# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1054 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1055 --- ## [Unable to initialize Fleet in v8.0.0](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968)
**Author:** [@vvlad](https://discuss.elastic.co/u/vvlad)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968 "2022-02-14T15:59:42Z")
I've just update a cluster from 7.17 to 8.0.0 and the Fleet app in Kibana doesn't work anymore. I'm running OnPrem on Linux/aarch64. Is this a known issue? Logs below: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-02… --- ## [FieldNotFoundError on update to Elasticsearch 7.16.2](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173)
**Author:** [@JonDoe1234](https://discuss.elastic.co/u/JonDoe1234)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173 "2022-02-14T15:32:58Z")
Hi, since the update to Elasticsearch 7.16. I'm getting a java.lang.NoSuchFieldError: INDEX\_CONTENT\_TYPE when running a Unit Test that executes a save/saveAll() statement with Test containers. On 7.15 everything works … --- ## [\[Metricbeat\] Mysql user permission](https://discuss.elastic.co/t/metricbeat-mysql-user-permission/297018)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 3:22pm UTC](https://discuss.elastic.co/t/metricbeat-mysql-user-permission/297018 "2022-02-14T15:22:32Z")
Hi, I want to know which are the user privilege nedded for each metricset of mysql module: Performance Query Status The documentation talk about only the user root. Regards, --- ## [Custom Aggregations](https://discuss.elastic.co/t/custom-aggregations/15740)
**Author:** [@Justin\_Uang](https://discuss.elastic.co/u/Justin_Uang)\ **Replies:** 15\ **Last updated:** [February 14, 2022, 2:40pm UTC](https://discuss.elastic.co/t/custom-aggregations/15740 "2022-02-14T14:40:23Z")
Is there any way we can define our own aggregation functions beyond the provided metric and bucket aggregations? Thanks! Justin -- You received this message because you are subscribed to the Google Groups "e… --- ## [Getting continuous logstash tcp input error](https://discuss.elastic.co/t/getting-continuous-logstash-tcp-input-error/297150)
**Author:** [@ksarpong](https://discuss.elastic.co/u/ksarpong)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 2:14pm UTC](https://discuss.elastic.co/t/getting-continuous-logstash-tcp-input-error/297150 "2022-02-14T14:14:39Z")
"level":"ERROR","loggerName":"logstash.inputs.tcp","timeMillis":1644844639537,"thread":"nioEventLoopGroup-54-26","logEvent":{"message":"null: closing due:"}} {"level":"WARN","loggerName":"deprecation.logstash.codecs.plai… --- ## [Elasticsearch connection close issue](https://discuss.elastic.co/t/elasticsearch-connection-close-issue/295581)
**Author:** [@Ram\_N](https://discuss.elastic.co/u/Ram_N)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-close-issue/295581 "2022-02-14T14:07:36Z")
Hi Im using 7.10.2 and I have closed Elasticsearch Client while stopping application as below. @PreDestroy public void onShutdown(){ getEsClient().shutdownES(); } But Still Im getting below… --- ## [How to keep stable to ELK stack when downgrading the Centos VM from 8 to 7](https://discuss.elastic.co/t/how-to-keep-stable-to-elk-stack-when-downgrading-the-centos-vm-from-8-to-7/297140)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 2:00pm UTC](https://discuss.elastic.co/t/how-to-keep-stable-to-elk-stack-when-downgrading-the-centos-vm-from-8-to-7/297140 "2022-02-14T14:00:39Z")
Hello Dear Community, We will downgrade the distributions of Centos VMs running the ELK stack from 8 to 7 So what should I do before/after Cento's downgrade to keep stable the ELK? I need your recommendation. Should I b… --- ## [How to update more fields with script?](https://discuss.elastic.co/t/how-to-update-more-fields-with-script/297100)
**Author:** [@TottyAndBaty](https://discuss.elastic.co/u/TottyAndBaty)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 1:17pm UTC](https://discuss.elastic.co/t/how-to-update-more-fields-with-script/297100 "2022-02-14T13:17:28Z")
Sorry~ my english is not good.... here is my mapping . { "orders": { "aliases": {}, "mappings": { "properties": { "created\_at": { "type": "date" }, "expect\_pick\_start\_time": { "type": "lo… --- ## [How can i decrease the size of Pie chart](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 4\ **Last updated:** [February 14, 2022, 1:15pm UTC](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796 "2022-02-14T13:15:07Z")
Recently i have upgraded my Kibana version to kibana:7.16.2 and in this version have observed that Pie chart default visualization size has increased. Due to this in our case, visualization values are not showing compl… --- ## [Kibana not showing proper data](https://discuss.elastic.co/t/kibana-not-showing-proper-data/296807)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-not-showing-proper-data/296807 "2022-02-14T12:30:23Z")
HI experts, We are using Elasticsearch and Kibana 6.3.2. Earlier its working fine . But past one months kibana is not showing proper data which means some of our datas are missing . But that data's are available in Ela… --- ## [Extract time hour with runtime field](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 10:48am UTC](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122 "2022-02-14T10:48:27Z")
Hello everyone, I wanna extract the time hour from the @timestamp field in winlogbeat using runtime field. is there any way to do that. thank you in advance for your help. --- ## [Logstash show errors for new client in log: "javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate"](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 10:40am UTC](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118 "2022-02-14T10:40:31Z")
Dears, I need your support in case of configuration filebeat/logstash. filebeat 7.17.0 logstash 7.16.3 Previously, it was an ELK cluster in version 7.7.1 which I upgraded to version 7.16.3 Certificate preparation on… --- ## [Multimatch with CROSS\_FIELD query and decompounder](https://discuss.elastic.co/t/multimatch-with-cross-field-query-and-decompounder/296852)
**Author:** [@thaarbach](https://discuss.elastic.co/u/thaarbach)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 10:33am UTC](https://discuss.elastic.co/t/multimatch-with-cross-field-query-and-decompounder/296852 "2022-02-14T10:33:40Z")
The problem was also discussed by @singer and @hbruch and Here a example, that the search works not as expected: Create a index PUT example/ { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0… --- ## [\[MSSQL module\] - Transaction log stop after few hours](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323)
**Author:** [@Delta32000](https://discuss.elastic.co/u/Delta32000)\ **Replies:** 5\ **Last updated:** [February 14, 2022, 10:07am UTC](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323 "2022-02-14T10:07:21Z")
I was able to configure the mssql module on metricbeat. I use the ssl config for each Elasticsearch and Kibana. I was able to load the default dashboards in kibana. The thing is that I can see transaction log data for a … --- ## [How to handle rotating directory in input file for logstash](https://discuss.elastic.co/t/how-to-handle-rotating-directory-in-input-file-for-logstash/297104)
**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 9:59am UTC](https://discuss.elastic.co/t/how-to-handle-rotating-directory-in-input-file-for-logstash/297104 "2022-02-14T09:59:09Z")
Hi Team, I wants logstash to read logs from AWS S3 bucket but my log path directory is keep rotating on month basis and am not understand how to handle it. please suggest. input { s3 { "access\_key\_id" =\>… --- ## [Elasticsearch mapper\_parsing\_exception for field appearing both in text and object form](https://discuss.elastic.co/t/elasticsearch-mapper-parsing-exception-for-field-appearing-both-in-text-and-object-form/296875)
**Author:** [@dory](https://discuss.elastic.co/u/dory)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-mapper-parsing-exception-for-field-appearing-both-in-text-and-object-form/296875 "2022-02-14T09:53:56Z")
Hello, I'm quite new to Elasticsearch and I'm trying since a few days to fix some indexing problems we have in our indices. The cause of this errors is that we have multiple applications logging data which finally ends … --- ## [Limiting queries from elasticsearch service side](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557)
**Author:** [@LukoJy](https://discuss.elastic.co/u/LukoJy)\ **Replies:** 10\ **Last updated:** [February 14, 2022, 9:40am UTC](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557 "2022-02-14T09:40:24Z")
Hello, I would like to know if there is a way to limit incoming queries from the Elasticsearch service side, for example, restrict total hits, size, or searched shards to a specific value? In our environment, different… --- ## [Logstash with JDBC performance](https://discuss.elastic.co/t/logstash-with-jdbc-performance/296984)
**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-with-jdbc-performance/296984 "2022-02-14T09:10:21Z")
Hello, I use Logstash with JDBC connector. I have 6 pipelines defined in my pipeline.yml. pipeline1 have 14 SQL pipeline2 have 10 SQL pipeline3 have 2 SQL pipeline4 have 8 SQL pipeline5 have 1 SQL pipeline6 have… --- ## [Aggregation is not limited to documents in the query in multi-field results](https://discuss.elastic.co/t/aggregation-is-not-limited-to-documents-in-the-query-in-multi-field-results/296322)
**Author:** [@lennardberger](https://discuss.elastic.co/u/lennardberger)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 8:59am UTC](https://discuss.elastic.co/t/aggregation-is-not-limited-to-documents-in-the-query-in-multi-field-results/296322 "2022-02-14T08:59:06Z")
Hi everyone, running Elasticsearch 7.10.1. We have the following index: "potential\_participants": { "properties": { "surface"… --- ## [Is there any way to make Winlogbeat not start automatically?](https://discuss.elastic.co/t/is-there-any-way-to-make-winlogbeat-not-start-automatically/297095)
**Author:** [@Will\_Wu](https://discuss.elastic.co/u/Will_Wu)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 8:56am UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-winlogbeat-not-start-automatically/297095 "2022-02-14T08:56:15Z")
hey guys! First time using winlogbeat。 is there any method to make Winlogbeat do not start automatically ? --- ## [Winlogbeat setup without direct access to elasticsearch/kibana](https://discuss.elastic.co/t/winlogbeat-setup-without-direct-access-to-elasticsearch-kibana/296949)
**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 7:42am UTC](https://discuss.elastic.co/t/winlogbeat-setup-without-direct-access-to-elasticsearch-kibana/296949 "2022-02-14T07:42:27Z")
Hello, I have windows servers that have access to logstash, but don't have direct access to Elasticsearch cluster nor kibana. How can I properly setup winlobeat to import dashboards/pipelines/indices/... ? Other beats … --- ## [\[Packetbeat\] How to distinguish netflow from different interface device in log?](https://discuss.elastic.co/t/packetbeat-how-to-distinguish-netflow-from-different-interface-device-in-log/297092)
**Author:** [@492917328](https://discuss.elastic.co/u/492917328)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 4:00am UTC](https://discuss.elastic.co/t/packetbeat-how-to-distinguish-netflow-from-different-interface-device-in-log/297092 "2022-02-14T04:00:32Z")
Packetbeat supports capturing all messages sent or received by the server on which Packetbeat is installed： packetbeat.interfaces.device: any But when I set the output to Elasticsearch, I found that the field interface… --- ## [Split array with different nested elemetnts](https://discuss.elastic.co/t/split-array-with-different-nested-elemetnts/297063)
**Author:** [@Gil\_Brudner](https://discuss.elastic.co/u/Gil_Brudner)\ **Replies:** 6\ **Last updated:** [February 14, 2022, 3:23am UTC](https://discuss.elastic.co/t/split-array-with-different-nested-elemetnts/297063 "2022-02-14T03:23:12Z")
Hi, I have a data stream coming in as array in the following format: \[ { "dataType": 9, "payload": "\[{\\"isHeadingHome\\":0,\\"isTesing\\":0}\]", "data": "9" }, { "dataType": 8, "payload": "\[{\\"FRO… --- ## [How to find the data that causes the mapper\_parsing\_exception](https://discuss.elastic.co/t/how-to-find-the-data-that-causes-the-mapper-parsing-exception/297096)
**Author:** [@AlanSBN](https://discuss.elastic.co/u/AlanSBN)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 3:20am UTC](https://discuss.elastic.co/t/how-to-find-the-data-that-causes-the-mapper-parsing-exception/297096 "2022-02-14T03:20:40Z")
I am using the Node Elasticsearch client from inside Node Express, and I constructed a query that generates the following error: (node:85104) ResponseError: mapper\_parsing\_exception: \[mapper\_parsing\_exception\] Reason: … --- ## [Website with restaurants search](https://discuss.elastic.co/t/website-with-restaurants-search/297088)
**Author:** [@Aleksandra\_s](https://discuss.elastic.co/u/Aleksandra_s)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 12:16am UTC](https://discuss.elastic.co/t/website-with-restaurants-search/297088 "2022-02-14T00:16:22Z")
I am trying to create a website with search engine that allows users to search for restaurants. This website will have features as writen below: users are able to filter and sort results the website stores data about u… --- ## [Unable to retrieve version information from Elasticsearch nodes. socket hang up](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/297070)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 3\ **Last updated:** [February 13, 2022, 9:18pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/297070 "2022-02-13T21:18:35Z")
Hello, I am new at this topic and trying to install an ELK as described in the installation docs. It seems to be all fine except that Kibana cannot connect to Elasticsearch. I am getting the error message in the Kiba … --- ## [Difficulty getting SSL working, ES, Beats in Docker](https://discuss.elastic.co/t/difficulty-getting-ssl-working-es-beats-in-docker/297083)
**Author:** [@thech](https://discuss.elastic.co/u/thech)\ **Replies:** 0\ **Last updated:** [February 13, 2022, 8:30pm UTC](https://discuss.elastic.co/t/difficulty-getting-ssl-working-es-beats-in-docker/297083 "2022-02-13T20:30:15Z")
I'm setting up an Elastic Stack on a single host Docker Compose. I'm using Elasticsearch, Kibana, and a simple Metricbeat to look at system metrics. I'm having an issue getting the right combination of SSL certs/keys to… --- ## [Accessing parent values inside signal update](https://discuss.elastic.co/t/accessing-parent-values-inside-signal-update/297077)
**Author:** [@TUKTUK](https://discuss.elastic.co/u/TUKTUK)\ **Replies:** 2\ **Last updated:** [February 13, 2022, 7:56pm UTC](https://discuss.elastic.co/t/accessing-parent-values-inside-signal-update/297077 "2022-02-13T19:56:30Z")
Hello together, I have a Query in my Vega data-body which gives me some news titles. I print them in rows with a marks in marks section as you can see in the upcoming. { "$schema": "https://vega.github.io/schema/vega… --- ## [Having difficulty creating multiple field queries](https://discuss.elastic.co/t/having-difficulty-creating-multiple-field-queries/297009)
**Author:** [@vred](https://discuss.elastic.co/u/vred)\ **Replies:** 1\ **Last updated:** [February 13, 2022, 7:29pm UTC](https://discuss.elastic.co/t/having-difficulty-creating-multiple-field-queries/297009 "2022-02-13T19:29:34Z")
I'm attempting to create slightly more complex queries using Java API client 7.16 (like the json below), but I'm not sure which direction to go in to do this correctly. Do I use terms query for something like this query … --- ## [ERROR: Failed to determine the health of the cluster with elasticsearch-create-enrollment-token](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-elasticsearch-create-enrollment-token/297041)
**Author:** [@Ismaeel\_Enjreny](https://discuss.elastic.co/u/Ismaeel_Enjreny)\ **Replies:** 1\ **Last updated:** [February 13, 2022, 7:24pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-elasticsearch-create-enrollment-token/297041 "2022-02-13T19:24:13Z")
I have Elasticsearch cluster on my local machine with enabled HTTPs (2 nodes), all is working fine, I am trying to use the new tool elasticsearch-create-enrollment-token to enroll the third node, but I got the following … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1053) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1055)