# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=650 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 651 --- ## [Detecting a DDoS attack](https://discuss.elastic.co/t/detecting-a-ddos-attack/302941)
**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/detecting-a-ddos-attack/302941 "2022-04-21T15:49:35Z")
Hello, Today I would like to ask about DDoS and ELK security. I replicated a (modest) DDoS attack on my systems, and I got the correspondent logs and views. In Packetbeat Flows Dashboard it can be seen the moment wher… --- ## [Correct way to use aliases?](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:06pm UTC](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931 "2022-04-21T15:06:57Z")
I am trying to improve the way I manage my indexes in Elasticsearch and am considering using aliases. But I want to make sure I understand the pattern properly. Right now I have some indexes that are grouped by year, and… --- ## [How to get a service token with api/curl](https://discuss.elastic.co/t/how-to-get-a-service-token-with-api-curl/302929)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:00pm UTC](https://discuss.elastic.co/t/how-to-get-a-service-token-with-api-curl/302929 "2022-04-21T15:00:43Z")
how to get a service token with api/curl ? i know how to create. --- ## [Problem with Kibana - white page](https://discuss.elastic.co/t/problem-with-kibana-white-page/302830)
**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 2:45pm UTC](https://discuss.elastic.co/t/problem-with-kibana-white-page/302830 "2022-04-21T14:45:11Z")
Hello, I have install Elasticsearch, Kibana and Logstash and it was working. But after I needed to change the network of the stack ELK. So I have changed IP adress of my VM and change IP address in yaml file. I can c… --- ## [Elastic Enterprise Search is starting successfully but URL doesn't works](https://discuss.elastic.co/t/elastic-enterprise-search-is-starting-successfully-but-url-doesnt-works/264853)
**Author:** [@rams1](https://discuss.elastic.co/u/rams1)\ **Replies:** 13\ **Last updated:** [April 21, 2022, 2:27pm UTC](https://discuss.elastic.co/t/elastic-enterprise-search-is-starting-successfully-but-url-doesnt-works/264853 "2022-04-21T14:27:13Z")
Hi! I'm new here and I'm new with elastic too. I'm trying to run enterprise search version 7.10.2 on elasticsearch 7.10.2 and kibana 7.10.2. I think this is fine because this on app-server.log: Success! Elastic Enterp… --- ## [Kibana Showing partial data for Mulesoft API’s. Urgent help needed](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-api-s-urgent-help-needed/302922)
**Author:** [@surya4](https://discuss.elastic.co/u/surya4)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 2:08pm UTC](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-api-s-urgent-help-needed/302922 "2022-04-21T14:08:31Z")
We also have different Elastic servers where the ELK stack is hosted like Master node(3), Kibana Node(2), Ingest Node(2) and Data nodes(4). We have tested locally using Filebeat and there is no issue. Filebeat is parsin… --- ## [Need assistance calculating CPU Busy from prometheus node exporter metric](https://discuss.elastic.co/t/need-assistance-calculating-cpu-busy-from-prometheus-node-exporter-metric/302910)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 12:50pm UTC](https://discuss.elastic.co/t/need-assistance-calculating-cpu-busy-from-prometheus-node-exporter-metric/302910 "2022-04-21T12:50:51Z")
Hello team, i currently have Grafana dashboard but considering that i try to learn ES as much as possible and have been using it for log aggregation for quite some time, i would like to switch to Kibana/ES to view metri… --- ## [Upgrade to 8.1.2 failing with unexpected folder encountered during data folder upgrade](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 9\ **Last updated:** [April 21, 2022, 12:36pm UTC](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767 "2022-04-21T12:36:10Z")
Hello, I upgraded 1 of the 2 data nodes in my 3 node cluster (3rd node is voting only and does not store any data) from 7.17.2 to 8.1.2. Post the upgrade, Elasticsearch service is crashing with the following error: Exc… --- ## [Windows Environment Variables not accessible when Logstash is run as a service](https://discuss.elastic.co/t/windows-environment-variables-not-accessible-when-logstash-is-run-as-a-service/302901)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 11:14am UTC](https://discuss.elastic.co/t/windows-environment-variables-not-accessible-when-logstash-is-run-as-a-service/302901 "2022-04-21T11:14:32Z")
I have used Windows environment variables in Logstash config file. Following command was used to create env variable: $env:MW\_Index = 'mw-test-index-temp' In my config file, I have called this index. mutate { add\_fie… --- ## [Logstash Elasticsearch Filter Lookup 99% not finding if End to close to Start?](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-99-not-finding-if-end-to-close-to-start/302695)
**Author:** [@Dan\_M](https://discuss.elastic.co/u/Dan_M)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 11:01am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-99-not-finding-if-end-to-close-to-start/302695 "2022-04-21T11:01:32Z")
Hi, I am trying to do the standard End items enrichment with the Start item details. filter{ if \[benchmarkType\] == "End" { elasticsearch { hosts =\> \["MY-IP:9200"\] index =\> "prod-\*" … --- ## [Yarn build results in "error Command failed with exit code 1." error](https://discuss.elastic.co/t/yarn-build-results-in-error-command-failed-with-exit-code-1-error/302597)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 10:54am UTC](https://discuss.elastic.co/t/yarn-build-results-in-error-command-failed-with-exit-code-1-error/302597 "2022-04-21T10:54:45Z")
Hi Experts, I am trying to build my cutome kibana pluging using yarn build and getting "error Command failed with exit code 1." error . Can someone please assist me on how I can fix it ? \[@kbn/optimizer/node\] GET error… --- ## [Add\_field not working](https://discuss.elastic.co/t/add-field-not-working/302887)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 10:31am UTC](https://discuss.elastic.co/t/add-field-not-working/302887 "2022-04-21T10:31:10Z")
Hi, the following is my logstash conf file for passing a few sample audit log messages sample messages: type=SYSCALL msg=audit(1547800652.003:103): arch=c00000b7 syscall=200 success=no exit=-13 a0=c a1=ffffe65a3648 a2=… --- ## [Break down unknown number of iteration with same pattern](https://discuss.elastic.co/t/break-down-unknown-number-of-iteration-with-same-pattern/302878)
**Author:** [@julien34](https://discuss.elastic.co/u/julien34)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/break-down-unknown-number-of-iteration-with-same-pattern/302878 "2022-04-21T09:48:52Z")
Hello there ! I'm new to ELK and GROK filter, I look for a long time but cannot find a proper way to achieve what I want to do, so I'm asking here. I have log coming via filebeat, the "message" field containing my orig… --- ## [Cannot run bin/elasticsearch](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821)
**Author:** [@FARIDUN\_ISMAILOV](https://discuss.elastic.co/u/FARIDUN_ISMAILOV)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:32am UTC](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821 "2022-04-21T09:32:47Z")
bin/elasticsearch Exception in thread "main" java.lang.NullPointerException: Cannot invoke "org.apache.logging.log4j.core.config.AbstractConfiguration.getLoggerContext()" because the return value of "java.util.List.get(… --- ## [Using Windows ENV variables in Logstash](https://discuss.elastic.co/t/using-windows-env-variables-in-logstash/302883)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 9:23am UTC](https://discuss.elastic.co/t/using-windows-env-variables-in-logstash/302883 "2022-04-21T09:23:43Z")
I have set an environment variable in windows using Powershell with following command: $env:MW\_Index = 'mw-test-index' In my logstash.config file, I am trying to use this variable in the following way: mutate { add\_fi… --- ## [Can we disable displaying "(empty)" string when data is not present in table column - Top Hit Aggregation](https://discuss.elastic.co/t/can-we-disable-displaying-empty-string-when-data-is-not-present-in-table-column-top-hit-aggregation/302397)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:18am UTC](https://discuss.elastic.co/t/can-we-disable-displaying-empty-string-when-data-is-not-present-in-table-column-top-hit-aggregation/302397 "2022-04-21T09:18:41Z")
When we use "Top Hit" to display the value in column, in table/enhanced table visualization, if the value for the field is not present earlier we used to see just blank now we see a string called "empty" like shown belo… --- ## [Search Profiler in Kibana - Unable to Clear Cached Data](https://discuss.elastic.co/t/search-profiler-in-kibana-unable-to-clear-cached-data/302754)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 3\ **Last updated:** [April 21, 2022, 9:14am UTC](https://discuss.elastic.co/t/search-profiler-in-kibana-unable-to-clear-cached-data/302754 "2022-04-21T09:14:13Z")
I'm attempting to optimize a query using the Search Profiler in Kibana. I'm having issues as it appears ES keeps caching something so my first query is slow and subsequent ones are quick. I have attempted the following… --- ## [Delete file logstash](https://discuss.elastic.co/t/delete-file-logstash/302314)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 8:47am UTC](https://discuss.elastic.co/t/delete-file-logstash/302314 "2022-04-21T08:47:57Z")
Hi, I have a small problem i have logs and i read it with filebeat filebeat.yml - type: log enabled: true paths: - D:\\elastic\_stack\\LOGS\\CMS\_LOGS\\\* fields: kafka\_topic: "kafka-topic-cms-test1" mult… --- ## [Maps - Customize Map Visualize](https://discuss.elastic.co/t/maps-customize-map-visualize/301971)
**Author:** [@RPaolo](https://discuss.elastic.co/u/RPaolo)\ **Replies:** 4\ **Last updated:** [April 21, 2022, 8:30am UTC](https://discuss.elastic.co/t/maps-customize-map-visualize/301971 "2022-04-21T08:30:22Z")
Would there be a way to visualize Italy as the second photo? kiabana version 7.5 1 2 --- ## [GET method not allowed after update in 7.16.2](https://discuss.elastic.co/t/get-method-not-allowed-after-update-in-7-16-2/302719)
**Author:** [@Docrom](https://discuss.elastic.co/u/Docrom)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 7:44am UTC](https://discuss.elastic.co/t/get-method-not-allowed-after-update-in-7-16-2/302719 "2022-04-21T07:44:35Z")
Hello everyone, I have a script that generates a PNG from Kibana at a certain date when I click on a button on my website. For this purpose I use the POST URL but since I updated to 7.16.2 I get the following error mes… --- ## [Average of a metric](https://discuss.elastic.co/t/average-of-a-metric/302783)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 6:58am UTC](https://discuss.elastic.co/t/average-of-a-metric/302783 "2022-04-21T06:58:38Z")
hello! I am currently ingesting metrics to Elasticsearch and I was interested in calculating a daily average of a specific metric via Rollup. After reading some discussions I saw that it was normal to perform the sum (… --- ## [Jira logs not getting every events using http poller](https://discuss.elastic.co/t/jira-logs-not-getting-every-events-using-http-poller/302671)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 5:28am UTC](https://discuss.elastic.co/t/jira-logs-not-getting-every-events-using-http-poller/302671 "2022-04-21T05:28:24Z")
Hello Every one I am using http poller to get issue event from jira but i am not getting every event like update create delete logs off issue any one please help .. please follow my configuration input { http\_poller { … --- ## [There is data, but it is not shown on the dashboard](https://discuss.elastic.co/t/there-is-data-but-it-is-not-shown-on-the-dashboard/302167)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 4:52am UTC](https://discuss.elastic.co/t/there-is-data-but-it-is-not-shown-on-the-dashboard/302167 "2022-04-21T04:52:39Z")
Take a closer look. Obviously there is data. However, it is not graphed as in the last screenshot. Please help. You always work hard. thank you. --- ## [Logstash Postgresql error](https://discuss.elastic.co/t/logstash-postgresql-error/302864)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 4:44am UTC](https://discuss.elastic.co/t/logstash-postgresql-error/302864 "2022-04-21T04:44:29Z")
Dear Team, I faced the below error while fetching logs from postgresql DB ERROR\] 2022-04-20 10:26:51.485 \[Converge PipelineAction::Create\] jdbc - Missing a required setting for the jdbc input plugin: input { jdbc { … --- ## [Any search\_after performance updated?](https://discuss.elastic.co/t/any-search-after-performance-updated/302809)
**Author:** [@ht.jo](https://discuss.elastic.co/u/ht.jo)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 3:21am UTC](https://discuss.elastic.co/t/any-search-after-performance-updated/302809 "2022-04-21T03:21:36Z")
Hi. I'm using 7.10 and I'm going through exact same situation below link. As the @mayya 's answer (Thx mayya!), I expected search\_after performance has improved at 7.16, so I looked over 7.16 release note, but I can't… --- ## [Kibana Control Visualization Missing Values](https://discuss.elastic.co/t/kibana-control-visualization-missing-values/302549)
**Author:** [@Xadiq](https://discuss.elastic.co/u/Xadiq)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 12:13am UTC](https://discuss.elastic.co/t/kibana-control-visualization-missing-values/302549 "2022-04-21T00:13:41Z")
Hi All, I am facing issue with Kibana Control Visualization. I have field which shows month/year. The index has data from 2014 to 2021 but still the drop down is not showing some values like 12/2021. However if apply th… --- ## [Unable to install logstash kusto plugin using 6.4.2 version](https://discuss.elastic.co/t/unable-to-install-logstash-kusto-plugin-using-6-4-2-version/302857)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 11:19pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-kusto-plugin-using-6-4-2-version/302857 "2022-04-20T23:19:19Z")
Hello, I'm using logstash 6.4.2 version and trying to install kusto plugin. Logstash is throwing an error bin/logstash-plugin install logstash-output-kusto Cannot find Java 1.5 or higher. But, my machine has Java 8. … --- ## [URL Drilldown, is it possible to pass field names to the query?](https://discuss.elastic.co/t/url-drilldown-is-it-possible-to-pass-field-names-to-the-query/302839)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 10:47pm UTC](https://discuss.elastic.co/t/url-drilldown-is-it-possible-to-pass-field-names-to-the-query/302839 "2022-04-20T22:47:24Z")
Hi there! I have a use case for a URL drilldown where I would like to pass field names to the drilldown (a search) and have the search only populate specific field names. Here's how my URL drilldown looks like {{kibana… --- ## [Create rule with data from multiple documents](https://discuss.elastic.co/t/create-rule-with-data-from-multiple-documents/302854)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 8:28pm UTC](https://discuss.elastic.co/t/create-rule-with-data-from-multiple-documents/302854 "2022-04-20T20:28:21Z")
Hi forum, I am trying to setup an alert/rule with audit data from Confluent Cloud. When I invite a user into the organization the following among others are generated and visible in Kibana under discover. { "\_index"… --- ## [Enrich Policy Execute Unable to Find Source Index](https://discuss.elastic.co/t/enrich-policy-execute-unable-to-find-source-index/302750)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 14\ **Last updated:** [April 20, 2022, 6:08pm UTC](https://discuss.elastic.co/t/enrich-policy-execute-unable-to-find-source-index/302750 "2022-04-20T18:08:57Z")
Hello, I am trying to familiarize myself with the Enrich Policy. I have set up a source index and an enrich policy. When I go to execute the enrich policy I receive a "index\_not\_found\_exception". I have posted some sho… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=649) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=651)