# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=915 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 916 --- ## [Metricbeat to Logstash to ElasticSearch - Cannot See Any Hosts Defined, But Data Is Definitely Coming In](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 8\ **Last updated:** [June 14, 2021, 7:46pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715 "2021-06-14T19:46:03Z")
For background information, I've tried following instructions in these posts and am still encountering an issue: Kibana Metrics – 500 Internal Server Error Host data wont populate in dashboards when upgrading beats fro… --- ## [Elastic Agent 7.13.1 keeps degrading endpoint security for macOS](https://discuss.elastic.co/t/elastic-agent-7-13-1-keeps-degrading-endpoint-security-for-macos/275207)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 7:17pm UTC](https://discuss.elastic.co/t/elastic-agent-7-13-1-keeps-degrading-endpoint-security-for-macos/275207 "2021-06-14T19:17:20Z")
The endpoint security for macOS keeps getting to the status 'DEGRADED'. I simply create a new policy, add endpoint security to the policy and enroll the fleet-agent with the provided command. Full-Disk Access Permission… --- ## [Logstash multiple pipeline configuration using logstash helm chart](https://discuss.elastic.co/t/logstash-multiple-pipeline-configuration-using-logstash-helm-chart/275880)
**Author:** [@arijitc](https://discuss.elastic.co/u/arijitc)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipeline-configuration-using-logstash-helm-chart/275880 "2021-06-14T17:47:37Z")
While configuring multiple pipeline using logstash (version 7.13.1) helm chart , the values.yaml is having a section # Allows you to add any pipeline files in /usr/share/logstash/pipeline/ ### \*\*\*warn\*\*\* there is a hard… --- ## [Split and store tags](https://discuss.elastic.co/t/split-and-store-tags/275866)
**Author:** [@rodrigue](https://discuss.elastic.co/u/rodrigue)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 5:43pm UTC](https://discuss.elastic.co/t/split-and-store-tags/275866 "2021-06-14T17:43:58Z")
Hello, Sorry to bother you but I tried everything... Il simply would like to take tags from my json and store it as a tag in logstash... Here is my configuration input { http { port =\> "5046" tags… --- ## [Elastic Search 7.13.1 Cluster bootstrapping error](https://discuss.elastic.co/t/elastic-search-7-13-1-cluster-bootstrapping-error/275858)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 5:19pm UTC](https://discuss.elastic.co/t/elastic-search-7-13-1-cluster-bootstrapping-error/275858 "2021-06-14T17:19:01Z")
I configured two nodes on two Linux VMs and it is working. Currently trying to setup a third node on the cluster in my local windows machine. Getting the errors below \[node-3\] failed to join {node-1}{3eMmu1kVQtuB95A1KX… --- ## [Logstash TCP input splits events unintentionally](https://discuss.elastic.co/t/logstash-tcp-input-splits-events-unintentionally/275811)
**Author:** [@cyber\_crab](https://discuss.elastic.co/u/cyber_crab)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 4:49pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-splits-events-unintentionally/275811 "2021-06-14T16:49:48Z")
Hi guys, I have an issue with one of the Logstash pipelines in our stack. The incoming CEF logs from Cyberark sometimes get split into two events for no apparent reason. I ran tcpdump on the port to which CYA is suppose… --- ## [Aggregate filter timeouts and input completion](https://discuss.elastic.co/t/aggregate-filter-timeouts-and-input-completion/275719)
**Author:** [@jratliff](https://discuss.elastic.co/u/jratliff)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 4:42pm UTC](https://discuss.elastic.co/t/aggregate-filter-timeouts-and-input-completion/275719 "2021-06-14T16:42:55Z")
I am using logstash to read events from elasticsearch and the aggregate filter to condense them. Because the data I am condensing has no clear start/stop events, we are using the timeout and inactivity\_timeout settings … --- ## [Parsing XML document contained in a field](https://discuss.elastic.co/t/parsing-xml-document-contained-in-a-field/275037)
**Author:** [@fmaginga](https://discuss.elastic.co/u/fmaginga)\ **Replies:** 4\ **Last updated:** [June 14, 2021, 4:40pm UTC](https://discuss.elastic.co/t/parsing-xml-document-contained-in-a-field/275037 "2021-06-14T16:40:10Z")
We have written a logstash configuration file with kv filter plugin to extract key-value pairs successfully. Some of the values is the keys contains XML documents as example below. What is the better way to parse the XML… --- ## [By terms grouped data show the same value in time series](https://discuss.elastic.co/t/by-terms-grouped-data-show-the-same-value-in-time-series/275422)
**Author:** [@Michael\_Kramer](https://discuss.elastic.co/u/Michael_Kramer)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/by-terms-grouped-data-show-the-same-value-in-time-series/275422 "2021-06-14T16:09:31Z")
So I am trying to show the size of multiple folders over time in a time series diagram. The Data is formated like this: "Folder": \[ {"ID":1, "Path":"/boot", "Size\_in\_B":139174528 }, {"ID":2, "Path":"/bin", "Size\_in\_B":… --- ## [Elasticsearch cluster performance looks not enough?](https://discuss.elastic.co/t/elasticsearch-cluster-performance-looks-not-enough/274498)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 4\ **Last updated:** [June 14, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance-looks-not-enough/274498 "2021-06-14T15:44:46Z")
Hi, I'm using elasticserach stack version 7.10.1 for all components. on my elasticsearch cluster, I have daily about 108 870 033 documents. filter on discovery section (24h) 82 620 778 hits filebeat 26 249 255 hits… --- ## [I cannot log in to Elastic Enterprise Search](https://discuss.elastic.co/t/i-cannot-log-in-to-elastic-enterprise-search/274011)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 17\ **Last updated:** [June 14, 2021, 3:28pm UTC](https://discuss.elastic.co/t/i-cannot-log-in-to-elastic-enterprise-search/274011 "2021-06-14T15:28:24Z")
Elastic Enterprise Search has been installed. After executing the following command, I was able to see the login screen from a browser. ENT\_SEARCH\_DEFAULT\_PASSWORD=\[REDACTED\] bin/enterprise-search. Even if I enter the… --- ## [Why flebeat Tomcat dashboard is not in my kibana](https://discuss.elastic.co/t/why-flebeat-tomcat-dashboard-is-not-in-my-kibana/275641)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 3:25pm UTC](https://discuss.elastic.co/t/why-flebeat-tomcat-dashboard-is-not-in-my-kibana/275641 "2021-06-14T15:25:32Z")
Hello, when i give log path to tomcat.yml in filebeat , where my logs will visualize. i cant able to find a seperate dashboard for fiilebeat tomcat in kibana. --- ## [Display a gauge from the time of the last received log](https://discuss.elastic.co/t/display-a-gauge-from-the-time-of-the-last-received-log/274088)
**Author:** [@ATEADSGEO](https://discuss.elastic.co/u/ATEADSGEO)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 2:59pm UTC](https://discuss.elastic.co/t/display-a-gauge-from-the-time-of-the-last-received-log/274088 "2021-06-14T14:59:26Z")
Hello, I am begining in kibana/ELK. In a monitoring dashboard, I would like to display an 'alert' if the last received log is becoming old. The gauge seems to be adapted : green if last log is newer than 1 minute, then… --- ## [How to calculate cumulative sum on date/time difference?](https://discuss.elastic.co/t/how-to-calculate-cumulative-sum-on-date-time-difference/275707)
**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-calculate-cumulative-sum-on-date-time-difference/275707 "2021-06-14T14:34:16Z")
Dear all, I have documents in my index with two Date/Time fields: "Created" and "Closed". Now I want to know how many documents exist at a time on a timeline where the relative time, that is the one currently displayed/… --- ## [Use field of a document as range's value in a Goal Visualization](https://discuss.elastic.co/t/use-field-of-a-document-as-ranges-value-in-a-goal-visualization/275799)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 4\ **Last updated:** [June 14, 2021, 2:14pm UTC](https://discuss.elastic.co/t/use-field-of-a-document-as-ranges-value-in-a-goal-visualization/275799 "2021-06-14T14:14:09Z")
Good morning! I would like to know if it's possible to use a field's value of a document as superior range's value in a Goal Visualization. My intention is indicate the total number of monitors in that field of the Goa… --- ## [Generate CSR / Template to the SSL certificate](https://discuss.elastic.co/t/generate-csr-template-to-the-ssl-certificate/275761)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 2:13pm UTC](https://discuss.elastic.co/t/generate-csr-template-to-the-ssl-certificate/275761 "2021-06-14T14:13:03Z")
Hi, I have a question about adding non self-sign certificates to Elastic Stack. What is the issue of generating CSRs and what is required in the template for certifications for Elastic Stack? What encryption with cert… --- ## [Deploying Kibana build without test script](https://discuss.elastic.co/t/deploying-kibana-build-without-test-script/275782)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 2:07pm UTC](https://discuss.elastic.co/t/deploying-kibana-build-without-test-script/275782 "2021-06-14T14:07:08Z")
Hi Team, I want to understand , is there any risk of commenting out test cases in kibana 7.10.2 "test": "grunt test" --- ## [Percentage of total calculation](https://discuss.elastic.co/t/percentage-of-total-calculation/275661)
**Author:** [@didiViking](https://discuss.elastic.co/u/didiViking)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:51pm UTC](https://discuss.elastic.co/t/percentage-of-total-calculation/275661 "2021-06-14T13:51:08Z")
Hi there, I'm filtering the requests by request\_length in order to get specific categories (request\_length between 0 and 3mb etc). The next step is to calculate how much of the total (in percentage) that specific catego… --- ## [Write Logstash Data to a File While Preserving Original File Name](https://discuss.elastic.co/t/write-logstash-data-to-a-file-while-preserving-original-file-name/275841)
**Author:** [@Rod\_Guiamoy](https://discuss.elastic.co/u/Rod_Guiamoy)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 1:50pm UTC](https://discuss.elastic.co/t/write-logstash-data-to-a-file-while-preserving-original-file-name/275841 "2021-06-14T13:50:53Z")
Basically I'd like to have Logstash capture the original file name and reusing it when writing the logs to another location. As if you've just copy/pasted it. Use case would be for IIS logs where using \*.log captures all… --- ## [Elasticsearch aggregation from springboot](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689 "2021-06-14T13:48:46Z")
Hello, I am trying to get all the values for a filed with count using Aggregation Here is my code Query searchQuery = new NativeSearchQueryBuilder() .withQuery(QueryBuilders.matchAllQuery()) … --- ## [Error parsing timestamp](https://discuss.elastic.co/t/error-parsing-timestamp/275795)
**Author:** [@lani](https://discuss.elastic.co/u/lani)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:31pm UTC](https://discuss.elastic.co/t/error-parsing-timestamp/275795 "2021-06-14T13:31:01Z")
Hi everyone, i have a weird log parsing error I failed to solve, maybe someone here can assist me. I have a docker container shipping logs in this (simple?) format: 2021-06-14 08:30:14 ERROR Some message I am shippin… --- ## [How can i make exactly same table as this table in kibana with that line graph included in datatable](https://discuss.elastic.co/t/how-can-i-make-exactly-same-table-as-this-table-in-kibana-with-that-line-graph-included-in-datatable/273166)
**Author:** [@Jay\_Gajjar](https://discuss.elastic.co/u/Jay_Gajjar)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-make-exactly-same-table-as-this-table-in-kibana-with-that-line-graph-included-in-datatable/273166 "2021-06-14T13:28:53Z")
--- ## [Authentication using apikey failed](https://discuss.elastic.co/t/authentication-using-apikey-failed/273066)
**Author:** [@nfarmer](https://discuss.elastic.co/u/nfarmer)\ **Replies:** 6\ **Last updated:** [June 14, 2021, 1:27pm UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed/273066 "2021-06-14T13:27:15Z")
So I recently had to reset my ELK stack, because I was having crazy issues I couldn't fix. Without realizing it, and after looking at the logs, I saw that also killed all of my api keys. \[2021-05-14T20:39:26,217\]\[WARN \]… --- ## [Redirecto only to specific dashboard in Kibana behind Nginx reverse proxy](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 1:25pm UTC](https://discuss.elastic.co/t/redirecto-only-to-specific-dashboard-in-kibana-behind-nginx-reverse-proxy/273052 "2021-06-14T13:25:59Z")
Hi. I'm using nginx as a reverse proxy to auto-authenticate a dashboard iframe (via share) in another server.... So far i have this: server { listen 443 ssl http2 default\_server; ssl\_certificate… --- ## [When does Logstash update last\_run\_metadata\_path?](https://discuss.elastic.co/t/when-does-logstash-update-last-run-metadata-path/275833)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 1:21pm UTC](https://discuss.elastic.co/t/when-does-logstash-update-last-run-metadata-path/275833 "2021-06-14T13:21:07Z")
Hi all, I am working with Logstash 7.13.0 & ES 7.13.0 to populate and maintain an index with records from an Oracle DB. The maintenance is achieved by running an update Logstash service every minute. The condition to be… --- ## [Packetbeat deployed using ECK crashes](https://discuss.elastic.co/t/packetbeat-deployed-using-eck-crashes/274791)
**Author:** [@Ahmad\_Al-Masry](https://discuss.elastic.co/u/Ahmad_Al-Masry)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 1:12pm UTC](https://discuss.elastic.co/t/packetbeat-deployed-using-eck-crashes/274791 "2021-06-14T13:12:21Z")
I have started elastic 7.13 cluster using ECK 1.6.0, packetbeat pods keep crashing with the following error: ERROR instance/beat.go:989 Exiting: sniffer loop failed: Sniffing error: Read Error Exiting: sniffer loop fa… --- ## [Aggregate multiple nested (recursive) logstash](https://discuss.elastic.co/t/aggregate-multiple-nested-recursive-logstash/275621)
**Author:** [@maxi99](https://discuss.elastic.co/u/maxi99)\ **Replies:** 10\ **Last updated:** [June 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/aggregate-multiple-nested-recursive-logstash/275621 "2021-06-14T13:03:05Z")
I am using logstash with input jdbc, and would like to embed one object inside another with aggregate. How can I use add recursive? Ie add an object inside another object? My jdbc input would return output similar (as … --- ## [Build Custom Subversion](https://discuss.elastic.co/t/build-custom-subversion/275753)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 12:54pm UTC](https://discuss.elastic.co/t/build-custom-subversion/275753 "2021-06-14T12:54:53Z")
Hi everyone! I have cloned kibana github! I want to create .deb with custom version, e.g: v7.10.1.1 but every time i run yarn build , the output deb package's version is 7.10.1-SNAPSHOT thanks :heartbeat: --- ## [Field.keyword is not getting populated with the values from field](https://discuss.elastic.co/t/field-keyword-is-not-getting-populated-with-the-values-from-field/275622)
**Author:** [@nitish012](https://discuss.elastic.co/u/nitish012)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 11:13am UTC](https://discuss.elastic.co/t/field-keyword-is-not-getting-populated-with-the-values-from-field/275622 "2021-06-14T11:13:39Z")
Hi Folks, I am trying to create a visualize in Kibana which will have a URL which will be formatted using the value in the field something like this: https://dashboard?branch={{value}}&id=CPP But I can see the value p… --- ## [Error message LEAK: ByteBuf.release() in /var/log/logstash-plain.log](https://discuss.elastic.co/t/error-message-leak-bytebuf-release-in-var-log-logstash-plain-log/275824)
**Author:** [@jgkootstra](https://discuss.elastic.co/u/jgkootstra)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 10:38am UTC](https://discuss.elastic.co/t/error-message-leak-bytebuf-release-in-var-log-logstash-plain-log/275824 "2021-06-14T10:38:23Z")
io.netty.util.ResourceLeakDetector\] LEAK: ByteBuf.release() was not called before it's garbage-collected. See https://netty.io/wiki/reference-counted-objects.html for more information. for more information. What does th… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=914) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=916)