# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=709 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 710 --- ## [Update Logstash OSS rpm to fix netty vulnerabilites](https://discuss.elastic.co/t/update-logstash-oss-rpm-to-fix-netty-vulnerabilites/296717)
**Author:** [@pikopl](https://discuss.elastic.co/u/pikopl)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 10:25pm UTC](https://discuss.elastic.co/t/update-logstash-oss-rpm-to-fix-netty-vulnerabilites/296717 "2022-02-09T22:25:18Z")
Please update logstash OSS rpm to fix following netty-all jars vulnerabilities: \[NVD - CVE-2021-37137\] \[NVD - CVE-2021-37136\] Please update netty-all to at least 4.1.68.Final (currently 4.1.65.Final) --- ## [Information about Kibana user's login](https://discuss.elastic.co/t/information-about-kibana-users-login/296731)
**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 7:15pm UTC](https://discuss.elastic.co/t/information-about-kibana-users-login/296731 "2022-02-09T19:15:55Z")
Hello! Can you say, where I can find information about users authentication on Kibana? Fail and success. And can I see login of users, who provide incorrent password? --- ## [Ingest data with GCP Dataflow](https://discuss.elastic.co/t/ingest-data-with-gcp-dataflow/294046)
**Author:** [@gustafkisi](https://discuss.elastic.co/u/gustafkisi)\ **Replies:** 11\ **Last updated:** [February 9, 2022, 5:10pm UTC](https://discuss.elastic.co/t/ingest-data-with-gcp-dataflow/294046 "2022-02-09T17:10:29Z")
Hello. I'm trying to ingest data to ES with the use of GCP Dataflow and the template PubSub to Elasticsearch. So far I've tried a couple of different deployments which are all on GCP using the trial option over at elast… --- ## [Dynamic Templates updates as part of upgrade](https://discuss.elastic.co/t/dynamic-templates-updates-as-part-of-upgrade/296765)
**Author:** [@venkat\_dinesh](https://discuss.elastic.co/u/venkat_dinesh)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 4:57pm UTC](https://discuss.elastic.co/t/dynamic-templates-updates-as-part-of-upgrade/296765 "2022-02-09T16:57:04Z")
Hi, Context : I am upgrading a set of indices with data from Elasticsearch 7.0 to Elasticsearch 7.10 (I do not have much control over the target version). In some of existing indices, mappings use dynamic\_templates. E… --- ## [Migrate legacy templates to index templates](https://discuss.elastic.co/t/migrate-legacy-templates-to-index-templates/296764)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 4:57pm UTC](https://discuss.elastic.co/t/migrate-legacy-templates-to-index-templates/296764 "2022-02-09T16:57:02Z")
Hello, I can't find any documentation that helps in migrating the legacy templates to the 'new' index templates. A starting point would be apreciated :slight\_smile: Thanks, Roberto D'Arco --- ## [Filter terms aggregation on array field](https://discuss.elastic.co/t/filter-terms-aggregation-on-array-field/296627)
**Author:** [@silarhi](https://discuss.elastic.co/u/silarhi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 4:56pm UTC](https://discuss.elastic.co/t/filter-terms-aggregation-on-array-field/296627 "2022-02-09T16:56:06Z")
Hello there, I'm looking for a solution to filter some aggregation terms based on an array field. Here's an example of data: PUT /test-index POST /test-index/\_doc/ { "type": "album", "authors": \[1, 2, 3, 4, 5\] } … --- ## [Filebeat to logstash, no data when logstash run as service, got data when I run by command](https://discuss.elastic.co/t/filebeat-to-logstash-no-data-when-logstash-run-as-service-got-data-when-i-run-by-command/296752)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-no-data-when-logstash-run-as-service-got-data-when-i-run-by-command/296752 "2022-02-09T16:07:45Z")
Hi, I got several pipelines getting data from a DB, and other new pipelines that get data from filebeat. When I run logstash as a service, I get data from the DB source, but no data from filebeat. When I run logstash b… --- ## [ERROR logstash.outputs.email](https://discuss.elastic.co/t/error-logstash-outputs-email/296729)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 3:51pm UTC](https://discuss.elastic.co/t/error-logstash-outputs-email/296729 "2022-02-09T15:51:03Z")
Hi, My code: email { to =\> "za@gmail.com" via =\> 'smtp' address =\> 'smtp.gmail.com' from =\> 'john@gmail.com' authentication =\> "plain" username =\> "john@gmail.com" password =\> "john123" subject =\> '… --- ## [Tuning number of workers](https://discuss.elastic.co/t/tuning-number-of-workers/296748)
**Author:** [@Sonia1](https://discuss.elastic.co/u/Sonia1)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 3:39pm UTC](https://discuss.elastic.co/t/tuning-number-of-workers/296748 "2022-02-09T15:39:24Z")
Hello, Currently our logstash consists of 7 pipelines that launch queries against a DB accessed by JDBC. With logstash we enrich and normalize this data and index it directly to Elasticsearch. In total 20 jdbc queries a… --- ## [Snowball token analyzer for Slovenian](https://discuss.elastic.co/t/snowball-token-analyzer-for-slovenian/295589)
**Author:** [@provi](https://discuss.elastic.co/u/provi)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 3:16pm UTC](https://discuss.elastic.co/t/snowball-token-analyzer-for-slovenian/295589 "2022-02-09T15:16:03Z")
Hello there! I'm searching for a Slovenian Snowball (or Stemmer) Analyzer to create a custom plugin (with Java) I already found something for Serbian and Slovak, but I have to recognize, I'm struggling with Slovenian. … --- ## [Failed to start Elasticsearch](https://discuss.elastic.co/t/failed-to-start-elasticsearch/296727)
**Author:** [@Ivan\_Scorpey](https://discuss.elastic.co/u/Ivan_Scorpey)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:50pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch/296727 "2022-02-09T14:50:28Z")
I start ES but have Failed to start Elasticsearch and in log java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "setContextClassLoader") --- ## [Endpoint Security Intergration vs. Windows and System Intergrations](https://discuss.elastic.co/t/endpoint-security-intergration-vs-windows-and-system-intergrations/295731)
**Author:** [@TTCD](https://discuss.elastic.co/u/TTCD)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:32pm UTC](https://discuss.elastic.co/t/endpoint-security-intergration-vs-windows-and-system-intergrations/295731 "2022-02-09T14:32:48Z")
Hey there, I need some help figuring out what the best practice is for collecting logs. What I would like to accomplish is to replace my current XDR solution with Elastic Endpoint Security (all without breaking the bank… --- ## [How to filter nested objects in nested aggregation](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669)
**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:25pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669 "2022-02-09T14:25:39Z")
Hello, I am having a minor issue with an "aggregation" query I have been using for a couple years. My scenario: I have an index of documents that have a "searchByName" nested property. The "searchByName" property is … --- ## [APT fails to install elasticsearch 2.x](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707)
**Author:** [@Viktor\_Habchak](https://discuss.elastic.co/u/Viktor_Habchak)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 2:21pm UTC](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707 "2022-02-09T14:21:37Z")
Hello, I have trouble installing Elasticsearch v2.x on ubuntu 18.04. Here's the output I get with the simplest case: vik@ubuntu:~$ curl -fsSL https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - OK vi… --- ## [Auto\_date\_histogram and extended\_bounds](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 2:14pm UTC](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733 "2022-02-09T14:14:58Z")
Hello, I am trying to make a query using auto\_date\_histogram and extended\_bounds but i get the error: \[auto\_date\_histogram\] unknown field \[extended\_bounds\] the documentation for auto\_date\_histogram does mention exte… --- ## [Elasticsearch request failed: 28 - Operation timed out after 1000 milliseconds with 0 bytes received](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284)
**Author:** [@zeleniy](https://discuss.elastic.co/u/zeleniy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284 "2022-02-09T13:31:48Z")
I have PHP web app which interacts with Elasticsearch. It worked well but recently i got error with next text: 2022-01-13 16:43:59 \[95.161.173.18\]\[4669\]\[1tjhk618ubj7tjniq1utjpbntj\]\[error\]\[application\] delete elastic 202… --- ## [Does adding new fields to an existing document works like updating?](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 1:11pm UTC](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720 "2022-02-09T13:11:33Z")
I know the structure of inverted index data structure and worked with inverted index compression algorithms. So, I know why updating a document is not possible in inverted index and why this is simulated by inserting new… --- ## [Date\_histogram - extended bounds, converting null to 0](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719)
**Author:** [@elasticshane](https://discuss.elastic.co/u/elasticshane)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 12:49pm UTC](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719 "2022-02-09T12:49:11Z")
Hello, I have a collection of rooms in Elasticsearch 7.11.0, where each room has a data and a capacity for that date: PUT /capacities\_index { "mappings": { "properties": { "date": { "type": "date" … --- ## [Calculating duration](https://discuss.elastic.co/t/calculating-duration/296472)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 12:16pm UTC](https://discuss.elastic.co/t/calculating-duration/296472 "2022-02-09T12:16:19Z")
Hi, I am not sure if this can be achieved, I have the following query: GET /winlogbeat-7.14.0-2022.02.03-000001/\_search { "query": { "match\_all": {} }, "aggs": { "bulks": { "terms": { "field… --- ## [Unique Count Aggregation filtering](https://discuss.elastic.co/t/unique-count-aggregation-filtering/296679)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 3\ **Last updated:** [February 9, 2022, 12:04pm UTC](https://discuss.elastic.co/t/unique-count-aggregation-filtering/296679 "2022-02-09T12:04:33Z")
\*\* I was wondering if the below described is possible to display on Kibana. With a sample data as below, and the unique identifier being the 'sessionId' What i'm trying to do is create any vizualization (lets say a tab… --- ## [Help for extra large load](https://discuss.elastic.co/t/help-for-extra-large-load/296380)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 11:49am UTC](https://discuss.elastic.co/t/help-for-extra-large-load/296380 "2022-02-09T11:49:37Z")
Hi Everybody, I have 20 machines that each one has about 100,000 logs per minute, I'm using elk right now but the problem is sometimes logs are not showing real-time in kibana discovery. I used tuning, performance got b… --- ## [Question about whitelisting directories](https://discuss.elastic.co/t/question-about-whitelisting-directories/296343)
**Author:** [@zurb3](https://discuss.elastic.co/u/zurb3)\ **Replies:** 6\ **Last updated:** [February 9, 2022, 11:46am UTC](https://discuss.elastic.co/t/question-about-whitelisting-directories/296343 "2022-02-09T11:46:47Z")
I have a system that I would like to run elastic endpoint on that has a large network mounted file share. Every time I install it in the fleet policy, it causes the system to deadlock. I believe this is due to endpoint … --- ## [Possible ELK merges](https://discuss.elastic.co/t/possible-elk-merges/296715)
**Author:** [@marc0069urca](https://discuss.elastic.co/u/marc0069urca)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:25am UTC](https://discuss.elastic.co/t/possible-elk-merges/296715 "2022-02-09T11:25:07Z")
Hello community, I wanted to know which possibility was better for SQL data merging in ELK? Also I find myself with hundred of resource to aggregate, is it better to do aggregates or jbc streaming between 2 data entrie… --- ## [How can I search in all fields?](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 10:53am UTC](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249 "2022-02-09T10:53:11Z")
Hello, I've been asking a lot of questions lately. Is it impossible to search in all fields from the Elasticsearch 7.0.0 version now? Can't I use \_all anymore? If I can't use it, is there any other way? Or I wonder i… --- ## [Kibana not splitting fields by dot anymore](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826)
**Author:** [@fredsted](https://discuss.elastic.co/u/fredsted)\ **Replies:** 7\ **Last updated:** [February 9, 2022, 10:01am UTC](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826 "2022-02-09T10:01:01Z")
Hello, I'm wondering why Kibana has stopped splitting fields. For example, we used to have separate fields for "cloud.provider", "cloud.machine.type", but now it's just a single "cloud" field. It's interesting that … --- ## [FSCrawler excludes, Windows server](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:57am UTC](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689 "2022-02-09T09:57:29Z")
Has anyone had success with using excludes in FSCrawler on Windows servers? Are there are any known limitations? e.g. can you exclude only top level folders or can you exclude deeper folder s eg folder1\\sub1\\sub2\\sub3\*… --- ## [Elastic Search Unrestricted Information Disclosure Vulnerability](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688)
**Author:** [@kshi](https://discuss.elastic.co/u/kshi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 9:53am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688 "2022-02-09T09:53:16Z")
Hi Team, We are using Elasticsearch version 1.6.1 for one of our product Recovery Manger. Where it is just used for message finding and indexing. Customer is using the Nessus Vulnerability scanner and is coming out wi… --- ## [Add field when line contains EXCEPTION](https://discuss.elastic.co/t/add-field-when-line-contains-exception/296656)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [February 9, 2022, 9:12am UTC](https://discuss.elastic.co/t/add-field-when-line-contains-exception/296656 "2022-02-09T09:12:34Z")
Hi, logstash read the file line by line and add each line to Elasticsearch ok but i just want to add it with a condition when he find "EXCEPTION". example of my log file: 01/01/2022 15:00:02 546- MAIN EXCEPTION : Sys… --- ## [Issue in index mapping](https://discuss.elastic.co/t/issue-in-index-mapping/296025)
**Author:** [@mostafa\_khedri](https://discuss.elastic.co/u/mostafa_khedri)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:06am UTC](https://discuss.elastic.co/t/issue-in-index-mapping/296025 "2022-02-09T09:06:21Z")
Hi guys. I have some log in JSON format as below: {"message":"new activity:","context":{"request.headers":{"x-user-data":\["xxxx"\],"x-real-ip":\["xxxx"\],"x-forwarded-via":\["xxx/0.1"\],"x-forwarded-proto":\["http"\],"x-forwar… --- ## [Error: Could not find or load main class org.elasticsearch.tools.JavaVersionChecker](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 9:02am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695 "2022-02-09T09:02:10Z")
Hi, I have implemented an new cluster of elasticearch v7.12.0 with 6 nodes and two masters. After the servers were installed i saw that all of the Elasticsearch services are dead. When starting them i got: Error: Could… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=708) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=710)