# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1053

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1054

---

## [ILM rollover on inconsistent docs count rather than configured configuration](https://discuss.elastic.co/t/ilm-rollover-on-inconsistent-docs-count-rather-than-configured-configuration/296432)

<div class="topic-metadata">

**Author:** [@pratikdandavate](https://discuss.elastic.co/u/pratikdandavate)\
**Replies:** 4\
**Last updated:** [February 15, 2022, 8:25am UTC](https://discuss.elastic.co/t/ilm-rollover-on-inconsistent-docs-count-rather-than-configured-configuration/296432 "2022-02-15T08:25:26Z")

</div>

I have created ILM policy with following configuration : { "policy": { "phases": { "hot": { "actions": { "rollover": { "max\_docs": 1500…

---

## [Error while executing painless script : Cannot invoke \\"Object.getClass()\\" because \\"receiver\\" is null". Same script is working fine in Dev tools](https://discuss.elastic.co/t/error-while-executing-painless-script-cannot-invoke-object-getclass-because-receiver-is-null-same-script-is-working-fine-in-dev-tools/297128)

<div class="topic-metadata">

**Author:** [@KabirAli07](https://discuss.elastic.co/u/KabirAli07)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 6:29am UTC](https://discuss.elastic.co/t/error-while-executing-painless-script-cannot-invoke-object-getclass-because-receiver-is-null-same-script-is-working-fine-in-dev-tools/297128 "2022-02-15T06:29:35Z")

</div>

{ "trigger": { "schedule": { "interval": "30m" } }, "input": { "chain": { "inputs": \[ { "first": { "search": { "request": { "searc…

---

## [Out of memorry Error When Using Java Client API](https://discuss.elastic.co/t/out-of-memorry-error-when-using-java-client-api/297038)

<div class="topic-metadata">

**Author:** [@Gandalf](https://discuss.elastic.co/u/Gandalf)\
**Replies:** 3\
**Last updated:** [February 15, 2022, 6:03am UTC](https://discuss.elastic.co/t/out-of-memorry-error-when-using-java-client-api/297038 "2022-02-15T06:03:04Z")

</div>

I'm migrating my code from Java Rest High Level API to Java Client API 7.16 version. Everything goes all right in my local enviroment but got the OutOfMemoryError: Direct buffer memory error when I pull it to the Test E…

---

## [Embed anonymous not working](https://discuss.elastic.co/t/embed-anonymous-not-working/297117)

<div class="topic-metadata">

**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\
**Replies:** 5\
**Last updated:** [February 15, 2022, 5:23am UTC](https://discuss.elastic.co/t/embed-anonymous-not-working/297117 "2022-02-15T05:23:22Z")

</div>

hi, I'm having trouble embedding anonymously into another website, when I input the kibana.yml config and my kibana can't be accessed with an error #xpack.security.authc.providers: basic.basic1: order: 0 anonymous.ano…

---

## [Geo IP Location Mapping issue in Logstash Filter](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 1\
**Last updated:** [February 15, 2022, 5:22am UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168 "2022-02-15T05:22:00Z")

</div>

I am using geoIP logstash filter for getting the geo location details using IPs in logstash. For manually updating the maxmind geolite2 databse, we have downloaded the database files(GeoLite2-City.mmdb and GeoLite2-ASN.…

---

## [Fleet: Share integration configuration](https://discuss.elastic.co/t/fleet-share-integration-configuration/296597)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 5:08am UTC](https://discuss.elastic.co/t/fleet-share-integration-configuration/296597 "2022-02-15T05:08:52Z")

</div>

Hi all, We just started playing around with Fleet and we stumbled over the following topic: According to the documentation, each agent can only be enrolled in a single policy. The integrations are configured on that po…

---

## [Elasticsearch upgrade with indexing](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149 "2022-02-15T00:26:36Z")

</div>

Im using Elasticsearch 7.4.2 with three cluserted nodes. Im upgrading node 1 to 7.10.2 and then I want to update some KIbana Objects inside Elasticsearch. At that time, other nodes will be in 7.4.2 and still running. Can…

---

## [Embed anonymous not working](https://discuss.elastic.co/t/embed-anonymous-not-working/297201)

<div class="topic-metadata">

**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\
**Replies:** 1\
**Last updated:** [February 15, 2022, 12:20am UTC](https://discuss.elastic.co/t/embed-anonymous-not-working/297201 "2022-02-15T00:20:16Z")

</div>

hi, I'm having trouble embedding anonymously into another website, when I input the kibana.yml config and my kibana can't be accessed with an error xpack.security.authc.providers: basic.basic1: order: 0 anonymous.an…

---

## [Kibana authentication with Nginx prompting password again and again](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [February 15, 2022, 12:14am UTC](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074 "2022-02-15T00:14:02Z")

</div>

Hi Team, I have a complete elastic-stack with x-pack security and its working fine. However my concern is I wanted to secure this with 2 FA or other basic authentication by putting it behind Nginx reverse proxy. Since t…

---

## [Kibana lens formula flexibility for histogram aggregation](https://discuss.elastic.co/t/kibana-lens-formula-flexibility-for-histogram-aggregation/297184)

<div class="topic-metadata">

**Author:** [@Samuel\_Wehrli](https://discuss.elastic.co/u/Samuel_Wehrli)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 11:05pm UTC](https://discuss.elastic.co/t/kibana-lens-formula-flexibility-for-histogram-aggregation/297184 "2022-02-14T23:05:03Z")

</div>

Hi, I use the kibana lens formula feature to calculate cumulative sums as the denominator in a division. This works with date histograms. Unfortunately, using pipeline aggregations (such as cumulative sum) seems not poss…

---

## [How to use filters in a query](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 10\
**Last updated:** [February 14, 2022, 11:01pm UTC](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990 "2022-02-14T23:01:38Z")

</div>

Hello. I am working with Elasticsearch 6.8.0 and am trying to follow the example on this page filter but cannot get the filter clause to produce the results I want. I am working with the sample dataset in the bank inde…

---

## [Audit logs on ES 7.16.3](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 9:30pm UTC](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190 "2022-02-14T21:30:24Z")

</div>

Hello, Last time I upgraded ES to latest version 7.16.3, The problem which I have is define audit logs, I have below config: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_name: true …

---

## [Readiness probe failed waiting for cluster to become ready](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192)

<div class="topic-metadata">

**Author:** [@cloudnative](https://discuss.elastic.co/u/cloudnative)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 9:02pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192 "2022-02-14T21:02:20Z")

</div>

Hi, I am currently experiencing the above error after initially experiencing a crashloopbackup error due to a wrong container repo. We were trying to create an a new user account with "bin/Elasticsearch-user ". While thi…

---

## [Delay between Logstash and ES? ELK 7.16.1 \[ECK\]](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882)

<div class="topic-metadata">

**Author:** [@rudyfaile](https://discuss.elastic.co/u/rudyfaile)\
**Replies:** 15\
**Last updated:** [February 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882 "2022-02-14T19:59:30Z")

</div>

Howdy, Similar to and We're experiencing a 1-2 minute delay between logstash and ES and can't figure out why. We're relatively sure the problem is between logstash and ES. If I manually trigger an error it appear…

---

## [Kibana TLS handshake timeout](https://discuss.elastic.co/t/kibana-tls-handshake-timeout/296691)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 7:45pm UTC](https://discuss.elastic.co/t/kibana-tls-handshake-timeout/296691 "2022-02-14T19:45:55Z")

</div>

{"type":"error","@timestamp":"2022-02-08T02:53:43+00:00","tags":\["connection","client","error"\],"pid":8,"level":"error","error":{"message":"TLS handshake timeout","name":"Error","stack":"Error: TLS handshake timeout\\n …

---

## [Master-Eligible node cluster resiliency for ElasticSearch 7.x](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125)

<div class="topic-metadata">

**Author:** [@crossdelena12](https://discuss.elastic.co/u/crossdelena12)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 7:22pm UTC](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125 "2022-02-14T19:22:51Z")

</div>

Hello, I am using Elasticsearch v7.17.0. Here is my configuration that I am testing the new version with, I have dedicated master node (3) and data node (1). This sets up my cluster and am in business. However, when I …

---

## [Finding message length](https://discuss.elastic.co/t/finding-message-length/296604)

<div class="topic-metadata">

**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 6:32pm UTC](https://discuss.elastic.co/t/finding-message-length/296604 "2022-02-14T18:32:16Z")

</div>

this giving runtime error. Please advice. GET logstash-2022.01.25/\_doc/\_search { "query": { "match\_all": {} }, "script\_fields": { "log\_size": { "script": { "lang": "painless", "source": "doc\['message.keyword'\].…

---

## [Pipeline stopped with "Index 83 out of bounds for length 16"](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 6:07pm UTC](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898 "2022-02-14T18:07:01Z")

</div>

Hi, We have a configuration of logstash with several pipelines, having a main pipeline that receives the information, identifies the type of information and sends to different pipelines for procesing before sending the …

---

## [Logstash - jdbc retry multiple ips](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107)

<div class="topic-metadata">

**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 6:03pm UTC](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107 "2022-02-14T18:03:12Z")

</div>

Hi i'm connecting to my database via scan name and my scan name resolve to 3 IPs but the issue is sometimes 1 or 2 IPs get unavailable my question how i can set the connection to retry all IPs as below jdbc\_connectio…

---

## [Prefix query with multiple terms in sequence](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175)

<div class="topic-metadata">

**Author:** [@FelipeGXavier](https://discuss.elastic.co/u/FelipeGXavier)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175 "2022-02-14T17:44:04Z")

</div>

I'm looking for a way to make a query with multiple terms with prefix that preserve the order they're showed. Using match\_phrase\_prefix only the last term is the prefix. I can combine prefix with multiple match\_phrase …

---

## [First deploy elastic stack over docker swarm](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 5:55pm UTC](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313 "2022-02-14T17:55:32Z")

</div>

Hi Probably some of you have already deployed an elastic stack via docker swarm. I in my case will be the first time doing it on bare metal. Please give me examples of configurations, what to pay attention to?

---

## [Adding multiple values to an array](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 19\
**Last updated:** [February 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494 "2022-02-14T17:31:27Z")

</div>

Hello, I have an array which contains a bunch of time stamps which get added every time the record is modified from the source PGSQL database. I'm looking to modify this array to contain both a string and a time stamp. …

---

## [Range aggregation Scripts](https://discuss.elastic.co/t/range-aggregation-scripts/297147)

<div class="topic-metadata">

**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 5:25pm UTC](https://discuss.elastic.co/t/range-aggregation-scripts/297147 "2022-02-14T17:25:31Z")

</div>

Hi All, Below is my problem statement. I want to calculate aging stage based on below requirement. If Stage='INT' then today() - 'INT1 Date' else If Stage='MCH' then today() - 'Applied Date (WEB/MCH)' else If Sta…

---

## [Map - Add a dynamic scale and a north arrow on a map visualisation](https://discuss.elastic.co/t/map-add-a-dynamic-scale-and-a-north-arrow-on-a-map-visualisation/259221)

<div class="topic-metadata">

**Author:** [@Lolo](https://discuss.elastic.co/u/Lolo)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 4:50pm UTC](https://discuss.elastic.co/t/map-add-a-dynamic-scale-and-a-north-arrow-on-a-map-visualisation/259221 "2022-02-14T16:50:32Z")

</div>

Hello everybody! Anyone knows, how can we add a dynamic scale and the north arrow on a map visualisation? I need to have the scale on the map to have an idea of the distance, to be able to measure it on a screen shot (…

---

## [Dump Indexes and Documents from one server to another](https://discuss.elastic.co/t/dump-indexes-and-documents-from-one-server-to-another/296873)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 4:43pm UTC](https://discuss.elastic.co/t/dump-indexes-and-documents-from-one-server-to-another/296873 "2022-02-14T16:43:23Z")

</div>

If I need to backup my Elasticsearch database, or migrate data from one server to another, is it possible to dump the data and import it to another server? Or if my current server (ES 6.8) and I migrate to a new one (ES…

---

## [How to disable the addition of flattened source data to fields in Elasticsearch Kibana 7.16.3](https://discuss.elastic.co/t/how-to-disable-the-addition-of-flattened-source-data-to-fields-in-elasticsearch-kibana-7-16-3/296367)

<div class="topic-metadata">

**Author:** [@aiyerganapathy](https://discuss.elastic.co/u/aiyerganapathy)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 4:33pm UTC](https://discuss.elastic.co/t/how-to-disable-the-addition-of-flattened-source-data-to-fields-in-elasticsearch-kibana-7-16-3/296367 "2022-02-14T16:33:25Z")

</div>

We are using Elasticsearch, Logstash and Kibana version 7.16.3. Previously we were using version 7.10.x, and we used to have a minimum set of data in fields . However, after upgrading to the latest version, it is flatten…

---

## [Logstash or Spark?](https://discuss.elastic.co/t/logstash-or-spark/296500)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/logstash-or-spark/296500 "2022-02-14T16:14:32Z")

</div>

Hello, I have a project where I have to send millions of entries from different MYSQL databases to Elasticsearch (in Elastic Cloud instance). I'll have to make transformations to these data before sending it in Elasti…

---

## [Elasticsearch/client.go:408 Cannot index event](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event/297167)

<div class="topic-metadata">

**Author:** [@qubusp](https://discuss.elastic.co/u/qubusp)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event/297167 "2022-02-14T16:01:49Z")

</div>

2022-02-14T15:46:03.114Z WARN \[elasticsearch\] elasticsearch/client.go:408 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbaeb900, ext:63780449718, loc:(\*time.Location)(0x5864aa0)}, Met…

---

## [Unable to initialize Fleet in v8.0.0](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968)

<div class="topic-metadata">

**Author:** [@vvlad](https://discuss.elastic.co/u/vvlad)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968 "2022-02-14T15:59:42Z")

</div>

I've just update a cluster from 7.17 to 8.0.0 and the Fleet app in Kibana doesn't work anymore. I'm running OnPrem on Linux/aarch64. Is this a known issue? Logs below: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-02…

---

## [FieldNotFoundError on update to Elasticsearch 7.16.2](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173)

<div class="topic-metadata">

**Author:** [@JonDoe1234](https://discuss.elastic.co/u/JonDoe1234)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173 "2022-02-14T15:32:58Z")

</div>

Hi, since the update to Elasticsearch 7.16. I'm getting a java.lang.NoSuchFieldError: INDEX\_CONTENT\_TYPE when running a Unit Test that executes a save/saveAll() statement with Test containers. On 7.15 everything works …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1052)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1054)
