# Latest

**URL:** https://discuss.elastic.co/latest.md?page=925

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 926

---

## [Vulnerability (CVE-2022-42889) Apache Commons Text](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009)

<div class="topic-metadata">

**Author:** [@mduijkers](https://discuss.elastic.co/u/mduijkers)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 8:56pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009 "2022-10-19T20:56:55Z")

</div>

Vulnerability (CVE-2022-42889) Apache Commons Text. For this vulnerability ES needs to upgrade to Apache Commons Text 1.10.0 Source: https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om Which version of ES…

---

## [Logstash plugin use @logger in new class](https://discuss.elastic.co/t/logstash-plugin-use-logger-in-new-class/317034)

<div class="topic-metadata">

**Author:** [@tylersiemers](https://discuss.elastic.co/u/tylersiemers)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 8:42pm UTC](https://discuss.elastic.co/t/logstash-plugin-use-logger-in-new-class/317034 "2022-10-19T20:42:34Z")

</div>

New to logstash plugins here. How do you pass the @logger reference into another class within a plugin? The example below but trying to call another class outside and logging cause a failure. class SecondClass @logger.…

---

## [Why default index created logstash-2022.01.01-000001](https://discuss.elastic.co/t/why-default-index-created-logstash-2022-01-01-000001/316632)

<div class="topic-metadata">

**Author:** [@connectgeeks](https://discuss.elastic.co/u/connectgeeks)\
**Replies:** 7\
**Last updated:** [October 19, 2022, 6:35pm UTC](https://discuss.elastic.co/t/why-default-index-created-logstash-2022-01-01-000001/316632 "2022-10-19T18:35:27Z")

</div>

I'm using filebeat for forwarding logs to logstash and creating multiple datastreams in elasticsearch. I noticed one index created with name "logstash-2022.01.01-000001" and storing some of data from different datasteams…

---

## [Send json data with escape character](https://discuss.elastic.co/t/send-json-data-with-escape-character/317041)

<div class="topic-metadata">

**Author:** [@Pratik1](https://discuss.elastic.co/u/Pratik1)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 5:50pm UTC](https://discuss.elastic.co/t/send-json-data-with-escape-character/317041 "2022-10-19T17:50:51Z")

</div>

I am using Kapacitor to send alerts via post method to elasticsearch. However, I was unable to do, so to debug further I was using a local django application to read the post response. By using alert template I am able t…

---

## [Filebeat on no internet](https://discuss.elastic.co/t/filebeat-on-no-internet/317022)

<div class="topic-metadata">

**Author:** [@Virendra\_Negi](https://discuss.elastic.co/u/Virendra_Negi)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 5:01pm UTC](https://discuss.elastic.co/t/filebeat-on-no-internet/317022 "2022-10-19T17:01:47Z")

</div>

We have our servers located geographically at remote places (where the internet is not as reliable) the Filebeat shipper is responsible to ship the logs to our ELK via KAFKA -\> LOGSTASH -\> ELASTIC The thing I'm unable t…

---

## [Elasticsearch proxy that can proxy searches to mask ES version?](https://discuss.elastic.co/t/elasticsearch-proxy-that-can-proxy-searches-to-mask-es-version/317028)

<div class="topic-metadata">

**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-proxy-that-can-proxy-searches-to-mask-es-version/317028 "2022-10-19T16:07:44Z")

</div>

Hi, all! We have used PMM 1.x for quite some time (Percona Monitoring & Management) to monitor our various mysql servers. Under the hood it's grafana and victoriametrics. It can use ES clusters as a data source and we…

---

## [Treating your Cluster like cattle instead of pets](https://discuss.elastic.co/t/treating-your-cluster-like-cattle-instead-of-pets/316930)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 3\
**Last updated:** [October 19, 2022, 3:16pm UTC](https://discuss.elastic.co/t/treating-your-cluster-like-cattle-instead-of-pets/316930 "2022-10-19T15:16:01Z")

</div>

Anyone who has managed large server farms soon realizes that treating your servers like cattle instead of pets is the most efficient way to deploy, run, decommission nodes quickly and efficiently. If a server fails you, …

---

## [Update\_by\_query and](https://discuss.elastic.co/t/update-by-query-and/317020)

<div class="topic-metadata">

**Author:** [@reed](https://discuss.elastic.co/u/reed)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 3:13pm UTC](https://discuss.elastic.co/t/update-by-query-and/317020 "2022-10-19T15:13:48Z")

</div>

Hi all, I have a problem with update\_by\_query in a pipeline but I noticed that the same query used into dev tools works fine: PIPELINE http { url =\> "http://crsinsightdev.icc.crifnet.com:9200/loyd-crs\_insight\_s1\_a…

---

## [Kibana Elasticearch configuration](https://discuss.elastic.co/t/kibana-elasticearch-configuration/316915)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 8\
**Last updated:** [October 19, 2022, 2:45pm UTC](https://discuss.elastic.co/t/kibana-elasticearch-configuration/316915 "2022-10-19T14:45:01Z")

</div>

Hi, I am trying to configure the Kibana file to talk to ELasticsearch. It is deployed on single node EC2 instance on AWS. Here are my config files: kibana.yml # Kibana is served by a back end server. This setting spe…

---

## [Unable to connect to Elastic search with https from Logstash](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-with-https-from-logstash/316995)

<div class="topic-metadata">

**Author:** [@Pramod\_Kumar\_G](https://discuss.elastic.co/u/Pramod_Kumar_G)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 2:40pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-with-https-from-logstash/316995 "2022-10-19T14:40:38Z")

</div>

I am a new bie to ELK .I was able to start successfully elastic server and kibana.I was trying to start Logstash server but I am getting errors as below when run command logstash -f .\\config\\sample.conf my sample.conf …

---

## [Unable to ship logs from beats to logstash](https://discuss.elastic.co/t/unable-to-ship-logs-from-beats-to-logstash/316048)

<div class="topic-metadata">

**Author:** [@charlot\_Attard](https://discuss.elastic.co/u/charlot_Attard)\
**Replies:** 24\
**Last updated:** [October 19, 2022, 1:29pm UTC](https://discuss.elastic.co/t/unable-to-ship-logs-from-beats-to-logstash/316048 "2022-10-19T13:29:48Z")

</div>

I have configured beats to ouput logs to logstash via 2 servers. The problem is that for some reason logs are not being shipped to Logstash, I even ran a tcpdump on logstash servers and can't find anything relevant. What…

---

## [Cannot use own java version in ES 8](https://discuss.elastic.co/t/cannot-use-own-java-version-in-es-8/317007)

<div class="topic-metadata">

**Author:** [@surkovoleg2010](https://discuss.elastic.co/u/surkovoleg2010)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 1:16pm UTC](https://discuss.elastic.co/t/cannot-use-own-java-version-in-es-8/317007 "2022-10-19T13:16:19Z")

</div>

Hello, I have ES version 8.1.2 and have env var for ES\_JAVA\_HOME But anyway, when I start ES with systemctl start elasticsearch.service it uses bundled jdk. I found a way how to start it with my own, using override.…

---

## [Convert 2 Node Cluster Into Single Node](https://discuss.elastic.co/t/convert-2-node-cluster-into-single-node/316555)

<div class="topic-metadata">

**Author:** [@rhailey](https://discuss.elastic.co/u/rhailey)\
**Replies:** 7\
**Last updated:** [October 19, 2022, 1:10pm UTC](https://discuss.elastic.co/t/convert-2-node-cluster-into-single-node/316555 "2022-10-19T13:10:27Z")

</div>

Hello - I'm currently using Elastic 7.11 (open/communitiy version) as the back-end storage for Graylog (also the open/community version). OS is Oracle Linux v8. I have 2 Graylog servers, clustered, in front of 2 Elast…

---

## [Is there a way to return true/false if documents exists for the given query?](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965)

<div class="topic-metadata">

**Author:** [@Hamza\_Khalid](https://discuss.elastic.co/u/Hamza_Khalid)\
**Replies:** 5\
**Last updated:** [October 19, 2022, 12:37pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965 "2022-10-19T12:37:47Z")

</div>

I have a query: GET users/\_search { "from": 0, "size": 20, "query": { "match\_all": {} } What i want to achieve is if the above query returns even a single document i get the response as true and if no document is r…

---

## [Logstash problems with certs - docker-compose](https://discuss.elastic.co/t/logstash-problems-with-certs-docker-compose/316991)

<div class="topic-metadata">

**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 12:28pm UTC](https://discuss.elastic.co/t/logstash-problems-with-certs-docker-compose/316991 "2022-10-19T12:28:37Z")

</div>

Hi everyone, I'm trying to configure logstash but apparently I am inserting the wrong certificate logstash.outputs.elasticsearch\]\[main\] Failed to perform request {:message=\>"Certificate for \<UP\> doesn't match any of th…

---

## [Connection refused with Python connection in Docker](https://discuss.elastic.co/t/connection-refused-with-python-connection-in-docker/316365)

<div class="topic-metadata">

**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 11:40am UTC](https://discuss.elastic.co/t/connection-refused-with-python-connection-in-docker/316365 "2022-10-19T11:40:23Z")

</div>

Trying to install Elasticsearch and Kibana 8.4.3 Docker containers on a development laptop, and run elasticsearch-py commands from an app in another running container. And I'm stuck. I have the ES8 and Kibana containers…

---

## [Query "at least one not in given array"](https://discuss.elastic.co/t/query-at-least-one-not-in-given-array/316984)

<div class="topic-metadata">

**Author:** [@ltr31](https://discuss.elastic.co/u/ltr31)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 11:20am UTC](https://discuss.elastic.co/t/query-at-least-one-not-in-given-array/316984 "2022-10-19T11:20:52Z")

</div>

Hello I have documents with let say positive terms and negative terms like { ... "mood" : \[ "happy", "excited", "furious" \], ... } Positive terms can be an infinite list of values, …

---

## [searchAsync is calling both OnResponse and onFailure](https://discuss.elastic.co/t/searchasync-is-calling-both-onresponse-and-onfailure/316981)

<div class="topic-metadata">

**Author:** [@jjc](https://discuss.elastic.co/u/jjc)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 10:06am UTC](https://discuss.elastic.co/t/searchasync-is-calling-both-onresponse-and-onfailure/316981 "2022-10-19T10:06:15Z")

</div>

Hi, i've got a little problem. im running an async search that first returns calls OnResponse with the desired result then immediately calls onFailure. The index i'm querying contains exactly one single row. Please i…

---

## [Different time in copied index and pipeline](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 10:02am UTC](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980 "2022-10-19T10:02:25Z")

</div>

I have something strange with timezones. From my raspberry Pi I am sending some specific information (temperature) to Sylog (separate Syslog Server). Same format as normal syslog: In my Syslog server I am splitting the…

---

## [Why logstash does not create field on Kibana](https://discuss.elastic.co/t/why-logstash-does-not-create-field-on-kibana/316978)

<div class="topic-metadata">

**Author:** [@glaucoperucchi](https://discuss.elastic.co/u/glaucoperucchi)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 9:36am UTC](https://discuss.elastic.co/t/why-logstash-does-not-create-field-on-kibana/316978 "2022-10-19T09:36:50Z")

</div>

Hello guys, I need a your help. I did a filter with grok, but when I go to kibana I did not see the field of the filter. The log: type=USER\_ACCT msg=audit(1666101680.397:1224): pid=665272 uid=0 auid=525000037 ses=27 …

---

## [WAF logs Configuration from s3 bucket to Elasticsearch Using logstash s3 Plugin](https://discuss.elastic.co/t/waf-logs-configuration-from-s3-bucket-to-elasticsearch-using-logstash-s3-plugin/315243)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 2\
**Last updated:** [October 19, 2022, 9:32am UTC](https://discuss.elastic.co/t/waf-logs-configuration-from-s3-bucket-to-elasticsearch-using-logstash-s3-plugin/315243 "2022-10-19T09:32:46Z")

</div>

Hello Everyone I am trying to Configuring WAF 2.0 logs from s3 Bucket to elasticsearch but I am facing some erroorm please Helpme for the same. My Current Logstash configuration input { s3 { access\_key\_id =\> "myid" …

---

## [Logstash to convert scientific notation to float](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231)

<div class="topic-metadata">

**Author:** [@the\_elkguy](https://discuss.elastic.co/u/the_elkguy)\
**Replies:** 7\
**Last updated:** [October 19, 2022, 9:25am UTC](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231 "2022-10-19T09:25:54Z")

</div>

Hello, I'm using logstash ruby filter to convert scientific notation from string to float which seem to be not working. I have used GROK to extract the scientific notation (1.989e-04) from the message and now converting…

---

## [How to rename a field with regex](https://discuss.elastic.co/t/how-to-rename-a-field-with-regex/316972)

<div class="topic-metadata">

**Author:** [@Saeedeh\_Moghimi](https://discuss.elastic.co/u/Saeedeh_Moghimi)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/how-to-rename-a-field-with-regex/316972 "2022-10-19T09:11:05Z")

</div>

I have a log like this: {"A.amazon.aws.requestedParameters":{"testlabel1":"testvalue1"}} {"B.amazon.aws.requestedParameters":{"testlabel1":"testvalue1"}} ... and I want to change the field name to something like this: A…

---

## [Remove field with pattern using mutate](https://discuss.elastic.co/t/remove-field-with-pattern-using-mutate/316966)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 9:08am UTC](https://discuss.elastic.co/t/remove-field-with-pattern-using-mutate/316966 "2022-10-19T09:08:00Z")

</div>

Hi there, i want to remove some field based on pattern. for example, i have some field like: iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.2 iso.org.dod.internet.mgmt.mib-2.interfaces.ifEntry.3 and i want to del…

---

## [ERROR: no\_shard\_available\_action\_exception](https://discuss.elastic.co/t/error-no-shard-available-action-exception/316950)

<div class="topic-metadata">

**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\
**Replies:** 11\
**Last updated:** [October 19, 2022, 8:44am UTC](https://discuss.elastic.co/t/error-no-shard-available-action-exception/316950 "2022-10-19T08:44:42Z")

</div>

Hi, Does someone know how to fix this issue "no\_shard\_available\_action\_exception". Encountered this error after I restore my cluster, index was restored but the documents was not restored. Kindly see the error below: '…

---

## [Duplicated data in index](https://discuss.elastic.co/t/duplicated-data-in-index/316863)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [October 19, 2022, 8:26am UTC](https://discuss.elastic.co/t/duplicated-data-in-index/316863 "2022-10-19T08:26:43Z")

</div>

Hi I have a problem that sometime during uploading to elastic data with eventType number has a difrent date then it has in the file, This is suspicious that metadata has been changed somewhere, I guess that logstash are…

---

## [Problem in multi match search](https://discuss.elastic.co/t/problem-in-multi-match-search/316963)

<div class="topic-metadata">

**Author:** [@Fakeknox](https://discuss.elastic.co/u/Fakeknox)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 7:47am UTC](https://discuss.elastic.co/t/problem-in-multi-match-search/316963 "2022-10-19T07:47:13Z")

</div>

hello i have 6 different field that i want to search in all of them . im using edge gram analyzer for search and using multi match query and text come from front. my sample code is : esClient.search({ index…

---

## [Connecting and fetching elasticsearch from react Js](https://discuss.elastic.co/t/connecting-and-fetching-elasticsearch-from-react-js/316955)

<div class="topic-metadata">

**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\
**Replies:** 5\
**Last updated:** [October 19, 2022, 7:44am UTC](https://discuss.elastic.co/t/connecting-and-fetching-elasticsearch-from-react-js/316955 "2022-10-19T07:44:54Z")

</div>

Hello, Would it be possible or is there any library available in javascript to connect and fetch data from elasticsearch index by providing json as input which elasticserver understand. regards,

---

## [Deploying in tomcat : React JS app with elasticsearch backend](https://discuss.elastic.co/t/deploying-in-tomcat-react-js-app-with-elasticsearch-backend/316956)

<div class="topic-metadata">

**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 7:44am UTC](https://discuss.elastic.co/t/deploying-in-tomcat-react-js-app-with-elasticsearch-backend/316956 "2022-10-19T07:44:12Z")

</div>

what are the approaches to create a react js application with elasticsearch as backend. Can this application be deployed in Tomcat server. Thanks and Regards,

---

## [App search - Filters - Arrays](https://discuss.elastic.co/t/app-search-filters-arrays/316881)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 4\
**Last updated:** [October 19, 2022, 7:26am UTC](https://discuss.elastic.co/t/app-search-filters-arrays/316881 "2022-10-19T07:26:08Z")

</div>

Hi there :wave: I want to know what is the best filtering approach for my scenario. (Search API Filters) Scenario: Intro: I have arrays of values on the client side, and on the engine document schema one. I want docum…

[Previous page](https://discuss.elastic.co/latest.md?page=924)

[Next page](https://discuss.elastic.co/latest.md?page=926)
