# Latest **URL:** https://discuss.elastic.co/latest.md?page=894 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 895 --- ## [Node stats API fails with a Null Pointer exception for data nodes](https://discuss.elastic.co/t/node-stats-api-fails-with-a-null-pointer-exception-for-data-nodes/319016)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 11:15am UTC](https://discuss.elastic.co/t/node-stats-api-fails-with-a-null-pointer-exception-for-data-nodes/319016 "2022-11-16T11:15:32Z")
Hi, We have recently upgraded to 8.5.0 from 8.4.1. We use the node stats API (\_nodes/stats) to pull stats about various nodes for storage into graphite. Since the update all data nodes are showing the following failure … --- ## [CVE-2020-9488 vulnerabilities with java apm agent 1.34.1](https://discuss.elastic.co/t/cve-2020-9488-vulnerabilities-with-java-apm-agent-1-34-1/319055)
**Author:** [@vin89](https://discuss.elastic.co/u/vin89)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 11:09am UTC](https://discuss.elastic.co/t/cve-2020-9488-vulnerabilities-with-java-apm-agent-1-34-1/319055 "2022-11-16T11:09:32Z")
After we have upgraded apm to 1.34.1, we are still seeing vulnerability CVE-2020-9488 showing up in our application scan reports (earlier we were using 1.28.4) Expected log4j fix version is 2.13.2 but where in apm 1.34.… --- ## [Iam trying to parse fortigate syslog to logstash](https://discuss.elastic.co/t/iam-trying-to-parse-fortigate-syslog-to-logstash/319059)
**Author:** [@hasan.idriss](https://discuss.elastic.co/u/hasan.idriss)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 10:55am UTC](https://discuss.elastic.co/t/iam-trying-to-parse-fortigate-syslog-to-logstash/319059 "2022-11-16T10:55:04Z")
when i run the command: /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/fortigate.conf I get the error : udp - UDP listener died {:exception=\>#\ **Author:** [@wrobitza\_aveq](https://discuss.elastic.co/u/wrobitza_aveq)\ **Replies:** 7\ **Last updated:** [November 16, 2022, 10:45am UTC](https://discuss.elastic.co/t/how-can-i-clear-keyword-entries-that-have-no-documents/318537 "2022-11-16T10:45:21Z") I accidentally indexed a document with a wrong text/keyword field. I later removed the document, but the keyword is still there. For instance, when I run the query: GET \_search { "size": 0, "aggs": { "group\_by\_… --- ## [Index tab based content](https://discuss.elastic.co/t/index-tab-based-content/319057)
**Author:** [@sastri](https://discuss.elastic.co/u/sastri)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 10:27am UTC](https://discuss.elastic.co/t/index-tab-based-content/319057 "2022-11-16T10:27:49Z")
Does Swiftype index content in different tab(s)? For example: If we navigate to this Tabs | Components | BootstrapVue (bootstrap-vue.org). We can see First and Second Tabs, does swiftype index both first- and second-tab… --- ## [Get some log in file but not all in filebeat](https://discuss.elastic.co/t/get-some-log-in-file-but-not-all-in-filebeat/319046)
**Author:** [@devikingno](https://discuss.elastic.co/u/devikingno)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 9:35am UTC](https://discuss.elastic.co/t/get-some-log-in-file-but-not-all-in-filebeat/319046 "2022-11-16T09:35:11Z")
Hello everyone, i have a problem to collect log from Filebeat to Logstash. The problem is that in the log file that I configure, I only want to get the log messages about the user's login and the other logs won't be fetc… --- ## [Elastic DSL Query](https://discuss.elastic.co/t/elastic-dsl-query/319040)
**Author:** [@Nikhil\_Sharma2](https://discuss.elastic.co/u/Nikhil_Sharma2)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 9:05am UTC](https://discuss.elastic.co/t/elastic-dsl-query/319040 "2022-11-16T09:05:38Z")
I have a query in sql which I want to transform in ES. Select \* from items where ( (State=== Open AND (userId=== '123' OR contributers.include('123'))) OR ( (State=== Review) AND ( AntherState=== Submitted AND A… --- ## [Grok Pattern For Java stack traces](https://discuss.elastic.co/t/grok-pattern-for-java-stack-traces/319036)
**Author:** [@Nessy](https://discuss.elastic.co/u/Nessy)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 8:56am UTC](https://discuss.elastic.co/t/grok-pattern-for-java-stack-traces/319036 "2022-11-16T08:56:34Z")
Hello, I have been workin on this topic for a long time. Here my logstash conf : filter { if \[fields\]\[application\_name\] =~ "APPNAME" { grok { match =\> { "message" =\> "(?\%{TIMESTAMP\_ISO8601})… --- ## [Kibana Observability dashboard custom field](https://discuss.elastic.co/t/kibana-observability-dashboard-custom-field/318991)
**Author:** [@Mario\_Fimiani](https://discuss.elastic.co/u/Mario_Fimiani)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 8:52am UTC](https://discuss.elastic.co/t/kibana-observability-dashboard-custom-field/318991 "2022-11-16T08:52:14Z")
Ciao can anyone know if the Observability Dashboard can be customized in term of fields shows ? We are able to change the field but when we refresh the page we miss the customization. Stack v. 7.17.3 --- ## [Поиск документов содержащие слова с точками и без (например "ceo", "c.e.o", "c.e.o.")](https://discuss.elastic.co/t/ceo-c-e-o-c-e-o/319033)
**Author:** [@revencu](https://discuss.elastic.co/u/revencu)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 8:42am UTC](https://discuss.elastic.co/t/ceo-c-e-o-c-e-o/319033 "2022-11-16T08:42:25Z")
Как сделать поиск документов которые содержат также и укороченные слова { "query":{ "match":{ "title": "ceo" } } } этот запрос возвращает доки которые содержат только "ceo", "Ceo", "CEO". Но… --- ## [\[DOCS\] Monitoring](https://discuss.elastic.co/t/docs-monitoring/317197)
**Author:** [@sp-kyn](https://discuss.elastic.co/u/sp-kyn)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 8:36am UTC](https://discuss.elastic.co/t/docs-monitoring/317197 "2022-11-16T08:36:26Z")
Hello, I'm new here, trying to understand the monitoring setup on a basic up to date 8.4.1 self-hosted elk stack. Continuing the discussion from No need to set \`xpack.monitoring.collection.enabled\` to true when using m… --- ## [Elasticsearch picking wrong port](https://discuss.elastic.co/t/elasticsearch-picking-wrong-port/318978)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 8\ **Last updated:** [November 16, 2022, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-picking-wrong-port/318978 "2022-11-16T07:57:37Z")
Hi Team, I am facing strange behavior in prod environment. I used same configuration in prod and DR servers but in prod its working fine, in DR elasticserch is not connecting to different node when I am configuring clu… --- ## [Mustache double quotes problem in search templates](https://discuss.elastic.co/t/mustache-double-quotes-problem-in-search-templates/318736)
**Author:** [@D1sturbance](https://discuss.elastic.co/u/D1sturbance)\ **Replies:** 7\ **Last updated:** [November 16, 2022, 7:52am UTC](https://discuss.elastic.co/t/mustache-double-quotes-problem-in-search-templates/318736 "2022-11-16T07:52:23Z")
What is the best way to use mustache False values feature in Elasticsearch template? At the moment I am trying to select function based on boolean value. Rendering seems to be working according to the logic, but it pri… --- ## [Transform not updating documents](https://discuss.elastic.co/t/transform-not-updating-documents/318209)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 8\ **Last updated:** [November 16, 2022, 7:50am UTC](https://discuss.elastic.co/t/transform-not-updating-documents/318209 "2022-11-16T07:50:48Z")
Hi I have a continious transform running with the following query applied which should only allow documents with the status open or closed in the trasnform destination however when documents in these status are updated … --- ## [Comparing Two Indices Across Clusters](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904)
**Author:** [@connellyethan](https://discuss.elastic.co/u/connellyethan)\ **Replies:** 5\ **Last updated:** [November 16, 2022, 7:37am UTC](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904 "2022-11-16T07:37:08Z")
Hi All, We are currently attempting to compare two indices across clusters to verify we did not lose any records or fields during the process of cross cluster replication, which is how we chose to do this data migration… --- ## [OUTDATED\_DOCUMENTS\_SEARCH\_OPEN\_PIT. Action failed with 'search\_phase\_execution\_exception'](https://discuss.elastic.co/t/outdated-documents-search-open-pit-action-failed-with-search-phase-execution-exception/317044)
**Author:** [@Shep](https://discuss.elastic.co/u/Shep)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 6:41pm UTC](https://discuss.elastic.co/t/outdated-documents-search-open-pit-action-failed-with-search-phase-execution-exception/317044 "2022-10-19T18:41:36Z")
I'm having an issue with our Elastic Search / Kibana deployment. Kibana keeps failing to open with an error. Kibana 7.14.0\_001 Windows I was getting this fatal error: log \[12:18;05.466\] \[fatal\]\[root\] Error: Unable to c… --- ## [Logstash sql pipeline stops working](https://discuss.elastic.co/t/logstash-sql-pipeline-stops-working/318945)
**Author:** [@knakul853](https://discuss.elastic.co/u/knakul853)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 9:34am UTC](https://discuss.elastic.co/t/logstash-sql-pipeline-stops-working/318945 "2022-11-15T09:34:37Z")
Hi all! I have a sync job for logstash which continuously picked data that have these config setups use\_column\_value =\> true tracking\_column =\> "last\_update\_time" tracking\_column\_type =\> "timestamp" my question is … --- ## [Does update and query document in diff cache?](https://discuss.elastic.co/t/does-update-and-query-document-in-diff-cache/319014)
**Author:** [@GithubRyze](https://discuss.elastic.co/u/GithubRyze)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 6:17am UTC](https://discuss.elastic.co/t/does-update-and-query-document-in-diff-cache/319014 "2022-11-16T06:17:16Z")
step: updated document query the document immediately expected: return latest of the document but retunr the old docment Does update and query document in diff cache? update in RAM CACHE and QUERY IN DISK ? --- ## [Filebeat not shipping logs to logstash](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-logstash/318951)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 4\ **Last updated:** [November 16, 2022, 6:05am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-logstash/318951 "2022-11-16T06:05:32Z")
Hi I am setting up ELK stack for POC. I have installed ELK 7.17 version. Installed all the packages separately like different machine. Now i have installed file beat and enabled logstash module but i don't see any logs… --- ## [Restrict data access in Kibana dashboards](https://discuss.elastic.co/t/restrict-data-access-in-kibana-dashboards/318774)
**Author:** [@Venkatesh\_Guruprasad](https://discuss.elastic.co/u/Venkatesh_Guruprasad)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 3:13am UTC](https://discuss.elastic.co/t/restrict-data-access-in-kibana-dashboards/318774 "2022-11-16T03:13:05Z")
We are using Kibana dashboards as an embedded URL experience. Based on the user we want to display only relevant records and filters to the users. As an example, we have one index which stores records for all customers.… --- ## [Row calculation in Enhanced Table](https://discuss.elastic.co/t/row-calculation-in-enhanced-table/316971)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 3:38pm UTC](https://discuss.elastic.co/t/row-calculation-in-enhanced-table/316971 "2022-10-19T15:38:45Z")
Hi, I am trying to calculate row in the enhanced table where I am computing row1/ Grand total i.e. 30/187 =16.04%, refer to the pic attached with post. I have tried this in enhanced table but couldn't find any such feat… --- ## [Convert Logstash Main pipeline to multiple pipelines](https://discuss.elastic.co/t/convert-logstash-main-pipeline-to-multiple-pipelines/318899)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 6\ **Last updated:** [November 16, 2022, 1:55am UTC](https://discuss.elastic.co/t/convert-logstash-main-pipeline-to-multiple-pipelines/318899 "2022-11-16T01:55:01Z")
Hello team, I have a main pipeline that has multiple inputs like beats, kafka and filters for many application and single and big output file with many if, else if and else. The pipeline is so messed now and am not cer… --- ## [Caused by: java.util.concurrent.CancellationException: Request execution cancelled](https://discuss.elastic.co/t/caused-by-java-util-concurrent-cancellationexception-request-execution-cancelled/318864)
**Author:** [@tungli](https://discuss.elastic.co/u/tungli)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 1:35am UTC](https://discuss.elastic.co/t/caused-by-java-util-concurrent-cancellationexception-request-execution-cancelled/318864 "2022-11-16T01:35:53Z")
I use es7.15.2 , elasticsearch-java-8.4.2, ElasticsearchAsyncClient, After a period of time，it can't link to es and throw Caused by: java.util.concurrent.CancellationException: Request execution cancelled Caused by: jav… --- ## [How to parse glastopf honeypot log json using logstash for kibana visualization?](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-log-json-using-logstash-for-kibana-visualization/319010)
**Author:** [@Febrian12345](https://discuss.elastic.co/u/Febrian12345)\ **Replies:** 0\ **Last updated:** [November 16, 2022, 12:45am UTC](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-log-json-using-logstash-for-kibana-visualization/319010 "2022-11-16T00:45:12Z")
I have a raw data in json format that I want to visualize in Kibana, but I'm having trouble parsing the data in logstash, previously I was able to visualize raw data for honeypot dionaea and cowrie. please help me in doi… --- ## [Logstash stopped processing because of an error](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/319009)
**Author:** [@bigverm23](https://discuss.elastic.co/u/bigverm23)\ **Replies:** 1\ **Last updated:** [November 16, 2022, 12:05am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/319009 "2022-11-16T00:05:16Z")
First time installing logstash and need some help please and thanks! \[2022-11-15T18:45:54,229\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"8.5.0", "jruby.version"=\>"jruby 9.3.8.0 (2.6.8) 20… --- ## [Locate json field with jsonpath (logstash)](https://discuss.elastic.co/t/locate-json-field-with-jsonpath-logstash/318812)
**Author:** [@AdxDaz](https://discuss.elastic.co/u/AdxDaz)\ **Replies:** 4\ **Last updated:** [November 15, 2022, 11:31pm UTC](https://discuss.elastic.co/t/locate-json-field-with-jsonpath-logstash/318812 "2022-11-15T23:31:32Z")
Hi Elastic team, I have the next Json: {"response-code":"4000","response":{"result":\[{"DetailsPageURL":"/show.do?resourceid=22&method=show&PRINTER\_FRIENDLY=true","TODAYUNAVAILPERCENT":"0","Attribute":\[{"DISPLAYNAME":"T… --- ## [URL scripted field w/ multiple URL link](https://discuss.elastic.co/t/url-scripted-field-w-multiple-url-link/318910)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [November 15, 2022, 9:42pm UTC](https://discuss.elastic.co/t/url-scripted-field-w-multiple-url-link/318910 "2022-11-15T21:42:42Z")
Hi there! I have a field that sometimes returns multiple comma separated values. .i.e. a,b,c I would like to create a scripted URL field that maps the values to the products on my website and show, following the above… --- ## [Sharing Kibana Visualization Search as Iframe and running into Issues on Google Chrome](https://discuss.elastic.co/t/sharing-kibana-visualization-search-as-iframe-and-running-into-issues-on-google-chrome/317016)
**Author:** [@hidanny](https://discuss.elastic.co/u/hidanny)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 3:10pm UTC](https://discuss.elastic.co/t/sharing-kibana-visualization-search-as-iframe-and-running-into-issues-on-google-chrome/317016 "2022-10-19T15:10:00Z")
Hi All, Just to note, the IFrame is rendering completely fine on Firefox. I am only encountering this on Google Chrome. Basically, I am trying to embed a Kibana IFrame on a React website. However, I am getting messag… --- ## [Logstash startup error](https://discuss.elastic.co/t/logstash-startup-error/318511)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 7\ **Last updated:** [November 15, 2022, 9:02pm UTC](https://discuss.elastic.co/t/logstash-startup-error/318511 "2022-11-15T21:02:56Z")
HI All, I am trying to bring up Logstash on production server, getting below. Same set up working fine in UAT. Error Message 2022-11-08T15:30:28,121\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.vers… --- ## [How to create sub aggregation for bucket\_script pipeline aggregation using java api client](https://discuss.elastic.co/t/how-to-create-sub-aggregation-for-bucket-script-pipeline-aggregation-using-java-api-client/318999)
**Author:** [@Raghunandan](https://discuss.elastic.co/u/Raghunandan)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 8:40pm UTC](https://discuss.elastic.co/t/how-to-create-sub-aggregation-for-bucket-script-pipeline-aggregation-using-java-api-client/318999 "2022-11-15T20:40:33Z")
We are trying to create aggregation for bucket script and getting following error: No aggregation found at path : totalEndTimeUtcAGGR Below is the aggregation query { "aggregations": { "successExecutionCountAGGR"… [Previous page](https://discuss.elastic.co/latest.md?page=893) [Next page](https://discuss.elastic.co/latest.md?page=895)