# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1063 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1064 --- ## [Why doesn't we run 'Basic' any longer, but 'Trial'?](https://discuss.elastic.co/t/why-doesnt-we-run-basic-any-longer-but-trial/296572)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 10:10am UTC](https://discuss.elastic.co/t/why-doesnt-we-run-basic-any-longer-but-trial/296572 "2022-02-08T10:10:45Z")
I followed this guide (to set up Elasticsearch with ssl, which I understand is now required for 7.16.+): Encrypting communications in an Elasticsearch Docker Container | Elasticsearch Guide \[7.17\] | Elastic It sets it u… --- ## [Filebeat tail\_files in filestream input](https://discuss.elastic.co/t/filebeat-tail-files-in-filestream-input/296282)
**Author:** [@solnicki](https://discuss.elastic.co/u/solnicki)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 10:04am UTC](https://discuss.elastic.co/t/filebeat-tail-files-in-filestream-input/296282 "2022-02-08T10:04:05Z")
Hi All, Starting from filebeat version 7.15 there is a recommendation to switch from log input type to filestream as log is deprecated. My problem is that filestream apparently does not includes tail\_files config optio… --- ## [The latch in BulkRequestHandler.execute is unnecessary](https://discuss.elastic.co/t/the-latch-in-bulkrequesthandler-execute-is-unnecessary/296570)
**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 9:45am UTC](https://discuss.elastic.co/t/the-latch-in-bulkrequesthandler-execute-is-unnecessary/296570 "2022-02-08T09:45:15Z")
The latch in BulkRequestHandler is added before to ensure that the new handler executes a bulk request and awaits for the completion if the BulkProcessor was configured with a concurrentRequests setting of 0. The related… --- ## [Role of kafka between filebeat and logstash](https://discuss.elastic.co/t/role-of-kafka-between-filebeat-and-logstash/296566)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 9:20am UTC](https://discuss.elastic.co/t/role-of-kafka-between-filebeat-and-logstash/296566 "2022-02-08T09:20:12Z")
Hi, I have a lot of log files in each hour it will be created a new file log so i get it and i filter it with this architecture : filebeat -\> logstash -\> Elasticsearch -\> kibana I would to know there is any avantage t… --- ## [Kibana is now available (was degraded)](https://discuss.elastic.co/t/kibana-is-now-available-was-degraded/296553)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 9:05am UTC](https://discuss.elastic.co/t/kibana-is-now-available-was-degraded/296553 "2022-02-08T09:05:07Z")
Hi, I have installed a new 7.17.0 cluster and noticed that kibana is connecting to Elasticsearch. However it is not publishing on 5601. Noticed kibana is now available (was degraded) at the end. can some one tell me w… --- ## [Editing elasticsearch.yml file](https://discuss.elastic.co/t/editing-elasticsearch-yml-file/296561)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 9:00am UTC](https://discuss.elastic.co/t/editing-elasticsearch-yml-file/296561 "2022-02-08T09:00:50Z")
Hello Greetings of the day @Lisa\_Jung @warkolm @xeraa Is it possible to edit Elasticsearch.yml file through API in Kibana? If their is a way please help me. --- ## [Detect update in Elastic index and call an action](https://discuss.elastic.co/t/detect-update-in-elastic-index-and-call-an-action/296509)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 8:04am UTC](https://discuss.elastic.co/t/detect-update-in-elastic-index-and-call-an-action/296509 "2022-02-08T08:04:38Z")
Hello, I'd like to detect updates in my index (updated, created or deleted document) and call an Amazon API Gateway. First, I thought about using Watcher but it seems that I can't detect real time modifications in my ind… --- ## [Es7.16, two indexes have same field cost conflicting type?](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667)
**Author:** [@zhanghaocai](https://discuss.elastic.co/u/zhanghaocai)\ **Replies:** 8\ **Last updated:** [February 8, 2022, 7:37am UTC](https://discuss.elastic.co/t/es7-16-two-indexes-have-same-field-cost-conflicting-type/295667 "2022-02-08T07:37:44Z")
I have two indexes. PUT /test1 { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0 }, "mappings": { "properties": { "name": { "type": "text" } } } } PUT /test2 { "settings": {… --- ## [Logstash Scheduler](https://discuss.elastic.co/t/logstash-scheduler/296431)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 6:12am UTC](https://discuss.elastic.co/t/logstash-scheduler/296431 "2022-02-08T06:12:28Z")
Hey Elasticworld, I'm current Logstash version 7.9 ,I have a encounter a problem in Logstash, in which have a 4 pipeline which are using "JBDC" driver for inserting data into Elasticsearch. \*\*Now I have to add another … --- ## [Logstash filter if conditional fails to match string ended with "\\u0000"](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248)
**Author:** [@juowong](https://discuss.elastic.co/u/juowong)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 5:49am UTC](https://discuss.elastic.co/t/logstash-filter-if-conditional-fails-to-match-string-ended-with-u0000/296248 "2022-02-08T05:49:39Z")
I am using logstash to receive network logs using syslog input module. I would like to drop the event if the log message is equal to A10. The pipeline is as follows: input { syslog { ecs\_compatibility =\> "v1" time… --- ## [Problem : Logstash filtering mutate/grok](https://discuss.elastic.co/t/problem-logstash-filtering-mutate-grok/296456)
**Author:** [@personal.riz](https://discuss.elastic.co/u/personal.riz)\ **Replies:** 5\ **Last updated:** [February 8, 2022, 5:00am UTC](https://discuss.elastic.co/t/problem-logstash-filtering-mutate-grok/296456 "2022-02-08T05:00:32Z")
Hi guys, iam new in elasticstack environment and i have some question below i have a problem with logstash filter parsing, i just config my firewall labs to sending json log to logstash using tcp port 5000. how to use … --- ## [CyberArk EPM (SaaS based) application integration with ELK](https://discuss.elastic.co/t/cyberark-epm-saas-based-application-integration-with-elk/296548)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 4:53am UTC](https://discuss.elastic.co/t/cyberark-epm-saas-based-application-integration-with-elk/296548 "2022-02-08T04:53:30Z")
Hello Team, I am new to ELK, we are trying to integrate CyberArk EPM (SaaS based) application with ELK and vendor only provided APIs to pull the events / logs manually but hasn’t provided any script to automate the proc… --- ## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/296531)
**Author:** [@Ravi\_Bhushan](https://discuss.elastic.co/u/Ravi_Bhushan)\ **Replies:** 7\ **Last updated:** [February 8, 2022, 4:28am UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/296531 "2022-02-08T04:28:11Z")
Hi All, I am trying to install Elasticsearch 6.8.23 Opensource version in Docker swarm. What I understand from document i that xpack is available in free version to implement node & http communication. Please correct m… --- ## [Is there any way to exclude Windows Drive on the metricbeat configuration?](https://discuss.elastic.co/t/is-there-any-way-to-exclude-windows-drive-on-the-metricbeat-configuration/296547)
**Author:** [@Gustavo\_Garcia](https://discuss.elastic.co/u/Gustavo_Garcia)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 4:28am UTC](https://discuss.elastic.co/t/is-there-any-way-to-exclude-windows-drive-on-the-metricbeat-configuration/296547 "2022-02-08T04:28:09Z")
Hello everyone, I have some Windows Servers that have SWAP (pagefile.sys) configured and located in a small disk. As this is a "Standard Configuration" there are lot of events related to this as the disk is almost full … --- ## [지난달 인덱스 생성하는 방법](https://discuss.elastic.co/t/topic/296539)
**Author:** [@m2seo81](https://discuss.elastic.co/u/m2seo81)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 2:27am UTC](https://discuss.elastic.co/t/topic/296539 "2022-02-08T02:27:18Z")
filebeat 인덱스가 매일 하나씩 쌓여서 index limit 1000 오류가 발생하였습니다. 인덱스를 월별로 만들게 수정하였는데 2월달 데이터는 수집이 되었는데 1월달 인덱스가 생성이 되지 않는 문제가 발생했습니다. 지난달의 인덱스를 어떻게 생성해야 하나요? filebeat - logstash - Elasticsearch로 구성되어 있는 구조입니다. --- ## [Errors Using Iptables Module](https://discuss.elastic.co/t/errors-using-iptables-module/296501)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 1:50am UTC](https://discuss.elastic.co/t/errors-using-iptables-module/296501 "2022-02-08T01:50:11Z")
Hello, I have been on a journey trying to use the iptables module in filebeat 7.16.3. I suspected the distro I'm using was not installing something right, specifically missing the modules/iptables directory. I then trie… --- ## [Unable to Ship logs through Grafana Loki plugin](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535)
**Author:** [@JPablo1982](https://discuss.elastic.co/u/JPablo1982)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 1:26am UTC](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535 "2022-02-08T01:26:25Z")
Hello I am trying to get to work the Grafana loki Plugin for Logstash but I am getting a runtime error, here is the detail. Grafana Loki plugin was installed successfully by executing the following command: sudo /usr/… --- ## [Logstash multiple pipelines failure with persistent queues](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520)
**Author:** [@proton](https://discuss.elastic.co/u/proton)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 10:01pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520 "2022-02-07T22:01:15Z")
Hello! I need some help understanding pipeline to pipeline communication in logstash. I'm reading the output isolator pattern documentation and it says below: If any of the persistent queues of the downstream pipelines… --- ## [Slow query for high frequency terms](https://discuss.elastic.co/t/slow-query-for-high-frequency-terms/296528)
**Author:** [@Brodin](https://discuss.elastic.co/u/Brodin)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 9:55pm UTC](https://discuss.elastic.co/t/slow-query-for-high-frequency-terms/296528 "2022-02-07T21:55:12Z")
In a index with movie titles there area vast majority with the word “the” in them. Doing a match query for said word leads to a very slow operation due to the expensive ranking that has to be done on a large part or the… --- ## [Exist any limitations on how a \_id document field could be](https://discuss.elastic.co/t/exist-any-limitations-on-how-a-id-document-field-could-be/296344)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 9:15pm UTC](https://discuss.elastic.co/t/exist-any-limitations-on-how-a-id-document-field-could-be/296344 "2022-02-07T21:15:18Z")
I always notice that the \_id field of any index created is normaly a uuid, hash value or a simple numeric sucession depending of the use case. My question is if there are any limitation in the form and aspect when choos… --- ## [Elastic agent / fleet server fails to install /connect to elastic search - Error: certificate is required when certificate private key is provided](https://discuss.elastic.co/t/elastic-agent-fleet-server-fails-to-install-connect-to-elastic-search-error-certificate-is-required-when-certificate-private-key-is-provided/296516)
**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 7:15pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-server-fails-to-install-connect-to-elastic-search-error-certificate-is-required-when-certificate-private-key-is-provided/296516 "2022-02-07T19:15:24Z")
sudo ./elastic-agent install --url=https://szu.azhszzz.com:8220 --fleet-server-es=https://szu.azhszzz.com:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NDQxNDU0Njc3NDY6eDR4UTVSZ3lUbi1F… --- ## [Un-Assigned Shards after the restart of the ES cluster on Kubernetes](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423)
**Author:** [@pulir](https://discuss.elastic.co/u/pulir)\ **Replies:** 8\ **Last updated:** [February 7, 2022, 5:08pm UTC](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423 "2022-02-07T17:08:04Z")
I am using Elasticsearch 7.10.2 deployed on k8s cluster. The master and data nodes are backed by PVs for persisting the data. I have created a Cluster of 3 master and 3 data nodes, with 2 client nodes dedicated. My probl… --- ## [Elasticsearch: Automatically setting index level settings for daily indexes](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505 "2022-02-07T17:35:52Z")
I need to increase the, maximum value of documents retrieved by an Elasticsearch query maximum number of script\_fields that are allowed in a query After refering this, I used the update-index-settings API as below, fo… --- ## [Noob Question: What Is Placing Specific Data Into Fields Called](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 5:03pm UTC](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351 "2022-02-07T17:03:54Z")
Hello, What is placing specific data, such as an IP address, into a field, perhaps called src.ip called? I'm asking so that I can begin to learn by searching. Thank you! --- ## [\[Maps\] Apply global time to style metadata requests](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 4:58pm UTC](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497 "2022-02-07T16:58:24Z")
What does flag "Apply global time to style metadata requests" means in Kibana Maps --- ## [Query String on version 6 and above](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:27pm UTC](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498 "2022-02-07T16:27:23Z")
Hi everybody, I'm currently working with ES 5.5 and using query\_string as my full-text search DSL. Our search contains multiple fields, with multiple boosts, and some of them are short string fields and other ones are … --- ## [Metricbeat zfs datasets](https://discuss.elastic.co/t/metricbeat-zfs-datasets/296495)
**Author:** [@Combo12](https://discuss.elastic.co/u/Combo12)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:17pm UTC](https://discuss.elastic.co/t/metricbeat-zfs-datasets/296495 "2022-02-07T16:17:05Z")
hi! As per https://github.com/elastic/beats/issues/25725 it doesn't seem to be a built-in solution for monitoring ZFS datasets with metricbeat. Do you have any idea on what's the best way on doing it other than the fol… --- ## [Sum of count of record](https://discuss.elastic.co/t/sum-of-count-of-record/296481)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/sum-of-count-of-record/296481 "2022-02-07T16:08:51Z")
Hello everyone, I need help with a little thing. In a table graph, I would also like to display a "total" line with the sum of the numbers on the far right. On this image for example I would like to have this line a… --- ## [404 on PDF Report](https://discuss.elastic.co/t/404-on-pdf-report/295606)
**Author:** [@BalajiTechs](https://discuss.elastic.co/u/BalajiTechs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/404-on-pdf-report/295606 "2022-02-07T16:08:34Z")
I am on 7.16.2 version of elastic cloud. I am trying to generate a PDF report from a dashboard with ~25 visualizations. The generated PDF contains only error string(as shown in below image). The last successful repor… --- ## [TLS Error Calling Webhook Connector from Kibana](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:42pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498 "2022-02-07T15:42:41Z")
Hello - I'm running Elastic/Kibana version 7.16.2 on Linux with SSL enabled and CA signed certs. My TLS related Kibana settings are: server.ssl.enabled: true server.ssl.certificate: /path/to/server.crt server.ssl.key:… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1062) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1064)