# Latest **URL:** https://discuss.elastic.co/latest.md?page=986 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 987 --- ## [co.elastic.apm.agent.bci.IndyBootstrap - null (ClosedByInterruptException)](https://discuss.elastic.co/t/co-elastic-apm-agent-bci-indybootstrap-null-closedbyinterruptexception/309095)
**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\ **Replies:** 4\ **Last updated:** [August 31, 2022, 12:46pm UTC](https://discuss.elastic.co/t/co-elastic-apm-agent-bci-indybootstrap-null-closedbyinterruptexception/309095 "2022-08-31T12:46:39Z")
I am using SLF4J for logging in a multithreaded application. In one instance, I am interrupting a Thread (using Thread.interrupt()). When this Thread is then using SLF4J to log an error, I receive the following exception… --- ## [Change expected date format for Kibana dashboard add/edit filter dialogue with date field and range operator](https://discuss.elastic.co/t/change-expected-date-format-for-kibana-dashboard-add-edit-filter-dialogue-with-date-field-and-range-operator/313355)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 12:46pm UTC](https://discuss.elastic.co/t/change-expected-date-format-for-kibana-dashboard-add-edit-filter-dialogue-with-date-field-and-range-operator/313355 "2022-08-31T12:46:05Z")
Hello, i'm using Kibana 8.2, is it possible to change the date format that Kibana expects within the add/edit filter dialogue within a dashboard for a date field using a range operator? The default expects MM.DD.YYYY, … --- ## [Multiple Labels for same field](https://discuss.elastic.co/t/multiple-labels-for-same-field/313358)
**Author:** [@saif.khan](https://discuss.elastic.co/u/saif.khan)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 12:31pm UTC](https://discuss.elastic.co/t/multiple-labels-for-same-field/313358 "2022-08-31T12:31:45Z")
Hi, I'm using SNMP-Logstash plugin to get data from SNMP enabled Network devices(PDUs), It works fine to an extent, The issues comes in for a field that has multiple values, example "IP Address " as I have 3 endpoint d… --- ## [Custom id when inserting a document in existing index](https://discuss.elastic.co/t/custom-id-when-inserting-a-document-in-existing-index/313352)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 12:13pm UTC](https://discuss.elastic.co/t/custom-id-when-inserting-a-document-in-existing-index/313352 "2022-08-31T12:13:02Z")
I am using Dev tools in Kibana to insert a new document in an existing index. But I can't figure out if I can set the \_id field to a custom value. Is there a way to do this? This is what I'm doing now: POST user/\_doc/1… --- ## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/313242)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 12:12pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/313242 "2022-08-31T12:12:14Z")
when i try to create a password to kibana interface i get this problem root@kibana:/home/kibana# /usr/share/elasticsearch/bin/elasticsearch-reset-password -i -u elastic --url http://192.168.43.157:9200 ERROR: Failed t… --- ## [Logstash date filter error](https://discuss.elastic.co/t/logstash-date-filter-error/313253)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 10\ **Last updated:** [August 31, 2022, 12:07pm UTC](https://discuss.elastic.co/t/logstash-date-filter-error/313253 "2022-08-31T12:07:58Z")
I have this field in my logs event\_time=2022-08-30 17:30:42.000 my logstash pipeline file is filter { if "average\_weight" in \[tags\] { kv { source=\>"message" target =\> "test" field\_split=\>"," } mutate { rename =\> { "\[t… --- ## [Elastic Agent Synthetics integration - How to separate hosts in icmp monitor](https://discuss.elastic.co/t/elastic-agent-synthetics-integration-how-to-separate-hosts-in-icmp-monitor/313354)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 12:07pm UTC](https://discuss.elastic.co/t/elastic-agent-synthetics-integration-how-to-separate-hosts-in-icmp-monitor/313354 "2022-08-31T12:07:10Z")
Hi, we want to start using the Synthetics integration to replace Heartbeats, but I'm not sure how to handle icmp monitors for different hosts in a single agent policy. When I setup the integration in the policy with ho… --- ## [How to calculate first pass logic and reren for testcase using logstash grok](https://discuss.elastic.co/t/how-to-calculate-first-pass-logic-and-reren-for-testcase-using-logstash-grok/313089)
**Author:** [@aish794726](https://discuss.elastic.co/u/aish794726)\ **Replies:** 4\ **Last updated:** [August 31, 2022, 11:23am UTC](https://discuss.elastic.co/t/how-to-calculate-first-pass-logic-and-reren-for-testcase-using-logstash-grok/313089 "2022-08-31T11:23:50Z")
am working on grok, have very few knowledge about it, we are preparing regression dashboard there we need first pass and reren so that system should understand, these script got pass infirst these are fail n might requir… --- ## [SIEM case connector](https://discuss.elastic.co/t/siem-case-connector/312031)
**Author:** [@dlazure](https://discuss.elastic.co/u/dlazure)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 11:19am UTC](https://discuss.elastic.co/t/siem-case-connector/312031 "2022-08-31T11:19:36Z")
Hi, Is there a way to connect the SIEM cases to TheHive ? Thank you, --- ## [How to add additional timestamp field in an index](https://discuss.elastic.co/t/how-to-add-additional-timestamp-field-in-an-index/313346)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:38am UTC](https://discuss.elastic.co/t/how-to-add-additional-timestamp-field-in-an-index/313346 "2022-08-31T10:38:25Z")
pipeline file date { match =\>\["\[event\]\[time\]","YYYY-MM-dd HH:mm:ss.SSS"\] target =\> "time" } however when i do GET my\_index/\_mapping there is no time field , my objective is two have two field one is @timestamp defaul… --- ## [NEST: inference derived class into base class using condition with automapping](https://discuss.elastic.co/t/nest-inference-derived-class-into-base-class-using-condition-with-automapping/313348)
**Author:** [@Alex83](https://discuss.elastic.co/u/Alex83)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:48am UTC](https://discuss.elastic.co/t/nest-inference-derived-class-into-base-class-using-condition-with-automapping/313348 "2022-08-31T10:48:47Z")
Hi, i have in my model an object type "Order" that it contains a property of type "Customer". Customer is a base class with some tipically fields (customerType, name, surname, etc.) and its a base class because customer… --- ## [What's the cause of this prob and what's the solution](https://discuss.elastic.co/t/whats-the-cause-of-this-prob-and-whats-the-solution/313086)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 12\ **Last updated:** [August 31, 2022, 10:32am UTC](https://discuss.elastic.co/t/whats-the-cause-of-this-prob-and-whats-the-solution/313086 "2022-08-31T10:32:13Z")
what's the cause of this prob and what's the solution when i want to create a token for kibana ileged$0(SocketAccess.java:42) ~\[?:?\] at java.security.AccessController.doPrivileged(AccessController.java:569) ~\[?:… --- ## [Export Kibana APM Service Map](https://discuss.elastic.co/t/export-kibana-apm-service-map/313343)
**Author:** [@gchiartosini](https://discuss.elastic.co/u/gchiartosini)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:26am UTC](https://discuss.elastic.co/t/export-kibana-apm-service-map/313343 "2022-08-31T10:26:10Z")
Summary: looking for help/information about Kibana APM Service Map Context: we have a 7.12.1 Elastic Stack installed "on premise" on dedicated VMs in a Google Cloud Platform environment with Platinum licence; stack … --- ## [Plugin imap: get attachment](https://discuss.elastic.co/t/plugin-imap-get-attachment/313342)
**Author:** [@Bepsi](https://discuss.elastic.co/u/Bepsi)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:17am UTC](https://discuss.elastic.co/t/plugin-imap-get-attachment/313342 "2022-08-31T10:17:17Z")
Hi all, With logstash-oss v7.17.6, i want to read a .zip attachment in a mail. I can read the mail itself, but the attachment can not be read. Logstash conf file: input { imap { id =\> "dmarc" host =\> "xxx" … --- ## [Elastic certificates](https://discuss.elastic.co/t/elastic-certificates/313340)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 9:55am UTC](https://discuss.elastic.co/t/elastic-certificates/313340 "2022-08-31T09:55:03Z")
Hello, it's is necessary when i install Elasticsearch and Kibana i should configure the elastic certificates in this doc ici : elasticsearch-certutil | Elasticsearch Guide \[8.4\] | Elastic thanks. --- ## [Elasticsearch disk usage issue](https://discuss.elastic.co/t/elasticsearch-disk-usage-issue/313338)
**Author:** [@xalastoi](https://discuss.elastic.co/u/xalastoi)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-disk-usage-issue/313338 "2022-08-31T09:39:36Z")
Hello! i have a strange issue in my elasticsearch cluster so i have 5 nodes ( 4 data and masters and 1 master only node ) so each node has 5.7 tb disk space on it but on the first node my disk is almost completely ful… --- ## [Winlogbeat SSL setup with ElasticSearch and Kibana with SSL enabled](https://discuss.elastic.co/t/winlogbeat-ssl-setup-with-elasticsearch-and-kibana-with-ssl-enabled/313094)
**Author:** [@RonH8](https://discuss.elastic.co/u/RonH8)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:20am UTC](https://discuss.elastic.co/t/winlogbeat-ssl-setup-with-elasticsearch-and-kibana-with-ssl-enabled/313094 "2022-08-31T09:20:00Z")
Hey I've set up Elasticsearch and Kibana with SSL enabled for both of them with certificates that were generated using elasticsearch-certutil, running on Ubuntu 22.04.1 LTS. It's my first time setting up Elasticsearch,… --- ## [EQL - Rule creation](https://discuss.elastic.co/t/eql-rule-creation/311732)
**Author:** [@Rahulvanadavsi](https://discuss.elastic.co/u/Rahulvanadavsi)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:10am UTC](https://discuss.elastic.co/t/eql-rule-creation/311732 "2022-08-31T09:10:35Z")
Hi, We would like to create a use case for password spraying attack and Impossible travel activity in our environment. Password Spraying Attack - Attacker tying to bruteforce using default passwords for multiple accou… --- ## [Alert is not populating the right fields](https://discuss.elastic.co/t/alert-is-not-populating-the-right-fields/312663)
**Author:** [@aids123](https://discuss.elastic.co/u/aids123)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:07am UTC](https://discuss.elastic.co/t/alert-is-not-populating-the-right-fields/312663 "2022-08-31T09:07:55Z")
I am trying to create an alert containing the fields populated(host.name,user.name,file.name,process.name), however when the rule trigger the alert it seems that these are not populated. I was advised that it is because … --- ## [Inquiry about the configuration of network.host in elasticsearch.yml](https://discuss.elastic.co/t/inquiry-about-the-configuration-of-network-host-in-elasticsearch-yml/313329)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 9:06am UTC](https://discuss.elastic.co/t/inquiry-about-the-configuration-of-network-host-in-elasticsearch-yml/313329 "2022-08-31T09:06:40Z")
I already installed Elasticsearch 8.4.0 in ubuntu and I find in the elasticsearch.yml file that the HTTP.host: 0.0.0.0 and #transport.host: 0.0.0.0 is that mean that I should put the network.host also 0.0.0.0 ?? than… --- ## [What's the cause and the solution of this problem plz](https://discuss.elastic.co/t/whats-the-cause-and-the-solution-of-this-problem-plz/313269)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 9:05am UTC](https://discuss.elastic.co/t/whats-the-cause-and-the-solution-of-this-problem-plz/313269 "2022-08-31T09:05:05Z")
I installed elasticsearch and kibana 8.4.0 in the same ubuntu 22.04 VM and i try to connect them by token and when i try to create a token i get this error help plz and thanks kibana@kibana:/usr/share/elasticsearch/bin$… --- ## [Unable to connect filebeat with kibana to load dashboard](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-kibana-to-load-dashboard/313300)
**Author:** [@Ahlam\_Abubaker](https://discuss.elastic.co/u/Ahlam_Abubaker)\ **Replies:** 5\ **Last updated:** [August 31, 2022, 9:01am UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-kibana-to-load-dashboard/313300 "2022-08-31T09:01:11Z")
Hi there, I'm running kibana behind apache2 proxy kibana is running in localhost port 5601 and my apache2 IP & port as 46.246.x.x:yyyy when I ran ./filebeat setup -e command in order to connect filebeat on client ser… --- ## [Detect Rules](https://discuss.elastic.co/t/detect-rules/313182)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 8:59am UTC](https://discuss.elastic.co/t/detect-rules/313182 "2022-08-31T08:59:56Z")
Can I detect a acess to website through endpoint security? Because i want to know if a host acess a certain website and "shot" a alert. --- ## [Custom stacktrace hampering the json format for long text size](https://discuss.elastic.co/t/custom-stacktrace-hampering-the-json-format-for-long-text-size/313239)
**Author:** [@yahire](https://discuss.elastic.co/u/yahire)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 8:40am UTC](https://discuss.elastic.co/t/custom-stacktrace-hampering-the-json-format-for-long-text-size/313239 "2022-08-31T08:40:02Z")
HI Team, I had added a custom change in elastic apm agent's source code where in : \\apm-agent-core\\src\\main\\java\\co\\elastic\\apm\\agent\\impl\\transaction\\transaction.java -\> beforeEnd() to get all the active threads in j… --- ## [To find out which agent has not sent logs](https://discuss.elastic.co/t/to-find-out-which-agent-has-not-sent-logs/313334)
**Author:** [@hadi\_farzipour](https://discuss.elastic.co/u/hadi_farzipour)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 8:29am UTC](https://discuss.elastic.co/t/to-find-out-which-agent-has-not-sent-logs/313334 "2022-08-31T08:29:07Z")
I have 1000 agents sending their logs to my ELK stack like following lines every 10 seconds { "\_index": "my\_logs", "@timestamp": "2022-08-31T08:11:21.622Z", "agent\_name":"agent\_1", "size" : 15 } I know a way to… --- ## [How to detect active transaction?](https://discuss.elastic.co/t/how-to-detect-active-transaction/313328)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 8:24am UTC](https://discuss.elastic.co/t/how-to-detect-active-transaction/313328 "2022-08-31T08:24:28Z")
APM Server version: 7.8.0 APM Agent language and version: java/1.33.0 I wrote an instrumentation plugin for our tibco message bus (commercial/not open) and would like to only create a publish span if there already is a… --- ## [Logstash CSV filter plugins](https://discuss.elastic.co/t/logstash-csv-filter-plugins/313327)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 8:19am UTC](https://discuss.elastic.co/t/logstash-csv-filter-plugins/313327 "2022-08-31T08:19:18Z")
Hi Team, I am trying to read csv file and storing it in elasticsearch. Is there any way to read column from file itself (header of csv file ) in logstash "csv filter plugins". currently I am manually setting up the co… --- ## [SNAPSHOT AND RESTORE](https://discuss.elastic.co/t/snapshot-and-restore/313320)
**Author:** [@Milan\_Dangol](https://discuss.elastic.co/u/Milan_Dangol)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 8:07am UTC](https://discuss.elastic.co/t/snapshot-and-restore/313320 "2022-08-31T08:07:45Z")
Hey there i am back with another question :sweat\_smile: So i was fooling around with snap and restore and i created a dummy index name "elastic\_snapshot\_demo" and after taking the backup of the index i came back to my el… --- ## [Getting aggregate statistics about a dense\_vector field](https://discuss.elastic.co/t/getting-aggregate-statistics-about-a-dense-vector-field/268694)
**Author:** [@MaJaHa95](https://discuss.elastic.co/u/MaJaHa95)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 8:04am UTC](https://discuss.elastic.co/t/getting-aggregate-statistics-about-a-dense-vector-field/268694 "2022-08-31T08:04:51Z")
Hey, I'm making lots of great use of the dense\_vector field type, but I've hit a bit of a wall now. Is there any way I can get the "average" from a vector field? Context My real use-case is a bit more complex, but imag… --- ## [Doing a significant text aggregation with a custom analyzer](https://discuss.elastic.co/t/doing-a-significant-text-aggregation-with-a-custom-analyzer/313059)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 5\ **Last updated:** [August 31, 2022, 7:09am UTC](https://discuss.elastic.co/t/doing-a-significant-text-aggregation-with-a-custom-analyzer/313059 "2022-08-31T07:09:51Z")
I have an ES index with a mapping like this: {'texts-temp': {'aliases': {}, 'mappings': {'properties': {'data': {'properties': (...) 'user\_text': {'type': 'text', 'fields… [Previous page](https://discuss.elastic.co/latest.md?page=985) [Next page](https://discuss.elastic.co/latest.md?page=987)