# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1219

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1220

---

## [Coordinates precision](https://discuss.elastic.co/t/coordinates-precision/285434)

<div class="topic-metadata">

**Author:** [@dariusz](https://discuss.elastic.co/u/dariusz)\
**Replies:** 4\
**Last updated:** [September 30, 2021, 7:03am UTC](https://discuss.elastic.co/t/coordinates-precision/285434 "2021-09-30T07:03:46Z")

</div>

Hello, What is the precision of the floats for the coordinates in shapes, like Polygon? We tried to store a polygon without intersections with coordinates having 6 decimal digits but we got "Unable to Tessellate shape" …

---

## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/285464)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 2\
**Last updated:** [September 30, 2021, 6:27am UTC](https://discuss.elastic.co/t/failed-to-execute-action/285464 "2021-09-30T06:27:44Z")

</div>

Hi firends i am getting an error like below but there is no error in the first line of my conf file. Does anyone have an idea ? Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exce…

---

## [Metricbeat](https://discuss.elastic.co/t/metricbeat/285124)

<div class="topic-metadata">

**Author:** [@savan820](https://discuss.elastic.co/u/savan820)\
**Replies:** 5\
**Last updated:** [September 30, 2021, 5:31am UTC](https://discuss.elastic.co/t/metricbeat/285124 "2021-09-30T05:31:24Z")

</div>

couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at https://localhost:9200: Get "https://localhost:9200": x509: certificate signed by unknown authority\]

---

## [Kibana server is not ready yet with kibana docker](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-kibana-docker/285460)

<div class="topic-metadata">

**Author:** [@tikamafia](https://discuss.elastic.co/u/tikamafia)\
**Replies:** 4\
**Last updated:** [September 30, 2021, 3:00am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-kibana-docker/285460 "2021-09-30T03:00:47Z")

</div>

i had the problem "Kibana server is not ready yet" following the official guide. Here is information of my install process: docker compose up: version: '2' services: elasticsearch: container\_name: es01 imag…

---

## [Failed to migrate index to cold storage because another index with the same name already exists in cold storage](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517)

<div class="topic-metadata">

**Author:** [@techenthusiast](https://discuss.elastic.co/u/techenthusiast)\
**Replies:** 3\
**Last updated:** [September 30, 2021, 1:39am UTC](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517 "2021-09-30T01:39:06Z")

</div>

Team, I am getting below issue when i implemented cold storage on an existing Elasticsearch cluster. Failed to migrate index to cold storage because another index with the same name already exists in cold storage. Need…

---

## [POST URL reporting resulting in 'processing'](https://discuss.elastic.co/t/post-url-reporting-resulting-in-processing/285529)

<div class="topic-metadata">

**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\
**Replies:** 2\
**Last updated:** [September 30, 2021, 12:48am UTC](https://discuss.elastic.co/t/post-url-reporting-resulting-in-processing/285529 "2021-09-30T00:48:02Z")

</div>

I have been using a self-made script that uses a generated POST URL from Kibana to create and email daily reports from a winlogbeat index. It has been working fine for months but suddenly the report only has 'processing'…

---

## [Portable Kibana dashboard?](https://discuss.elastic.co/t/portable-kibana-dashboard/285531)

<div class="topic-metadata">

**Author:** [@jhettich](https://discuss.elastic.co/u/jhettich)\
**Replies:** 1\
**Last updated:** [September 30, 2021, 12:55am UTC](https://discuss.elastic.co/t/portable-kibana-dashboard/285531 "2021-09-30T00:55:00Z")

</div>

As a software vendor, I want to define a dashboard that can be used by multiple clients in their respective Elasticsearch/Kibana deployments. If I create a dashboard manually for one client, and export it as an NDJSON fi…

---

## [ElasticSearch Output Plugin partial update results in entire document substitution](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512)

<div class="topic-metadata">

**Author:** [@samir\_varandas](https://discuss.elastic.co/u/samir_varandas)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512 "2021-09-29T23:19:32Z")

</div>

Hi friends, I am having some trouble with the Elasticsearch Output Plugin, I am trying to perform a partial update on a document inside my Elastic index, I want to update certain fields only (the ones mapped in my event)…

---

## [Heartbeat Synthetics/Browser Monitoring Inline Source with expect](https://discuss.elastic.co/t/heartbeat-synthetics-browser-monitoring-inline-source-with-expect/285518)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 10:59pm UTC](https://discuss.elastic.co/t/heartbeat-synthetics-browser-monitoring-inline-source-with-expect/285518 "2021-09-29T22:59:58Z")

</div>

Hi All, I'm trying to a browser monitor that checks to make sure a selector doesn't exist after a button is clicked. I'm using the inline source, but am getting an error about expect not being defined: Code: step('Sav…

---

## [Parse contents of a specific field and store in new fields](https://discuss.elastic.co/t/parse-contents-of-a-specific-field-and-store-in-new-fields/285527)

<div class="topic-metadata">

**Author:** [@rickyhicky](https://discuss.elastic.co/u/rickyhicky)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 10:41pm UTC](https://discuss.elastic.co/t/parse-contents-of-a-specific-field-and-store-in-new-fields/285527 "2021-09-29T22:41:33Z")

</div>

Hello all, I have few log entries like below, which I am parsing using grok/regex. How can I again parse contents of a field and store it to new fields within the same index? Log example: \`2021-09-24T17:05:52,777 INFO…

---

## [How to run down source of mutate error?](https://discuss.elastic.co/t/how-to-run-down-source-of-mutate-error/285500)

<div class="topic-metadata">

**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 9:55pm UTC](https://discuss.elastic.co/t/how-to-run-down-source-of-mutate-error/285500 "2021-09-29T21:55:26Z")

</div>

I have an error like the one below. In fact I get a fair number of them, lets say a few hundred each day on a production system(7.12) that logs fairly heavy, 800 million or so records a day. So the amount of these errors…

---

## [Elastic 7.x - how to create coordinate map?](https://discuss.elastic.co/t/elastic-7-x-how-to-create-coordinate-map/285394)

<div class="topic-metadata">

**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\
**Replies:** 6\
**Last updated:** [September 29, 2021, 9:40pm UTC](https://discuss.elastic.co/t/elastic-7-x-how-to-create-coordinate-map/285394 "2021-09-29T21:40:20Z")

</div>

Hello, I had a coordinate map visualization created in ES 6.x - but when I try to create a similar one in ES 7.x (Elastic Cloud) - I can't find the same options. In particular, I want to create a Coordinate Map with Sca…

---

## [Monitoring Veeam Backup Jobs](https://discuss.elastic.co/t/monitoring-veeam-backup-jobs/284401)

<div class="topic-metadata">

**Author:** [@Xabi](https://discuss.elastic.co/u/Xabi)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 9:38pm UTC](https://discuss.elastic.co/t/monitoring-veeam-backup-jobs/284401 "2021-09-29T21:38:52Z")

</div>

Hi guys, I'm interested in monitoring our veem backup jobs. Especially the events related to the execution of jobs. any suggestions?

---

## [Filebeat: error json decode](https://discuss.elastic.co/t/filebeat-error-json-decode/285302)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 9:37pm UTC](https://discuss.elastic.co/t/filebeat-error-json-decode/285302 "2021-09-29T21:37:47Z")

</div>

Hello Team and @john.akash, Hope you are doing good. I am also trying to push log message data to ES so that I can filter the data and create visualization. Here is my sample log "@timestamp" =\> 2021-09-28T04:51:22.…

---

## [Single-node, manage data with more than one path](https://discuss.elastic.co/t/single-node-manage-data-with-more-than-one-path/285485)

<div class="topic-metadata">

**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 9:36pm UTC](https://discuss.elastic.co/t/single-node-manage-data-with-more-than-one-path/285485 "2021-09-29T21:36:13Z")

</div>

Hello, I have a little yet productive (then important) single-node ELK stack version 7.9.3. In my unexperience I didn't properly took care of disk space...so I have a 200GB data partition at around at 90% disk usage, w…

---

## [Kibana stopped working after update](https://discuss.elastic.co/t/kibana-stopped-working-after-update/285444)

<div class="topic-metadata">

**Author:** [@Artemis\_Fowl](https://discuss.elastic.co/u/Artemis_Fowl)\
**Replies:** 6\
**Last updated:** [September 29, 2021, 9:32pm UTC](https://discuss.elastic.co/t/kibana-stopped-working-after-update/285444 "2021-09-29T21:32:33Z")

</div>

After the update kibana is not working. http://localhost:5601/ response - "Kibana server is not ready yet" $ journalctl -u kibana.service Sep 29 12:03:21 Notebook systemd\[1\]: Stopping Kibana... Sep 29 12:03:55 Noteboo…

---

## [Anonymization - Do not display a bar in a chart if occurence / count below 10](https://discuss.elastic.co/t/anonymization-do-not-display-a-bar-in-a-chart-if-occurence-count-below-10/284730)

<div class="topic-metadata">

**Author:** [@wgault](https://discuss.elastic.co/u/wgault)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 9:30pm UTC](https://discuss.elastic.co/t/anonymization-do-not-display-a-bar-in-a-chart-if-occurence-count-below-10/284730 "2021-09-29T21:30:28Z")

</div>

Hello, I wish to create some anonymized dashboard. This requires to have a minimum amount of occurence/count per category / bar in a chart. In this case, if the count is below 10, then we would have two options : 1 - …

---

## [Auto split an index's shard when certain size reached](https://discuss.elastic.co/t/auto-split-an-indexs-shard-when-certain-size-reached/285521)

<div class="topic-metadata">

**Author:** [@raonic](https://discuss.elastic.co/u/raonic)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 9:06pm UTC](https://discuss.elastic.co/t/auto-split-an-indexs-shard-when-certain-size-reached/285521 "2021-09-29T21:06:48Z")

</div>

Hello, I am relatively new to Elasticsearch and building an ES cluster for customers. The way I am designing the cluster is that each customer would get an index of their own which they will write to and read from. Pro…

---

## [Kibana missing cpu stats](https://discuss.elastic.co/t/kibana-missing-cpu-stats/285422)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 4\
**Last updated:** [September 29, 2021, 8:45pm UTC](https://discuss.elastic.co/t/kibana-missing-cpu-stats/285422 "2021-09-29T20:45:48Z")

</div>

We recently upgraded our Elasticsearch prod cluster from 6.4.2-\>6.8.15-\>7.12.1 and we are not seeing cpu data in kibana now: Hovering over the info link suggests that we need to enable cpu quotas but I'm unable to …

---

## [How to search using keywords or tags?](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516)

<div class="topic-metadata">

**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 7:58pm UTC](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516 "2021-09-29T19:58:55Z")

</div>

Hello everyone, I need help to resolve a question regarding Elasticsearch. I want to use the tags but in a different way. I am using the following composition when making the "tags": #RGB keyboard Is it possible to d…

---

## [Fortinet module fails to install](https://discuss.elastic.co/t/fortinet-module-fails-to-install/284777)

<div class="topic-metadata">

**Author:** [@Gorillabiscuit](https://discuss.elastic.co/u/Gorillabiscuit)\
**Replies:** 8\
**Last updated:** [September 29, 2021, 7:22pm UTC](https://discuss.elastic.co/t/fortinet-module-fails-to-install/284777 "2021-09-29T19:22:58Z")

</div>

I inherited an ELK stack and recently upgraded my firewall. We can send syslog to filebeat, which I'm doing, and then filebeat should be sending to ES. When I try and run the filebeat setup -e from the remote server I ge…

---

## [How to enrich data based on similar values?](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508)

<div class="topic-metadata">

**Author:** [@rsokolova](https://discuss.elastic.co/u/rsokolova)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508 "2021-09-29T18:53:38Z")

</div>

Hello, Does Elasticsearch has any capability to enrich data based on possible or close match ? First index: "name" : "Hamilton Law LLC", "risk" : "High" Second index : "name": "Hamilton Company ", "description": " T…

---

## [Monitoring cluster](https://discuss.elastic.co/t/monitoring-cluster/285507)

<div class="topic-metadata">

**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 6:52pm UTC](https://discuss.elastic.co/t/monitoring-cluster/285507 "2021-09-29T18:52:18Z")

</div>

I have a similar question tothe one posted by souravsahoo "Cluster\_stats not sent to monitoring cluster" but no answer was posted. I am having something similar to where I have installed metricbeats on a production clust…

---

## [Logstash doesnot ingest data when started as a service](https://discuss.elastic.co/t/logstash-doesnot-ingest-data-when-started-as-a-service/285491)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 5:57pm UTC](https://discuss.elastic.co/t/logstash-doesnot-ingest-data-when-started-as-a-service/285491 "2021-09-29T17:57:33Z")

</div>

Hi All, I am trying to ingest csv data into Elasticsearch by using logstash, when i run the conf file manually the data is getting ingested, but when i add the conf file into pipelines.yml and then start logstash as a s…

---

## [Pipeline worker error in logstash config](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 5:24pm UTC](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496 "2021-09-29T17:24:05Z")

</div>

Hello all. I am trying to parse a VPN device logs. t send data in KV format. The data received as I see in netcat's output is- \<13\>Sep 29 21:52:00 172.xx.43.101 488 \<134\>1 2021-09-29T21:52:00+05:30 vpn.com2 PulseSecure…

---

## [How does elasticsearch index json](https://discuss.elastic.co/t/how-does-elasticsearch-index-json/285335)

<div class="topic-metadata">

**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 3:24pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-index-json/285335 "2021-09-29T15:24:25Z")

</div>

We are trying to push log into elastic which adhere to Elastic Common Schema (ECS) . Does elastic index data differently for the logs shown below. Both are having same data just the JSON format is different. Format 1 {…

---

## [Elastic-agent-control.sock: operation not supported on socket](https://discuss.elastic.co/t/elastic-agent-control-sock-operation-not-supported-on-socket/285101)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [September 29, 2021, 4:06pm UTC](https://discuss.elastic.co/t/elastic-agent-control-sock-operation-not-supported-on-socket/285101 "2021-09-29T16:06:01Z")

</div>

Hey there, I have an Elasticsearch and Kibana instance running via Docker images (I have configured the secure option). Now I am trying to install the elastic-agent to start the Fleet Server but I am facing this error: …

---

## [Change kibana.autocompleteTerminateAfter](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 3:07pm UTC](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311 "2021-09-29T15:07:08Z")

</div>

Hi In a deployment with Elasticsearch and kibana, I get the below: I saw from Terms list might be incomplete because the request is taking to long - #15 by Fedi\_Ben\_Messaoud that kibana.autocompleteTerminateAfter pa…

---

## [Parsing JSON with a string at the beginning of each JSON Object](https://discuss.elastic.co/t/parsing-json-with-a-string-at-the-beginning-of-each-json-object/285480)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 7\
**Last updated:** [September 29, 2021, 2:57pm UTC](https://discuss.elastic.co/t/parsing-json-with-a-string-at-the-beginning-of-each-json-object/285480 "2021-09-29T14:57:03Z")

</div>

Hello, I'm trying to parse a json file with a string at the beginning of each object. What is the easiest way to bypass the initial string or parse the json with string at the beginning? Here is an example of the JSON: …

---

## [Kibana User Session](https://discuss.elastic.co/t/kibana-user-session/285342)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 2:49pm UTC](https://discuss.elastic.co/t/kibana-user-session/285342 "2021-09-29T14:49:06Z")

</div>

Hi team, I have a question that I’m having trouble finding the answer to elsewhere. I would like to create dashboards that customize the data based on the specific user logged in. The response of this api Post : http:…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1218)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1220)
