# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1198 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1199 --- ## [ILM shards to be allocated to nodes matching the given filters](https://discuss.elastic.co/t/ilm-shards-to-be-allocated-to-nodes-matching-the-given-filters/286699)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 9:55am UTC](https://discuss.elastic.co/t/ilm-shards-to-be-allocated-to-nodes-matching-the-given-filters/286699 "2021-10-18T09:55:18Z")
I setting 3 data nodes: one hot;one warm;one cold. The elasticsearch.yaml ： node.master: false node.data: true node.ingest: true node.attr.box\_type: hot The ILM is : PUT \_ilm/policy/k8s-logs { "policy":{ "… --- ## [Sysmon Integration with Linux Elastic Agent?](https://discuss.elastic.co/t/sysmon-integration-with-linux-elastic-agent/286861)
**Author:** [@cheapsupps](https://discuss.elastic.co/u/cheapsupps)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 9:53am UTC](https://discuss.elastic.co/t/sysmon-integration-with-linux-elastic-agent/286861 "2021-10-18T09:53:47Z")
Sysmon for linux is just being released. https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-linux-version-of-the-windows-sysmon-tool/ We all know how the sysmon can be customized to collect useful secur… --- ## [Job for elasticsearch.service failed](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed/286934)
**Author:** [@dun7ill](https://discuss.elastic.co/u/dun7ill)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:48am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed/286934 "2021-10-18T09:48:41Z")
Hi All, I've installed Elasticsearch 7 on CentOS 7, I faced a problem when I try to start it. Sometimes it's work fine, then it's failed ! Please find the following code ; ● elasticsearch.service - Elasticsearch L… --- ## [Kibana cannot connect to elastichsearch in https, xpack enabled](https://discuss.elastic.co/t/kibana-cannot-connect-to-elastichsearch-in-https-xpack-enabled/286692)
**Author:** [@Florent\_BITSCHY](https://discuss.elastic.co/u/Florent_BITSCHY)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-elastichsearch-in-https-xpack-enabled/286692 "2021-10-18T09:31:03Z")
hello i deploy elastci stack in kubernetes with helm chart i got my elastcisearch runnning with xpack and running well here uis the values node.master: true replicas: 1 minimumMasterNodes: 1 clusterHealthCheckPara… --- ## [How can I force search to look into fields that marked as \_Ignored](https://discuss.elastic.co/t/how-can-i-force-search-to-look-into-fields-that-marked-as-ignored/286915)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:24am UTC](https://discuss.elastic.co/t/how-can-i-force-search-to-look-into-fields-that-marked-as-ignored/286915 "2021-10-18T09:24:07Z")
Hi All, I'm using 7.15, I'm saving some logs of failed tests, the log contain the test failed reason which I save in fields called: "testcaseFailedReason" I've noticed that I don't get values from this field in visua… --- ## [Change kibana welcome logo & text ( 7.15.0 )](https://discuss.elastic.co/t/change-kibana-welcome-logo-text-7-15-0/286830)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:00am UTC](https://discuss.elastic.co/t/change-kibana-welcome-logo-text-7-15-0/286830 "2021-10-18T09:00:56Z")
Hello! I want to change the logo form the login ui: where are the css or the image to change it? Thanks in advanced! --- ## [How to change kibana logo in Kibana 7.6.2](https://discuss.elastic.co/t/how-to-change-kibana-logo-in-kibana-7-6-2/286912)
**Author:** [@v0landem0rt](https://discuss.elastic.co/u/v0landem0rt)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 8:46am UTC](https://discuss.elastic.co/t/how-to-change-kibana-logo-in-kibana-7-6-2/286912 "2021-10-18T08:46:04Z")
I'm using Kibana 7.6.2, and i want to place custom logo at top left corner of kibana home page. How can i do it? There are many tutors at this forum, but this tutors useless for my case. --- ## [Depending on the restart of the index server, there are cases in which the search is different. Why?](https://discuss.elastic.co/t/depending-on-the-restart-of-the-index-server-there-are-cases-in-which-the-search-is-different-why/286792)
**Author:** [@jeongin](https://discuss.elastic.co/u/jeongin)\ **Replies:** 7\ **Last updated:** [October 18, 2021, 8:37am UTC](https://discuss.elastic.co/t/depending-on-the-restart-of-the-index-server-there-are-cases-in-which-the-search-is-different-why/286792 "2021-10-18T08:37:22Z")
We have a separate boxtype index server. Two cases will be described. First Restart. Perform an index. Check the term with '\_termvectors' api. Term 'xxxx' exists. Check the term with '\_explain' api. Receive 'no match… --- ## [Jdbc config not working](https://discuss.elastic.co/t/jdbc-config-not-working/286680)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 8:29am UTC](https://discuss.elastic.co/t/jdbc-config-not-working/286680 "2021-10-18T08:29:11Z")
Simple issue in that I have a jdbc config set up, but no output so no idea whats going on. I have changed logstash config to go to debug and can see the config is being consumed without errors. The input is select "tes… --- ## [Does this feature really work as the description? https://github.com/elastic/elasticsearch/pull/59394](https://discuss.elastic.co/t/does-this-feature-really-work-as-the-description-https-github-com-elastic-elasticsearch-pull-59394/286957)
**Author:** [@GrandFisher](https://discuss.elastic.co/u/GrandFisher)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 7:00am UTC](https://discuss.elastic.co/t/does-this-feature-really-work-as-the-description-https-github-com-elastic-elasticsearch-pull-59394/286957 "2021-10-18T07:00:16Z")
Does anyone really observe this feature in the log? We never found this log in our log file.（total circuit breaker has thrown at least an CircuitBreakingException） logger.info("attempting to trigger G1GC due to high he… --- ## [Default values for value interpolation in autodiscovery](https://discuss.elastic.co/t/default-values-for-value-interpolation-in-autodiscovery/286950)
**Author:** [@gwvandesteeg](https://discuss.elastic.co/u/gwvandesteeg)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 5:27am UTC](https://discuss.elastic.co/t/default-values-for-value-interpolation-in-autodiscovery/286950 "2021-10-18T05:27:15Z")
Is there a way to specify a default value for a value interpolation in the metricbeat configuration. For example: modules.autodiscover: providers: # prometheus resource auto discovery - ty… --- ## [Setup repository on cluster across two servers](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:15am UTC](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945 "2021-10-18T05:15:52Z")
Hello, I have a cluster set up on two servers, Node master and coordination on IP 10.10.10.1. Node data on IP 10.10.10.2. I want to set up repository on my cluster, here is my question How I can declare my path.repo… --- ## [Delete all data streams when delete index through data stream API](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:06am UTC](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804 "2021-10-18T05:06:06Z")
I have index "test-index", and other data streams but "test index" data stream. When I try to delete this "test-index" index through data stream API (and "test-index" data stream does not exist), I get "acknowledge: tru… --- ## [How can I build a claster from two independent Elastic Servers?](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798 "2021-10-18T04:33:37Z")
Hi, I have two independent Elastic Servers in my business. I know the steeps I have to do to set up the cluster, the question is what will happens with the data of both servers when I create the cluster? Will I lose i… --- ## [Update elasticsearch index mapping through script or curl command](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905)
**Author:** [@prataprajasekhar](https://discuss.elastic.co/u/prataprajasekhar)\ **Replies:** 8\ **Last updated:** [October 18, 2021, 4:30am UTC](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905 "2021-10-18T04:30:40Z")
Dear Team, We are trying to update an index using below method in kibana dev console. Can you please let me know the method to be followed either using curl method or wget method or via a python or shell script to upda… --- ## [Checking query efficiency tool](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944)
**Author:** [@eylon\_koren](https://discuss.elastic.co/u/eylon_koren)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 4:12am UTC](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944 "2021-10-18T04:12:58Z")
Hi! I am providing accessibility to search on ES for our customers. Some of them are creating inefficient queries, which uses wildcard at the start of a sentence or without any field specified. I would like to find th… --- ## [Else conditional in ingest pipeline](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 9\ **Last updated:** [October 18, 2021, 3:55am UTC](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697 "2021-10-18T03:55:58Z")
Hello, I want to make else conditional on my ingest pipeline, here's pipeline I've made: PUT \_ingest/pipeline/pipeline-test { "processors": \[ { "pipeline":{ "description": "check field1 to output to … --- ## [Metricbeat on kubernetes, conflicting configurations](https://discuss.elastic.co/t/metricbeat-on-kubernetes-conflicting-configurations/286585)
**Author:** [@gwvandesteeg](https://discuss.elastic.co/u/gwvandesteeg)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 2:20am UTC](https://discuss.elastic.co/t/metricbeat-on-kubernetes-conflicting-configurations/286585 "2021-10-18T02:20:17Z")
Been looking at the way to deploy Metricbeat onto our kubernetes cluster and I've been finding conflicting information from two sources. references the material at https://raw.githubusercontent.com/elastic/beats/7.15/… --- ## [Ingesting Web Services API data into Elasticsearch without a database](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878)
**Author:** [@rvalle](https://discuss.elastic.co/u/rvalle)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 1:40am UTC](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878 "2021-10-18T01:40:24Z")
I’m new to this forum as well as to Elasticsearch. I just recently started exploring how Elasticsearch works and if it can solve a problem. I am trying to find a solution to the following scenario: I have a web servic… --- ## [Es\_rejected\_execution\_exception -](https://discuss.elastic.co/t/es-rejected-execution-exception/286901)
**Author:** [@Paulo\_Eduardo\_Bitar](https://discuss.elastic.co/u/Paulo_Eduardo_Bitar)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 1:07am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception/286901 "2021-10-18T01:07:30Z")
Hi, I just started learning Elastic and I have already found a problem. I am running Elastic in a Docker and trying to execute this curl -H 'Content-Type: application/json' -XPOST '127.0.0.1:9200/shakespeare/\_bulk?prett… --- ## [Invalid url](https://discuss.elastic.co/t/invalid-url/286814)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 12:46am UTC](https://discuss.elastic.co/t/invalid-url/286814 "2021-10-18T00:46:56Z")
Hi I'm getting invalid url error in Logstash. My config: http\_poller { urls =\> { executedsteps =\> { method =\> get cacert =\> "/elk-stack/cert.pem" url =\> "https://odata-trial.… --- ## [ElasticSearch Nest query returning Null values for every field?](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796 "2021-10-17T23:28:31Z")
I finally got my Nest client set up, however, the results of every field are populated as null instead of the expected values. I looked at these c# - ElasticSearch NEST - all fields are NULL - Stack Overflow and c# - NE… --- ## [How to prevent a single node slowing down queries where it acts as the coordinator?](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937)
**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 9:20pm UTC](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937 "2021-10-17T21:20:32Z")
As per my understanding, clients do not have a server-preference for sending read queries and do either a round-robin or a random client selection. If so, then each server acts as a coordinator node (one that scatter-ga… --- ## [Warnings when service starts](https://discuss.elastic.co/t/warnings-when-service-starts/286928)
**Author:** [@aakerbeere](https://discuss.elastic.co/u/aakerbeere)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 9:16pm UTC](https://discuss.elastic.co/t/warnings-when-service-starts/286928 "2021-10-17T21:16:41Z")
fyi I get warnings when Elasticsearch.service starts. Don't know if this is important but it's considering reporting to the maintainers, which is done herewith. Elasticsearch aarch64 (RPi4). openjdk version "11.0.12" 2… --- ## [How to process these NginX logs? Grok error](https://discuss.elastic.co/t/how-to-process-these-nginx-logs-grok-error/286920)
**Author:** [@stijnos1991](https://discuss.elastic.co/u/stijnos1991)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 1:56pm UTC](https://discuss.elastic.co/t/how-to-process-these-nginx-logs-grok-error/286920 "2021-10-17T13:56:44Z")
Hello! I'm pretty new to ELK, but I have theoretical and practical background in Cyber Security. As a hobby project I'm trying to setup a simple SIEM, or log collector at home to see how the ELK stack is configured. In… --- ## [Is Elasticsearch good for such a problem?](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917)
**Author:** [@Michal\_Szymanski](https://discuss.elastic.co/u/Michal_Szymanski)\ **Replies:** 2\ **Last updated:** [October 17, 2021, 12:23pm UTC](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917 "2021-10-17T12:23:18Z")
Hi, We have been thinking about choosing the right technology for our problem for a long time. The problem is as follows: we will have tens of millions of JSON documents documents will contain any number of "entry" s… --- ## [Elasticsearch plugin to do search requests](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923)
**Author:** [@ali\_kh](https://discuss.elastic.co/u/ali_kh)\ **Replies:** 3\ **Last updated:** [October 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923 "2021-10-17T11:46:55Z")
I want to build an ES plugin to do index search requests, what type of plugins can I use? and is there some tutorial or documentation for that? Thanks --- ## [HighLevelRestClient (Java) - Client does not shut down after async requests](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836)
**Author:** [@codingchili](https://discuss.elastic.co/u/codingchili)\ **Replies:** 4\ **Last updated:** [October 17, 2021, 10:46am UTC](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836 "2021-10-17T10:46:30Z")
Hello, I'm unable to close the threadpool that is backing the HighLevelRestClient. Whenever my framework fails to deploy a part of the application or just for a graceful shutdown, I need the threadpool to shutdown to al… --- ## [Logstash-keystore Java error](https://discuss.elastic.co/t/logstash-keystore-java-error/286925)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 10:02am UTC](https://discuss.elastic.co/t/logstash-keystore-java-error/286925 "2021-10-17T10:02:28Z")
Hi, I have a problem when running logstash-keystore Windows command line: bin\\logstash-keystore create Does not work and returns the information: "Using boundled JDK:" Cannot find Java 1.5 or higher However... b… --- ## [Compile mips64 "io/fs" error](https://discuss.elastic.co/t/compile-mips64-io-fs-error/286907)
**Author:** [@alg42](https://discuss.elastic.co/u/alg42)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 4:43am UTC](https://discuss.elastic.co/t/compile-mips64-io-fs-error/286907 "2021-10-17T04:43:42Z")
I'm trying to compile metricbeat to run on a Ubiquiti Unifi Security Gateway (mips64). I also get the same error when trying to do filebeat. build github.com/elastic/beats/v7/metricbeat: cannot load io/fs: malformed mo… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1197) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1199)