# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=756 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 757 --- ## [Elastic Agent broken](https://discuss.elastic.co/t/elastic-agent-broken/278490)
**Author:** [@Henry943](https://discuss.elastic.co/u/Henry943)\ **Replies:** 2\ **Last updated:** [December 11, 2021, 6:31pm UTC](https://discuss.elastic.co/t/elastic-agent-broken/278490 "2021-12-11T18:31:44Z")
Thank you for providing such an wonderful tool to monitor and logs. But unfortunately recent times Elastic agent corrupted frequently. Elastic Agent is installed but currently broken: service exists but installation pa… --- ## [Filebeat утекает память](https://discuss.elastic.co/t/filebeat/291510)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 3:50pm UTC](https://discuss.elastic.co/t/filebeat/291510 "2021-12-11T15:50:22Z")
На ВМке имеется примерно около 100 000 лог файлов, характеристики ВМ OS Windows Server 2019, CPU 4, ОЗУ 4Гб. Для сбора логов и последующей их отправки в logstash используется filebeat 7.16.0. После запуска filebeat начин… --- ## [Index roll over every 30 minutes](https://discuss.elastic.co/t/index-roll-over-every-30-minutes/290788)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [December 11, 2021, 5:35pm UTC](https://discuss.elastic.co/t/index-roll-over-every-30-minutes/290788 "2021-12-11T17:35:24Z")
Hello All, We have a logstash set up where input is based on a file. Logstash parses the file and an index is created. A new file ends up for processing every 30 minutes. We want a new index to be created every time a… --- ## [Filebeat not working](https://discuss.elastic.co/t/filebeat-not-working/291337)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 2\ **Last updated:** [December 11, 2021, 4:25pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337 "2021-12-11T16:25:19Z")
Filebeat is not logging logs from a path. Here is my filebeat config - filebeat.inputs: type: log enabled: true paths: /var/log/xyz/\*/ \*.log input\_type: log json.keys\_under\_root: true json.add\_error\_key: true j… --- ## [Deploying E+K onto AWD EKS cluster, multiple subnets and nodegroups across 2 az's](https://discuss.elastic.co/t/deploying-e-k-onto-awd-eks-cluster-multiple-subnets-and-nodegroups-across-2-azs/291413)
**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\ **Replies:** 1\ **Last updated:** [December 11, 2021, 10:01am UTC](https://discuss.elastic.co/t/deploying-e-k-onto-awd-eks-cluster-multiple-subnets-and-nodegroups-across-2-azs/291413 "2021-12-11T10:01:57Z")
Hi all I"m wanting to deploy Elasticsearc and Kibana onto a AWS EKS cluster. The cluster has 4 subnets, across 2 AZ's. Each of the AZ's have a dedicated set of nodes corralled into a node\_group. 2 subnets = app\_ng 2… --- ## [What is the correct way to support Global search across multiple document types?](https://discuss.elastic.co/t/what-is-the-correct-way-to-support-global-search-across-multiple-document-types/291388)
**Author:** [@abm\_a](https://discuss.elastic.co/u/abm_a)\ **Replies:** 3\ **Last updated:** [December 11, 2021, 9:23am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-support-global-search-across-multiple-document-types/291388 "2021-12-11T09:23:36Z")
Let's say in a Microservices architecture there are 100s of different entities and search needs to be supported that can look for matches in all those entities. I see a few ways of doing this. Create one index for each… --- ## [Dec 11th, 2021: \[en\] On a road trip with Transform](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532)
**Author:** [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532 "2021-12-11T08:00:01Z")
Are you already tired of hearing Christmas songs? One of the classics is "Driving home for Christmas". The lyrics of that song have not much content, Chris Rea basically tells about a long boring journey in his car drivi… --- ## [MySQL Query Equivalent In JDBC Static](https://discuss.elastic.co/t/mysql-query-equivalent-in-jdbc-static/290347)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [December 11, 2021, 6:28am UTC](https://discuss.elastic.co/t/mysql-query-equivalent-in-jdbc-static/290347 "2021-12-11T06:28:42Z")
hello, I have a query in MySQL and I was wondering what would the equal query in JDBC static with parameters be. Here's my query: select name from my\_table where inet\_aton('1.1.1.1') between ip\_from and ip\_to limit 1;… --- ## [Elasticsearch Scoring Inconsistency](https://discuss.elastic.co/t/elasticsearch-scoring-inconsistency/291488)
**Author:** [@powerte](https://discuss.elastic.co/u/powerte)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-scoring-inconsistency/291488 "2021-12-11T00:30:31Z")
Our API uses Elasticsearch to return results based on scoring (relevance). In our use case, it's important we consistently return documents in the same sort order. We currently see that queries with larger result sets … --- ## [Setting Up Kibana and Elasticsearch with Filebeat Module in ECK](https://discuss.elastic.co/t/setting-up-kibana-and-elasticsearch-with-filebeat-module-in-eck/291478)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 10:30pm UTC](https://discuss.elastic.co/t/setting-up-kibana-and-elasticsearch-with-filebeat-module-in-eck/291478 "2021-12-10T22:30:33Z")
Hi Folks, I'm trying out the K8s Operator (a.k.a. ECK) and so far, so good. However, I'm wondering what the right pattern is for, say, configuring Kibana and Elasticsearch with the Apache module. I know I can do it ad… --- ## [GROK Filter - Extract Year and Month](https://discuss.elastic.co/t/grok-filter-extract-year-and-month/291470)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 10:01pm UTC](https://discuss.elastic.co/t/grok-filter-extract-year-and-month/291470 "2021-12-10T22:01:45Z")
Hi.... I'm looking for some help on creating a new field based on a grok pattern. Here is the field in question: "last\_assessed\_for\_vulnerabilities": "2021-12-10T07:05:41.154Z" I'm looking to create the following fiel… --- ## [Filter out documents in Discover view that match a set of saved queries/searches?](https://discuss.elastic.co/t/filter-out-documents-in-discover-view-that-match-a-set-of-saved-queries-searches/291339)
**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 9:46pm UTC](https://discuss.elastic.co/t/filter-out-documents-in-discover-view-that-match-a-set-of-saved-queries-searches/291339 "2021-12-10T21:46:09Z")
My team is running a logging stack, where they need to follow up on error events in Kibana. Unfortunately, some errors take a while to get fixed, and some actually never get fixed because they are caused by external eve… --- ## [Error installing logstash codec plugin](https://discuss.elastic.co/t/error-installing-logstash-codec-plugin/291472)
**Author:** [@lucky7s](https://discuss.elastic.co/u/lucky7s)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 9:16pm UTC](https://discuss.elastic.co/t/error-installing-logstash-codec-plugin/291472 "2021-12-10T21:16:59Z")
I downloaded the logstash-codec-leef plugin from github and successfully ran 'build install' using jruby. All rspec tests succeed. When I try to install this plugin using 'sudo logstash-plugin install' I get the followi… --- ## [In which conditions does bootstrap.password actually work?](https://discuss.elastic.co/t/in-which-conditions-does-bootstrap-password-actually-work/291465)
**Author:** [@Niwa\_7](https://discuss.elastic.co/u/Niwa_7)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 8:29pm UTC](https://discuss.elastic.co/t/in-which-conditions-does-bootstrap-password-actually-work/291465 "2021-12-10T20:29:53Z")
Hi, I am trying to automate Elasticsearch 7.16 cluster deployment, including system user passwords. For that I'd add bootstrap.password to elastic keystore and use that password to set the permanent password for elastic … --- ## [SSL certificate issues after partial cluster migration \[ES 7.14\]](https://discuss.elastic.co/t/ssl-certificate-issues-after-partial-cluster-migration-es-7-14/291463)
**Author:** [@djordan66](https://discuss.elastic.co/u/djordan66)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 7:54pm UTC](https://discuss.elastic.co/t/ssl-certificate-issues-after-partial-cluster-migration-es-7-14/291463 "2021-12-10T19:54:59Z")
Hi all, I'm running into an issue migrating machines in a cluster. Quick breakdown of the setup: We had a cluster running in one site on one network subnet (network a). We are being ushered out of the building, so we b… --- ## [Problems with Logstash Pipeline to ElasticSearch](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936)
**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\ **Replies:** 12\ **Last updated:** [December 10, 2021, 7:51pm UTC](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936 "2021-12-10T19:51:48Z")
Hi i have some erros to up my logstash service as bellows \[2021-12-03T19:44:46,535\]\[INFO \]\[logstash.javapipeline \]\[KSC\] Pipeline terminated {"pipeline.id"=\>"KSC"} \[2021-12-03T19:44:46,550\]\[ERROR\]\[logstash.agent … --- ## [Configure logstash to receive different csv files with different fields](https://discuss.elastic.co/t/configure-logstash-to-receive-different-csv-files-with-different-fields/291451)
**Author:** [@sanchez](https://discuss.elastic.co/u/sanchez)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:16pm UTC](https://discuss.elastic.co/t/configure-logstash-to-receive-different-csv-files-with-different-fields/291451 "2021-12-10T18:16:08Z")
Hello good mornig for everyone I'm a beginner at Elasticsearch, Kibana, and Logstash I am trying to configure logstash to receive different csv files with different fields, how can I configure logstash to be able to de… --- ## [Log4j Critical Vulnerability](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:04pm UTC](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452 "2021-12-10T18:04:28Z")
Are there any recommendations from Elastic regarding NVD - CVE-2021-44228), a very serious log4j vulnerability announced today? --- ## [Rolling upgrade from 7.8.0-OSS to 7.15.2](https://discuss.elastic.co/t/rolling-upgrade-from-7-8-0-oss-to-7-15-2/291448)
**Author:** [@s.moran](https://discuss.elastic.co/u/s.moran)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 5:50pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-7-8-0-oss-to-7-15-2/291448 "2021-12-10T17:50:00Z")
We are trying to upgrade our 7.8.0-OSS cluster to 7.15.2 using an automated deployment method where all new nodes are added to the cluster before the old nodes are taken down 1-by-1. We have noticed that during deployme… --- ## [How to hide all the 'getting started/add data/' links](https://discuss.elastic.co/t/how-to-hide-all-the-getting-started-add-data-links/291285)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:25pm UTC](https://discuss.elastic.co/t/how-to-hide-all-the-getting-started-add-data-links/291285 "2021-12-10T17:25:10Z")
just trying to configure the system (kibana/elastic) for endusers. how can I avoid all the links to 'add data', links to '/home/app#' and everything else that is nice to have in a 'how to get started' mode. but I am … --- ## [EC2 cURL localhost:9200 - security\_exception](https://discuss.elastic.co/t/ec2-curl-localhost-9200-security-exception/291441)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:21pm UTC](https://discuss.elastic.co/t/ec2-curl-localhost-9200-security-exception/291441 "2021-12-10T17:21:37Z")
What is the simplest way to enable the health check of Elasticsearch? Do I have to set up AWS authentication, or can I bypass it for troubleshooting? Connected to an AWS EC2 instance using a .pem file. Elasticsearch is… --- ## [Rollup feature can't create job - Index pattern must match indices that contain time fields](https://discuss.elastic.co/t/rollup-feature-cant-create-job-index-pattern-must-match-indices-that-contain-time-fields/291436)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:07pm UTC](https://discuss.elastic.co/t/rollup-feature-cant-create-job-index-pattern-must-match-indices-that-contain-time-fields/291436 "2021-12-10T17:07:16Z")
Hi, I was exploring the rollup data feature, but i m not able to create a job via kibana UI, but i get the following error: Nevertheless i have date fields in the indice. Any ideas? Thanks, --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291397)
**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 4:53pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291397 "2021-12-10T16:53:15Z")
Hi, i'm try to parse the ngfw event with logstash in tcp port 5000 to Elasticsearch but the logstash-plain.log always said: "status"=\>400, "error"=\>{"type"=\>"ma … --- ## [ECK is not allowing to create Loadbalancer service](https://discuss.elastic.co/t/eck-is-not-allowing-to-create-loadbalancer-service/291408)
**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 3:52pm UTC](https://discuss.elastic.co/t/eck-is-not-allowing-to-create-loadbalancer-service/291408 "2021-12-10T15:52:36Z")
I have created the ECK cluster with different nodesets and trying to access the coordinating nodeset using a service loadbalancer i have followed below to create a type of Service type Loadbalancer. But it is giving … --- ## [Discrepancy between CPU usage shown in Kibana vs AWS cloud watch metrics](https://discuss.elastic.co/t/discrepancy-between-cpu-usage-shown-in-kibana-vs-aws-cloud-watch-metrics/291346)
**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\ **Replies:** 5\ **Last updated:** [December 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/discrepancy-between-cpu-usage-shown-in-kibana-vs-aws-cloud-watch-metrics/291346 "2021-12-10T15:24:49Z")
I run Elasticsearch on EC2 instances launched in AWS. I use version 7.11.2. I've been load testing searches and I see CPU spikes up to 100% on data nodes when I look in Kibana. However, in AWS cloud watch I never see CPU… --- ## [Error while sniffing nodes](https://discuss.elastic.co/t/error-while-sniffing-nodes/291186)
**Author:** [@Hayk\_Hovhanisyan](https://discuss.elastic.co/u/Hayk_Hovhanisyan)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 2:04pm UTC](https://discuss.elastic.co/t/error-while-sniffing-nodes/291186 "2021-12-10T14:04:00Z")
Environment: JDK 1.8.0\_301 Grails 5.0.2 Spring Boot 2.5.7 Groovy 3.0.7 Elasticsearch 7.10.2 (also tried 7.12.1) Situation: Hi dear colleagues, could you please clarify the error while sniffing nodes. Task: Running … --- ## [Doubts about how exclude events by the process name with filebeat](https://discuss.elastic.co/t/doubts-about-how-exclude-events-by-the-process-name-with-filebeat/290988)
**Author:** [@rdinis](https://discuss.elastic.co/u/rdinis)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 2:00pm UTC](https://discuss.elastic.co/t/doubts-about-how-exclude-events-by-the-process-name-with-filebeat/290988 "2021-12-10T14:00:22Z")
Hi, I'm trying to send logs to elastic from the file /var/logs/messages\* and i have a lot of logs from another agents of elastic. The file messages\* looks like this: Dec 1 16:50:03 machine\_name heartbeat: "status": "u… --- ## [Using a bucket key for filtering in the according aggregation](https://discuss.elastic.co/t/using-a-bucket-key-for-filtering-in-the-according-aggregation/291423)
**Author:** [@Marc\_Zahn](https://discuss.elastic.co/u/Marc_Zahn)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 12:27pm UTC](https://discuss.elastic.co/t/using-a-bucket-key-for-filtering-in-the-according-aggregation/291423 "2021-12-10T12:27:10Z")
Hello, maybe I searched for the wrong things, but I have a problem and don't know if it is possible to solve it: I have a terms aggregation where I need to filter the documents by matching the bucket keys against an inp… --- ## [Prune filter - Whitelist JSON subfields & per-pipeline log file](https://discuss.elastic.co/t/prune-filter-whitelist-json-subfields-per-pipeline-log-file/291298)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 11:49am UTC](https://discuss.elastic.co/t/prune-filter-whitelist-json-subfields-per-pipeline-log-file/291298 "2021-12-10T11:49:06Z")
Hi All, I've got a couple of questions! Can I whitelist only certain field from JSON using Prune? I saw similar topics suggesting ruby but wanted to avoid this as its a bit too complicated for me. For instance I'd li… --- ## [Not able to save Visualize or Query](https://discuss.elastic.co/t/not-able-to-save-visualize-or-query/291358)
**Author:** [@Luiz](https://discuss.elastic.co/u/Luiz)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 10:52am UTC](https://discuss.elastic.co/t/not-able-to-save-visualize-or-query/291358 "2021-12-10T10:52:09Z")
Hi all, I am not able to save new query or visualize in Kibana, I am getting message "An error occurred while saving. Error: Forbidden" I am using version 7.11.0. I have search about the error here and other forums all… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=755) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=757)