# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1119

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1120

---

## [Invalid snapshot name, snapshot with the same name already exists](https://discuss.elastic.co/t/invalid-snapshot-name-snapshot-with-the-same-name-already-exists/292497)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 11:29pm UTC](https://discuss.elastic.co/t/invalid-snapshot-name-snapshot-with-the-same-name-already-exists/292497 "2021-12-20T23:29:26Z")

</div>

Hello I have an index in my cluster with datas. The datas are shipped from logstatsh with this configuration index =\> "%{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-%{+YYYY.MM}" So the index is named with the year and …

---

## [Kibana Report Generation Timeout](https://discuss.elastic.co/t/kibana-report-generation-timeout/292238)

<div class="topic-metadata">

**Author:** [@TASI](https://discuss.elastic.co/u/TASI)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 10:58pm UTC](https://discuss.elastic.co/t/kibana-report-generation-timeout/292238 "2021-12-20T22:58:51Z")

</div>

We currently have Elasticsearch, Logstash and Kibana installed (version 7.16.1).. We use scripts to generate and download data from Kibana/Elasticsearch using curl and a POST URL. One intermittent issue we have been fac…

---

## [Elasticsearch OSS](https://discuss.elastic.co/t/elasticsearch-oss/292501)

<div class="topic-metadata">

**Author:** [@kfull6\_nike](https://discuss.elastic.co/u/kfull6_nike)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-oss/292501 "2021-12-20T22:03:42Z")

</div>

I noticed that for the latest log4j2 vulnerabilities ES was updated. Any idea if and when Elasticsearch-oss will be updated?

---

## [Elasticsearch TSL configuration issue](https://discuss.elastic.co/t/elasticsearch-tsl-configuration-issue/292230)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-tsl-configuration-issue/292230 "2021-12-20T21:12:06Z")

</div>

Following list of instructions here after configuring the basic security: Set up basic security for the Elastic Stack | Elasticsearch Guide \[7.16\] | Elastic Instead of ./bin, I am doing /usr/share/Elasticsearch/bin ... …

---

## [Logstash unable to connect to Elasticsearch over https](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362)

<div class="topic-metadata">

**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\
**Replies:** 6\
**Last updated:** [December 20, 2021, 8:38pm UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362 "2021-12-20T20:38:59Z")

</div>

Hello, I am facing connection issues from logstash to my elastic stack. The very strange this is, that it worked until yesterday. Today (without any modification from my side) I get: Dec 17 22:00:55 ubuntu logstash-app…

---

## [What exactly does sincedb\_path do?](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 8:09pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504 "2021-12-20T20:09:50Z")

</div>

I'm having little trouble understanding Logstash a bit. I've already imported a file using Logstash and I've tried to update the index but it updates it only if I set sincedb\_path to NUL. Can someone explain? Thanks.

---

## [Kibana does not display Graphs](https://discuss.elastic.co/t/kibana-does-not-display-graphs/292397)

<div class="topic-metadata">

**Author:** [@albertogarf91](https://discuss.elastic.co/u/albertogarf91)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 8:02pm UTC](https://discuss.elastic.co/t/kibana-does-not-display-graphs/292397 "2021-12-20T20:02:49Z")

</div>

Hello, I have a problem with Wazuh and kibana interface. I can not see any graph in several places like wazuh -\> overview -\> security events: Or wazuh -\> agents -\> security events: Or in general in any visualizati…

---

## [Update field vaule with base64 encode](https://discuss.elastic.co/t/update-field-vaule-with-base64-encode/292117)

<div class="topic-metadata">

**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 7:53pm UTC](https://discuss.elastic.co/t/update-field-vaule-with-base64-encode/292117 "2021-12-20T19:53:00Z")

</div>

Hello Team, I got a requirement that have to query and update some fields value with base64 code for all documents. can we change the field value to base64 by using \_update\_by\_query API. Ex: POST test/\_doc { "foo…

---

## [Long value displayed incorrectly in watcher email](https://discuss.elastic.co/t/long-value-displayed-incorrectly-in-watcher-email/292502)

<div class="topic-metadata">

**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 7:38pm UTC](https://discuss.elastic.co/t/long-value-displayed-incorrectly-in-watcher-email/292502 "2021-12-20T19:38:58Z")

</div>

Hi, I have created runtime field using a field price(type is float). The runtime field is a long type field. "runtime\_mappings": { "longPrice": { "type": "long", "script": """ …

---

## [Create Bar chart for array of nested objects](https://discuss.elastic.co/t/create-bar-chart-for-array-of-nested-objects/292403)

<div class="topic-metadata">

**Author:** [@masoud\_safa](https://discuss.elastic.co/u/masoud_safa)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 7:16pm UTC](https://discuss.elastic.co/t/create-bar-chart-for-array-of-nested-objects/292403 "2021-12-20T19:16:51Z")

</div>

Hi i have problem in drawing chart for my data with vega my data is like this { "took": 10, "timed\_out": false, "hits": { "hits": \[ { "\_index": "request\_index", "\_id": "eaae227e-cf8f-411d-a8b3-0d66595d…

---

## [Irregular timeout exceptions on watchers](https://discuss.elastic.co/t/irregular-timeout-exceptions-on-watchers/292325)

<div class="topic-metadata">

**Author:** [@pahuja1](https://discuss.elastic.co/u/pahuja1)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 7:15pm UTC](https://discuss.elastic.co/t/irregular-timeout-exceptions-on-watchers/292325 "2021-12-20T19:15:54Z")

</div>

Hello, We've been seeing some of the watchers throwing "timeout" exception. Please note that we are not seeing this behavior consistently. It happened successively for past 2 days but didn't throw and exception today. …

---

## [\[elastic\_agent.filebeat\]\[error\] failed to perform any bulk index operations: Post "http://ES:9200/\_bulk": context deadline exceeded (Client.Timeout exceeded while awaiting headers)](https://discuss.elastic.co/t/elastic-agent-filebeat-error-failed-to-perform-any-bulk-index-operations-post-http-es-9200-bulk-context-deadline-exceeded-client-timeout-exceeded-while-awaiting-headers/292298)

<div class="topic-metadata">

**Author:** [@Tony\_B\_Kunnath](https://discuss.elastic.co/u/Tony_B_Kunnath)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:33pm UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-error-failed-to-perform-any-bulk-index-operations-post-http-es-9200-bulk-context-deadline-exceeded-client-timeout-exceeded-while-awaiting-headers/292298 "2021-12-20T18:33:50Z")

</div>

Getting this error in elastic-agent log: \[elastic\_agent.filebeat\]\[error\] failed to perform any bulk index operations: Post "http://ES:9200/\_bulk": context deadline exceeded (Client.Timeout exceeded while awaiting header…

---

## [Where are the Rally node-stats saved?](https://discuss.elastic.co/t/where-are-the-rally-node-stats-saved/292496)

<div class="topic-metadata">

**Author:** [@toddschilling](https://discuss.elastic.co/u/toddschilling)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 6:28pm UTC](https://discuss.elastic.co/t/where-are-the-rally-node-stats-saved/292496 "2021-12-20T18:28:50Z")

</div>

I must be missing something obvious. I turned on the node-stats telemetry for my benchmark test. Only process stats are turned on and I can change the log levels to DEBUG and see that the calls are being made during my…

---

## [Kibana UI issue after upgrade to kibana 7.10.2](https://discuss.elastic.co/t/kibana-ui-issue-after-upgrade-to-kibana-7-10-2/291331)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:12pm UTC](https://discuss.elastic.co/t/kibana-ui-issue-after-upgrade-to-kibana-7-10-2/291331 "2021-12-20T18:12:56Z")

</div>

After I upgrade Elasticsearch and kibana to v7.10.2 from 7.8.0, I have observed an issue in kibana UI. When I reload the kibana UI after upgrade it gives "ERR\_TO\_MANY\_REDIRECTS" error. Please refer below screenshot for …

---

## [Kibana 7.16.1 short url](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476)

<div class="topic-metadata">

**Author:** [@Marko\_Brkusanin](https://discuss.elastic.co/u/Marko_Brkusanin)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476 "2021-12-20T18:08:38Z")

</div>

Hi, after I upgrade ELK to version 7.16.1 i noticed that API "shorten\_url" is not working anymore. I found Create short URL API | Kibana Guide \[7.16\] | Elastic, but is not clear to me what is: "locatorId" and how to conv…

---

## [Kibana - Error - Can't start - Unable to read Kibana UUID file](https://discuss.elastic.co/t/kibana-error-cant-start-unable-to-read-kibana-uuid-file/291370)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:05pm UTC](https://discuss.elastic.co/t/kibana-error-cant-start-unable-to-read-kibana-uuid-file/291370 "2021-12-20T18:05:32Z")

</div>

\[ubuntu 20.04\] Howdy, I've inherited an Elastic installation, which was running. I can't seem to get it restarted.. can anyone help to get me out of the weeds? I tried to bounce it with the following command, as user u…

---

## [Close inactive option in filebeat](https://discuss.elastic.co/t/close-inactive-option-in-filebeat/292458)

<div class="topic-metadata">

**Author:** [@mangesh\_shinde](https://discuss.elastic.co/u/mangesh_shinde)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 5:06pm UTC](https://discuss.elastic.co/t/close-inactive-option-in-filebeat/292458 "2021-12-20T17:06:15Z")

</div>

I do have file which may in active for long time so I cant use close\_inactive option in filebeat so is there any option to disable this. inactivity time might be days so

---

## [Failure with sorts and new co.elastic.clients:elasticsearch-java client](https://discuss.elastic.co/t/failure-with-sorts-and-new-co-elastic-clients-elasticsearch-java-client/291511)

<div class="topic-metadata">

**Author:** [@ilgrosso](https://discuss.elastic.co/u/ilgrosso)\
**Replies:** 13\
**Last updated:** [December 20, 2021, 4:53pm UTC](https://discuss.elastic.co/t/failure-with-sorts-and-new-co-elastic-clients-elasticsearch-java-client/291511 "2021-12-20T16:53:14Z")

</div>

I am upgrading from Java High-level REST client 7.15 to the new Java client. I am almost done, it seems only one issue is left. I am currently using bare Map\<String, Object\> for documents, hence my index requests look …

---

## [Elasticsearch pod in Kubernetes failing for v 7.16.1](https://discuss.elastic.co/t/elasticsearch-pod-in-kubernetes-failing-for-v-7-16-1/292489)

<div class="topic-metadata">

**Author:** [@Arghya\_Chakraborty](https://discuss.elastic.co/u/Arghya_Chakraborty)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 4:28pm UTC](https://discuss.elastic.co/t/elasticsearch-pod-in-kubernetes-failing-for-v-7-16-1/292489 "2021-12-20T16:28:51Z")

</div>

We are using Helm chart from GitHub - elastic/helm-charts: You know, for Kubernetes to deploy Elasticsearch & Kibana in AWS EKS cluster (Elasticsearch & kibana version: 7.15.0). While upgrading Elasticsearch version to 7…

---

## [Elastic Search Child Object filter](https://discuss.elastic.co/t/elastic-search-child-object-filter/292483)

<div class="topic-metadata">

**Author:** [@Tom\_Johnson](https://discuss.elastic.co/u/Tom_Johnson)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 4:00pm UTC](https://discuss.elastic.co/t/elastic-search-child-object-filter/292483 "2021-12-20T16:00:43Z")

</div>

Hi All, I'm a beginner of Elasticsearch, My Elasticsearch response as below: { "took": 30, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed…

---

## [KQL bar limitation](https://discuss.elastic.co/t/kql-bar-limitation/292184)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kql-bar-limitation/292184 "2021-12-20T15:33:00Z")

</div>

Hi, what is the maximum number of values I can use to match in KQL query? I have index which contains milions of rows of names and many columns related to them and I want to filter out lets say 50 names, but to click a…

---

## [OSS Logstash 7.16.1 incompatible with Elasticsearch 7.10.2](https://discuss.elastic.co/t/oss-logstash-7-16-1-incompatible-with-elasticsearch-7-10-2/292283)

<div class="topic-metadata">

**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 3:20pm UTC](https://discuss.elastic.co/t/oss-logstash-7-16-1-incompatible-with-elasticsearch-7-10-2/292283 "2021-12-20T15:20:09Z")

</div>

I am running an upgrade from some older versions of opendistro and OSS logstash to the latest versions, in order to mitigate some of the latest vulnerabilities. According to Elastic, Logstash OSS 7.16.x should be compat…

---

## [Date not visible while creating small interval buckets using Date Histogram](https://discuss.elastic.co/t/date-not-visible-while-creating-small-interval-buckets-using-date-histogram/291428)

<div class="topic-metadata">

**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 3:08pm UTC](https://discuss.elastic.co/t/date-not-visible-while-creating-small-interval-buckets-using-date-histogram/291428 "2021-12-20T15:08:49Z")

</div>

Hi, I'm using Kibana 7.15.0 and while using Date Histogram in bucket aggregations, I can't see the date on the bars created when the interval is smaller than 1 hour: For interval = 15 mins, the date is not shown on …

---

## [Winlogbeat event id missing](https://discuss.elastic.co/t/winlogbeat-event-id-missing/292200)

<div class="topic-metadata">

**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 2:58pm UTC](https://discuss.elastic.co/t/winlogbeat-event-id-missing/292200 "2021-12-20T14:58:36Z")

</div>

Hello, Will winlogbeat forward the log to Elasticsearch if it is installed on AD and when someone lockout from the system and if the account lockout log is dropping on AD? eg.: if 10 users are getting locked out on the…

---

## [Logstash error](https://discuss.elastic.co/t/logstash-error/291738)

<div class="topic-metadata">

**Author:** [@Jasmina\_Desai](https://discuss.elastic.co/u/Jasmina_Desai)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 2:40pm UTC](https://discuss.elastic.co/t/logstash-error/291738 "2021-12-20T14:40:23Z")

</div>

We are currently using logstash OSS version 7.12.0 downloaded from Past Releases of Elastic Stack Software | Elastic. However, the version 7.16.1 that has the log4j2 vulnerability fix throws a 404 error. How do I get t…

---

## [Self-induced error -deleted indeces](https://discuss.elastic.co/t/self-induced-error-deleted-indeces/292024)

<div class="topic-metadata">

**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 2:19pm UTC](https://discuss.elastic.co/t/self-induced-error-deleted-indeces/292024 "2021-12-20T14:19:54Z")

</div>

Hi all, rookie here again. Looking for some advice on this situation: I just installed ELK with Filebeats about 3 weeks ago. Had a few modules running ok. however, in three weeks I filled up the entire 700GB drive wit…

---

## [New Stack new problems - illegal\_argument\_exeption](https://discuss.elastic.co/t/new-stack-new-problems-illegal-argument-exeption/292341)

<div class="topic-metadata">

**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 2:17pm UTC](https://discuss.elastic.co/t/new-stack-new-problems-illegal-argument-exeption/292341 "2021-12-20T14:17:37Z")

</div>

Hi, so due to a previous post's issues, I created a new ELK stack on a new machine. Completely re-installed the OS and recreated ELK with filebeats. After the installation and configurations, I get a new error saying "1…

---

## [Different sizes of nodes Shard /0 with segment files \`\_\_\*\*\*\`](https://discuss.elastic.co/t/different-sizes-of-nodes-shard-0-with-segment-files/292326)

<div class="topic-metadata">

**Author:** [@christians](https://discuss.elastic.co/u/christians)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 1:24pm UTC](https://discuss.elastic.co/t/different-sizes-of-nodes-shard-0-with-segment-files/292326 "2021-12-20T13:24:55Z")

</div>

Hello, Hope this letter finds you well. Could you please help me with a question that i have. My question is about the generation of several segment files are incremented on a Node. I used elastic 6.8.12 and I have th…

---

## [Is there any way to display base64 image data on dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461)

<div class="topic-metadata">

**Author:** [@elastik](https://discuss.elastic.co/u/elastik)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 1:20pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461 "2021-12-20T13:20:17Z")

</div>

I found the way to display image url using markdown card !\[image\](https://www.google.com/logos/doodles/2021/seasonal-holidays-2021-6753651837109324-6752733080595603-cst.gif) but i don't know how to display base64 image…

---

## [Strigo account SSL issue for mysql](https://discuss.elastic.co/t/strigo-account-ssl-issue-for-mysql/292371)

<div class="topic-metadata">

**Author:** [@kapilsapra](https://discuss.elastic.co/u/kapilsapra)\
**Replies:** 5\
**Last updated:** [December 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/strigo-account-ssl-issue-for-mysql/292371 "2021-12-20T12:02:33Z")

</div>

I am trying to configure and run filebeat on the mysql server in strigo environment. when i run filebeat i am getting SSL error that certificate signed by some different authority. 2021-12-18T05:35:20.274Z INFO …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1118)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1120)
