# Latest **URL:** https://discuss.elastic.co/latest.md?page=898 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 899 --- ## [Exiting: index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/318714)
**Author:** [@mr\_ph](https://discuss.elastic.co/u/mr_ph)\ **Replies:** 0\ **Last updated:** [November 11, 2022, 7:18am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/318714 "2022-11-11T07:18:47Z")
Hi, I'm using elk stack 8.5. i want to parse the logs from beats -\> logstash -\> elasticsearch . But while i use the filebeat setup command i'm getting this error message Exiting: index management requested but the Elas… --- ## [Multiple filebeat instances sending logs](https://discuss.elastic.co/t/multiple-filebeat-instances-sending-logs/318651)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 12:06pm UTC](https://discuss.elastic.co/t/multiple-filebeat-instances-sending-logs/318651 "2022-11-10T12:06:33Z")
Hi, I have installed filebeat on multiple servers to pick system logs. The filebeat for server a works fine. filebeat.yml type: log enabled: true paths: /var/log/jenkins/jenkins.log exclude\_files: \['.gz$'\] multi… --- ## [Filebeat multiline error](https://discuss.elastic.co/t/filebeat-multiline-error/318654)
**Author:** [@arhodoula](https://discuss.elastic.co/u/arhodoula)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 12:13pm UTC](https://discuss.elastic.co/t/filebeat-multiline-error/318654 "2022-11-10T12:13:51Z")
we have some database records where one field could contain a new line. Filebeat returns illegal\_argument\_exception and is dropping these events. could you please help? --- ## [Filebeats can not connect to ElasticSearch](https://discuss.elastic.co/t/filebeats-can-not-connect-to-elasticsearch/318607)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 7\ **Last updated:** [November 13, 2022, 11:47pm UTC](https://discuss.elastic.co/t/filebeats-can-not-connect-to-elasticsearch/318607 "2022-11-13T23:47:45Z")
In version 8.5 of Elastic Search and Filebeats I can not ship the logs from Filebeats to Elasticsearch Here is the error log {"log.level":"info","@timestamp":"2022-11-10T04:23:19.993Z","log.logger":"add\_cloud\_metadata… --- ## [What is the effect of circuit breakers limit on search queries](https://discuss.elastic.co/t/what-is-the-effect-of-circuit-breakers-limit-on-search-queries/318795)
**Author:** [@md2](https://discuss.elastic.co/u/md2)\ **Replies:** 1\ **Last updated:** [November 13, 2022, 11:36pm UTC](https://discuss.elastic.co/t/what-is-the-effect-of-circuit-breakers-limit-on-search-queries/318795 "2022-11-13T23:36:45Z")
Hi, I am wondering what happens to the queries that hit the circuit breakers memory limit, are they discarded completely and lost forever? What is the recommended method to monitor these queries? Does this entry from th… --- ## [\[winlogbeat\] where log data received from Linux\_winlogbeat is stored](https://discuss.elastic.co/t/winlogbeat-where-log-data-received-from-linux-winlogbeat-is-stored/318174)
**Author:** [@shaAbe](https://discuss.elastic.co/u/shaAbe)\ **Replies:** 3\ **Last updated:** [November 13, 2022, 11:33pm UTC](https://discuss.elastic.co/t/winlogbeat-where-log-data-received-from-linux-winlogbeat-is-stored/318174 "2022-11-13T23:33:21Z")
I'm sending windows event logs to elasticsearch using winlogbeat. And I'm using kibana to display the event log data received by elasticsearch. So I have one question. Where in the Linux directory is elasticsearch sto… --- ## [Using Elasticsearch as a Data Lake and forwarding logs to SIEM based on the use cases implemented](https://discuss.elastic.co/t/using-elasticsearch-as-a-data-lake-and-forwarding-logs-to-siem-based-on-the-use-cases-implemented/318558)
**Author:** [@bit1290](https://discuss.elastic.co/u/bit1290)\ **Replies:** 3\ **Last updated:** [November 13, 2022, 11:31pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-data-lake-and-forwarding-logs-to-siem-based-on-the-use-cases-implemented/318558 "2022-11-13T23:31:52Z")
Hello, I really need your help and vision on a situation I'm passing through. Here is the description: We have a SIEM (QRadar) structure, with Event Collectors that receive logs from various data sources from many … --- ## [Cannot log in to Kibana with "elastic" user, after enabling minimal security](https://discuss.elastic.co/t/cannot-log-in-to-kibana-with-elastic-user-after-enabling-minimal-security/318808)
**Author:** [@usaadi](https://discuss.elastic.co/u/usaadi)\ **Replies:** 6\ **Last updated:** [November 13, 2022, 11:20pm UTC](https://discuss.elastic.co/t/cannot-log-in-to-kibana-with-elastic-user-after-enabling-minimal-security/318808 "2022-11-13T23:20:50Z")
Hello... I have an Elasticsearch cluster that has been running with security disabled. I tried to enable security by following the instructions at: I completed all the instructions, but I also overwrote the Kibana k… --- ## [Upgrade to non free license in self managed elastic production](https://discuss.elastic.co/t/upgrade-to-non-free-license-in-self-managed-elastic-production/318807)
**Author:** [@Mahdi\_Moazami](https://discuss.elastic.co/u/Mahdi_Moazami)\ **Replies:** 2\ **Last updated:** [November 13, 2022, 9:43pm UTC](https://discuss.elastic.co/t/upgrade-to-non-free-license-in-self-managed-elastic-production/318807 "2022-11-13T21:43:25Z")
Hi there elastic team we have a self managed elastic setup in our production servers and we are looking for the way to buy Gold or Platinum license. what I got from searching in site was that this functionality is only … --- ## [Highlighting Synonyms with App Search](https://discuss.elastic.co/t/highlighting-synonyms-with-app-search/318801)
**Author:** [@christian.adib](https://discuss.elastic.co/u/christian.adib)\ **Replies:** 0\ **Last updated:** [November 13, 2022, 6:03pm UTC](https://discuss.elastic.co/t/highlighting-synonyms-with-app-search/318801 "2022-11-13T18:03:40Z")
from App Search docs \*\*On synonyms\*\*: If a search finds a synonym for a query, the synonym will not be highlighted. Is this default behavior that can be modified/changed? --- ## [Calculate elapsed time in Kibana?](https://discuss.elastic.co/t/calculate-elapsed-time-in-kibana/316575)
**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\ **Replies:** 2\ **Last updated:** [November 13, 2022, 10:18am UTC](https://discuss.elastic.co/t/calculate-elapsed-time-in-kibana/316575 "2022-11-13T10:18:15Z")
ELK newbie here. Is it possible in Kibana visualization (ie. Table) to calculate the elapsed time from the timestamp and current time? Looking to populate a field in the table to show the elapsed time since the last ti… --- ## [Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/318562)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 2\ **Last updated:** [November 13, 2022, 4:52am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/318562 "2022-11-13T04:52:10Z")
Hello folks, \[INFO \] 2022-11-09 16:05:14.964 \[Ruby-0-Thread-9: :1\] elasticsearch - Failed to perform request {:message=\>"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to f… --- ## [Implementing Hybrid Seach with AppSearch](https://discuss.elastic.co/t/implementing-hybrid-seach-with-appsearch/318783)
**Author:** [@christian.adib](https://discuss.elastic.co/u/christian.adib)\ **Replies:** 0\ **Last updated:** [November 13, 2022, 1:00am UTC](https://discuss.elastic.co/t/implementing-hybrid-seach-with-appsearch/318783 "2022-11-13T01:00:22Z")
Has anyone had any success implementing hybrid search (keyword + semantic / vectorized) with App Search? Is it even possible? I found a few tutorials describing how to do it with plain Elasticsearch, but I'm not sure whe… --- ## [Elasticsearch node fails after multiple G1GC triggers](https://discuss.elastic.co/t/elasticsearch-node-fails-after-multiple-g1gc-triggers/318779)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 0\ **Last updated:** [November 12, 2022, 9:16pm UTC](https://discuss.elastic.co/t/elasticsearch-node-fails-after-multiple-g1gc-triggers/318779 "2022-11-12T21:16:09Z")
We have a 6 node cluster on ES 7.17.7, which is very stable except for our single coordinating node (which also is master eligible, so not a "true" coordinating node). After 4-6 hours of uptime, we always get the below … --- ## [How many Public IP need for my cluster](https://discuss.elastic.co/t/how-many-public-ip-need-for-my-cluster/318766)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 1\ **Last updated:** [November 12, 2022, 11:06pm UTC](https://discuss.elastic.co/t/how-many-public-ip-need-for-my-cluster/318766 "2022-11-12T23:06:33Z")
I would like to know the how many Public IP addresses need to deploy my cluster in AWS. In my cluster, there are 2 data nodes for Hot data 2 data nodes for warm data 3 Master Nodes 2 Logstash Feel free to suggest me … --- ## [Problems With Import-Rules and Create-Rules](https://discuss.elastic.co/t/problems-with-import-rules-and-create-rules/317410)
**Author:** [@Omar\_E](https://discuss.elastic.co/u/Omar_E)\ **Replies:** 1\ **Last updated:** [November 12, 2022, 10:51pm UTC](https://discuss.elastic.co/t/problems-with-import-rules-and-create-rules/317410 "2022-11-12T22:51:34Z")
I am currently trying to use the detection-rules CLI tool to import or create-rules from a JSON file. However, I keep getting the error below. Does anyone know how to fix this? --- ## [Fleet Managed Elastic Agent - add parameter to filebeat.yml](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521)
**Author:** [@lnx](https://discuss.elastic.co/u/lnx)\ **Replies:** 3\ **Last updated:** [November 12, 2022, 7:31pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521 "2022-11-12T19:31:12Z")
I need to set the scan\_frequency config parameter for the Filebeat subprocess of Elastic Agent running on Windows managed by Fleet. I'm using the IIS integration. I would like to try to reduce CPU usage. How do I do th… --- ## [Eecute python code from Kibana](https://discuss.elastic.co/t/eecute-python-code-from-kibana/316748)
**Author:** [@Rajesh\_Sharma](https://discuss.elastic.co/u/Rajesh_Sharma)\ **Replies:** 1\ **Last updated:** [October 17, 2022, 8:45am UTC](https://discuss.elastic.co/t/eecute-python-code-from-kibana/316748 "2022-10-17T08:45:39Z")
Hi, I need to execute a python script from kibana dashboard, is it something feasible? I have requirement where I need to build a dynamic image via the python and display in the kibana dashboard in a popup/overlay. On… --- ## [Configuring logstash input for mysql jdbc](https://discuss.elastic.co/t/configuring-logstash-input-for-mysql-jdbc/318745)
**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\ **Replies:** 2\ **Last updated:** [November 12, 2022, 8:03am UTC](https://discuss.elastic.co/t/configuring-logstash-input-for-mysql-jdbc/318745 "2022-11-12T08:03:13Z")
this is my output : root@elk:/usr/share/logstash# sudo /usr/share/logstash/bin/logstash -f jdbc.conf Using bundled JDK: /usr/share/logstash/jdk WARNING: Could not find logstash.yml which is typically located in $LS\_HOME… --- ## [File "vendor/bundle/jruby/2.5.0/gems/pleaserun-0.0.31/bin/pleaserun" with access permission 777, who knows why?](https://discuss.elastic.co/t/file-vendor-bundle-jruby-2-5-0-gems-pleaserun-0-0-31-bin-pleaserun-with-access-permission-777-who-knows-why/317933)
**Author:** [@weng77](https://discuss.elastic.co/u/weng77)\ **Replies:** 1\ **Last updated:** [November 12, 2022, 6:15am UTC](https://discuss.elastic.co/t/file-vendor-bundle-jruby-2-5-0-gems-pleaserun-0-0-31-bin-pleaserun-with-access-permission-777-who-knows-why/317933 "2022-11-12T06:15:14Z")
File access permission with 777 will make things world writeable, it's an awful idea. But in logstash 7.7.0~logstash 7.12.0 pkg(from https://www.elastic.co/cn/downloads/past-releases/), we find out two files in vendor/b… --- ## [LogStash - Add fields between two unique events (start and stop)](https://discuss.elastic.co/t/logstash-add-fields-between-two-unique-events-start-and-stop/317586)
**Author:** [@Frankie\_Braybon](https://discuss.elastic.co/u/Frankie_Braybon)\ **Replies:** 1\ **Last updated:** [November 12, 2022, 3:18am UTC](https://discuss.elastic.co/t/logstash-add-fields-between-two-unique-events-start-and-stop/317586 "2022-11-12T03:18:24Z")
Hi, I have logs shipping to Logstash via FileBeat, which I'm doing log enrichment on before passing on to Elasticsearch. One of the enrichments I would like to do is add a field to each event which is between two uniqu… --- ## [Add new documents to an enrich index](https://discuss.elastic.co/t/add-new-documents-to-an-enrich-index/318759)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [November 12, 2022, 1:08am UTC](https://discuss.elastic.co/t/add-new-documents-to-an-enrich-index/318759 "2022-11-12T01:08:05Z")
Hi, I have filebeat sending data to elasticsearch, this data is enriched with an ingest pipeline, I have added a new document to the enrich index that already is in use, but the changes are not showing. What do I have … --- ## [Elastic System Integration dashboard issue](https://discuss.elastic.co/t/elastic-system-integration-dashboard-issue/318549)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 7\ **Last updated:** [November 11, 2022, 11:20pm UTC](https://discuss.elastic.co/t/elastic-system-integration-dashboard-issue/318549 "2022-11-11T23:20:40Z")
Mistakenly I have deleted the inbuilt dashboards of System integration with elastic. Is there any way that I can get those dashboards back? --- ## [\[ERROR\] Cannot race. This race ended with a fatal crash](https://discuss.elastic.co/t/error-cannot-race-this-race-ended-with-a-fatal-crash/318756)
**Author:** [@Sahitya\_Panchapakasa](https://discuss.elastic.co/u/Sahitya_Panchapakasa)\ **Replies:** 1\ **Last updated:** [November 11, 2022, 7:18pm UTC](https://discuss.elastic.co/t/error-cannot-race-this-race-ended-with-a-fatal-crash/318756 "2022-11-11T19:18:18Z")
Hi, Am just getting started with rally and got this error when doing esrally race --distribution-version=6.8.0 --track=geopoint --challenge=append-fast-with-conflicts Steps followed as per https://esrally.readthedocs.… --- ## [Logtash CSV Parser Fail Muline Value is counting next raw](https://discuss.elastic.co/t/logtash-csv-parser-fail-muline-value-is-counting-next-raw/318617)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 10\ **Last updated:** [November 11, 2022, 6:33pm UTC](https://discuss.elastic.co/t/logtash-csv-parser-fail-muline-value-is-counting-next-raw/318617 "2022-11-11T18:33:14Z")
see in my First raw last coulumn have multiline and second raw haveing signle line --- ## [Multilingual search and retrieval of a translated field](https://discuss.elastic.co/t/multilingual-search-and-retrieval-of-a-translated-field/318683)
**Author:** [@ChristopherHS](https://discuss.elastic.co/u/ChristopherHS)\ **Replies:** 2\ **Last updated:** [November 11, 2022, 6:05pm UTC](https://discuss.elastic.co/t/multilingual-search-and-retrieval-of-a-translated-field/318683 "2022-11-11T18:05:55Z")
Hello, I have the following mapping: { "settings": { "analysis": { "analyzer": { "en\_stopwords": { "type": "standard", "stopwords": "\_english\_" }, "de\_stopwords":… --- ## [Unable to see application logs which are added to a Opentelemetry span in APM](https://discuss.elastic.co/t/unable-to-see-application-logs-which-are-added-to-a-opentelemetry-span-in-apm/316794)
**Author:** [@User28](https://discuss.elastic.co/u/User28)\ **Replies:** 8\ **Last updated:** [November 11, 2022, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-see-application-logs-which-are-added-to-a-opentelemetry-span-in-apm/316794 "2022-11-11T17:52:57Z")
Kibana version: 7.17.4 Elasticsearch version: 7.17.4 APM Server version: 7.17.4 APM Agent language and version: OpenTelemetry agent v1.18.0 Browser version: Chrome Original install method (e.g. download page, yum, d… --- ## [Logstash Not Starting On Reboot - Ubuntu](https://discuss.elastic.co/t/logstash-not-starting-on-reboot-ubuntu/318406)
**Author:** [@AlP9923](https://discuss.elastic.co/u/AlP9923)\ **Replies:** 5\ **Last updated:** [November 11, 2022, 5:19pm UTC](https://discuss.elastic.co/t/logstash-not-starting-on-reboot-ubuntu/318406 "2022-11-11T17:19:51Z")
Hi My single node setup works fine except on reboot of the Ubuntu server when Logstash usually does not auto start up. But using the systemctl start logstash works ok. It looks like the issue is that Logstash is trying… --- ## [Using APM NodeJS in a NestJS enviroment - Can't initialize agent](https://discuss.elastic.co/t/using-apm-nodejs-in-a-nestjs-enviroment-cant-initialize-agent/318699)
**Author:** [@Daniel\_K](https://discuss.elastic.co/u/Daniel_K)\ **Replies:** 2\ **Last updated:** [November 11, 2022, 4:46pm UTC](https://discuss.elastic.co/t/using-apm-nodejs-in-a-nestjs-enviroment-cant-initialize-agent/318699 "2022-11-11T16:46:08Z")
I'm trying to autenticate ELK using the NodeJS agent in a NestJS environment. I followed the Express tutorial to use the NodeJS agent. On the application bootstrap, I'm getting this errors: {"log.level":"error","@times… --- ## [Cannot index event publisher - new line](https://discuss.elastic.co/t/cannot-index-event-publisher-new-line/318751)
**Author:** [@arhodoula](https://discuss.elastic.co/u/arhodoula)\ **Replies:** 0\ **Last updated:** [November 11, 2022, 3:25pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-new-line/318751 "2022-11-11T15:25:04Z")
I am getting an illegal\_argument\_exception in filebeat. I found out it is because of the "reason": """Illegal unquoted character ((CTRL-CHAR, code 13)): has to be escaped using backslash to be included in string value … [Previous page](https://discuss.elastic.co/latest.md?page=897) [Next page](https://discuss.elastic.co/latest.md?page=899)