# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1413 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1414 --- ## [How to send headers using http input plugin in logstash](https://discuss.elastic.co/t/how-to-send-headers-using-http-input-plugin-in-logstash/235332)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 1:16pm UTC](https://discuss.elastic.co/t/how-to-send-headers-using-http-input-plugin-in-logstash/235332 "2020-06-02T13:16:59Z")
Hi am new in ES and logstash I want to do POST call Url:- https://dm-dev-authenticationservice-serviceapps-use-rg.azurewebsites.net/api/v1/Token Headers:- Content-Type :- application/json Body :- { "ClientId": "sd… --- ## [Different field syntaxes between winlogbeat and logstash (fingerprint plugin)](https://discuss.elastic.co/t/different-field-syntaxes-between-winlogbeat-and-logstash-fingerprint-plugin/234761)
**Author:** [@JeanN](https://discuss.elastic.co/u/JeanN)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 1:08pm UTC](https://discuss.elastic.co/t/different-field-syntaxes-between-winlogbeat-and-logstash-fingerprint-plugin/234761 "2020-06-02T13:08:14Z")
Hello, I want to compare the fingerprint of Logstash and Winlogbeat of the same field. But when i provide the "field" setting from winlogbeat and after i provide the same field on the "source" setting from logstash, th… --- ## [ELK Stack configuration backup](https://discuss.elastic.co/t/elk-stack-configuration-backup/235335)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 12:58pm UTC](https://discuss.elastic.co/t/elk-stack-configuration-backup/235335 "2020-06-02T12:58:38Z")
Hi everyone, I want to backup all my elasticsearch and logstash configurations and i don't know in which files are some configurations stored. can anyone please help me know all the configuration files (settings,securi… --- ## [DSL query for matching two document fields](https://discuss.elastic.co/t/dsl-query-for-matching-two-document-fields/235333)
**Author:** [@billy1](https://discuss.elastic.co/u/billy1)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 12:22pm UTC](https://discuss.elastic.co/t/dsl-query-for-matching-two-document-fields/235333 "2020-06-02T12:22:28Z")
Dears , am new to elastic community , i need your help to to write elastic query i have many documents created through logstash and i want to get the result were the documents have same result in different field , "… --- ## [Plugin failed to load YAML file due to java.security.AccessControlException](https://discuss.elastic.co/t/plugin-failed-to-load-yaml-file-due-to-java-security-accesscontrolexception/235326)
**Author:** [@gzc](https://discuss.elastic.co/u/gzc)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 11:55am UTC](https://discuss.elastic.co/t/plugin-failed-to-load-yaml-file-due-to-java-security-accesscontrolexception/235326 "2020-06-02T11:55:42Z")
I want my plugin to load yaml file, but it threw java.security.AccessControlException. Log org.yaml.snakeyaml.constructor.ConstructorException: Can't construct a java object for tag:yaml.org,2002:com.linkdoc.elasticsea… --- ## [Matching query issue, fetching results even fields are not matching](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314)
**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314 "2020-06-02T10:44:29Z")
Hello , i have array json file loaded a document in index , and i am trying to run a match query on that, results are fetching if the field parameter are wrong. , , , ' { "name":"B", "city":"B", "phone":"… --- ## [Logstash停止時の挙動がバージョンにより異なる](https://discuss.elastic.co/t/logstash/234851)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 10:54am UTC](https://discuss.elastic.co/t/logstash/234851 "2020-06-02T10:54:52Z")
logstashを7.6から7.7にバージョンアップしました。 logstashをsystemctlコマンドで停止し、systemctl statusでステータスを確認したときの挙動と、ログの出力のされ方が7.6と7.7にで異なります。 7.6は正常に停止しているように見えるのですが、7.7は停止後のステータスがfailedになっており、停止時に何らかの異常が発生しているように見えます。原因について分かりますでしょうか？ 以下に、… --- ## [SSL error](https://discuss.elastic.co/t/ssl-error/234291)
**Author:** [@NoobUser404](https://discuss.elastic.co/u/NoobUser404)\ **Replies:** 10\ **Last updated:** [June 2, 2020, 10:47am UTC](https://discuss.elastic.co/t/ssl-error/234291 "2020-06-02T10:47:26Z")
I've installed elasticsearch, logstash and metricbeat in my local Windows machine (all 7.7 version). The first thing I did was run .\\bin\\elasticsearch-certutil cert --pem --pass secret to get ca.crt - instance.crt - inst… --- ## [Address Matching](https://discuss.elastic.co/t/address-matching/235298)
**Author:** [@Hanish\_Parmar](https://discuss.elastic.co/u/Hanish_Parmar)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 8:54am UTC](https://discuss.elastic.co/t/address-matching/235298 "2020-06-02T08:54:28Z")
HI all , I'm new to Elasticsearch, my elastic search version is 7.5.1. My requirement is to match address with existing address data. Here is my address mapping, I'm not currently using any filters and analyzer. Put… --- ## [Grok Pattern with Pipe](https://discuss.elastic.co/t/grok-pattern-with-pipe/235272)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 10:04am UTC](https://discuss.elastic.co/t/grok-pattern-with-pipe/235272 "2020-06-02T10:04:54Z")
Hi I am struggling to create a Grok Pattern that matches something like following: 2020-04-21T15:31:08.633161+02:00 server1 SYSTEM\[2564\]: DEBUG | GetAuthorizedContent(SYSTEM000427) | C:\[PD:(CLEAR):\< Network Device Id \>{… --- ## [How to get visitor ipaddress](https://discuss.elastic.co/t/how-to-get-visitor-ipaddress/235307)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 9:43am UTC](https://discuss.elastic.co/t/how-to-get-visitor-ipaddress/235307 "2020-06-02T09:43:32Z")
Hi Team, Can somebody please help me on below query I am having elastic load balancer all requests go to this If any body hits my site url i need to get the visitor machine's ip address Note: I have some doubt whethe… --- ## [Still, i am not getting results for customers most related keywords products](https://discuss.elastic.co/t/still-i-am-not-getting-results-for-customers-most-related-keywords-products/235301)
**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 9:28am UTC](https://discuss.elastic.co/t/still-i-am-not-getting-results-for-customers-most-related-keywords-products/235301 "2020-06-02T09:28:43Z")
How to create Customer Most Interested Related Keyword search in Elastic Search? Like "Laptop" keyword Then Laptops should display first, not Laptop Bags first, not laptop stand, and other, these should display in last, … --- ## [DNS plugin and new field](https://discuss.elastic.co/t/dns-plugin-and-new-field/235212)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 8:58am UTC](https://discuss.elastic.co/t/dns-plugin-and-new-field/235212 "2020-06-02T08:58:02Z")
Hello, we're using the ElasticStack 7.6.1 and I was wondering how to get the DNS filter for Logstash to perform a reverse DNS lookup on the IP address in each each message and put the results in a new field; looking at t… --- ## [Can't delete index by "curl -XDELETE" with Xpack security enabled "failed to authenticate user \[elastic\]"](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902)
**Author:** [@zav](https://discuss.elastic.co/u/zav)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 8:48am UTC](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902 "2020-06-02T08:48:37Z")
Hi! I'm new in Elastic, and can miss something. Can anyone help me? I have single node cluster with Xpack security enabled. I can get cluster health # curl --user elastic:passwd http://127.0.0.1:9200/\_cluster/health?p… --- ## [Source of authentication](https://discuss.elastic.co/t/source-of-authentication/234975)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 8:43am UTC](https://discuss.elastic.co/t/source-of-authentication/234975 "2020-06-02T08:43:45Z")
How do i know from where i am getting these authentication request? How do i found source ? \[2020-05-29T12:11:33,366\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[xxxxx-xxxxhostname\] Authentication of \[elastic\] was terminat… --- ## [Not able to give "unknown" field name in grok filter](https://discuss.elastic.co/t/not-able-to-give-unknown-field-name-in-grok-filter/235198)
**Author:** [@sakthiskv](https://discuss.elastic.co/u/sakthiskv)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 8:40am UTC](https://discuss.elastic.co/t/not-able-to-give-unknown-field-name-in-grok-filter/235198 "2020-06-02T08:40:59Z")
Hai, i am using logstash IMAP server to read messages from mail and put it into ES. I am able to read mails from Gmail and getting mail attachments also. i have to apply some filter to that attachments field. but that… --- ## [APM, Jaeger and follows\_from](https://discuss.elastic.co/t/apm-jaeger-and-follows-from/234974)
**Author:** [@tstadler](https://discuss.elastic.co/u/tstadler)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 8:40am UTC](https://discuss.elastic.co/t/apm-jaeger-and-follows-from/234974 "2020-06-02T08:40:53Z")
Kibana version: 7.7.0 Elasticsearch version: 7.7.0 APM Server version: 7.7.0 I am using the apm-server with jaeger grpc enabled and a jaeger tracer as client. Does the apm server support span that have follows from as… --- ## [Refresh Field List not updating](https://discuss.elastic.co/t/refresh-field-list-not-updating/235292)
**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 8:37am UTC](https://discuss.elastic.co/t/refresh-field-list-not-updating/235292 "2020-06-02T08:37:35Z")
Hi, I have created the logstash CIDR filter that adds the field name "network\_name". cidr { add\_tag =\> \[ "home\_network" \] add\_field =\> { "network\_name" =\> "home\_network" } address =\> \[ "%{… --- ## [IndexLifecycleRunner policy index failed on step IllegalArgumentException is not the write index for alias](https://discuss.elastic.co/t/indexlifecyclerunner-policy-index-failed-on-step-illegalargumentexception-is-not-the-write-index-for-alias/235286)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 7:36am UTC](https://discuss.elastic.co/t/indexlifecyclerunner-policy-index-failed-on-step-illegalargumentexception-is-not-the-write-index-for-alias/235286 "2020-06-02T07:36:29Z")
Elasticsearch (7.7) seems to be in confusion about which indices it has rolled over and is logging: \[2020-06-02T09:23:53,425\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner\] \[ecom-repository01\] policy \[test-policy\] for index \[log… --- ## [Is it possible to read config from DB?](https://discuss.elastic.co/t/is-it-possible-to-read-config-from-db/235169)
**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 7:30am UTC](https://discuss.elastic.co/t/is-it-possible-to-read-config-from-db/235169 "2020-06-02T07:30:13Z")
I want to have configurable filters, basically to compare value from an input data field. I want to have configurable values, which should come from the database(preferred) or file (otherwise): for example if(\[url\]\[IP… --- ## [Logstash 6.8 role\_arn error](https://discuss.elastic.co/t/logstash-6-8-role-arn-error/235177)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/logstash-6-8-role-arn-error/235177 "2020-06-02T07:26:02Z")
Hello, I was hoping that someone could help me figure this one out. Basically what it is that I am trying to do in AWS is: Account 1 (logstash instance with role 1 attached) Account 2 (contains the s3 with role 2 cre… --- ## [VM Warnings UseConcMarkSweepGC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 7:06am UTC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284 "2020-06-02T07:06:40Z")
Elasticsearch 7.7 on Windows Server JAVA\_HOME=path\\to\\elasticsearch\\jdk openjdk version "14" 2020-03-17 OpenJDK Runtime Environment AdoptOpenJDK (build 14+36) OpenJDK 64-Bit Server VM AdoptOpenJDK (build 14+36, mixed m… --- ## [Failed to install template error regarding template set up](https://discuss.elastic.co/t/failed-to-install-template-error-regarding-template-set-up/235278)
**Author:** [@Raj\_Techie](https://discuss.elastic.co/u/Raj_Techie)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 6:28am UTC](https://discuss.elastic.co/t/failed-to-install-template-error-regarding-template-set-up/235278 "2020-06-02T06:28:22Z")
Hi,I am getting this below error. Can anyone suggest. And one more help needed regarding template set up. Can any one guide please. Through curl I can get details using id and password same aoslo used in my logstash.con… --- ## [\`collectd\` codec intermittently dropping some telemetry information](https://discuss.elastic.co/t/collectd-codec-intermittently-dropping-some-telemetry-information/231286)
**Author:** [@sjlongland](https://discuss.elastic.co/u/sjlongland)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 6:30am UTC](https://discuss.elastic.co/t/collectd-codec-intermittently-dropping-some-telemetry-information/231286 "2020-06-02T06:30:59Z")
Hi all… We've been using ELK stack via a Docker container (sebp/elk) for some time along-side ElastAlert to monitor a number of virtual hosts in our care via collectd, and until very recently it's been working well. We… --- ## [Syslog Input has unreadable messages](https://discuss.elastic.co/t/syslog-input-has-unreadable-messages/235276)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 5:57am UTC](https://discuss.elastic.co/t/syslog-input-has-unreadable-messages/235276 "2020-06-02T05:57:38Z")
I recently configured syslog plugin to collect Datapower appliance logs. The Datapower end was set to syslog-tcp for a few events tagged with an Identifier. I see most of the event logs are in proper format with the ide… --- ## [ClusterApplierService stucks in between](https://discuss.elastic.co/t/clusterapplierservice-stucks-in-between/235275)
**Author:** [@sanyamjain](https://discuss.elastic.co/u/sanyamjain)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 5:50am UTC](https://discuss.elastic.co/t/clusterapplierservice-stucks-in-between/235275 "2020-06-02T05:50:03Z")
Hi, I'm facing this behaviour frequently where a data node stops applying the cluster state but still continues to be in the cluster. I'm using ES 6.1.3. Sequence of events: 1- Node receives a cluster state, which dele… --- ## [How to sort the indices through it’s property in multi Indices approach](https://discuss.elastic.co/t/how-to-sort-the-indices-through-it-s-property-in-multi-indices-approach/235274)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 5:42am UTC](https://discuss.elastic.co/t/how-to-sort-the-indices-through-it-s-property-in-multi-indices-approach/235274 "2020-06-02T05:42:54Z")
Hi, below is my query multi Indices approach. here i want to sort the 'abc\_class' by it's "classId" . tried applying sort at the beginning it's not working. please advise. GET \_all/\_search { "query": { "bool": { "s… --- ## [How to delete index having special characters in name?](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060)
**Author:** [@Mahebub\_Sayyed](https://discuss.elastic.co/u/Mahebub_Sayyed)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 5:25am UTC](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060 "2020-06-02T05:25:23Z")
Hi, By mistake I have created some indices with special characters in name like "log-%{\[message\]\[meta\]\[organization\]}-%{\[message\]\[proxy\]\[name\]}-2020.02.27". I tried to delete this index but getting index\_not\_found\_exce… --- ## [Sizing and capacity planning (no of shards per node per index)](https://discuss.elastic.co/t/sizing-and-capacity-planning-no-of-shards-per-node-per-index/235269)
**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 5:20am UTC](https://discuss.elastic.co/t/sizing-and-capacity-planning-no-of-shards-per-node-per-index/235269 "2020-06-02T05:20:53Z")
Hi folks, I'm doing "go-live" planning for prod-ELK, and i stumble upon few nice calculations formulas form official elastic webinar on "capacity planing and sizing". I have few confusions in shards calcs based upon fo… --- ## [Will I face race condition when performing immediate deleteByQuery and indexing operation?](https://discuss.elastic.co/t/will-i-face-race-condition-when-performing-immediate-deletebyquery-and-indexing-operation/235270)
**Author:** [@Vidhyashankar\_Madhes](https://discuss.elastic.co/u/Vidhyashankar_Madhes)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 4:54am UTC](https://discuss.elastic.co/t/will-i-face-race-condition-when-performing-immediate-deletebyquery-and-indexing-operation/235270 "2020-06-02T04:54:13Z")
Query1 - deleteByquery which includes deletion of doc A Query2 - index query on doc A (with refresh=true so that change will be immediately available) ES Doc says that the deleteByQuery will take a snapshot of index an… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1412) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1414)