# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=692

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 693

---

## [Force Merge To do or not to do](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070)

<div class="topic-metadata">

**Author:** [@Neeraj\_Jain7483](https://discuss.elastic.co/u/Neeraj_Jain7483)\
**Replies:** 7\
**Last updated:** [March 1, 2022, 5:22am UTC](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070 "2022-03-01T05:22:43Z")

</div>

I have a scenario in which we have indices for each month, and each document has a field, say expiry date, and according to that expiry date, documents will be deleted when they reach their expiry. One-month-old index wi…

---

## [Kibana 7.17.0 Security Update](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [February 3, 2022, 5:34pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215 "2022-02-03T17:34:35Z")

</div>

Kibana Cross-site scripting issue (ESA-2022-01) An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious jav…

---

## [How to skip downloading ml-cpp-8.2.0-SNAPSHOT.zip while using "./gradlew localDistro"](https://discuss.elastic.co/t/how-to-skip-downloading-ml-cpp-8-2-0-snapshot-zip-while-using-gradlew-localdistro/298390)

<div class="topic-metadata">

**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\
**Replies:** 3\
**Last updated:** [March 1, 2022, 2:26am UTC](https://discuss.elastic.co/t/how-to-skip-downloading-ml-cpp-8-2-0-snapshot-zip-while-using-gradlew-localdistro/298390 "2022-03-01T02:26:43Z")

</div>

Because of the network is not very stable, every time the "./gradlew localDistro" command reaches the downloading of ml-cpp-8.2.0-SNAPSHOT.zip,it will fail after long download before finish. I have downloaded the packag…

---

## [Filebeat configuration allows multiple pipelines for a log file?](https://discuss.elastic.co/t/filebeat-configuration-allows-multiple-pipelines-for-a-log-file/298458)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 1:57am UTC](https://discuss.elastic.co/t/filebeat-configuration-allows-multiple-pipelines-for-a-log-file/298458 "2022-03-01T01:57:11Z")

</div>

Specifically, I have a pipeline preprocessing log file does not match the log is not saved, I want to not match the log file is saved in the log file data loss.

---

## [Logtstash updating fron 7.9 to 7.16.2](https://discuss.elastic.co/t/logtstash-updating-fron-7-9-to-7-16-2/298453)

<div class="topic-metadata">

**Author:** [@Faisal\_Malik](https://discuss.elastic.co/u/Faisal_Malik)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 11:54pm UTC](https://discuss.elastic.co/t/logtstash-updating-fron-7-9-to-7-16-2/298453 "2022-02-28T23:54:10Z")

</div>

Hi i am trying to update logstash from 7.9.0 to 7.16.2 (Using Helm chart ) Getting error. Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<LogStash::ConfigurationError: Could not connect to a compatible version of E…

---

## [How to increase Kibana Memory?](https://discuss.elastic.co/t/how-to-increase-kibana-memory/297204)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 10:01pm UTC](https://discuss.elastic.co/t/how-to-increase-kibana-memory/297204 "2022-02-28T22:01:51Z")

</div>

Hello, How can i Increase the memory that Kibana uses? I tried following this part of the documentation, but it does not work, there is no change in the memory used in the monitoring. I want to use 4096 MB for Kibana,…

---

## [Can you use copy\_fields processor for @timestamp in winlogbeat](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 2:12pm UTC](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501 "2020-07-01T14:12:49Z")

</div>

Hi guys, Does anyone know if there is a way to copy the @timestamp value from winlogbeat json to a separate field (for troubleshooting purposes) using winlogbeat.yml file? I'm trying to use the copy fields processor: …

---

## [Logstash-plugin install logstash-output-influxdb error proxy](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451)

<div class="topic-metadata">

**Author:** [@bob\_monty](https://discuss.elastic.co/u/bob_monty)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 9:38pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451 "2022-02-28T21:38:52Z")

</div>

Greetings im trying to logstash-plugin install logstash-output-influxdb but im behind a firewall and we have a proxy. i set the proxy at the command line with HTTP\_PROXY, and also tried setting it in logstash-7.16.1/vend…

---

## [Logstash installed on GCP compute engine having issues connecting to Mongo Atlas](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461)

<div class="topic-metadata">

**Author:** [@justjaidev](https://discuss.elastic.co/u/justjaidev)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 8:33pm UTC](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461 "2022-02-28T20:33:33Z")

</div>

Logstash installed on GCP compute engine is unable to connect Mongo Atlas.. Tried all the below 3 versions of mongo output plugin. 3.1.5 3.1.6 3.1.7 Below error observed with 3.1.5 version of mongo output plugin \[WA…

---

## [Support of mongodb+srv to connect with Atlas Mongo](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445)

<div class="topic-metadata">

**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 8:26pm UTC](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445 "2022-02-28T20:26:55Z")

</div>

Hi, I am trying to push data coming into Logstash to MongoDB on Atlas. My output configuration is as following: mongodb { id =\> "logs" collection =\> "logentries" database =\> "logs" uri =\>…

---

## [Unable to get issuer certificate with TLS enabled Kibana & Elasticsearch in k8s](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779)

<div class="topic-metadata">

**Author:** [@Scottapotamus](https://discuss.elastic.co/u/Scottapotamus)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779 "2022-02-28T18:42:29Z")

</div>

I am trying to enable TLS on Elasticsearch and kibana in kubernetes using the ECK operator. But when kibana tries to connect to Elasticsearch I get {"type":"log","@timestamp":"\*\*\*\*\*\*\*\*\*\*","tags":\["error","elasticsearch-…

---

## [Create geopoint from lat, lon values in nested json file to be visible in Kibana maps](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147)

<div class="topic-metadata">

**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\
**Replies:** 5\
**Last updated:** [February 28, 2022, 6:35pm UTC](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147 "2022-02-28T18:35:29Z")

</div>

Hi all, I have the following json file where there are different locations with their own coordinates. { "A001": { "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.9542869569135…

---

## [Elastic Endpoint Security Degraded](https://discuss.elastic.co/t/elastic-endpoint-security-degraded/298074)

<div class="topic-metadata">

**Author:** [@jobr97](https://discuss.elastic.co/u/jobr97)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 5:41pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-degraded/298074 "2022-02-28T17:41:27Z")

</div>

Hi all, I'm having an issue with the Endpoint Security integration on my Windows devices. The agent status is showing up as "Unhealthy" and the status command on the endpoint gives the following result: Status: DEGRAD…

---

## [Kibana SSL/Certificate - Service Auto-Restarts & Fails to Start](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195)

<div class="topic-metadata">

**Author:** [@Adventures\_Of\_Arch](https://discuss.elastic.co/u/Adventures_Of_Arch)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 5:39pm UTC](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195 "2022-02-28T17:39:41Z")

</div>

Hey all - Unsure where to turn with this one. Running Elasticsearch 7.16.3 and Kibana 7.16.3 on Ubuntu Server 20.04 Elasticsearch is configured and running successfully as a single-node deployment, currently with... x…

---

## [Remove kibana deprecation warnings](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 5:21pm UTC](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438 "2022-02-28T17:21:16Z")

</div>

I am trying to remove kibana deprecation warnings. I am using kibana 7.10.2. There were some configurations that have been deprecated and I fixed those warnings. There is another deprecation warning that is still appeari…

---

## [Logstash Even Hub input. error when running as a service, but not when I run single pipeline](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 3:43pm UTC](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423 "2022-02-28T15:43:10Z")

</div>

Hi Im trying to consume data from Azure Event Hub, I have 15 different logstash pipelines pointing to different storages, and Even Hubs, they all work well,and I can get data when I run the single pipelines alone, but wh…

---

## [How do I get a percolator query to use the same analyzer as the mapped fields?](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421)

<div class="topic-metadata">

**Author:** [@sanoj85](https://discuss.elastic.co/u/sanoj85)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 3:42pm UTC](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421 "2022-02-28T15:42:50Z")

</div>

---

## [Date indexes as yesterday](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192)

<div class="topic-metadata">

**Author:** [@SKraine](https://discuss.elastic.co/u/SKraine)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 3:16pm UTC](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192 "2022-02-28T15:16:10Z")

</div>

Hey Everyone, I am trying to index some statistics into my self-hosted elastic stack. I am using the python API to index the document which has a very simple mapping that is dynamically mapped from a dictionary in pytho…

---

## [Jdbc\_driver\_library default folder in old versions](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416)

<div class="topic-metadata">

**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416 "2022-02-28T14:56:49Z")

</div>

Hello! Could someone suggest where is default folder for jars in logstash version 2.4.1? I know that beginning from 6 version it is - /usr/share/logstash/logstash-core/lib/jars/ but previous versions had another pa…

---

## [Can't see aws.cloudtrail logs in "Discover", but still getting Security Detections that uses aws.cloudtrail](https://discuss.elastic.co/t/cant-see-aws-cloudtrail-logs-in-discover-but-still-getting-security-detections-that-uses-aws-cloudtrail/298316)

<div class="topic-metadata">

**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 2:50pm UTC](https://discuss.elastic.co/t/cant-see-aws-cloudtrail-logs-in-discover-but-still-getting-security-detections-that-uses-aws-cloudtrail/298316 "2022-02-28T14:50:54Z")

</div>

Can't see aws.cloudtrail logs in "Discover", but still getting Security Detections that uses aws.cloudtrail. Keep on restarting the agent that ships the AWS Cloudtrail logs, okta logs, Google Workspace logs, but AWS eve…

---

## [Disable search function in Kibana dashboard and visualisation](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133)

<div class="topic-metadata">

**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 2:40pm UTC](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133 "2022-02-28T14:40:50Z")

</div>

Hi there, we activated X-Pack for our Elasticsearch and Kibana and created different users, roles and spaces. That works great. However, we would like to disable the search for specific users, roles or spaces. Is that …

---

## [Sub aggregration in Kibana Canvas](https://discuss.elastic.co/t/sub-aggregration-in-kibana-canvas/296433)

<div class="topic-metadata">

**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 10:45am UTC](https://discuss.elastic.co/t/sub-aggregration-in-kibana-canvas/296433 "2022-02-28T10:45:16Z")

</div>

Hi everyone, is there a possibility to use sub aggregation in Kibana Canvas?

---

## [Parsing message for haproxy logs no matched](https://discuss.elastic.co/t/parsing-message-for-haproxy-logs-no-matched/298395)

<div class="topic-metadata">

**Author:** [@Romain.Depreux](https://discuss.elastic.co/u/Romain.Depreux)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 10:31am UTC](https://discuss.elastic.co/t/parsing-message-for-haproxy-logs-no-matched/298395 "2022-02-28T10:31:43Z")

</div>

Hello, can anyone kindly help me to solve this problem? I'm trying to parse the fields of a haproxy log then dissect that message to map the different message values into fields for logstash. But I have the impression …

---

## [Logstash and MongoDB input](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535)

<div class="topic-metadata">

**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 10:20am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535 "2022-02-28T10:20:15Z")

</div>

Hi! Logstash version: 7.17.0 Could you help me with logstash-mongodb issue, in view of input plugin for Logstash. I work on some task, where I need to get logs from postgre and mongo. Regarding to postgre - everythi…

---

## [SQL Vs. Query DSL](https://discuss.elastic.co/t/sql-vs-query-dsl/298384)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/sql-vs-query-dsl/298384 "2022-02-28T10:13:33Z")

</div>

Hi, I see huge difference in the performance when running the same query in the different approach. SQL: GET \_sql?format=json { "query": """ SELECT \* FROM "baseelements" WHERE "sessionId" = '621786a4186dc944ccb…

---

## [Interpret Text field as Date field during search](https://discuss.elastic.co/t/interpret-text-field-as-date-field-during-search/298385)

<div class="topic-metadata">

**Author:** [@Gokulnath\_Thangavel](https://discuss.elastic.co/u/Gokulnath_Thangavel)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 10:01am UTC](https://discuss.elastic.co/t/interpret-text-field-as-date-field-during-search/298385 "2022-02-28T10:01:54Z")

</div>

When we initially started using Elasticsearch we missed to add mappings to one of our indices. So all the Fields are having default type of "keyword". Is there any way to perform the date range search by interpreting tim…

---

## [Cluster setup issue when path.data and path.logs are configured](https://discuss.elastic.co/t/cluster-setup-issue-when-path-data-and-path-logs-are-configured/298124)

<div class="topic-metadata">

**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\
**Replies:** 7\
**Last updated:** [February 28, 2022, 9:38am UTC](https://discuss.elastic.co/t/cluster-setup-issue-when-path-data-and-path-logs-are-configured/298124 "2022-02-28T09:38:08Z")

</div>

I am trying to setup a 3 node cluster using Elasticsearch-7.17.0 in linux. I have made the following configurations in elasticsearch.yml file of all 3 nodes: path.data: /some/path/data path.logs: /some/path/logs network…

---

## [Wordpiece tokenizer](https://discuss.elastic.co/t/wordpiece-tokenizer/296276)

<div class="topic-metadata">

**Author:** [@Quentin\_Feuillade](https://discuss.elastic.co/u/Quentin_Feuillade)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 8:53am UTC](https://discuss.elastic.co/t/wordpiece-tokenizer/296276 "2022-02-28T08:53:22Z")

</div>

I am trying to use Worpiece tokenization (the tokenization method used in BERT) directly as a elastic tokenizer. After some digging i found this file in the official elastic source code but i can't find any way to use i…

---

## [I have a problem when I want to send logs of PFSense (2.5.2 amd64) to EK version 7.14.2](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603)

<div class="topic-metadata">

**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\
**Replies:** 18\
**Last updated:** [February 28, 2022, 9:19am UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603 "2022-02-28T09:19:20Z")

</div>

I have a problem when I want to send logs from PFSense (2.5.2 amd64) to EK version 7.14.2 I did configure PFSense to send logs to EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2)

---

## [How to determines if a geo point is within a polygon](https://discuss.elastic.co/t/how-to-determines-if-a-geo-point-is-within-a-polygon/298383)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 8:56am UTC](https://discuss.elastic.co/t/how-to-determines-if-a-geo-point-is-within-a-polygon/298383 "2022-02-28T08:56:42Z")

</div>

Hi team! I have a question for geo query. For example, I have a index which name is city, and in this index, I create a field which type is geo\_shape. Now I have a address's longitude and latitude, I want to get the c…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=691)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=693)
