# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1093 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1094 --- ## [Elasticsearch cluster UUID is not available after version upgrade](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441)
**Author:** [@learning\_fun](https://discuss.elastic.co/u/learning_fun)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441 "2022-01-15T10:27:13Z")
Hi There, we use only Elasticsearch and upgraded it from 6.7.0 to 7.16.2 . we run the Elasticsearch in kubernetes and after version upgrade, cluster UUID is not available. We have one master node , 3 data nodes, 1 coord… --- ## [Why Elasticsearch Mapping Explosion can causes OOM？](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371 "2022-01-15T10:25:45Z")
I think index Mapping is a large JSON object. Even if each node sends a copy, the memory usage is limited. Why does it cause OOM? --- ## [Inconsistent node role display for the same configuration](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449)
**Author:** [@co88liwan](https://discuss.elastic.co/u/co88liwan)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449 "2022-01-15T10:24:26Z")
Elasticsearch version: 7.16.2 In our case, all data nodes in elasticsearch.yml file are configured as node.roles: \[data\_hot, data\_content, \] But running cat node in dev tool we see inconsistent node role display, some… --- ## [Strict terms query (exclusive)](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 7:51am UTC](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471 "2022-01-15T07:51:50Z")
Hi, I am looking to make a terms query but strictly containing specified terms and excluding all docs that do not contain only those terms (eg. docs matches if I have strictly and only A and B =\> no doc matches if I have… --- ## [FSCrawler : Retry connection, when it gets failure](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 15\ **Last updated:** [January 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488 "2022-01-15T05:41:26Z")
Hi David, Please share your suggestions. We are using fscrawler-2.4.. When we startup.. getting below connection error.. is there way to look (or) wait for connection success, then continue the process within the \_sett… --- ## [Logstash config change suggestion](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 4:08am UTC](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466 "2022-01-15T04:08:40Z")
Currently, if you run multiple pipelines, you have to list them in pipelines.yml. In some cases, it would be easier to have a pipelines.d directory with individual files for each pipeline instead of the single pipelines… --- ## [Elastic Agent - Memory Usage](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463)
**Author:** [@Huber](https://discuss.elastic.co/u/Huber)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 11:45pm UTC](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463 "2022-01-14T23:45:42Z")
Hello, Is it normal that Elastic Agent utilizes around 500MB of ram on Windows 10 Endpoint Version 7.16.3 I have disabled for test Detection/Protection in the Policy. I have disabled all events collection DNS, Netwo… --- ## [Show multiple values in same table cell / any other field](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291)
**Author:** [@McCasian](https://discuss.elastic.co/u/McCasian)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 10:16pm UTC](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291 "2022-01-14T22:16:48Z")
Hello everyone, I have to show Total RAM Capacity and Total Ram Capacity WS(Without Spare), and I have this for all other resources (Storage, CPU, etc.). Considering this, I would avoid making a very large table, but ra… --- ## [Histogram Visualization from Prometheus data?](https://discuss.elastic.co/t/histogram-visualization-from-prometheus-data/294457)
**Author:** [@DarkMagus](https://discuss.elastic.co/u/DarkMagus)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 9:39pm UTC](https://discuss.elastic.co/t/histogram-visualization-from-prometheus-data/294457 "2022-01-14T21:39:14Z")
I have some data that's being exported from Prometheus as a histogram object. The data itself is how long a particular job takes to process, so the buckets are in 30 second intervals. I'm getting data from my containe… --- ## [Logstash CSV output opening/closing file bottleneck](https://discuss.elastic.co/t/logstash-csv-output-opening-closing-file-bottleneck/294446)
**Author:** [@tkirui](https://discuss.elastic.co/u/tkirui)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 8:41pm UTC](https://discuss.elastic.co/t/logstash-csv-output-opening-closing-file-bottleneck/294446 "2022-01-14T20:41:48Z")
I am running logstash to parse many files with output to a single CSV file. This is working ok but is taking long with the bottleneck being the opening file/closing file. Im i missing something? Any faster way of doin th… --- ## [Help with Generating PDF Reports](https://discuss.elastic.co/t/help-with-generating-pdf-reports/294407)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:36pm UTC](https://discuss.elastic.co/t/help-with-generating-pdf-reports/294407 "2022-01-14T17:36:18Z")
Hi I have tried to print a PDF report of one of my dashboards but all I keep getting is an error. Max Attempts Reached (3). Queue Timeout. Sometimes, it also pops up \*\*Error Protocol (Page.captureScreenshot: Target clos… --- ## [Read timed out when using Elasticsearch filter in pipeline](https://discuss.elastic.co/t/read-timed-out-when-using-elasticsearch-filter-in-pipeline/294438)
**Author:** [@SamW](https://discuss.elastic.co/u/SamW)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 5:29pm UTC](https://discuss.elastic.co/t/read-timed-out-when-using-elasticsearch-filter-in-pipeline/294438 "2022-01-14T17:29:28Z")
As part of my project's workflow, we have a pipeline which uses the Elasticsearch filter plugin a few times in order to find a set of items which need to be deleted from several indices. This always works perfectly when … --- ## [Logstash Issue: Got response code '401' contacting Elasticsearch at URL 'http://localhost:9200/'](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395)
**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:08pm UTC](https://discuss.elastic.co/t/logstash-issue-got-response-code-401-contacting-elasticsearch-at-url-http-localhost-9200/294395 "2022-01-14T17:08:34Z")
while trying to run logstash 7.16.3 with this current version of Elasticsearch 8.1.0 . I get the following error. {:url=\>"http://localhost:9200/", :exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResp… --- ## [Best method to get 5 fields from inputs and duplicate in index2](https://discuss.elastic.co/t/best-method-to-get-5-fields-from-inputs-and-duplicate-in-index2/294429)
**Author:** [@aaleman](https://discuss.elastic.co/u/aaleman)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 5:06pm UTC](https://discuss.elastic.co/t/best-method-to-get-5-fields-from-inputs-and-duplicate-in-index2/294429 "2022-01-14T17:06:32Z")
Hello, I was reading a lot because I want to now: What is the best way that masters recommend to next case?: I have index1 with a lot of fields I need this data into another index to have history, but this index2 jus… --- ## [Using kibana to display apache tomcat log and fetch it continously](https://discuss.elastic.co/t/using-kibana-to-display-apache-tomcat-log-and-fetch-it-continously/294436)
**Author:** [@olisanweze](https://discuss.elastic.co/u/olisanweze)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 4:16pm UTC](https://discuss.elastic.co/t/using-kibana-to-display-apache-tomcat-log-and-fetch-it-continously/294436 "2022-01-14T16:16:22Z")
Hey please can anyone walk me through a process of using kibana to display and organize it's logs (catalina.out file) to be displayed continually without having to fetch the logs myself(automated). --- ## [How to read logs from a Checkpoint Firewall from IPS / IDS Blade](https://discuss.elastic.co/t/how-to-read-logs-from-a-checkpoint-firewall-from-ips-ids-blade/294430)
**Author:** [@duvids](https://discuss.elastic.co/u/duvids)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 4:02pm UTC](https://discuss.elastic.co/t/how-to-read-logs-from-a-checkpoint-firewall-from-ips-ids-blade/294430 "2022-01-14T16:02:57Z")
Hello there, i'm new to Elastic. I'm trying to understand how can i retrieve logs from a Checkpoint firewall more specifically from the Blade IDS/IPS has anyone achieved this or could give some guidance? thank you in adv… --- ## [Failed to add match 'elasticsearch': Invalid argument](https://discuss.elastic.co/t/failed-to-add-match-elasticsearch-invalid-argument/294388)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:17pm UTC](https://discuss.elastic.co/t/failed-to-add-match-elasticsearch-invalid-argument/294388 "2022-01-14T15:17:20Z")
Hi, I have the following issue after upgrading ELasticsearch from 6.8.22 to 7.14.2. When trying to start the service: Job for elasticsearch.service failed because the control process exited with error code. See "syste… --- ## [Search by word order](https://discuss.elastic.co/t/search-by-word-order/294188)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:11pm UTC](https://discuss.elastic.co/t/search-by-word-order/294188 "2022-01-14T15:11:38Z")
Hello I have a product search system. Now I want the system to be such that if the user searches for the word "washing machine", priority will be given to products whose name starts with "washing machine" and displays t… --- ## [Logstash sql\_last\_value not compare correctly](https://discuss.elastic.co/t/logstash-sql-last-value-not-compare-correctly/294398)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-sql-last-value-not-compare-correctly/294398 "2022-01-14T15:02:29Z")
Hi, I am using logstash to insert data from sql to index. I am using a date column compare\_date to compare for sql\_last\_value field. When I am running, logstash automatically reduce 1 day from compare\_date. Suppose … --- ## [Jdbc integration plugin output documentation](https://discuss.elastic.co/t/jdbc-integration-plugin-output-documentation/294421)
**Author:** [@patrikpihlstrom](https://discuss.elastic.co/u/patrikpihlstrom)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 2:27pm UTC](https://discuss.elastic.co/t/jdbc-integration-plugin-output-documentation/294421 "2022-01-14T14:27:07Z")
I've been using the jdbc integration plugin to insert records in my mariadb server for some time now. However, as requirements have changed, I've been tasked with finding a solution to acknowledge messages after they've … --- ## [Graph explore API - Get documents related to graph edges](https://discuss.elastic.co/t/graph-explore-api-get-documents-related-to-graph-edges/294327)
**Author:** [@Rodrigo\_Xavier](https://discuss.elastic.co/u/Rodrigo_Xavier)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 2:13pm UTC](https://discuss.elastic.co/t/graph-explore-api-get-documents-related-to-graph-edges/294327 "2022-01-14T14:13:43Z")
Hi! I'm creating a Graph using my Elasticsearch index and I can get my graph data using Graph Explore API. The returned data through API is the same as the documentation explains. But I'd like to know if there is any way… --- ## [Filebeat module dashboard](https://discuss.elastic.co/t/filebeat-module-dashboard/294309)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:23pm UTC](https://discuss.elastic.co/t/filebeat-module-dashboard/294309 "2022-01-13T18:23:53Z")
I have created a dashboard for filebeat nginx module. I'm not able to change the index pattern for the dahboard. It defaults to filebeat-\*. As i'm shipping the logs for other application in the same server i have already… --- ## [Organize search by priority with/without spaces](https://discuss.elastic.co/t/organize-search-by-priority-with-without-spaces/294276)
**Author:** [@gagasusrock](https://discuss.elastic.co/u/gagasusrock)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 2:05pm UTC](https://discuss.elastic.co/t/organize-search-by-priority-with-without-spaces/294276 "2022-01-14T14:05:42Z")
Hello. I am using elastic 7.15.0. I want to organize search by priority with/without spaces. What does it mean? query - "surf coff" I want to see records contains or startswith "surf coff" - (SURF COFFEE, SURF CAFFE… --- ## [Need help on setting up OpenId with Elasticsearch](https://discuss.elastic.co/t/need-help-on-setting-up-openid-with-elasticsearch/294418)
**Author:** [@Prav](https://discuss.elastic.co/u/Prav)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:59pm UTC](https://discuss.elastic.co/t/need-help-on-setting-up-openid-with-elasticsearch/294418 "2022-01-14T13:59:00Z")
Getting below error while setting up SSO using OPenId in OKTA application for Elasticsearch Error: https://infracloudpothuspraveen.okta.com/oauth2/v1/authorize?idp=0oac6n0h5JCMaNxnU696&client\_id=0oac6mbg7UwfM5VFZ696&re… --- ## [Listening to multiple ports for Netflow traffic](https://discuss.elastic.co/t/listening-to-multiple-ports-for-netflow-traffic/294226)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 3\ **Last updated:** [January 14, 2022, 1:35pm UTC](https://discuss.elastic.co/t/listening-to-multiple-ports-for-netflow-traffic/294226 "2022-01-14T13:35:47Z")
Hi, My filebeat 7.14.0 is currently listening on UDP port 1234 for Netflow packets using the Netflow module. Can I configure my netflow.yml to listen to multiple UDP ports for Netflow packets? E.g. (netflow.yml) - mod… --- ## [Remove fields - plugin http\_poller\_plugin with json](https://discuss.elastic.co/t/remove-fields-plugin-http-poller-plugin-with-json/294415)
**Author:** [@guilhermealano](https://discuss.elastic.co/u/guilhermealano)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:28pm UTC](https://discuss.elastic.co/t/remove-fields-plugin-http-poller-plugin-with-json/294415 "2022-01-14T13:28:09Z")
Hi, I'm making a request in logstash through http\_poller\_plugin and the data that return in full in json. I'm trying to make a filter to display in the json only the necessary fields. What would be the correct way to c… --- ## [QueryBuilders.moreLikeThis() bug in 7.16 Java API?](https://discuss.elastic.co/t/querybuilders-morelikethis-bug-in-7-16-java-api/294413)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:11pm UTC](https://discuss.elastic.co/t/querybuilders-morelikethis-bug-in-7-16-java-api/294413 "2022-01-14T13:11:55Z")
I'm trying to create a SearchRequest with a MoreLikeThisQuery like so: JsonData jsonDocument = JsonData.of(document); LikeDocument likeDocument = new LikeDocument.Builder().doc(jsonDocument).build(); … --- ## [Filebeat docker container labels do not seems](https://discuss.elastic.co/t/filebeat-docker-container-labels-do-not-seems/294408)
**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 1:05pm UTC](https://discuss.elastic.co/t/filebeat-docker-container-labels-do-not-seems/294408 "2022-01-14T13:05:07Z")
Hi all, I use filebeat and logstash for store my all datas. My docker setup and log files are in /home/docker/containers folder. (not in /var/lib/docker path) The problem is when i was colleting my logs, the docker fie… --- ## [Python bulk insert customize date parser](https://discuss.elastic.co/t/python-bulk-insert-customize-date-parser/294113)
**Author:** [@StevenZL](https://discuss.elastic.co/u/StevenZL)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 12:56pm UTC](https://discuss.elastic.co/t/python-bulk-insert-customize-date-parser/294113 "2022-01-14T12:56:02Z")
Hi all, I'm new to Elasticsearch and I'm trying to bulk-insert into Elasticsearch using python After I read in the data using pandas, I created an index: es = Elasticsearch() es.indices.create( index="cars", … --- ## [Logstash Configuration File](https://discuss.elastic.co/t/logstash-configuration-file/294266)
**Author:** [@\_Thomas](https://discuss.elastic.co/u/_Thomas)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 12:27pm UTC](https://discuss.elastic.co/t/logstash-configuration-file/294266 "2022-01-14T12:27:54Z")
Hi Guys, first of all, I'm sorry in case I'm asking stupid questions - I'm pretty new to this ELK Topic, and I'm trying to get my head around it. At the moment I'm working on a Logstash config file, that should import … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1092) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1094)