# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=759

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 760

---

## [Importing saved objects. - broken index pattern IDs](https://discuss.elastic.co/t/importing-saved-objects-broken-index-pattern-ids/291160)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 4:49pm UTC](https://discuss.elastic.co/t/importing-saved-objects-broken-index-pattern-ids/291160 "2021-12-08T16:49:45Z")

</div>

I recently moved some objects between kibana instances. I suspect this is the first time since I have done this since I upgraded to 7.14. When I imported them I was surprised not to be prompted to fix broken ids for in…

---

## [Parsing issues](https://discuss.elastic.co/t/parsing-issues/291159)

<div class="topic-metadata">

**Author:** [@nickel43](https://discuss.elastic.co/u/nickel43)\
**Replies:** 6\
**Last updated:** [December 8, 2021, 4:32pm UTC](https://discuss.elastic.co/t/parsing-issues/291159 "2021-12-08T16:32:13Z")

</div>

Hello, I have an issue with parsing my data. Here is a sample of JSON: { "info": { "generated\_on": "2017-12-03 08:41:42.057563", "slice": "0-999", "version": "v1" }, "playlists":…

---

## [APM Java Agent Security Update](https://discuss.elastic.co/t/apm-java-agent-security-update/289627)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [November 18, 2021, 5:41pm UTC](https://discuss.elastic.co/t/apm-java-agent-security-update/289627 "2021-11-18T17:41:52Z")

</div>

APM Java Agent Local Privilege Escalation issue (ESA-2021-29) A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with…

---

## [Logs Do Not Appear In APM, Although Correlation Info Is Present](https://discuss.elastic.co/t/logs-do-not-appear-in-apm-although-correlation-info-is-present/289720)

<div class="topic-metadata">

**Author:** [@Brandon\_Liles](https://discuss.elastic.co/u/Brandon_Liles)\
**Replies:** 13\
**Last updated:** [December 8, 2021, 1:55pm UTC](https://discuss.elastic.co/t/logs-do-not-appear-in-apm-although-correlation-info-is-present/289720 "2021-12-08T13:55:14Z")

</div>

Using version 7.15.2 of Elasticsearch, Kibana and APM. I have APM configured and can see transactions/traces. I have Serilog configured with the Elasticsearch sink and I am using the EcsTextFormatter. When I go to Logs \>…

---

## [Logstash Cannot Listen Port 5044 after fresh install](https://discuss.elastic.co/t/logstash-cannot-listen-port-5044-after-fresh-install/291191)

<div class="topic-metadata">

**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 12:33pm UTC](https://discuss.elastic.co/t/logstash-cannot-listen-port-5044-after-fresh-install/291191 "2021-12-08T12:33:23Z")

</div>

Hi, i'am freshly installed logstash but when i'm try to test connect with telnet \<logstash ip\> 5044 it says connection refused. Then when i check my network in logstash machine with netstat -plntu | grep 5044 it did…

---

## [Unable to deploy Logstash .. " Unable to configure plugins: Cannot evaluate \`${ELASTIC\_CERTIFICATE}\`. Replacement variable \`ELASTIC\_CERTIFICATE\` is not defined in a Logstash secret store or an environment entry and there is no default value given."](https://discuss.elastic.co/t/unable-to-deploy-logstash-unable-to-configure-plugins-cannot-evaluate-elastic-certificate-replacement-variable-elastic-certificate-is-not-defined-in-a-logstash-secret-store-or-an-environment-entry-and-there-is-no-default-value-given/291216)

<div class="topic-metadata">

**Author:** [@vishnu\_rao](https://discuss.elastic.co/u/vishnu_rao)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 12:29pm UTC](https://discuss.elastic.co/t/unable-to-deploy-logstash-unable-to-configure-plugins-cannot-evaluate-elastic-certificate-replacement-variable-elastic-certificate-is-not-defined-in-a-logstash-secret-store-or-an-environment-entry-and-there-is-no-default-value-given/291216 "2021-12-08T12:29:15Z")

</div>

Hello All I am trying to deploy logstash in our environment and I am seeing below error . I have created the secret with the Elastic Certificate ( .cer ) file .. but sill I am seeing the below error. Using bundled JD…

---

## [How to removes master-eligible nodes from elasticsearch cluster when master is not discovered](https://discuss.elastic.co/t/how-to-removes-master-eligible-nodes-from-elasticsearch-cluster-when-master-is-not-discovered/291210)

<div class="topic-metadata">

**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 11:34am UTC](https://discuss.elastic.co/t/how-to-removes-master-eligible-nodes-from-elasticsearch-cluster-when-master-is-not-discovered/291210 "2021-12-08T11:34:46Z")

</div>

I have an Elasticsearch cluster with three master nodes. Two of my master nodes VM's got corrupted so I am trying to remove them so that I can add newly created master node but I am unable to do so using the Voting confi…

---

## [Question about permission for file input \[Linux\]](https://discuss.elastic.co/t/question-about-permission-for-file-input-linux/291108)

<div class="topic-metadata">

**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\
**Replies:** 4\
**Last updated:** [December 8, 2021, 11:20am UTC](https://discuss.elastic.co/t/question-about-permission-for-file-input-linux/291108 "2021-12-08T11:20:04Z")

</div>

Hi, I have some scripts which download files and need to be read and deleted by logstash afterwards Regarding the permission, the files must be logstash:logstash or only the folder containing the files? Thanks !

---

## [Multiple inputs to multiple indices](https://discuss.elastic.co/t/multiple-inputs-to-multiple-indices/290171)

<div class="topic-metadata">

**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 10:37am UTC](https://discuss.elastic.co/t/multiple-inputs-to-multiple-indices/290171 "2021-12-08T10:37:17Z")

</div>

Hi! I'm new to the Elastic stack but have tried to learn to use it the last couple of weeks. I have Elasticsearch and Kibana running (I can at least use the DevTools) and I'm using Logstash to retrieve data from an MSSQ…

---

## [Click on metric visualisation to filter](https://discuss.elastic.co/t/click-on-metric-visualisation-to-filter/291142)

<div class="topic-metadata">

**Author:** [@lisajb](https://discuss.elastic.co/u/lisajb)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/click-on-metric-visualisation-to-filter/291142 "2021-12-08T10:19:58Z")

</div>

Hi all, very basic question but want to check I'm not going mad here - When using a dashboard to monitor logs, most types of visualisation can be clicked to set up a filter, filtering to just the part of the visualisati…

---

## [Defying synonyms for roman numbers doesn't seem to work](https://discuss.elastic.co/t/defying-synonyms-for-roman-numbers-doesnt-seem-to-work/291126)

<div class="topic-metadata">

**Author:** [@eliezra236](https://discuss.elastic.co/u/eliezra236)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 10:18am UTC](https://discuss.elastic.co/t/defying-synonyms-for-roman-numbers-doesnt-seem-to-work/291126 "2021-12-08T10:18:09Z")

</div>

Hi, I've been trying to set up roman numbers synonyms the following way: PUT testing\_index { "settings": { "analysis": { "analyzer": { "my\_custome\_analyzer": { "type": "custom", …

---

## [Need to include an external privacy notice in OIDC](https://discuss.elastic.co/t/need-to-include-an-external-privacy-notice-in-oidc/291204)

<div class="topic-metadata">

**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 9:43am UTC](https://discuss.elastic.co/t/need-to-include-an-external-privacy-notice-in-oidc/291204 "2021-12-08T09:43:45Z")

</div>

Hello community. Is there a way to include an external redirect to privacy notice. This strategy will follow the usual oidc authentication flow and will act as a consent form after the user has authenticated. Does Elast…

---

## [How to get positions of the matched string?](https://discuss.elastic.co/t/how-to-get-positions-of-the-matched-string/291199)

<div class="topic-metadata">

**Author:** [@wildansupernova](https://discuss.elastic.co/u/wildansupernova)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 9:34am UTC](https://discuss.elastic.co/t/how-to-get-positions-of-the-matched-string/291199 "2021-12-08T09:34:20Z")

</div>

Sorry I am new to Elasticsearch I have already searched through internet, some technique I found useful is around highlighting. But I want to ask is there any way to fulfill this scenario other than using highlighting. …

---

## [Geoshape query with pre-indexed shape and other fields?](https://discuss.elastic.co/t/geoshape-query-with-pre-indexed-shape-and-other-fields/291192)

<div class="topic-metadata">

**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 8:32am UTC](https://discuss.elastic.co/t/geoshape-query-with-pre-indexed-shape-and-other-fields/291192 "2021-12-08T08:32:07Z")

</div>

From the reference guide, it is possible to search geopoints by shapes contained in another index. This has a certain appeal for some analysis that I am trying to do akin to geofencing. I would like to know if it is po…

---

## [Logstash process taking more memory than configured](https://discuss.elastic.co/t/logstash-process-taking-more-memory-than-configured/291064)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 6\
**Last updated:** [December 8, 2021, 8:23am UTC](https://discuss.elastic.co/t/logstash-process-taking-more-memory-than-configured/291064 "2021-12-08T08:23:45Z")

</div>

Hi there. Question in regards to some weird behavior I am noticing on all of our logstash servers. We are running 7.13.4 currently. The problem is related to logstash seemingly taking more memory than I have configured i…

---

## [Dec 8th, 2021: \[pt-br\] Interface Otimista no Kibana com React Query](https://discuss.elastic.co/t/dec-8th-2021-pt-br-interface-otimista-no-kibana-com-react-query/290812)

<div class="topic-metadata">

**Author:** [@Paulo\_Henrique](https://discuss.elastic.co/u/Paulo_Henrique)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2021-pt-br-interface-otimista-no-kibana-com-react-query/290812 "2021-12-08T08:00:17Z")

</div>

Esse artigo também está disponível em Inglês "Como o uso de Optimistic UI (Interface Otimista), pode melhorar a experiência para os usuários." Introdução Se você já ouviu falar da biblioteca React Query, deve saber o qu…

---

## [Dec 8th, 2021: \[en\] Optimistic UI in Kibana with React Query](https://discuss.elastic.co/t/dec-8th-2021-en-optimistic-ui-in-kibana-with-react-query/289214)

<div class="topic-metadata">

**Author:** [@Paulo\_Henrique](https://discuss.elastic.co/u/Paulo_Henrique)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2021-en-optimistic-ui-in-kibana-with-react-query/289214 "2021-12-08T08:00:17Z")

</div>

This article is also available in pt-br "Sometimes the use of the Optimistic UI approach is what you need to enhance the experience for our users." Overview If you are familiar with React Query, you know it is easy to u…

---

## [Nested Vs. Parent/Child](https://discuss.elastic.co/t/nested-vs-parent-child/291189)

<div class="topic-metadata">

**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 7:39am UTC](https://discuss.elastic.co/t/nested-vs-parent-child/291189 "2021-12-08T07:39:12Z")

</div>

Hi, i am assigned to work on a people-to-follow suggestion list in a social media app. The list will be based on user contacts, facebook friends, people the user is interacting with, and nearby people according to geo-l…

---

## [Remove \_id, \_index, \_score, \_type fields from index by logstash](https://discuss.elastic.co/t/remove-id-index-score-type-fields-from-index-by-logstash/290283)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 7:05am UTC](https://discuss.elastic.co/t/remove-id-index-score-type-fields-from-index-by-logstash/290283 "2021-12-08T07:05:11Z")

</div>

I want to delete above fields from event in Elasticsearch from logstash config

---

## [Editing a Visualization - Application Not Found Error](https://discuss.elastic.co/t/editing-a-visualization-application-not-found-error/291178)

<div class="topic-metadata">

**Author:** [@blissweb](https://discuss.elastic.co/u/blissweb)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 5:56am UTC](https://discuss.elastic.co/t/editing-a-visualization-application-not-found-error/291178 "2021-12-08T05:56:55Z")

</div>

Hello. I've imported some dashboards using the metricbeat import dashboards feature from the yml file. I see the dashboards, they work ok, but when I try to edit a particular visualization to make changes it says "Appl…

---

## [Aggregate fields to an array fields](https://discuss.elastic.co/t/aggregate-fields-to-an-array-fields/291024)

<div class="topic-metadata">

**Author:** [@RichYaNa](https://discuss.elastic.co/u/RichYaNa)\
**Replies:** 7\
**Last updated:** [December 8, 2021, 3:18am UTC](https://discuss.elastic.co/t/aggregate-fields-to-an-array-fields/291024 "2021-12-08T03:18:45Z")

</div>

Hi, I have some output here from my logstash filter: { "taskid" =\> "123", "host" =\> "ubuntu" }, { "taskid" =\> "123", "host" =\> "centos" } is it possible to aggregate that field to be like this: { "taskid"…

---

## [Elastic Agent Integration: File Integrity Monitoring (FIM)](https://discuss.elastic.co/t/elastic-agent-integration-file-integrity-monitoring-fim/290448)

<div class="topic-metadata">

**Author:** [@morgan.atwood](https://discuss.elastic.co/u/morgan.atwood)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 3:10am UTC](https://discuss.elastic.co/t/elastic-agent-integration-file-integrity-monitoring-fim/290448 "2021-12-08T03:10:10Z")

</div>

Will the elastic agent/endpoint eventually have file integrity monitoring like Auditbeat in the future? Looking for options to replace TrendMicro but it looks like I'll have to use auditbeat or osquery with the elastic a…

---

## [Upgrade to ES 7.15.2 and Kibana not working](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098)

<div class="topic-metadata">

**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\
**Replies:** 8\
**Last updated:** [December 8, 2021, 1:39am UTC](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098 "2021-12-08T01:39:02Z")

</div>

I have upgraded ES/Kibana/Logstash from v7.62. to v7.15.2. All installations are success but KIBANA services started with error. Can someone help me with the below error? I have no idea how to resolved it. Kibana log …

---

## [🎉 Elastic Stack 7.16 released](https://discuss.elastic.co/t/elastic-stack-7-16-released/291163)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 9:43pm UTC](https://discuss.elastic.co/t/elastic-stack-7-16-released/291163 "2021-12-07T21:43:43Z")

</div>

New in Elastic 7.16 Drive results that matter, faster, with new integrations for third-party tools and services and CI/CD pipeline integrations. Elastic 7.16 streamlines the process of getting any type of data, from any …

---

## [Kibana - Calculate range of time like hours](https://discuss.elastic.co/t/kibana-calculate-range-of-time-like-hours/290986)

<div class="topic-metadata">

**Author:** [@redsegsolucoes](https://discuss.elastic.co/u/redsegsolucoes)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 9:25pm UTC](https://discuss.elastic.co/t/kibana-calculate-range-of-time-like-hours/290986 "2021-12-07T21:25:47Z")

</div>

I would like to know how to calculate dates inside Kibana, for example, (end\_date - start\_date), How long does it take for a driver to get from city A to city B? is possible to do this calculation inside Query DSL and …

---

## [Supported compression algorithms?](https://discuss.elastic.co/t/supported-compression-algorithms/291157)

<div class="topic-metadata">

**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 8:16pm UTC](https://discuss.elastic.co/t/supported-compression-algorithms/291157 "2021-12-07T20:16:21Z")

</div>

Hello, I would like to know what compression algorithms logstash pipelines can work with? For example, if i have a pipeline polling a webserver that sends compressed data, will the logstash pipeline only automatically d…

---

## [Unable to get list /load any plugin in logstash](https://discuss.elastic.co/t/unable-to-get-list-load-any-plugin-in-logstash/291155)

<div class="topic-metadata">

**Author:** [@Vipin\_Johar](https://discuss.elastic.co/u/Vipin_Johar)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 8:07pm UTC](https://discuss.elastic.co/t/unable-to-get-list-load-any-plugin-in-logstash/291155 "2021-12-07T20:07:28Z")

</div>

Hi , i am trying to load plugin in logstash but getting the message "Using bundled JDK: "", could you please help here.

---

## [Rename process of logstash in linux](https://discuss.elastic.co/t/rename-process-of-logstash-in-linux/291156)

<div class="topic-metadata">

**Author:** [@Thuy\_Le1](https://discuss.elastic.co/u/Thuy_Le1)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 8:02pm UTC](https://discuss.elastic.co/t/rename-process-of-logstash-in-linux/291156 "2021-12-07T20:02:18Z")

</div>

at the moment when we run logstash from ./bin/logstash -f logstash\_file.conf the process name is java, how we change to logstash??

---

## [Kibana stop working](https://discuss.elastic.co/t/kibana-stop-working/291086)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [December 7, 2021, 7:03pm UTC](https://discuss.elastic.co/t/kibana-stop-working/291086 "2021-12-07T19:03:09Z")

</div>

working kibana stop working here is message that comes up when I try to access kibana:5601 {"type":"log","@timestamp":"2021-12-06T19:18:16-06:00","tags":\["error","plugins","taskManager"\],"pid":3497,"message":"Failed to…

---

## [Error GETting document](https://discuss.elastic.co/t/error-getting-document/291143)

<div class="topic-metadata">

**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 5:54pm UTC](https://discuss.elastic.co/t/error-getting-document/291143 "2021-12-07T17:54:07Z")

</div>

I PUT a document to index foo\_multi\_import\_20211207, and it results in an id of IGzLlX0B4Xv88DkYMDQL Then I GET the document with GET foo\_multi\_import\_20211207/IGzLlX0B4Xv88DkYMDQL, but get the error { "error" : "Inc…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=758)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=760)
