# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=752

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 753

---

## [Cannot consume elasticsearch client in angular application](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029)

<div class="topic-metadata">

**Author:** [@Ola\_Aboamer](https://discuss.elastic.co/u/Ola_Aboamer)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 8:00pm UTC](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029 "2021-12-15T20:00:39Z")

</div>

Hi There I am using Angular10 and "@elastic/Elasticsearch": "^7.15.0", and getting the following dependency errors, ERROR in ./node\_modules/@elastic/elasticsearch/lib/Connection.js Module not found: Error: Can't re…

---

## [CVE-2021-44228 Alternative Mitigation](https://discuss.elastic.co/t/cve-2021-44228-alternative-mitigation/291877)

<div class="topic-metadata">

**Author:** [@boris111](https://discuss.elastic.co/u/boris111)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 7:55pm UTC](https://discuss.elastic.co/t/cve-2021-44228-alternative-mitigation/291877 "2021-12-15T19:55:02Z")

</div>

Is it possible to drop the new log4j-core-2.15.0.jar for logstash as an alternative mitigation for the 5.x logstash version? The recommended mitigation step to remove the JndiLookup.class would not be desirable for dep…

---

## [Need to split comma delimited string where one of the fields contains a backslash](https://discuss.elastic.co/t/need-to-split-comma-delimited-string-where-one-of-the-fields-contains-a-backslash/289962)

<div class="topic-metadata">

**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\
**Replies:** 2\
**Last updated:** [November 23, 2021, 7:00pm UTC](https://discuss.elastic.co/t/need-to-split-comma-delimited-string-where-one-of-the-fields-contains-a-backslash/289962 "2021-11-23T19:00:48Z")

</div>

I have this message string: "foo,bar,domain\\name,blah I need to split it into fields so it looks like this: field\[0\]: foo field\[1\]: bar field\[2\]: domain\\user field\[3\]: blah but the split filter splits the message u…

---

## [Failing to load conf file](https://discuss.elastic.co/t/failing-to-load-conf-file/289811)

<div class="topic-metadata">

**Author:** [@kainan](https://discuss.elastic.co/u/kainan)\
**Replies:** 4\
**Last updated:** [November 23, 2021, 3:28pm UTC](https://discuss.elastic.co/t/failing-to-load-conf-file/289811 "2021-11-23T15:28:02Z")

</div>

Hey all, First time poster. I have been struggling for over a week to get the below conf file to compile. I have read through the forums and it always seems to be missing a } however that does not seem to be the case he…

---

## [Mutate rename using field value](https://discuss.elastic.co/t/mutate-rename-using-field-value/292014)

<div class="topic-metadata">

**Author:** [@sirReeall](https://discuss.elastic.co/u/sirReeall)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 6:27pm UTC](https://discuss.elastic.co/t/mutate-rename-using-field-value/292014 "2021-12-15T18:27:13Z")

</div>

Hello, I'm trying to rename a field using the value of another metadata field, here is what I have tried: filter { grok { match =\> { "path" =\> "%{GREEDYDATA}/%{GREEDYDATA:\[@metadata\]\[metric\_name\]}\\.csv" …

---

## [7.16.1 - All beats docs in Discover had unknown field and value as json](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017)

<div class="topic-metadata">

**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\
**Replies:** 6\
**Last updated:** [December 15, 2021, 6:26pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017 "2021-12-15T18:26:46Z")

</div>

Hi, Yeserday, I upgraded one of our cluster from 7.13.4 to 7.16.1. When I'm going to discover pane and choose a beat index, almost all field show as 'unknown field' and the values are showing as JSON. The other clus…

---

## [Uptime and Elastic Agent ID links?](https://discuss.elastic.co/t/uptime-and-elastic-agent-id-links/288937)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 4\
**Last updated:** [December 15, 2021, 5:08pm UTC](https://discuss.elastic.co/t/uptime-and-elastic-agent-id-links/288937 "2021-12-15T17:08:33Z")

</div>

Is is possible to link an existing monitor to a agent that is enrolled in fleet? When you go to Uptime then metrics explorer you get a nice overlay but clicking view in Uptime ends with the main Uptime page and not the …

---

## [Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j?](https://discuss.elastic.co/t/is-elasticsearch-affected-by-cve-2021-45046-a-second-vulnerability-in-log4j/291885)

<div class="topic-metadata">

**Author:** [@smlx](https://discuss.elastic.co/u/smlx)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 4:56pm UTC](https://discuss.elastic.co/t/is-elasticsearch-affected-by-cve-2021-45046-a-second-vulnerability-in-log4j/291885 "2021-12-15T16:56:32Z")

</div>

As per the title there is a newer vulnerability in log4j: CVE-2021-45046 https://logging.apache.org/log4j/2.x/security.html As the current log4j announcement doesn't specifically mention this CVE except in the context …

---

## [How to filter log in kibana](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981)

<div class="topic-metadata">

**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 4:21pm UTC](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981 "2021-12-15T16:21:32Z")

</div>

Hi everyone, my goal is to filter this string "sudo egrep -i -r '${jndi:(ldap\[s\]?|rmi|dns):/\[^\\n\]+' /var/log" in the message of my logs This is related to the log4j issue. Thanks in advance to those who help me.

---

## [Python Elasticsearch aggregated query](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998)

<div class="topic-metadata">

**Author:** [@Sederfo](https://discuss.elastic.co/u/Sederfo)\
**Replies:** 5\
**Last updated:** [December 15, 2021, 3:59pm UTC](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998 "2021-12-15T15:59:16Z")

</div>

I am struggling to get an aggregated response based on a query... for example, in Kibana visualization, after creating a table with the aggregations and query I need, I can view the request by going inside the visualizat…

---

## [Sharing a report from Kibana to Slack](https://discuss.elastic.co/t/sharing-a-report-from-kibana-to-slack/292013)

<div class="topic-metadata">

**Author:** [@Zarzaparro](https://discuss.elastic.co/u/Zarzaparro)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 3:49pm UTC](https://discuss.elastic.co/t/sharing-a-report-from-kibana-to-slack/292013 "2021-12-15T15:49:42Z")

</div>

Good afternoon. I need to do something but I can't find how. I have an automated report in Kibana (from a Dashborad, so the report gives me a PDF). I need this report to be sent to a Slack channel on a daily basis. I c…

---

## [Create new records from old one](https://discuss.elastic.co/t/create-new-records-from-old-one/291989)

<div class="topic-metadata">

**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Replies:** 7\
**Last updated:** [December 15, 2021, 3:42pm UTC](https://discuss.elastic.co/t/create-new-records-from-old-one/291989 "2021-12-15T15:42:25Z")

</div>

Hello! I have JSON at input { "data:{ "id":"123" }, "message":\[ "event1", "event2", "event3" \], "source":"abc" } Is it possible to make three different events based on "event1", "event2" and "…

---

## [Parse XML nessus config to logstash](https://discuss.elastic.co/t/parse-xml-nessus-config-to-logstash/290887)

<div class="topic-metadata">

**Author:** [@k1mson13](https://discuss.elastic.co/u/k1mson13)\
**Replies:** 12\
**Last updated:** [December 15, 2021, 3:21pm UTC](https://discuss.elastic.co/t/parse-xml-nessus-config-to-logstash/290887 "2021-12-15T15:21:20Z")

</div>

I have a nessus file that looks like this : \<ReportHost name="192.168.2.65"\>\<HostProperties\> \<tag name="traceroute-hop-1"\>192.168.2.65\</tag\> \<tag name="HOST\_START"\>Wed Nov 10 12:48:53 2021\</tag\> \<tag name="HOST\_START\_TI…

---

## [Kibana issue with relative and absolute range combination](https://discuss.elastic.co/t/kibana-issue-with-relative-and-absolute-range-combination/291972)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 3:14pm UTC](https://discuss.elastic.co/t/kibana-issue-with-relative-and-absolute-range-combination/291972 "2021-12-15T15:14:12Z")

</div>

Elasticsearch Platinum: 7.16.1 Hi! We recently found out that when we use relative as start date and absolute as end date it doesn't work as intended. For example when I select relative start date "14 days ago" and ab…

---

## [Change navLinks with kibana 7.14](https://discuss.elastic.co/t/change-navlinks-with-kibana-7-14/291951)

<div class="topic-metadata">

**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 2:40pm UTC](https://discuss.elastic.co/t/change-navlinks-with-kibana-7-14/291951 "2021-12-15T14:40:37Z")

</div>

Hi ! Is it possible to change the home navLink througth a custom plugin in Kibana 7.14 ? The final aim is to replace it with a plugin url. It seems that the chrome.navLinks.update() method is not available for this vers…

---

## [Namespaces and EKS](https://discuss.elastic.co/t/namespaces-and-eks/291904)

<div class="topic-metadata">

**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 2:30pm UTC](https://discuss.elastic.co/t/namespaces-and-eks/291904 "2021-12-15T14:30:20Z")

</div>

Hi all So I see EKS creates a elastic-system namespace during the CRD creations. So question, would/should we deploy our own cluster bits into elastic-system ns... when you follow the quickstart they don't mention nam…

---

## [Beats are not vulnerable to Log4j2 RCE](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992)

<div class="topic-metadata">

**Author:** [@dave101](https://discuss.elastic.co/u/dave101)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/beats-are-not-vulnerable-to-log4j2-rce/291992 "2021-12-15T14:27:46Z")

</div>

Hi there, maybe some can confirm the follow for us. A few days ago we read this article concerning the log4j vulnerability. Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 Here it …

---

## [ElasticSearch 7.9.2 getting issue with Query latency and Flush latency](https://discuss.elastic.co/t/elasticsearch-7-9-2-getting-issue-with-query-latency-and-flush-latency/291245)

<div class="topic-metadata">

**Author:** [@balac](https://discuss.elastic.co/u/balac)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-2-getting-issue-with-query-latency-and-flush-latency/291245 "2021-12-15T13:55:32Z")

</div>

Hi , In Elasticsearch:7.9.2 we are getting Query latency and Flush Latency alert. We setup this new cluster and moved it from standalone ES cluster to 3 node cluster in kubernetes. We are monitoring ES cluster with Zabb…

---

## [Kibana is not getting connected to elastic search](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630)

<div class="topic-metadata">

**Author:** [@aravi](https://discuss.elastic.co/u/aravi)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 1:16pm UTC](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630 "2021-12-15T13:16:08Z")

</div>

We are not bale to open up the kibana portal due to the probable socket timed out error while reaching the Elasticsearch. Recently we have made a change to disable the xpack-security in the Elasticsearch. Please be infor…

---

## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 4\
**Last updated:** [December 15, 2021, 12:59pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291777 "2021-12-15T12:59:54Z")

</div>

Hello everyone. i have a trouble with elastic. the logs stop come in since 16:40 and here is the log of logstash \` \> \[2021-12-14T16:57:20,948\]\[WARN \]\[logstash.outputs.elasticsearch\]\[pipeline\_ocp4\] Could not index event…

---

## [Unable to initialize Fleet as i get internal server error in kibana logs and on GUI "Default policy could not be added. system is not installed, add system to \`xpack.fleet.packages\` or remove it from system-1" i'm using 3 nodes cluster for elasticsearch](https://discuss.elastic.co/t/unable-to-initialize-fleet-as-i-get-internal-server-error-in-kibana-logs-and-on-gui-default-policy-could-not-be-added-system-is-not-installed-add-system-to-xpack-fleet-packages-or-remove-it-from-system-1-im-using-3-nodes-cluster-for-elasticsearch/291555)

<div class="topic-metadata">

**Author:** [@amr\_hamdy](https://discuss.elastic.co/u/amr_hamdy)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 12:47pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-as-i-get-internal-server-error-in-kibana-logs-and-on-gui-default-policy-could-not-be-added-system-is-not-installed-add-system-to-xpack-fleet-packages-or-remove-it-from-system-1-im-using-3-nodes-cluster-for-elasticsearch/291555 "2021-12-15T12:47:39Z")

</div>

---

## [Is there a way to update the Elastic index field data through Kibana console - preferably through Discover feature](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700)

<div class="topic-metadata">

**Author:** [@Pradeep\_Nukatoti](https://discuss.elastic.co/u/Pradeep_Nukatoti)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700 "2021-12-15T12:44:46Z")

</div>

Hello Folks, I'm looking for a way to update the Elastic index field data through Kibana console through discover, I was able to pull the data and display it as a table but I don't see a way to update it and ES index.…

---

## [Building oss tar from source code Elasticsearch 7.10](https://discuss.elastic.co/t/building-oss-tar-from-source-code-elasticsearch-7-10/291966)

<div class="topic-metadata">

**Author:** [@dhina](https://discuss.elastic.co/u/dhina)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 12:10pm UTC](https://discuss.elastic.co/t/building-oss-tar-from-source-code-elasticsearch-7-10/291966 "2021-12-15T12:10:43Z")

</div>

Hi, References Is there a way we could build the oss version of the Elasticsearch from source code. We have a requirement like, we have to build the Elasticsearch OSS from source code and use it instead of downloadi…

---

## [Appending a result from a search to the result of another search](https://discuss.elastic.co/t/appending-a-result-from-a-search-to-the-result-of-another-search/291956)

<div class="topic-metadata">

**Author:** [@perbejder](https://discuss.elastic.co/u/perbejder)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 12:10pm UTC](https://discuss.elastic.co/t/appending-a-result-from-a-search-to-the-result-of-another-search/291956 "2021-12-15T12:10:56Z")

</div>

Hi I have two indexes. One with data from our Windows servers and another with information from our CMDB. I want to make a count of servers that have send data to Elastic within the last 24 hours from the Windows inde…

---

## [Filter documents from search result](https://discuss.elastic.co/t/filter-documents-from-search-result/291965)

<div class="topic-metadata">

**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 12:08pm UTC](https://discuss.elastic.co/t/filter-documents-from-search-result/291965 "2021-12-15T12:08:30Z")

</div>

Hi, i have some data on a index in Elasticsearch that it displayed as follow "hits" : { "total" : { "value" : 7, "relation" : "eq" }, "max\_score" : 1.0, "hits" : \[ { "\_index" :…

---

## [Unable to allocate index](https://discuss.elastic.co/t/unable-to-allocate-index/291919)

<div class="topic-metadata">

**Author:** [@usrrandom](https://discuss.elastic.co/u/usrrandom)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 10:57am UTC](https://discuss.elastic.co/t/unable-to-allocate-index/291919 "2021-12-15T10:57:22Z")

</div>

Hi all, My ES index is showing red. It is a single node and has no replicas. Its running on version 5.5 On checking allocation status, I get the following { "index": "tm", "shard": 0, "primary": true, …

---

## [Tracking the cause of write queues](https://discuss.elastic.co/t/tracking-the-cause-of-write-queues/291865)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 5\
**Last updated:** [December 15, 2021, 10:30am UTC](https://discuss.elastic.co/t/tracking-the-cause-of-write-queues/291865 "2021-12-15T10:30:59Z")

</div>

Hello, I've been trying to find the cause of a high load the happens randomly on one of my hot nodes for a couple of months. Currently I have a 25 nodes cluster, with 3 dedicated masters, 18 warm nodes and 4 hot nodes,…

---

## [Querying nested objects](https://discuss.elastic.co/t/querying-nested-objects/291850)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 9:17am UTC](https://discuss.elastic.co/t/querying-nested-objects/291850 "2021-12-15T09:17:50Z")

</div>

hello, I have an index called session\_details, here is an example of a document: { "clientIdAsString" : "100", "sessionStart" : "2021-12-14T17:14:49.000Z", "user\_id" : "0Bl301Me7x080r5o2K8m9D86Z", "wz\_s…

---

## [How to remove "Part-of \<Func\>" columns in Kibana CSV](https://discuss.elastic.co/t/how-to-remove-part-of-func-columns-in-kibana-csv/290861)

<div class="topic-metadata">

**Author:** [@DoesitMatter](https://discuss.elastic.co/u/DoesitMatter)\
**Replies:** 5\
**Last updated:** [December 15, 2021, 7:09am UTC](https://discuss.elastic.co/t/how-to-remove-part-of-func-columns-in-kibana-csv/290861 "2021-12-15T07:09:01Z")

</div>

Hi there, I'm wondering how can i remove the "Part of Unique\_count()".... Is there any important information contained in this "Part of..."? Thanks! Regards, Alloy

---

## [Not Able to Open Kibana in Browser due to 'unsafe-eval'](https://discuss.elastic.co/t/not-able-to-open-kibana-in-browser-due-to-unsafe-eval/291833)

<div class="topic-metadata">

**Author:** [@Mohammed.Asaduzzaman](https://discuss.elastic.co/u/Mohammed.Asaduzzaman)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 6:23am UTC](https://discuss.elastic.co/t/not-able-to-open-kibana-in-browser-due-to-unsafe-eval/291833 "2021-12-15T06:23:45Z")

</div>

All, I am not able to open Elastic Kibana Dashboard on my browser. The browser states "Something went wrong" and to try to refresh the page. Refreshing the page does not do anything. I get the following error: Refused …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=751)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=753)
