# Latest

**URL:** https://discuss.elastic.co/latest.md?page=995

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 996

---

## [Request: Barracuda Essentials Integration](https://discuss.elastic.co/t/request-barracuda-essentials-integration/312828)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:55pm UTC](https://discuss.elastic.co/t/request-barracuda-essentials-integration/312828 "2022-08-24T15:55:39Z")

</div>

I would like to have an elastic agent integration that helps bring in Barracuda Essential's message log and if possible the audit log as well.

---

## [Configure TLS production environment with own CA](https://discuss.elastic.co/t/configure-tls-production-environment-with-own-ca/310776)

<div class="topic-metadata">

**Author:** [@luca.derugeriis](https://discuss.elastic.co/u/luca.derugeriis)\
**Replies:** 3\
**Last updated:** [August 24, 2022, 3:50pm UTC](https://discuss.elastic.co/t/configure-tls-production-environment-with-own-ca/310776 "2022-08-24T15:50:48Z")

</div>

Hi everyone, I'm having a bit of an hard time configuring TLS in a production environment. I already have TLS running on a test environment (with autoconfiguration, using .deb package). At the end of the procedure it pr…

---

## [Barracuda RMM Integration](https://discuss.elastic.co/t/barracuda-rmm-integration/312826)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:49pm UTC](https://discuss.elastic.co/t/barracuda-rmm-integration/312826 "2022-08-24T15:49:32Z")

</div>

I would like to use an elastic agent integration to connect to Barracuda RMM's data layer.

---

## [Elastic Cloud Enterprise 3.4.0 Security Update](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825 "2022-08-24T15:42:00Z")

</div>

Elastic Cloud Enterprise Sensitive information disclosure issue (ESA-2022-10) A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch…

---

## [LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"if\\", \[A-Za-z0-9\_-\], '\\"', \\"'\\", \\"}\\"](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-t-r-n-if-a-za-z0-9/312402)

<div class="topic-metadata">

**Author:** [@Queren\_Santos](https://discuss.elastic.co/u/Queren_Santos)\
**Replies:** 12\
**Last updated:** [August 24, 2022, 3:33pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-t-r-n-if-a-za-z0-9/312402 "2022-08-24T15:33:18Z")

</div>

I'm having trouble understanding my code configuration error. Shows the following message when trying to run the logs and their settings: \[ERROR\]\[logstash.agent\] Failed to execute action {:action=\>LogStash::PipelineActi…

---

## [Elasticsearch nested phrase search within a certain distance](https://discuss.elastic.co/t/elasticsearch-nested-phrase-search-within-a-certain-distance/312757)

<div class="topic-metadata">

**Author:** [@Sumit\_Jha1](https://discuss.elastic.co/u/Sumit_Jha1)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 4:44am UTC](https://discuss.elastic.co/t/elasticsearch-nested-phrase-search-within-a-certain-distance/312757 "2022-08-24T04:44:45Z")

</div>

Sample ES Document { // other properties "transcript" : \[ { "id" : 0, "user\_type" : "A", "phrase" : "hi good afternoon" }, { "id" : 1, "user\_type" : "B"…

---

## [Elastic Stack 8.4.0, 7.17.6 Security Statement](https://discuss.elastic.co/t/elastic-stack-8-4-0-7-17-6-security-statement/312823)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:07pm UTC](https://discuss.elastic.co/t/elastic-stack-8-4-0-7-17-6-security-statement/312823 "2022-08-24T15:07:32Z")

</div>

Elastic Statement for Oracle July Critical Patch Update CVE-2022-21540, CVE-2022-21541, CVE-2022-21549, CVE-2022-25647, CVE-2022-34169 Summary: Oracle released their July Critical Patch Update for Java SE which contains…

---

## [Fleet Server Config via Kibana yaml file](https://discuss.elastic.co/t/fleet-server-config-via-kibana-yaml-file/312821)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 2:50pm UTC](https://discuss.elastic.co/t/fleet-server-config-via-kibana-yaml-file/312821 "2022-08-24T14:50:41Z")

</div>

According to the docs, we can pre-define Fleet Server integrations & policies via the Kibana config file: Use these settings to pre-define integrations and agent policies that you want Fleet to load up by default. Based…

---

## [MongoDB (5+, json based) : some objects have variable types](https://discuss.elastic.co/t/mongodb-5-json-based-some-objects-have-variable-types/312445)

<div class="topic-metadata">

**Author:** [@LaBonave](https://discuss.elastic.co/u/LaBonave)\
**Replies:** 3\
**Last updated:** [August 24, 2022, 2:30pm UTC](https://discuss.elastic.co/t/mongodb-5-json-based-some-objects-have-variable-types/312445 "2022-08-24T14:30:51Z")

</div>

Hi (new here) I've successfully managed to send all of our mongodb 5 instances (JSON-based) logs, via filebeat, on a Logstash instance. MongoDB 5+ are JSON-based logs (https://www.mongodb.com/docs/manual/reference/log…

---

## [Logstash - Grok Syntax Issues](https://discuss.elastic.co/t/logstash-grok-syntax-issues/312807)

<div class="topic-metadata">

**Author:** [@RaiZiStyle](https://discuss.elastic.co/u/RaiZiStyle)\
**Replies:** 6\
**Last updated:** [August 24, 2022, 2:17pm UTC](https://discuss.elastic.co/t/logstash-grok-syntax-issues/312807 "2022-08-24T14:17:25Z")

</div>

I'm using filebeat to send log to logstash but I'm having issues with grok syntax on Logstash. I used the grok debugger on Kibanna and manager to come to a solution. The problem is that I can't find the same syntax for …

---

## [In Kibana need to graph average of the max value of a fieldA within a group keyed by fieldB over time](https://discuss.elastic.co/t/in-kibana-need-to-graph-average-of-the-max-value-of-a-fielda-within-a-group-keyed-by-fieldb-over-time/312819)

<div class="topic-metadata">

**Author:** [@jenrem](https://discuss.elastic.co/u/jenrem)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 1:50pm UTC](https://discuss.elastic.co/t/in-kibana-need-to-graph-average-of-the-max-value-of-a-fielda-within-a-group-keyed-by-fieldb-over-time/312819 "2022-08-24T13:50:19Z")

</div>

I have an index that includes a field called session and a field called timeOnSite. The data can include several docs for each session. The highest value of timeOnSite for a given session is the session duration. I ha…

---

## [Exclude namespaces from the kubernetes fleet package](https://discuss.elastic.co/t/exclude-namespaces-from-the-kubernetes-fleet-package/311589)

<div class="topic-metadata">

**Author:** [@joepa37](https://discuss.elastic.co/u/joepa37)\
**Replies:** 0\
**Last updated:** [August 7, 2022, 5:21am UTC](https://discuss.elastic.co/t/exclude-namespaces-from-the-kubernetes-fleet-package/311589 "2022-08-07T05:21:09Z")

</div>

Does anybody know how to exclude namespaces from the kubernetes fleet package. I am using this recipe right now: cloud-on-k8s/fleet-kubernetes-integration.yaml at main · elastic/cloud-on-k8s · GitHub I want to exclude …

---

## [Cluster uuid different after cluster migration](https://discuss.elastic.co/t/cluster-uuid-different-after-cluster-migration/312640)

<div class="topic-metadata">

**Author:** [@Thomas\_Boutelier](https://discuss.elastic.co/u/Thomas_Boutelier)\
**Replies:** 3\
**Last updated:** [August 24, 2022, 12:56pm UTC](https://discuss.elastic.co/t/cluster-uuid-different-after-cluster-migration/312640 "2022-08-24T12:56:44Z")

</div>

Hello everybody, I performed a cluster migration; I've recreated a kubernetes cluster and reattached the existing elasticsearch ebs volumes (with all datas). When I recreated the Elastic manifest, it generated a cluste…

---

## [Elasticsearch and Kibana 8.3.3 basic setup not working in Azure Kubernetes](https://discuss.elastic.co/t/elasticsearch-and-kibana-8-3-3-basic-setup-not-working-in-azure-kubernetes/312032)

<div class="topic-metadata">

**Author:** [@levitoh123](https://discuss.elastic.co/u/levitoh123)\
**Replies:** 2\
**Last updated:** [August 24, 2022, 12:48pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-8-3-3-basic-setup-not-working-in-azure-kubernetes/312032 "2022-08-24T12:48:53Z")

</div>

Hi, I have installed ECK with the CRDS 2.3.0 (from the main documentation) and proceeded to install elasticsearch and kibana via the manifests provided in the documentation. After deploying the Kibana logs, I am seeing …

---

## [ECK Operator Error - Cannot parse Elasticsearch error response body](https://discuss.elastic.co/t/eck-operator-error-cannot-parse-elasticsearch-error-response-body/312675)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 12:36pm UTC](https://discuss.elastic.co/t/eck-operator-error-cannot-parse-elasticsearch-error-response-body/312675 "2022-08-24T12:36:24Z")

</div>

I get this error with ECK 2.3.0 with elasticsearch 7.16.2 08-16-2022 12:05:48 Cannot parse Elasticsearch error response body elasticsearch-client {"message":"Cannot parse Elasticsearch error response body","namespace":n…

---

## [ECK Operator - Leader Election Lost causes Restart](https://discuss.elastic.co/t/eck-operator-leader-election-lost-causes-restart/312677)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 12:33pm UTC](https://discuss.elastic.co/t/eck-operator-leader-election-lost-causes-restart/312677 "2022-08-24T12:33:20Z")

</div>

Using Fresh ECK setup v2.3.0 in Azure Kubernetes Service. Elasticsearch version 7.16.2 Getting these errors consistently across multiple ECK setups, which causes pod restart. (Replica for eck-operator = 1 only) E0820 …

---

## [Data split into multiple Documents](https://discuss.elastic.co/t/data-split-into-multiple-documents/312808)

<div class="topic-metadata">

**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 12:24pm UTC](https://discuss.elastic.co/t/data-split-into-multiple-documents/312808 "2022-08-24T12:24:13Z")

</div>

I am writing the Prometheus collected metrics into Elasticsearch for every 2 minutes. I see multiple documents for a single data collection and each documents has different fields. Is this the way Elasticsearch stores th…

---

## [Search as you type with 100k rows, help scoring](https://discuss.elastic.co/t/search-as-you-type-with-100k-rows-help-scoring/312412)

<div class="topic-metadata">

**Author:** [@samtwilliams](https://discuss.elastic.co/u/samtwilliams)\
**Replies:** 2\
**Last updated:** [August 24, 2022, 11:59am UTC](https://discuss.elastic.co/t/search-as-you-type-with-100k-rows-help-scoring/312412 "2022-08-24T11:59:47Z")

</div>

Hi All, I have an index that contains drug names (100k of them),I'm using a react front end to search as you type which is working quite well except the scoring coming back is not what I expect despite endless fiddling. …

---

## [Print arabic characters in logstash](https://discuss.elastic.co/t/print-arabic-characters-in-logstash/312793)

<div class="topic-metadata">

**Author:** [@Didi\_Sisi](https://discuss.elastic.co/u/Didi_Sisi)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 10:31am UTC](https://discuss.elastic.co/t/print-arabic-characters-in-logstash/312793 "2022-08-24T10:31:52Z")

</div>

Hello, I created a python script which gathers tweets using “Tweepy”. Then, I return each tweet in a certain dict format. My tweets may contain arabic and latin caracters. This is my python script: import tweepy impor…

---

## [Add a new field in all the existing documents in ES](https://discuss.elastic.co/t/add-a-new-field-in-all-the-existing-documents-in-es/312739)

<div class="topic-metadata">

**Author:** [@ImranArif](https://discuss.elastic.co/u/ImranArif)\
**Replies:** 2\
**Last updated:** [August 24, 2022, 10:22am UTC](https://discuss.elastic.co/t/add-a-new-field-in-all-the-existing-documents-in-es/312739 "2022-08-24T10:22:25Z")

</div>

Hi, I want to update existing documents by adding a new field, the value of which will be looked up from a csv file hosted on an external path (ftp, probably). I read about the translate filter that can be used to look …

---

## [Restore are 20x slower after migrating from 5.x to 7.x](https://discuss.elastic.co/t/restore-are-20x-slower-after-migrating-from-5-x-to-7-x/312281)

<div class="topic-metadata">

**Author:** [@bqk](https://discuss.elastic.co/u/bqk)\
**Replies:** 2\
**Last updated:** [August 24, 2022, 10:16am UTC](https://discuss.elastic.co/t/restore-are-20x-slower-after-migrating-from-5-x-to-7-x/312281 "2022-08-24T10:16:17Z")

</div>

Hi, Found some related topics but no actual answer. We run daily snapshots in production, and every morning we wipe our test cluster and do a full restore. This way we test our backups and our staff has playground envi…

---

## [Kibana login page logo customization in version 8.x](https://discuss.elastic.co/t/kibana-login-page-logo-customization-in-version-8-x/312789)

<div class="topic-metadata">

**Author:** [@vikas.shirke](https://discuss.elastic.co/u/vikas.shirke)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 10:14am UTC](https://discuss.elastic.co/t/kibana-login-page-logo-customization-in-version-8-x/312789 "2022-08-24T10:14:53Z")

</div>

Hi All, We have developed theme plugin to update login page logo via .css file. It was working fine till 7.17. But when we migrated to 8.2 version, it stopped working as that .css file is no longer available when user i…

---

## [The \_id field deprecated warning in the elasticsearch\_dsl python package](https://discuss.elastic.co/t/the-id-field-deprecated-warning-in-the-elasticsearch-dsl-python-package/312785)

<div class="topic-metadata">

**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 9:41am UTC](https://discuss.elastic.co/t/the-id-field-deprecated-warning-in-the-elasticsearch-dsl-python-package/312785 "2022-08-24T09:41:36Z")

</div>

I'm using a python client. There's a Document of the document class, with a data field called id. I've added a document to the default index, without defining a value for that id field. I was expecting ES to auto-popu…

---

## [Kibana crash because \["publicBaseUrl" is not allowed](https://discuss.elastic.co/t/kibana-crash-because-publicbaseurl-is-not-allowed/312786)

<div class="topic-metadata">

**Author:** [@knitehias](https://discuss.elastic.co/u/knitehias)\
**Replies:** 1\
**Last updated:** [August 24, 2022, 9:53am UTC](https://discuss.elastic.co/t/kibana-crash-because-publicbaseurl-is-not-allowed/312786 "2022-08-24T09:53:56Z")

</div>

Hello, I am building my own kibana image from debian. The image looks ok. But when I run my elasticsearch and kibana in kubernetes, kibana crashed due to FATAL ValidationError: child "server" fails because \["publicBa…

---

## [Kibana problem : infinite load time](https://discuss.elastic.co/t/kibana-problem-infinite-load-time/312784)

<div class="topic-metadata">

**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 9:41am UTC](https://discuss.elastic.co/t/kibana-problem-infinite-load-time/312784 "2022-08-24T09:41:03Z")

</div>

Hello everyone I have a problem concerning kibana. When I launch elasticsearch and kibana on my terminal everything is fine. I go to my localhost:5601 and everything seems to work. But when I go on "discovery" or on th…

---

## [Kibana tables are showing very few rows(150) though there are around 4000 rows in the result](https://discuss.elastic.co/t/kibana-tables-are-showing-very-few-rows-150-though-there-are-around-4000-rows-in-the-result/312658)

<div class="topic-metadata">

**Author:** [@Vishwanatha.K](https://discuss.elastic.co/u/Vishwanatha.K)\
**Replies:** 5\
**Last updated:** [August 24, 2022, 9:28am UTC](https://discuss.elastic.co/t/kibana-tables-are-showing-very-few-rows-150-though-there-are-around-4000-rows-in-the-result/312658 "2022-08-24T09:28:00Z")

</div>

Hi, Kibana tables are showing very few rows(150) though there are around 4000 rows in the result. Is there anyway I can set the max rows to be displayed in tables data ? I tried to set the Stackmanagement-\>Advance sett…

---

## [Logstash does not parse if 'if' condition change](https://discuss.elastic.co/t/logstash-does-not-parse-if-if-condition-change/312700)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 5\
**Last updated:** [August 24, 2022, 8:59am UTC](https://discuss.elastic.co/t/logstash-does-not-parse-if-if-condition-change/312700 "2022-08-24T08:59:55Z")

</div>

Using single node ELK cluster version 7.16.3. Index won't appear in kibana if i used this configuration in logstash pipeline file output { if \[tags\] == "average\_weight" { elasticsearch { hosts =\> \["http://localhos…

---

## [HAProxy conf for Logstash](https://discuss.elastic.co/t/haproxy-conf-for-logstash/312773)

<div class="topic-metadata">

**Author:** [@magnorod](https://discuss.elastic.co/u/magnorod)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 7:41am UTC](https://discuss.elastic.co/t/haproxy-conf-for-logstash/312773 "2022-08-24T07:41:35Z")

</div>

Hello, I'm contacting you because I can't get the load balancing of Logstash via HAproxy to work properly. I always have 2 Logstash out of the 4 that share the flow. I would like the flow to be fairly distributed betwe…

---

## [Set registry and log files, owner and group](https://discuss.elastic.co/t/set-registry-and-log-files-owner-and-group/312769)

<div class="topic-metadata">

**Author:** [@nahiko](https://discuss.elastic.co/u/nahiko)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 7:08am UTC](https://discuss.elastic.co/t/set-registry-and-log-files-owner-and-group/312769 "2022-08-24T07:08:10Z")

</div>

Hi! I am using filebeat 7.17 I start Filebeat using a domain user (with systemd) The log files and registry file that Filebeat writes while it is working, are owned by the same user that starts Filebeat what is correc…

---

## [Trace id is inserting prohibited character in header](https://discuss.elastic.co/t/trace-id-is-inserting-prohibited-character-in-header/312270)

<div class="topic-metadata">

**Author:** [@Chetan\_K](https://discuss.elastic.co/u/Chetan_K)\
**Replies:** 6\
**Last updated:** [August 24, 2022, 6:48am UTC](https://discuss.elastic.co/t/trace-id-is-inserting-prohibited-character-in-header/312270 "2022-08-24T06:48:52Z")

</div>

APM Server version: 1.29.0 APM Agent language and version: \[INFO\] +- co.elastic.apm:apm-agent-api:jar:1.29.0:compile \[INFO\] +- co.elastic.apm:elastic-apm-agent:jar:1.29.0:compile Description of the problem including …

[Previous page](https://discuss.elastic.co/latest.md?page=994)

[Next page](https://discuss.elastic.co/latest.md?page=996)
