# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1122 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1123 --- ## [8.0 Upgrade Assistant and the changing log format warning](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277)
**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\ **Replies:** 4\ **Last updated:** [December 17, 2021, 4:31pm UTC](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277 "2021-12-17T16:31:46Z")
Heya, I updated the ELK stack to the very latest version and it looks like, it's the probably last "minor" update :tada: I fixed all the issues reported by the upgrade assistant so far (the upgrade assistant was a huge… --- ## [List of doc ids in an index](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279)
**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:10pm UTC](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279 "2021-12-17T16:10:43Z")
Is there any way of retrieving a list of all the document ids that are present in an index? Just the ids and not the actual data inside the documents. --- ## [How to specify the index to send the logs of specific microservice](https://discuss.elastic.co/t/how-to-specify-the-index-to-send-the-logs-of-specific-microservice/290038)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 4\ **Last updated:** [December 17, 2021, 4:12pm UTC](https://discuss.elastic.co/t/how-to-specify-the-index-to-send-the-logs-of-specific-microservice/290038 "2021-12-17T16:12:30Z")
Hi, I'm working with GKE and Elastic cloud. I have configured filebeat in my k8s cluster and is working fine, but is sending all the logs to one index, and I would like for some specific services send the logs to anothe… --- ## [Ask for best practice how to add new plugin analyzer to existing index (new field)](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589)
**Author:** [@garyzjq](https://discuss.elastic.co/u/garyzjq)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:09pm UTC](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589 "2021-12-17T16:09:46Z")
(ES 7.15) Hi teams, For custom analyzer (defined in Index setting as json format) , I saw there were 2 best practices: If want to add a new custom analyzer to existing index, need to close/re-open this index. If ther… --- ## [Update by query in Logstash](https://discuss.elastic.co/t/update-by-query-in-logstash/292333)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 4:09pm UTC](https://discuss.elastic.co/t/update-by-query-in-logstash/292333 "2021-12-17T16:09:30Z")
Hi! I'm trying to solve the following problem. I have some information in the database that I want to send to an Elasticsearch index through Logstash. It is something that I have already done on some occasion but the … --- ## [Upload images to elastic search and display it in kibana](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258)
**Author:** [@Raghupathy\_M](https://discuss.elastic.co/u/Raghupathy_M)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 3:31pm UTC](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258 "2021-12-17T15:31:48Z")
How to Upload images to Elasticsearch and display it in kibana --- ## [Logstash failing to build with custom java Plugin after log4j issue fix in 7.16.1 build](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316)
**Author:** [@Rahulkumar\_Pawar](https://discuss.elastic.co/u/Rahulkumar_Pawar)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:50pm UTC](https://discuss.elastic.co/t/logstash-failing-to-build-with-custom-java-plugin-after-log4j-issue-fix-in-7-16-1-build/292316 "2021-12-17T13:50:03Z")
I upgraded logstash source with 7.16.1 to have log4j vulnerability fix. Followed below steps Downloaded source code -- GitHub - elastic/logstash at v7.16.1 for source repo, ran ./gradlew assemble followed by rake … --- ## [Loose output permissions given to Elastic Agent](https://discuss.elastic.co/t/loose-output-permissions-given-to-elastic-agent/292297)
**Author:** [@DamianoChini](https://discuss.elastic.co/u/DamianoChini)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 2:39pm UTC](https://discuss.elastic.co/t/loose-output-permissions-given-to-elastic-agent/292297 "2021-12-17T14:39:44Z")
Hi all! If in Fleet I configure a Policy without any integration, the Elastic Agents associated with that Policy receive output permissions on logs-\*, metrics-\*, traces-\* and synthetics-\*. This means that these Elasti… --- ## [FATAL error after updating to 7.16.1](https://discuss.elastic.co/t/fatal-error-after-updating-to-7-16-1/291959)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 14\ **Last updated:** [December 17, 2021, 2:11pm UTC](https://discuss.elastic.co/t/fatal-error-after-updating-to-7-16-1/291959 "2021-12-17T14:11:19Z")
\[FATAL\] 2021-12-15 11:35:53.567 \[main\] Logstash - Logstash was unable to start due to an unexpected Gemfile change. What is the Gemfile change? How do I debug this? Anyone else experienced this? I can't find anything… --- ## [Deploying Helm chart to local Kubernetes gives FileSystemException](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906)
**Author:** [@ngruson](https://discuss.elastic.co/u/ngruson)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:07pm UTC](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906 "2021-12-17T14:07:07Z")
I'm trying to deploy Elasticsearch 7.9.3 to my local Kubernetes cluster running in Docker Desktop. I cloned the helm charts for Elasticsearch from GitHub ( helm-charts/elasticsearch at main · elastic/helm-charts (github… --- ## [ES 6.7.1 "The system could not find the environment option that was entered" JDK 11.0.13](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315)
**Author:** [@angelo.pluskwa](https://discuss.elastic.co/u/angelo.pluskwa)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:48pm UTC](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315 "2021-12-17T13:48:20Z")
OS: Windows Server 2008 R2 ES: 6.7.1 Java: JDK Temurin-11.0.13+8 When Elasticsearch is installed as a service with "Elasticsearch-service.bat install" using the mentioned JDK, the Elasticsearch service will crash on s… --- ## [Search documents with apostrophes in fields](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162)
**Author:** [@Gabriel\_DE\_RAMECOURT](https://discuss.elastic.co/u/Gabriel_DE_RAMECOURT)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 1:47pm UTC](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162 "2021-12-17T13:47:00Z")
Hello, I am quite new to Elascticsearch and try to write and search documents. I have no problem writing documents, but I have one when I try searching for documents using a word that is stored in a field with an apost… --- ## [Winlogbeat - Need Help with Drop\_fields](https://discuss.elastic.co/t/winlogbeat-need-help-with-drop-fields/291926)
**Author:** [@0xf](https://discuss.elastic.co/u/0xf)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 1:41pm UTC](https://discuss.elastic.co/t/winlogbeat-need-help-with-drop-fields/291926 "2021-12-17T13:41:15Z")
So basically what i would like to do is drop everything from the fields and manually include a few. So to say, i want to drop every field that im not putting/specifying in this config file. In this case i tried to spec… --- ## [Metricbeat only sending some kube-state-metrics to elastic](https://discuss.elastic.co/t/metricbeat-only-sending-some-kube-state-metrics-to-elastic/292142)
**Author:** [@bagdus](https://discuss.elastic.co/u/bagdus)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 12:50pm UTC](https://discuss.elastic.co/t/metricbeat-only-sending-some-kube-state-metrics-to-elastic/292142 "2021-12-17T12:50:40Z")
Hello I've been struggling with an issue i have with metricbeats kubernetes module. Specifically the processing of kube-state-metrics. Versions: kube-state-metrics 2.2.4 Metricbeat/ELK 7.15 The issue: Scraping of k… --- ## [Missing logs due to kafka error](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307 "2021-12-17T12:36:54Z")
Hey guys, i have set up ELK with kafka where logs are sent to different kafka topics which then are sent to logstash indices. My problem is kafka went down for 2 days and i cannot see the logs for those two days in kiban… --- ## [In Kibana vega can we give index pattern with filters in data source](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243)
**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:09pm UTC](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243 "2021-12-17T12:09:50Z")
Hi I have to show all the data on index pattern with some filters. In discover I have school and I want to filter out all the students in grade 5. When I add the filter and see in discover it has 6000 records. But all re… --- ## [How to create configure date filter data nested](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 11:27am UTC](https://discuss.elastic.co/t/how-to-create-configure-date-filter-data-nested/292273 "2021-12-17T11:27:19Z")
I have some nested data in my log in the form of unix time, and I am trying to convert it to a time stamp, this is an example of the data I want to convert into a time stamp, { "upstream\_uri": "\\/request", "route":… --- ## [Add Index Mapping to Indices](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 10:16am UTC](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281 "2021-12-17T10:16:39Z")
I have updated my Index Template with a new mapping that is and Alias to an existing field. I now want to add that to all past indices. Do I use the mapping API to add it? Is there and example? Thanks in advance. --- ## [Kibana's stack-monitoring partly broken after stack upgrade from 7.13 to 7.15](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 8\ **Last updated:** [December 17, 2021, 9:54am UTC](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183 "2021-12-17T09:54:36Z")
Hello. We upgraded our Elastic stack (Elasticsearch nodes, logstash, beats, kibana) from 7.13 to 7.15.0. Everything is working well except that in Kibana, Stack Monitoring (Cluster Overview) we are getting some weird ti… --- ## [Long Query string from mysql.slowlog doesn't show on table but show on json](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887)
**Author:** [@budums](https://discuss.elastic.co/u/budums)\ **Replies:** 5\ **Last updated:** [December 17, 2021, 9:14am UTC](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887 "2021-12-17T09:14:38Z")
hi I already setup filebeat on database server to get slow log query and send to Elasticsearch. but on kibana at Discover menu if query string from slowlog is too long doesn't show on table view and I set expand fi… --- ## [Modificación formato campo number-duration](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:09am UTC](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280 "2021-12-17T09:09:19Z")
Buenos días, ¿Se puede cambiar el formato del campo number de 0,0.\[000\] a 0.00,\[000\]? Tengo un campo en el índice tipo number con un formato DURATION (Default: number) la entrada en segundos y la salida en minutos. Has… --- ## [Is Elasticsearch 7.4.0 vulnerable to Log4j?](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263)
**Author:** [@Ranith\_D](https://discuss.elastic.co/u/Ranith_D)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263 "2021-12-17T08:20:23Z")
Im using Elasticsearch 7.4.0 and want to know if its vulnerable for Log4j --- ## [How to install Elasticsearch on Kubernetes using Helm (3 nodes) and production SSL certificates](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433)
**Author:** [@Peter\_Schwarz](https://discuss.elastic.co/u/Peter_Schwarz)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433 "2021-12-17T08:05:17Z")
Hi I am having a bad time trying to install Elasticsearch (3 nodes) on Kubernetes using HELM + Production certificates. I am using the following config: clusterName: "my-cluster" nodeGroup: "master" roles: master:… --- ## [Host.name FQDN](https://discuss.elastic.co/t/host-name-fqdn/292252)
**Author:** [@Anton75](https://discuss.elastic.co/u/Anton75)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 4:00am UTC](https://discuss.elastic.co/t/host-name-fqdn/292252 "2021-12-17T04:00:38Z")
Hi! Is it possible to get FQDN hostname from agent host (like hostname -f in Linux)? In my case filebeat sends short hostname, like hostname -s. Hosts are RedHat 7.9. Thank you. --- ## [Logstash is not starting.. i have installed a new version of Logstash 7.16.1 , it crashes saying fatal error](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [December 17, 2021, 5:05am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-i-have-installed-a-new-version-of-logstash-7-16-1-it-crashes-saying-fatal-error/292026 "2021-12-17T05:05:27Z")
Logstash is not starting, I have installed Logstash 7.16.1, this is the error i am getting in logstash \[2021-12-15T17:28:43,113\]\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources. \[2… --- ## [How to build elasticsearch docker image from source](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251)
**Author:** [@111494](https://discuss.elastic.co/u/111494)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 3:55am UTC](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251 "2021-12-17T03:55:57Z")
I want to make Elasticsearch docker image from source, but I dont know how. Can anyone tell me how? Thanks~ --- ## [Need to bind logstash to eth0](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236)
**Author:** [@Nie](https://discuss.elastic.co/u/Nie)\ **Replies:** 11\ **Last updated:** [December 17, 2021, 3:03am UTC](https://discuss.elastic.co/t/need-to-bind-logstash-to-eth0/292236 "2021-12-17T03:03:09Z")
I'm wondering why I am not seeing 5044 listener on the logstash server. I am seeing tcp port listeners on 9200 and 9600 when I execute "netstat -na". However, it's bound to loopback ip which is 127.0.0.1. Also, I can't… --- ## [Updating Logstash from an older version](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245)
**Author:** [@b3owu1f](https://discuss.elastic.co/u/b3owu1f)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:43am UTC](https://discuss.elastic.co/t/updating-logstash-from-an-older-version/292245 "2021-12-17T02:43:44Z")
Greetings I have an unsupported operational Logstash I was required to update due to the Log4j2 vulnerability. The service was implemented long ago without documentation by crew already out of the company. Looking aroun… --- ## [Cannot compute used swap when total swap is 0 and free swap is 0 : Elastic Search 6.8.21](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225)
**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 11:03pm UTC](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225 "2021-12-16T23:03:16Z")
Hi All, We have moved up into the version of Elasticsearch 6.8.21 We are getting logs of this continuously 2021-12-16T21:16:19,858\]\[WARN \]\[o.e.m.o.O.Swap \] \[BLAH\] cannot compute used swap when total swap is … --- ## [Logstash failing to ingest multi-line json log file... I think](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:56pm UTC](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851 "2021-12-16T21:56:05Z")
I am having trouble getting my data ingested by logstash... I think... but I'm just learning about how to do this. Someone else stood up Cloud Custodian, and is dumping logs to an s3 bucket, and I am attempting to inge… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1121) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1123)