# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=684

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 685

---

## [Which will cause the LocalCheckpoint less than GlobalCheckpoint?](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197)

<div class="topic-metadata">

**Author:** [@armsword](https://discuss.elastic.co/u/armsword)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 3:00am UTC](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197 "2022-03-10T03:00:49Z")

</div>

https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/index/seqno/ReplicationTracker.java#L1250 Hi, I have a question about the Local CheckPoint and Global CheckPoint. The Code in l…

---

## [Does Logstash8.0 support modern authentication to access Outlook with token?](https://discuss.elastic.co/t/does-logstash8-0-support-modern-authentication-to-access-outlook-with-token/299278)

<div class="topic-metadata">

**Author:** [@Albert\_Jia](https://discuss.elastic.co/u/Albert_Jia)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 2:35am UTC](https://discuss.elastic.co/t/does-logstash8-0-support-modern-authentication-to-access-outlook-with-token/299278 "2022-03-10T02:35:44Z")

</div>

input { imap { host =\> "outlook.office365.com" user =\> "$USER" password =\> "$PASSWORD" port =\> $PORT folder =\> "Inbox" } } Currently I'm using username/password way to pul…

---

## [Elastic Search injest attachment cannot index multiple pdf](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234)

<div class="topic-metadata">

**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\
**Replies:** 4\
**Last updated:** [March 9, 2022, 10:01pm UTC](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234 "2022-03-09T22:01:57Z")

</div>

I have an mysql table with multiple pdfs and an associated item\_name for title pdf\_s3\_link -------- -------------- Harry Potter linktopdfons3 Batman s3\_link\_to\_pdfons3 I am trying t…

---

## [The overall view of the logs on the screen is very small. We are able to see only 3 to 4 logs in the page even if we hide the chart and using the tiny scroll bar is difficult](https://discuss.elastic.co/t/the-overall-view-of-the-logs-on-the-screen-is-very-small-we-are-able-to-see-only-3-to-4-logs-in-the-page-even-if-we-hide-the-chart-and-using-the-tiny-scroll-bar-is-difficult/299219)

<div class="topic-metadata">

**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 9:49pm UTC](https://discuss.elastic.co/t/the-overall-view-of-the-logs-on-the-screen-is-very-small-we-are-able-to-see-only-3-to-4-logs-in-the-page-even-if-we-hide-the-chart-and-using-the-tiny-scroll-bar-is-difficult/299219 "2022-03-09T21:49:54Z")

</div>

---

## [Need to change Kibana defaultRoute/path/uri from /app/kibana to /app/kibana76](https://discuss.elastic.co/t/need-to-change-kibana-defaultroute-path-uri-from-app-kibana-to-app-kibana76/299216)

<div class="topic-metadata">

**Author:** [@kumar716](https://discuss.elastic.co/u/kumar716)\
**Replies:** 2\
**Last updated:** [March 9, 2022, 9:47pm UTC](https://discuss.elastic.co/t/need-to-change-kibana-defaultroute-path-uri-from-app-kibana-to-app-kibana76/299216 "2022-03-09T21:47:48Z")

</div>

Hi, Requirement: we have 2 kibana servers (different versions) running on same vm. Old kibana is running on version 6 (port 5601), new kibana is running on version 7.6.2 (port 5611 with ssl enabled). The default UI ur…

---

## [Mapping error: Please use a keyword field instead](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 9:47pm UTC](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240 "2022-03-09T21:47:00Z")

</div>

Hi, Im getting data from Azure with metricbeat, and also getting additional data from event hub. the data from metricbeat and Event Hub is shown in the same dashboard. In order to filter with a control visualization i…

---

## [Shard failed recovery upon rolling upgrade due to storeTermVector error](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260)

<div class="topic-metadata">

**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 9:01pm UTC](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260 "2022-03-09T21:01:40Z")

</div>

Hi there, I am testing the rolling upgrade from 7.5 to 8.0 on a single node cluster. According to the documentations, I did 7.5-\>7.17, then 7.17-\>8.0. The 7.5 to 7.17 rolling upgrade went smoothly, but when I did 7.17-\>8…

---

## [ECK helm chart](https://discuss.elastic.co/t/eck-helm-chart/296675)

<div class="topic-metadata">

**Author:** [@rathu\_buwa](https://discuss.elastic.co/u/rathu_buwa)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 8:04pm UTC](https://discuss.elastic.co/t/eck-helm-chart/296675 "2022-03-09T20:04:52Z")

</div>

How do we find ECK helm chart and how do we modify that cart?

---

## [Error sending data from logstash to elasticsearch](https://discuss.elastic.co/t/error-sending-data-from-logstash-to-elasticsearch/299238)

<div class="topic-metadata">

**Author:** [@Rithik\_greendeck](https://discuss.elastic.co/u/Rithik_greendeck)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 5:58pm UTC](https://discuss.elastic.co/t/error-sending-data-from-logstash-to-elasticsearch/299238 "2022-03-09T17:58:20Z")

</div>

\[2022-03-09T14:40:58,425\]\[ERROR\]\[logstash.outputs.Elasticsearch\]\[main\]\[6c4be64292281ece43eb3c0a90ef5aa3634da5f79c62d74a63d7a5637e24049b\] Encountered an unexpected error submitting a bulk request! Will retry. {:error\_mess…

---

## [Need to bypass authentication in iframe](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 5:39pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175 "2022-03-09T17:39:04Z")

</div>

I have an iframe which I need to embed in our application, but whenever I tried to access the iframe a login page comes. I need to bypass this authentication as this page will be accessed by client. I have found same que…

---

## [Windows event classification mapping - is there a source for this?](https://discuss.elastic.co/t/windows-event-classification-mapping-is-there-a-source-for-this/299248)

<div class="topic-metadata">

**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\
**Replies:** 2\
**Last updated:** [March 9, 2022, 5:35pm UTC](https://discuss.elastic.co/t/windows-event-classification-mapping-is-there-a-source-for-this/299248 "2022-03-09T17:35:09Z")

</div>

I am writing(re-writing) a logstash parser for windows and I want to ensure that all of my events get categorized as closely as possible to the ECS definitions. The mappings I am directly referring to are event.type, eve…

---

## [Top 50 Fields based on per second average count](https://discuss.elastic.co/t/top-50-fields-based-on-per-second-average-count/298734)

<div class="topic-metadata">

**Author:** [@jaysolanki](https://discuss.elastic.co/u/jaysolanki)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 2:59pm UTC](https://discuss.elastic.co/t/top-50-fields-based-on-per-second-average-count/298734 "2022-03-09T14:59:37Z")

</div>

Hi All, I'm trying to create a visualization on kibana for top 50 entries of a certain field based on it's average count per second, but not able to achieve the same yet. Have tried it to shocase as table

---

## [Kibana 8.0.0 - Unknown configuration key(s): "kibana.index"](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228)

<div class="topic-metadata">

**Author:** [@Harish619](https://discuss.elastic.co/u/Harish619)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 2:48pm UTC](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228 "2022-03-09T14:48:43Z")

</div>

Hi Team - After i upgraded to 8.0.0 from 7.17.0 . Im getting below error. What is the alternative syntax for "kibana.index" in 8.0.0 FATAL Error: Unknown configuration key(s): "kibana.index". Check for spelling erro…

---

## [How can i ingest static key value log file to elastic and dynamically choose string or int](https://discuss.elastic.co/t/how-can-i-ingest-static-key-value-log-file-to-elastic-and-dynamically-choose-string-or-int/299229)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 2:19pm UTC](https://discuss.elastic.co/t/how-can-i-ingest-static-key-value-log-file-to-elastic-and-dynamically-choose-string-or-int/299229 "2022-03-09T14:19:58Z")

</div>

server=server.com ip=192.168.1.2 role=webserver up=1 I am looking for a logstash configuration to do the following thanks! ingest the file and delete after go row by row and decide if value is string or integer deploy…

---

## [My integration's data stream does not exists](https://discuss.elastic.co/t/my-integrations-data-stream-does-not-exists/299225)

<div class="topic-metadata">

**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 1:37pm UTC](https://discuss.elastic.co/t/my-integrations-data-stream-does-not-exists/299225 "2022-03-09T13:37:27Z")

</div>

Hello, I am trying to use the Azure Logs integration (with the event hub) from my fleet. Everything seems fine but I am not getting any logs from this integration. I already have other integrations on this same agent, e…

---

## [Copy content from one field of another record if certain condition matches](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605)

<div class="topic-metadata">

**Author:** [@Ashutosh\_Vaidya](https://discuss.elastic.co/u/Ashutosh_Vaidya)\
**Replies:** 12\
**Last updated:** [March 9, 2022, 1:08pm UTC](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605 "2022-03-09T13:08:12Z")

</div>

Hi I need to copy contents of :path field from No. 15256 into the :path field of No.15257 if Stream\_Identifier of both lines in 15256 and 15257 are matching. Kindly suggest how to get this done in the conf file of logs…

---

## [Logstash-Twitter plugin - AND logical operator between keywords](https://discuss.elastic.co/t/logstash-twitter-plugin-and-logical-operator-between-keywords/299211)

<div class="topic-metadata">

**Author:** [@dihiaselma](https://discuss.elastic.co/u/dihiaselma)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 12:17pm UTC](https://discuss.elastic.co/t/logstash-twitter-plugin-and-logical-operator-between-keywords/299211 "2022-03-09T12:17:05Z")

</div>

I'm using Twitter logstash plugin to extract data from twitter. I need to specify an AND operator between my keywords. I tried this syntax \["apple samsung"\] i.e. if I find a tweet containing these two words I bring it. …

---

## [How config "Allow for cookie's SameSite" in YAML type CDRS?](https://discuss.elastic.co/t/how-config-allow-for-cookies-samesite-in-yaml-type-cdrs/299209)

<div class="topic-metadata">

**Author:** [@Pablo\_Andrei](https://discuss.elastic.co/u/Pablo_Andrei)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 12:05pm UTC](https://discuss.elastic.co/t/how-config-allow-for-cookies-samesite-in-yaml-type-cdrs/299209 "2022-03-09T12:05:50Z")

</div>

I need to use EMBED CODE for displaying dashboards, but I need the parameters to: xpack.security.secureCookies: true xpack.security.sameSiteCookies: None or XPACK\_SECURITY\_SECURECOOKIES=true XPACK\_SECURITY\_SAMESICOO…

---

## [Fluend periodically fails sending logs to Elasticsearch](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201)

<div class="topic-metadata">

**Author:** [@Vlad\_Stavarache](https://discuss.elastic.co/u/Vlad_Stavarache)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 10:51am UTC](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201 "2022-03-09T10:51:41Z")

</div>

Issue: fluentd periodically stops sending logs to Elasticsearch. when i delete the fluentd pod, fluentd starts sending previously stuck logs successfully to Elasticsearch and i can see them in kibana. after several hours…

---

## [\[Filebeat System\] Syslog dashboard ECS](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065)

<div class="topic-metadata">

**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\
**Replies:** 4\
**Last updated:** [March 9, 2022, 10:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065 "2022-03-09T10:47:11Z")

</div>

Hello Everyone, on the Dashboard "Syslog dashboard ECS" there is the following Visualization: This Visualization is a Markdown: Can someone tell me where to find the path /dashboard/Filebeat-syslog-dashboard-ecs …

---

## [Make several fields from one nested field](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177)

<div class="topic-metadata">

**Author:** [@voverm](https://discuss.elastic.co/u/voverm)\
**Replies:** 5\
**Last updated:** [March 9, 2022, 10:40am UTC](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177 "2022-03-09T10:40:26Z")

</div>

Hello! I've an index which has a field called properties (besides the one that is defined in the top-level) in mappings with this structure: "properties": { "type": "nested", "properties": { "code": { "typ…

---

## [Elasticsearch with React.js: match\_phrase](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958)

<div class="topic-metadata">

**Author:** [@Karina\_Ivanova](https://discuss.elastic.co/u/Karina_Ivanova)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958 "2022-03-09T10:23:34Z")

</div>

Hello, I'm quite new to Elasticsearch and React and I'm trying to build an app that fetches .json data through API. Everything works fine but I can't get my head around two things: how to use Match phrase query and how …

---

## [High memory taken by segments.terms\_memory\_in\_bytes](https://discuss.elastic.co/t/high-memory-taken-by-segments-terms-memory-in-bytes/299134)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 11\
**Last updated:** [March 9, 2022, 10:18am UTC](https://discuss.elastic.co/t/high-memory-taken-by-segments-terms-memory-in-bytes/299134 "2022-03-09T10:18:11Z")

</div>

Hello Experts, ES : 6.4 We have 21 data nodes cluster. Seeing high memory consumed by segments.terms\_memory\_in\_bytes which causing circuit breaker issues for us. Wanted to understand why segments are taking so much mem…

---

## [Elastic search upgrade from 7.14.2 to 8.0 or near to that](https://discuss.elastic.co/t/elastic-search-upgrade-from-7-14-2-to-8-0-or-near-to-that/298961)

<div class="topic-metadata">

**Author:** [@Vinay\_Menon1](https://discuss.elastic.co/u/Vinay_Menon1)\
**Replies:** 7\
**Last updated:** [March 9, 2022, 10:17am UTC](https://discuss.elastic.co/t/elastic-search-upgrade-from-7-14-2-to-8-0-or-near-to-that/298961 "2022-03-09T10:17:38Z")

</div>

Hi Team, I need to upgrade Elasticsearch from 7.14.2 which I see in stack management to 8.0 or near to that version I am also using heartbeat, metricbeat & logstash as well on the on few of the servers to collect data/…

---

## [Can we have save query as a sub feature in Kibana](https://discuss.elastic.co/t/can-we-have-save-query-as-a-sub-feature-in-kibana/299061)

<div class="topic-metadata">

**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 9:16am UTC](https://discuss.elastic.co/t/can-we-have-save-query-as-a-sub-feature-in-kibana/299061 "2022-03-09T09:16:24Z")

</div>

If we have a separate access/privilege in role for Kibana to save query it will be great. As without write access we can give this privilege to users.

---

## [Integration of kibana widgets in angular app](https://discuss.elastic.co/t/integration-of-kibana-widgets-in-angular-app/298929)

<div class="topic-metadata">

**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 9:15am UTC](https://discuss.elastic.co/t/integration-of-kibana-widgets-in-angular-app/298929 "2022-03-09T09:15:03Z")

</div>

Hi Elastic Team, I have a working angular app, a nodejs backend and a privately hosted ELK instance. Currently, everything is going good with kibana dashboard. But, now I want to display widgets generated by the kiban…

---

## [Elasticsearch Output および Grok FilterでのECSに関するWariningについて](https://discuss.elastic.co/t/elasticsearch-output-grok-filter-ecs-warining/299188)

<div class="topic-metadata">

**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-output-grok-filter-ecs-warining/299188 "2022-03-09T09:03:29Z")

</div>

Elasticsearch、Kibana、LogstashおよびFilebeatをバージョン7.16.3から8.1.0へアップグレードしたところ、以下のようなLogstashのWaringが出力されました。 \[WARN \]\[logstash.filters.grok \]\[パイプライン名\] ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 …

---

## [AWS IoT data to Elastc Cloud](https://discuss.elastic.co/t/aws-iot-data-to-elastc-cloud/298755)

<div class="topic-metadata">

**Author:** [@Keo](https://discuss.elastic.co/u/Keo)\
**Replies:** 2\
**Last updated:** [March 9, 2022, 7:50am UTC](https://discuss.elastic.co/t/aws-iot-data-to-elastc-cloud/298755 "2022-03-09T07:50:52Z")

</div>

Hi, Do you have recommendation on how to send data from an AWS IoT Core MQTT Broker to an Elasticsearch instance that is managed using ElasticCloud ? The only lead I have so far is to use a combination of AWS Cloudwatc…

---

## [Any setting in CSV filter to disable auto datatype conversion and keep everything in string?](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163)

<div class="topic-metadata">

**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\
**Replies:** 6\
**Last updated:** [March 9, 2022, 6:59am UTC](https://discuss.elastic.co/t/any-setting-in-csv-filter-to-disable-auto-datatype-conversion-and-keep-everything-in-string/299163 "2022-03-09T06:59:42Z")

</div>

In both version 7.x and 8, with a very simple csv filter configuration below, for no reason some fields are mapped as "date". In the documentation, there is a switch "convert" that we can customize datatype conversion fr…

---

## [Сжатие старых логов](https://discuss.elastic.co/t/topic/297130)

<div class="topic-metadata">

**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\
**Replies:** 10\
**Last updated:** [March 9, 2022, 6:55am UTC](https://discuss.elastic.co/t/topic/297130 "2022-03-09T06:55:08Z")

</div>

Здравствуйте. эластик с кибаной собираются логи с домена (сбор логов осуществляется через ForwardedEvents .evtx) В Logstash настроен фильтр которые собирает нужные event id filter { if "slog" in \[tags\] { if \[winlo…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=683)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=685)
