# Latest

**URL:** https://discuss.elastic.co/latest.md?page=858

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 859

---

## [Statuspage.io integration](https://discuss.elastic.co/t/statuspage-io-integration/321218)

<div class="topic-metadata">

**Author:** [@javaripa](https://discuss.elastic.co/u/javaripa)\
**Replies:** 0\
**Last updated:** [December 14, 2022, 1:06pm UTC](https://discuss.elastic.co/t/statuspage-io-integration/321218 "2022-12-14T13:06:40Z")

</div>

Is it possible to integrate Elastic stack with Statuspage? As far as I know, Elastic seems to use Statuspage.io already! ESS (Public) Status

---

## [How to consume a Elastic indexs between different Clouds](https://discuss.elastic.co/t/how-to-consume-a-elastic-indexs-between-different-clouds/321162)

<div class="topic-metadata">

**Author:** [@Rodrigoscotti](https://discuss.elastic.co/u/Rodrigoscotti)\
**Replies:** 5\
**Last updated:** [December 14, 2022, 12:35pm UTC](https://discuss.elastic.co/t/how-to-consume-a-elastic-indexs-between-different-clouds/321162 "2022-12-14T12:35:15Z")

</div>

We run Elasticsearch using a self-hosting solution from GCP. Our services consume a BD in Elastic to work correctly. A new client asks us if it is possible to consume their Elastic BD directly from their Elastic self-hos…

---

## [Math operation on different documents/queries](https://discuss.elastic.co/t/math-operation-on-different-documents-queries/320875)

<div class="topic-metadata">

**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 12:25pm UTC](https://discuss.elastic.co/t/math-operation-on-different-documents-queries/320875 "2022-12-14T12:25:31Z")

</div>

Hi, I'm trying to create metric in Kibana dashboard(Lens), where i will see difference between two different fields (events\_passed - events\_all) (subtraction) That fields are available in two different documents Can i…

---

## [Parse array in Json log file with Filebeat 7.7.1](https://discuss.elastic.co/t/parse-array-in-json-log-file-with-filebeat-7-7-1/320736)

<div class="topic-metadata">

**Author:** [@roshann](https://discuss.elastic.co/u/roshann)\
**Replies:** 2\
**Last updated:** [December 14, 2022, 12:12pm UTC](https://discuss.elastic.co/t/parse-array-in-json-log-file-with-filebeat-7-7-1/320736 "2022-12-14T12:12:17Z")

</div>

Hi, I have a json log file as below: { "Format": "IDEA0", "ID": "1c5ae2e1-bf16-43d6-9233-5865f83ad180", "DetectTime": "2022-12-03T11:17:23.589015+00:00", "EventTime": "2022-12-03T11:17:23.589020+00:00", "Category": \["A…

---

## [Send raw logs to elastic server](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 13\
**Last updated:** [December 14, 2022, 11:54am UTC](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096 "2022-12-14T11:54:36Z")

</div>

Hi I have 2 question about elastic 1-how can i send all files located in specific path with random name via filebeat like this: /var/log/app/serverlog.log /var/log/app/applog.log /var/log/app/exceptionlog.log ... t…

---

## [Timestamp includes different timezones](https://discuss.elastic.co/t/timestamp-includes-different-timezones/321190)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 11:52am UTC](https://discuss.elastic.co/t/timestamp-includes-different-timezones/321190 "2022-12-14T11:52:41Z")

</div>

Hello All, In response from backend data I have event with timezone, i have added one field in elastic templte :nextEvent. The date format of above fields are important, it has timezone in it.. like below: "nextEvent"…

---

## [Skip xpack authentication for a specific endpoint](https://discuss.elastic.co/t/skip-xpack-authentication-for-a-specific-endpoint/321122)

<div class="topic-metadata">

**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\
**Replies:** 3\
**Last updated:** [December 14, 2022, 11:34am UTC](https://discuss.elastic.co/t/skip-xpack-authentication-for-a-specific-endpoint/321122 "2022-12-14T11:34:54Z")

</div>

I have enabled x-pack and all the requests are expected to provide the credentials to access Elasticsearch. I have a scenario where for certain endpoints, I must be able to access without providing credentials. It means…

---

## [Dec 13th, 2022: \[en\] Debugging Logstash and Filebeat pipelines with Logshark](https://discuss.elastic.co/t/dec-13th-2022-en-debugging-logstash-and-filebeat-pipelines-with-logshark/319308)

<div class="topic-metadata">

**Author:** [@Ugo\_Sangiorgi](https://discuss.elastic.co/u/Ugo_Sangiorgi)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 11:29am UTC](https://discuss.elastic.co/t/dec-13th-2022-en-debugging-logstash-and-filebeat-pipelines-with-logshark/319308 "2022-12-14T11:29:53Z")

</div>

I worked for many years as a consultant in Elastic, and coding pipelines in Logstash and Filebeat for large Observability use cases that ingested terabytes worth of logs every day was our bread and butter. Coding pip…

---

## [Configuration LDAPS](https://discuss.elastic.co/t/configuration-ldaps/320441)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 8\
**Last updated:** [December 14, 2022, 11:29am UTC](https://discuss.elastic.co/t/configuration-ldaps/320441 "2022-12-14T11:29:20Z")

</div>

Hi everybody. Tell me please. I'm trying to set up a config for authorization via LDAP. I can't understand this setting xpack: security: authc: realms: ldap: ldap1: order: 0 url: "ldaps://ldap.example.com:636" …

---

## [Elasticsearch-create-enrollment-token using IP from wrong ethernet adaptor](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999)

<div class="topic-metadata">

**Author:** [@vimalv](https://discuss.elastic.co/u/vimalv)\
**Replies:** 5\
**Last updated:** [December 14, 2022, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999 "2022-12-14T10:55:52Z")

</div>

Hi, We have two ethernet adaptors and hence 2 IPs, When we try to generate enrollment token, it always uses 2nd IP by default. Is there any way to override the default and specify which IP to use or can we use hostname…

---

## [The maxiunm fields support in auditbeat](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205)

<div class="topic-metadata">

**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\
**Replies:** 0\
**Last updated:** [December 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205 "2022-12-14T10:23:48Z")

</div>

hello team, may i know what the biggest length can be support in auditbeat ? as i tested, it looks like auditbeat truncated the fields vaule here when it long enough for example, when i enter a super long fake curl co…

---

## [After enabling the https not able to launch kibana dashboard](https://discuss.elastic.co/t/after-enabling-the-https-not-able-to-launch-kibana-dashboard/321200)

<div class="topic-metadata">

**Author:** [@Manjiri](https://discuss.elastic.co/u/Manjiri)\
**Replies:** 2\
**Last updated:** [December 14, 2022, 10:06am UTC](https://discuss.elastic.co/t/after-enabling-the-https-not-able-to-launch-kibana-dashboard/321200 "2022-12-14T10:06:41Z")

</div>

We enable https but we are able to launch the Elasticsearch URL but we are not able to launch kibana it is showing can't reach the page

---

## [Send mustach tag in Weebhook call without having it interpreted?](https://discuss.elastic.co/t/send-mustach-tag-in-weebhook-call-without-having-it-interpreted/320165)

<div class="topic-metadata">

**Author:** [@JohnJ\_M](https://discuss.elastic.co/u/JohnJ_M)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 9:34am UTC](https://discuss.elastic.co/t/send-mustach-tag-in-weebhook-call-without-having-it-interpreted/320165 "2022-12-14T09:34:31Z")

</div>

Hi the community, I am looking a way to send via webhook mustach tab (like {{ctx.payload.total\_assets.hits.total}} that should not be interpreted. The reason: The main watcher create new watchers using the webhook. Th…

---

## [Alerting based on custom APM transactions](https://discuss.elastic.co/t/alerting-based-on-custom-apm-transactions/321028)

<div class="topic-metadata">

**Author:** [@qatium-developers](https://discuss.elastic.co/u/qatium-developers)\
**Replies:** 2\
**Last updated:** [December 14, 2022, 9:24am UTC](https://discuss.elastic.co/t/alerting-based-on-custom-apm-transactions/321028 "2022-12-14T09:24:33Z")

</div>

Hi all, We are developing a kind of progressive web app, and 90% of the code is run in the browser. During last year we used RUM APM with custom transactions to trace all the domain code and get performance insights. R…

---

## [Send Elasticsearch logs to Graylog](https://discuss.elastic.co/t/send-elasticsearch-logs-to-graylog/321199)

<div class="topic-metadata">

**Author:** [@tiwaxa4826](https://discuss.elastic.co/u/tiwaxa4826)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 8:59am UTC](https://discuss.elastic.co/t/send-elasticsearch-logs-to-graylog/321199 "2022-12-14T08:59:58Z")

</div>

Hi! I have an on-premise infrastructure. I historically have a Graylog to centralize my logs. For my application needs, I have installed an Elasticsearch cluster and I would like to send Elasticsearch logs to Graylog. N…

---

## [Dec 14, 2022: \[EN\] Our favorite Kibana application - Discover](https://discuss.elastic.co/t/dec-14-2022-en-our-favorite-kibana-application-discover/321052)

<div class="topic-metadata">

**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Replies:** 0\
**Last updated:** [December 14, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-14-2022-en-our-favorite-kibana-application-discover/321052 "2022-12-14T08:00:16Z")

</div>

For this advent post, I decided I will ask my teammates for their favourite Kibana application. We all picked discover. Kibana's discover is the most used application of Kibana. It lets you explore your data and ask …

---

## [Ordering on parent-aggregations based on sub-aggregrations](https://discuss.elastic.co/t/ordering-on-parent-aggregations-based-on-sub-aggregrations/320437)

<div class="topic-metadata">

**Author:** [@Rajamallikeerthana\_R](https://discuss.elastic.co/u/Rajamallikeerthana_R)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 7:51am UTC](https://discuss.elastic.co/t/ordering-on-parent-aggregations-based-on-sub-aggregrations/320437 "2022-12-14T07:51:34Z")

</div>

Hi, I am using elasticsearch 6.3 . I have an index event\_v4 which store the data of all events handled by our company. Now i need to get a list of cities that satisfy a certain conditions. But if the count is less than r…

---

## [Regarding Ingest Node Pipeline](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 9\
**Last updated:** [December 14, 2022, 7:26am UTC](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094 "2022-12-14T07:26:52Z")

</div>

Hi team, We would like to know about the ingest node pipeline. we are new in this platform. Normally, an application team sending the logs through the below mentioned path. Logs Flow Path: FileBeat/MetricBeat -\> AWS K…

---

## [Elastic search in splitting the words if dot comes between](https://discuss.elastic.co/t/elastic-search-in-splitting-the-words-if-dot-comes-between/321187)

<div class="topic-metadata">

**Author:** [@jothi\_mano](https://discuss.elastic.co/u/jothi_mano)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 7:21am UTC](https://discuss.elastic.co/t/elastic-search-in-splitting-the-words-if-dot-comes-between/321187 "2022-12-14T07:21:37Z")

</div>

If a dot comes between the search string , it is not returning the proper results. Example : search string ' 0002.AB' Need a result which should list the results that matches the whole word first and followed by other…

---

## [Custom volumeMounts with Elastic Cloud on Kubernetes](https://discuss.elastic.co/t/custom-volumemounts-with-elastic-cloud-on-kubernetes/321128)

<div class="topic-metadata">

**Author:** [@deepflyz](https://discuss.elastic.co/u/deepflyz)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 7:21am UTC](https://discuss.elastic.co/t/custom-volumemounts-with-elastic-cloud-on-kubernetes/321128 "2022-12-14T07:21:15Z")

</div>

Hi, I'm trying to install Elastic Cloud on Oracle OCI Kubernetes but I'm facing difficulties to use a custom volumeMounts. Here is the yml file: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadat…

---

## [Logstash - Reading files from Windows Network Share](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105)

<div class="topic-metadata">

**Author:** [@anon99430464](https://discuss.elastic.co/u/anon99430464)\
**Replies:** 4\
**Last updated:** [December 14, 2022, 7:05am UTC](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105 "2022-12-14T07:05:50Z")

</div>

I'm trying to read log files from a network share on Windows. I know this isn't best practice, but currently there is no way around it, and from the documentation it sounds like it is supported. However I can not get th…

---

## [Ingest pipeline - Override datastream](https://discuss.elastic.co/t/ingest-pipeline-override-datastream/321163)

<div class="topic-metadata">

**Author:** [@jeff.diademi](https://discuss.elastic.co/u/jeff.diademi)\
**Replies:** 2\
**Last updated:** [December 14, 2022, 6:48am UTC](https://discuss.elastic.co/t/ingest-pipeline-override-datastream/321163 "2022-12-14T06:48:20Z")

</div>

Today, I'm ingesting logs from kubernetes containers pods using elastic agent kubernetes integration. It works fine. Now, I have a use case which is the following: Some specific logs records need to be ingested in anot…

---

## [Elastic Agent ignores the Agent Binary Download location setting](https://discuss.elastic.co/t/elastic-agent-ignores-the-agent-binary-download-location-setting/320276)

<div class="topic-metadata">

**Author:** [@username11](https://discuss.elastic.co/u/username11)\
**Replies:** 4\
**Last updated:** [December 14, 2022, 6:34am UTC](https://discuss.elastic.co/t/elastic-agent-ignores-the-agent-binary-download-location-setting/320276 "2022-12-14T06:34:19Z")

</div>

Hi. This is basically a repeat of this thread, which did not get any replies. Right now I am testing the Elastic Agents in a test environment, which does not have direct internet access (and neither will my live environm…

---

## [How to handle missing values for date datatype while ingesting the data in Elasticsearch](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524)

<div class="topic-metadata">

**Author:** [@Durga\_Prasad](https://discuss.elastic.co/u/Durga_Prasad)\
**Replies:** 3\
**Last updated:** [December 14, 2022, 5:49am UTC](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524 "2022-12-14T05:49:12Z")

</div>

There are few empty values for date datatype field in a csv file. So, while ingesting the data in Kibana (uploading csv file), getting the below error. Some documents could not be imported 1445 out of 45436 documents c…

---

## [Nested List Ingest Pipeline](https://discuss.elastic.co/t/nested-list-ingest-pipeline/320504)

<div class="topic-metadata">

**Author:** [@dwissm1](https://discuss.elastic.co/u/dwissm1)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 1:01am UTC](https://discuss.elastic.co/t/nested-list-ingest-pipeline/320504 "2022-12-14T01:01:14Z")

</div>

Hey Folks. I have a nested list inside of a list (obs - below) in some data from my tempest weather station. I want to split out the csv and I have the field names. I tried a foreach and a foreach with an append... no…

---

## [Forgot how to get geoip enrichment to work for packetbeat](https://discuss.elastic.co/t/forgot-how-to-get-geoip-enrichment-to-work-for-packetbeat/321170)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 12:15am UTC](https://discuss.elastic.co/t/forgot-how-to-get-geoip-enrichment-to-work-for-packetbeat/321170 "2022-12-14T00:15:33Z")

</div>

I got geoip enrichment working with packetbeat a few days ago in a test set up with elasticsearch 8.5 and kibana 8.5. But I tore down the servers this morning so that I can repeat the installation. For some reason, th…

---

## [Incorrect date format in Aggregation Based Table in Kibana](https://discuss.elastic.co/t/incorrect-date-format-in-aggregation-based-table-in-kibana/320819)

<div class="topic-metadata">

**Author:** [@victorhmorales](https://discuss.elastic.co/u/victorhmorales)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:42pm UTC](https://discuss.elastic.co/t/incorrect-date-format-in-aggregation-based-table-in-kibana/320819 "2022-12-13T22:42:51Z")

</div>

Hello, I just upgraded Elastic from 8.4.3 to 8.5.2 and I'm having a problem using fields of type "date" in tables created in Aggregation Based in Kibana. The reason for using table in Aggregation Based is the 'Export' …

---

## [Using Curl to change cluster settings](https://discuss.elastic.co/t/using-curl-to-change-cluster-settings/321086)

<div class="topic-metadata">

**Author:** [@matt\_dee](https://discuss.elastic.co/u/matt_dee)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:21pm UTC](https://discuss.elastic.co/t/using-curl-to-change-cluster-settings/321086 "2022-12-13T22:21:39Z")

</div>

Hi. I'm quite new to ES and have done most of the admin through kibana I was doing a cluster restart and disabled shard allocation via dev tools through Kibana. Now I've started the nodes back up Kibana is giving an e…

---

## [Cannot see any host in elastic security and also cannot see any data from auditbeat or winlogbeat](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983)

<div class="topic-metadata">

**Author:** [@Mohaiminul\_Islam](https://discuss.elastic.co/u/Mohaiminul_Islam)\
**Replies:** 13\
**Last updated:** [December 13, 2022, 9:03pm UTC](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983 "2022-12-13T21:03:26Z")

</div>

I am trying to create a home lab. I have setup everything in ubuntu machine in vmware. The auditbeat is also in this machine. But I cannot see any data from auditbeat or even the host itself in security overview. Then I …

---

## [Configure PKI authentication for Elasticsearch 7.7](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686)

<div class="topic-metadata">

**Author:** [@samhagin](https://discuss.elastic.co/u/samhagin)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 8:45pm UTC](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686 "2022-12-13T20:45:56Z")

</div>

This guide Elasticsearch Security: Configure TLS/SSL & PKI Authentication | Elastic Blog shows how to configure PKI for Elasticsearch version 6.5 however this doesn't work for version 7.7.0 ( the version I'm currently us…

[Previous page](https://discuss.elastic.co/latest.md?page=857)

[Next page](https://discuss.elastic.co/latest.md?page=859)
