# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=951 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 952 --- ## [Access Logsatsh via HTTPS](https://discuss.elastic.co/t/access-logsatsh-via-https/272780)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 8:18am UTC](https://discuss.elastic.co/t/access-logsatsh-via-https/272780 "2021-05-12T08:18:27Z")
Hello, I would like to monitor Logstash with Metricbeat, and TLS is activated in all my cluster (beats, kibana, Elasticsearch) that's why why I run metricbeat, I get an error: error making http request: Get "https://10… --- ## [Config File doesn't work](https://discuss.elastic.co/t/config-file-doesnt-work/272712)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 7:32am UTC](https://discuss.elastic.co/t/config-file-doesnt-work/272712 "2021-05-12T07:32:26Z")
Good evening. I'm trying to run Logstash for the first time. I already downloaded and runned with success ElasticSearch and Kibana. I created the config file named "logstash-simple.conf" following the istructions on th… --- ## [Node not joining Elasticsearch cluster](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 8\ **Last updated:** [May 12, 2021, 7:33am UTC](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667 "2021-05-12T07:33:04Z")
I have made an Elasticsearch cluster of 3 nodes but one of the node is not joining the cluster. Below are my elasticsearch.yml file for all 3 nodes. NODE1 cluster.name: ES-Cluster node.name: node-1 node.master: true … --- ## [Access policy issue](https://discuss.elastic.co/t/access-policy-issue/272761)
**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 7:04am UTC](https://discuss.elastic.co/t/access-policy-issue/272761 "2021-05-12T07:04:53Z")
Hi, I created an elastic search domain using amplify framework using the @searchable method. It creates a domain in elastic search. But I can't able to modify the access policy to allow open access to the domain. There … --- ## [Import Canvas to dashboard](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684)
**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 6:56am UTC](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684 "2021-05-12T06:56:31Z")
I need images and custom icons in the dashboard. In the canvas editor I can do that. However, is it possible to import the canvas to a dashboard? --- ## [Elastic Index Allocation](https://discuss.elastic.co/t/elastic-index-allocation/272222)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 7\ **Last updated:** [May 7, 2021, 5:41am UTC](https://discuss.elastic.co/t/elastic-index-allocation/272222 "2021-05-07T05:41:54Z")
We have typical deployment of 5000 users per server. We are planning to use Elasticsearch for indexing new data onwards. Our earlier indexing engine was having provision to map one index with one user. It was easier to r… --- ## [Doubt in query](https://discuss.elastic.co/t/doubt-in-query/272759)
**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 5:56am UTC](https://discuss.elastic.co/t/doubt-in-query/272759 "2021-05-12T05:56:27Z")
Hi, I have an index named product in elastic search. Each document contains an attribute field. This is shown below. { "category": "xyx", "name": "product-1", "attribute": \[ { "unit": "mm", "name": "Length", "va… --- ## [Exclude weekends(Saturdays and Sundays) from my dashboard view](https://discuss.elastic.co/t/exclude-weekends-saturdays-and-sundays-from-my-dashboard-view/272757)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 10\ **Last updated:** [May 12, 2021, 4:31am UTC](https://discuss.elastic.co/t/exclude-weekends-saturdays-and-sundays-from-my-dashboard-view/272757 "2021-05-12T04:31:26Z")
I am using ELK – 7.12.1 version and currently I am looking for a way to filter-out the weekends(Saturdays and Sundays) from my dashboard view. On my Dashboard I have (Vertical Bar, Line, Data table, Pie & Gauge) chart v… --- ## [Can not connect to Elasticsearch from AngularJS](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-from-angularjs/271865)
**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\ **Replies:** 9\ **Last updated:** [May 12, 2021, 4:04am UTC](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-from-angularjs/271865 "2021-05-12T04:04:43Z")
Hi, I am using elastic search. I created a domain of elasticsearch. Is there is any way to connect the elastic search from my Angular 11. I used the elasticsearch.js library, but I can't able to connect with it for doi… --- ## [Mapping es.mapping.id](https://discuss.elastic.co/t/mapping-es-mapping-id/272755)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 10\ **Last updated:** [May 12, 2021, 3:10am UTC](https://discuss.elastic.co/t/mapping-es-mapping-id/272755 "2021-05-12T03:10:42Z")
i am reading the data from an elasticsearch index, processing it using spark and finally loading it into a new elasticsearch index. while processing the data i am grouping the data using date(day wise) and driverPkid co… --- ## [How to add a specific key to a field from a JSON format part](https://discuss.elastic.co/t/how-to-add-a-specific-key-to-a-field-from-a-json-format-part/272384)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 3:05am UTC](https://discuss.elastic.co/t/how-to-add-a-specific-key-to-a-field-from-a-json-format-part/272384 "2021-05-12T03:05:04Z")
I was able to get a JSON part from a message in grok. I want to keep a specific key from the JSON part in a field, how can I do that? target log: ... snip ... { ... snip ..., "api\_code":"40216", ... snip ... } ... sni… --- ## [Conditional with regex failing](https://discuss.elastic.co/t/conditional-with-regex-failing/272743)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [May 12, 2021, 2:22am UTC](https://discuss.elastic.co/t/conditional-with-regex-failing/272743 "2021-05-12T02:22:22Z")
Hi Im trying to replace a value whenever the the characters ":" are present in the category field, but I get an error, I tried to scape the colon, but I get an error too if \[category\] =~ /:\\\\/ { mutate { replace =\> \[ "… --- ## [Logstash not capturing SNMP traps from remote machine](https://discuss.elastic.co/t/logstash-not-capturing-snmp-traps-from-remote-machine/272754)
**Author:** [@ssunkara](https://discuss.elastic.co/u/ssunkara)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 1:33am UTC](https://discuss.elastic.co/t/logstash-not-capturing-snmp-traps-from-remote-machine/272754 "2021-05-12T01:33:22Z")
Hi, I have logstash configured with snmptrap input plugin on a CentOS7 machine. Below is my .conf file that I have at /etc/logstash/conf.d input { snmptrap { community =\> "public" port =\> 10… --- ## [How to write a kibana rule with filename](https://discuss.elastic.co/t/how-to-write-a-kibana-rule-with-filename/272673)
**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 1:14am UTC](https://discuss.elastic.co/t/how-to-write-a-kibana-rule-with-filename/272673 "2021-05-12T01:14:05Z")
I would like to write a rule to detect if the file name & path are matching for china chopper webshells from below list. for entire csv What is the best way to do please guide me with exact steps. I know we need creat… --- ## [How to recover cluster state red in K8s](https://discuss.elastic.co/t/how-to-recover-cluster-state-red-in-k8s/272420)
**Author:** [@dandelion](https://discuss.elastic.co/u/dandelion)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 12:45am UTC](https://discuss.elastic.co/t/how-to-recover-cluster-state-red-in-k8s/272420 "2021-05-12T00:45:44Z")
We are using Elasticsearch along with Graylog. We have three replicas running. On the Graylog side I noticed that the Elasticsearch cluster status is red. Started to investigate, and noticed that we had run out of disk … --- ## [Convert mapping in the table logstash](https://discuss.elastic.co/t/convert-mapping-in-the-table-logstash/272753)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 7\ **Last updated:** [May 11, 2021, 11:50pm UTC](https://discuss.elastic.co/t/convert-mapping-in-the-table-logstash/272753 "2021-05-11T23:50:12Z")
good, I need help with the mapping in logstash, I need to change certain metrics to integer, but the metrics go together in a table so it does not let me change them. I attach the configuration in logstash. input { ht… --- ## [Modsecurity logs to kibana dashboard](https://discuss.elastic.co/t/modsecurity-logs-to-kibana-dashboard/272726)
**Author:** [@Kenny188](https://discuss.elastic.co/u/Kenny188)\ **Replies:** 1\ **Last updated:** [May 11, 2021, 11:08pm UTC](https://discuss.elastic.co/t/modsecurity-logs-to-kibana-dashboard/272726 "2021-05-11T23:08:33Z")
HI , I'm currently working on WAF (web application firewall) ModSecurity , and I'm trying to forward the logs files of modsec into kibana so it can be visualise from there and be more untestable . My first time worki… --- ## [Cluster node roles changed after rolling upgrade](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 1\ **Last updated:** [May 11, 2021, 11:05pm UTC](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685 "2021-05-11T23:05:23Z")
Hi! We did a rolling upgrade from version 7.6.1 to 7.12.1 as documented in Rolling upgrades | Elasticsearch Guide \[7.12\] | Elastic. We have three nodes in our cluster. Before the upgrade each node had roles dilm, but af… --- ## [Unable to find valid certification path to requested target](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692)
**Author:** [@osher.l](https://discuss.elastic.co/u/osher.l)\ **Replies:** 0\ **Last updated:** [May 11, 2021, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692 "2021-05-11T12:06:38Z")
We have ELK stack on Kubernetes(version 7.0.0), Logstash is failing to interact with elasticsearch with the following warning and errors, all other components like filebeat and kibana are well functioning. \[2021-05-11T1… --- ## [Documents not showing Discover, show in queries and document counts](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740)
**Author:** [@LoganS](https://discuss.elastic.co/u/LoganS)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 8:35pm UTC](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740 "2021-05-11T20:35:01Z")
I have some documents that were created via Elastic's REST API. When logged into Kibana to view these records, I am able to see them in the results using a GET or PUT request in Dev Tools and in the document count for t… --- ## [Automatically visualize data on kibana from input?](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 14\ **Last updated:** [May 11, 2021, 7:41pm UTC](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613 "2021-05-11T19:41:03Z")
I'm wondering if there's a way to automatically visualize data on KIBANA. ? My logstash will receive frequent new inputs, and i need to know if there's way to automatically create dashboards ? may be a way to define in… --- ## [Add message\_length field](https://discuss.elastic.co/t/add-message-length-field/272737)
**Author:** [@lag](https://discuss.elastic.co/u/lag)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 6:39pm UTC](https://discuss.elastic.co/t/add-message-length-field/272737 "2021-05-11T18:39:40Z")
I am trying to add calculated "message\_length" field that would be a representation on character count in "message" field. Info is coming in from winlogbeat/filebeat/syslog if that makes any difference. This is the code… --- ## [ES 7.12 - Different analyzers are getting used for indexing and searching](https://discuss.elastic.co/t/es-7-12-different-analyzers-are-getting-used-for-indexing-and-searching/272186)
**Author:** [@justramesh2000](https://discuss.elastic.co/u/justramesh2000)\ **Replies:** 3\ **Last updated:** [May 11, 2021, 6:23pm UTC](https://discuss.elastic.co/t/es-7-12-different-analyzers-are-getting-used-for-indexing-and-searching/272186 "2021-05-11T18:23:25Z")
Hello, I have an interesting issue to report for ES 7.12. For one of the dynamically indexed field the analyzer used for indexing is "ngram" but for searching its "standard". I am not sure if this is a bug or an intended… --- ## [Can we edit Kibana's own fancy dashboards or make similar?](https://discuss.elastic.co/t/can-we-edit-kibanas-own-fancy-dashboards-or-make-similar/272718)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 5:39pm UTC](https://discuss.elastic.co/t/can-we-edit-kibanas-own-fancy-dashboards-or-make-similar/272718 "2021-05-11T17:39:12Z")
Is it possible to make pages like these ourselves in Kibana, i.e. these layouts, and the nice min/max/current views? thanks in advance! Mark --- ## [Custom message filter with logstash](https://discuss.elastic.co/t/custom-message-filter-with-logstash/272626)
**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\ **Replies:** 6\ **Last updated:** [May 11, 2021, 5:31pm UTC](https://discuss.elastic.co/t/custom-message-filter-with-logstash/272626 "2021-05-11T17:31:47Z")
Hi all, I have a message log below: \<85\>1 2021-05-11T09:25:02+07:00 172.19.16.241 CP-GW - Log \[Fields@1.3.6.1.4.1.2620 Log delay="1620699902" src="172.19.9.18" dst="172.19.11.13" proto="6" UP\_match\_table="TABLE\_START" … --- ## [Logstash to output syslog in Snare format](https://discuss.elastic.co/t/logstash-to-output-syslog-in-snare-format/271405)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 4\ **Last updated:** [May 11, 2021, 5:10pm UTC](https://discuss.elastic.co/t/logstash-to-output-syslog-in-snare-format/271405 "2021-05-11T17:10:58Z")
Hi All, For a PoC portion, I would like to know whether logstash can output the syslogs in Snare format. Any reference? If anyone has got insights around this, please shed some light here. Thanks, Ravi --- ## [Logstash JSON parse error](https://discuss.elastic.co/t/logstash-json-parse-error/272533)
**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\ **Replies:** 3\ **Last updated:** [May 11, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-json-parse-error/272533 "2021-05-11T16:59:49Z")
Hi, how do i fix this parsing error in logstash \[ERROR\] 2021-05-08 15:30:46.678 \[\[main\]\#\ **Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 2\ **Last updated:** [May 11, 2021, 4:03pm UTC](https://discuss.elastic.co/t/recalculate-times/272680 "2021-05-11T16:03:00Z") Hi, Due to a number of reasons we have servers logging with UTC en servers logging with timestamps in CEST. In kibana/es I would like to see everything in CESt to easily connect the dots with events in clientdevices. Is… --- ## [Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set and re-generate this report. Error: Unsupported state or unable to authenticate data](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [May 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713 "2021-05-11T16:02:59Z")
Hi, I'm using elastic open source version 7.10.1 in my elastic cluster. xpack.reporting.encryptionKey has configured in kibana.yml I got this error while generating a CSV file using kibana. Also it occurs randomly. … --- ## [Parse very complicated logs with logstash (braces and random keys names)](https://discuss.elastic.co/t/parse-very-complicated-logs-with-logstash-braces-and-random-keys-names/272715)
**Author:** [@gmbynkrkrqz](https://discuss.elastic.co/u/gmbynkrkrqz)\ **Replies:** 1\ **Last updated:** [May 11, 2021, 3:59pm UTC](https://discuss.elastic.co/t/parse-very-complicated-logs-with-logstash-braces-and-random-keys-names/272715 "2021-05-11T15:59:30Z")
Hello, I'm trying to parse very complicated logs as below but it's very hard. Could someone help me ? 2020-05-29T16:28:49.051146+02:00 machinehostname APP\_NAME\[31161\] @cee: {"category": "USER", "context": {"authMode": … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=950) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=952)