# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1022 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1023 --- ## [Upgrade to 8.0.0 failed](https://discuss.elastic.co/t/upgrade-to-8-0-0-failed/298998)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 6:57pm UTC](https://discuss.elastic.co/t/upgrade-to-8-0-0-failed/298998 "2022-03-08T18:57:36Z")
I am running Elasticsearch 7.17.0 in EKS. Under /app/management/stack/upgrade\_assistant/es\_deprecations I see following I updated config to kind: StatefulSet apiVersion: apps/v1 metadata: name: es-master namespa… --- ## [Can't get logstash to work with Elastic 8.01](https://discuss.elastic.co/t/cant-get-logstash-to-work-with-elastic-8-01/298838)
**Author:** [@kim\_frederiksen](https://discuss.elastic.co/u/kim_frederiksen)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 6:37pm UTC](https://discuss.elastic.co/t/cant-get-logstash-to-work-with-elastic-8-01/298838 "2022-03-08T18:37:00Z")
Hi Everybody, I am extremely new to ELK and have yet to build the first real solution on the platform. We have had version 7.16.1 and we could see the logs from filebeat in kibana. But before we really begin building st… --- ## [Running ELK on docker, Kibana says: Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/running-elk-on-docker-kibana-says-unable-to-retrieve-version-information-from-elasticsearch-nodes/298220)
**Author:** [@Rajesh\_Singh](https://discuss.elastic.co/u/Rajesh_Singh)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 6:05pm UTC](https://discuss.elastic.co/t/running-elk-on-docker-kibana-says-unable-to-retrieve-version-information-from-elasticsearch-nodes/298220 "2022-03-08T18:05:57Z")
I was referring to example given in the Elasticsearch documentation for starting elastic stack (elastic and kibana) on docker using docker compose. It gives example of docker compose version 2.2 file. So, I tried to conv… --- ## [Get Copy Post URL via API for automatic reports](https://discuss.elastic.co/t/get-copy-post-url-via-api-for-automatic-reports/299094)
**Author:** [@Agus\_Roca](https://discuss.elastic.co/u/Agus_Roca)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 1:37pm UTC](https://discuss.elastic.co/t/get-copy-post-url-via-api-for-automatic-reports/299094 "2022-03-08T13:37:20Z")
Hi, i've been checking the docs and also the forum and seems like the only way to automate the generation of pdf is to first manually copy the Post URL and then, yes we have APIs to call. But I was wondering if it is pos… --- ## [Create fields from the objects that are a part of array in Logstash filter](https://discuss.elastic.co/t/create-fields-from-the-objects-that-are-a-part-of-array-in-logstash-filter/299088)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 5:14pm UTC](https://discuss.elastic.co/t/create-fields-from-the-objects-that-are-a-part-of-array-in-logstash-filter/299088 "2022-03-08T17:14:43Z")
In Logstash, in my event object there is a field that is an array. This field contains objects. I have to create or add some new fields in the event object and these fields will be created on the basis of the objects tha… --- ## [Filebeat output kafka (processors)](https://discuss.elastic.co/t/filebeat-output-kafka-processors/299071)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 4\ **Last updated:** [March 8, 2022, 5:13pm UTC](https://discuss.elastic.co/t/filebeat-output-kafka-processors/299071 "2022-03-08T17:13:30Z")
Hi, I have a problem i think in "processors" , I use the output kafka so i created a topic and i send it to logstash so when i run it i just get the message when i want see path,tags,input type.... here my filebeat con… --- ## [\[Kibana\] Some plugins show yellow state in 7.16.3](https://discuss.elastic.co/t/kibana-some-plugins-show-yellow-state-in-7-16-3/297623)
**Author:** [@PEB](https://discuss.elastic.co/u/PEB)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 4:36pm UTC](https://discuss.elastic.co/t/kibana-some-plugins-show-yellow-state-in-7-16-3/297623 "2022-03-08T16:36:02Z")
Similarly to https://discuss.elastic.co/t/kibana-state-become-yellow-after-upgrade-to-version-7-16-2 , we have yellow state for kibana with the same plugin list. I wonder if this is kind of a bug or is there something f… --- ## [Error in beats elastic agent container: open /hostfs/sys/fs/cgroup/io.pressure: no such file or directory](https://discuss.elastic.co/t/error-in-beats-elastic-agent-container-open-hostfs-sys-fs-cgroup-io-pressure-no-such-file-or-directory/299115)
**Author:** [@Josh-a-e](https://discuss.elastic.co/u/Josh-a-e)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 4:20pm UTC](https://discuss.elastic.co/t/error-in-beats-elastic-agent-container-open-hostfs-sys-fs-cgroup-io-pressure-no-such-file-or-directory/299115 "2022-03-08T16:20:35Z")
On running an elastic agent container (docker.elastic.co/beats/elastic-agent:8.0.1) as a daemon set (configuration here - https://raw.githubusercontent.com/elastic/beats/8.0/deploy/kubernetes/elastic-agent-managed-kubern… --- ## [Logstash slow in bash script launch by cronjob](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103)
**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\ **Replies:** 5\ **Last updated:** [March 8, 2022, 4:18pm UTC](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103 "2022-03-08T16:18:58Z")
Hi I have a bash script like that: #!/bin/bash cat /home/xxx/public\_html/datas/zz/file.csv | /usr/share/logstash/bin/logstash -f /home/xxx/public\_html/datas/myconf.conf My conf file is basic like that: input { st… --- ## [Setup Fleet on Windows. I cannot get it to work at all](https://discuss.elastic.co/t/setup-fleet-on-windows-i-cannot-get-it-to-work-at-all/299095)
**Author:** [@Akon](https://discuss.elastic.co/u/Akon)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 1:41pm UTC](https://discuss.elastic.co/t/setup-fleet-on-windows-i-cannot-get-it-to-work-at-all/299095 "2022-03-08T13:41:47Z")
Hello, I cant seem to get Elastic Fleet Server to run on Windows. I tried the official and this solution aswell. We have set up security with a certificate but every possible way does not seem to work. I used this co… --- ## [Composite Aggregation](https://discuss.elastic.co/t/composite-aggregation/299112)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 3:45pm UTC](https://discuss.elastic.co/t/composite-aggregation/299112 "2022-03-08T15:45:21Z")
Hi there, I would like to know how the composite aggregations works exactly. Do they open a context with a TTL taking a "snapshot" of the index just like scroll? If so, for the same number of buckets are the performan… --- ## [Indexing problems with GDAL/ogr2ogr for GEO\_POINT of geojson files](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856)
**Author:** [@Jordi\_Piqueras\_Bauti](https://discuss.elastic.co/u/Jordi_Piqueras_Bauti)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 3:44pm UTC](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856 "2022-03-08T15:44:09Z")
I am having problem indexing Geojson files that have Point geometries using GDAL/ogr2ogr library. Points are not being indexed in the same way as if I am doing uploading geojson file with Kibana. With ogr2ogr I am havi… --- ## [Blocking call in new async Java API Client?](https://discuss.elastic.co/t/blocking-call-in-new-async-java-api-client/299021)
**Author:** [@CletusTSJY](https://discuss.elastic.co/u/CletusTSJY)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 3:24pm UTC](https://discuss.elastic.co/t/blocking-call-in-new-async-java-api-client/299021 "2022-03-08T15:24:39Z")
I'm trying to migrate from the old RestHighLevelClient to the new Java API Client (v7.16.0) in a Spring Webflux project. With the old client I was able to convert the response to a Mono\<\> using the client's listener mech… --- ## [Issue with index name](https://discuss.elastic.co/t/issue-with-index-name/299100)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 3:18pm UTC](https://discuss.elastic.co/t/issue-with-index-name/299100 "2022-03-08T15:18:20Z")
Hi, I can't change my index name im using filebeat 7.14.1 and filebeat won't change my index name to the one that I have in my config The docs are idexed to filebeat-7.14.1, pleas what am I doing wrong in here output.… --- ## [Heartbeat: Populate monitor.name from field value](https://discuss.elastic.co/t/heartbeat-populate-monitor-name-from-field-value/299010)
**Author:** [@Jeff\_Morton](https://discuss.elastic.co/u/Jeff_Morton)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 2:26pm UTC](https://discuss.elastic.co/t/heartbeat-populate-monitor-name-from-field-value/299010 "2022-03-08T14:26:31Z")
Greetings, I'm trying to dynamically populate the heartbeat monitor name (monitor.name field) dynamically from a predefined kubernetes label. I've attempted using the copy\_field processor, but this doesn't appear to wo… --- ## [Querying Elasticsearch Arrays with NEST and gRPC protos](https://discuss.elastic.co/t/querying-elasticsearch-arrays-with-nest-and-grpc-protos/299102)
**Author:** [@simobrusch](https://discuss.elastic.co/u/simobrusch)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 2:13pm UTC](https://discuss.elastic.co/t/querying-elasticsearch-arrays-with-nest-and-grpc-protos/299102 "2022-03-08T14:13:20Z")
My goal is to return a result of a search query to the user. This is done by querying a list of objects in Elasticsearch with a custom search parameter in a dotnet 6 webapi project using gRPC proto files and NEST. My pr… --- ## [Dropping specific container labels from fields](https://discuss.elastic.co/t/dropping-specific-container-labels-from-fields/298309)
**Author:** [@Dario\_Louzado](https://discuss.elastic.co/u/Dario_Louzado)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 12:47pm UTC](https://discuss.elastic.co/t/dropping-specific-container-labels-from-fields/298309 "2022-03-08T12:47:13Z")
Hello. I'm trying to clean-up my logging events as much as possible in order to save bandwidth and disk space in Elasticsearch. I want to delete specific labels and preserve others. Below is my full YAML file: name: … --- ## [Create Pie Chart](https://discuss.elastic.co/t/create-pie-chart/298887)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:30pm UTC](https://discuss.elastic.co/t/create-pie-chart/298887 "2022-03-08T12:30:34Z")
Hi Community! I want make a pie chart with some data but I don´t know how to do it. I have a doc that looks like: { Login: passed, Country: Spain, Logout: passed } I have diferent docs with diferent countries, lik… --- ## [Problem with metricbeat to monitor one cluster with security enabled and the other one without security enabled](https://discuss.elastic.co/t/problem-with-metricbeat-to-monitor-one-cluster-with-security-enabled-and-the-other-one-without-security-enabled/297903)
**Author:** [@AitorGomezSanz](https://discuss.elastic.co/u/AitorGomezSanz)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 1:38pm UTC](https://discuss.elastic.co/t/problem-with-metricbeat-to-monitor-one-cluster-with-security-enabled-and-the-other-one-without-security-enabled/297903 "2022-02-22T13:38:35Z")
Hi, I have a problem, because I have two clusters, one of these clusters (cluster1) has xpack security enabled, and the other one doesn't have security enabled (cluster2). The problem is that I want to monitor cluster1 … --- ## [The aggregation series\_agg is not supported in entire\_time\_range mode](https://discuss.elastic.co/t/the-aggregation-series-agg-is-not-supported-in-entire-time-range-mode/298846)
**Author:** [@d71247](https://discuss.elastic.co/u/d71247)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:25pm UTC](https://discuss.elastic.co/t/the-aggregation-series-agg-is-not-supported-in-entire-time-range-mode/298846 "2022-03-08T12:25:29Z")
After upgrading our kibana instance from 7.4 to 7.16.3 , we saw errors in our Visualizes tsvb "The aggregation series\_agg is not supported in entire\_time\_range mode" --- ## [Filebeat should omit timestamp in logs when ran via systemd](https://discuss.elastic.co/t/filebeat-should-omit-timestamp-in-logs-when-ran-via-systemd/299087)
**Author:** [@XANi](https://discuss.elastic.co/u/XANi)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 12:20pm UTC](https://discuss.elastic.co/t/filebeat-should-omit-timestamp-in-logs-when-ran-via-systemd/299087 "2022-03-08T12:20:46Z")
Currently logs via systemd look like this: Mar 08 13:13:10 appserv1 filebeat\[22055\]: 2022-03-08T13:13:10.657+0100 INFO instance/beat.go:694 Beat ID: 70152ff2-5b2e-4c03-a60c-eedffb110c54 and the timestamp is doub… --- ## [Query on responded output](https://discuss.elastic.co/t/query-on-responded-output/298907)
**Author:** [@Tanvir\_Ahmmed](https://discuss.elastic.co/u/Tanvir_Ahmmed)\ **Replies:** 0\ **Last updated:** [March 6, 2022, 9:27am UTC](https://discuss.elastic.co/t/query-on-responded-output/298907 "2022-03-06T09:27:23Z")
How to write a conditional query on multiple fields? Explain: I have an index let say "case" and the fields are "title", "secondTitle(contain nested obj)", "source(contain nested obj)". Now I want to search on title and… --- ## [Hide "-" valued entries in predefined metricbeat dashboard](https://discuss.elastic.co/t/hide-valued-entries-in-predefined-metricbeat-dashboard/297524)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:13pm UTC](https://discuss.elastic.co/t/hide-valued-entries-in-predefined-metricbeat-dashboard/297524 "2022-03-08T12:13:31Z")
Hello, i just set up metricbeat with the predefined kibana dashboards. Is it possible to hide all entries with a "-" value, that are on top and look like they have 100%? I tried a filter on the field with 0% to 100… --- ## [Pipeline error : java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/pipeline-error-java-lang-outofmemoryerror-java-heap-space/299081)
**Author:** [@Sara\_Chater](https://discuss.elastic.co/u/Sara_Chater)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 11:32am UTC](https://discuss.elastic.co/t/pipeline-error-java-lang-outofmemoryerror-java-heap-space/299081 "2022-03-08T11:32:37Z")
Dear community, I have a log file that contains multiple entries per transaction id Entries are ordered in file, but not necessary one after each other I tried using logstash aggregate filter as follow : My idea is to… --- ## [Document table with duplicate records](https://discuss.elastic.co/t/document-table-with-duplicate-records/298066)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 11:18am UTC](https://discuss.elastic.co/t/document-table-with-duplicate-records/298066 "2022-03-08T11:18:22Z")
I have a problem: when importing a document table created on kibana v7.7.1 on a kibana v7.14.1, I have duplicate records that determine me wrong totals on the metrics. Opening the visualization in edit, as if I wanted to… --- ## [Config directory location for token filter helper files](https://discuss.elastic.co/t/config-directory-location-for-token-filter-helper-files/299078)
**Author:** [@Gabor\_Gergely](https://discuss.elastic.co/u/Gabor_Gergely)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 10:48am UTC](https://discuss.elastic.co/t/config-directory-location-for-token-filter-helper-files/299078 "2022-03-08T10:48:01Z")
I want to use token filters which require some helper files in the config directory (e.g. the hyphenation decompounder token filter, which requires an xml file in the hyphenation\_patterns\_path parameter). The docs says:… --- ## [How can I use standard SQL on text fields of elastic without using the specials SQL elasticSearch operators?](https://discuss.elastic.co/t/how-can-i-use-standard-sql-on-text-fields-of-elastic-without-using-the-specials-sql-elasticsearch-operators/299057)
**Author:** [@shiranOren](https://discuss.elastic.co/u/shiranOren)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 8:47am UTC](https://discuss.elastic.co/t/how-can-i-use-standard-sql-on-text-fields-of-elastic-without-using-the-specials-sql-elasticsearch-operators/299057 "2022-03-08T08:47:36Z")
I would like to create SQL query on some text field (not keyword) for example "name" field and send that query to elastic server. my problem is that I need to use the standard SQL language (not the MATCH and QUERY opera… --- ## [ELK servers required for training](https://discuss.elastic.co/t/elk-servers-required-for-training/299047)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 9:47am UTC](https://discuss.elastic.co/t/elk-servers-required-for-training/299047 "2022-03-08T09:47:53Z")
Hi i'm preparing for the elastic exam and i want to setup an env for training. what is the minimum space to run ELK stack without any issue ? and how many node required ? thanks --- ## [Use terms in events yesterday to for filter when documents appears the last week](https://discuss.elastic.co/t/use-terms-in-events-yesterday-to-for-filter-when-documents-appears-the-last-week/299063)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 9:45am UTC](https://discuss.elastic.co/t/use-terms-in-events-yesterday-to-for-filter-when-documents-appears-the-last-week/299063 "2022-03-08T09:45:24Z")
My use case requires search when some documents appears in the last 7 days based on the terms present in the documents exactly yesterday. I want to avoid make two querys one for query the terms yesterday and another to … --- ## [Java way to analyze a field with two analyzers](https://discuss.elastic.co/t/java-way-to-analyze-a-field-with-two-analyzers/299050)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 9:44am UTC](https://discuss.elastic.co/t/java-way-to-analyze-a-field-with-two-analyzers/299050 "2022-03-08T09:44:44Z")
I want to analyze an email with two different custom analyzers at the same time. One analyzer will extract the words from it and another one will extract the special characters from it. And, I want to return the result r… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1021) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1023)