# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1027 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1028 --- ## [Kibana: Failed to create report](https://discuss.elastic.co/t/kibana-failed-to-create-report/297884)
**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 9:09pm UTC](https://discuss.elastic.co/t/kibana-failed-to-create-report/297884 "2022-03-03T21:09:26Z")
I'm trying to create a csv report kibana reports „Failed to create report“ with little information about why. Is there some secret switch one has to turn on before reports work something to make kibana tell me why? Its j… --- ## [Problem with Logstash SSL](https://discuss.elastic.co/t/problem-with-logstash-ssl/298084)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 18\ **Last updated:** [March 3, 2022, 8:50pm UTC](https://discuss.elastic.co/t/problem-with-logstash-ssl/298084 "2022-03-03T20:50:26Z")
hi, im having difficulties when changing my logstash SSL certificate, today i have a certificate that is in the /etc/logstash folder and i generated a new one through the elastic tool, using Elasticsearch-certutil and th… --- ## [Docker can't pull Kibana 7.15.2 using docker-compose up](https://discuss.elastic.co/t/docker-cant-pull-kibana-7-15-2-using-docker-compose-up/298748)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 8:21pm UTC](https://discuss.elastic.co/t/docker-cant-pull-kibana-7-15-2-using-docker-compose-up/298748 "2022-03-03T20:21:31Z")
Hey, I am trying to setup an ELK + APM to test it using docker, I followed along with the steps APM quick start with docker, but when I do docker-compose up, docker is stuck when pulling Kibana image 7.15.2, I checked on… --- ## [Using Search UI directly with Elasticsearch](https://discuss.elastic.co/t/using-search-ui-directly-with-elasticsearch/298787)
**Author:** [@brad-g](https://discuss.elastic.co/u/brad-g)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 8:03pm UTC](https://discuss.elastic.co/t/using-search-ui-directly-with-elasticsearch/298787 "2022-03-03T20:03:21Z")
I have a React/Django site focused on a search application built with Search UI. Right now I have it set up to query an App Search engine with a small test subset (~1000 documents) of the full dataset (~550,000 documents… --- ## [Elastic Search handle out of order updates](https://discuss.elastic.co/t/elastic-search-handle-out-of-order-updates/298571)
**Author:** [@andy4324](https://discuss.elastic.co/u/andy4324)\ **Replies:** 7\ **Last updated:** [March 3, 2022, 7:44pm UTC](https://discuss.elastic.co/t/elastic-search-handle-out-of-order-updates/298571 "2022-03-03T19:44:01Z")
Hi friends, new to ES and need some help from y'all. How can I handle out of order updates? Some context: We're building a custom monitoring system and planning to send events to ES via Kafka. Producers \> Kafka \> Consume… --- ## [RHEL 8.0, Installing Elasticsearch with dnf](https://discuss.elastic.co/t/rhel-8-0-installing-elasticsearch-with-dnf/298773)
**Author:** [@CoreyCBurton](https://discuss.elastic.co/u/CoreyCBurton)\ **Replies:** 1\ **Last updated:** [March 3, 2022, 7:42pm UTC](https://discuss.elastic.co/t/rhel-8-0-installing-elasticsearch-with-dnf/298773 "2022-03-03T19:42:06Z")
Hello, I am installing Elasticsearch using the command sudo dnf install --enablerepo=Elasticsearch Elasticsearch Is there any way to install this with security disabled? --- ## [ES 7.17 | Exponentially growing query cache](https://discuss.elastic.co/t/es-7-17-exponentially-growing-query-cache/298784)
**Author:** [@shweta.c](https://discuss.elastic.co/u/shweta.c)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 7:29pm UTC](https://discuss.elastic.co/t/es-7-17-exponentially-growing-query-cache/298784 "2022-03-03T19:29:42Z")
We recently migrated our Elastic cluster from version 7.7.1 to 7.17.0, and have been noticing that the query cache keeps growing exponentially if indexing is running on the nodes simultaneously with reasonably high searc… --- ## [LS 7.16.3 OutOfMemory jruby.RubyHash WatchedFilesCollection](https://discuss.elastic.co/t/ls-7-16-3-outofmemory-jruby-rubyhash-watchedfilescollection/298629)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 10\ **Last updated:** [March 3, 2022, 7:14pm UTC](https://discuss.elastic.co/t/ls-7-16-3-outofmemory-jruby-rubyhash-watchedfilescollection/298629 "2022-03-03T19:14:43Z")
My Logstash instances recently have started running OutOfMemory and need some help in identifying the cause. My logstash.conf has not been changed for a long time but I did do a few Logstash version upgrades in the past… --- ## [Moving Indices from Data Folder](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [March 3, 2022, 5:57pm UTC](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768 "2022-03-03T17:57:53Z")
If I wanted to quickly move indices from one node to another, would I break anything if I just cut/pasted the indices files under %ES\_HOME%\\data from one node to another? ...as opposed to using the \_cluster/reroute API, … --- ## [Jdbc\_static logstash plugin, multiple loaders, Parameter field not found in event](https://discuss.elastic.co/t/jdbc-static-logstash-plugin-multiple-loaders-parameter-field-not-found-in-event/298764)
**Author:** [@Q11](https://discuss.elastic.co/u/Q11)\ **Replies:** 1\ **Last updated:** [March 3, 2022, 5:28pm UTC](https://discuss.elastic.co/t/jdbc-static-logstash-plugin-multiple-loaders-parameter-field-not-found-in-event/298764 "2022-03-03T17:28:27Z")
I am using the jdbc\_static logstash plugin, and I want to enrich events with different types of data. I have multiple loaders set, but not all events have the parameter field for each loader. This shuts down the entire… --- ## [Kibana keeps logging users out "An unexpected authentication error..."](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-an-unexpected-authentication-error/296635)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 5:02pm UTC](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-an-unexpected-authentication-error/296635 "2022-03-03T17:02:00Z")
Our two Kibana instances have started to unexpectedly log users out very frequently, sometimes just after few seconds after logging in. Other times it seems to be stable and keeps user logged in then bam! logged out agai… --- ## [Sending log data from rsyslog to logstash](https://discuss.elastic.co/t/sending-log-data-from-rsyslog-to-logstash/298765)
**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 4:39pm UTC](https://discuss.elastic.co/t/sending-log-data-from-rsyslog-to-logstash/298765 "2022-03-03T16:39:44Z")
i wanted to know whether it's a best practice to send log data DIRECTLY with rsyslog into logstash ?? or is it better to send data from rsyslog to another rsyslog server and and then make logstash operate on this data r… --- ## [Filebeat-netflow to logstash send only specific fields](https://discuss.elastic.co/t/filebeat-netflow-to-logstash-send-only-specific-fields/298761)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 4:15pm UTC](https://discuss.elastic.co/t/filebeat-netflow-to-logstash-send-only-specific-fields/298761 "2022-03-03T16:15:57Z")
hello good morning I need your help to send the data from a filebeat-netflow to logstash and filter the fields that I need only to send it to my elastic cloud, I mean, I can specify which fields are sent only, so that I… --- ## [Control Visualization Option List sorting issue](https://discuss.elastic.co/t/control-visualization-option-list-sorting-issue/298560)
**Author:** [@Moni](https://discuss.elastic.co/u/Moni)\ **Replies:** 3\ **Last updated:** [March 3, 2022, 3:38pm UTC](https://discuss.elastic.co/t/control-visualization-option-list-sorting-issue/298560 "2022-03-03T15:38:56Z")
I am trying to list all values of a number field in Control Visualization Option list. The numbers are not showing in a sorted order. I'm using v7.16. Can someone please suggest if there are any workarounds ? Thanks for … --- ## [BulkProcessor for new Java API Client](https://discuss.elastic.co/t/bulkprocessor-for-new-java-api-client/298628)
**Author:** [@UglyBarnacle](https://discuss.elastic.co/u/UglyBarnacle)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 3:30pm UTC](https://discuss.elastic.co/t/bulkprocessor-for-new-java-api-client/298628 "2022-03-03T15:30:34Z")
Hi, Currently we are using es7.17.x in our environment and now evaluating what is necessary to upgrade to the new es8. So far we slowly started replacing the RestHighLevelClient with the new JavaAPI Client and then ide… --- ## [What is the \`index.number\_of\_routing\_shards\` setting? How can I calculate it based on the number of shards?](https://discuss.elastic.co/t/what-is-the-index-number-of-routing-shards-setting-how-can-i-calculate-it-based-on-the-number-of-shards/297540)
**Author:** [@Shane\_Gannon](https://discuss.elastic.co/u/Shane_Gannon)\ **Replies:** 7\ **Last updated:** [March 3, 2022, 3:27pm UTC](https://discuss.elastic.co/t/what-is-the-index-number-of-routing-shards-setting-how-can-i-calculate-it-based-on-the-number-of-shards/297540 "2022-03-03T15:27:41Z")
I'm aware of a similar question to this topic. Namely What are "number\_of\_routing\_shards"? - #2 by steffens. But it does not answer my question or help me understand the index.number\_of\_routing\_shards setting. I'm hopin… --- ## [Security issue for indices shrunken by ILM?](https://discuss.elastic.co/t/security-issue-for-indices-shrunken-by-ilm/298616)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 6\ **Last updated:** [March 3, 2022, 2:47pm UTC](https://discuss.elastic.co/t/security-issue-for-indices-shrunken-by-ilm/298616 "2022-03-03T14:47:05Z")
When using an ILM to shrink an index, the shrunken index gets a new name on the format shrink-\-\, e.g. shrink-j6-m-my-index (for index my-index). In order to preserve access to both the … --- ## [Is it possible to display a value for a threshold line on a vertical bar graph?](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559)
**Author:** [@vector\_prime](https://discuss.elastic.co/u/vector_prime)\ **Replies:** 9\ **Last updated:** [March 3, 2022, 2:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559 "2022-03-03T14:22:49Z")
Hi Elastic Community, The question is pretty much what the title says. I am looking to be able to display the value of a threshold line in a vertical bar chart on the chart in some way. I have the line configured and … --- ## [Plot when count is zero](https://discuss.elastic.co/t/plot-when-count-is-zero/298692)
**Author:** [@elastic21](https://discuss.elastic.co/u/elastic21)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 2:22pm UTC](https://discuss.elastic.co/t/plot-when-count-is-zero/298692 "2022-03-03T14:22:16Z")
Is there a way to plot time series graph so that there are bars when records count is 0 and no bars when records count is \> 0 ? Given a time interval is selected for plotting (say 30min) for the data in last 24hrs ? So,… --- ## [For prefix query, the max prefix length is 1000, is there any document show that?](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749)
**Author:** [@major](https://discuss.elastic.co/u/major)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 1:49pm UTC](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749 "2022-03-03T13:49:41Z")
for the prefix, I tried by my self, when the prefix length larger than 1000, the lucene will throw exception？I would like to know it there any configuration can change the max length? or any document support it? --- ## [Unified highlighter performance regression between 6.8 and 7.17](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747)
**Author:** [@julbra](https://discuss.elastic.co/u/julbra)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747 "2022-03-03T13:44:11Z")
After upgrading from Elasticsearch 6.8 to 7.17 we noticed that highlighting queries started taking several seconds instead of milliseconds. We have many hundreds of fields in our mapping and the data is sparsely populat… --- ## [Can´t reach localhost:9200 - Received Plaintext http - Windows](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 1:19pm UTC](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674 "2022-03-03T13:19:32Z")
Did anyone experience the same or has a soluation, what I am doing wrong? I am pretty new to elastic and propably it is easy to solve, but I am kind of at a loss here. I am unable to connect to http://localhost:9200 in t… --- ## [Facing some errors in kibana](https://discuss.elastic.co/t/facing-some-errors-in-kibana/298694)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [March 3, 2022, 1:12pm UTC](https://discuss.elastic.co/t/facing-some-errors-in-kibana/298694 "2022-03-03T13:12:57Z")
log \[10:01:31.426\] \[warning\]\[collector-set\]\[plugins\]\[usageCollection\] Unable to fetch data from reporting collector log \[10:01:32.237\] \[error\]\[index\]\[plugins\]\[security\]\[session\] Failed to retrieve session value: Req… --- ## [Can't get Windows winlogbeat 8.0 to run- The system cannot find the path](https://discuss.elastic.co/t/cant-get-windows-winlogbeat-8-0-to-run-the-system-cannot-find-the-path/298670)
**Author:** [@eafrost.cissp](https://discuss.elastic.co/u/eafrost.cissp)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 1:08pm UTC](https://discuss.elastic.co/t/cant-get-windows-winlogbeat-8-0-to-run-the-system-cannot-find-the-path/298670 "2022-03-03T13:08:48Z")
I upgraded my Elastic Stack on Windows from 7.17.0 to 8.0. I installed both metricbeat and winlogbeat 8.0 using the .msi files. Metricbeat runs fine. I cannot get winlogbeat to start. Winlogbeat fails because it cannot f… --- ## [\[Ingest pipeline\] tag and trace match](https://discuss.elastic.co/t/ingest-pipeline-tag-and-trace-match/298745)
**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 12:59pm UTC](https://discuss.elastic.co/t/ingest-pipeline-tag-and-trace-match/298745 "2022-03-03T12:59:22Z")
Hi, I try to migrate my logstash filters to ingest pipeline but I'm stuck on an issue: I'm parsing VMware ESX logs with a grok pattern and I would like to add a field if grok pattern match In logstash I've something l… --- ## [How to use different kibana indexes in kibana 8](https://discuss.elastic.co/t/how-to-use-different-kibana-indexes-in-kibana-8/298366)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 12:44pm UTC](https://discuss.elastic.co/t/how-to-use-different-kibana-indexes-in-kibana-8/298366 "2022-03-03T12:44:09Z")
In our lab environment, we are using two kibana instances with the Elasticsearch cluster. The problem is that kibana.index configuration option is deprecated now and it will be removed in kibana 8. In our lab environment… --- ## [Help to create new field from message](https://discuss.elastic.co/t/help-to-create-new-field-from-message/298626)
**Author:** [@Panplumousse](https://discuss.elastic.co/u/Panplumousse)\ **Replies:** 2\ **Last updated:** [March 3, 2022, 12:36pm UTC](https://discuss.elastic.co/t/help-to-create-new-field-from-message/298626 "2022-03-03T12:36:46Z")
Hello every body, I m looking for a way (maybe with grok, probably with grok :smiley: ), to create new field by extracting some specifique pattern but with keeping the field message without modification after operation … --- ## [How does kibana generates the visualizations?](https://discuss.elastic.co/t/how-does-kibana-generates-the-visualizations/298721)
**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 12:28pm UTC](https://discuss.elastic.co/t/how-does-kibana-generates-the-visualizations/298721 "2022-03-03T12:28:28Z")
How does the kibana generates the bar charts shown in dashboard ? Does kibana uses SSR (server side rendering) or it uses any third party library like Chart.js or something else ? --- ## [Sync Data between MongoDB to ElasticSearch](https://discuss.elastic.co/t/sync-data-between-mongodb-to-elasticsearch/298743)
**Author:** [@mzia87](https://discuss.elastic.co/u/mzia87)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 12:22pm UTC](https://discuss.elastic.co/t/sync-data-between-mongodb-to-elasticsearch/298743 "2022-03-03T12:22:07Z")
Hi Folks, Need to understand something: scenario: if we have 50 million records in our mongodb, then what is the best implementation to sync all the data inside Elasticsearch, like we have to store all the data inside … --- ## [How to get the aggregation value into a field in CSV in logstash configuration file?](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741)
**Author:** [@Ajay4998](https://discuss.elastic.co/u/Ajay4998)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 12:06pm UTC](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741 "2022-03-03T12:06:11Z")
Hi All, How to get terms aggregation key into field and value into field value in logstash for a CSV file, i have used Elasticsearch filter and also give the json file for query. can some please help on this Elasticsea… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1026) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1028)