# Latest

**URL:** https://discuss.elastic.co/latest.md?page=891

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 892

---

## [Reporting SQL relational data (Oracle) in Kibana](https://discuss.elastic.co/t/reporting-sql-relational-data-oracle-in-kibana/319178)

<div class="topic-metadata">

**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 11:14am UTC](https://discuss.elastic.co/t/reporting-sql-relational-data-oracle-in-kibana/319178 "2022-11-17T11:14:27Z")

</div>

Hi all, just a theoric question about Kibana reporting capabilities. We have a Oracle database where there are at least 10 tables we want to report data of. We started using Microsoft Power Bi and the results were ver…

---

## [The client is unable to verify that the server is Elasticsearch due security privileges on the server side](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015)

<div class="topic-metadata">

**Author:** [@Vasuji](https://discuss.elastic.co/u/Vasuji)\
**Replies:** 4\
**Last updated:** [November 17, 2022, 8:23pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015 "2022-11-17T20:23:05Z")

</div>

Why am I getting this error in my Mac with Elasticsearch 8.5.1 running in Docker and Jupyter notebook is supposed to communicate with Elasticsearch through port 9200? The client is unable to verify that the server is El…

---

## [Impossible query response?](https://discuss.elastic.co/t/impossible-query-response/319236)

<div class="topic-metadata">

**Author:** [@iamthealex1](https://discuss.elastic.co/u/iamthealex1)\
**Replies:** 3\
**Last updated:** [November 17, 2022, 7:50pm UTC](https://discuss.elastic.co/t/impossible-query-response/319236 "2022-11-17T19:50:35Z")

</div>

POST /metricbeat-2022.11.17/\_search { "size": 2, "\_source": \["system.process.cpu.total.pct"\], "query": { "bool": { "must": \[ {"match": { "event.dataset": "system.process" }}, {"range": {…

---

## [Adding more log directories to System Integration](https://discuss.elastic.co/t/adding-more-log-directories-to-system-integration/319237)

<div class="topic-metadata">

**Author:** [@ster1ingArch3r](https://discuss.elastic.co/u/ster1ingArch3r)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 7:17pm UTC](https://discuss.elastic.co/t/adding-more-log-directories-to-system-integration/319237 "2022-11-17T19:17:28Z")

</div>

Heres what I have going on. I have created the elastic stack 3 nodes +a kibana Node which also is serving as my fleet server. I can deploy agents to new servers and endpoints and collect data from them. Unfortunately one…

---

## [Create some tasks that may never finish](https://discuss.elastic.co/t/create-some-tasks-that-may-never-finish/318990)

<div class="topic-metadata">

**Author:** [@Sunt-ing](https://discuss.elastic.co/u/Sunt-ing)\
**Replies:** 6\
**Last updated:** [November 17, 2022, 6:50pm UTC](https://discuss.elastic.co/t/create-some-tasks-that-may-never-finish/318990 "2022-11-17T18:50:34Z")

</div>

In order to create a testbed for anomaly detection, I need to create some tasks that may never finish (unless you manually kill them) in ES. Is there any way to do that? I do find some problems with storage hardware may …

---

## [Elastic Analyst lab license](https://discuss.elastic.co/t/elastic-analyst-lab-license/319104)

<div class="topic-metadata">

**Author:** [@Michael\_Scott](https://discuss.elastic.co/u/Michael_Scott)\
**Replies:** 4\
**Last updated:** [November 17, 2022, 6:46pm UTC](https://discuss.elastic.co/t/elastic-analyst-lab-license/319104 "2022-11-17T18:46:43Z")

</div>

Hey All, I'm a little confused as my strigo labs only have a basic license meaning that there are several features of the course I cannot carry out. Any advice on how to deal with this? I have the standard subscription…

---

## [Automate Kibana query](https://discuss.elastic.co/t/automate-kibana-query/316671)

<div class="topic-metadata">

**Author:** [@baseely](https://discuss.elastic.co/u/baseely)\
**Replies:** 3\
**Last updated:** [October 21, 2022, 1:41am UTC](https://discuss.elastic.co/t/automate-kibana-query/316671 "2022-10-21T01:41:02Z")

</div>

Hello Community, I want to use some REST API so that I will be able to automate long list of queries that should be created with the same pattern at the end. For example: \<WORD1\> AND message: \<SAME\_CONSTANT\_WORD\_THAT\_…

---

## [Python api client connection with proxy](https://discuss.elastic.co/t/python-api-client-connection-with-proxy/319232)

<div class="topic-metadata">

**Author:** [@lucas.queiroz](https://discuss.elastic.co/u/lucas.queiroz)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 5:46pm UTC](https://discuss.elastic.co/t/python-api-client-connection-with-proxy/319232 "2022-11-17T17:46:17Z")

</div>

Hi use the following class to connect the client to Elastic Cloud running in Azure. The job runs in kubernetes updating my index with some data in a daily basis, and I need to setup the proxy from my organization in orde…

---

## [Removing xpack.maps.enabled as advised breaks Kibana](https://discuss.elastic.co/t/removing-xpack-maps-enabled-as-advised-breaks-kibana/319222)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [November 17, 2022, 5:18pm UTC](https://discuss.elastic.co/t/removing-xpack-maps-enabled-as-advised-breaks-kibana/319222 "2022-11-17T17:18:12Z")

</div>

Kibana 7.17 The Kibana Upgrade Assistant is showing me a Critical issue: Setting "xpack.maps.enabled" is deprecated Configuring "xpack.maps.enabled" is deprecated and will be removed in 8.0.0. How to fix Remove "xp…

---

## [Custom Logs integration, drop\_fields processor doesn't work](https://discuss.elastic.co/t/custom-logs-integration-drop-fields-processor-doesnt-work/319228)

<div class="topic-metadata">

**Author:** [@luca.derugeriis](https://discuss.elastic.co/u/luca.derugeriis)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/custom-logs-integration-drop-fields-processor-doesnt-work/319228 "2022-11-17T17:16:04Z")

</div>

Hi everyone, I'm trying get a drop\_fields processor working inside Custom Logs integration in Elastic Agent. This is my configuration in the "processors" text area in the integration page on kibana. - drop\_fields: …

---

## [Anomaly Detection doesn't recongise patterns](https://discuss.elastic.co/t/anomaly-detection-doesnt-recongise-patterns/319229)

<div class="topic-metadata">

**Author:** [@PeaDubYa](https://discuss.elastic.co/u/PeaDubYa)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/anomaly-detection-doesnt-recongise-patterns/319229 "2022-11-17T17:16:17Z")

</div>

I'm trying out the anomaly detection package for the first time, and there is a nice example in the tutorial, whereby elastic learns temporal oscillations. I've configured a very basic job, but the ML does not pick up t…

---

## [How can I sort strings with numbers alphabetically?](https://discuss.elastic.co/t/how-can-i-sort-strings-with-numbers-alphabetically/319088)

<div class="topic-metadata">

**Author:** [@Michal\_Stefaniuk](https://discuss.elastic.co/u/Michal_Stefaniuk)\
**Replies:** 9\
**Last updated:** [November 17, 2022, 5:11pm UTC](https://discuss.elastic.co/t/how-can-i-sort-strings-with-numbers-alphabetically/319088 "2022-11-17T17:11:04Z")

</div>

Hey guys, one quick question. I have a set of example records: Test 123 sesi 501 Alva rout and I want those to be sorted in asc/desc order in case insensitive and alphabeticall order, just like this: 501 Alva rout 12…

---

## [We are getting Ruby exception error in logstash](https://discuss.elastic.co/t/we-are-getting-ruby-exception-error-in-logstash/319188)

<div class="topic-metadata">

**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 5:02pm UTC](https://discuss.elastic.co/t/we-are-getting-ruby-exception-error-in-logstash/319188 "2022-11-17T17:02:46Z")

</div>

Hi, we are getting ruby exception error in logstash as shown in below. \[ERROR\]\[logstash.filters.ruby \]\[xxxxxxxxxx\]\[634d732ae35f96b2b7a40d6e0005815a22897257fd1aa2279fe1d02125a79ba0\] Ruby exception occurred: undefined…

---

## [Kibana logs](https://discuss.elastic.co/t/kibana-logs/319115)

<div class="topic-metadata">

**Author:** [@mauroslucios](https://discuss.elastic.co/u/mauroslucios)\
**Replies:** 2\
**Last updated:** [November 17, 2022, 4:44pm UTC](https://discuss.elastic.co/t/kibana-logs/319115 "2022-11-17T16:44:27Z")

</div>

I have an ELK cluster that has a different time in the logs than the machine where it is installed. Does anyone have any idea how to resolve? Below is an image of my server.

---

## [Set dynamic headers in every request](https://discuss.elastic.co/t/set-dynamic-headers-in-every-request/319118)

<div class="topic-metadata">

**Author:** [@rbr66](https://discuss.elastic.co/u/rbr66)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 3:46pm UTC](https://discuss.elastic.co/t/set-dynamic-headers-in-every-request/319118 "2022-11-17T15:46:17Z")

</div>

Hi, We are monitoring a series of machines with heartbeat and we have a special casuistic in which we need heartbeat to send the timestamp in which the request is made, we don't care if by headers, params, or query para…

---

## [Angular routing Kibana iframe](https://discuss.elastic.co/t/angular-routing-kibana-iframe/319160)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 9:56am UTC](https://discuss.elastic.co/t/angular-routing-kibana-iframe/319160 "2022-11-17T09:56:31Z")

</div>

Hello All, We've intregrated kibana pages into angular web application using iframe,Now the issue that we are facing is we need to redirect from our home page dashboard(monitoring) -conataining several url to designate…

---

## [Wrong path in logstash output (FileBeat)](https://discuss.elastic.co/t/wrong-path-in-logstash-output-filebeat/319215)

<div class="topic-metadata">

**Author:** [@Vrops](https://discuss.elastic.co/u/Vrops)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 3:22pm UTC](https://discuss.elastic.co/t/wrong-path-in-logstash-output-filebeat/319215 "2022-11-17T15:22:55Z")

</div>

I have a problem when taking logs with FileBeat to Logstash, my logs arrive well in a file but the path of log is wrong in the output (It's the default location on an apache server). Here the config of FileBeat in the c…

---

## [Elasticsearch isn't allowed to allocate this shard to any of the nodes in the cluster](https://discuss.elastic.co/t/elasticsearch-isnt-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster/319085)

<div class="topic-metadata">

**Author:** [@sunil\_s](https://discuss.elastic.co/u/sunil_s)\
**Replies:** 11\
**Last updated:** [November 17, 2022, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-isnt-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster/319085 "2022-11-17T15:14:58Z")

</div>

Shards are unassigned s&pretty" { "persistent" : { "cluster.routing.allocation.enable" : "all", "indices.recovery.max\_bytes\_per\_sec" : "50mb" }, "transient" : { "cluster.routing.allocation.enable" : "…

---

## [TLS Logstash](https://discuss.elastic.co/t/tls-logstash/318865)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 2:50pm UTC](https://discuss.elastic.co/t/tls-logstash/318865 "2022-11-17T14:50:45Z")

</div>

Hello, I have an ELK stack secured in TLS. Exchanges between nodes and with kibana are secure. I have set up logstash to collect logs from the different equipments via the syslog protocol. I have questions about the …

---

## [Winlogbeat not sending logs after xpack.security was enabled](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-after-xpack-security-was-enabled/319213)

<div class="topic-metadata">

**Author:** [@Tucker\_Green](https://discuss.elastic.co/u/Tucker_Green)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 2:48pm UTC](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-after-xpack-security-was-enabled/319213 "2022-11-17T14:48:06Z")

</div>

Hey guys! I had the stack running, winlogbeats were sending logs to elastic and I could view them in kibana. I then enabled security so we could have accounts and logins for different users, and it broke everything. I …

---

## [Logstash Cloudwatch Logs](https://discuss.elastic.co/t/logstash-cloudwatch-logs/319211)

<div class="topic-metadata">

**Author:** [@Ryan5](https://discuss.elastic.co/u/Ryan5)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 2:40pm UTC](https://discuss.elastic.co/t/logstash-cloudwatch-logs/319211 "2022-11-17T14:40:39Z")

</div>

Hi, Whats the best way to get aws cloudwatch logs into logstash version 8.5? We want to avoid using this plugin due to it no longer being maintained and having dependency issues. dependency conflict · Issue #101 · lukew…

---

## [Fleet agents go offline then return healty](https://discuss.elastic.co/t/fleet-agents-go-offline-then-return-healty/319206)

<div class="topic-metadata">

**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\
**Replies:** 1\
**Last updated:** [November 17, 2022, 2:32pm UTC](https://discuss.elastic.co/t/fleet-agents-go-offline-then-return-healty/319206 "2022-11-17T14:32:02Z")

</div>

Hi, i have 3 agents other than the fleet server. this morning all 4 were healty, now 3 of them are labelled as offline (included the fleet server) and one of them is still healty. How is this possible? and why sometimes…

---

## [Does Elasticsearch Java API Client \[7.17\] support elasticsearch version 7.10?](https://discuss.elastic.co/t/does-elasticsearch-java-api-client-7-17-support-elasticsearch-version-7-10/319203)

<div class="topic-metadata">

**Author:** [@Aniruddh\_Dandotiya](https://discuss.elastic.co/u/Aniruddh_Dandotiya)\
**Replies:** 2\
**Last updated:** [November 17, 2022, 2:27pm UTC](https://discuss.elastic.co/t/does-elasticsearch-java-api-client-7-17-support-elasticsearch-version-7-10/319203 "2022-11-17T14:27:32Z")

</div>

I am using elasticsearch version 7.10 and trying to migrate from JestClient to Elasticsearch Java API Client \[7.17\]. Does Does Elasticsearch Java API Client \[7.17\] support previous versions of Elasticsearch?

---

## [Json and normal logs as input](https://discuss.elastic.co/t/json-and-normal-logs-as-input/319205)

<div class="topic-metadata">

**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 2:17pm UTC](https://discuss.elastic.co/t/json-and-normal-logs-as-input/319205 "2022-11-17T14:17:40Z")

</div>

Hi, what is the best practice when using filestream as type and having 2 different input paths of logs where 1 is a simple \*.log and the other one is a \*.json? Should I still just use e.g. the following although like 5…

---

## [How to get sum\_other\_doc\_count in aggregations?](https://discuss.elastic.co/t/how-to-get-sum-other-doc-count-in-aggregations/319200)

<div class="topic-metadata">

**Author:** [@Purushottam22](https://discuss.elastic.co/u/Purushottam22)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 1:52pm UTC](https://discuss.elastic.co/t/how-to-get-sum-other-doc-count-in-aggregations/319200 "2022-11-17T13:52:59Z")

</div>

I am running an aggregation to see what document types does my 'documents' index has (documentType is the field that has the type): GET my\_documents/\_search { size: 0, "aggs": { "dataTypes": { "terms": { "field": …

---

## [Elasticsearch readiness probe failing on enabling xpack](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failing-on-enabling-xpack/319198)

<div class="topic-metadata">

**Author:** [@yasin\_mohammed](https://discuss.elastic.co/u/yasin_mohammed)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failing-on-enabling-xpack/319198 "2022-11-17T13:33:24Z")

</div>

We have Elastic search 7.17.6 basic version running on our Azure kubernetes cluster. The stack comes up when xpack is disabled. Once we enable xpack the readiness probe fails and there are no error messages in the logs t…

---

## [Nginx Ingress Controller Logs \[v1.2.0\] - Integration not working](https://discuss.elastic.co/t/nginx-ingress-controller-logs-v1-2-0-integration-not-working/319197)

<div class="topic-metadata">

**Author:** [@jolt](https://discuss.elastic.co/u/jolt)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 1:12pm UTC](https://discuss.elastic.co/t/nginx-ingress-controller-logs-v1-2-0-integration-not-working/319197 "2022-11-17T13:12:18Z")

</div>

It appears that the Nginx Ingress Controller Logs integration - version 1.2.0 - is not working properly. The logs are being collected by k8s from the nginx-ingress-controller pods \[which default to outputting the error…

---

## [Query\_string search is not working correctly when field value contains dots](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860)

<div class="topic-metadata">

**Author:** [@DarwinGoyal](https://discuss.elastic.co/u/DarwinGoyal)\
**Replies:** 8\
**Last updated:** [November 17, 2022, 1:07pm UTC](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860 "2022-11-17T13:07:16Z")

</div>

Hi. An index contains a text property named description. Value of the description is "2:1.9.4" When I try to search using below query GET finding-index/\_search { "query": { "bool" : { "must" : \[ { …

---

## [Win10 elastic agent "failed to fix permissions" error](https://discuss.elastic.co/t/win10-elastic-agent-failed-to-fix-permissions-error/319191)

<div class="topic-metadata">

**Author:** [@Vtech](https://discuss.elastic.co/u/Vtech)\
**Replies:** 0\
**Last updated:** [November 17, 2022, 12:38pm UTC](https://discuss.elastic.co/t/win10-elastic-agent-failed-to-fix-permissions-error/319191 "2022-11-17T12:38:14Z")

</div>

When attempting to install an elastic agent on Win10 server, I receive the following error messages Error: failed to fix permissions: The operation completed successfully. For help, please see our troubleshooting guide…

---

## [Indexes getting deleted if deleted from one cluster](https://discuss.elastic.co/t/indexes-getting-deleted-if-deleted-from-one-cluster/319179)

<div class="topic-metadata">

**Author:** [@Rahul\_Gupta1](https://discuss.elastic.co/u/Rahul_Gupta1)\
**Replies:** 6\
**Last updated:** [November 17, 2022, 12:31pm UTC](https://discuss.elastic.co/t/indexes-getting-deleted-if-deleted-from-one-cluster/319179 "2022-11-17T12:31:41Z")

</div>

Hi, in my current system i am using a single log stash configuration to write into two different Elasticsearch cluster, one is on version 7.5.1 and another is on version 7.17.7 using the following configuration file: - …

[Previous page](https://discuss.elastic.co/latest.md?page=890)

[Next page](https://discuss.elastic.co/latest.md?page=892)
