# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=922

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 923

---

## [Is elastic.co site down?](https://discuss.elastic.co/t/is-elastic-co-site-down/275282)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 11:19am UTC](https://discuss.elastic.co/t/is-elastic-co-site-down/275282 "2021-06-08T11:19:54Z")

</div>

I'm unable to see the elastic website. :strange

---

## [Match phrase prefix query stopped working for multiple terms after 7.10.2](https://discuss.elastic.co/t/match-phrase-prefix-query-stopped-working-for-multiple-terms-after-7-10-2/272293)

<div class="topic-metadata">

**Author:** [@Sleepy\_Panda](https://discuss.elastic.co/u/Sleepy_Panda)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 10:44am UTC](https://discuss.elastic.co/t/match-phrase-prefix-query-stopped-working-for-multiple-terms-after-7-10-2/272293 "2021-06-08T10:44:29Z")

</div>

Issue: search using match\_phrase\_prefix does not return results for queries which consist of multiple terms, e.g. "Additional HTTP". ElasticSearch 7.10.2: document is returned when searching "Additional HTTP" ElasticSe…

---

## [Filter records with a change in a particular field during a period](https://discuss.elastic.co/t/filter-records-with-a-change-in-a-particular-field-during-a-period/275018)

<div class="topic-metadata">

**Author:** [@Eugene\_Korepanov](https://discuss.elastic.co/u/Eugene_Korepanov)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 10:41am UTC](https://discuss.elastic.co/t/filter-records-with-a-change-in-a-particular-field-during-a-period/275018 "2021-06-08T10:41:37Z")

</div>

I have multiple hosts reporting some fields every day. I need to find sources that got a change in a value of a particular field. Let's say yesterday "field1" was 0 and today 1. In addition to that, I need to build a ta…

---

## [Is jars used in modules can be reused?](https://discuss.elastic.co/t/is-jars-used-in-modules-can-be-reused/275281)

<div class="topic-metadata">

**Author:** [@mohammed\_rizwan](https://discuss.elastic.co/u/mohammed_rizwan)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 9:59am UTC](https://discuss.elastic.co/t/is-jars-used-in-modules-can-be-reused/275281 "2021-06-08T09:59:44Z")

</div>

Hi team, We are using the elastic search 7.13.0. We observed that the same jars are available (repeated) in multiple module folders, say httpclient-4.5.10.jar is available in 5 modules. Is it possible to have this jar…

---

## ["\[term\] query malformed, no start\_object after query name"](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/275275)

<div class="topic-metadata">

**Author:** [@SeanO95](https://discuss.elastic.co/u/SeanO95)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 9:38am UTC](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/275275 "2021-06-08T09:38:44Z")

</div>

Hey guys, seeing 'query malformed' no matter what field I try to use. I am trying to use postman to input data for my GET to pull back but seeing this issue. If I use postman to input data into my POST using the same m…

---

## [Logstash ERROR \`block in controlled\_read'](https://discuss.elastic.co/t/logstash-error-block-in-controlled-read/275269)

<div class="topic-metadata">

**Author:** [@oduvancheg666](https://discuss.elastic.co/u/oduvancheg666)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 9:01am UTC](https://discuss.elastic.co/t/logstash-error-block-in-controlled-read/275269 "2021-06-08T09:01:53Z")

</div>

Hello. Logstash version 7.3.0 gets the error: \[2021-06-08T10:13:48,304\]\[ERROR\]\[filewatch.tailmode.handlers.grow\] read\_to\_eof: general error reading //PC/C$/inetpub/logs/LogFiles/W3SVC2/u\_ex210608.log {"error"=\>"#\<System…

---

## [InputStream must have \> 0 bytes](https://discuss.elastic.co/t/inputstream-must-have-0-bytes/275265)

<div class="topic-metadata">

**Author:** [@Mohammed\_Shamran](https://discuss.elastic.co/u/Mohammed_Shamran)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 8:52am UTC](https://discuss.elastic.co/t/inputstream-must-have-0-bytes/275265 "2021-06-08T08:52:59Z")

</div>

Hi Im getting following error when my Elasticsearch reindexing content. Any idea why Im getting this error and how can I configure elasticsearch to ignore this error? 2021-06-08 08:00:10.592 ERROR 38 --- \[deployment-3\]…

---

## [\_flush/synced command shows failures after being clean - indexing stopped](https://discuss.elastic.co/t/flush-synced-command-shows-failures-after-being-clean-indexing-stopped/274964)

<div class="topic-metadata">

**Author:** [@kredfern](https://discuss.elastic.co/u/kredfern)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 8:37am UTC](https://discuss.elastic.co/t/flush-synced-command-shows-failures-after-being-clean-indexing-stopped/274964 "2021-06-08T08:37:17Z")

</div>

Just wondering if the following behavior can be explained so that we have confidence to continue the rolling restart procedure. We are using v7.4 cluster. We have stopped all indexing into the cluster before these step…

---

## [Cluster Red, many shards Unassigned](https://discuss.elastic.co/t/cluster-red-many-shards-unassigned/275236)

<div class="topic-metadata">

**Author:** [@sakrayaami](https://discuss.elastic.co/u/sakrayaami)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 7:04am UTC](https://discuss.elastic.co/t/cluster-red-many-shards-unassigned/275236 "2021-06-08T07:04:56Z")

</div>

Hello, I'm very new to the community and here I am after some months of reading and configuring :slight\_smile: Ok I'm trying to work out a problem with my new cluster, I have the following setup: Elastic 7.13 2 Maste…

---

## [Производительность работы на разных процессорах](https://discuss.elastic.co/t/topic/275251)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 8:12am UTC](https://discuss.elastic.co/t/topic/275251 "2021-06-08T08:12:20Z")

</div>

Коллеги здравствуйте! Мы собираемся создать новый кластер и наш хостер предлагает различные варианты процессоров. Раньше мы запускали только на серверных процессорах Intel Xeon E, но сейчас появилась возможность использ…

---

## [Grok pattern(s) working in debugger but not used in logstash?](https://discuss.elastic.co/t/grok-pattern-s-working-in-debugger-but-not-used-in-logstash/274602)

<div class="topic-metadata">

**Author:** [@3lastic](https://discuss.elastic.co/u/3lastic)\
**Replies:** 14\
**Last updated:** [June 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/grok-pattern-s-working-in-debugger-but-not-used-in-logstash/274602 "2021-06-08T08:04:07Z")

</div>

Hello, I try to get Sophos Firewall logs into logstash (which is working) but my grok filter to get the logline separated into fields is not working. The test via grok debugger is working... Here are my logstash conf f…

---

## [Elastic Training- Observability](https://discuss.elastic.co/t/elastic-training-observability/275194)

<div class="topic-metadata">

**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 7:56am UTC](https://discuss.elastic.co/t/elastic-training-observability/275194 "2021-06-08T07:56:14Z")

</div>

The current Elasticsearch observability course is scheduled for: June 28 -July 1, 2021 9:00 am -3:00 pm America - Chicago Time zone However, there are no other time slots listed. When and how often are these courses …

---

## [How to install logstash-integration-jdbc plugin](https://discuss.elastic.co/t/how-to-install-logstash-integration-jdbc-plugin/275241)

<div class="topic-metadata">

**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\
**Replies:** 0\
**Last updated:** [June 8, 2021, 7:33am UTC](https://discuss.elastic.co/t/how-to-install-logstash-integration-jdbc-plugin/275241 "2021-06-08T07:33:04Z")

</div>

I'm trying to install logstash-integration-jdbc following this git logstash-integration-jdbc running logstash 7.12.1 I've installed jruby $ jruby --version jruby 9.1.17.0 (2.3.3) 2020-02-29 fffffff OpenJDK 64-Bit Ser…

---

## [Recommended workflow for indexing many binary docs](https://discuss.elastic.co/t/recommended-workflow-for-indexing-many-binary-docs/275142)

<div class="topic-metadata">

**Author:** [@ottadini](https://discuss.elastic.co/u/ottadini)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 6:50am UTC](https://discuss.elastic.co/t/recommended-workflow-for-indexing-many-binary-docs/275142 "2021-06-08T06:50:30Z")

</div>

I have two options in front of me - use fscrawler to crawl my directory, use the setting fs:store\_source (Base64-encoded document) to add the file as a field to the message, send that message to a pipeline on ES that h…

---

## [Cannot get failed shard back online](https://discuss.elastic.co/t/cannot-get-failed-shard-back-online/275003)

<div class="topic-metadata">

**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 6:33am UTC](https://discuss.elastic.co/t/cannot-get-failed-shard-back-online/275003 "2021-06-08T06:33:17Z")

</div>

Hi, I'm trying to get failed shard in a single node cluster back online. The cluster is a single docker container running the docker.elastic.co/elasticsearch/elasticsearch:7.9.2 image. It has 10 indices and somewhere thi…

---

## [In RHEL OS Kibana stop results in core dump generation](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009)

<div class="topic-metadata">

**Author:** [@gora](https://discuss.elastic.co/u/gora)\
**Replies:** 6\
**Last updated:** [June 8, 2021, 6:30am UTC](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009 "2021-06-08T06:30:46Z")

</div>

In RHEL OS, when we try to stop kibana it results in core dump generation. OS Version: RHEL 7.8 While checking the log it shows the node process which is running received SIG QUIT signal. This is happening particularl…

---

## [Logstash is not listening on the port from .conf file](https://discuss.elastic.co/t/logstash-is-not-listening-on-the-port-from-conf-file/275023)

<div class="topic-metadata">

**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 6:29am UTC](https://discuss.elastic.co/t/logstash-is-not-listening-on-the-port-from-conf-file/275023 "2021-06-08T06:29:50Z")

</div>

I am trying to get TCP 6514 for SSL enabled logs to Logstash. I created a simple .conf file with no filters and then restarted Logstash. Still the localhost doesn't seems to listen on 6514. In addition to this, when I …

---

## [Access to filter values in script kibana](https://discuss.elastic.co/t/access-to-filter-values-in-script-kibana/273753)

<div class="topic-metadata">

**Author:** [@AR\_2021](https://discuss.elastic.co/u/AR_2021)\
**Replies:** 8\
**Last updated:** [June 8, 2021, 6:28am UTC](https://discuss.elastic.co/t/access-to-filter-values-in-script-kibana/273753 "2021-06-08T06:28:13Z")

</div>

In kibana want to use filter bar value in my script (Advance section). Is there a way or a function to access the filter value in script? or any solution ?

---

## [Dropdown Filters clear each other](https://discuss.elastic.co/t/dropdown-filters-clear-each-other/275234)

<div class="topic-metadata">

**Author:** [@Nico\_Weisenauer](https://discuss.elastic.co/u/Nico_Weisenauer)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 6:20am UTC](https://discuss.elastic.co/t/dropdown-filters-clear-each-other/275234 "2021-06-08T06:20:42Z")

</div>

Hi, I have multiple dropdown filters as can be seen in the following screenshot. As soon as I select a second filter from a dropdown, the first dropdown is reset and cleared. How can I achieve filtering by multiple …

---

## [Get not running a cluster with 1 node on 3 hosts](https://discuss.elastic.co/t/get-not-running-a-cluster-with-1-node-on-3-hosts/275069)

<div class="topic-metadata">

**Author:** [@andreas.bader](https://discuss.elastic.co/u/andreas.bader)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 6:18am UTC](https://discuss.elastic.co/t/get-not-running-a-cluster-with-1-node-on-3-hosts/275069 "2021-06-08T06:18:45Z")

</div>

I spent a lot of time to get a cluster running with one node on 3 different hosts, but all the configuration tips I found didn't fix the problem. I'm using Version 7.9. This is what I have configured: cluster.name: elk…

---

## [Filter and ouput is skipped when apply a tag conditional statement](https://discuss.elastic.co/t/filter-and-ouput-is-skipped-when-apply-a-tag-conditional-statement/275228)

<div class="topic-metadata">

**Author:** [@ivanhoe-dev](https://discuss.elastic.co/u/ivanhoe-dev)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 6:16am UTC](https://discuss.elastic.co/t/filter-and-ouput-is-skipped-when-apply-a-tag-conditional-statement/275228 "2021-06-08T06:16:05Z")

</div>

In my use case, I have around 20 csv to upload, so I prepare 20 logstash config files and add an unique tag for each of them to filter and output conditionally. However, when I run logstash in the directory, only one of …

---

## [Logstash Elasticsearch input plugin mTLS](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-mtls/275098)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 6:14am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-mtls/275098 "2021-06-08T06:14:14Z")

</div>

I have question related to mutual TLS authentication in case of using logstash Elasticsearch input plugin. I have Elasticsearch cluster installed and configured to work over tls using mutual authentication. Now I want t…

---

## [Kibana already restart](https://discuss.elastic.co/t/kibana-already-restart/275156)

<div class="topic-metadata">

**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\
**Replies:** 12\
**Last updated:** [June 8, 2021, 5:18am UTC](https://discuss.elastic.co/t/kibana-already-restart/275156 "2021-06-08T05:18:34Z")

</div>

Kibana restarts for an unknown reason, LOG: C:\\\\ELK\\\\kibana-7.1.1-windows-x86\_64\\\\node\_modules\\\\x-pack"} {"type":"log","@timestamp":"2021-06-07T13:22:29Z","tags":\["debug","legacy-proxy"\],"pid":16240,"message":"\\"getCo…

---

## [Create visualization like inventory in metrics tab](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [June 8, 2021, 4:53am UTC](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140 "2021-06-08T04:53:40Z")

</div>

Hi, I have created infrastructure monitoring dashboards without using metricbeat as currently there is no support for power machines. I haven't used ECS mapping. I want to create a similar visualization below in dashbo…

---

## [What’s the sort score difference between elasticsearch7.9.3 and elasticsearch6.8.0?](https://discuss.elastic.co/t/what-s-the-sort-score-difference-between-elasticsearch7-9-3-and-elasticsearch6-8-0/275225)

<div class="topic-metadata">

**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 3:40am UTC](https://discuss.elastic.co/t/what-s-the-sort-score-difference-between-elasticsearch7-9-3-and-elasticsearch6-8-0/275225 "2021-06-08T03:40:44Z")

</div>

i test in the elasticsearch7.9.3 using below query clause: URL: https://elastic:password@MACHINENAME:9500/indexname/\_search query post body: { "explain": true, "from": 0, "size": 130, "query": { "bool": { "…

---

## [Logstash DLQ not starting up (Dockerized LS)](https://discuss.elastic.co/t/logstash-dlq-not-starting-up-dockerized-ls/275220)

<div class="topic-metadata">

**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\
**Replies:** 2\
**Last updated:** [June 8, 2021, 3:28am UTC](https://discuss.elastic.co/t/logstash-dlq-not-starting-up-dockerized-ls/275220 "2021-06-08T03:28:34Z")

</div>

Hi, I have a Dockerized LS setup working on a pipeline (Logstash Docker 7.13) I added the DLQ settings via environment variables to the LS container and run another pipeline in the same container (named as "dlq-mypipel…

---

## [Can we use rest or API calls in steps in a journey for synthetic monitoring?](https://discuss.elastic.co/t/can-we-use-rest-or-api-calls-in-steps-in-a-journey-for-synthetic-monitoring/274122)

<div class="topic-metadata">

**Author:** [@AKP](https://discuss.elastic.co/u/AKP)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 2:46am UTC](https://discuss.elastic.co/t/can-we-use-rest-or-api-calls-in-steps-in-a-journey-for-synthetic-monitoring/274122 "2021-06-08T02:46:07Z")

</div>

I am on 7.12 version and want to know if we can use api calls as steps in a journey. My goal is to monitor one service call which is a set of multiple calls. For example, getting a key/auth is step 1 and calling the real…

---

## [Please tell me how to change the logo in Kibana 7.13.0](https://discuss.elastic.co/t/please-tell-me-how-to-change-the-logo-in-kibana-7-13-0/275219)

<div class="topic-metadata">

**Author:** [@111480](https://discuss.elastic.co/u/111480)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 2:29am UTC](https://discuss.elastic.co/t/please-tell-me-how-to-change-the-logo-in-kibana-7-13-0/275219 "2021-06-08T02:29:19Z")

</div>

How do I change the elastic logo from Kibana 7.13.0 to the company logo? my elk version : 7.13.0 Changes made in kibana 7.13.0 Change logo and title in web browser tags Change the text that comes out when loading My…

---

## [Extending Platinum trial license](https://discuss.elastic.co/t/extending-platinum-trial-license/275150)

<div class="topic-metadata">

**Author:** [@dani\_pulido](https://discuss.elastic.co/u/dani_pulido)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 1:04am UTC](https://discuss.elastic.co/t/extending-platinum-trial-license/275150 "2021-06-08T01:04:29Z")

</div>

Hi, I am trying to extend my platinum trial license for 30 additional days. I've filled the form but I haven't received the license by mail. I've already put two different emails, the personal one and the company one but…

---

## [ELK to Qradar API](https://discuss.elastic.co/t/elk-to-qradar-api/275180)

<div class="topic-metadata">

**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\
**Replies:** 1\
**Last updated:** [June 8, 2021, 1:03am UTC](https://discuss.elastic.co/t/elk-to-qradar-api/275180 "2021-06-08T01:03:30Z")

</div>

How i can tied ELK with Qradar API

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=921)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=923)
