# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1247 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1248 --- ## [Logstash support snmptrap v3?](https://discuss.elastic.co/t/logstash-support-snmptrap-v3/283722)
**Author:** [@T\_Mashimo](https://discuss.elastic.co/u/T_Mashimo)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 3:00am UTC](https://discuss.elastic.co/t/logstash-support-snmptrap-v3/283722 "2021-09-09T03:00:57Z")
Hello. Does snmptrap input plugin for logstash support v3? The official documentation does not specify the supported versions. Someone is asking the same question here, but there is no answer. Thank you. --- ## [FileBeat Not Processing Cisco 2960X Logs](https://discuss.elastic.co/t/filebeat-not-processing-cisco-2960x-logs/283725)
**Author:** [@Brad\_Henderson](https://discuss.elastic.co/u/Brad_Henderson)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 2:52am UTC](https://discuss.elastic.co/t/filebeat-not-processing-cisco-2960x-logs/283725 "2021-09-09T02:52:29Z")
I am having an issue with getting Filebeat with the Cisco module to process logs from my 2960X switches running version 15.2. The switch is sending logs to Filebeat but when i run a debug I am getting an error that says … --- ## [\[Kibana 7.10\] How to search from all Index Patten](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721)
**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 2:33am UTC](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721 "2021-09-09T02:33:04Z")
I would like to search for the IP address from all Index Patten. All Index Patten got the same field call "s.ip". Can we search like Splunk "index:\* s.ip:192.168.1.1"? --- ## [How Packetbeat for MongoDB](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990)
**Author:** [@hope1234567hope](https://discuss.elastic.co/u/hope1234567hope)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 1:33am UTC](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990 "2021-09-09T01:33:34Z")
i Packetbeat for MongoDB，but not find mongodb.query information。only have mongodb.startingFrom mongodb.numberToReturn mongodb.numberToSkip mongodb.fullCollectionName mongodb.cursorId，but not data。 why？ my version i… --- ## [elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected')](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687)
**Author:** [@saltyMcSalt](https://discuss.elastic.co/u/saltyMcSalt)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 12:19am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687 "2021-09-09T00:19:49Z")
Hi all, I am trying to do a geo-polygon query, running into this exception: elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected') Elasticsearch Version 7.5.3 The quer… --- ## [Json parse with logstash](https://discuss.elastic.co/t/json-parse-with-logstash/283714)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 11:49pm UTC](https://discuss.elastic.co/t/json-parse-with-logstash/283714 "2021-09-08T23:49:49Z")
Hi team, I want to laod data from sql server to elasticsearch via logstash 6.5 I have a table in sql server which has json objects as a value in one of the columns. My requirement is to read those objects as it is and … --- ## [What is the ideal configuration for a Elasticsearch cluster designed for High Availiability?](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 11:39pm UTC](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654 "2021-09-08T23:39:46Z")
Hello, I need to design a elasticsearch cluster for high availability. What is the ideal configuration ( nodes numbers, nodes roles, node configurations, etc ) for elasticsearch? What parameters ( workload, how much se… --- ## [Kibana jwt authentication](https://discuss.elastic.co/t/kibana-jwt-authentication/283122)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 7\ **Last updated:** [September 8, 2021, 10:45pm UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122 "2021-09-08T22:45:43Z")
is open distro a free open-source software for kibana jwt authentication? if yes, how can we achieve jwt authentication using it? . is there any other plugin that is free open source for jwt authentication of kibana? --- ## [Error with bulk index operation when displaying in kibana](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325)
**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\ **Replies:** 8\ **Last updated:** [September 8, 2021, 10:35pm UTC](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325 "2021-09-08T22:35:03Z")
I have elasticsearch 7.10.2 and kibana 7.10.2 (technically opensearch) running. I import data into an existing index with a bulk index command. The response is a 201 back from elasticsearch. When i go to kibana, the dash… --- ## [Stack Monitoring not showing anything for kibana 7.9.1](https://discuss.elastic.co/t/stack-monitoring-not-showing-anything-for-kibana-7-9-1/283570)
**Author:** [@vikasgurlinka](https://discuss.elastic.co/u/vikasgurlinka)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 9:59pm UTC](https://discuss.elastic.co/t/stack-monitoring-not-showing-anything-for-kibana-7-9-1/283570 "2021-09-08T21:59:34Z")
We have been using Elasticsearch 7.9.1 and Kibana 7.9.1 with self-monitoring enabled. Stack monitoring was working fine earlier but all of a sudden it went blank and showing nothing and we did not do any changes to the c… --- ## [Help with rule variables(email alert)](https://discuss.elastic.co/t/help-with-rule-variables-email-alert/283313)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 9:03pm UTC](https://discuss.elastic.co/t/help-with-rule-variables-email-alert/283313 "2021-09-08T21:03:22Z")
I would like to know if it is possible for me to use the value of an event field in the email notification of a rule, for example, in the log index comes the fields with IP, SRC, ATTACK\_INFO, severity and others, and I w… --- ## [Elasticsearch snapshot settings on statefulset (stack)](https://discuss.elastic.co/t/elasticsearch-snapshot-settings-on-statefulset-stack/283377)
**Author:** [@Asaf\_Moalem](https://discuss.elastic.co/u/Asaf_Moalem)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-settings-on-statefulset-stack/283377 "2021-09-08T20:59:45Z")
After setting up the stack, unable to activate the path.repo for snapshotting the setup is based on the elasticsearch statefulset setup cant find where to insert: path.repo: \["/mnt/backup"\] error i'm getting: curl… --- ## [How to get only deltas in elasticsearch input](https://discuss.elastic.co/t/how-to-get-only-deltas-in-elasticsearch-input/283708)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/how-to-get-only-deltas-in-elasticsearch-input/283708 "2021-09-08T20:41:07Z")
I would like to know how I do something like jdbc-input, that the query is always the most recent, but this using elaticsearch\_input. if it is not possible, please help me to build a query that returns everything from t… --- ## [Getting error \`\[template\] unknown field \[index\_patterns\]\` while creating index template in 7.14.0](https://discuss.elastic.co/t/getting-error-template-unknown-field-index-patterns-while-creating-index-template-in-7-14-0/283700)
**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 7:25pm UTC](https://discuss.elastic.co/t/getting-error-template-unknown-field-index-patterns-while-creating-index-template-in-7-14-0/283700 "2021-09-08T19:25:58Z")
Hi Team, I am creating index template (not legacy template) in kibana in version 7.14.0 but can see below error in 6th step of Review template in preview tab. { "statusCode": 400, "error": "Bad Request", "messag… --- ## [Filter on nested field](https://discuss.elastic.co/t/filter-on-nested-field/283697)
**Author:** [@dgastudio](https://discuss.elastic.co/u/dgastudio)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 7:25pm UTC](https://discuss.elastic.co/t/filter-on-nested-field/283697 "2021-09-08T19:25:24Z")
Hello! I can't understand what i'm doing wrong when filtering on nested field. Mapping { "acc": { "type": "keyword" }, "birthday": { "type": "date", "format": "epoch\_second" }, … --- ## [Running as service, continuously giving "No source loaders matched! This shouldn't happen"](https://discuss.elastic.co/t/running-as-service-continuously-giving-no-source-loaders-matched-this-shouldnt-happen/283487)
**Author:** [@matt.snyder](https://discuss.elastic.co/u/matt.snyder)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 5:57pm UTC](https://discuss.elastic.co/t/running-as-service-continuously-giving-no-source-loaders-matched-this-shouldnt-happen/283487 "2021-09-08T17:57:26Z")
I am running logstash as a service, and it seems that an erroneous job is stuck in a queue somewhere, though I cannot find it. The error in the subject appears over and over in logstash-plain.log, no matter what files I… --- ## [How does Elasticsearch automatically configure heap size based on available memory?](https://discuss.elastic.co/t/how-does-elasticsearch-automatically-configure-heap-size-based-on-available-memory/283670)
**Author:** [@anto\_gian](https://discuss.elastic.co/u/anto_gian)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 5:49pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-automatically-configure-heap-size-based-on-available-memory/283670 "2021-09-08T17:49:41Z")
Hi I just setup an Elasticsearch 7.14 cluster with 2 nodes. I was about to configure JVM Heap size and saw this message The heap size is automatically configured by Elasticsearch ## based on the available memory in you… --- ## [Indices replicas are set to 0 during night? \[7.11.2\]](https://discuss.elastic.co/t/indices-replicas-are-set-to-0-during-night-7-11-2/283627)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 4:34pm UTC](https://discuss.elastic.co/t/indices-replicas-are-set-to-0-during-night-7-11-2/283627 "2021-09-08T16:34:49Z")
Hi! I have a strange behavior. During night one of my indices lost a replica setting? Yesterday everything worked fine, they both had 1 replica but this morning it is 0 on one of them meaning when I close one node down … --- ## [Ruby time.strftime Stripping hours from the time](https://discuss.elastic.co/t/ruby-time-strftime-stripping-hours-from-the-time/283655)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 3:46pm UTC](https://discuss.elastic.co/t/ruby-time-strftime-stripping-hours-from-the-time/283655 "2021-09-08T15:46:17Z")
Hi all, I am using the following filter to extract only the time from the @timestamp field. ruby { code =\> "event.set('\[datetime\]\[time\]',event.get('@timestamp').time.strftime('%H:%M:%S'))" } Which works exept … --- ## [Rarely, the "found" key is missing from the multi-get response](https://discuss.elastic.co/t/rarely-the-found-key-is-missing-from-the-multi-get-response/283584)
**Author:** [@jesseb](https://discuss.elastic.co/u/jesseb)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 3:23pm UTC](https://discuss.elastic.co/t/rarely-the-found-key-is-missing-from-the-multi-get-response/283584 "2021-09-08T15:23:55Z")
We are using Elasticsearch 6.8. Our logs show that very very rarely, we get a responses from multi-get where the "found" field is missing, but the expected documents are otherwise intact. Is this ever expected to happen… --- ## [Metricbeat monitor systemd process](https://discuss.elastic.co/t/metricbeat-monitor-systemd-process/283607)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 6\ **Last updated:** [September 8, 2021, 3:05pm UTC](https://discuss.elastic.co/t/metricbeat-monitor-systemd-process/283607 "2021-09-08T15:05:48Z")
Can I know, do you have example how i can monitor systemd and few java process. One of it is httpd and java process based on folder for isntance config. usually i do is ps -ef | grep config/ --- ## [Creating index name from field value](https://discuss.elastic.co/t/creating-index-name-from-field-value/283677)
**Author:** [@Paintras](https://discuss.elastic.co/u/Paintras)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 2:43pm UTC](https://discuss.elastic.co/t/creating-index-name-from-field-value/283677 "2021-09-08T14:43:47Z")
Good day, this is my filebeat.yml file: filebeat.config: modules: path: ${path.config}/modules.d/\*.yml reload.enabled: false processors: - add\_cloud\_metadata: ~ - add\_docker\_metadata: ~ … --- ## [Logstash - not update a document even if document\_id is specified](https://discuss.elastic.co/t/logstash-not-update-a-document-even-if-document-id-is-specified/283660)
**Author:** [@reed](https://discuss.elastic.co/u/reed)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 2:23pm UTC](https://discuss.elastic.co/t/logstash-not-update-a-document-even-if-document-id-is-specified/283660 "2021-09-08T14:23:15Z")
Hi all, I'm new with elastic technology and I wold ask this: I have my pipeline with output { elasticsearch { hosts =\> "localhost:9200" index =\> "crsi-index-template-%{+yyyy.MM.dd}" document\_id … --- ## [How can I migrate from elasticsearch to postgresql?](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 2:15pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041 "2021-09-08T14:15:01Z")
I have to migrate from elasticsearch to postgresql. What is the best way to do that? I found this plugin: Elasticsearch output plugin | Logstash Reference \[7.14\] | Elastic Is it useful for my purpose? Thanks … --- ## [Updating status code data with predefined Labels in Dashboard](https://discuss.elastic.co/t/updating-status-code-data-with-predefined-labels-in-dashboard/283668)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 1:45pm UTC](https://discuss.elastic.co/t/updating-status-code-data-with-predefined-labels-in-dashboard/283668 "2021-09-08T13:45:40Z")
Hi, I am working on processing my transaction data for visualization. But I want to update the status codes with corresponding values. In Discover, I am able to see the data as 00, 01, 02 .. etc., But it should visual… --- ## [Unable to see dashboard drilldown option in kibana dashboards](https://discuss.elastic.co/t/unable-to-see-dashboard-drilldown-option-in-kibana-dashboards/283609)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 1:40pm UTC](https://discuss.elastic.co/t/unable-to-see-dashboard-drilldown-option-in-kibana-dashboards/283609 "2021-09-08T13:40:19Z")
Hi all, I'm unable to see dashboard drilldown option in kibana dashboards when I click on visualization intended. I'm using Kibana 7.10.2 version. Is it related to Kibana OSS build vs Non OSS build? Should i reinst… --- ## [Conflicts in Azure Fleet Integrations](https://discuss.elastic.co/t/conflicts-in-azure-fleet-integrations/283236)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 1:38pm UTC](https://discuss.elastic.co/t/conflicts-in-azure-fleet-integrations/283236 "2021-09-08T13:38:39Z")
Hi I think there is an issue with the current Azure logs integration for Fleet (Azure logs integration v0.8.5). I am working with this to try and pull in various logs from Azure and have noticed field conflicts in my l… --- ## [Logstash processing only number of events 2 times to pipeline.max\_inflight](https://discuss.elastic.co/t/logstash-processing-only-number-of-events-2-times-to-pipeline-max-inflight/283664)
**Author:** [@amar.molaka](https://discuss.elastic.co/u/amar.molaka)\ **Replies:** 0\ **Last updated:** [September 8, 2021, 1:21pm UTC](https://discuss.elastic.co/t/logstash-processing-only-number-of-events-2-times-to-pipeline-max-inflight/283664 "2021-09-08T13:21:17Z")
My pipeline configuration as below - pipeline.id: staticmetrics queue.type: persisted pipeline.workers: 10 pipeline.batch.size: 2 pipeline.batch.delay: 1000 path.config: "/Users/James/Desktop/metrics.con… --- ## [Fuzzy search](https://discuss.elastic.co/t/fuzzy-search/283603)
**Author:** [@Danzo](https://discuss.elastic.co/u/Danzo)\ **Replies:** 13\ **Last updated:** [September 8, 2021, 12:35pm UTC](https://discuss.elastic.co/t/fuzzy-search/283603 "2021-09-08T12:35:32Z")
Hello, I am trying to do a fuzzy search for my data. But my query returns null Create index PUT /test\_index { "mappings": { "properties": { "testt": { "type": "text" } } … --- ## [File corruption occurred on recovery but checksums are ok](https://discuss.elastic.co/t/file-corruption-occurred-on-recovery-but-checksums-are-ok/283505)
**Author:** [@alsimon](https://discuss.elastic.co/u/alsimon)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 12:33pm UTC](https://discuss.elastic.co/t/file-corruption-occurred-on-recovery-but-checksums-are-ok/283505 "2021-09-08T12:33:40Z")
Hello, I'm looking for direction on this error. Last week after cleaning and reinstanciating a cluster the error appear. RemoteTransportException\[\[es-data-hot-z2-1-x0hxwanma57yajfoe61amoek8\]\[10.0.34.36:9300\]\[internal:i… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1246) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1248)