# Latest **URL:** https://discuss.elastic.co/latest.md?page=917 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 918 --- ## [Elasticsearch and Kibana Url says "your connection to this site is not secure "](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 7\ **Last updated:** [October 27, 2022, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562 "2022-10-27T04:28:35Z")
I am running elastic 8.4. From the documentation, it says that the security is automatically enabled and configured. But when I get my elasticsearch running and visit https:localhost:9200 I get the message: Your connect… --- ## [Filebeat PANW module](https://discuss.elastic.co/t/filebeat-panw-module/317357)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 2\ **Last updated:** [October 27, 2022, 3:25am UTC](https://discuss.elastic.co/t/filebeat-panw-module/317357 "2022-10-27T03:25:08Z")
Hi, Can anyone point me in the right direction getting the panw module to work. We are running filebeat 8.4 but everything I try results in: Exiting: module panw is configured but has no enabled filesets panw module … --- ## [WinEventLog\[System\] error salvaging message: failed in EvtFormatMessage: The specified resource type cannot be found in the image file](https://discuss.elastic.co/t/wineventlog-system-error-salvaging-message-failed-in-evtformatmessage-the-specified-resource-type-cannot-be-found-in-the-image-file/317579)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 3:13am UTC](https://discuss.elastic.co/t/wineventlog-system-error-salvaging-message-failed-in-evtformatmessage-the-specified-resource-type-cannot-be-found-in-the-image-file/317579 "2022-10-27T03:13:59Z")
I don't know much about windows server system, what does this error mean? How to solve? Thanks for any suggestion. {"log.level":"info","@timestamp":"2022-10-27T10:31:51.822+0800","log.origin":{"file.name":"instance/beat… --- ## [Configure Logstash to connect to Elasticsearch as output](https://discuss.elastic.co/t/configure-logstash-to-connect-to-elasticsearch-as-output/317578)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 3\ **Last updated:** [October 27, 2022, 3:01am UTC](https://discuss.elastic.co/t/configure-logstash-to-connect-to-elasticsearch-as-output/317578 "2022-10-27T03:01:10Z")
I am running elasticsearch 8.4 and have configured logstash to index into elasticsearch. But I am getting the error: \]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@Shakib\_farooq](https://discuss.elastic.co/u/Shakib_farooq)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 2:32am UTC](https://discuss.elastic.co/t/multiline-filebeat-parser-for-aws-module/317576 "2022-10-27T02:32:45Z") Hello, I am ingesting logs from AWS cloudwatch using the Aws input filebeat module but getting single-line logs in kibana. I tried to use multiline parsers as shown in the image but still, it doesn't seem to work. … --- ## [Config dir ownership mismatch error on windows 1809 container for elasticsearch](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568)
**Author:** [@Maleki](https://discuss.elastic.co/u/Maleki)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 1:23am UTC](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568 "2022-10-27T01:23:24Z")
Due to some restrictions at my company we are not allowed to use linux based containers. I am therefore creating a windows container based ELK stack. My dockerfile is heavily inspired by diamol/Dockerfile at master · s… --- ## [Automate Elasticsearch-reset-password in bash script](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 10\ **Last updated:** [October 27, 2022, 12:20am UTC](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429 "2022-10-27T00:20:45Z")
I am running the latest elasticsearch version via a script, and I am trying to automate the reset password process via this method recommended @TimV back in 2018, but it seems to no longer work with the latest version: H… --- ## [String inteprolation in logstash data\_stream fields](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556)
**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 9:42pm UTC](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556 "2022-10-26T21:42:05Z")
How can I write to different data streams for different kinesis input? We are trying to add fields in the inputs and use string interpolation in the outputs to no avail. We had been using index+ilm\_enabled in logstash, … --- ## [System integration doesn't populate ECS Fields -\> Predefined Dashboards not usable anymore](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 9:09pm UTC](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559 "2022-10-26T21:09:33Z")
Hey there We've observed a change in the populated fields from the system integration. Since about two weeks we have very different fields populated (or not) therefore leading to missing fields in our own and the predef… --- ## [Filebeat Can't parse MSSQL Logs](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773)
**Author:** [@praveenpesala33](https://discuss.elastic.co/u/praveenpesala33)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 9:01pm UTC](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773 "2022-10-26T21:01:29Z")
I have installed filebeat 7.15.1 on windows server with mssql logs module. When I run filebeat in foreground with .\\filebeat.exe -c .\\filebeat.yml -e -d "\*" , it can not parse the logs. Filebeat Config: filebeat.inputs… --- ## [Elasticdump never dumps data](https://discuss.elastic.co/t/elasticdump-never-dumps-data/317558)
**Author:** [@mpky](https://discuss.elastic.co/u/mpky)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 8:37pm UTC](https://discuss.elastic.co/t/elasticdump-never-dumps-data/317558 "2022-10-26T20:37:00Z")
elasticdump \\ --input=http://\:\@\/news\_headlines \\ --output=./news\_data.json \\ --type=data \\ the above outputs "starting dump" and then times out. i'm on the default settings for … --- ## [Index template with only one field across multiple indices](https://discuss.elastic.co/t/index-template-with-only-one-field-across-multiple-indices/317315)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 14\ **Last updated:** [October 26, 2022, 6:03pm UTC](https://discuss.elastic.co/t/index-template-with-only-one-field-across-multiple-indices/317315 "2022-10-26T18:03:36Z")
Hi, I have multiple indices like mailbox-xx- xxxx .The xx-xxxx values are assigned dynamically. Each index contains various fields with date as a common field. The problem that date field has been read as long type by … --- ## [Kibana not showing data after turning on xpack security and TLS](https://discuss.elastic.co/t/kibana-not-showing-data-after-turning-on-xpack-security-and-tls/317470)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 4:57pm UTC](https://discuss.elastic.co/t/kibana-not-showing-data-after-turning-on-xpack-security-and-tls/317470 "2022-10-26T16:57:27Z")
Yesterday I updated the security on our small 3 node cluster of Elasticsearch 7.17.5 running on CentOS 7. I did my best to follow the documentation: I added the passwords for the built in accounts, set up the kibana\_ke… --- ## [Data Path Change](https://discuss.elastic.co/t/data-path-change/317430)
**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 4:19pm UTC](https://discuss.elastic.co/t/data-path-change/317430 "2022-10-26T16:19:13Z")
Hello, I am interested in best practices for changing the default data and log path in the elasticsearch.yml file. I have found various references on the web about how this is done (a simple copy of the data as well as… --- ## [Action/metadata line \[1\] contains an unknown parameter \[\_script\]](https://discuss.elastic.co/t/action-metadata-line-1-contains-an-unknown-parameter-script/317548)
**Author:** [@nimish](https://discuss.elastic.co/u/nimish)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 3:32pm UTC](https://discuss.elastic.co/t/action-metadata-line-1-contains-an-unknown-parameter-script/317548 "2022-10-26T15:32:41Z")
facing following issue while updating document using script Encountered a retryable error (will retry with exponential backoff) { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason"… --- ## [Can we use APM with a nodeJS serveless aplication at AZURE?](https://discuss.elastic.co/t/can-we-use-apm-with-a-nodejs-serveless-aplication-at-azure/317157)
**Author:** [@lucaoskaique](https://discuss.elastic.co/u/lucaoskaique)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 3:21pm UTC](https://discuss.elastic.co/t/can-we-use-apm-with-a-nodejs-serveless-aplication-at-azure/317157 "2022-10-26T15:21:06Z")
Hi, i'm lucas! i have researched everywhere and i could find how to use elastic with nodejs azure functions. actually i'm trying to find a example with nodejs + azure functions + elastic APM is there a way to make it … --- ## [My dashboard](https://discuss.elastic.co/t/my-dashboard/317534)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 3:00pm UTC](https://discuss.elastic.co/t/my-dashboard/317534 "2022-10-26T15:00:19Z")
Hello I want to remove the value "Não existe" from the dashboard. Can i do it without touch any information? --- ## [Get token OAuth from Heartbeat before monitoring a service](https://discuss.elastic.co/t/get-token-oauth-from-heartbeat-before-monitoring-a-service/317526)
**Author:** [@rbr66](https://discuss.elastic.co/u/rbr66)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 2:34pm UTC](https://discuss.elastic.co/t/get-token-oauth-from-heartbeat-before-monitoring-a-service/317526 "2022-10-26T14:34:34Z")
Hi, We have a health check service that for security reasons we have secured by OAuth, then to invoke it we need to have a valid token. Our current monitor is as follows: Is it possible to get a token every so often… --- ## [Docker - Elastic Agent - must be provided as an absolute path](https://discuss.elastic.co/t/docker-elastic-agent-must-be-provided-as-an-absolute-path/317523)
**Author:** [@vecjh](https://discuss.elastic.co/u/vecjh)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 1:29pm UTC](https://discuss.elastic.co/t/docker-elastic-agent-must-be-provided-as-an-absolute-path/317523 "2022-10-26T13:29:46Z")
Hi, this seems inconsistent. I can reference value for all variables in the docker compose using relative paths. Like in the official Elastic Docker guide: xpack.security.http.ssl.key=certs/es01/es01.key However, I can… --- ## [Problem with filebeat or Kibana?](https://discuss.elastic.co/t/problem-with-filebeat-or-kibana/317514)
**Author:** [@kikinous](https://discuss.elastic.co/u/kikinous)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 1:33pm UTC](https://discuss.elastic.co/t/problem-with-filebeat-or-kibana/317514 "2022-10-26T13:33:55Z")
hello, We have a problem with our ELK cluster. Logs retrieved by filebeat on our application servers are not completely displayed at the Kibana level. We don't know if it's a log injection problem in ELK or if it's a d… --- ## [Referenced config files FileBeat (Windows)](https://discuss.elastic.co/t/referenced-config-files-filebeat-windows/317310)
**Author:** [@Remco1985](https://discuss.elastic.co/u/Remco1985)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 1:15pm UTC](https://discuss.elastic.co/t/referenced-config-files-filebeat-windows/317310 "2022-10-26T13:15:20Z")
Hi, Recently we have successfully installed Filebeat on our (test) Windows server. Right now I’m investigating to find out the best deployment strategy for Filebeat agents on all of our Windows Server systems. We would… --- ## [Filebeat monitoring metrics are "dropped" when a GEOIP pipeline is used](https://discuss.elastic.co/t/filebeat-monitoring-metrics-are-dropped-when-a-geoip-pipeline-is-used/317063)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 23\ **Last updated:** [October 26, 2022, 12:53pm UTC](https://discuss.elastic.co/t/filebeat-monitoring-metrics-are-dropped-when-a-geoip-pipeline-is-used/317063 "2022-10-26T12:53:32Z")
Hi, this question comes as a result of solving one mystery in this post: Filebeat monitoring metrics not visible in ElasticSearch - #30 by stephenb - huge Thank You to @stephenb for his help! - where Filebeat monitoring… --- ## [Please tell me How to custom Kibana logo in 7.17.6](https://discuss.elastic.co/t/please-tell-me-how-to-custom-kibana-logo-in-7-17-6/316487)
**Author:** [@soniya](https://discuss.elastic.co/u/soniya)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 12:58pm UTC](https://discuss.elastic.co/t/please-tell-me-how-to-custom-kibana-logo-in-7-17-6/316487 "2022-10-26T12:58:34Z")
Hi all, I am working on Kibana 7.17.6 version. I want to change Kibana logo and found some articles on logo change of Kibana, but they are for older version. please do help me with this query. --- ## [Illegal\_argument\_exception: index \[cwl-data-2022.10.14-0001\] is not the write index for alias \[cwl-data\]](https://discuss.elastic.co/t/illegal-argument-exception-index-cwl-data-2022-10-14-0001-is-not-the-write-index-for-alias-cwl-data/316910)
**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 3:10pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-cwl-data-2022-10-14-0001-is-not-the-write-index-for-alias-cwl-data/316910 "2022-10-18T15:10:30Z")
Hi there, I have an issue where this error is coming up. I see there are two other posts in the forums with similar issues but there have been no replies. Here is my policy { "policy": "cwl-data", "phase\_definition… --- ## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/317200)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 12:38pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/317200 "2022-10-26T12:38:46Z")
Hello, I have this error when I start kibana : kibana1.lab.fr kibana\[2294\]: \[2022-10-21T14:42:03.355+02:00\]\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. socket hang up … --- ## [Highlight produce unexpected invalid results on multivalue fields copied from other fields](https://discuss.elastic.co/t/highlight-produce-unexpected-invalid-results-on-multivalue-fields-copied-from-other-fields/317394)
**Author:** [@Maxim\_Kollegov](https://discuss.elastic.co/u/Maxim_Kollegov)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 12:24pm UTC](https://discuss.elastic.co/t/highlight-produce-unexpected-invalid-results-on-multivalue-fields-copied-from-other-fields/317394 "2022-10-26T12:24:27Z")
Steps to reproduce create mapping post /test/\_mapping { "properties": { "family": { "type": "text", "index": true, "term\_vector": "with\_positions\_offsets", … --- ## [Searching two terms inside array of object](https://discuss.elastic.co/t/searching-two-terms-inside-array-of-object/317507)
**Author:** [@yashveer](https://discuss.elastic.co/u/yashveer)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 12:23pm UTC](https://discuss.elastic.co/t/searching-two-terms-inside-array-of-object/317507 "2022-10-26T12:23:07Z")
"rno" : 1, "narratives": \[ { "compl": "call drop", "ts": "2015-05-01" }, { "compl": "internet connection lost ", "ts": "2016-01-… --- ## [Elasticsearch and EnterpriseSearch on different servers](https://discuss.elastic.co/t/elasticsearch-and-enterprisesearch-on-different-servers/317499)
**Author:** [@GoMink](https://discuss.elastic.co/u/GoMink)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 12:17pm UTC](https://discuss.elastic.co/t/elasticsearch-and-enterprisesearch-on-different-servers/317499 "2022-10-26T12:17:20Z")
We have installed Elasticsearch and Kibana on-prem on Windows. Now we also want to install EnterpriseSearch but it is not possible on Windows. Is it possible and advisable to deploy the ELK stack with EnterpriseSearch d… --- ## [Need to delete my topic in Elastic Forum - User not able to access their dashboards](https://discuss.elastic.co/t/need-to-delete-my-topic-in-elastic-forum-user-not-able-to-access-their-dashboards/317503)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 12:10pm UTC](https://discuss.elastic.co/t/need-to-delete-my-topic-in-elastic-forum-user-not-able-to-access-their-dashboards/317503 "2022-10-26T12:10:50Z")
Hi team, Some info in my posts is considered as sensitive (but really it is not), so i need to remove it. I already give it as a flag. But still, it's not removed. Can anyone remove this topic as soon as possible, ple… --- ## [Elastic agent enrollment via configuration management](https://discuss.elastic.co/t/elastic-agent-enrollment-via-configuration-management/317515)
**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 12:10pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-via-configuration-management/317515 "2022-10-26T12:10:48Z")
In ECE clients are enrolled with elastic-agent enroll --url=example.com:9243 --enrollment-token=$token and then the rest is managed by Fleet. However, I would like to enroll clients not with a command, but with a proper… [Previous page](https://discuss.elastic.co/latest.md?page=916) [Next page](https://discuss.elastic.co/latest.md?page=918)