# Latest **URL:** https://discuss.elastic.co/latest.md?page=924 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 925 --- ## [Ca certification error](https://discuss.elastic.co/t/ca-certification-error/317092)
**Author:** [@Siva\_Priya](https://discuss.elastic.co/u/Siva_Priya)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:46am UTC](https://discuss.elastic.co/t/ca-certification-error/317092 "2022-10-20T09:46:44Z")
I have installed Elasticsearch 7.14.1 .The Elasticsearch is working fine. Then i have deployed Logstash.The issue is logstash cannot communicate with Elasticsearch My elasticsearch.yaml file is apiVersion: elasticsearc… --- ## [Sum of last complete Bucket as a single metric](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936)
**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 9:41am UTC](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936 "2022-10-20T09:41:16Z")
hi, im looking for a way to display the sum of all values from the last complete bucket of a timeseries. the idea is to display the current sum of all memory ,cores ,requests,disk space, etc. used for a server farm in … --- ## [Reading json array with filebeat](https://discuss.elastic.co/t/reading-json-array-with-filebeat/317090)
**Author:** [@Steve666](https://discuss.elastic.co/u/Steve666)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:41am UTC](https://discuss.elastic.co/t/reading-json-array-with-filebeat/317090 "2022-10-20T09:41:09Z")
Hi all, Is there any possible way to extract a json array as follow with filebeat ? \ { "processingData" : { "tiffs" : \[ { "tiffName" : "blabla", "tiffHeight\_mm" : 1, "tiffWidth\_mm" … --- ## [Unable to see any details of basic spring batch app](https://discuss.elastic.co/t/unable-to-see-any-details-of-basic-spring-batch-app/317002)
**Author:** [@maw2be](https://discuss.elastic.co/u/maw2be)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 9:27am UTC](https://discuss.elastic.co/t/unable-to-see-any-details-of-basic-spring-batch-app/317002 "2022-10-20T09:27:56Z")
Java Agent not supporting basic spring batch applications. I have two spring batch applications. One is using the scheduled option in it, java agent sends all information without issue. Second is basic, one off spring ba… --- ## [ES and APM-Server for Mobile App telemetry?](https://discuss.elastic.co/t/es-and-apm-server-for-mobile-app-telemetry/317055)
**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 9:10am UTC](https://discuss.elastic.co/t/es-and-apm-server-for-mobile-app-telemetry/317055 "2022-10-20T09:10:40Z")
We're already using Elastic and apm-server for metrics with our web applications, and now we're building a mobile app and it would be great to use elastic stack for that as well. The app will be built with React Native a… --- ## [Problem with filestream access denied on windows](https://discuss.elastic.co/t/problem-with-filestream-access-denied-on-windows/317086)
**Author:** [@drbytes](https://discuss.elastic.co/u/drbytes)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:06am UTC](https://discuss.elastic.co/t/problem-with-filestream-access-denied-on-windows/317086 "2022-10-20T09:06:48Z")
Hello I'm running into a problem with filebeat, an access denied. I have a directory located on c:\\DIR1\\DIR2\\LOG\_DIR, LOG\_DIR contains the log files which are read by filebeat using a filestream glob. The user running f… --- ## [Records missing from Elastic Index when running our Talend ETL process](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085)
**Author:** [@BroJo](https://discuss.elastic.co/u/BroJo)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 8:57am UTC](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085 "2022-10-20T08:57:00Z")
Hi there, In our application we decided to use elasticsearch create a daily snapshot of some critical application data for visualizations. The issue we are facing is that we are getting missing records in out etl proce… --- ## [Analysis (Pipeline)](https://discuss.elastic.co/t/analysis-pipeline/317073)
**Author:** [@linhz](https://discuss.elastic.co/u/linhz)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 7:51am UTC](https://discuss.elastic.co/t/analysis-pipeline/317073 "2022-10-20T07:51:18Z")
Hi. Anyone can share with me where can i find Pipeline Formulas for Kibana. Thanks. --- ## [How to do mathematical operations on 2 variables in tsvb markdown](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062)
**Author:** [@eleven\_e](https://discuss.elastic.co/u/eleven_e)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062 "2022-10-20T06:29:39Z")
I have 2 variables 'a' and 'b' where i need to perform (b-a)/b operation, how should i achieve it in the markdown? thanks. --- ## [Index doesn't rollover](https://discuss.elastic.co/t/index-doesnt-rollover/316837)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 5:55am UTC](https://discuss.elastic.co/t/index-doesnt-rollover/316837 "2022-10-20T05:55:15Z")
Hi, My server restarted, so I restarted my Filebeat, ES and Kibana. Initially, filebeat was giving the error of no write index is defined for alias \[filebeat-7.14.0\]. So I resolved it by using the Update Index Aliases A… --- ## [Is there a library/API in Java to connect and fetch data from Elasticsearch](https://discuss.elastic.co/t/is-there-a-library-api-in-java-to-connect-and-fetch-data-from-elasticsearch/317069)
**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 5:30am UTC](https://discuss.elastic.co/t/is-there-a-library-api-in-java-to-connect-and-fetch-data-from-elasticsearch/317069 "2022-10-20T05:30:58Z")
Is there a library/API in Java to connect and fetch data from Elasticsearch --- ## [Is it possible to add multiple outputs for elastic agents?](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 5\ **Last updated:** [October 20, 2022, 4:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891 "2022-10-20T04:20:29Z")
We have 3 elasticsearch nodes and a client node. node 1, node 2, node 3 The current output of elastic agent is node 1. If the node 1 goes down is there a way for elastic agent to automatically sent its output to node 2… --- ## [Can ELK configure Remote Syslog Forwarding to Third party syslog server?](https://discuss.elastic.co/t/can-elk-configure-remote-syslog-forwarding-to-third-party-syslog-server/316953)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 5\ **Last updated:** [October 20, 2022, 3:30am UTC](https://discuss.elastic.co/t/can-elk-configure-remote-syslog-forwarding-to-third-party-syslog-server/316953 "2022-10-20T03:30:26Z")
Hi All, Can ELK Stack able to configure remote syslog forwarding to another syslog server? Kindly please advise. Thanks. --- ## [A node cannot be upgraded directly from version \[7.10.2\] to version \[8.4.3\], it must first be upgraded to version \[7.17.0\]](https://discuss.elastic.co/t/a-node-cannot-be-upgraded-directly-from-version-7-10-2-to-version-8-4-3-it-must-first-be-upgraded-to-version-7-17-0/317036)
**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\ **Replies:** 6\ **Last updated:** [October 20, 2022, 3:27am UTC](https://discuss.elastic.co/t/a-node-cannot-be-upgraded-directly-from-version-7-10-2-to-version-8-4-3-it-must-first-be-upgraded-to-version-7-17-0/317036 "2022-10-20T03:27:11Z")
Hi Team, I'm not sure how elastic verion managed to upgrade the major version without tried anyone. Did the stack try to upgrade itself? Kindly help how can i fix this error. my kibana down due to this error --- ## [Watcher: same query two different ranges (times)](https://discuss.elastic.co/t/watcher-same-query-two-different-ranges-times/316982)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:43am UTC](https://discuss.elastic.co/t/watcher-same-query-two-different-ranges-times/316982 "2022-10-20T02:43:47Z")
Hi, it's possible to create a watcher with a single query on two different times? Ex. If a certain threshold is exceeded between 10-11 and 11-12 and so on. So the alert would trigger only if the two conditions are met … --- ## [Filebeat monitoring metrics not visible in ElasticSearch](https://discuss.elastic.co/t/filebeat-monitoring-metrics-not-visible-in-elasticsearch/315596)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 31\ **Last updated:** [October 20, 2022, 2:41am UTC](https://discuss.elastic.co/t/filebeat-monitoring-metrics-not-visible-in-elasticsearch/315596 "2022-10-20T02:41:58Z")
Hi, I have posted this question on SO but could not get a good answer yet .... Basically I think I have configured Fielbeat + ES according to the docs , to send Filebeat monitored metrics into ES - but nothing is showin… --- ## [Max Function vs High Count](https://discuss.elastic.co/t/max-function-vs-high-count/316498)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:20am UTC](https://discuss.elastic.co/t/max-function-vs-high-count/316498 "2022-10-20T02:20:21Z")
Hi Community, The max function detect anomaly when it will max value for a particular field. For example average life of a person can be 60 and if we are applying max function on age and it detect anomaly age can be 90… --- ## [Elastic Search Anomaly Detection - Influencing Anomaly Scoring](https://discuss.elastic.co/t/elastic-search-anomaly-detection-influencing-anomaly-scoring/316797)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:15am UTC](https://discuss.elastic.co/t/elastic-search-anomaly-detection-influencing-anomaly-scoring/316797 "2022-10-20T02:15:29Z")
Hello, I am working with the Elasticsearch anomaly detection tools. I am looking for a way to advance the scoring of an anomaly based off a specific threshold. For instance, lets say we have a max on a number that repre… --- ## [Zabbix와 elastic의 비교](https://discuss.elastic.co/t/zabbix-elastic/317059)
**Author:** [@sjh0207](https://discuss.elastic.co/u/sjh0207)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 12:00am UTC](https://discuss.elastic.co/t/zabbix-elastic/317059 "2022-10-20T00:00:44Z")
네트워크 트래픽 모니터링을 중점적으로 기획하고 있습니다. zabbix와 비교 시 elastic에서의 이점은 무엇이 있을까요? --- ## [Alert for Elastic-Agent Offline](https://discuss.elastic.co/t/alert-for-elastic-agent-offline/317058)
**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 11:34pm UTC](https://discuss.elastic.co/t/alert-for-elastic-agent-offline/317058 "2022-10-19T23:34:26Z")
Hello, Friends, does anyone know how it is possible to send an alert when an elastic-agent goes down? --- ## [How change pattern of data?](https://discuss.elastic.co/t/how-change-pattern-of-data/317045)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045 "2022-10-19T23:08:23Z")
i have this format in kibana Jul 27, 2022 @ 15:27:26.598 but is have a problem not order correctly with create a field datetime in logstash filter { grok { match =\> \["message", "%{TIMESTAMP\_ISO8601:log… --- ## [Extract datatime in log and convert in datatime field?](https://discuss.elastic.co/t/extract-datatime-in-log-and-convert-in-datatime-field/317021)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 11:06pm UTC](https://discuss.elastic.co/t/extract-datatime-in-log-and-convert-in-datatime-field/317021 "2022-10-19T23:06:32Z")
i ve this config in logstash filter { grok { match =\> \["message", "%{TIMESTAMP\_ISO8601:timestamp\_message}"\] } date { match =\> \["timestamp\_message","YYYY-MM-dd HH:mm:ss"\] target =\> "@timesta… --- ## [Elastic Search Slow Response time range filter query](https://discuss.elastic.co/t/elastic-search-slow-response-time-range-filter-query/316936)
**Author:** [@prateek\_shekhar](https://discuss.elastic.co/u/prateek_shekhar)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 10:35pm UTC](https://discuss.elastic.co/t/elastic-search-slow-response-time-range-filter-query/316936 "2022-10-19T22:35:25Z")
Hi Everyone, We a have a use case where we have added a new float field to our Elasticsearch index. The structure of the field is: class Foo { Float x Float y } This is our filter query which uses the above field: {… --- ## [Unable to create Threshold rule](https://discuss.elastic.co/t/unable-to-create-threshold-rule/316262)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 10:35pm UTC](https://discuss.elastic.co/t/unable-to-create-threshold-rule/316262 "2022-10-19T22:35:12Z")
Hi Team, I am trying to write a threshold rule but failing to find the exact results. Can someone please help? I have nginx logs pouring in and wanted to setup the threshold alert so that if source.ip \>=750 from single … --- ## [Engineer Class Lab 4.1 - Missing data](https://discuss.elastic.co/t/engineer-class-lab-4-1-missing-data/315719)
**Author:** [@Kimberly](https://discuss.elastic.co/u/Kimberly)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 10:34pm UTC](https://discuss.elastic.co/t/engineer-class-lab-4-1-missing-data/315719 "2022-10-19T22:34:45Z")
For Item 9-11, I ran load\_webtraffic.sh, created a dataview for web\_traffic index and used @timestamp as the time field. I only found 1456190 hits from Apr 1, 00:00:00 thru Apr 30, 23:30:00 instead of 1462658 hits in th… --- ## [Filebeat on macOS documentation error, breaking change](https://discuss.elastic.co/t/filebeat-on-macos-documentation-error-breaking-change/316996)
**Author:** [@maxried](https://discuss.elastic.co/u/maxried)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 10:20pm UTC](https://discuss.elastic.co/t/filebeat-on-macos-documentation-error-breaking-change/316996 "2022-10-19T22:20:23Z")
Hi all, I'm running filebeat on macOS. It starts as a launchd service. After upgrading from 7 to 8, the daemon didn't run. I investigated this issue, and found that its command-line included --environment macos\_service … --- ## [How to compare 2 values in the only field using elasticsearch on grafana dashboard](https://discuss.elastic.co/t/how-to-compare-2-values-in-the-only-field-using-elasticsearch-on-grafana-dashboard/316932)
**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 10:00pm UTC](https://discuss.elastic.co/t/how-to-compare-2-values-in-the-only-field-using-elasticsearch-on-grafana-dashboard/316932 "2022-10-19T22:00:11Z")
I need to create a dashboard that shows the two results of my boolean field. --- ## [Scroll in Python Elasticsearch client is not working](https://discuss.elastic.co/t/scroll-in-python-elasticsearch-client-is-not-working/317038)
**Author:** [@Yeashin\_Rabbi](https://discuss.elastic.co/u/Yeashin_Rabbi)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:28pm UTC](https://discuss.elastic.co/t/scroll-in-python-elasticsearch-client-is-not-working/317038 "2022-10-19T17:28:41Z")
I tried to scroll all documents with python. it return empty array of hits. Here is my code: es = Elasticsearch(self.source, http\_auth=(self.user, self.password), timeout=80000, request\_timeo… --- ## [Elasticsearch with nmap](https://discuss.elastic.co/t/elasticsearch-with-nmap/316998)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 9:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-nmap/316998 "2022-10-19T21:47:51Z")
Hello, Can my elasticsearch works like nmap, for example, when i add a machine on elasticsearch, the elasticsearch detect the vulnerabilies(cve) for this machine and add on a dashboard? --- ## [How to enable Elastic Security](https://discuss.elastic.co/t/how-to-enable-elastic-security/316154)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 9:28pm UTC](https://discuss.elastic.co/t/how-to-enable-elastic-security/316154 "2022-10-19T21:28:23Z")
How to enable the default elastic security solution for non default indices (metric\*, filebeat\*..etc), which follow the ECS. Should be able to add the required indices in the security solution. [Previous page](https://discuss.elastic.co/latest.md?page=923) [Next page](https://discuss.elastic.co/latest.md?page=925)