# Latest **URL:** https://discuss.elastic.co/latest.md?page=923 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 924 --- ## [Multiple Elastic Search Outputs for two different Azure event hubs as input in Logstash](https://discuss.elastic.co/t/multiple-elastic-search-outputs-for-two-different-azure-event-hubs-as-input-in-logstash/317129)
**Author:** [@Anudeep\_Konaboina](https://discuss.elastic.co/u/Anudeep_Konaboina)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 6:09pm UTC](https://discuss.elastic.co/t/multiple-elastic-search-outputs-for-two-different-azure-event-hubs-as-input-in-logstash/317129 "2022-10-20T18:09:49Z")
I have to configure log stash to read from 2 different event hubs and write them to two different Elasticsearch index as shown below: input { azure\_event\_hubs { config\_mode =\> "advanced" threads =\> 8 d… --- ## [How to Correlate three events in EQL based on process and parent-process id?](https://discuss.elastic.co/t/how-to-correlate-three-events-in-eql-based-on-process-and-parent-process-id/316897)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 6:04pm UTC](https://discuss.elastic.co/t/how-to-correlate-three-events-in-eql-based-on-process-and-parent-process-id/316897 "2022-10-20T18:04:24Z")
I have log data in the following format on elasticsearch: 1- \["process\_name":"nginx", "process\_id":"1", "parent\_process\_id":"0", "syscall":"execv"\] 2- \["process\_name":"python", "process\_id":"2", "parent\_process\_id":"1"… --- ## [How to use SSL certs with Fleet server - errors on startup](https://discuss.elastic.co/t/how-to-use-ssl-certs-with-fleet-server-errors-on-startup/317148)
**Author:** [@Bitdoctor](https://discuss.elastic.co/u/Bitdoctor)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-use-ssl-certs-with-fleet-server-errors-on-startup/317148 "2022-10-20T17:47:52Z")
I get the following error trying to start Fleet server after installing it on my Logstash node: Fleet Server - Error - x509: certificate signed by unknown authority","ecs.version":"1.6.0" I'm attempting to use the self… --- ## [Can we restrict Dashboard view for Kibana](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 5:42pm UTC](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989 "2022-10-20T17:42:37Z")
Hi , i have kibana access, but I can see multiple dashboards, can we restrict the access on specific dashbard --- ## [Changing the SSL certificate fleet server uses](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 4\ **Last updated:** [October 20, 2022, 5:40pm UTC](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902 "2022-10-20T17:40:47Z")
Is there a way to specify a new certificate that the fleet server will use for communication over port 8220 other than re-enrolling the agent? This is the certificate that is specified in the --fleet-server-cert and --f… --- ## [Repository-s3 plugin not synching snapshots](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117)
**Author:** [@Vishrant\_Gupta](https://discuss.elastic.co/u/Vishrant_Gupta)\ **Replies:** 12\ **Last updated:** [October 20, 2022, 4:54pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117 "2022-10-20T16:54:55Z")
Hi there, I have two elasticsearch clusters running on two separate kubernetes clusters. Both the elasticsearch clusters have the repository-s3 plugin installed. "2": { "name": "elasticsearch-client-575db98f… --- ## [Index total\_fields \> limit](https://discuss.elastic.co/t/index-total-fields-limit/317139)
**Author:** [@nagrgk](https://discuss.elastic.co/u/nagrgk)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 4:50pm UTC](https://discuss.elastic.co/t/index-total-fields-limit/317139 "2022-10-20T16:50:18Z")
Hello ElasticTeam, we have an issue with the total\_fields limit, which is defaulted to 1000 and we have increased it to more than 1000, problem is it gets changed back to 1000 after a few days and it is not preserved w… --- ## [How to get date parsing target as a date nor string](https://discuss.elastic.co/t/how-to-get-date-parsing-target-as-a-date-nor-string/317097)
**Author:** [@sh.user](https://discuss.elastic.co/u/sh.user)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 4:03pm UTC](https://discuss.elastic.co/t/how-to-get-date-parsing-target-as-a-date-nor-string/317097 "2022-10-20T16:03:36Z")
Hello, I need to parse Field1 as date . I use date filter but when i specify target , i get target as string not date ( by default the timestamp is the target but this is not my need). date { match =\> \["Field1", "dd/M… --- ## [Show failed GDM logins on Login Dasboard](https://discuss.elastic.co/t/show-failed-gdm-logins-on-login-dasboard/317039)
**Author:** [@dredshaw](https://discuss.elastic.co/u/dredshaw)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 3:43pm UTC](https://discuss.elastic.co/t/show-failed-gdm-logins-on-login-dasboard/317039 "2022-10-20T15:43:58Z")
I am using Auditbeat on a standalone system in a closed area with no internet access. I set up Elasticsearch, Kibana, and Auditbeat to audit the system. This was easy enough. I Would like to get the Login Dashboard to… --- ## [Use ctx in if condition is always null\_pointer\_exception](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121)
**Author:** [@HiganFish](https://discuss.elastic.co/u/HiganFish)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:53pm UTC](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121 "2022-10-20T14:53:15Z")
PUT \_ingest/pipeline/test1 { "processors": \[ {"dissect": { "field": "message", "pattern": "%{logdata}" }} \] } POST \_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { … --- ## [Unable to get local Kibana to read any data from remote Metricbeat](https://discuss.elastic.co/t/unable-to-get-local-kibana-to-read-any-data-from-remote-metricbeat/317056)
**Author:** [@nola](https://discuss.elastic.co/u/nola)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 2:54pm UTC](https://discuss.elastic.co/t/unable-to-get-local-kibana-to-read-any-data-from-remote-metricbeat/317056 "2022-10-20T14:54:52Z")
I have Kibana installed on my local machine and have Elasticsearch and Metricbeat installed on a remote AWS EC2 instance. For simplicity, let's say the public IP address of the AWS box is http://1.2.3.4. In my local ki… --- ## [Uneven disk usage after removing a node set](https://discuss.elastic.co/t/uneven-disk-usage-after-removing-a-node-set/317107)
**Author:** [@Fares\_Oueslati](https://discuss.elastic.co/u/Fares_Oueslati)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 1:19pm UTC](https://discuss.elastic.co/t/uneven-disk-usage-after-removing-a-node-set/317107 "2022-10-20T13:19:15Z")
Hello I'm using ECK 1.8.0 and ES 7.16.2. In order to increase the storage available for an ES cluster managed by the ECK operator, I proceeded through two steps, first I added a new node set with the new disk capacity … --- ## [Prometheus module remote\_write metricset](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 1:02pm UTC](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114 "2022-10-20T13:02:24Z")
Hello, We are scraping metrics from some 30+ Kafka clusters running in Confluent Cloud. We are scraping the metrics api using prometheus. Prometheus is configured to remote\_write to an elastic agent running among othe… --- ## [No Hosts Monitor Id or Url in Uptime](https://discuss.elastic.co/t/no-hosts-monitor-id-or-url-in-uptime/316913)
**Author:** [@lcsb-sysadmins](https://discuss.elastic.co/u/lcsb-sysadmins)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 12:59pm UTC](https://discuss.elastic.co/t/no-hosts-monitor-id-or-url-in-uptime/316913 "2022-10-20T12:59:25Z")
Hello Team, We have successfully setup our Elastic Cluster - 7.17.5 with log-stash and search-guard. We have enrolled ~530 nodes in our elastic cluster. We tried to enable the HeartBeat to monitor/check the uptime of … --- ## [Kibana - monitors .. which index is in use](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111)
**Author:** [@joannejackson](https://discuss.elastic.co/u/joannejackson)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 12:51pm UTC](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111 "2022-10-20T12:51:54Z")
Hi - I'm new to kibana and we set up our first http monitor. My question -for visualization purposes .. what index does that monitor write to? --- ## [Run a "lite" elasticsearch](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 12:36pm UTC](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033 "2022-10-20T12:36:05Z")
We are using elasticsearch in CI jobs, so we want it as liter as possible. With only the desired features: "search" ! This is very serious problem, elasticsearch is looking too "big" and I see many people leaving it for … --- ## [Filebeat not respect order of file?](https://discuss.elastic.co/t/filebeat-not-respect-order-of-file/317011)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 6\ **Last updated:** [October 20, 2022, 12:35pm UTC](https://discuss.elastic.co/t/filebeat-not-respect-order-of-file/317011 "2022-10-20T12:35:00Z")
filebeat at indexed at last to "server.log.2022-07-27" but the last is server.log why? not respect the name of file but the size of file? -rw-r--r--. 1 wildfly wildfly 0 Apr 20 18:25 audit.log -rw-r--r--. 1 wi… --- ## [Run same script in multiple environments](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937)
**Author:** [@Kris\_MacKay](https://discuss.elastic.co/u/Kris_MacKay)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 12:34pm UTC](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937 "2022-10-20T12:34:26Z")
I'd like to reuse the same script for different environments. The opening URL is dependent on passed in parameter. For each Fleet agent policy, I'd like the passed in parameter to apply to just that script, but not shar… --- ## [Can I use the values from the timepicker into aggregations?](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067)
**Author:** [@JimClark](https://discuss.elastic.co/u/JimClark)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 12:19pm UTC](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067 "2022-10-20T12:19:47Z")
My usecase is as follows: I have a network resource that I need to track the usage of. Every usage of the resource is recorded into a separate document with the total usage @timestamp -\> End of usage @id -\> resour… --- ## [Custom Fields Cannot Process by Filebeat](https://discuss.elastic.co/t/custom-fields-cannot-process-by-filebeat/317103)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 11:50am UTC](https://discuss.elastic.co/t/custom-fields-cannot-process-by-filebeat/317103 "2022-10-20T11:50:40Z")
Hi Team, I successfully able to dissect log.original field in my cisco module and turn it into a custom field host.name. When I try to make indices using this custom field host.name, the indices where not created. Tha… --- ## [Migrating Elastic Cloud to Elastic Hosted on Windows Server](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792 "2022-10-20T11:24:52Z")
Hello, We have a Cloud(Elasticcloud) Instance hosted on AWS, and i would like to migrate the instance into a private Windows server. I couldn't find any instructions on the same could you please point me to the right r… --- ## [Export Kibana Dashboards from One server to another](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 11:23am UTC](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101 "2022-10-20T11:23:01Z")
Hello, I have a dashboard created on Kibana 7.8 version I am trying to export and import it onto a different server which is ruining Kibana 8.4 version based on this Saved Objects | Kibana Guide \[7.8\] | Elastic steps … --- ## [Trace info not available since we moved behind gateway to let keycloak oauth2 work](https://discuss.elastic.co/t/trace-info-not-available-since-we-moved-behind-gateway-to-let-keycloak-oauth2-work/317040)
**Author:** [@vetm73](https://discuss.elastic.co/u/vetm73)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:42pm UTC](https://discuss.elastic.co/t/trace-info-not-available-since-we-moved-behind-gateway-to-let-keycloak-oauth2-work/317040 "2022-10-19T17:42:37Z")
Kibana version: 7.16.2 Elasticsearch version: 7.16.2 APM Server version: 1.34.1 APM Agent language and version: Java 1.34.1 Browser version: Latest Chrome Original install method (e.g. download page, yum, deb, … --- ## [Search API Filters - Limits - Arrays](https://discuss.elastic.co/t/search-api-filters-limits-arrays/317095)
**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:48am UTC](https://discuss.elastic.co/t/search-api-filters-limits-arrays/317095 "2022-10-20T10:48:13Z")
Hi :wave: Documentation (Search API Filters) states that there are the following limits when filtering a search query: (A) max 32 filters (B) arrays can't contain more than 1024 values I have a use case where I nee… --- ## [Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060)
**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060 "2022-10-20T10:14:29Z")
Hello dears, I'm getting errors when running filebeats on a remote server to test the Elasticsearch connection Below is the error image and description. sudo filebeat setup -E output.logstash.enabled=false -E output.e… --- ## [Logstash sometimes ignoring datastream configuration in elasticsearch output](https://discuss.elastic.co/t/logstash-sometimes-ignoring-datastream-configuration-in-elasticsearch-output/317089)
**Author:** [@hti](https://discuss.elastic.co/u/hti)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 10:21am UTC](https://discuss.elastic.co/t/logstash-sometimes-ignoring-datastream-configuration-in-elasticsearch-output/317089 "2022-10-20T10:21:06Z")
Hello, we are running logstash 8.4.0 with multiple pipelines outputting to elasticsearch. Most of the time this works fine, but sometimes logstash will ignore the datastream configuration on startup and tries to write … --- ## [Index Creation for Fortinet Devices Fail](https://discuss.elastic.co/t/index-creation-for-fortinet-devices-fail/316116)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:19am UTC](https://discuss.elastic.co/t/index-creation-for-fortinet-devices-fail/316116 "2022-10-20T10:19:45Z")
Hello Elastic Team, I would like to ask for help for I my filebeat seems like to fail creating index for my fortinet firewall (I use Fortinet filebeat module). Filebeat version is 7.17.15. However, the fortigate logs fa… --- ## [Kibana user profile with specific index?](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096 "2022-10-20T10:14:50Z")
hello is possible create multi user with same user have a group of index and other is not visible for all? example have 3 index index1 =\>user1 index2 =\>user2 index3 =\>user3 now all index is visible --- ## [Systemd\[1\]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 7:47am UTC](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015 "2022-10-20T07:47:14Z")
Hello, i have an 8.4.x Elastic's version. After editing the .yml file, setting IP address, cluster name and http port, the service doesn't start. jourcnalcte -xeu elasticsearch.service ott 19 16:05:54 ubuntu-linux-2… --- ## [Kibana not respect order by date why?](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 9:47am UTC](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046 "2022-10-20T09:47:48Z")
in my index have this "message": "2022-10-08 19:36:24,452 INFO \[org.springframework.web.servlet.DispatcherServlet\] (default task-1) Completed initialization in 15 ms", "@timestamp": "2022-10-19T19:07:49.010Z", … [Previous page](https://discuss.elastic.co/latest.md?page=922) [Next page](https://discuss.elastic.co/latest.md?page=924)