# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1303

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1304

---

## [Updated nodes no longer show up in Kibana monitoring](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776)

<div class="topic-metadata">

**Author:** [@JSieminski](https://discuss.elastic.co/u/JSieminski)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 11:50pm UTC](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776 "2021-07-28T23:50:44Z")

</div>

I have a 8 server cluster, with each server running 4 instances of elasticsearch on it (ie.. ELK001, ELK001-a, ELK001-b, ELK001-c). I have started the rolling update process from 7.7 to 7.13.4. After updating ELK001 to 7…

---

## [Kibana query performance](https://discuss.elastic.co/t/kibana-query-performance/279363)

<div class="topic-metadata">

**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\
**Replies:** 13\
**Last updated:** [July 28, 2021, 11:46pm UTC](https://discuss.elastic.co/t/kibana-query-performance/279363 "2021-07-28T23:46:53Z")

</div>

Hello, I am currently drawing graphs and charts from Kibana, but it takes longer than the time that I started to draw. Compared to the beginning, there are obviously more data, but I am not sure it is still count as slo…

---

## [No logs for this cluster in Stack Monitoring](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850)

<div class="topic-metadata">

**Author:** [@ranvijaysanu](https://discuss.elastic.co/u/ranvijaysanu)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 11:42am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850 "2021-07-28T11:42:10Z")

</div>

Hi Team, I have setup elasticsearch, kibana and filebeat. I have configured elasticsearch module using autodiscover based on hints and it is sending logs to the kibana.But In the Stack Monitoring Section under Logs I ca…

---

## [Elasticsearch - refresh config](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904)

<div class="topic-metadata">

**Author:** [@Brian\_Z](https://discuss.elastic.co/u/Brian_Z)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 11:38pm UTC](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904 "2021-07-28T23:38:51Z")

</div>

I'm using elastic cloud and I need to configure synonyms. I've done that successfully by uploading a zip file containing a elasticsearch/dictionaries/synonyms.txt file and creating an index that uses them by doing: PUT …

---

## [Alias Index visualization](https://discuss.elastic.co/t/alias-index-visualization/279871)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 11:24pm UTC](https://discuss.elastic.co/t/alias-index-visualization/279871 "2021-07-28T23:24:31Z")

</div>

Hi all, I'm wondering if it is possible to visualize data of 2 differently named indices in a single index pattern. For example , i have a1 index and b1 index. I have a\* index pattern. Is it possible to give alias fo…

---

## [Unable to add node to the Elasticsearch cluster](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487)

<div class="topic-metadata">

**Author:** [@Sathiraju\_Eswar](https://discuss.elastic.co/u/Sathiraju_Eswar)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 11:20pm UTC](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487 "2021-07-28T23:20:39Z")

</div>

I am newbie to elastic search clustering. I am trying to setup a simple cluster with two nodes(not adviced) for experimental purpose. My nodes are my laptop and my desktop. The master node elastic search configuration : …

---

## [Excluded\_files doesn't seem to work](https://discuss.elastic.co/t/excluded-files-doesnt-seem-to-work/279918)

<div class="topic-metadata">

**Author:** [@prandelicious](https://discuss.elastic.co/u/prandelicious)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 10:32pm UTC](https://discuss.elastic.co/t/excluded-files-doesnt-seem-to-work/279918 "2021-07-28T22:32:07Z")

</div>

I used the default excluded\_files example: excluded\_files: - '(?i)\\.sw\[nopx\]$' - ~$ - /\\.git($|/) but it still logs temporary files created by vim like .\<filename\>.swp or ~\<filename\>. I also trie…

---

## [How to setup xpack On elasticsearch-oss-6.5.4](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887)

<div class="topic-metadata">

**Author:** [@xujun738](https://discuss.elastic.co/u/xujun738)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 9:45pm UTC](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887 "2021-07-28T21:45:56Z")

</div>

How to setup xpack On elasticsearch-oss-6.5.4,before 6.3 ,we can install xpack by the plugin form,after 6.3,it was installed in basic version by default but not in OSS

---

## [Alternatives to the Dev Tools Console](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 8:56pm UTC](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911 "2021-07-28T20:56:07Z")

</div>

The Dev Tools Console is nice but very basic. I am trying to find an alternative that retains all the niceties of the Console (e.g auto-highlight, intellisense, etc...), but also provide other features such as ability t…

---

## [Markdown codeblock syntax highlighting](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549)

<div class="topic-metadata">

**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 8:39pm UTC](https://discuss.elastic.co/t/markdown-codeblock-syntax-highlighting/279549 "2021-07-28T20:39:55Z")

</div>

Is there a way to show syntax highlighting on canvas markdown? Using three backticks then the code like in vscode or right here in this editor as I type this: "\`\`\`sql SELECT \* FROM users \`\`\`\` " Would highlight/bol…

---

## [Filtering syslog message](https://discuss.elastic.co/t/filtering-syslog-message/279877)

<div class="topic-metadata">

**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\
**Replies:** 4\
**Last updated:** [July 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/filtering-syslog-message/279877 "2021-07-28T20:18:19Z")

</div>

hello, I'm new to ELK and I'm trying to use logstash to consume logs from a syslog server I have, how do I extract the messages that arrive inside the message field? here is a log sample: "\<133\>Jul 28 09:59:11 10.128.x…

---

## [Multiple Pipeline not working](https://discuss.elastic.co/t/multiple-pipeline-not-working/279907)

<div class="topic-metadata">

**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 8:04pm UTC](https://discuss.elastic.co/t/multiple-pipeline-not-working/279907 "2021-07-28T20:04:01Z")

</div>

I'm trying to configure several pipelines, but only the first pipeline is working, below are my configuration files and the latest logstash log messages pipelines.yml: # This file is where you define your pipelines. Yo…

---

## [Logstash to external elasticsearch failed to connect](https://discuss.elastic.co/t/logstash-to-external-elasticsearch-failed-to-connect/279902)

<div class="topic-metadata">

**Author:** [@Aaron\_Phillips](https://discuss.elastic.co/u/Aaron_Phillips)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 7:35pm UTC](https://discuss.elastic.co/t/logstash-to-external-elasticsearch-failed-to-connect/279902 "2021-07-28T19:35:37Z")

</div>

Running two separate elasticsearch one for an elk install and another for a network analysis toolset. The plan was to ship the network logs from the network tool to elk for further AI capabilities. However, the logstash…

---

## [Working with gzipped files](https://discuss.elastic.co/t/working-with-gzipped-files/279644)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 7:25pm UTC](https://discuss.elastic.co/t/working-with-gzipped-files/279644 "2021-07-28T19:25:08Z")

</div>

Hi, I have to work with a lot of gzipped text files but it seems Filebeat can't read them. Is there any way to read the gzipped files in a given folder and ship those to a Kafka cluster? I saw that maybe I could work w…

---

## [Logstash workflow design - pipelines and configuration files](https://discuss.elastic.co/t/logstash-workflow-design-pipelines-and-configuration-files/279865)

<div class="topic-metadata">

**Author:** [@Icaka](https://discuss.elastic.co/u/Icaka)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 7:09pm UTC](https://discuss.elastic.co/t/logstash-workflow-design-pipelines-and-configuration-files/279865 "2021-07-28T19:09:05Z")

</div>

Hi all, New to Elastic and Logstash, however my scenario is large IT environment and I would like to collect logs from various sources. First I would like to design most basic ones such as filebeat collecting syslogs, s…

---

## [How to create a report based on multiple copies of the same record in Kibana](https://discuss.elastic.co/t/how-to-create-a-report-based-on-multiple-copies-of-the-same-record-in-kibana/277970)

<div class="topic-metadata">

**Author:** [@arunavab](https://discuss.elastic.co/u/arunavab)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 6:55pm UTC](https://discuss.elastic.co/t/how-to-create-a-report-based-on-multiple-copies-of-the-same-record-in-kibana/277970 "2021-07-28T18:55:25Z")

</div>

We are new to Kibana and are Collecting Data from a tool in this format and storing it in a CSV file. \[ID | Title | Status | Priority | Created Date | Resolved Date\] Now one ID will be repeated multiple times as work g…

---

## [Fleet Server only binding to IPv6](https://discuss.elastic.co/t/fleet-server-only-binding-to-ipv6/278213)

<div class="topic-metadata">

**Author:** [@omurad](https://discuss.elastic.co/u/omurad)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 6:37pm UTC](https://discuss.elastic.co/t/fleet-server-only-binding-to-ipv6/278213 "2021-07-28T18:37:07Z")

</div>

I couldn't get an agent connected to the Fleet Server, so I ran netstat on the Fleet Server machine and noticed the port I configured is only bound to IPv6, not IPv4. My Fleet Server URL is set to http://0.0.0.0:8220. I…

---

## [What do you enter as the "host" while deploying a 3 node cluster and using elasticsearch\_certutil http](https://discuss.elastic.co/t/what-do-you-enter-as-the-host-while-deploying-a-3-node-cluster-and-using-elasticsearch-certutil-http/278853)

<div class="topic-metadata">

**Author:** [@Shubh\_Garg](https://discuss.elastic.co/u/Shubh_Garg)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 6:19pm UTC](https://discuss.elastic.co/t/what-do-you-enter-as-the-host-while-deploying-a-3-node-cluster-and-using-elasticsearch-certutil-http/278853 "2021-07-28T18:19:00Z")

</div>

I am having trouble getting the correct http certificate. I have deployed a 3 node cluster according to the config. mentioned in this elastic article - Encrypting communications in an Elasticsearch Docker Container | Ela…

---

## [Field of nested type displayed as unindexed](https://discuss.elastic.co/t/field-of-nested-type-displayed-as-unindexed/278812)

<div class="topic-metadata">

**Author:** [@tobu](https://discuss.elastic.co/u/tobu)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 5:33pm UTC](https://discuss.elastic.co/t/field-of-nested-type-displayed-as-unindexed/278812 "2021-07-28T17:33:30Z")

</div>

Hello I have created following index PUT my-index-000001 { "mappings": { "properties": { "users": { "type": "nested" } } } } PUT my-index-000001/\_doc/1 { "group" : "fans", "users" …

---

## [Feature parity between Integrations and Filebeat modules](https://discuss.elastic.co/t/feature-parity-between-integrations-and-filebeat-modules/279714)

<div class="topic-metadata">

**Author:** [@wsnet](https://discuss.elastic.co/u/wsnet)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 4:13pm UTC](https://discuss.elastic.co/t/feature-parity-between-integrations-and-filebeat-modules/279714 "2021-07-28T16:13:55Z")

</div>

Hello, In the elastic/integrations repo there are lots of issues/plans and some PRs to add more data sources into Elastic, which is great! Does Elastic intend to also add these data sources as Filebeat modules, or do w…

---

## [How to identify if filebeat has read all the logs from a specific folder?](https://discuss.elastic.co/t/how-to-identify-if-filebeat-has-read-all-the-logs-from-a-specific-folder/279857)

<div class="topic-metadata">

**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 4:07pm UTC](https://discuss.elastic.co/t/how-to-identify-if-filebeat-has-read-all-the-logs-from-a-specific-folder/279857 "2021-07-28T16:07:19Z")

</div>

Hi Team, Is there a way to identify if filebeat has parsed all the logs from a specific folder ? Requirement is to delete the folder automatically once filebeat has synced all the logs from that folder

---

## [Kibana is active and running, but not able to access it in browser](https://discuss.elastic.co/t/kibana-is-active-and-running-but-not-able-to-access-it-in-browser/279801)

<div class="topic-metadata">

**Author:** [@ritesh.aduri45](https://discuss.elastic.co/u/ritesh.aduri45)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 3:31pm UTC](https://discuss.elastic.co/t/kibana-is-active-and-running-but-not-able-to-access-it-in-browser/279801 "2021-07-28T15:31:56Z")

</div>

Kibana in browser is not accessible.

---

## [Redirect post call from kibana backend to another server using Hapi/h2o2 proxy handler in kibana plugin development](https://discuss.elastic.co/t/redirect-post-call-from-kibana-backend-to-another-server-using-hapi-h2o2-proxy-handler-in-kibana-plugin-development/278066)

<div class="topic-metadata">

**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 3:26pm UTC](https://discuss.elastic.co/t/redirect-post-call-from-kibana-backend-to-another-server-using-hapi-h2o2-proxy-handler-in-kibana-plugin-development/278066 "2021-07-28T15:26:03Z")

</div>

I have created a kibana plugin using the following procedure: goto kibana source directory node scripts/generate\_plugin test\_plugin build plugin with #yarn plugin-helpers build I modified UI as it has some forms in fr…

---

## [Babel translations in Kibana not working?](https://discuss.elastic.co/t/babel-translations-in-kibana-not-working/279852)

<div class="topic-metadata">

**Author:** [@neil\_welling](https://discuss.elastic.co/u/neil_welling)\
**Replies:** 2\
**Last updated:** [July 28, 2021, 2:02pm UTC](https://discuss.elastic.co/t/babel-translations-in-kibana-not-working/279852 "2021-07-28T14:02:55Z")

</div>

HI. I have a local install of Kibana v7.12.1 being used on Samsung Smart TVs, who's inbuilt browser is built on top of Chromium 56 and so spread syntax for object literals isn't supported, so when the kibana home page l…

---

## [Filebeat latency while reading the data](https://discuss.elastic.co/t/filebeat-latency-while-reading-the-data/279869)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 2:05pm UTC](https://discuss.elastic.co/t/filebeat-latency-while-reading-the-data/279869 "2021-07-28T14:05:15Z")

</div>

Hi Team, in filebeat i have given the input section with filepath and outputsection with kafka. while reading the data from file filebeat is reading in batchwise. I have not given any flush timeout, as a default it sho…

---

## [Cannot create snapshot repository](https://discuss.elastic.co/t/cannot-create-snapshot-repository/279833)

<div class="topic-metadata">

**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\
**Replies:** 12\
**Last updated:** [July 28, 2021, 1:47pm UTC](https://discuss.elastic.co/t/cannot-create-snapshot-repository/279833 "2021-07-28T13:47:05Z")

</div>

I have ELK running in a docker. Directory in my home dir is mounted as volume in the docker and was defined as repo\_path in elasticsearch. The permissions are set correctly and folder owner is elasticsearch. When I try…

---

## [Kibana Lens - is there a way to just count a field and not all records?](https://discuss.elastic.co/t/kibana-lens-is-there-a-way-to-just-count-a-field-and-not-all-records/279694)

<div class="topic-metadata">

**Author:** [@lorenzPowerdale2](https://discuss.elastic.co/u/lorenzPowerdale2)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 1:46pm UTC](https://discuss.elastic.co/t/kibana-lens-is-there-a-way-to-just-count-a-field-and-not-all-records/279694 "2021-07-28T13:46:31Z")

</div>

I am trying to do a quick Virtualisation. The idea is to take take all values that have Errors/"Reden" and group them by the CP Communication Unit. So in theorie not very different from what we are seeing here: The p…

---

## [Aggregation filter Logstash](https://discuss.elastic.co/t/aggregation-filter-logstash/279868)

<div class="topic-metadata">

**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 1:44pm UTC](https://discuss.elastic.co/t/aggregation-filter-logstash/279868 "2021-07-28T13:44:37Z")

</div>

Hi all, i'm trying to use aggregation filter, i have a big result set (more than 140k rows from mySql). And the aggregation stopped always at row 53. In the log I can see this error: \[ERROR\]\[logstash.javapipeline …

---

## [Kibana is running but extremely slow](https://discuss.elastic.co/t/kibana-is-running-but-extremely-slow/279843)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 1:26pm UTC](https://discuss.elastic.co/t/kibana-is-running-but-extremely-slow/279843 "2021-07-28T13:26:08Z")

</div>

Hi Fellows, i am suffering with this issue. I do not know how i could fix this. I would be glad if you could give a direction to go for it. Kibana is working but extremely slow running. I have 10 nodes elasticsearch ho…

---

## [RuntimeError: Invalid FieldReference: \`\[\]\`](https://discuss.elastic.co/t/runtimeerror-invalid-fieldreference/279856)

<div class="topic-metadata">

**Author:** [@Andrew\_Harris](https://discuss.elastic.co/u/Andrew_Harris)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 12:43pm UTC](https://discuss.elastic.co/t/runtimeerror-invalid-fieldreference/279856 "2021-07-28T12:43:53Z")

</div>

Hi, I have two servers running Logstash 7.10 pushing a series of CSV file into Elastic. Now I thought that both server were configured exactly the same, but it looks like they aren't as one is repeatedly giving the foll…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1302)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1304)
