# Latest **URL:** https://discuss.elastic.co/latest.md?page=965 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 966 --- ## [Logic Error after ingesting number](https://discuss.elastic.co/t/logic-error-after-ingesting-number/314331)
**Author:** [@hnf](https://discuss.elastic.co/u/hnf)\ **Replies:** 7\ **Last updated:** [September 15, 2022, 8:32am UTC](https://discuss.elastic.co/t/logic-error-after-ingesting-number/314331 "2022-09-15T08:32:38Z")
I have an xlsx file that I convert in CSV file using ssconvert tool. In the new generated file, there's one field in floating point type. But after ingestion, the values taken from the file is no more in float. For exem… --- ## [Trace\_id or trace.id when ingest client indentifiers into elasticsearch](https://discuss.elastic.co/t/trace-id-or-trace-id-when-ingest-client-indentifiers-into-elasticsearch/314482)
**Author:** [@focus\_zheng](https://discuss.elastic.co/u/focus_zheng)\ **Replies:** 0\ **Last updated:** [September 15, 2022, 8:18am UTC](https://discuss.elastic.co/t/trace-id-or-trace-id-when-ingest-client-indentifiers-into-elasticsearch/314482 "2022-09-15T08:18:03Z")
when correllating appliction logs in the tracing flow,which field is required? even though I can see a "trace\_id" in the picture --- ## [Kibana Ingress in GCP showing backend config as unhealthy eck 1.1.0](https://discuss.elastic.co/t/kibana-ingress-in-gcp-showing-backend-config-as-unhealthy-eck-1-1-0/235514)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 9\ **Last updated:** [September 15, 2022, 7:54am UTC](https://discuss.elastic.co/t/kibana-ingress-in-gcp-showing-backend-config-as-unhealthy-eck-1-1-0/235514 "2022-09-15T07:54:27Z")
Hi Team, I had patcheck my eck from 1.0.1 to 1.1.0 and i have added readiness probe in kibana CR , everything was fine , but recently i enabled filerealm with native realm in elasticsearch-cr like this : xpack.securit… --- ## [Increase interval of Lens "last value"](https://discuss.elastic.co/t/increase-interval-of-lens-last-value/312727)
**Author:** [@A\_Chichi](https://discuss.elastic.co/u/A_Chichi)\ **Replies:** 6\ **Last updated:** [September 15, 2022, 7:27am UTC](https://discuss.elastic.co/t/increase-interval-of-lens-last-value/312727 "2022-09-15T07:27:56Z")
Hello, I've created serveral Lens visualizations with "last value" parameter. My datas are ingested once per day. The "last value" parameter of Lens visualization has an interval of 3 hours : How can I increase that … --- ## [FATAL CLI ERROR Error: EACCES: permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/fatal-cli-error-error-eacces-permission-denied-open-etc-kibana-kibana-yml/314474)
**Author:** [@Neyo](https://discuss.elastic.co/u/Neyo)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 4:33am UTC](https://discuss.elastic.co/t/fatal-cli-error-error-eacces-permission-denied-open-etc-kibana-kibana-yml/314474 "2022-09-15T04:33:25Z")
am unable to access the webpage via ip-address it gives "Unable to Connect Error" but without configuring I can access that with the localhost:5601/?code=xxxxxx and having the enrollment token messi@football:/etc$ sudo … --- ## [Question about metrics](https://discuss.elastic.co/t/question-about-metrics/314317)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 2\ **Last updated:** [September 15, 2022, 6:27am UTC](https://discuss.elastic.co/t/question-about-metrics/314317 "2022-09-15T06:27:04Z")
Hi! I have a theory question about the metric indices. I use .net core and when I create a new service I specify the serviceName to be more clearly in APM. In this moment, I see that elastic create automatically the ne… --- ## [How to search for specific word and exact match in Elasticsearch](https://discuss.elastic.co/t/how-to-search-for-specific-word-and-exact-match-in-elasticsearch/314471)
**Author:** [@Amitav](https://discuss.elastic.co/u/Amitav)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 5:49am UTC](https://discuss.elastic.co/t/how-to-search-for-specific-word-and-exact-match-in-elasticsearch/314471 "2022-09-15T05:49:10Z")
sample data for title actiontype test booleanTest test-demo test\_demo Test new account object sync accounts data test default Mapping for title "title": { "type": "text", "fields": { "keyword… --- ## [Error 7024 windows 10 pro](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812)
**Author:** [@David\_Dudi\_Hefer](https://discuss.elastic.co/u/David_Dudi_Hefer)\ **Replies:** 15\ **Last updated:** [September 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812 "2022-09-15T05:41:39Z")
The Elasticsearch 7.16.3 (elasticsearch-service-x64) service terminated with the following service-specific error: Incorrect function. can't browse localhost:9200 please help !! --- ## [From Kibana Server not ready yet to Unable to Connect Error](https://discuss.elastic.co/t/from-kibana-server-not-ready-yet-to-unable-to-connect-error/314415)
**Author:** [@Neophyte](https://discuss.elastic.co/u/Neophyte)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 4:39am UTC](https://discuss.elastic.co/t/from-kibana-server-not-ready-yet-to-unable-to-connect-error/314415 "2022-09-15T04:39:31Z")
Earlier I was receiving that "Kibana Server is not ready yet." and after the following changes given below am receiving Unable to Connect error: messi@fifa:/etc$ sudo systemctl status kibana elasticsearch ● kibana.servi… --- ## [How to print input data to logstash-plain.log file?](https://discuss.elastic.co/t/how-to-print-input-data-to-logstash-plain-log-file/314466)
**Author:** [@WonhyeongCho](https://discuss.elastic.co/u/WonhyeongCho)\ **Replies:** 3\ **Last updated:** [September 15, 2022, 4:37am UTC](https://discuss.elastic.co/t/how-to-print-input-data-to-logstash-plain-log-file/314466 "2022-09-15T04:37:49Z")
Hello. I'm using logstash for log collection. I want to write data coming into logstash to a log file. I tried many plugins to write data to log file but it didn't work. And I edit log4j2 settings like logger.logstas… --- ## [SHA256 GPG Key](https://discuss.elastic.co/t/sha256-gpg-key/314426)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 2:38pm UTC](https://discuss.elastic.co/t/sha256-gpg-key/314426 "2022-09-14T14:38:38Z")
Installing logstash on Rocky Linux 9 is failing with this error message: "Key import failed (code 2)" I'm not 100% sure, but I think the problem may be that RHEL 9 has deprecated SHA-1. Is there a SHA256 or SHA521 vers… --- ## [Elastic Agent Windows Deployment Symlink Issue 8.4.1](https://discuss.elastic.co/t/elastic-agent-windows-deployment-symlink-issue-8-4-1/314462)
**Author:** [@Ad3t0](https://discuss.elastic.co/u/Ad3t0)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 4:19am UTC](https://discuss.elastic.co/t/elastic-agent-windows-deployment-symlink-issue-8-4-1/314462 "2022-09-15T04:19:59Z")
Hello, When attempting to deploy the Elastic agent via Windows Server GPO I receive the error "Error: symlink C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-8d7885\\elastic-agent .exe C:\\Program Files\\Elastic\\Agent\\… --- ## [Install Elasticsearch 8.4. on windows](https://discuss.elastic.co/t/install-elasticsearch-8-4-on-windows/314347)
**Author:** [@Isay](https://discuss.elastic.co/u/Isay)\ **Replies:** 3\ **Last updated:** [September 15, 2022, 4:01am UTC](https://discuss.elastic.co/t/install-elasticsearch-8-4-on-windows/314347 "2022-09-15T04:01:28Z")
I did the installation of Elasticsearch 8.4 on windows but when executing elasticsearch.bat it runs the command, but it does not show the configuration information and it also does not save information in the elasticsear… --- ## [Create a watcher alert - extract a field and to compare](https://discuss.elastic.co/t/create-a-watcher-alert-extract-a-field-and-to-compare/314140)
**Author:** [@sree3](https://discuss.elastic.co/u/sree3)\ **Replies:** 2\ **Last updated:** [September 15, 2022, 3:10am UTC](https://discuss.elastic.co/t/create-a-watcher-alert-extract-a-field-and-to-compare/314140 "2022-09-15T03:10:52Z")
Hi Team, I am trying to create a new thershold watcher alert for a value that is present inside the "message" field. But i was unable to get it right. Someone could please help to resolve the issue. Below is the JSON … --- ## [Unable to find valid certification path logstash](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-logstash/314358)
**Author:** [@rt\_888](https://discuss.elastic.co/u/rt_888)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 3:17am UTC](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-logstash/314358 "2022-09-14T03:17:17Z")
I am running ELK version 8.3.3 on docker and Logstash seperately . After I edit my logstash config file and running the Logstash, i got the error with "unable to find valid certification path to request target" . I think… --- ## [Integrations / Kibana /Message d'erreur Kibana cannot connect to the Elastic Package Registry](https://discuss.elastic.co/t/integrations-kibana-message-derreur-kibana-cannot-connect-to-the-elastic-package-registry/314332)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 3\ **Last updated:** [September 15, 2022, 12:56am UTC](https://discuss.elastic.co/t/integrations-kibana-message-derreur-kibana-cannot-connect-to-the-elastic-package-registry/314332 "2022-09-15T00:56:08Z")
Bonjour, Je creuse un peu l'utilisation d'ELK (installé chez moi en local sur un NAS et j'accède à Kibana via une adresse du type 192;XXX.XXX.XXX:5601) et je souhaiterais tester quelques intégrations. Mon problème est … --- ## [Parsing LEEF data](https://discuss.elastic.co/t/parsing-leef-data/314448)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 11:48pm UTC](https://discuss.elastic.co/t/parsing-leef-data/314448 "2022-09-14T23:48:31Z")
Hello, How can I parse LEEF data. The format includes | separation in the heard and SPACE separation in Body. Below is a sample event, please advise. The objective is to parse both the LEEF header (LEEF:1.0|Cyber-Ark|V… --- ## [Logstash cli with file option issue](https://discuss.elastic.co/t/logstash-cli-with-file-option-issue/314349)
**Author:** [@karlkras](https://discuss.elastic.co/u/karlkras)\ **Replies:** 6\ **Last updated:** [September 14, 2022, 11:05pm UTC](https://discuss.elastic.co/t/logstash-cli-with-file-option-issue/314349 "2022-09-14T23:05:43Z")
Windows 10 Logstash for Windows 8.4.1 Good afternoon. I've been working through some courseware on using logstash and have run into a problem while attempting to use the -f option with the logstash.bat file. The fi… --- ## [Synthetic monitoring Timeout 30 seconds](https://discuss.elastic.co/t/synthetic-monitoring-timeout-30-seconds/314367)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 9:41pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-timeout-30-seconds/314367 "2022-09-14T21:41:43Z")
Hi, Im new to Synthetic monitoring, after a month of good results, a couple of days ago the status of some of the monitors started to fail, with the error: Error message page.goto: Timeout 30000ms exceeded. The inlin… --- ## [Filter XML plugin namespace available?](https://discuss.elastic.co/t/filter-xml-plugin-namespace-available/314463)
**Author:** [@erwin339](https://discuss.elastic.co/u/erwin339)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 9:37pm UTC](https://discuss.elastic.co/t/filter-xml-plugin-namespace-available/314463 "2022-09-14T21:37:30Z")
When using the namespace =\> { or the remove\_namespace I don't get any positive response when wanting to assign or remove the namespace, since I am getting this error Error parsing xml with XmlSimple \ **Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 9:01pm UTC](https://discuss.elastic.co/t/drilldown-option-not-showing/314442 "2022-09-14T21:01:35Z") Hi I still new to elasticsearch. I am trying to fix my dashboard. Every time someone click on one of the visualization it will zoom in but the other visualizations will change to not data. I started reading about drilld… --- ## [Filebeat v Logstash handling when Elastic endpoint is down](https://discuss.elastic.co/t/filebeat-v-logstash-handling-when-elastic-endpoint-is-down/314460)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 8:58pm UTC](https://discuss.elastic.co/t/filebeat-v-logstash-handling-when-elastic-endpoint-is-down/314460 "2022-09-14T20:58:42Z")
Quick question on how both filebeat and logstash handle data if Elasticsearch is down. In this scenario both would be pulling from a Kafka topic. We are wondering how the two operate if the endpoint is down but data is … --- ## [Executing a search query with 30K+ clauses](https://discuss.elastic.co/t/executing-a-search-query-with-30k-clauses/314441)
**Author:** [@tnitave](https://discuss.elastic.co/u/tnitave)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 8:29pm UTC](https://discuss.elastic.co/t/executing-a-search-query-with-30k-clauses/314441 "2022-09-14T20:29:38Z")
I am interested in executing an Elasticsearch search query with 5000+ terms across 5 different fields which leads to 25K+ clauses. According to documentation default max\_clause\_count limit is set to 1024 and updating thi… --- ## [Elastic Agent outputs to localhost?](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341)
**Author:** [@simpleman](https://discuss.elastic.co/u/simpleman)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341 "2022-09-14T19:59:51Z")
I have gone the path of install Fleet Server and Agents in my lab server. My setup is: Windows Server 2016 with Symantec Endpoint Protection installed A Linux VM at 192.168.1.10 running ELK stack properly A Linux VM at… --- ## [Graphite Input Logstash](https://discuss.elastic.co/t/graphite-input-logstash/314457)
**Author:** [@elrozario](https://discuss.elastic.co/u/elrozario)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 7:27pm UTC](https://discuss.elastic.co/t/graphite-input-logstash/314457 "2022-09-14T19:27:30Z")
Hello, I am very new to ELK and trying to ingest data from Graphite but its not working. Here is my logstash pipeline: graphite { host =\> "\*\*\*\*" port =\> "\*\*\*\*" mode =\> "client" … --- ## [Cisco Duo Integration not working](https://discuss.elastic.co/t/cisco-duo-integration-not-working/314454)
**Author:** [@jpayne](https://discuss.elastic.co/u/jpayne)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 7:18pm UTC](https://discuss.elastic.co/t/cisco-duo-integration-not-working/314454 "2022-09-14T19:18:25Z")
Continuing the discussion from Cisco Duo Integration not working: I am on an elastic 8.4.1 stack with Duo D249.8. I installed the duo integration and I do see logs showing up: but all of the dashboards just show emp… --- ## [\[ERROR\] \[\[main\]\"incompatible json object type=java.lanString, only hash map or arrays are supported", :exception=\>LogStash::Json::ParserError, data=\>" /"bandwidthLimits](https://discuss.elastic.co/t/error-main-file-json-json-parse-error-original-data-now-in-message-fiel-message-incompatible-json-object-type-java-lanstring-only-hash-map-or-arrays-are-supported-exception-logstash-parsererror-data-bandwidthlimits/314447)
**Author:** [@Queren\_Santos](https://discuss.elastic.co/u/Queren_Santos)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/error-main-file-json-json-parse-error-original-data-now-in-message-fiel-message-incompatible-json-object-type-java-lanstring-only-hash-map-or-arrays-are-supported-exception-logstash-parsererror-data-bandwidthlimits/314447 "2022-09-14T18:21:04Z")
My logstash filter code catches incorrect data, can anyone help me with the correct syntax? input { file { path =\> "/var/tmp/wd/accounts/\*.json" codec =\> "json" start\_position =\> "beginning" sincedb\_pa… --- ## [Supplying a config object using an environment variable (especially for anonymous authentication using Docker)](https://discuss.elastic.co/t/supplying-a-config-object-using-an-environment-variable-especially-for-anonymous-authentication-using-docker/314413)
**Author:** [@jonasjancarik](https://discuss.elastic.co/u/jonasjancarik)\ **Replies:** 3\ **Last updated:** [September 14, 2022, 6:12pm UTC](https://discuss.elastic.co/t/supplying-a-config-object-using-an-environment-variable-especially-for-anonymous-authentication-using-docker/314413 "2022-09-14T18:12:21Z")
I know it is possible to submit an array in an environment variable, as described in Install Kibana with Docker | Kibana Guide \[8.4\] | Elastic. I can't, however, figure out how to submit the configuration needed to set u… --- ## [Yet another case of Logstash Delays](https://discuss.elastic.co/t/yet-another-case-of-logstash-delays/314445)
**Author:** [@mread830](https://discuss.elastic.co/u/mread830)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 6:07pm UTC](https://discuss.elastic.co/t/yet-another-case-of-logstash-delays/314445 "2022-09-14T18:07:11Z")
I’m working on a logging solution that is really nothing more than a forwarder. rsyslog on several servers are sending their logs to Logstash, which then send them out to HEC splunk endpoint. In Logstash, we are using … --- ## [Parsing JSON](https://discuss.elastic.co/t/parsing-json/314435)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 5:39pm UTC](https://discuss.elastic.co/t/parsing-json/314435 "2022-09-14T17:39:21Z")
I want to extract only JSON data but don't know how to do it 2022-09-14 10:08:37,597 DEBUG logging.RequestLoggingAdvice Request received=\[{ "Name" : "John", "var1" : "Value1", "var2" : "Value2", "var3" : "Value3", "var4… [Previous page](https://discuss.elastic.co/latest.md?page=964) [Next page](https://discuss.elastic.co/latest.md?page=966)