# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1254 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1255 --- ## [Not able to see the reply](https://discuss.elastic.co/t/not-able-to-see-the-reply/283279)
**Author:** [@subhp](https://discuss.elastic.co/u/subhp)\ **Replies:** 1\ **Last updated:** [September 3, 2021, 1:12pm UTC](https://discuss.elastic.co/t/not-able-to-see-the-reply/283279 "2021-09-03T13:12:33Z")
Continuing the discussion from Elaticsearch multiMatchQuery with wildcard: I am looking for similar search for all the fields. I am not able see the reply. If there is any solution please update --- ## [Fatal error starting fresh plain kibana on ubuntu20](https://discuss.elastic.co/t/fatal-error-starting-fresh-plain-kibana-on-ubuntu20/283277)
**Author:** [@wudy1978](https://discuss.elastic.co/u/wudy1978)\ **Replies:** 1\ **Last updated:** [September 3, 2021, 1:03pm UTC](https://discuss.elastic.co/t/fatal-error-starting-fresh-plain-kibana-on-ubuntu20/283277 "2021-09-03T13:03:27Z")
hello there, i did a fresh plain install from your repo and getting a strange error. not able to get rid of it or find any solutions or explanations anywhere. kibana.log says: {"type":"log","@timestamp":"2021-09-03T14:… --- ## [OSQuery Manager Integration Mapping IP (\`host.ip\`) as Keyword](https://discuss.elastic.co/t/osquery-manager-integration-mapping-ip-host-ip-as-keyword/283225)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [September 3, 2021, 12:33pm UTC](https://discuss.elastic.co/t/osquery-manager-integration-mapping-ip-host-ip-as-keyword/283225 "2021-09-03T12:33:16Z")
Hi All, I'm using Fleet with the OSQuery Manager integration for 7.14.0, and I noticed that the data stream it created logs-osquery\_manager.result-default is mapping the host.ip field as a keyword. This is causing an is… --- ## [Elasticsearch Pods are not coming up - free(): invalid pointer](https://discuss.elastic.co/t/elasticsearch-pods-are-not-coming-up-free-invalid-pointer/283271)
**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 11:51am UTC](https://discuss.elastic.co/t/elasticsearch-pods-are-not-coming-up-free-invalid-pointer/283271 "2021-09-03T11:51:39Z")
Hi Team, We are facing an issue while creating the Elasticsearch cluster, pods are not coming up and when I see the logs below is the error. warning: ignoring JAVA\_OPTS= -XX:MaxRAMPercentage=70.0; pass JVM parameters v… --- ## [Heartbeat testing Gateway](https://discuss.elastic.co/t/heartbeat-testing-gateway/283174)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 11:08am UTC](https://discuss.elastic.co/t/heartbeat-testing-gateway/283174 "2021-09-03T11:08:47Z")
Hello Team, we have only 1 internet link in our central location and monitoing multiple wan links of multiple locations. When central internet link went down uptime(dashborads) is showing as the all the sites down. Is t… --- ## [How to transfer data to a host with a username and password](https://discuss.elastic.co/t/how-to-transfer-data-to-a-host-with-a-username-and-password/283161)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 8\ **Last updated:** [September 3, 2021, 11:05am UTC](https://discuss.elastic.co/t/how-to-transfer-data-to-a-host-with-a-username-and-password/283161 "2021-09-03T11:05:13Z")
Hello dear friends. I have a problem. I have been helped by this website in many ways before. First of all, thank you very much for all the help for helping me improve myself on elasticsearch. :slight\_smile: Current pro… --- ## [Pod state 0/1 Running after set up elasticseatch on k8s cluster using helm chart](https://discuss.elastic.co/t/pod-state-0-1-running-after-set-up-elasticseatch-on-k8s-cluster-using-helm-chart/283268)
**Author:** [@cezzarez](https://discuss.elastic.co/u/cezzarez)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 10:15am UTC](https://discuss.elastic.co/t/pod-state-0-1-running-after-set-up-elasticseatch-on-k8s-cluster-using-helm-chart/283268 "2021-09-03T10:15:57Z")
Hey! As I already mentioned here: Database file changed error - #7 by cezzarez I have a problem with elasticsearch on my k8s cluster. Looks like everything works as expected, but my pods are stucks with state 0/1. In m… --- ## [Warning: Journal has been rotated since unit was started](https://discuss.elastic.co/t/warning-journal-has-been-rotated-since-unit-was-started/283131)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 9:56am UTC](https://discuss.elastic.co/t/warning-journal-has-been-rotated-since-unit-was-started/283131 "2021-09-03T09:56:02Z")
hi everyone, i need help. i have a warning at my kibana "elastic did not load properly..." after that i check mu elasticsearch's server. i check the status. it's running so well but there's a warning "journal has been … --- ## [Synonym\_graph + match\_phrase: Unexpected high score due to the sum up of IDF of all matched synonym words](https://discuss.elastic.co/t/synonym-graph-match-phrase-unexpected-high-score-due-to-the-sum-up-of-idf-of-all-matched-synonym-words/283260)
**Author:** [@Patrick\_N](https://discuss.elastic.co/u/Patrick_N)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 9:28am UTC](https://discuss.elastic.co/t/synonym-graph-match-phrase-unexpected-high-score-due-to-the-sum-up-of-idf-of-all-matched-synonym-words/283260 "2021-09-03T09:28:35Z")
(ES 7.10) I use synonym\_graph (usa, united states north america) for the search\_analyzer of a field. When I perform a match\_phrase which contains usa, the score of any matching doc which contains the term usa will be su… --- ## [How to combine indexes in Kibana when searching](https://discuss.elastic.co/t/how-to-combine-indexes-in-kibana-when-searching/283211)
**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\ **Replies:** 5\ **Last updated:** [September 3, 2021, 9:51am UTC](https://discuss.elastic.co/t/how-to-combine-indexes-in-kibana-when-searching/283211 "2021-09-03T09:51:09Z")
Hi. Maybe someone has already looked for this question. How do I get data from different indexes ? How to perform a search combining two or more indexes in elastic ? --- ## [Can filebeat's callback method \`Publish(\_ context.Context, batch publisher.Batch) error\` batch events belong to one file](https://discuss.elastic.co/t/can-filebeats-callback-method-publish-context-context-batch-publisher-batch-error-batch-events-belong-to-one-file/279687)
**Author:** [@shoothzj](https://discuss.elastic.co/u/shoothzj)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 8:42am UTC](https://discuss.elastic.co/t/can-filebeats-callback-method-publish-context-context-batch-publisher-batch-error-batch-events-belong-to-one-file/279687 "2021-09-03T08:42:13Z")
Can filebeat's callback method Publish(\_ context.Context, batch publisher.Batch) error batch events belong to one file. For example, harvesting three log a.log, b.log, c.log.Call the method with param Batch only file co… --- ## [Using rollover indexes to reduce shard size?](https://discuss.elastic.co/t/using-rollover-indexes-to-reduce-shard-size/283196)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 8:19am UTC](https://discuss.elastic.co/t/using-rollover-indexes-to-reduce-shard-size/283196 "2021-09-03T08:19:27Z")
Hello Ive been reading up on how to reduce my shard size as it seems my stack has that issue and Ive been reading about rollover indexes but I dont understand them too well.... I have one node. Im gonna use some real … --- ## [Restore elasticsearch cluster onto another cluster](https://discuss.elastic.co/t/restore-elasticsearch-cluster-onto-another-cluster/283238)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 3\ **Last updated:** [September 3, 2021, 6:09am UTC](https://discuss.elastic.co/t/restore-elasticsearch-cluster-onto-another-cluster/283238 "2021-09-03T06:09:30Z")
Hello i have 3 node elasticsearch cluster ( source ) and i have snapshot called snapshot-1 which taken from source cluster and i have another 6 node elasticsearch cluster ( destination ) cluster and when i restore my de… --- ## [Converting x axis values from UTC epoch to date time](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050)
**Author:** [@TUMAAA](https://discuss.elastic.co/u/TUMAAA)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 8:00am UTC](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050 "2021-09-03T08:00:43Z")
Dear community, I have x axis values in a kibana histogram plot that are UTC epoch (in nano sec). These x values are hardly usable. It would help if I can convert them to sec. Even better is if I can convert them to dat… --- ## [Filebeat 7.14 dont send Logs to Kafka](https://discuss.elastic.co/t/filebeat-7-14-dont-send-logs-to-kafka/283185)
**Author:** [@Robsen\_Inc](https://discuss.elastic.co/u/Robsen_Inc)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 7:17am UTC](https://discuss.elastic.co/t/filebeat-7-14-dont-send-logs-to-kafka/283185 "2021-09-03T07:17:06Z")
Hi all, I noticed that I can't send any logs to Kafka with filebeat 7.14. With 7.12 everything works fine. With the same settings, of course. output.kafka: hosts: \["localhost:9092"\] topic: "testkafka" and activate… --- ## [Tweaking autocompleteTerminateAfter](https://discuss.elastic.co/t/tweaking-autocompleteterminateafter/283010)
**Author:** [@gael17](https://discuss.elastic.co/u/gael17)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 7:03am UTC](https://discuss.elastic.co/t/tweaking-autocompleteterminateafter/283010 "2021-09-03T07:03:42Z")
Hey there, I've been using controls for my kibana 7.14 dashboard. I'm wondering if there is a way to tweak the autocompleteTerminateAfter, like an "autocompleteTerminateBefore" ? Let me explain: My documents look like… --- ## [How can kibana compare two fields?](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 7\ **Last updated:** [September 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918 "2021-09-03T06:51:22Z")
hello! I want to compare two fields in the query bar. is it posible to do it in kibana ? example: field\_1 == value\_1 field\_2 == value\_2 thanks in advance! --- ## [Adding a node from a single node cluster to a different cluster](https://discuss.elastic.co/t/adding-a-node-from-a-single-node-cluster-to-a-different-cluster/282627)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 11\ **Last updated:** [September 3, 2021, 6:26am UTC](https://discuss.elastic.co/t/adding-a-node-from-a-single-node-cluster-to-a-different-cluster/282627 "2021-09-03T06:26:47Z")
I'm using a multi node cluster with 2 master eligible nodes. I want to add a master eligible voting only node to the cluster. This node was was previously part of a single node cluster. I had setup SSH with different pas… --- ## [About the kibana error "Kibana server is not ready yetroot"](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231)
**Author:** [@vamei\_T](https://discuss.elastic.co/u/vamei_T)\ **Replies:** 13\ **Last updated:** [September 3, 2021, 6:17am UTC](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231 "2021-09-03T06:17:12Z")
my es and kibana version is 7.9.2 anyone hava method to solove is? --- ## [How to (re)include a (new) node in a cluster without impact performances?](https://discuss.elastic.co/t/how-to-re-include-a-new-node-in-a-cluster-without-impact-performances/283145)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 3\ **Last updated:** [September 3, 2021, 6:09am UTC](https://discuss.elastic.co/t/how-to-re-include-a-new-node-in-a-cluster-without-impact-performances/283145 "2021-09-03T06:09:17Z")
Hello, Still in 5.6 ES version... I am wondering, when a node is included into a cluster, how to avoid that this one gets all new index / shards, regarding the fact that he is empty or unbalanced versus other nodes : i… --- ## [Elasticsearch - recency boost error: 'Unknown key for a START\_OBJECT in \[boosts\].'](https://discuss.elastic.co/t/elasticsearch-recency-boost-error-unknown-key-for-a-start-object-in-boosts/283194)
**Author:** [@brutal\_logic](https://discuss.elastic.co/u/brutal_logic)\ **Replies:** 3\ **Last updated:** [September 3, 2021, 5:37am UTC](https://discuss.elastic.co/t/elasticsearch-recency-boost-error-unknown-key-for-a-start-object-in-boosts/283194 "2021-09-03T05:37:43Z")
I'm using the python elasticsearch api to hit a elasticsearch on some data that has the following fields: "id", "dateCreated", "title", "text\_body" The "dateCreated" is of the form '2021-09-01T23:09:54.79362+00:00' I'… --- ## [Getting ConnectTimeoutException When joining in cluster Even if nodes are reachable](https://discuss.elastic.co/t/getting-connecttimeoutexception-when-joining-in-cluster-even-if-nodes-are-reachable/281998)
**Author:** [@ziw028](https://discuss.elastic.co/u/ziw028)\ **Replies:** 5\ **Last updated:** [September 3, 2021, 4:56am UTC](https://discuss.elastic.co/t/getting-connecttimeoutexception-when-joining-in-cluster-even-if-nodes-are-reachable/281998 "2021-09-03T04:56:01Z")
I have elasticsearch deployed on 2 node deployment setup (node1, node2) on remote machine & using the Java API to connect to it. Originally both nodes were in different clusters, and each of them is master node. Then we … --- ## [Cross Cluster Search without modifying existing query](https://discuss.elastic.co/t/cross-cluster-search-without-modifying-existing-query/283235)
**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 4:53am UTC](https://discuss.elastic.co/t/cross-cluster-search-without-modifying-existing-query/283235 "2021-09-03T04:53:20Z")
Hi, I have two clusters one is "Cluster A" and other is "Cluster B". To perform search on cluster A, I am using below query:- \< GET /test\_index/\_search { "query":{ "match\_all":{} } } /\> But to search across mul… --- ## [No results match your search criteria](https://discuss.elastic.co/t/no-results-match-your-search-criteria/283146)
**Author:** [@Ahmet\_Oruc](https://discuss.elastic.co/u/Ahmet_Oruc)\ **Replies:** 1\ **Last updated:** [September 3, 2021, 4:30am UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria/283146 "2021-09-03T04:30:15Z")
Hi; I have searched from the Kibana Discover screen where I taken a "no results match your search criteria" error from search. --- ## [Understand cron in heartbeats](https://discuss.elastic.co/t/understand-cron-in-heartbeats/283202)
**Author:** [@Sherabu](https://discuss.elastic.co/u/Sherabu)\ **Replies:** 1\ **Last updated:** [September 3, 2021, 4:24am UTC](https://discuss.elastic.co/t/understand-cron-in-heartbeats/283202 "2021-09-03T04:24:13Z")
Can I know how to read the Cron below schedule: '\*/5 \* \* \* \* \* \*' # Can I know I want it scheduled in certain timing such as 10 am, 2:30 pm, 4 pm and 7 pm. Can this be done? I also saw we have '@every 5s'. Can we us… --- ## [Filebeat service is running but not logging](https://discuss.elastic.co/t/filebeat-service-is-running-but-not-logging/283204)
**Author:** [@afoster](https://discuss.elastic.co/u/afoster)\ **Replies:** 1\ **Last updated:** [September 3, 2021, 4:23am UTC](https://discuss.elastic.co/t/filebeat-service-is-running-but-not-logging/283204 "2021-09-03T04:23:07Z")
filebeat status showing running and logs are not writting. I have the logging set to debug in the filebeat.yml my filebeat test config comes back OK. any ideas to get logs? --- ## [Can we parse XML data without giving xpath details using logstash?](https://discuss.elastic.co/t/can-we-parse-xml-data-without-giving-xpath-details-using-logstash/283128)
**Author:** [@Shruti\_Gupta1](https://discuss.elastic.co/u/Shruti_Gupta1)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 4:03am UTC](https://discuss.elastic.co/t/can-we-parse-xml-data-without-giving-xpath-details-using-logstash/283128 "2021-09-03T04:03:53Z")
Hi Team, We are monitoring google apigee apiProxy messaging logs with ELK Stack. As we are not aware which fields will be sent by workflows in the request and response body of XML, We need help to understand how can we … --- ## [Error fetching data for metricset haproxy.info: failed fetching haprox info: not supported](https://discuss.elastic.co/t/error-fetching-data-for-metricset-haproxy-info-failed-fetching-haprox-info-not-supported/283229)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 1:55am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-haproxy-info-failed-fetching-haprox-info-not-supported/283229 "2021-09-03T01:55:27Z")
Dear all, I have the below platform: Red Hat 8 HAProxy 1.8.23 Metricbeat 7.14 with haproxy module enabled Viewing /var/log/messages I can see the following error: Sep 2 16:00:30 SERVER1 metricbeat\[2952173\]: 2021-09… --- ## [Does logstash can automatically consume new kafka topic?](https://discuss.elastic.co/t/does-logstash-can-automatically-consume-new-kafka-topic/283149)
**Author:** [@a1114066506](https://discuss.elastic.co/u/a1114066506)\ **Replies:** 2\ **Last updated:** [September 3, 2021, 1:24am UTC](https://discuss.elastic.co/t/does-logstash-can-automatically-consume-new-kafka-topic/283149 "2021-09-03T01:24:02Z")
I use input-kafka,configured by below code. input{ kafka{ bootstrap\_servers =\> "127.0.0.1:9092,127.0.0.1:9093,127.0.0.1:9094" topics\_pattern =\> "elk.\*" consumer\_threads =\> 3 decorate\_events =\> true … --- ## [Shard routing](https://discuss.elastic.co/t/shard-routing/283137)
**Author:** [@kbi753](https://discuss.elastic.co/u/kbi753)\ **Replies:** 4\ **Last updated:** [September 3, 2021, 12:26am UTC](https://discuss.elastic.co/t/shard-routing/283137 "2021-09-03T00:26:09Z")
Hello, TL; DR; How to route all indices to some nodes except some other indices to other dedicated nodes ? Or... explain me why am I on the wrong way :slight\_smile: We use ELK for a few months mostly for logging cen… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1253) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1255)