# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1002 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1003 --- ## [How configuration options Auditbeat in windows 10](https://discuss.elastic.co/t/how-configuration-options-auditbeat-in-windows-10/300455)
**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 2:55pm UTC](https://discuss.elastic.co/t/how-configuration-options-auditbeat-in-windows-10/300455 "2022-03-24T14:55:31Z")
how configuration options Auditbeat in windows 10 --- ## [Can't open ElasticSearch on browser from outside the server](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717)
**Author:** [@Hamza\_Dev](https://discuss.elastic.co/u/Hamza_Dev)\ **Replies:** 6\ **Last updated:** [March 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717 "2022-03-24T14:43:11Z")
Hi , I'm new with ES I've installed it from the official site on an Azure VM with Centos 7 System, it's successfully installed, when I start the service it started correctly, and when I check the availability of ES, usi… --- ## [How do I verify that packetbeat transmits data to Elasticsearch](https://discuss.elastic.co/t/how-do-i-verify-that-packetbeat-transmits-data-to-elasticsearch/300297)
**Author:** [@BlackFox](https://discuss.elastic.co/u/BlackFox)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 2:22pm UTC](https://discuss.elastic.co/t/how-do-i-verify-that-packetbeat-transmits-data-to-elasticsearch/300297 "2022-03-24T14:22:59Z")
Now I have two hosts. ES and Kibana are deployed on host A (Ubuntu, single network card) and packetbeat is deployed on host B (Ubuntu, dual network card). Host B can open ports 9200 and 5601 of host A by using Firefox b… --- ## [Logstash 8.1.0 No appropriate protocol (protocol is disabled or cipher suites are inappropriate)](https://discuss.elastic.co/t/logstash-8-1-0-no-appropriate-protocol-protocol-is-disabled-or-cipher-suites-are-inappropriate/300582)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 2:18pm UTC](https://discuss.elastic.co/t/logstash-8-1-0-no-appropriate-protocol-protocol-is-disabled-or-cipher-suites-are-inappropriate/300582 "2022-03-24T14:18:14Z")
Hello team, I'm using Logstash 8.1.0 with plugin: logstash-input-websocket, when I start Logstash getting below error: \[WARN \]\[logstash.inputs.websocket\]\[main\]\[a0cd44e8c7bfa2705bff3d19091209cb115076d1199fdf41b74beb730f… --- ## [Faceted Search-Navigation where counts should not be updated for the siblings of a group when it is active](https://discuss.elastic.co/t/faceted-search-navigation-where-counts-should-not-be-updated-for-the-siblings-of-a-group-when-it-is-active/300107)
**Author:** [@droplet](https://discuss.elastic.co/u/droplet)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 1:46pm UTC](https://discuss.elastic.co/t/faceted-search-navigation-where-counts-should-not-be-updated-for-the-siblings-of-a-group-when-it-is-active/300107 "2022-03-24T13:46:59Z")
Hello, (data to play, at the end) I've been reading about faceted navigation and filtering and how it can be applied to ecommerce apps. So far I've managed to get the bellow example working. Facet Group 1 Facet Opti… --- ## [Installation problems - Public key not available](https://discuss.elastic.co/t/installation-problems-public-key-not-available/300571)
**Author:** [@user111](https://discuss.elastic.co/u/user111)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 1:12pm UTC](https://discuss.elastic.co/t/installation-problems-public-key-not-available/300571 "2022-03-24T13:12:43Z")
Dear community, I´m trying to install the ELK Stack as explained in the official documentation here: I´m running a Ubuntu 18.04 machine and I´m getting the following error while executing sudo apt-get update && sudo a… --- ## [Issues trying to enable FIPS 140-2 on Centos 8](https://discuss.elastic.co/t/issues-trying-to-enable-fips-140-2-on-centos-8/300505)
**Author:** [@ryann](https://discuss.elastic.co/u/ryann)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 1:16pm UTC](https://discuss.elastic.co/t/issues-trying-to-enable-fips-140-2-on-centos-8/300505 "2022-03-24T13:16:27Z")
Trying to enable FIPS mode in Elasticsearch and running into issues. When using default bundled JVM with FIPS mode enabled configuration passes bootstrap checks. Enabled fips globally in Centos and pointed systemd file t… --- ## [How to create advanced visualization in Kibana?](https://discuss.elastic.co/t/how-to-create-advanced-visualization-in-kibana/300534)
**Author:** [@ninamarie0](https://discuss.elastic.co/u/ninamarie0)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 12:38pm UTC](https://discuss.elastic.co/t/how-to-create-advanced-visualization-in-kibana/300534 "2022-03-24T12:38:38Z")
Hi. I am new to Kibana and are struggling to find out how to create more "advanced" visualizations. I have already created a dashboard of more simple metrics and charts, but now i want to take the next step. My data c… --- ## [Sum of all values in table visual kibana](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522 "2022-03-24T12:33:24Z")
Hi all, I need to add a table view in my kibana dashboard with a sum for all columns like Excel. (see the picture. Is there any idea. --- ## [Get sequential relation of keys in a json file in ruby logstash](https://discuss.elastic.co/t/get-sequential-relation-of-keys-in-a-json-file-in-ruby-logstash/300566)
**Author:** [@zubair\_aftab](https://discuss.elastic.co/u/zubair_aftab)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 11:44am UTC](https://discuss.elastic.co/t/get-sequential-relation-of-keys-in-a-json-file-in-ruby-logstash/300566 "2022-03-24T11:44:38Z")
I have a json file of a packet capture. It has multiple layers in 1 message as shown in below example. block 1: mtp3 = 1 map = 1 block 2: mtp3 =2 bicc =2 When i process the file in logstash it combines the similar… --- ## [Migration HLRC PutIndexTemplateRequest to ES 8.1.0](https://discuss.elastic.co/t/migration-hlrc-putindextemplaterequest-to-es-8-1-0/300491)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 11:07am UTC](https://discuss.elastic.co/t/migration-hlrc-putindextemplaterequest-to-es-8-1-0/300491 "2022-03-24T11:07:32Z")
Hi, I'm migrating from HLRC to ES8.1. We used to pass json data for settings and mappings in source. HLRC Code PutIndexTemplateRequest request = new PutIndexTemplateRequest(templateName); reques… --- ## [Kibana deprecation issues: Source configuration field "host name" is deprecated](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 9\ **Last updated:** [March 24, 2022, 10:44am UTC](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997 "2022-03-24T10:44:03Z")
Hi all, I am trying to prepare to upgrade my elastic cluster to 8.1. On the Upgrade Assistant tab i've fixed most of the issue but then there is an issue that said: Source configuration field "host name" is deprecated.… --- ## [Why does a kibana lens pretend my fields have no data, when they clearly do?](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506)
**Author:** [@gcanyon](https://discuss.elastic.co/u/gcanyon)\ **Replies:** 9\ **Last updated:** [March 24, 2022, 10:43am UTC](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506 "2022-03-24T10:43:11Z")
I click on kibana I click on visualize I click on Create visualization I click on Lens The left column, under "Individual fields" says: "Looks like you don't have any data. Try extending the time range" I see that I am … --- ## [Event severity cisco for logstash](https://discuss.elastic.co/t/event-severity-cisco-for-logstash/300312)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 10:20am UTC](https://discuss.elastic.co/t/event-severity-cisco-for-logstash/300312 "2022-03-24T10:20:56Z")
hello, if \[event\]\[severity\] == 7 - \> does not work in a pipeline to create a new index with do you have any idea how to make it work? infra with filebeat -\> logstash -\> Elasticsearch --- ## [Kafka with ELK](https://discuss.elastic.co/t/kafka-with-elk/300477)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 10:17am UTC](https://discuss.elastic.co/t/kafka-with-elk/300477 "2022-03-24T10:17:08Z")
When installing kafka with the ELK suite, is it mandatory to install zookeeper if you take the latest version? help --- ## [Logstash Metricbeat field calculation](https://discuss.elastic.co/t/logstash-metricbeat-field-calculation/300242)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 9:58am UTC](https://discuss.elastic.co/t/logstash-metricbeat-field-calculation/300242 "2022-03-24T09:58:54Z")
I'm implementing ruby code through logstash pipeline,Unable to get desired fields created in kibana,what would be right approach to code in order to get desired result? Want to get CPU % by adding two fileds and divide … --- ## [Elasticsearch can't hanlde space after add analyzer](https://discuss.elastic.co/t/elasticsearch-cant-hanlde-space-after-add-analyzer/300509)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-cant-hanlde-space-after-add-analyzer/300509 "2022-03-24T09:35:48Z")
I created an index called my\_index by this command { "settings": { "number\_of\_shards": 1, "analysis": { "filter": { "synonym": { "type": "synonym", … --- ## [Logs not arriving with docker-compose](https://discuss.elastic.co/t/logs-not-arriving-with-docker-compose/300524)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 6:44am UTC](https://discuss.elastic.co/t/logs-not-arriving-with-docker-compose/300524 "2022-03-24T06:44:04Z")
Good, a couple of days ago I set up ELK and everything worked fine, but now that I have set it up in docker-compose and after configuring it I can't get the logs that I want to send from another machine to mine, I show y… --- ## [How to understand the error of reindex (request body is required)?](https://discuss.elastic.co/t/how-to-understand-the-error-of-reindex-request-body-is-required/300278)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [March 24, 2022, 9:02am UTC](https://discuss.elastic.co/t/how-to-understand-the-error-of-reindex-request-body-is-required/300278 "2022-03-24T09:02:05Z")
use reindex and want to rename iotmessages-000001 to iot\_prd\_iotmessage-000001. There are so many raw data. POST \_reindex?slices=5&refresh { "conflicts": "proceed", "source": { "index": "iotmessages-000001" … --- ## [Elasticsearch "data": { "type": "float" } returns incorrect results](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335 "2022-03-24T08:54:11Z")
I have a query like below and when date\_partition field is "type" =\> "float" it returns 20220109, 20220108, 20220107 query. When field "type" =\> "long", it only returns the 20220109 query. Which is what I want. Each qu… --- ## [How to aggregate based on another aggregation?](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 8:34am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947 "2022-03-24T08:34:48Z")
Hi folks, I have a certain amount of user transactions per day. My final goal is to have the average of daily sums of transactions per week. What I have done so far is the first step (the easy one). I created a chart … --- ## [Question regarding ES upgrade to 8.1](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:31am UTC](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372 "2022-03-24T08:31:10Z")
We are using ES version 6.8.12 and would want to upgrade to ES version 8.1. As per our architecture we can have Elasticsearch deployed on either one node or two nodes. Since 8.1 doesn't allow forming a cluster with two… --- ## [Setting JVM Heap size for Elasticsearch container](https://discuss.elastic.co/t/setting-jvm-heap-size-for-elasticsearch-container/300374)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:21am UTC](https://discuss.elastic.co/t/setting-jvm-heap-size-for-elasticsearch-container/300374 "2022-03-24T08:21:37Z")
I recently ran into an error where my cluster would turn red due to exceeding the maximum allocated heap. Once it returned back to below the threshold, I saw that by default, only 512mb was allocated. name id node.rol… --- ## [Snapshot Policy Change not Deleting Old Snapshots](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 8:17am UTC](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531 "2022-03-24T08:17:42Z")
Elastic 7.6.2 We changed our snapshot policy to only keep max 5 snapshots (down from 14). Nothing happened. We ran the snapshot (from Kibana) and a new snapshot was generated. Nothing was deleted and no errors were show… --- ## [Build IndexRequest with elastic in 8.1.0](https://discuss.elastic.co/t/build-indexrequest-with-elastic-in-8-1-0/300146)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 3\ **Last updated:** [March 24, 2022, 8:09am UTC](https://discuss.elastic.co/t/build-indexrequest-with-elastic-in-8-1-0/300146 "2022-03-24T08:09:01Z")
Hi, I am migrating from HLRC to Elasticsearch Java API Client. I need to transform below code private IndexRequest buildIndex(String indexName, CacheObject cacheObject) { IndexRequest indexRequest = new IndexReq… --- ## [Error : java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 7:40am UTC](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448 "2022-03-24T07:40:27Z")
We are getting this error java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer on server. Application is working fine on local without any exception. We are using java 11 + Hibernate Search 6 + E… --- ## [Kibana 8.0 is not starting up- it says server not ready .. Looking at the logs it says Fatal Error unable to complete Saved Objects migrations](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 7:22am UTC](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526 "2022-03-24T07:22:30Z")
\[2022-03-24T07:14:44.988+00:00\]\[INFO \]\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations... \[2022-03-24T07:14:44.990+00:00\]\[INFO \]\[savedobjec… --- ## [The provided corpus does not match any of the corpora](https://discuss.elastic.co/t/the-provided-corpus-does-not-match-any-of-the-corpora/300385)
**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\ **Replies:** 3\ **Last updated:** [March 24, 2022, 6:48am UTC](https://discuss.elastic.co/t/the-provided-corpus-does-not-match-any-of-the-corpora/300385 "2022-03-24T06:48:51Z")
I've defined one corpus in my track, and when I run the track, I get the message RallyAssertionError: The provided corpus \['tag-data'\] does not match any of the corpora \['tag-data'\]. This happens whether or not I explic… --- ## [Logstash set up issue](https://discuss.elastic.co/t/logstash-set-up-issue/300160)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 4\ **Last updated:** [March 24, 2022, 6:06am UTC](https://discuss.elastic.co/t/logstash-set-up-issue/300160 "2022-03-24T06:06:33Z")
Hello, I am struggling with my logstash set up, which doesn't seem to be connected to the ELK stack. I cannot see Logstash under Stack Monitoring: However, I can see my custom log data which is ingested using logst… --- ## [Can max document size for Json plugin be increased? Seems to be 32768 now](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 8:44pm UTC](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227 "2022-03-23T20:44:26Z")
When using a Json filter in a logstash pipeline, I run into a size problem. I get an error indicating a max size of 32769 (2^15): :exception=\>#\