# Latest **URL:** https://discuss.elastic.co/latest.md?page=998 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 999 --- ## [ILM policies conditions are getting exceeded to rollover the indices](https://discuss.elastic.co/t/ilm-policies-conditions-are-getting-exceeded-to-rollover-the-indices/312308)
**Author:** [@Mangesh\_Mathe](https://discuss.elastic.co/u/Mangesh_Mathe)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 9:20pm UTC](https://discuss.elastic.co/t/ilm-policies-conditions-are-getting-exceeded-to-rollover-the-indices/312308 "2022-08-22T21:20:24Z")
Hello Elastic Team, I have applied ILM policy(test) to my Index(timeseries) where I have defined ONLY hot phase with conditions max\_age(15m) & max\_docs(5). My index is getting rollover but not following/matching above … --- ## [How to replicate Heartbeat menu on dashboard](https://discuss.elastic.co/t/how-to-replicate-heartbeat-menu-on-dashboard/312652)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 7:32pm UTC](https://discuss.elastic.co/t/how-to-replicate-heartbeat-menu-on-dashboard/312652 "2022-08-22T19:32:26Z")
So we have this menu on heartbeat where we can select between ALL, UP and DOWN. And what I've been trying to do is replicate this little menu by Markdown. I did the "ALL" part since it was simply sending the link bac… --- ## [EndPoint Security](https://discuss.elastic.co/t/endpoint-security/312480)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 7:21pm UTC](https://discuss.elastic.co/t/endpoint-security/312480 "2022-08-22T19:21:09Z")
When i run a "virus" called eicar on my windows user, the endpoint launching an alert(prevent or detect) but i don't receive the alert on my elasticsearc dashboard. Any solution for this problem? --- ## [Unable to login to Kibana using API\_KEY with restrictions](https://discuss.elastic.co/t/unable-to-login-to-kibana-using-api-key-with-restrictions/312258)
**Author:** [@Bikram\_Kundu](https://discuss.elastic.co/u/Bikram_Kundu)\ **Replies:** 12\ **Last updated:** [August 22, 2022, 12:37pm UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana-using-api-key-with-restrictions/312258 "2022-08-22T12:37:58Z")
Use case: I am implementing Attribute Based Access Control as mentioned on the official blog. How can I create an API\_Key that has access to the Kibana dashboard with restricted attribute-based access control? Steps f… --- ## [Logstash Lumberjack Output](https://discuss.elastic.co/t/logstash-lumberjack-output/312646)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 7:05pm UTC](https://discuss.elastic.co/t/logstash-lumberjack-output/312646 "2022-08-22T19:05:51Z")
In the documentation for lumberjack output, under the ssl\_certificate setting it just says, "This is a required setting" and "ssl certificate to use." My questions are: what is this certificate used for, and why is it r… --- ## [APM - NodeJS on Strapi Application](https://discuss.elastic.co/t/apm-nodejs-on-strapi-application/312223)
**Author:** [@OscarFilho](https://discuss.elastic.co/u/OscarFilho)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 6:18pm UTC](https://discuss.elastic.co/t/apm-nodejs-on-strapi-application/312223 "2022-08-22T18:18:30Z")
Hello... Anyone here knows how instrument Strapi application with Nodejs APM? I realy dont know where i have to put the calling methods of apm on this application type... tks... --- ## [Remove everything up to -\>](https://discuss.elastic.co/t/remove-everything-up-to/312623)
**Author:** [@ombit](https://discuss.elastic.co/u/ombit)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 4:21pm UTC](https://discuss.elastic.co/t/remove-everything-up-to/312623 "2022-08-22T16:21:00Z")
Hi all, I have a log that is created from various different source servers. Using Wazuh, each item is forwarded to this one log which is then intended to go off to a remote QRADAR server. Wazuh is adding its own part … --- ## [¿Es posible indexar dinamicamente información en varios indices según un campo en un documento json?](https://discuss.elastic.co/t/es-posible-indexar-dinamicamente-informacion-en-varios-indices-segun-un-campo-en-un-documento-json/312635)
**Author:** [@Manuel\_Vazquez](https://discuss.elastic.co/u/Manuel_Vazquez)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 4:04pm UTC](https://discuss.elastic.co/t/es-posible-indexar-dinamicamente-informacion-en-varios-indices-segun-un-campo-en-un-documento-json/312635 "2022-08-22T16:04:23Z")
¿Aun no he profundizado en la documentación de logstash, pero existe la posibiidad de indexar un documento json de forma que el nombre del indice donde se va indexar el documento venga o se calcule por el contenido o par… --- ## [Fillebeat keeps restarting in Kuberneates](https://discuss.elastic.co/t/fillebeat-keeps-restarting-in-kuberneates/309702)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 4:01pm UTC](https://discuss.elastic.co/t/fillebeat-keeps-restarting-in-kuberneates/309702 "2022-08-22T16:01:33Z")
Filebeat Version: 8.3.2 (image gets from docker.elastic.co/beats/filebeat:8.3.2) I have roughly 40k logs in an NFS folder for Filebeat to collect. The Pod keeps restart itself in every ~10 minutes. And showing this erro… --- ## [Field is mapped as object but found a concrete value](https://discuss.elastic.co/t/field-is-mapped-as-object-but-found-a-concrete-value/312638)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 3:43pm UTC](https://discuss.elastic.co/t/field-is-mapped-as-object-but-found-a-concrete-value/312638 "2022-08-22T15:43:49Z")
Hello guys, I know there is a boatload of threads about this topic, but unfortunately i cannot resolve my issue. I have an index that has this mapping: "debug": { "properties" : { "input" : { "properties" : { … --- ## [Filebeat exclude lines with multiline](https://discuss.elastic.co/t/filebeat-exclude-lines-with-multiline/312171)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-exclude-lines-with-multiline/312171 "2022-08-22T15:34:27Z")
Hello, Is there any way we can exclude the lines first before splitting the logs via multiline pattern? I have one specific logs with 3 different log patterns, the problem is, the output is incorrect due the extra line… --- ## [New java client bug in GeoCentroidAggregation?](https://discuss.elastic.co/t/new-java-client-bug-in-geocentroidaggregation/312612)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 3:27pm UTC](https://discuss.elastic.co/t/new-java-client-bug-in-geocentroidaggregation/312612 "2022-08-22T15:27:17Z")
Hi, I believe I ran into a bug with the new Java Client (v8.3.3) I'm trying a GeoCentroidAggregation which returns 0 results. In that case I get an exception: POST /dataset/\_search?typed\_keys=true {"\_source":{"exclude… --- ## [No cpu/memory information from metricbeat docker module monitoring windows container](https://discuss.elastic.co/t/no-cpu-memory-information-from-metricbeat-docker-module-monitoring-windows-container/311923)
**Author:** [@ragustin](https://discuss.elastic.co/u/ragustin)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 3:21pm UTC](https://discuss.elastic.co/t/no-cpu-memory-information-from-metricbeat-docker-module-monitoring-windows-container/311923 "2022-08-22T15:21:18Z")
Hi, I'm trying to monitor my Windows Containers with metricbeat 8.3.3, and it seems that metricbeat is not gathering the stats for CPU, memory for Windows Containers. Operating System: Windows Server 2019 --- ## [Multiline under multiline filebeat](https://discuss.elastic.co/t/multiline-under-multiline-filebeat/311904)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 3:17pm UTC](https://discuss.elastic.co/t/multiline-under-multiline-filebeat/311904 "2022-08-22T15:17:06Z")
Hi, I split each log using multiline filebeat: - type: log enabled: true paths: - D:\\elastic\_stack\\journal\\\* fields: kafka\_topic: "kafka-topic-1" multiline.type: pattern multiline.pattern: '^\\s… --- ## [Unable to capture application log via filebeat but filebeat service gets stopped every one second after modifying yml file](https://discuss.elastic.co/t/unable-to-capture-application-log-via-filebeat-but-filebeat-service-gets-stopped-every-one-second-after-modifying-yml-file/311869)
**Author:** [@Nishi\_Shah](https://discuss.elastic.co/u/Nishi_Shah)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 3:13pm UTC](https://discuss.elastic.co/t/unable-to-capture-application-log-via-filebeat-but-filebeat-service-gets-stopped-every-one-second-after-modifying-yml-file/311869 "2022-08-22T15:13:40Z")
Hi, I am trying to capture application logs from windows system via filebeat but service gets stopped every one second after modifying yml file. Unable to get data in kibana dashboard. Attached filebeat yml file .. Kind… --- ## [Filebeat can't read log file continuously](https://discuss.elastic.co/t/filebeat-cant-read-log-file-continuously/311756)
**Author:** [@mgazanayi](https://discuss.elastic.co/u/mgazanayi)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 3:09pm UTC](https://discuss.elastic.co/t/filebeat-cant-read-log-file-continuously/311756 "2022-08-22T15:09:00Z")
Hello, I'm trying to continuously read a log file, and output it to an other file. (In reality, I'm trying to isolate why Filebeat only reads the log file once). Here is my Filebeat configuration: filebeat.inputs: - t… --- ## [Filebeat: Apache module : two paths and two access inputs to configure](https://discuss.elastic.co/t/filebeat-apache-module-two-paths-and-two-access-inputs-to-configure/311404)
**Author:** [@hboris](https://discuss.elastic.co/u/hboris)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-two-paths-and-two-access-inputs-to-configure/311404 "2022-08-22T14:50:17Z")
Hello, I am a newbie and i am planing to install elastic stack. Here is my architecture Here is what my apache module conf looks like: #-------------------------------- Apache Module ------------------------------… --- ## [Lack of debug logs on Filebeat kafka output](https://discuss.elastic.co/t/lack-of-debug-logs-on-filebeat-kafka-output/312633)
**Author:** [@Steve\_McDuff](https://discuss.elastic.co/u/Steve_McDuff)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 2:47pm UTC](https://discuss.elastic.co/t/lack-of-debug-logs-on-filebeat-kafka-output/312633 "2022-08-22T14:47:45Z")
While using filebeat, I encountered an odd issue where two servers configured with the same way behaved very differently. One of them works perfectly fine and the other one works at a very slow pace. So I know the proble… --- ## [Filebeat file path not working](https://discuss.elastic.co/t/filebeat-file-path-not-working/311473)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-file-path-not-working/311473 "2022-08-22T14:44:56Z")
I have filebeat deployed through ECK on my Kubernetes cluster. I want to read the logs from a specific pod whose log file name is something like this dev-be-svc-logistic-8c9bfbd85-qs6ng\_smartbox-dev\_dev-be-svc-logistic-4… --- ## [How to update user profile using API without \`manage\_security\` privilege](https://discuss.elastic.co/t/how-to-update-user-profile-using-api-without-manage-security-privilege/312545)
**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 2:39pm UTC](https://discuss.elastic.co/t/how-to-update-user-profile-using-api-without-manage-security-privilege/312545 "2022-08-22T14:39:58Z")
I am trying to update the user profile using Flask API if user is logged in then he/she can update his profile fields full name, email only when I trying to update user using put\_user #es=Elasticsearch instance sscl… --- ## [Pourquoi la clause must\_not fonctionne-t-elle si on la place avant une requête nested mais pas si on la place à l'intérieur de la requête nested?](https://discuss.elastic.co/t/pourquoi-la-clause-must-not-fonctionne-t-elle-si-on-la-place-avant-une-requete-nested-mais-pas-si-on-la-place-a-linterieur-de-la-requete-nested/311755)
**Author:** [@Vincent92](https://discuss.elastic.co/u/Vincent92)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 2:08pm UTC](https://discuss.elastic.co/t/pourquoi-la-clause-must-not-fonctionne-t-elle-si-on-la-place-avant-une-requete-nested-mais-pas-si-on-la-place-a-linterieur-de-la-requete-nested/311755 "2022-08-22T14:08:47Z")
Bonjour, J'écris une application pour rechercher des logs dans l'elastic de mon organisation et l'utilisateur peut rechercher des requêtes nested sous cette forme : pathName:{ field1: "value1" AND field2: "value2" OR f… --- ## [Elastic Synthetic Product will cost?](https://discuss.elastic.co/t/elastic-synthetic-product-will-cost/312197)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 8\ **Last updated:** [August 22, 2022, 2:06pm UTC](https://discuss.elastic.co/t/elastic-synthetic-product-will-cost/312197 "2022-08-22T14:06:52Z")
Hi friends, Currently we are going to work with project monitors in our cluster 8.3.3, but we are afraid to request the activation of the management monitor, because we want to do business implementations now, but we don… --- ## [Kibana to Elastic Search Communication Not Working with Wildcard Certificate](https://discuss.elastic.co/t/kibana-to-elastic-search-communication-not-working-with-wildcard-certificate/312037)
**Author:** [@hoover63](https://discuss.elastic.co/u/hoover63)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 1:52pm UTC](https://discuss.elastic.co/t/kibana-to-elastic-search-communication-not-working-with-wildcard-certificate/312037 "2022-08-22T13:52:44Z")
For the last couple of days I have been trying to add a wildcard certificate to a new ELK server (one server running ES+Kibana). I have gotten the cert to work with ES, however, Kibana is unable to communicate with ES us… --- ## [Delete by query with an App Search Engine](https://discuss.elastic.co/t/delete-by-query-with-an-app-search-engine/312618)
**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 1:48pm UTC](https://discuss.elastic.co/t/delete-by-query-with-an-app-search-engine/312618 "2022-08-22T13:48:10Z")
Hi, We are facing an issue where we have an engine in App Search and we wish to delete up to 10k documents (from a total of 50k+). This is too many documents to (efficiently) delete manually via the documents api. Can … --- ## [Unable to find ip releted filed in rollups](https://discuss.elastic.co/t/unable-to-find-ip-releted-filed-in-rollups/312342)
**Author:** [@Surendra\_Hire](https://discuss.elastic.co/u/Surendra_Hire)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:35am UTC](https://discuss.elastic.co/t/unable-to-find-ip-releted-filed-in-rollups/312342 "2022-08-22T00:35:46Z")
Hello i am applying rollups function on my data. there are mutiple filed in ES. but when i applyed rollup job i cound found ip releted fileds. first image i have apply rollup and second image i can not found ip rel… --- ## [Kibana 8.2.3 heat map was not ok](https://discuss.elastic.co/t/kibana-8-2-3-heat-map-was-not-ok/312243)
**Author:** [@Marco1221](https://discuss.elastic.co/u/Marco1221)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 1:15pm UTC](https://discuss.elastic.co/t/kibana-8-2-3-heat-map-was-not-ok/312243 "2022-08-22T13:15:52Z")
I‘m chinese，so my english just soso I found Kibana 8.2.3 heat map was not ok， The heat map is displayed only once！ that 2 pictures in one video who can help me！ thanks！ --- ## [Kubernetes agent with self signed certificate](https://discuss.elastic.co/t/kubernetes-agent-with-self-signed-certificate/312434)
**Author:** [@deborggraever](https://discuss.elastic.co/u/deborggraever)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:57pm UTC](https://discuss.elastic.co/t/kubernetes-agent-with-self-signed-certificate/312434 "2022-08-22T12:57:30Z")
Hi, I have installed an on-prem elastic cluster with kibana and fleet. All use xpack with a self signed root certificate. I installed elastic agents for logging and metrics on multiple servers (Ubuntu 20.04) where the… --- ## [Array Sort Script to sort array by index](https://discuss.elastic.co/t/array-sort-script-to-sort-array-by-index/312617)
**Author:** [@Dakshay\_Agarwal](https://discuss.elastic.co/u/Dakshay_Agarwal)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 12:50pm UTC](https://discuss.elastic.co/t/array-sort-script-to-sort-array-by-index/312617 "2022-08-22T12:50:04Z")
PUT /my-index-000001/\_doc/1?refresh { "product": "chocolate", "salesManager" :\["a","z","r"\] } PUT /my-index-000001/\_doc/2?refresh { "product": "chocolate", "salesManager" :\["v","f","d"\] } PUT /my-index-0000… --- ## [Real Browser monitoring and Captcha](https://discuss.elastic.co/t/real-browser-monitoring-and-captcha/311161)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 12:41pm UTC](https://discuss.elastic.co/t/real-browser-monitoring-and-captcha/311161 "2022-08-22T12:41:33Z")
A client ask to monitor a login page with Real Browser monitoring, the login contains a captcha, how can we bypass or solve the captcha? --- ## [How to automatically create a new Elasticsearch cluster (via Terraform and user-data scripts)?](https://discuss.elastic.co/t/how-to-automatically-create-a-new-elasticsearch-cluster-via-terraform-and-user-data-scripts/312619)
**Author:** [@burnersk](https://discuss.elastic.co/u/burnersk)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 12:19pm UTC](https://discuss.elastic.co/t/how-to-automatically-create-a-new-elasticsearch-cluster-via-terraform-and-user-data-scripts/312619 "2022-08-22T12:19:19Z")
I am about to create a small Terraform script for an Elastic Stack "training" (not an actual training, just infrastructure description for a playground cluster), which setups Elasticsearch using a Cloud-init user-data sc… [Previous page](https://discuss.elastic.co/latest.md?page=997) [Next page](https://discuss.elastic.co/latest.md?page=999)