# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1260

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1261

---

## [Different behavior on index shards when apply index mapping](https://discuss.elastic.co/t/different-behavior-on-index-shards-when-apply-index-mapping/282697)

<div class="topic-metadata">

**Author:** [@Fdsm](https://discuss.elastic.co/u/Fdsm)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 11:13pm UTC](https://discuss.elastic.co/t/different-behavior-on-index-shards-when-apply-index-mapping/282697 "2021-08-30T23:13:54Z")

</div>

Hello, We watch a curious behavior after apply a index mapping on indices: Before mapping, it was not notice any docs\_deleted on indeces and size of the primary and replica shards were basicaly same: Before custom map…

---

## [Elasticsearch Cross-site cluster](https://discuss.elastic.co/t/elasticsearch-cross-site-cluster/282528)

<div class="topic-metadata">

**Author:** [@unknown\_user](https://discuss.elastic.co/u/unknown_user)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 11:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cross-site-cluster/282528 "2021-08-30T23:11:45Z")

</div>

Hi, Has anyone got experience with running a cluster across Data Centers? I'm interested in latency and bandwidth required between data centers. I've seen some information that 10Gbps / 10ms is required for a reliable c…

---

## [Error running elasticsearch.bat for installation](https://discuss.elastic.co/t/error-running-elasticsearch-bat-for-installation/282774)

<div class="topic-metadata">

**Author:** [@MXR](https://discuss.elastic.co/u/MXR)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 10:06pm UTC](https://discuss.elastic.co/t/error-running-elasticsearch-bat-for-installation/282774 "2021-08-30T22:06:28Z")

</div>

Hi,everyone. When I run elasticsearch.bat under Windows 8.1 system for installation, I will prompt controller.exe to stop running. The network has no similar problems. Ask for your help.Thanks.

---

## [Kibana behind reverse proxy (nginx) on a different route](https://discuss.elastic.co/t/kibana-behind-reverse-proxy-nginx-on-a-different-route/278070)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 9:56pm UTC](https://discuss.elastic.co/t/kibana-behind-reverse-proxy-nginx-on-a-different-route/278070 "2021-08-30T21:56:15Z")

</div>

Hello everybody! I'm trying to set up a different path than / in a Nginx server as reverse proxy. I would like that the users can access to myserver.com/kibana and then https://....elastic-cloud.com:xxxxis showed. For …

---

## [Kibana iframes](https://discuss.elastic.co/t/kibana-iframes/280969)

<div class="topic-metadata">

**Author:** [@Cgr\_EQ](https://discuss.elastic.co/u/Cgr_EQ)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-iframes/280969 "2021-08-30T21:47:57Z")

</div>

Hello, I've setup Elastic/Kibana with basic authentication using x-pack. I understand that I can set up a reverse proxy using Nginx and specify a base 64 encoded username/password to the header to authenticate and use t…

---

## [PCAP data with Packetbeat](https://discuss.elastic.co/t/pcap-data-with-packetbeat/282854)

<div class="topic-metadata">

**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\
**Replies:** 0\
**Last updated:** [August 30, 2021, 9:37pm UTC](https://discuss.elastic.co/t/pcap-data-with-packetbeat/282854 "2021-08-30T21:37:46Z")

</div>

Hello, I am unable to ship PCAP packets to Packetbeat. I am getting the following error message root@ubuntu:/home/zeekelk/Downloads/PCAP-03-11# packetbeat run -I SAT-03-11-2018\_0145 -t Exiting: Sniffer main loop failed…

---

## [Minimum Missed Conditions Search](https://discuss.elastic.co/t/minimum-missed-conditions-search/282701)

<div class="topic-metadata">

**Author:** [@MagicMatt](https://discuss.elastic.co/u/MagicMatt)\
**Replies:** 1\
**Last updated:** [August 29, 2021, 11:37pm UTC](https://discuss.elastic.co/t/minimum-missed-conditions-search/282701 "2021-08-29T23:37:37Z")

</div>

Hi guys, I just started learning ES and it is fun to play with the data and try to apply the queries to some special cases. These days I am trying to build two sorting methods to help return better results: Max Used Co…

---

## [How to extract nested json objects in to new fields in kibana](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626)

<div class="topic-metadata">

**Author:** [@sandhya1](https://discuss.elastic.co/u/sandhya1)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626 "2021-08-30T21:08:29Z")

</div>

Hi, I have one field which is having nested j son object format, i need to extract into new fields. The field is mapped to the "text" data type and from the below format i need the count of unique first name and need t…

---

## [Kibana failing to start because of incompatible plugins](https://discuss.elastic.co/t/kibana-failing-to-start-because-of-incompatible-plugins/282770)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 9:05pm UTC](https://discuss.elastic.co/t/kibana-failing-to-start-because-of-incompatible-plugins/282770 "2021-08-30T21:05:56Z")

</div>

running on ubuntu 20.04 After upgrading ES/Kibana to 7.14 kibana fails to start: FATAL Error: Failed to initialize plugins: Plugin "enhancedTable" is only compatible with Kibana version "7.11.2", but used Kibana ve…

---

## [I have problem when using painless](https://discuss.elastic.co/t/i-have-problem-when-using-painless/282630)

<div class="topic-metadata">

**Author:** [@Aniwer](https://discuss.elastic.co/u/Aniwer)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 8:52pm UTC](https://discuss.elastic.co/t/i-have-problem-when-using-painless/282630 "2021-08-30T20:52:56Z")

</div>

The following is my data in es, the right is the message that I use journalbeat to import and i want to be processed, the left is the result processed by painless The following is the painless i wrote if(doc\['messag…

---

## [Metricbeat Oracle Module](https://discuss.elastic.co/t/metricbeat-oracle-module/282822)

<div class="topic-metadata">

**Author:** [@nafey1](https://discuss.elastic.co/u/nafey1)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 8:43pm UTC](https://discuss.elastic.co/t/metricbeat-oracle-module/282822 "2021-08-30T20:43:07Z")

</div>

I have enabled the Oracle Metricbeat module to monitor my database. The configuration file looks like this: - module: oracle metricsets: \["tablespace", "performance"\] enabled: true period: 10s hosts: \["oracle://…

---

## [Having issues with running auditbeat on ubuntu docker-compose](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843)

<div class="topic-metadata">

**Author:** [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\
**Replies:** 3\
**Last updated:** [August 30, 2021, 8:30pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843 "2021-08-30T20:30:35Z")

</div>

Hey guys this is my error log Index setup finished. Loading dashboards (Kibana must be running and reachable) Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://kibana:5601/…

---

## [Elasticsearch is failing to start on Docker since 7.13](https://discuss.elastic.co/t/elasticsearch-is-failing-to-start-on-docker-since-7-13/282546)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 8:09pm UTC](https://discuss.elastic.co/t/elasticsearch-is-failing-to-start-on-docker-since-7-13/282546 "2021-08-30T20:09:04Z")

</div>

Hi, I'm seeing problems to start Elasticsearch in Docker containers since 7.13. I can't find anything related in the release notes or breaking changes. Background: I'm using custom roles to install and handle Elasticse…

---

## [Can't setup Winlogbeat or Filebeat dashboards for Kibana](https://discuss.elastic.co/t/cant-setup-winlogbeat-or-filebeat-dashboards-for-kibana/281962)

<div class="topic-metadata">

**Author:** [@JulienL](https://discuss.elastic.co/u/JulienL)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 5:11pm UTC](https://discuss.elastic.co/t/cant-setup-winlogbeat-or-filebeat-dashboards-for-kibana/281962 "2021-08-30T17:11:06Z")

</div>

Hello! Firstly, sorry for any mistake in my english. I'm not a native english speaker :slight\_smile: Hope can someone help me with this. I have installed and configured ELK with "Basic Security plus HTTPS", I receive …

---

## [Match data from two sets and mark entries](https://discuss.elastic.co/t/match-data-from-two-sets-and-mark-entries/282731)

<div class="topic-metadata">

**Author:** [@mydeadvictoria](https://discuss.elastic.co/u/mydeadvictoria)\
**Replies:** 3\
**Last updated:** [August 30, 2021, 5:07pm UTC](https://discuss.elastic.co/t/match-data-from-two-sets-and-mark-entries/282731 "2021-08-30T17:07:06Z")

</div>

I have two relatively large sets of people data (first\_name, last\_name, birth\_date etc). And I need to 'match' them, because some people are present in both sets and I need to find and mark them (by adding their ID from…

---

## [Shard size not even for the same index](https://discuss.elastic.co/t/shard-size-not-even-for-the-same-index/282761)

<div class="topic-metadata">

**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 3:59pm UTC](https://discuss.elastic.co/t/shard-size-not-even-for-the-same-index/282761 "2021-08-30T15:59:44Z")

</div>

One of our index is relatively big and I just found its shards size are not even, see below. Any idea what could have cause this? Will it cause any perf issues and anything I can do? |my-index|0|r|STARTED|23869700|9.1…

---

## [Fleet Server x509 Error (GODEBUG=x509ignoreCN=0)](https://discuss.elastic.co/t/fleet-server-x509-error-godebug-x509ignorecn-0/281427)

<div class="topic-metadata">

**Author:** [@morgan.atwood](https://discuss.elastic.co/u/morgan.atwood)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 3:01pm UTC](https://discuss.elastic.co/t/fleet-server-x509-error-godebug-x509ignorecn-0/281427 "2021-08-30T15:01:53Z")

</div>

Greeting, Running into a problem with setting up the Fleet server. I have a standalone development server running Kibana, Elasticsearch, and Elastic-agent. Very excited to try out the new agent and security features in…

---

## [Default dashboard for heartbeat not working](https://discuss.elastic.co/t/default-dashboard-for-heartbeat-not-working/282743)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 7\
**Last updated:** [August 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/default-dashboard-for-heartbeat-not-working/282743 "2021-08-30T14:05:02Z")

</div>

Hi can I know is there default dashboard for heartbeat? I try enable setup dashboard. But in dashboard section i cant view it. U have any idea

---

## [ELK MetricBeat - Monitor remote mysqlDB](https://discuss.elastic.co/t/elk-metricbeat-monitor-remote-mysqldb/282717)

<div class="topic-metadata">

**Author:** [@ashwin](https://discuss.elastic.co/u/ashwin)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/elk-metricbeat-monitor-remote-mysqldb/282717 "2021-08-30T14:05:24Z")

</div>

I have installed ELK stack (With metricbeat) on ServerA and want to monitor mysql on ServerB. I added db host details on ServerA mysql.yml metribeat module file (/etc/metricbeat/modules.d/mysql.yml) - module: mysql …

---

## [Metricbeat Kubernetes Module not loading Node Disk I/O status to elasticsearch](https://discuss.elastic.co/t/metricbeat-kubernetes-module-not-loading-node-disk-i-o-status-to-elasticsearch/282828)

<div class="topic-metadata">

**Author:** [@Sowmya](https://discuss.elastic.co/u/Sowmya)\
**Replies:** 0\
**Last updated:** [August 30, 2021, 2:02pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module-not-loading-node-disk-i-o-status-to-elasticsearch/282828 "2021-08-30T14:02:10Z")

</div>

Hi, I need kubernetes Node Disk I/O status metrics from metricbeat to elasticsearch.. Is this can be done by metricbeat or not? Thank You

---

## [Data storage - Shard and replica size](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816)

<div class="topic-metadata">

**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 1:55pm UTC](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816 "2021-08-30T13:55:22Z")

</div>

I have a two node cluster with 600gb space between them on the data path. I'm setting a data stream where each index has 2 shards and one replica. Does the replica take same space as the main shards? Should I setup my da…

---

## [Logstash csv date deactivate](https://discuss.elastic.co/t/logstash-csv-date-deactivate/282764)

<div class="topic-metadata">

**Author:** [@shariq](https://discuss.elastic.co/u/shariq)\
**Replies:** 6\
**Last updated:** [August 30, 2021, 1:19pm UTC](https://discuss.elastic.co/t/logstash-csv-date-deactivate/282764 "2021-08-30T13:19:07Z")

</div>

Hi, I am new to the ELK stack. I am trying to import a CSV that contains Person Data to Elastic search, everything is working fine the only problem is that I would like to change the Birth\_date to "text" so i can use…

---

## [Problems to start Logstash conf pipelines with SystemCTL](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811)

<div class="topic-metadata">

**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 1:19pm UTC](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811 "2021-08-30T13:19:03Z")

</div>

I have a problem with logstash, when I running like this:/usr/share/logstash/bin/logstash --debug -f /etc/logstash/conf.d/switch.conf Works fine and start this specific configuration file. But I put this conf file in p…

---

## [Getting error while making asynchronous call into es.search() from Flask python API](https://discuss.elastic.co/t/getting-error-while-making-asynchronous-call-into-es-search-from-flask-python-api/282703)

<div class="topic-metadata">

**Author:** [@SCode](https://discuss.elastic.co/u/SCode)\
**Replies:** 2\
**Last updated:** [August 30, 2021, 12:13pm UTC](https://discuss.elastic.co/t/getting-error-while-making-asynchronous-call-into-es-search-from-flask-python-api/282703 "2021-08-30T12:13:48Z")

</div>

Error message looks like Error occurred: '\<' not supported between instances of 'AIOHttpConnection' and 'AIOHttpConnection' Also, at times it throws this error Error occurred: ConnectionError(Event loop is closed) cau…

---

## [JSON Split](https://discuss.elastic.co/t/json-split/282642)

<div class="topic-metadata">

**Author:** [@shashikant.deshmukh](https://discuss.elastic.co/u/shashikant.deshmukh)\
**Replies:** 4\
**Last updated:** [August 30, 2021, 12:03pm UTC](https://discuss.elastic.co/t/json-split/282642 "2021-08-30T12:03:46Z")

</div>

Hi, below is my Json, can you please help to split, I want all details from "Value" as separate event in elasticsearch. { "@odata.context": "https://urlrequired/api/$metadata#Robots", "@odata.count": 116, …

---

## [Internal server 500 error - \[illegal\_argument\_exception\] application privileges must refer to at least one resource"}](https://discuss.elastic.co/t/internal-server-500-error-illegal-argument-exception-application-privileges-must-refer-to-at-least-one-resource/282564)

<div class="topic-metadata">

**Author:** [@rishabhcldcvr](https://discuss.elastic.co/u/rishabhcldcvr)\
**Replies:** 5\
**Last updated:** [August 30, 2021, 11:33am UTC](https://discuss.elastic.co/t/internal-server-500-error-illegal-argument-exception-application-privileges-must-refer-to-at-least-one-resource/282564 "2021-08-30T11:33:27Z")

</div>

ES master: curl localhost:9200/ { "name" : "AZPRDBRK007", "cluster\_name" : "monitoring-cluster", "cluster\_uuid" : "7n4PuY7FQgWSIS0-2LxCRg", "version" : { "number" : "7.9.0", "build\_flavor" : "default", "build\_ty…

---

## [Update deleted RDBMS entries in Elasticsearch using Logstash jdbc input plugin](https://discuss.elastic.co/t/update-deleted-rdbms-entries-in-elasticsearch-using-logstash-jdbc-input-plugin/282803)

<div class="topic-metadata">

**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\
**Replies:** 0\
**Last updated:** [August 30, 2021, 11:18am UTC](https://discuss.elastic.co/t/update-deleted-rdbms-entries-in-elasticsearch-using-logstash-jdbc-input-plugin/282803 "2021-08-30T11:18:44Z")

</div>

I am trying to sync the RDBMS (postgres) data to Elasticsearch using Logstash and it works fine. Logstash configuration file: input { jdbc { jdbc\_driver\_library =\> "/home/raj/Downloads/postgresql-42.2.23.jar" …

---

## [How to aggregate based on the number of items in a field?](https://discuss.elastic.co/t/how-to-aggregate-based-on-the-number-of-items-in-a-field/282650)

<div class="topic-metadata">

**Author:** [@Xi\_Ern\_Tee](https://discuss.elastic.co/u/Xi_Ern_Tee)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 11:25am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-the-number-of-items-in-a-field/282650 "2021-08-30T11:25:00Z")

</div>

On Elasticsearch I have a field named Itinerary that can contain multiple values (from 1 up to 6), for example in the picture below there's 2 items in the field. Is there a way I can aggregate based on the number of …

---

## [Dockerfile for elastic (unable to copy file)](https://discuss.elastic.co/t/dockerfile-for-elastic-unable-to-copy-file/282681)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 11:18am UTC](https://discuss.elastic.co/t/dockerfile-for-elastic-unable-to-copy-file/282681 "2021-08-30T11:18:11Z")

</div>

i want to use elastic image such as elasticserhc, kibana and logstash. Do I need specify the CMD or COPY just sufficient? Can I use custom service name and image name or any format needed ARG Version FROM docker.elast…

---

## [Elasticsearch with datatables in laravel](https://discuss.elastic.co/t/elasticsearch-with-datatables-in-laravel/282790)

<div class="topic-metadata">

**Author:** [@Chaima\_Dridi](https://discuss.elastic.co/u/Chaima_Dridi)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-with-datatables-in-laravel/282790 "2021-08-30T10:49:53Z")

</div>

I'm using databales in laravel and putting dynamic data into it with ajax. When I fetch the data from MySQL it works but when I fetch it from elasticsearch it returns an ajax error.

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1259)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1261)
