# Latest **URL:** https://discuss.elastic.co/latest.md?page=866 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 867 --- ## [.monitoring-$product-$date index](https://discuss.elastic.co/t/monitoring-product-date-index/320766)
**Author:** [@plessuk](https://discuss.elastic.co/u/plessuk)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 9:57am UTC](https://discuss.elastic.co/t/monitoring-product-date-index/320766 "2022-12-08T09:57:34Z")
Hello team, I faced with problem, that monitoring indexes create without ILM policy, I tried to find solution, how I can configure ILM to this monitoring indexes, Tried create Index template with predefined ILM policy… --- ## [Upsert solution Logstash](https://discuss.elastic.co/t/upsert-solution-logstash/320764)
**Author:** [@Vincent001](https://discuss.elastic.co/u/Vincent001)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 9:56am UTC](https://discuss.elastic.co/t/upsert-solution-logstash/320764 "2022-12-08T09:56:36Z")
Hello, I have a solution with filebeat(on server) -\> logstash(on server) -\> elasticsearch(as service) i have to ingest data from file.log in json format. each row have an "GUID" element wich is use for upsert. there i… --- ## [Upgrade Java for Elasticsearch and logstash](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644)
**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\ **Replies:** 8\ **Last updated:** [December 8, 2022, 9:19am UTC](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644 "2022-12-08T09:19:37Z")
Hi, Can anyone let me know how I can upgrade the java JDK on Elasticsearch and logstash. Path : /usr/share/logstash/jdk/ Installed version : 11.0.14.1 2022-02-08 Upgrade to a version greater than 11.0.16 Path : /… --- ## [Http request curl: (52) Empty reply from server](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 6\ **Last updated:** [December 8, 2022, 8:48am UTC](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750 "2022-12-08T08:48:09Z")
We started a new Elasticsearch instance of 8.4.3 and the ES is up and running but when i am trying to send an HTTP request to the server I get a reply of curl: (52) Empty reply from server but when I pass the certificate… --- ## [Dec 8th, 2022: \[EN\] What you need to know: Elastic Global Threat Report 2022](https://discuss.elastic.co/t/dec-8th-2022-en-what-you-need-to-know-elastic-global-threat-report-2022/320712)
**Author:** [@jakeking](https://discuss.elastic.co/u/jakeking)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2022-en-what-you-need-to-know-elastic-global-threat-report-2022/320712 "2022-12-08T08:00:24Z")
It's been a few weeks since we published the Global Threat Report here at Elastic Security Labs, and we’re immensely happy with the feedback, responses and commentary from the Security Community. Building reports such… --- ## [Logs dont have date in timestamp](https://discuss.elastic.co/t/logs-dont-have-date-in-timestamp/320544)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 8:26am UTC](https://discuss.elastic.co/t/logs-dont-have-date-in-timestamp/320544 "2022-12-08T08:26:44Z")
hi! using logtash I collect logs from communigate, but they come with a timestamp without a date 15:32:37.159 SMTPI-875156(\[40.11.11.11\]) \[33221\] received encrypted, 9618 bytes 15:32:37.160 QUEUE(\[33221\]) from 9618 byt… --- ## [Getting the Values using Kibana by using StateCode](https://discuss.elastic.co/t/getting-the-values-using-kibana-by-using-statecode/316554)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 0\ **Last updated:** [October 13, 2022, 3:46pm UTC](https://discuss.elastic.co/t/getting-the-values-using-kibana-by-using-statecode/316554 "2022-10-13T15:46:52Z")
Hi, I have a variable which is TimeTaken , and I log the value as TimeTaken:10 with StateCode 1111 and TimeTaken 20 with StateCode 2222 When I use the KQL Query, sum(TimeTaken, Kql = 'StateCode:1111'). What value do w… --- ## [Wrong number of result using match\_phrase\_prefix](https://discuss.elastic.co/t/wrong-number-of-result-using-match-phrase-prefix/318838)
**Author:** [@Gorelldk](https://discuss.elastic.co/u/Gorelldk)\ **Replies:** 12\ **Last updated:** [December 8, 2022, 8:15am UTC](https://discuss.elastic.co/t/wrong-number-of-result-using-match-phrase-prefix/318838 "2022-12-08T08:15:22Z")
Hi all I have a on-premise ELK instance where i have an index with roughly 50.000 documents with 30 columns. One of the columns is name, indexed as a text. I have 4500 documents called VFCXXXX where the X is numbers, i… --- ## [Kubernetes Kibana 8.5.2 \[ERROR\]\[plugins.ruleRegistry\] Error: Server is stopping; must stop all async operations](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-error-plugins-ruleregistry-error-server-is-stopping-must-stop-all-async-operations/320754)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 7:59am UTC](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-error-plugins-ruleregistry-error-server-is-stopping-must-stop-all-async-operations/320754 "2022-12-08T07:59:57Z")
\[2022-12-08T07:57:35.263+00:00\]\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain \[2022-12-08T07:57:36.049+00:00\]\[INFO \]\[plugins.s… --- ## [Extract base64 encoded field from JSON message and write the decoded field to a file](https://discuss.elastic.co/t/extract-base64-encoded-field-from-json-message-and-write-the-decoded-field-to-a-file/320398)
**Author:** [@Arinjay\_Jain](https://discuss.elastic.co/u/Arinjay_Jain)\ **Replies:** 5\ **Last updated:** [December 8, 2022, 7:48am UTC](https://discuss.elastic.co/t/extract-base64-encoded-field-from-json-message-and-write-the-decoded-field-to-a-file/320398 "2022-12-08T07:48:51Z")
Hi All, I have the following logstash pipeline configuration. input { tcp { port =\> 5102 codec =\> json } } filter { json { source =\> "message" } } output { stdout { c… --- ## [Storage recommendations for Elastic](https://discuss.elastic.co/t/storage-recommendations-for-elastic/320655)
**Author:** [@Sireesha](https://discuss.elastic.co/u/Sireesha)\ **Replies:** 4\ **Last updated:** [December 8, 2022, 7:38am UTC](https://discuss.elastic.co/t/storage-recommendations-for-elastic/320655 "2022-12-08T07:38:29Z")
Hi , What is the recommended storage to deploy Elastic search . We are weighting options between local vs netapp storage . Please guide. --- ## [Kubernetes Kibana 8.5.2 healthcheck path? Tried /login but "connection refused"](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-healthcheck-path-tried-login-but-connection-refused/320753)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 7:35am UTC](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-healthcheck-path-tried-login-but-connection-refused/320753 "2022-12-08T07:35:48Z")
Kibana Statefulset: readinessProbe: # Override the readiness probe as GCLB reuses it for its own healthchecks httpGet: scheme: HTTPS path: /login … --- ## [Elastalert is not triggering the email notifications](https://discuss.elastic.co/t/elastalert-is-not-triggering-the-email-notifications/320735)
**Author:** [@vikash\_bugata](https://discuss.elastic.co/u/vikash_bugata)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 6:17am UTC](https://discuss.elastic.co/t/elastalert-is-not-triggering-the-email-notifications/320735 "2022-12-08T06:17:14Z")
I have defined the rules under the rules folder but my rules were not triggering email alerts even the matching expression is found on the logs. I am running the elastalert on the Linux OS and our elasticsearch version … --- ## [Is there any funtionality in Elastic Search using which we can perform mathematical operations or calculations on the entries in an index?](https://discuss.elastic.co/t/is-there-any-funtionality-in-elastic-search-using-which-we-can-perform-mathematical-operations-or-calculations-on-the-entries-in-an-index/320741)
**Author:** [@Shraddha29](https://discuss.elastic.co/u/Shraddha29)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 5:55am UTC](https://discuss.elastic.co/t/is-there-any-funtionality-in-elastic-search-using-which-we-can-perform-mathematical-operations-or-calculations-on-the-entries-in-an-index/320741 "2022-12-08T05:55:59Z")
Is there any functionality in Elastic Search using which we can perform mathematical operations or calculations on the entries in an index? --- ## [How to view remote clusters index metadata](https://discuss.elastic.co/t/how-to-view-remote-clusters-index-metadata/320518)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 4\ **Last updated:** [December 8, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-to-view-remote-clusters-index-metadata/320518 "2022-12-08T05:24:58Z")
Hi Team, I have a 3 clustesr setup like below cluster-query cluster-a cluster-b I added a & b as a remote clusters in cluster-query to search the data from query cluster kibana. Now i want to get the index mapping … --- ## [High Seach/Query Latency during Indexing Jobs](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615)
**Author:** [@vishnu\_teja](https://discuss.elastic.co/u/vishnu_teja)\ **Replies:** 7\ **Last updated:** [December 8, 2022, 4:47am UTC](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615 "2022-12-08T04:47:07Z")
Hi Everyone, We are recently facing issues with high latency in our Elastic Search Cluster, especially during Ingestion/Indexing in cluster. We run a batchJob which calls the update API of ES, so it will either update t… --- ## [API for configuring Fleet Server settings?](https://discuss.elastic.co/t/api-for-configuring-fleet-server-settings/318879)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 4:18am UTC](https://discuss.elastic.co/t/api-for-configuring-fleet-server-settings/318879 "2022-12-08T04:18:23Z")
Is there a programmatic way to set the values for Fleet Server as shown in this image here? I'm ok with command line tools, restful api, or some other automated service. There's a lot of elastic documentation, but I… --- ## [Agent stuck on updating but still send index](https://discuss.elastic.co/t/agent-stuck-on-updating-but-still-send-index/319391)
**Author:** [@xondeeptry](https://discuss.elastic.co/u/xondeeptry)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 3:53am UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-but-still-send-index/319391 "2022-12-08T03:53:12Z")
I'm just enroll new window fleet everything is fine data received by logstash and stored in our cluster but agent stuck on updating in fleet. When i get agent status everything is healthy unless fleet-server stuck on re… --- ## [Termsvector of an element of array](https://discuss.elastic.co/t/termsvector-of-an-element-of-array/320732)
**Author:** [@tim2020work2](https://discuss.elastic.co/u/tim2020work2)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 3:48am UTC](https://discuss.elastic.co/t/termsvector-of-an-element-of-array/320732 "2022-12-08T03:48:49Z")
How do I view terms vector of a field in an element of array? API \_termvectors accept input "fields". i.e "fields" : \["msg"\], } If I want to view term vector of an element of array, the following does not work "f… --- ## [What if there are no rules enabled?](https://discuss.elastic.co/t/what-if-there-are-no-rules-enabled/320714)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 3:48am UTC](https://discuss.elastic.co/t/what-if-there-are-no-rules-enabled/320714 "2022-12-08T03:48:24Z")
Will Elastic Security / Endpoint Protection still protect/prevent malware without the rules enabled in the SIEM? --- ## [Kubernetes ConfigMap for S3 bucket?](https://discuss.elastic.co/t/kubernetes-configmap-for-s3-bucket/320728)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 2:59am UTC](https://discuss.elastic.co/t/kubernetes-configmap-for-s3-bucket/320728 "2022-12-08T02:59:44Z")
I am trying to bring up master Statefulset with 3 pods. I previously had to run the following script in Elasticsearch Dockerfile: yes | bin/elasticsearch-plugin install repository-s3 Now that s3 snapshot is built into … --- ## [Elastic agent is unhealthy](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 2:40am UTC](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664 "2022-12-08T02:40:43Z")
Hi all, I have a case when after i enroll the fleet server to Elasticsearch. It become health for a while then became unhealthy. I checked the log then it said this: {"@timestamp":"2022-12-07T08:58:09.831566388Z","ag… --- ## [What privileges does the metricbeat api key need?](https://discuss.elastic.co/t/what-privileges-does-the-metricbeat-api-key-need/320727)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 2:28am UTC](https://discuss.elastic.co/t/what-privileges-does-the-metricbeat-api-key-need/320727 "2022-12-08T02:28:55Z")
Setting up monitoring and following the instruction https://www.elastic.co/guide/en/beats/metricbeat/7.17/metricbeat-installation-configuration.html I world rather not use Elastic... --- ## [Nodes stats API CPU usage value is -1](https://discuss.elastic.co/t/nodes-stats-api-cpu-usage-value-is-1/319782)
**Author:** [@ysk8830](https://discuss.elastic.co/u/ysk8830)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 1:13am UTC](https://discuss.elastic.co/t/nodes-stats-api-cpu-usage-value-is-1/319782 "2022-12-08T01:13:40Z")
Hello, I have a question. I have installed elasticsearch on azure. OS is Ubuntu. And look up the cpu usage. I ran '\_cat/nodes?format=json' , and the cpu value is -1. can not understand. I browsed the documentation (G… --- ## [Deletion of existing index data when threshold reached](https://discuss.elastic.co/t/deletion-of-existing-index-data-when-threshold-reached/320598)
**Author:** [@atpr](https://discuss.elastic.co/u/atpr)\ **Replies:** 5\ **Last updated:** [December 7, 2022, 10:48pm UTC](https://discuss.elastic.co/t/deletion-of-existing-index-data-when-threshold-reached/320598 "2022-12-07T22:48:05Z")
Hi Expert, We are looking to support the customer use case where they are buying the license as per the GB of data they use or no of records they store or no of days data stored. As per license they can either buy more… --- ## [Convert text field to date](https://discuss.elastic.co/t/convert-text-field-to-date/320721)
**Author:** [@stefanocog](https://discuss.elastic.co/u/stefanocog)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 10:36pm UTC](https://discuss.elastic.co/t/convert-text-field-to-date/320721 "2022-12-07T22:36:21Z")
Hello, I need convert a field in text format into date, i need to have another date field besides @timestamp, the @timestamp field identifies the arrival time of the log, instead the dataRisposta field (in case of respo… --- ## [Reproduce App search "Top queries with no clicks" in Kibana](https://discuss.elastic.co/t/reproduce-app-search-top-queries-with-no-clicks-in-kibana/318595)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 11:26pm UTC](https://discuss.elastic.co/t/reproduce-app-search-top-queries-with-no-clicks-in-kibana/318595 "2022-11-09T23:26:32Z")
Hello, I'm trying to reproduce the App Search analytics dashboard in Kibana to have more flexibility. I could reproduce everything but the "Top queries with no clicks" dashboard because combines two document types a… --- ## [How to integrate kibana dashboards as a widget to other javascript based native UI](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboards-as-a-widget-to-other-javascript-based-native-ui/320265)
**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\ **Replies:** 6\ **Last updated:** [December 7, 2022, 10:03pm UTC](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboards-as-a-widget-to-other-javascript-based-native-ui/320265 "2022-12-07T22:03:39Z")
Is there any easy way to integrate Kibana dashboard / panel as a widget to third party UI(developed using the react js etc ). We dont want user to navigate to kibana from our native apps and instead show the dashboards … --- ## [Filebeat running as a container not displaying logs in Kibana](https://discuss.elastic.co/t/filebeat-running-as-a-container-not-displaying-logs-in-kibana/320626)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 11\ **Last updated:** [December 7, 2022, 9:55pm UTC](https://discuss.elastic.co/t/filebeat-running-as-a-container-not-displaying-logs-in-kibana/320626 "2022-12-07T21:55:39Z")
We are running filebeat:8.1.3 as a docker container using docker-compose file in Linux RHEL machine. We have provided the input type as filestream and provided the path for log files , but still it is not injecting any … --- ## [Elasticsearch docker container 8.5.2 startup ERROR: Elasticsearch did not exit normally](https://discuss.elastic.co/t/elasticsearch-docker-container-8-5-2-startup-error-elasticsearch-did-not-exit-normally/320634)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 4\ **Last updated:** [December 7, 2022, 9:30pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-8-5-2-startup-error-elasticsearch-did-not-exit-normally/320634 "2022-12-07T21:30:13Z")
Elasticsearch docker container 8.5.2 startup with this error: ERROR: Elasticsearch did not exit normally - check the logs at /usr/share/elasticsearch/logs/elasticsearch.log 2022-12-07 02:08:06,247 process reaper (pid 11… [Previous page](https://discuss.elastic.co/latest.md?page=865) [Next page](https://discuss.elastic.co/latest.md?page=867)