# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1116 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1117 --- ## [Elasticsearch 7.16.2 fails to start as service under windows server 2019](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708)
**Author:** [@yankun0567](https://discuss.elastic.co/u/yankun0567)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708 "2021-12-22T16:40:59Z")
Hi, I've just downloaded Elasticsearch 7.16.2 and installed it as a service under Windows Server 2019. Previously I had 7.10.2. running without any issues. If I'm trying to start the service, it fails with following er… --- ## [Elastic-agent : endpoint-security.sock no such file or directory](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293)
**Author:** [@Lnood5](https://discuss.elastic.co/u/Lnood5)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 4:08pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293 "2021-12-22T16:08:41Z")
Hello, I work with self-managed stack v7.16.1 I have a probleme with endpoint security deployment elastic-agent diagnostics give for endpoint this error: elastic-agent diagnostics \* name: endpoint-security … --- ## [Failed test QueueTest](https://discuss.elastic.co/t/failed-test-queuetest/292719)
**Author:** [@SirBouBou](https://discuss.elastic.co/u/SirBouBou)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 4:23pm UTC](https://discuss.elastic.co/t/failed-test-queuetest/292719 "2021-12-22T16:23:24Z")
Hi, I'm trying to discover Logstash and its uses to be able to contribute and help the community but I have a problem. When launching a ./gradlew test I have a timeout error for the concurrentWritesTest in the QueueTest… --- ## [Problem importing saved\_objects using api](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304)
**Author:** [@fkoene](https://discuss.elastic.co/u/fkoene)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 4:18pm UTC](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304 "2021-12-22T16:18:53Z")
I want to export saved\_objects and use the output file to import the objects in another space. The export goes well, the file can be imported by hand in the ELK GUI, but when I try importing it using the just exported f… --- ## [How to find the step names for each ILM action in each phases](https://discuss.elastic.co/t/how-to-find-the-step-names-for-each-ilm-action-in-each-phases/292662)
**Author:** [@Kannappan\_Somu](https://discuss.elastic.co/u/Kannappan_Somu)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 3:53pm UTC](https://discuss.elastic.co/t/how-to-find-the-step-names-for-each-ilm-action-in-each-phases/292662 "2021-12-22T15:53:05Z")
How to find the step names for each ILM action in each phases ? For example , how to find the sequence of step names for searchable snapshot action in cold phase ? I know that we can use ilm explain api, but that will… --- ## [Index routing allocation does appear to move shards over to specified node](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682 "2021-12-22T15:34:33Z")
I am trying to separate indexes so that they are assigned to specific nodes. I have been following this documentation in order to achieve that. I have an Elasticsearch cluster with 3 nodes. Each node has been given a … --- ## [SNMP input with MIB](https://discuss.elastic.co/t/snmp-input-with-mib/292673)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 3:29pm UTC](https://discuss.elastic.co/t/snmp-input-with-mib/292673 "2021-12-22T15:29:37Z")
"Hello. I´m trying to setup an snmp polling function in our Elasticsearch with Logstash. Today it is an "Proof of Concept" with only one 4G router from the vendor named Advantech. I have followed the instructions foun… --- ## [Logstash Internal API server error](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707 "2021-12-22T15:27:40Z")
I am receiving error in logstash after upgraded from 7.11.x to 7.16.1 this log is not frequent, I feel some action is generating that log but I am not sure which action is generating this error, My pipelines are proper… --- ## [Calculate time difference between two log lines - Logstash](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284)
**Author:** [@giancringo](https://discuss.elastic.co/u/giancringo)\ **Replies:** 4\ **Last updated:** [December 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284 "2021-12-22T14:56:34Z")
Hello, I'm looking for a solution to calculate the difference between two time on two different log lines as below: 2020-06-11 15:31:22,817 \[http-8080-0\] INFO it.example.sign.sign.SignTool - \[TYPE\] trackingID: x12e65… --- ## [How to filter in message this value "${date:"](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 5\ **Last updated:** [December 22, 2021, 2:54pm UTC](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313 "2021-12-22T14:54:52Z")
Hi, is it possible to search for this string ${date: including the symbol '${:' in the message field? to date I have not succeeded . I have tried this: message:"${date:" but excludes ${: who can help me? Thanks! --- ## [Delete and recreate index in elasticsearch](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651)
**Author:** [@Vikrant1](https://discuss.elastic.co/u/Vikrant1)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651 "2021-12-22T14:17:51Z")
Hi All, Thanks for taking your time to read this query - I have to delete the existing index and the need to create same Index in Elasticsearch using the logstash config file before data loading start (reading from or… --- ## [Patch log4j vulnerability on Windows](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679)
**Author:** [@Erni](https://discuss.elastic.co/u/Erni)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679 "2021-12-22T14:15:09Z")
Hi, I was following instructions from: Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation But changed it to powershell commands as I am runnng elasticsearch on Windows: Copy-I… --- ## [Logstash S3 input plugin - filter based on time modified](https://discuss.elastic.co/t/logstash-s3-input-plugin-filter-based-on-time-modified/292581)
**Author:** [@kmualem](https://discuss.elastic.co/u/kmualem)\ **Replies:** 9\ **Last updated:** [December 22, 2021, 2:03pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-filter-based-on-time-modified/292581 "2021-12-22T14:03:27Z")
I have a Logstash container that is configured to read objects from S3. The requirement is to filter old objects, let's say objects before 3 months should be dropped. I noticed that I can expose the s3 metadata, so I h… --- ## [How to parse nested json events](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039 "2021-12-22T14:02:10Z")
Hello! I have nested json objects like this : { "\_index": "impe\_logs-2021.11.19-1", "\_type": "\_doc", "\_id": "tyu", "\_version": 1, "\_score": null, "\_source": { "port": 54640, "impe": { "abp": {… --- ## [Count nested elements](https://discuss.elastic.co/t/count-nested-elements/292652)
**Author:** [@mohamed.softparadigm](https://discuss.elastic.co/u/mohamed.softparadigm)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 1:50pm UTC](https://discuss.elastic.co/t/count-nested-elements/292652 "2021-12-22T13:50:34Z")
I want to create a visualization which count the number of orders with orderStatus.code : confirmed. But the problem I faced is that orderStatus is nested field of order. Even with vega I didn't get the solution. Any s… --- ## [Logstash JDBC input metadata is overriding](https://discuss.elastic.co/t/logstash-jdbc-input-metadata-is-overriding/292691)
**Author:** [@Vinayak\_G](https://discuss.elastic.co/u/Vinayak_G)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-metadata-is-overriding/292691 "2021-12-22T13:47:41Z")
Hey Everybody I am new to ELK I was running logstash 6.8.3 on my machine, I wanted to upgrade to 6.8.21, so I created a new machine and installed logstash 6.8.21, then I pushed my pipeline's and metadata files so that … --- ## [Search.max\_buckets limit error on 7.6.0 even after setting to 10000](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-6-0-even-after-setting-to-10000/292688)
**Author:** [@Nipun\_Tulsyan](https://discuss.elastic.co/u/Nipun_Tulsyan)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 1:36pm UTC](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-6-0-even-after-setting-to-10000/292688 "2021-12-22T13:36:19Z")
I am using a simple query with aggregation. GET testIndex/\_search { "size": 0, "aggs": { "Name1": { "terms": { "field": "field1.keyword", "size": 10000 } }, "Name2":{ "… --- ## [Using short URL human-readable slugs](https://discuss.elastic.co/t/using-short-url-human-readable-slugs/292649)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 1:26pm UTC](https://discuss.elastic.co/t/using-short-url-human-readable-slugs/292649 "2021-12-22T13:26:19Z")
For regular short URLs I can browse to /goto/\ to have Kibana expand the short URL for me, but I can't find any information on how to use the human-readable slugs that the new API can generate, e.g. witty-de… --- ## [European number format not recognised](https://discuss.elastic.co/t/european-number-format-not-recognised/292606)
**Author:** [@mpmass](https://discuss.elastic.co/u/mpmass)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/european-number-format-not-recognised/292606 "2021-12-22T13:12:32Z")
Hi, I have just started exploring Elastic and Kibana. When I am trying to upload a .csv file, the type and format isn't recognised properly. It is seen as a string instead of a double. The format of the number of the fi… --- ## [ERROR logstash.inputs.jdbc](https://discuss.elastic.co/t/error-logstash-inputs-jdbc/292610)
**Author:** [@Gabriel\_Munoz](https://discuss.elastic.co/u/Gabriel_Munoz)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 12:21pm UTC](https://discuss.elastic.co/t/error-logstash-inputs-jdbc/292610 "2021-12-22T12:21:58Z")
El controlador no pudo establecer una conexión segura con SQL Server con el cifrado de Capa de sockets seguros (SSL). Error: "No appropriate protocol (protocol is disabled or cipher suites are inappropriate) \[2021-12-21… --- ## [Aggregation issue after upgrading elastic 7.16.2](https://discuss.elastic.co/t/aggregation-issue-after-upgrading-elastic-7-16-2/292645)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 11:26am UTC](https://discuss.elastic.co/t/aggregation-issue-after-upgrading-elastic-7-16-2/292645 "2021-12-22T11:26:34Z")
unable to do the aggregation in Kibana for entire time range after the upgrading to new version i.e 7.16.2 . but when i am changing to last value it's working. --- ## [Filters in Visualization](https://discuss.elastic.co/t/filters-in-visualization/292630)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/filters-in-visualization/292630 "2021-12-22T11:14:21Z")
Hi I am new to kibana dashboard working on a small task where i am getting logs data from logstash to kibana dashboard for understanding the logs .here in kibana dashboard were we can create our own visualization with e… --- ## [Logstash S3 output plugin, how do we get logging?](https://discuss.elastic.co/t/logstash-s3-output-plugin-how-do-we-get-logging/292615)
**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 11:07am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-how-do-we-get-logging/292615 "2021-12-22T11:07:16Z")
When I use the file output plugin I see INFO log lines that we are opening and closing a file to write to. But when using the s3 output plugin I get writes but no logging. log4j2.properties status = debug name = Logst… --- ## [Mapping conflict but no way to resolve anymore](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 10:56am UTC](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617 "2021-12-22T10:56:01Z")
In the past, you could click on the conflict field and see which indices are causing the conflict but for some reason you have removed that functionality. Is there some way to see which index is causing the conflict? --- ## [Waiting for elected master node in Rolling upgrade](https://discuss.elastic.co/t/waiting-for-elected-master-node-in-rolling-upgrade/292576)
**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\ **Replies:** 4\ **Last updated:** [December 22, 2021, 10:45am UTC](https://discuss.elastic.co/t/waiting-for-elected-master-node-in-rolling-upgrade/292576 "2021-12-22T10:45:38Z")
Hi Team We upgraded Elasticsearch cluster from version 7.13.3 to version 7.16.1 using Rolling upgrade. We upgraded each node one by one, considering non-master nodes first and master nodes in last. The cluster got upgr… --- ## [Log4j Vulnerability: JVM Options not picked from location mentioned in %ES\_PATH\_CONF%](https://discuss.elastic.co/t/log4j-vulnerability-jvm-options-not-picked-from-location-mentioned-in-es-path-conf/292516)
**Author:** [@nikhilagrawaldotnet](https://discuss.elastic.co/u/nikhilagrawaldotnet)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 9:52am UTC](https://discuss.elastic.co/t/log4j-vulnerability-jvm-options-not-picked-from-location-mentioned-in-es-path-conf/292516 "2021-12-22T09:52:47Z")
Does anyone know why setting option -Dlog4j2.formatMsgNoLookups=true in jvm.options file does not work? Elasticsearch version (bin/elasticsearch --version): 7.5.1 Plugins installed: None JVM version (java -version): … --- ## [Linear increase cpu/memory utilization on auditbeat 7.15.0 or later](https://discuss.elastic.co/t/linear-increase-cpu-memory-utilization-on-auditbeat-7-15-0-or-later/292653)
**Author:** [@samuel.john](https://discuss.elastic.co/u/samuel.john)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 8:40am UTC](https://discuss.elastic.co/t/linear-increase-cpu-memory-utilization-on-auditbeat-7-15-0-or-later/292653 "2021-12-22T08:40:00Z")
Hello, I've got running many auditbeat on linux. Recently, I've upgrade from auditbeat version 7.5.x to 7.15.2 But unexpected some server error occurred in this version. When "auditd" error continues to occur, the CP… --- ## [No shard is getting assigned on one of the data node](https://discuss.elastic.co/t/no-shard-is-getting-assigned-on-one-of-the-data-node/292575)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 7\ **Last updated:** [December 22, 2021, 8:24am UTC](https://discuss.elastic.co/t/no-shard-is-getting-assigned-on-one-of-the-data-node/292575 "2021-12-22T08:24:17Z")
I have a cluster running with 10 data, 3 master and 3 client nodes. I am facing issue on one of data node where no shard is able to get assign on it. \_cluster/allocation/explain is giving below message: { "node\_i… --- ## [Elasticsearch clusterstate data](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 11\ **Last updated:** [December 22, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392 "2021-12-22T08:22:03Z")
hello,I have a question need to have a answer，which is if my master es nodes have multi datapaths,the clusterstate data will be saved Multiple and which is Exactly the same --- ## [Elasticsearch log4j 2.17.0 replace](https://discuss.elastic.co/t/elasticsearch-log4j-2-17-0-replace/292644)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 7:00am UTC](https://discuss.elastic.co/t/elasticsearch-log4j-2-17-0-replace/292644 "2021-12-22T07:00:07Z")
hello，I want to know whether all the Elasticsearch release version has been installed could replace the log4j 2.17.0 then rolling restart [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1115) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1117)