# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1055

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1056

---

## [Why i should pre-define the fields?](https://discuss.elastic.co/t/why-i-should-pre-define-the-fields/297076)

<div class="topic-metadata">

**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\
**Replies:** 1\
**Last updated:** [February 13, 2022, 12:49pm UTC](https://discuss.elastic.co/t/why-i-should-pre-define-the-fields/297076 "2022-02-13T12:49:08Z")

</div>

Hi what is the benefit to pre-define the fields while the elastic will identify the fields automatically ? please need some explanation :slight\_smile:

---

## [Benchmarking Elasticsearch](https://discuss.elastic.co/t/benchmarking-elasticsearch/297012)

<div class="topic-metadata">

**Author:** [@Henrik41](https://discuss.elastic.co/u/Henrik41)\
**Replies:** 2\
**Last updated:** [February 13, 2022, 12:26pm UTC](https://discuss.elastic.co/t/benchmarking-elasticsearch/297012 "2022-02-13T12:26:11Z")

</div>

How do I benchmark Elasticsearch? Any tools people use?

---

## [Return a dynamic field depending on value?](https://discuss.elastic.co/t/return-a-dynamic-field-depending-on-value/296897)

<div class="topic-metadata">

**Author:** [@tjswe](https://discuss.elastic.co/u/tjswe)\
**Replies:** 3\
**Last updated:** [February 12, 2022, 10:57pm UTC](https://discuss.elastic.co/t/return-a-dynamic-field-depending-on-value/296897 "2022-02-12T22:57:24Z")

</div>

Hi! I just need some guidance in the right direction... I have an index with a field containing a value from lets say 1 to 10. Is there a way in the presentation end in Kibana adding a new dynamic field with a word th…

---

## [How to make a dashboard based on my sql query for?](https://discuss.elastic.co/t/how-to-make-a-dashboard-based-on-my-sql-query-for/297060)

<div class="topic-metadata">

**Author:** [@wasiualhasib](https://discuss.elastic.co/u/wasiualhasib)\
**Replies:** 0\
**Last updated:** [February 12, 2022, 9:45pm UTC](https://discuss.elastic.co/t/how-to-make-a-dashboard-based-on-my-sql-query-for/297060 "2022-02-12T21:45:06Z")

</div>

I want to create a dashboard using custom query such as database count, user list etc. But I did not found any option like this. Anyone can have any idea about it?

---

## [How can I know disk space each partition of my host?](https://discuss.elastic.co/t/how-can-i-know-disk-space-each-partition-of-my-host/297059)

<div class="topic-metadata">

**Author:** [@wasiualhasib](https://discuss.elastic.co/u/wasiualhasib)\
**Replies:** 0\
**Last updated:** [February 12, 2022, 9:35pm UTC](https://discuss.elastic.co/t/how-can-i-know-disk-space-each-partition-of-my-host/297059 "2022-02-12T21:35:58Z")

</div>

I want to know each partition information like linux commands: df -h or free -m Is it possible using ELK?

---

## [Average count over time to render gauge visualization (RPS meter)](https://discuss.elastic.co/t/average-count-over-time-to-render-gauge-visualization-rps-meter/296981)

<div class="topic-metadata">

**Author:** [@slavafomin](https://discuss.elastic.co/u/slavafomin)\
**Replies:** 3\
**Last updated:** [February 12, 2022, 7:33pm UTC](https://discuss.elastic.co/t/average-count-over-time-to-render-gauge-visualization-rps-meter/296981 "2022-02-12T19:33:02Z")

</div>

Hello! Consider I'm sending events to Elasticsearch for each request to my application. Now, I want to display an RPS gauge to show how many requests my application is getting per second. However, showing immediate numb…

---

## [How to maintain session between multiple kibana servers](https://discuss.elastic.co/t/how-to-maintain-session-between-multiple-kibana-servers/296849)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 6:49pm UTC](https://discuss.elastic.co/t/how-to-maintain-session-between-multiple-kibana-servers/296849 "2022-02-12T18:49:11Z")

</div>

Hi, I have 2 kibana servers and willing to put behind a LB. can some one provide me the steps. I have already set same values on both kibana servers xpack.actions.enabled: true xpack.encryptedSavedObjects.encryptionK…

---

## [HTTP output for stadtpuls.com IoT platform](https://discuss.elastic.co/t/http-output-for-stadtpuls-com-iot-platform/296777)

<div class="topic-metadata">

**Author:** [@CargoBikoMeter](https://discuss.elastic.co/u/CargoBikoMeter)\
**Replies:** 4\
**Last updated:** [February 12, 2022, 5:51pm UTC](https://discuss.elastic.co/t/http-output-for-stadtpuls-com-iot-platform/296777 "2022-02-12T17:51:37Z")

</div>

Currently I have a working logstash configuration which stores JSON based input data from my IoT data from TTN via output into my Elasticsearch node. Now I would extract some data (e.g. temperature, pressure) and send on…

---

## [Kibana 8.0.0 not running](https://discuss.elastic.co/t/kibana-8-0-0-not-running/297053)

<div class="topic-metadata">

**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\
**Replies:** 4\
**Last updated:** [February 12, 2022, 5:01pm UTC](https://discuss.elastic.co/t/kibana-8-0-0-not-running/297053 "2022-02-12T17:01:30Z")

</div>

Hello friends, good morning After installing kibana version 8.0.0, unfortunately, everything I do will not work I already have a 7.16 kibana Operating system: debian 11 Installation steps in order 1 =\> install kiban…

---

## [Kibana 7.17.0 install on ubuntu 16.04 - Error - Index out of range](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437)

<div class="topic-metadata">

**Author:** [@VRaovic](https://discuss.elastic.co/u/VRaovic)\
**Replies:** 5\
**Last updated:** [February 12, 2022, 3:04pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437 "2022-02-12T15:04:51Z")

</div>

Hi, We are having problem to install Kibana on Ubuntu 16.04 image which runs under OpenStack. Elasticsearch 7.17.0 is installed and runs, but we are having problem to install Kibana: Setting up kibana (7.17.0) ... n…

---

## [Restore perticular deleted indices from xfsdump Data](https://discuss.elastic.co/t/restore-perticular-deleted-indices-from-xfsdump-data/296843)

<div class="topic-metadata">

**Author:** [@indrajit\_kal](https://discuss.elastic.co/u/indrajit_kal)\
**Replies:** 3\
**Last updated:** [February 12, 2022, 2:56pm UTC](https://discuss.elastic.co/t/restore-perticular-deleted-indices-from-xfsdump-data/296843 "2022-02-12T14:56:21Z")

</div>

How can we restore deleted indices from xfsdump data.

---

## [Logstash hosts](https://discuss.elastic.co/t/logstash-hosts/296952)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 2:02pm UTC](https://discuss.elastic.co/t/logstash-hosts/296952 "2022-02-12T14:02:43Z")

</div>

While transferring data with Logstash, there is an increase in write threads on the node that is not in the output host list that I specified. I do not want to transfer data over a single node. This causes me to experie…

---

## [Upload Large Log File](https://discuss.elastic.co/t/upload-large-log-file/297037)

<div class="topic-metadata">

**Author:** [@kmahyyg](https://discuss.elastic.co/u/kmahyyg)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 1:44pm UTC](https://discuss.elastic.co/t/upload-large-log-file/297037 "2022-02-12T13:44:19Z")

</div>

Note: I've already Google-ed before I ask. I see this issue \[ML\] Uploading a file over 100MB via Kibana · Issue #61735 · elastic/kibana · GitHub which allowed to upload less than 1G files. As a dev, I know it would be …

---

## [Can exact match get higher score than modified by character filter?](https://discuss.elastic.co/t/can-exact-match-get-higher-score-than-modified-by-character-filter/296622)

<div class="topic-metadata">

**Author:** [@spotlight2001](https://discuss.elastic.co/u/spotlight2001)\
**Replies:** 2\
**Last updated:** [February 12, 2022, 1:33pm UTC](https://discuss.elastic.co/t/can-exact-match-get-higher-score-than-modified-by-character-filter/296622 "2022-02-12T13:33:27Z")

</div>

I have a custom analyzer which consists of several char\_filter When I have indexed "walter" and "walther" and search for "walther" I would expect to have "walther" result to be of higher score than "walter". But it has…

---

## [I need add field, and do value counter, how do it?](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005)

<div class="topic-metadata">

**Author:** [@VK345](https://discuss.elastic.co/u/VK345)\
**Replies:** 7\
**Last updated:** [February 12, 2022, 12:57pm UTC](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005 "2022-02-12T12:57:28Z")

</div>

My config is: ====================================== input { file{ path =\> "/home/elk/domains/rf\_domains\_test" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } }…

---

## [Aggregation mixed with query?](https://discuss.elastic.co/t/aggregation-mixed-with-query/297008)

<div class="topic-metadata">

**Author:** [@Karol\_Radomski](https://discuss.elastic.co/u/Karol_Radomski)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 12:49pm UTC](https://discuss.elastic.co/t/aggregation-mixed-with-query/297008 "2022-02-12T12:49:01Z")

</div>

Hello, I don't know how to create such aggregation with query inside: for given documents: "hours": "4", "class": "yellow", "name": "andy", "mark": "A" } { "hours": "6", "class": "yellow", …

---

## [Missing transport-netty4-client for ES 8.0.0](https://discuss.elastic.co/t/missing-transport-netty4-client-for-es-8-0-0/297024)

<div class="topic-metadata">

**Author:** [@coutoPL](https://discuss.elastic.co/u/coutoPL)\
**Replies:** 6\
**Last updated:** [February 12, 2022, 11:56am UTC](https://discuss.elastic.co/t/missing-transport-netty4-client-for-es-8-0-0/297024 "2022-02-12T11:56:49Z")

</div>

Hi Guys, There is ES 8.0.0 released, but I cannot find transport-netty4-client for 8.0.0: https://repo1.maven.org/maven2/org/elasticsearch/plugin/transport-netty4-client/ Is it an oversight or maybe, for some reason, …

---

## [How to avoid or ease terms aggregation for fields with high cardinality?](https://discuss.elastic.co/t/how-to-avoid-or-ease-terms-aggregation-for-fields-with-high-cardinality/296853)

<div class="topic-metadata">

**Author:** [@asupranovich](https://discuss.elastic.co/u/asupranovich)\
**Replies:** 3\
**Last updated:** [February 12, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-avoid-or-ease-terms-aggregation-for-fields-with-high-cardinality/296853 "2022-02-12T11:34:22Z")

</div>

Hi community! My Elasticsearch version is 7.7.0. I'm facing a too many buckets issue for my aggregation query. Task description: Let's say we have a car index, car data model looks like below: { "vin": "08c00679-…

---

## [Use docker to build elastic seal on multiple machines, one on each machine. Then we can monitor them with kibana. Is this a cluster? Is it feasible?](https://discuss.elastic.co/t/use-docker-to-build-elastic-seal-on-multiple-machines-one-on-each-machine-then-we-can-monitor-them-with-kibana-is-this-a-cluster-is-it-feasible/297044)

<div class="topic-metadata">

**Author:** [@Andy\_dufresneguohao](https://discuss.elastic.co/u/Andy_dufresneguohao)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 9:12am UTC](https://discuss.elastic.co/t/use-docker-to-build-elastic-seal-on-multiple-machines-one-on-each-machine-then-we-can-monitor-them-with-kibana-is-this-a-cluster-is-it-feasible/297044 "2022-02-12T09:12:53Z")

</div>

I use docker compose to build an ES container on 231 and 184 servers respectively. I want to build a kibana on another machine, and then through kibana Configure Elasticsearch in YML Hosts, let kibana access them through…

---

## [Elastic-Stack7.17 on ubuntu 20.4LTS, still not indexing](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378)

<div class="topic-metadata">

**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\
**Replies:** 10\
**Last updated:** [February 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378 "2022-02-12T08:43:28Z")

</div>

Hello Bro, I have followed up this link How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 20.04 | DigitalOcean to install my elc-stack, and everything went as document explains. But, It stil…

---

## [Update old data from csv python](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034)

<div class="topic-metadata">

**Author:** [@aminedakhlii](https://discuss.elastic.co/u/aminedakhlii)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 7:48am UTC](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034 "2022-02-12T07:48:09Z")

</div>

I have a bunch of indices A,B,C,D containing large amounts of data per each let's say 50 million records per index and the record contains data as follows: user: amine, age: 22, state: Michigan and I want to create a …

---

## [Roles not restricting as expected](https://discuss.elastic.co/t/roles-not-restricting-as-expected/295989)

<div class="topic-metadata">

**Author:** [@psmithuk](https://discuss.elastic.co/u/psmithuk)\
**Replies:** 7\
**Last updated:** [February 12, 2022, 7:19am UTC](https://discuss.elastic.co/t/roles-not-restricting-as-expected/295989 "2022-02-12T07:19:01Z")

</div>

Hi, I have created a custom read only role for users from my company with the intention that they have read only access to dashboards to consume the data. I have created a custom role on the indices that they need acce…

---

## [Reverse dns lookup for elastic-agent](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971)

<div class="topic-metadata">

**Author:** [@VoncinaMihael](https://discuss.elastic.co/u/VoncinaMihael)\
**Replies:** 3\
**Last updated:** [February 12, 2022, 3:20am UTC](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971 "2022-02-12T03:20:45Z")

</div>

Hi, I'm trying to find a way to resolve IP to host, for logs ingested from elastic-agents. Within Filebeat i can use dns processor, but i don't know how to do this for agent data...

---

## [Which cert do I use and where do I stick it?](https://discuss.elastic.co/t/which-cert-do-i-use-and-where-do-i-stick-it/297031)

<div class="topic-metadata">

**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\
**Replies:** 0\
**Last updated:** [February 12, 2022, 12:41am UTC](https://discuss.elastic.co/t/which-cert-do-i-use-and-where-do-i-stick-it/297031 "2022-02-12T00:41:06Z")

</div>

Remote cluster has a self-signed certificate. Is that the right cert to add to the local cluster and, if so, where do I add that on the local cluster so that the two clusters can trust one another? I'm thinking inside …

---

## [Filebeat httpjson chained requests](https://discuss.elastic.co/t/filebeat-httpjson-chained-requests/296959)

<div class="topic-metadata">

**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 9:56pm UTC](https://discuss.elastic.co/t/filebeat-httpjson-chained-requests/296959 "2022-02-11T21:56:55Z")

</div>

Hi is there a way to chain multiple httpjson requests? Let's say I need to do a first query to an endpoint to get a hosts lists, and then another one to another url constructed using the hosts that I got from the first q…

---

## [Increase RAM on Kibana 7.6.2](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967)

<div class="topic-metadata">

**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 9:45pm UTC](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967 "2022-02-11T21:45:39Z")

</div>

Hi, It's possible to increase the RAM allocation in Kibana? Currently I'm using the v7.6.2. Thank you in advance.

---

## [ERROR metrics/metrics.go:380](https://discuss.elastic.co/t/error-metrics-metrics-go-380/297026)

<div class="topic-metadata">

**Author:** [@rcts](https://discuss.elastic.co/u/rcts)\
**Replies:** 0\
**Last updated:** [February 11, 2022, 9:43pm UTC](https://discuss.elastic.co/t/error-metrics-metrics-go-380/297026 "2022-02-11T21:43:46Z")

</div>

Hello guys, i need help to fix issue. I don't know what to do \< 2022-02-11T21:37:34.802Z ERROR metrics/metrics.go:380 error getting cgroup stats: error fetching stats for controller io: error fetching IO stats: error f…

---

## [License Question: x-pack Modules](https://discuss.elastic.co/t/license-question-x-pack-modules/296975)

<div class="topic-metadata">

**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\
**Replies:** 4\
**Last updated:** [February 11, 2022, 9:42pm UTC](https://discuss.elastic.co/t/license-question-x-pack-modules/296975 "2022-02-11T21:42:19Z")

</div>

Hello, I have been struggling to get the netflow module working. The error I keep ending up with is: 2022-02-11T07:49:28.539-0500 ERROR instance/beat.go:1015 Exiting: Failed to start crawler: creating module rel…

---

## [Nginx Upgrade for vulnerability](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021)

<div class="topic-metadata">

**Author:** [@jwilfreds](https://discuss.elastic.co/u/jwilfreds)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 9:39pm UTC](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021 "2022-02-11T21:39:36Z")

</div>

We have nginx/1.16.1. We need to upgrade to 1.21.0, 1.20.1. Can you pls share any article that describes the upgrade process. I'm a complete newbie to Elastic / Kibana. The tech who installed the server, left the job. I…

---

## [Java api client to implement a complex query](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611)

<div class="topic-metadata">

**Author:** [@colddew](https://discuss.elastic.co/u/colddew)\
**Replies:** 2\
**Last updated:** [February 11, 2022, 9:20pm UTC](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611 "2022-02-11T21:20:19Z")

</div>

I spent much time to try the new Elasticsearch Java client 7.16.3, but it is hard for me to use it, such as must , terms , multi\_match , functions , filter and so on. Can someone please help me in building the query as b…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1054)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1056)
