# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1154

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1155

---

## [Kerberos support in Logstash Jdbc input plugin](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921)

<div class="topic-metadata">

**Author:** [@jitentiwari82](https://discuss.elastic.co/u/jitentiwari82)\
**Replies:** 0\
**Last updated:** [November 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921 "2021-11-23T08:45:37Z")

</div>

Hi Guys, I am trying to use Kerberos authentication to read data from Oracle database through Logstash JDBC plug-in . Has Kerberos support for database connection through JDBC input plugin been added ? Can someone plea…

---

## [Snapshot repository fails to verify](https://discuss.elastic.co/t/snapshot-repository-fails-to-verify/289902)

<div class="topic-metadata">

**Author:** [@vishnu\_rao](https://discuss.elastic.co/u/vishnu_rao)\
**Replies:** 0\
**Last updated:** [November 23, 2021, 6:24am UTC](https://discuss.elastic.co/t/snapshot-repository-fails-to-verify/289902 "2021-11-23T06:24:26Z")

</div>

Continuing the discussion from Snapshot to minio S3 error: @DavidTurner When you say each node.. is it worker node of the cluster or the pods on which the Elasticsearch Application is hosted ? Kindly let me know pls an…

---

## [Is it possible to search in random files with random texts in it with Elastic Search?](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863)

<div class="topic-metadata">

**Author:** [@Sahin\_Kasap](https://discuss.elastic.co/u/Sahin_Kasap)\
**Replies:** 4\
**Last updated:** [November 23, 2021, 8:25am UTC](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863 "2021-11-23T08:25:48Z")

</div>

Hello, I am developing a backend and I have big pdf files(~20 MB), which I want to search words inside. I could upload the texts inside them to Sql or somewhere and search inside them, but this would be slow and pdf's h…

---

## [Report not being generated in Kibana 7.11](https://discuss.elastic.co/t/report-not-being-generated-in-kibana-7-11/289325)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 2\
**Last updated:** [November 23, 2021, 8:24am UTC](https://discuss.elastic.co/t/report-not-being-generated-in-kibana-7-11/289325 "2021-11-23T08:24:10Z")

</div>

Dear team, when we introduced security in our Elasticstack our reports stops to be generated. Here below log output: {"type":"log","@timestamp":"2021-11-16T13:33:37+01:00","tags":\["info","plugins","reporting","queue-j…

---

## [ES 7.10 docker performance issues](https://discuss.elastic.co/t/es-7-10-docker-performance-issues/289911)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 0\
**Last updated:** [November 23, 2021, 7:11am UTC](https://discuss.elastic.co/t/es-7-10-docker-performance-issues/289911 "2021-11-23T07:11:28Z")

</div>

Good morning. I'm running some tests on using docker to spin up multiple nodes and cluster them together on a single bare metal server.... but having major query performance issues. For my test I only have 2 nodes with…

---

## [Filebeat cannot connect to ELK](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076)

<div class="topic-metadata">

**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\
**Replies:** 4\
**Last updated:** [November 23, 2021, 6:36am UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076 "2021-11-23T06:36:18Z")

</div>

Hey, i'm trying to input the apache2 visualize dashboard but when i run this command said connection refused everytime i try try to connect to my ELK in my VM1 with my webserver with apache2 and filebeat, the connect…

---

## [Elasticseach multi data path，every shard only stored into one data path](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895)

<div class="topic-metadata">

**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\
**Replies:** 6\
**Last updated:** [November 23, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895 "2021-11-23T06:29:38Z")

</div>

when i use Elasticsearch to store my data,i have a Confuse，every Elasticsearch process I have config multi data path，but I find every shard of indices is only stored one data path，I want to know if one shard can be store…

---

## [Closing the Index released the RAM and Inodes?](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 7\
**Last updated:** [November 23, 2021, 5:49am UTC](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897 "2021-11-23T05:49:12Z")

</div>

Hi Team, I have around 150 Indices open and my server has around 64 GB of RAM and 8 core CPU. Soon I believe my system would start complaining about RAM and inodes. Hence wanted to confirm if I close the index will that…

---

## [Sort order case insensitive](https://discuss.elastic.co/t/sort-order-case-insensitive/289882)

<div class="topic-metadata">

**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\
**Replies:** 1\
**Last updated:** [November 23, 2021, 4:21am UTC](https://discuss.elastic.co/t/sort-order-case-insensitive/289882 "2021-11-23T04:21:36Z")

</div>

hello, I already have an index created from logstash and I want to do a sort order case insensitive on a field. I need help. thank you

---

## [Mapper Size Plugin VS real Index Size](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793)

<div class="topic-metadata">

**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\
**Replies:** 3\
**Last updated:** [November 23, 2021, 3:17am UTC](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793 "2021-11-23T03:17:12Z")

</div>

Hello guys, hope you are doing well. Im having a little problem, or not understanding something. My problem is: In order to make a metrics dashboard about index sizes and other metrics, i have enabled Mapper Size Pl…

---

## [Elastic cluster Performance issue](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703)

<div class="topic-metadata">

**Author:** [@Krishna\_Kumar](https://discuss.elastic.co/u/Krishna_Kumar)\
**Replies:** 2\
**Last updated:** [November 23, 2021, 2:38am UTC](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703 "2021-11-23T02:38:49Z")

</div>

Hi All, We have a set-up of Pipeline: Beats Agents--\>AWS MSK--\>LogStash--\>Elasticsearch. In which application team sends their application logs through this pipeline. We have 8 AWS ec2 instances which is running on Auto…

---

## [Elastic Agent environment variables file](https://discuss.elastic.co/t/elastic-agent-environment-variables-file/289713)

<div class="topic-metadata">

**Author:** [@Craig\_Lawson](https://discuss.elastic.co/u/Craig_Lawson)\
**Replies:** 3\
**Last updated:** [November 22, 2021, 11:58pm UTC](https://discuss.elastic.co/t/elastic-agent-environment-variables-file/289713 "2021-11-22T23:58:49Z")

</div>

Hi all, I'm not 100% sure where to submit a request to change so figured I would start here... While installing elastic agent using the generic linux package I have battled for some time to get it to work with a web pr…

---

## [Sorting case insensitive](https://discuss.elastic.co/t/sorting-case-insensitive/289875)

<div class="topic-metadata">

**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\
**Replies:** 4\
**Last updated:** [November 22, 2021, 11:31pm UTC](https://discuss.elastic.co/t/sorting-case-insensitive/289875 "2021-11-22T23:31:00Z")

</div>

Hello, can i add a property to make sorting against a field case insensitive in logstash. Thank you.

---

## [Trouble with sending logs from filebeat to elasticsearch](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761)

<div class="topic-metadata">

**Author:** [@Butovoboy](https://discuss.elastic.co/u/Butovoboy)\
**Replies:** 7\
**Last updated:** [November 22, 2021, 10:24pm UTC](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761 "2021-11-22T22:24:14Z")

</div>

Hello, everyone! I have an Elasticsearch with kibana started in docker. And I also have filebeat running running on the server and sending logs to Elasticsearch. So, I have there is no logs in kibana, but all dashboards…

---

## [Runtime field with text type and runtime field usage within dynamic\_templates](https://discuss.elastic.co/t/runtime-field-with-text-type-and-runtime-field-usage-within-dynamic-templates/289876)

<div class="topic-metadata">

**Author:** [@vlasami](https://discuss.elastic.co/u/vlasami)\
**Replies:** 0\
**Last updated:** [November 22, 2021, 9:19pm UTC](https://discuss.elastic.co/t/runtime-field-with-text-type-and-runtime-field-usage-within-dynamic-templates/289876 "2021-11-22T21:19:43Z")

</div>

Hi, We've been experimenting with the use of the (query time) runtime fields as a possible solution for the mapping explosion problem we currently see. Found the list of supported types for the runtime fields (Elastics…

---

## [Filebeat : resource 'filebeat' exists, but it is not an alias](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228)

<div class="topic-metadata">

**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\
**Replies:** 2\
**Last updated:** [November 22, 2021, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-resource-filebeat-exists-but-it-is-not-an-alias/289228 "2021-11-22T21:10:32Z")

</div>

I have ELB set up running in kubernetes. But seeing following logs in filebeats 2021-11-15T18:08:27.786Z ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://elasti…

---

## [Auto kill queries taking more time](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 6\
**Last updated:** [November 22, 2021, 9:02pm UTC](https://discuss.elastic.co/t/auto-kill-queries-taking-more-time/289775 "2021-11-22T21:02:09Z")

</div>

We are using 7.3 ES. Due to few bad queries fired by end user, ES CPU/Memory jumps to very high and impacts all others. We want to know any way to stop those long-running queries and return 429 or some status, so the cli…

---

## [Kibana iFrame with NodeJS Reverse proxy](https://discuss.elastic.co/t/kibana-iframe-with-nodejs-reverse-proxy/289363)

<div class="topic-metadata">

**Author:** [@jorisvo2](https://discuss.elastic.co/u/jorisvo2)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 8:45pm UTC](https://discuss.elastic.co/t/kibana-iframe-with-nodejs-reverse-proxy/289363 "2021-11-22T20:45:02Z")

</div>

Hi everybody :slight\_smile: I've a quick question for you ! Somebody here have already created a reverse proxy with NodeJS to get an access to Kibana Dashboard without need to be logged ? The only answers on Google is…

---

## [Kibana spaces fail to get status for filebeat agent while setup](https://discuss.elastic.co/t/kibana-spaces-fail-to-get-status-for-filebeat-agent-while-setup/289452)

<div class="topic-metadata">

**Author:** [@Rahul\_Kalshetty](https://discuss.elastic.co/u/Rahul_Kalshetty)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 8:21pm UTC](https://discuss.elastic.co/t/kibana-spaces-fail-to-get-status-for-filebeat-agent-while-setup/289452 "2021-11-22T20:21:17Z")

</div>

Im using filebeat to push my logs to Elasticsearch directly. I have configured a kibana space in filebeat.yml but it is giving me error saying Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GE…

---

## [Error uploading ndjson files to /api/saved\_objects/\_import : returned 406](https://discuss.elastic.co/t/error-uploading-ndjson-files-to-api-saved-objects-import-returned-406/289618)

<div class="topic-metadata">

**Author:** [@lokeshv1989](https://discuss.elastic.co/u/lokeshv1989)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 8:06pm UTC](https://discuss.elastic.co/t/error-uploading-ndjson-files-to-api-saved-objects-import-returned-406/289618 "2021-11-22T20:06:03Z")

</div>

Hi, we are trying to build powershell script to import the ndjson (Diskutilization.ndjson) file into Kibana. $upload\_object = $es\_url + “/api/saved\_objects/\_import?overwrite=true” $form = @{ file = Get-Content -Raw -P…

---

## [Logstash JMX input plugin cannot load Cassandra configuration](https://discuss.elastic.co/t/logstash-jmx-input-plugin-cannot-load-cassandra-configuration/289273)

<div class="topic-metadata">

**Author:** [@Erkan\_SIRIN](https://discuss.elastic.co/u/Erkan_SIRIN)\
**Replies:** 4\
**Last updated:** [November 22, 2021, 7:24pm UTC](https://discuss.elastic.co/t/logstash-jmx-input-plugin-cannot-load-cassandra-configuration/289273 "2021-11-22T19:24:20Z")

</div>

I am trying to get Cassandra metrics through logstash jmx input. My logstash pipeline conf: /etc/logstash/conf.d/cassandra\_jmx.conf input { jmx { path =\> "/etc/logstash/jmxconf" polling\_frequency =\> 15 …

---

## [Creating a watcher to compare moving average values](https://discuss.elastic.co/t/creating-a-watcher-to-compare-moving-average-values/289634)

<div class="topic-metadata">

**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 6:13pm UTC](https://discuss.elastic.co/t/creating-a-watcher-to-compare-moving-average-values/289634 "2021-11-22T18:13:23Z")

</div>

Hello there, I'm trying to build a watcher to compare two values for a moving average, one being the latest bucket moving average value and the other the moving average value for a bucket one month earlier (-1 Month off…

---

## [Disk capacity for elasticsearch](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816)

<div class="topic-metadata">

**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\
**Replies:** 4\
**Last updated:** [November 22, 2021, 4:25pm UTC](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816 "2021-11-22T16:25:37Z")

</div>

I want to ship my application log files into Elasticsearch and trying to come-up with a capacity plan for Elasticsearch. Let's say if I have 1 GB log file, how much disk space I need for Elasticsearch to store log conte…

---

## [Readonly role/user unable to view remote cluster index results](https://discuss.elastic.co/t/readonly-role-user-unable-to-view-remote-cluster-index-results/289615)

<div class="topic-metadata">

**Author:** [@jwmocs](https://discuss.elastic.co/u/jwmocs)\
**Replies:** 2\
**Last updated:** [November 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/readonly-role-user-unable-to-view-remote-cluster-index-results/289615 "2021-11-22T14:56:22Z")

</div>

Basically I need a readonly role to simulate the "experimental" viewer role, but limit Kibana privileges to only Analytics\>Discover, and Management\>Dev-tools. But my custom readonly role after assigning ALL run-as priv…

---

## [Filebeat \> logstash "Invalid FieldReference" in the log](https://discuss.elastic.co/t/filebeat-logstash-invalid-fieldreference-in-the-log/289747)

<div class="topic-metadata">

**Author:** [@gyurgyalag](https://discuss.elastic.co/u/gyurgyalag)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 2:47pm UTC](https://discuss.elastic.co/t/filebeat-logstash-invalid-fieldreference-in-the-log/289747 "2021-11-22T14:47:38Z")

</div>

seems there are similare topics to this without answer 1 and one suggests there is no solution 2 But I ask anyway maybe somebody can help. This is the error: ^\[\[Alogstash | \[2021-11-20T16:57:20,868\]\[INFO \]\[org.log…

---

## [Elasticsearch remove fields](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442)

<div class="topic-metadata">

**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\
**Replies:** 12\
**Last updated:** [November 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442 "2021-11-22T14:27:22Z")

</div>

Hello! i'm using: elasticsearch 7.13.2 kibana 7.12.1 I am trying to remove index pattern fields in kibana -\> dev tools using the following command POST /mdaemon\_test\_array\_2\_step-2021.11.16\_test\_reindex/\_update\_by\_…

---

## [Multi Terms aggregation does not exist in Java High Level REST Client！](https://discuss.elastic.co/t/multi-terms-aggregation-does-not-exist-in-java-high-level-rest-client/289044)

<div class="topic-metadata">

**Author:** [@Ethan.Winst](https://discuss.elastic.co/u/Ethan.Winst)\
**Replies:** 1\
**Last updated:** [November 22, 2021, 1:08pm UTC](https://discuss.elastic.co/t/multi-terms-aggregation-does-not-exist-in-java-high-level-rest-client/289044 "2021-11-22T13:08:31Z")

</div>

Multi Terms aggregation does not exist in Java High Level REST Client！ Does Multi Terms aggregation currently only provide this function for kibana?

---

## [Elasticsearch plugin-install don't use the proper Java version](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269)

<div class="topic-metadata">

**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\
**Replies:** 4\
**Last updated:** [November 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269 "2021-11-22T12:50:28Z")

</div>

Hello, I try to install the OpenNlp plugin on my local machine with the command bin/elasticsearch-plugin install https://github.com/spinscale/elasticsearch-ingest-opennlp/releases/download/7.15.2.1/ingest-opennlp-7.15.…

---

## [Can transform with init, map, combine, reduce emit multiple documents?](https://discuss.elastic.co/t/can-transform-with-init-map-combine-reduce-emit-multiple-documents/289563)

<div class="topic-metadata">

**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\
**Replies:** 9\
**Last updated:** [November 22, 2021, 12:26pm UTC](https://discuss.elastic.co/t/can-transform-with-init-map-combine-reduce-emit-multiple-documents/289563 "2021-11-22T12:26:34Z")

</div>

Hi, In an index we have multiple documents for sequential steps that are part of a single transaction. We need to calculate the elapsed times for each step. Instead of emitting 1 document with all timings for all step…

---

## [Few questions on running elasticsearch with free license](https://discuss.elastic.co/t/few-questions-on-running-elasticsearch-with-free-license/289801)

<div class="topic-metadata">

**Author:** [@prat1](https://discuss.elastic.co/u/prat1)\
**Replies:** 2\
**Last updated:** [November 22, 2021, 12:08pm UTC](https://discuss.elastic.co/t/few-questions-on-running-elasticsearch-with-free-license/289801 "2021-11-22T12:08:40Z")

</div>

Hi Team, Is there any limit on the number of GB of logs per day, say in filebeat processing of GBs of data or in logstash ingestion or any limit on elasticsearch storage of GBs of data in free license of Elasticsearch? …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1153)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1155)
