# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1014 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1015 --- ## [Is it safe to ingest data while tiebreaker node is stopped?](https://discuss.elastic.co/t/is-it-safe-to-ingest-data-while-tiebreaker-node-is-stopped/299708)
**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 9:26am UTC](https://discuss.elastic.co/t/is-it-safe-to-ingest-data-while-tiebreaker-node-is-stopped/299708 "2022-03-15T09:26:39Z")
Hi, I have an Elastic Cloud deployment with two data nodes and a tiebreaker node. The tiebreaker node was stopped during a deployment configuration change, and I can't seem to restart it. The data nodes are still operat… --- ## [Elasticsearch scoring Issue for same data](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690 "2022-03-15T09:01:56Z")
I have an Elastic Index with the below 4 documents. PUT test/\_doc/1 { "tag" : "prove" } PUT test/\_doc/2 { "tag" : "prove" } PUT test/\_doc/3 { "tag" : "freckle" } PUT test/\_doc/4 { "tag" : "freckle" } On this i am runni… --- ## [How to get params date into fitler Kibana by scripted field?](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607)
**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\ **Replies:** 5\ **Last updated:** [March 15, 2022, 8:48am UTC](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607 "2022-03-15T08:48:06Z")
I have a filter date in dashboard Kibana and I need get param end date in this filter by scripted field. Please support me if you can! --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 12\ **Last updated:** [March 15, 2022, 8:21am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338 "2022-03-15T08:21:20Z")
Running Windows 10, Logstash 8.1.0, elasticsearch, kibana and filebeat 8.0.0 all on the same machine. I also tried running version 8.0.0 of Logstash but I get the same error. Getting the data from filebeat to kibana wor… --- ## [How to re-insert json data retrieved in Elasticsearch](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:37am UTC](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695 "2022-03-15T07:37:54Z")
I want to put the searched Json Data as below in Elasticsearch of another cluster. Will it be possible? Json file "\_type" : "\_doc", "\_id" : "1", "\_score" : 1.0, "\_source" : { "helpMe" : "hi hi hi … --- ## [Logstash Writing to Two Log Files](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 8:19am UTC](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628 "2022-03-15T08:19:32Z")
Hi, Our logstash 7.16.2 instances are writing log files to /var/log/logstash/logstash-plain.log and /var/log/logstash-stdout.log. How do we prevent the creation of the second log under /var/log? Log config looks like t… --- ## [Combine data from different index in kibana](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647)
**Author:** [@Lumiere](https://discuss.elastic.co/u/Lumiere)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:44am UTC](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647 "2022-03-15T07:44:53Z")
Hello, i'm new user and i use kibana (v 7.14.2). I am trying to combine data from differents index in the another index or view. Please, it is possible? For exemple, First index : { "\_index":" index-1", "\_source":… --- ## [Error multiple index templates may not match during index creation](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 7:28am UTC](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666 "2022-03-15T07:28:23Z")
Hi, I got the following error message in kibana.log {"type":"log","@timestamp":"2022-03-14T21:31:34+01:00","tags":\["error","plugins","security","session","index"\],"pid":14270,"message":"Failed to create session index t… --- ## [Elasticsearch Error "Authentication using apikey failed"](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684 "2022-03-15T06:09:00Z")
Hello, i'm running Elasticsearch 8.1.0 and have many error entries like this on in the elastic logs: \[2022-03-15T07:02:15,222\]\[WARN \]\[o.e.x.s.a.ApiKeyAuthenticator\] \[NODENAMEE\] Authentication using apikey failed - unab… --- ## [How to fix this data ingesting data from mysql to filebeat to kafka to elastic?](https://discuss.elastic.co/t/how-to-fix-this-data-ingesting-data-from-mysql-to-filebeat-to-kafka-to-elastic/299681)
**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 5:57am UTC](https://discuss.elastic.co/t/how-to-fix-this-data-ingesting-data-from-mysql-to-filebeat-to-kafka-to-elastic/299681 "2022-03-15T05:57:39Z")
Data are encrypted and now can't ingest to kafka. Dev Console: CLI Kafka Thank you in advance! --- ## [Effect of increasing index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608)
**Author:** [@csdev](https://discuss.elastic.co/u/csdev)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608 "2022-03-15T05:37:01Z")
Hi Everyone, As per Elasticsearch documentation available at link Mapping limit settings | Elasticsearch Guide \[8.1\] | Elastic, the limit of 10k on index.mapping.nested\_objects.limit is kept to prevent out of memory err… --- ## [Logstash not working as a service](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 3:19am UTC](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600 "2022-03-15T03:19:26Z")
Hello, I am new to ELK and am trying to set up monitoring on few of our application jobs using ELK stack. I could run the below query successfully and the data is reflecting on Kibana: logstash -f /etc/logstash/conf.d/… --- ## [Dropped Netflow Data](https://discuss.elastic.co/t/dropped-netflow-data/299609)
**Author:** [@Alif](https://discuss.elastic.co/u/Alif)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 11:23am UTC](https://discuss.elastic.co/t/dropped-netflow-data/299609 "2022-03-14T11:23:53Z")
Me and my team currently having an issue with netflow data ingestion using logstash / filebeat. The data seems to be massively dropped to around 1/7 (using logstash) and 1/100 (using filebeat) when we compare to the actu… --- ## [Options for analytics on ES](https://discuss.elastic.co/t/options-for-analytics-on-es/299657)
**Author:** [@yosiasz](https://discuss.elastic.co/u/yosiasz)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 1:37am UTC](https://discuss.elastic.co/t/options-for-analytics-on-es/299657 "2022-03-15T01:37:10Z")
Greetings, We have tons of data coming into our ES from devices across the whole US. We need to do a lot of analytical research on this data. We do not want to do this on the live data but would like to do it on copies … --- ## [Cannot read configured pem certificate](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545)
**Author:** [@tehfcae](https://discuss.elastic.co/u/tehfcae)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 12:23am UTC](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545 "2022-03-15T00:23:04Z")
I generated a PEM certificate for my Elasticsearch however, I am getting an error that it cannot read configured PEM certificate due to a permissions issue, however, I verified the permissions and it should have read/wri… --- ## [Hesitation between three Elasticsearch-based Architectures](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625)
**Author:** [@bechir-jamoussi](https://discuss.elastic.co/u/bechir-jamoussi)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 9:51pm UTC](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625 "2022-03-14T21:51:16Z")
Hello everyone, Let me present to you my Use Case: I am trying to develop an algorithm that chooses the best communication channel(SMS, RCS, Messenger, Whatsapp, E-mail) and the best moment to communicate with the clie… --- ## [Can Kibana monitor two indexes at the same time?](https://discuss.elastic.co/t/can-kibana-monitor-two-indexes-at-the-same-time/299655)
**Author:** [@Michael\_Santos](https://discuss.elastic.co/u/Michael_Santos)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 9:48pm UTC](https://discuss.elastic.co/t/can-kibana-monitor-two-indexes-at-the-same-time/299655 "2022-03-14T21:48:44Z")
I am curios if Kibana can monitor two indexes at the same time in the Alerting section. Like in the image below. I declared two indexes, so does that mean it monitors the documents in both indexes ? --- ## [NGINX as revers proxy to elasticsearch coordinator nodes](https://discuss.elastic.co/t/nginx-as-revers-proxy-to-elasticsearch-coordinator-nodes/299656)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 8:06pm UTC](https://discuss.elastic.co/t/nginx-as-revers-proxy-to-elasticsearch-coordinator-nodes/299656 "2022-03-14T20:06:10Z")
Hi I'm forcing in my environment setup on nginx for Elasticsearch: -what I have a problem with the correct configuration for connect NGINX over TLS to my nodes below You can find my configuration,maybe You can point m… --- ## [Elasticsearch terms aggregation with partition does not retuning equal bucket](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346 "2022-03-14T20:03:56Z")
I have an ES index and I fetch data using term aggregation and partition. I am using the cardinality aggregation to get the total number of buckets and calculating num\_partitions, using default size values 10. E.g. Ca… --- ## [Index lifecycle error - illegal\_argument\_exception:index name does not match pattern '^.\*-\\d+$' -Use Retry But Getting same error after sometime](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:50pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660 "2022-03-14T19:50:33Z")
Hi Team, I have created ilm , Template and alias respectively as i am getting illegal\_argument\_exception: index name \[rebalance\_index\_001\] does not match pattern '^.\*-\\d+$'. error. I have run retry ilm command . I don't… --- ## [Delay in a hourly logfiles](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659)
**Author:** [@oren](https://discuss.elastic.co/u/oren)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:26pm UTC](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659 "2022-03-14T19:26:47Z")
hi I have windows system with file beat 7.4.1 and I load hourly big log files to elastic throw Logstash I have delay with the data only in this system what should be beat configuration ? --- ## [Do filebeat has hostname variable?](https://discuss.elastic.co/t/do-filebeat-has-hostname-variable/298665)
**Author:** [@Gyrops](https://discuss.elastic.co/u/Gyrops)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 7:10pm UTC](https://discuss.elastic.co/t/do-filebeat-has-hostname-variable/298665 "2022-03-14T19:10:44Z")
I need to configure a hostname variable in my filebeat.yaml configuration file without using host system variable. It's doabble? How is now: fields: source: myhostname How I would like it to be: fields: source: $… --- ## [Failed to start filebeat\_ drop\_fields processors](https://discuss.elastic.co/t/failed-to-start-filebeat-drop-fields-processors/299154)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 6\ **Last updated:** [March 14, 2022, 6:53pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-drop-fields-processors/299154 "2022-03-14T18:53:03Z")
good day I have a problem when I start filebeat I get the following error: and this is my configuration in filebeat.yml # ================================= Processors ================================= processors: #… --- ## [Deletions in reindex](https://discuss.elastic.co/t/deletions-in-reindex/299650)
**Author:** [@Aditya\_Verma1](https://discuss.elastic.co/u/Aditya_Verma1)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 4:55pm UTC](https://discuss.elastic.co/t/deletions-in-reindex/299650 "2022-03-14T16:55:27Z")
I have an index which i want to reindex to a new index increasing the no of primary shards. So i started reindexing. I didn't make the source index read only so ingestions, updations and deletions were happening on the s… --- ## [Kibana to Elastic node xpack.security.http.ssl.enabled](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645)
**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:26pm UTC](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645 "2022-03-14T16:26:01Z")
Looking for some insight on the following Current configuration Elasticnodes (using internal CA) configured with xpack.security.http.ssl.enabled:true so things like kibana and logstash outputs can connect via https. Al… --- ## [Dont disable merges?](https://discuss.elastic.co/t/dont-disable-merges/299646)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:30pm UTC](https://discuss.elastic.co/t/dont-disable-merges/299646 "2022-03-14T16:30:26Z")
So I found an interesting bit of info in a post and wanted to know more information "The best answer to those is don't disable merging as I mentioned. Otherwise yes merges use IO, if you disable them then they won't ha… --- ## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464)
**Author:** [@tilchl](https://discuss.elastic.co/u/tilchl)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 4:24pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464 "2022-03-14T16:24:48Z")
Im trying to create a new index pattern in Kibana but I get Couldn't find any Elasticsearch data elasticsearch::9200 returns: { "name" : "rechenmonster-es01", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "S… --- ## [High CPU Usage across entire cluster](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 8\ **Last updated:** [March 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508 "2022-03-14T16:14:33Z")
We have a version 5.6 100 plus node cluster which has been suffering from high cpu usage for a sometime now. The hot threads show several different threads which are usually taking 100% cpu. 3 masters 6i.xlarge 38 node… --- ## [Display count of tomcat down -metric visualization](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 3:45pm UTC](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477 "2022-03-14T15:45:44Z")
Trying to create a visulization in kibana that should only display no of tomcat which are down. I guess I'm using wrong aggregation and not getting exactly wht can help out here. ''''''''''''''''' logs: Filelds: 1)t… --- ## [System health based on multiple metrics](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 3:44pm UTC](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531 "2022-03-14T15:44:40Z")
I am looking to display the health of a system based on multiple metrics, e.g. cpu/memory/page load times via iis/uptime etc. So I have multiple beats and Elasticsearch ingesting multiple data points. Ideally I want to… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1013) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1015)