# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=711 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 712 --- ## [Role of kafka between filebeat and logstash](https://discuss.elastic.co/t/role-of-kafka-between-filebeat-and-logstash/296566)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 9:20am UTC](https://discuss.elastic.co/t/role-of-kafka-between-filebeat-and-logstash/296566 "2022-02-08T09:20:12Z")
Hi, I have a lot of log files in each hour it will be created a new file log so i get it and i filter it with this architecture : filebeat -\> logstash -\> Elasticsearch -\> kibana I would to know there is any avantage t… --- ## [Editing elasticsearch.yml file](https://discuss.elastic.co/t/editing-elasticsearch-yml-file/296561)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 9:00am UTC](https://discuss.elastic.co/t/editing-elasticsearch-yml-file/296561 "2022-02-08T09:00:50Z")
Hello Greetings of the day @Lisa\_Jung @warkolm @xeraa Is it possible to edit Elasticsearch.yml file through API in Kibana? If their is a way please help me. --- ## [Detect update in Elastic index and call an action](https://discuss.elastic.co/t/detect-update-in-elastic-index-and-call-an-action/296509)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 8:04am UTC](https://discuss.elastic.co/t/detect-update-in-elastic-index-and-call-an-action/296509 "2022-02-08T08:04:38Z")
Hello, I'd like to detect updates in my index (updated, created or deleted document) and call an Amazon API Gateway. First, I thought about using Watcher but it seems that I can't detect real time modifications in my ind… --- ## [Es7.16, two indexes have same field cost conflicting type?](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667)
**Author:** [@zhanghaocai](https://discuss.elastic.co/u/zhanghaocai)\ **Replies:** 8\ **Last updated:** [February 8, 2022, 7:37am UTC](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667 "2022-02-08T07:37:44Z")
I have two indexes. PUT /test1 { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0 }, "mappings": { "properties": { "name": { "type": "text" } } } } PUT /test2 { "settings": {… --- ## [Logstash Scheduler](https://discuss.elastic.co/t/logstash-scheduler/296431)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 6:12am UTC](https://discuss.elastic.co/t/logstash-scheduler/296431 "2022-02-08T06:12:28Z")
Hey Elasticworld, I'm current Logstash version 7.9 ,I have a encounter a problem in Logstash, in which have a 4 pipeline which are using "JBDC" driver for inserting data into Elasticsearch. \*\*Now I have to add another … --- ## [Logstash filter if conditional fails to match string ended with "\\u0000"](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248)
**Author:** [@juowong](https://discuss.elastic.co/u/juowong)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 5:49am UTC](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248 "2022-02-08T05:49:39Z")
I am using logstash to receive network logs using syslog input module. I would like to drop the event if the log message is equal to A10. The pipeline is as follows: input { syslog { ecs\_compatibility =\> "v1" time… --- ## [Problem : Logstash filtering mutate/grok](https://discuss.elastic.co/t/problem-logstash-filtering-mutate-grok/296456)
**Author:** [@personal.riz](https://discuss.elastic.co/u/personal.riz)\ **Replies:** 5\ **Last updated:** [February 8, 2022, 5:00am UTC](https://discuss.elastic.co/t/problem-logstash-filtering-mutate-grok/296456 "2022-02-08T05:00:32Z")
Hi guys, iam new in elasticstack environment and i have some question below i have a problem with logstash filter parsing, i just config my firewall labs to sending json log to logstash using tcp port 5000. how to use … --- ## [CyberArk EPM (SaaS based) application integration with ELK](https://discuss.elastic.co/t/cyberark-epm-saas-based-application-integration-with-elk/296548)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 4:53am UTC](https://discuss.elastic.co/t/cyberark-epm-saas-based-application-integration-with-elk/296548 "2022-02-08T04:53:30Z")
Hello Team, I am new to ELK, we are trying to integrate CyberArk EPM (SaaS based) application with ELK and vendor only provided APIs to pull the events / logs manually but hasn’t provided any script to automate the proc… --- ## [Unable to Ship logs through Grafana Loki plugin](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535)
**Author:** [@JPablo1982](https://discuss.elastic.co/u/JPablo1982)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 1:26am UTC](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535 "2022-02-08T01:26:25Z")
Hello I am trying to get to work the Grafana loki Plugin for Logstash but I am getting a runtime error, here is the detail. Grafana Loki plugin was installed successfully by executing the following command: sudo /usr/… --- ## [Logstash multiple pipelines failure with persistent queues](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520)
**Author:** [@proton](https://discuss.elastic.co/u/proton)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 10:01pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520 "2022-02-07T22:01:15Z")
Hello! I need some help understanding pipeline to pipeline communication in logstash. I'm reading the output isolator pattern documentation and it says below: If any of the persistent queues of the downstream pipelines… --- ## [Slow query for high frequency terms](https://discuss.elastic.co/t/slow-query-for-high-frequency-terms/296528)
**Author:** [@Brodin](https://discuss.elastic.co/u/Brodin)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 9:55pm UTC](https://discuss.elastic.co/t/slow-query-for-high-frequency-terms/296528 "2022-02-07T21:55:12Z")
In a index with movie titles there area vast majority with the word “the” in them. Doing a match query for said word leads to a very slow operation due to the expensive ranking that has to be done on a large part or the… --- ## [Exist any limitations on how a \_id document field could be](https://discuss.elastic.co/t/exist-any-limitations-on-how-a-id-document-field-could-be/296344)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 9:15pm UTC](https://discuss.elastic.co/t/exist-any-limitations-on-how-a-id-document-field-could-be/296344 "2022-02-07T21:15:18Z")
I always notice that the \_id field of any index created is normaly a uuid, hash value or a simple numeric sucession depending of the use case. My question is if there are any limitation in the form and aspect when choos… --- ## [Questions about migrating from Elasticsearch to Enterprise App Search](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352)
**Author:** [@SMB](https://discuss.elastic.co/u/SMB)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:03pm UTC](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352 "2022-02-07T21:03:56Z")
Hi there, currently my company is looking at migrating from a hosted ES installation (with custom PHP integration) to Enterprise App Search. Primarily for the UI (analytics, ease of tuning, non-developer exposure etc.) t… --- ## [Threat Intel Indicator Rule: Request timed out](https://discuss.elastic.co/t/threat-intel-indicator-rule-request-timed-out/296408)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 7:46pm UTC](https://discuss.elastic.co/t/threat-intel-indicator-rule-request-timed-out/296408 "2022-02-07T19:46:15Z")
Hello folks, I really like this Threat Intel feature in Elastic Security, but sadly I can't seem to make a single rule related to this work. They always fail: "Request timed out". I run ELK on a SSD with enough RAM for… --- ## [Un-Assigned Shards after the restart of the ES cluster on Kubernetes](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423)
**Author:** [@pulir](https://discuss.elastic.co/u/pulir)\ **Replies:** 8\ **Last updated:** [February 7, 2022, 5:08pm UTC](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423 "2022-02-07T17:08:04Z")
I am using Elasticsearch 7.10.2 deployed on k8s cluster. The master and data nodes are backed by PVs for persisting the data. I have created a Cluster of 3 master and 3 data nodes, with 2 client nodes dedicated. My probl… --- ## [I amm trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this?](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636)
**Author:** [@Gw\_Do](https://discuss.elastic.co/u/Gw_Do)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 5:37pm UTC](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636 "2022-02-07T17:37:54Z")
HI, I am trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this? Thank you, Gwen --- ## [Elasticsearch: Automatically setting index level settings for daily indexes](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505 "2022-02-07T17:35:52Z")
I need to increase the, maximum value of documents retrieved by an Elasticsearch query maximum number of script\_fields that are allowed in a query After refering this, I used the update-index-settings API as below, fo… --- ## [Noob Question: What Is Placing Specific Data Into Fields Called](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 5:03pm UTC](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351 "2022-02-07T17:03:54Z")
Hello, What is placing specific data, such as an IP address, into a field, perhaps called src.ip called? I'm asking so that I can begin to learn by searching. Thank you! --- ## [\[Maps\] Apply global time to style metadata requests](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 4:58pm UTC](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497 "2022-02-07T16:58:24Z")
What does flag "Apply global time to style metadata requests" means in Kibana Maps --- ## [Query String on version 6 and above](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:27pm UTC](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498 "2022-02-07T16:27:23Z")
Hi everybody, I'm currently working with ES 5.5 and using query\_string as my full-text search DSL. Our search contains multiple fields, with multiple boosts, and some of them are short string fields and other ones are … --- ## [Sum of count of record](https://discuss.elastic.co/t/sum-of-count-of-record/296481)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/sum-of-count-of-record/296481 "2022-02-07T16:08:51Z")
Hello everyone, I need help with a little thing. In a table graph, I would also like to display a "total" line with the sum of the numbers on the far right. On this image for example I would like to have this line a… --- ## [TLS Error Calling Webhook Connector from Kibana](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:42pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498 "2022-02-07T15:42:41Z")
Hello - I'm running Elastic/Kibana version 7.16.2 on Linux with SSL enabled and CA signed certs. My TLS related Kibana settings are: server.ssl.enabled: true server.ssl.certificate: /path/to/server.crt server.ssl.key:… --- ## [Data Node Roles](https://discuss.elastic.co/t/data-node-roles/296482)
**Author:** [@Enis\_Kollugil](https://discuss.elastic.co/u/Enis_Kollugil)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 3:16pm UTC](https://discuss.elastic.co/t/data-node-roles/296482 "2022-02-07T15:16:52Z")
Hello everyone, We need some hints for a situation. We have an Elasticsearch cluster with version 7.10 and we configure it for data nodes as follows. node.master: false node.data: true node.ingest: true However, when… --- ## [Wildcard search based on a field like Splunk?](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250)
**Author:** [@jlrMantu](https://discuss.elastic.co/u/jlrMantu)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:04pm UTC](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250 "2022-02-07T15:04:13Z")
Hello, Sorry if this has been posted before, I couldn't find. We are currently using Splunk but moving to Elastic / Kibana. On Splunk, we have some Fields in the dashboard, and when we search for a value, the search su… --- ## [Role account permissions](https://discuss.elastic.co/t/role-account-permissions/296471)
**Author:** [@stuwee](https://discuss.elastic.co/u/stuwee)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:23pm UTC](https://discuss.elastic.co/t/role-account-permissions/296471 "2022-02-07T14:23:36Z")
Hi, is it possible to allow a role account to create new user accounts? I don't see it in the permissions. Right now I can only create new accounts from the built in elastic user. --- ## [Logstash is Stopping automatically](https://discuss.elastic.co/t/logstash-is-stopping-automatically/296455)
**Author:** [@David\_Samm](https://discuss.elastic.co/u/David_Samm)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 2:04pm UTC](https://discuss.elastic.co/t/logstash-is-stopping-automatically/296455 "2022-02-07T14:04:46Z")
Hi logstash is stopping automatically after some time I have increased xms and xmx to 4 GB in config in JVM.Options file even though Facing same issue --- ## [Convert string field to json](https://discuss.elastic.co/t/convert-string-field-to-json/296478)
**Author:** [@rcts](https://discuss.elastic.co/u/rcts)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 2:04pm UTC](https://discuss.elastic.co/t/convert-string-field-to-json/296478 "2022-02-07T14:04:01Z")
Hi! I need to convert this "message" field to json, how? --- ## [Required to avoid below search patterns from the search results in Elastic Search](https://discuss.elastic.co/t/required-to-avoid-below-search-patterns-from-the-search-results-in-elastic-search/296469)
**Author:** [@sangasur](https://discuss.elastic.co/u/sangasur)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 12:50pm UTC](https://discuss.elastic.co/t/required-to-avoid-below-search-patterns-from-the-search-results-in-elastic-search/296469 "2022-02-07T12:50:41Z")
We have a requirement to search the availability of any sensitive data without masking (like firstName, lastName, eMail etc..) from the kibana/Elasticsearch logs from the field full\_message . Usually these details will b… --- ## [WARN: o.e.t.ThreadPool - absolute clock went backwards…](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320)
**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 12:46pm UTC](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320 "2022-02-07T12:46:16Z")
Hi, after a fresh installation this log entry shows up on every node once a minute. absolute clock went backwards by \[300ms/300ms\] while timer thread was sleeping I already searched the forum and the Elasticsearch doc… --- ## [Can it replace Prometheus?](https://discuss.elastic.co/t/can-it-replace-prometheus/296417)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 12:40pm UTC](https://discuss.elastic.co/t/can-it-replace-prometheus/296417 "2022-02-07T12:40:53Z")
I use Prometheus to gather k8s' resources. The resource data pipeline is as follows. k8s -\> Prometheus -\> Java app -\> Elasticsearch -\> (search) Java app Here I have a question. Why use Prometheus? Wouldn't Prometheus no… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=710) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=712)