status":"HEALTHY"}\[root@efk ~\]# \[root@efk ~\]# \[root@efk ~\]# \[root@efk ~\]# cu…

---

## [Metricbeat AWS Billing Module does not combine Group By options](https://discuss.elastic.co/t/metricbeat-aws-billing-module-does-not-combine-group-by-options/322497)

<div class="topic-metadata">

**Author:** [@Thomas\_Cate](https://discuss.elastic.co/u/Thomas_Cate)\
**Replies:** 3\
**Last updated:** [January 6, 2023, 1:28am UTC](https://discuss.elastic.co/t/metricbeat-aws-billing-module-does-not-combine-group-by-options/322497 "2023-01-06T01:28:31Z")

</div>

It looks like the Metricbeat AWS Billing module takes in an arbitrary number of Cost Explorer Group by Dimensions, and then iterates over them individually to generate documents. Ideally it should allow you to pair up d…

---

## [Dashboard with count of pipelines](https://discuss.elastic.co/t/dashboard-with-count-of-pipelines/316567)

<div class="topic-metadata">

**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 3:18pm UTC](https://discuss.elastic.co/t/dashboard-with-count-of-pipelines/316567 "2022-10-14T15:18:59Z")

</div>

Hi! I need create Dashboard with statistics of new created Logstash Pipelines. I have not any index with such information. How can i display the number of pipelines?

---

## [Field from logs](https://discuss.elastic.co/t/field-from-logs/322476)

<div class="topic-metadata">

**Author:** [@MrMartin1](https://discuss.elastic.co/u/MrMartin1)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 11:32pm UTC](https://discuss.elastic.co/t/field-from-logs/322476 "2023-01-05T23:32:55Z")

</div>

Hi! I'm new to elasticsearch and have recently setup elastic, kibana and filebeat and manage to receive logs from a Cisco device. Now i have a question if it's possible to parse specific value from the message, like "P…

---

## [How to change security index's replica shard count?](https://discuss.elastic.co/t/how-to-change-security-indexs-replica-shard-count/322558)

<div class="topic-metadata">

**Author:** [@bulent](https://discuss.elastic.co/u/bulent)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 10:16pm UTC](https://discuss.elastic.co/t/how-to-change-security-indexs-replica-shard-count/322558 "2023-01-05T22:16:53Z")

</div>

Hi; I am trying to increase replica count of security index by using superuser ( elastic) like below curl -X PUT 'http://\*\*\*\*\*\*\*\*\*\*\*\*\*\*:9212/.security-7/\_settings' -H 'Authorization: Basic \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*' -H 'Co…

---

## [How to optimize config-files of filebeat for many different environments?](https://discuss.elastic.co/t/how-to-optimize-config-files-of-filebeat-for-many-different-environments/322577)

<div class="topic-metadata">

**Author:** [@ira-zaya](https://discuss.elastic.co/u/ira-zaya)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 9:57pm UTC](https://discuss.elastic.co/t/how-to-optimize-config-files-of-filebeat-for-many-different-environments/322577 "2023-01-05T21:57:35Z")

</div>

We have 3 different config files for 3 envs on the project. Each env is a separate cluster. All config files are similar to each other but the one difference - field.env, which is related to environment, accordingly. …

---

## [How to properly connect a standalone Logstash to an Elasticsearch cluster](https://discuss.elastic.co/t/how-to-properly-connect-a-standalone-logstash-to-an-elasticsearch-cluster/322520)

<div class="topic-metadata">

**Author:** [@Francesco1966](https://discuss.elastic.co/u/Francesco1966)\
**Replies:** 2\
**Last updated:** [January 5, 2023, 9:24pm UTC](https://discuss.elastic.co/t/how-to-properly-connect-a-standalone-logstash-to-an-elasticsearch-cluster/322520 "2023-01-05T21:24:03Z")

</div>

Hello, I have successfully created an Elasticsearch Cluster with two servers Ubuntu each one running an Elasticsearch node (one ES-Node1 acting as master node and ES-Node2 acting as data node). I than created a Standal…

---

## [Cold Tier ILM auto restore](https://discuss.elastic.co/t/cold-tier-ilm-auto-restore/322574)

<div class="topic-metadata">

**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 8:27pm UTC](https://discuss.elastic.co/t/cold-tier-ilm-auto-restore/322574 "2023-01-05T20:27:06Z")

</div>

I have been working with cold tier ILM policies and noticed that as soon as the data is written to the cold tier as a snapshot it is immediately restored to local cache. No searches are taking place, this is during the …

---

## [How can i change the @timestamp in a dashboard?](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427)

<div class="topic-metadata">

**Author:** [@Raul\_dum](https://discuss.elastic.co/u/Raul_dum)\
**Replies:** 1\
**Last updated:** [December 8, 2022, 10:09pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427 "2022-12-08T22:09:38Z")

</div>

I want to change the timestamp from @timestamp per 12 hours to per seconds,if that's possible.

---

## [Enterprise Search Cluster - CPU hardware profile change issue](https://discuss.elastic.co/t/enterprise-search-cluster-cpu-hardware-profile-change-issue/322314)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 3\
**Last updated:** [January 5, 2023, 5:12pm UTC](https://discuss.elastic.co/t/enterprise-search-cluster-cpu-hardware-profile-change-issue/322314 "2023-01-05T17:12:01Z")

</div>

Hi there :wave: I was trying to change the CPU hardware profile of my cluster and I could not do it, I got the following error displayed: Is not possible to migrate deployment to desired template due to: \[TemplateMigr…

---

## [You cannot specify a keystore and key file](https://discuss.elastic.co/t/you-cannot-specify-a-keystore-and-key-file/322561)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:46pm UTC](https://discuss.elastic.co/t/you-cannot-specify-a-keystore-and-key-file/322561 "2023-01-05T16:46:08Z")

</div>

Trying to get Elasticsearch 7.13 to run in Kubernetes with security enabled via the official helm chart. The error is elasticsearch java.lang.IllegalArgumentException: you cannot specify a keystore and key file. What do…

---

## [Dynamic Baseline](https://discuss.elastic.co/t/dynamic-baseline/322317)

<div class="topic-metadata">

**Author:** [@Rbb](https://discuss.elastic.co/u/Rbb)\
**Replies:** 5\
**Last updated:** [January 5, 2023, 4:29pm UTC](https://discuss.elastic.co/t/dynamic-baseline/322317 "2023-01-05T16:29:05Z")

</div>

Hi! I need to create a dynamic baseline which is based on the average of the field transaction.duration.us of the previous month. I have tried to create a runtime field, but the fact that the data is located in seperate…

---

## [Kibana not able to communicate with elasticsearch](https://discuss.elastic.co/t/kibana-not-able-to-communicate-with-elasticsearch/321160)

<div class="topic-metadata">

**Author:** [@Harsh3](https://discuss.elastic.co/u/Harsh3)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:12pm UTC](https://discuss.elastic.co/t/kibana-not-able-to-communicate-with-elasticsearch/321160 "2023-01-05T16:12:27Z")

</div>

Hello !! I am new to Elastic-search and Kibana and this is the first time i am doing the implementation. I have configured kibana inside k8s cluster and elasticsearch is hosted on ec-2 instance my elasticsearch is up a…

---

## [Options List control type filters cannot be saved as query](https://discuss.elastic.co/t/options-list-control-type-filters-cannot-be-saved-as-query/322509)

<div class="topic-metadata">

**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:11pm UTC](https://discuss.elastic.co/t/options-list-control-type-filters-cannot-be-saved-as-query/322509 "2023-01-05T16:11:51Z")

</div>

Once we filter multiple values in Option list control type, it does not allow us to Save query. Save Saved Query option does not highlight when we filter using drop downs. Please suggest.

---

## [Setting the verification\_mode to none - What about Kibanas using HTTPS?](https://discuss.elastic.co/t/setting-the-verification-mode-to-none-what-about-kibanas-using-https/321719)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:09pm UTC](https://discuss.elastic.co/t/setting-the-verification-mode-to-none-what-about-kibanas-using-https/321719 "2023-01-05T16:09:46Z")

</div>

Dear Community, due to certifiactes going to get invalid, I have to activate this setting in one of my secured production servers: verification\_mode to none My Question is: Once activated this setting (by restarting a…

---

## [Deploying Winlogbeat with Octopus Deploy](https://discuss.elastic.co/t/deploying-winlogbeat-with-octopus-deploy/322565)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 0\
**Last updated:** [January 5, 2023, 4:08pm UTC](https://discuss.elastic.co/t/deploying-winlogbeat-with-octopus-deploy/322565 "2023-01-05T16:08:07Z")

</div>

Looking for some guidance on using Octopus Deploy to deploy Winlogbeat. The approach I've been trying is to deploy a wrapper Powershell script, which would then invoke the install-service-winlogbeat.ps1 script, which I …

---

## [Windows Local Magento Installation Elastic Search Unknown 503 error from Elasticsearch null](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174)

<div class="topic-metadata">

**Author:** [@kumar2023](https://discuss.elastic.co/u/kumar2023)\
**Replies:** 9\
**Last updated:** [January 5, 2023, 3:42pm UTC](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174 "2023-01-05T15:42:35Z")

</div>

Installed Magento 2.45 in windows 10 local setup. From the admin panel i do see Catalog Search index notification. Actually the notification says "One or more indexers are invalid. Make sure your Magento cron job is run…

---

## [No fields available when creating logs threshold alert in Kibana](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525)

<div class="topic-metadata">

**Author:** [@mattia.borini](https://discuss.elastic.co/u/mattia.borini)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 3:40pm UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525 "2023-01-05T15:40:38Z")

</div>

Hi, I don't understand why I cannot find any field in the select when trying to create a Log Threshold Alert in Kibana (7.17). I can see data in Discover

---

## [Elasticsearch working with Electronjs](https://discuss.elastic.co/t/elasticsearch-working-with-electronjs/322564)

<div class="topic-metadata">

**Author:** [@Prashant\_Tyagi](https://discuss.elastic.co/u/Prashant_Tyagi)\
**Replies:** 0\
**Last updated:** [January 5, 2023, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-working-with-electronjs/322564 "2023-01-05T15:32:51Z")

</div>

Hi Everyone, I developed a Desktop search application with reactjs, nodejs, elasticsearch and docker. This application simply index all the files in your local system and then provides a search box to search the files. …

---

## [Is it possible to get current date in Kibana canvas markdown?](https://discuss.elastic.co/t/is-it-possible-to-get-current-date-in-kibana-canvas-markdown/320763)

<div class="topic-metadata">

**Author:** [@Dovydas](https://discuss.elastic.co/u/Dovydas)\
**Replies:** 3\
**Last updated:** [December 8, 2022, 4:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-current-date-in-kibana-canvas-markdown/320763 "2022-12-08T16:46:19Z")

</div>

Hi, I'm trying to display current date in Kibana canvas as part of my data overview, is it possible to get the current date or should I use different solution?

---

## [How can I add Json-Data to historic index](https://discuss.elastic.co/t/how-can-i-add-json-data-to-historic-index/322457)

<div class="topic-metadata">

**Author:** [@Steven\_Tschache](https://discuss.elastic.co/u/Steven_Tschache)\
**Replies:** 4\
**Last updated:** [January 5, 2023, 2:39pm UTC](https://discuss.elastic.co/t/how-can-i-add-json-data-to-historic-index/322457 "2023-01-05T14:39:23Z")

</div>

We currently are importing data using Logstash. One of the fields ("request") is a JSON stored as a string. We now require a section of this stored JSON as fields in the searchable index. I have updated Logstash filter u…

---

## [Winlogbeat unable to communicate with logstash](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862)

<div class="topic-metadata">

**Author:** [@doudou](https://discuss.elastic.co/u/doudou)\
**Replies:** 25\
**Last updated:** [January 5, 2023, 2:32pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862 "2023-01-05T14:32:37Z")

</div>

doudou@elkserver101:~$ doudou@elkserver101:~$ sudo /usr/share/logstash/bin/logstash -f /home/doudou/elk/pipeline.conf Using bundled JDK: /usr/share/logstash/jdk WARNING: Could not find logstash.yml which is typically loc…

---

## [Kubernetes unit tests failing on arm64 and other non-amd64 platforms](https://discuss.elastic.co/t/kubernetes-unit-tests-failing-on-arm64-and-other-non-amd64-platforms/320909)

<div class="topic-metadata">

**Author:** [@Jonathan\_Albrecht](https://discuss.elastic.co/u/Jonathan_Albrecht)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 2:05pm UTC](https://discuss.elastic.co/t/kubernetes-unit-tests-failing-on-arm64-and-other-non-amd64-platforms/320909 "2023-01-05T14:05:11Z")

</div>

I'd like to ask about some test failures and then open an issue if it makes sense. I'm running the metricbeat unit tests on arm64 and s390x and I'm getting these test failures: FAIL github.com/elastic/beats/v7/metri…

---

## [Elastic search 8.5.1](https://discuss.elastic.co/t/elastic-search-8-5-1/322335)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 2\
**Last updated:** [January 5, 2023, 1:26pm UTC](https://discuss.elastic.co/t/elastic-search-8-5-1/322335 "2023-01-05T13:26:02Z")

</div>

Hi Team, We have installed elasticsearch 8.5.1 and Kibana 8.5.1 on kubernetes cluster through helm charts Post installing the elasticsearch and kibana configured the ingress , I can able to access kibana but not able t…

---

## [Which methods can be used to analyze and improve data?](https://discuss.elastic.co/t/which-methods-can-be-used-to-analyze-and-improve-data/322528)

<div class="topic-metadata">

**Author:** [@Henrigo](https://discuss.elastic.co/u/Henrigo)\
**Replies:** 7\
**Last updated:** [January 5, 2023, 12:46pm UTC](https://discuss.elastic.co/t/which-methods-can-be-used-to-analyze-and-improve-data/322528 "2023-01-05T12:46:10Z")

</div>

I'm new to the field and I have a question. Which methods can be used to analyze and improve data?

---

## [Logstash variables in the output plugin for ADX/Log Analytics in Azure](https://discuss.elastic.co/t/logstash-variables-in-the-output-plugin-for-adx-log-analytics-in-azure/322461)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 4\
**Last updated:** [January 5, 2023, 12:04pm UTC](https://discuss.elastic.co/t/logstash-variables-in-the-output-plugin-for-adx-log-analytics-in-azure/322461 "2023-01-05T12:04:26Z")

</div>

Hello All, I have a question. I have a Logstash configuration with an output plugin for Log Analytics/Azure Data explorer in Azure. In my configuration (the output plugin part) instead of using the workspace ID and key…

---

## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/322390)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 11\
**Last updated:** [January 5, 2023, 11:45am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/322390 "2023-01-05T11:45:14Z")

</div>

Hello, I have 5 nodes under rhel 8.7, the system is hardened so the partitions /var /var/tmp /var/log /home /var/log/audit and /tmp are in noexec I managed to work around the problem on the first two nodes by adding th…

---

## [Create Rule when I have problems with the machine host](https://discuss.elastic.co/t/create-rule-when-i-have-problems-with-the-machine-host/322536)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 2\
**Last updated:** [January 5, 2023, 11:43am UTC](https://discuss.elastic.co/t/create-rule-when-i-have-problems-with-the-machine-host/322536 "2023-01-05T11:43:26Z")

</div>

Good morning! Is it possible create a rule to detect when the host machine is stopped or the cpu\_usage is superior than 90% I know that exists the inventory metric but I don't know if I can specify the host. I have man…

---

## [Warm node is failing to connecting with master node](https://discuss.elastic.co/t/warm-node-is-failing-to-connecting-with-master-node/322522)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 11:33am UTC](https://discuss.elastic.co/t/warm-node-is-failing-to-connecting-with-master-node/322522 "2023-01-05T11:33:26Z")

</div>

I am migrating single-node cluster to multi node. I have started up with setting up basic security on master node using this link. As mentioned in point 2 i have copied the output file to the warm node and i have saved…

[Previous page](https://discuss.elastic.co/latest.md?page=831)

[Next page](https://discuss.elastic.co/latest.md?page=833)
