# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1333 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1334 --- ## [Query randomly fail](https://discuss.elastic.co/t/query-randomly-fail/277880)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 8:58pm UTC](https://discuss.elastic.co/t/query-randomly-fail/277880 "2021-07-06T20:58:51Z")
Hi, I have a website installed since month now, working perfectly. Nothing has changed, no deploy etc... But now, I test a specific query, sometime it work and sometimes it failed! It is completely random. So, I have … --- ## [Elasticsearch is unable to authenticate the credentials](https://discuss.elastic.co/t/elasticsearch-is-unable-to-authenticate-the-credentials/277981)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-is-unable-to-authenticate-the-credentials/277981 "2021-07-06T15:44:36Z")
I had enabled authentication on my ELK stack (single node) , every thing works as expected (role,users etc). however my elasticsearch logs have logged some errors such as \[2021-07-06T15:33:59,086\]\[INFO \]\[o.e.x.s.a.Authe… --- ## [Filebeat: Exiting: Failed to start crawler: creating module reloader failed: string value is not set accessing 'connection\_string'](https://discuss.elastic.co/t/filebeat-exiting-failed-to-start-crawler-creating-module-reloader-failed-string-value-is-not-set-accessing-connection-string/276552)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 7:27pm UTC](https://discuss.elastic.co/t/filebeat-exiting-failed-to-start-crawler-creating-module-reloader-failed-string-value-is-not-set-accessing-connection-string/276552 "2021-07-06T19:27:14Z")
Hello Im suddenly getting this error in Filebeat. Im not sure really where to look at I wasnt getting this error before. Any ideas? Thank you --- ## [Change the index from winglogbeat to metricbeat](https://discuss.elastic.co/t/change-the-index-from-winglogbeat-to-metricbeat/277988)
**Author:** [@Angelo\_Bryan](https://discuss.elastic.co/u/Angelo_Bryan)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 6:03pm UTC](https://discuss.elastic.co/t/change-the-index-from-winglogbeat-to-metricbeat/277988 "2021-07-06T18:03:47Z")
Hello elastic group, I have a question, I am trying to change the index from winglogbeat to metricbeat making the following configuration in the logstash (conf.d), but it has not worked for me, I would like to have your … --- ## [Found xpack.reporting.capture.timeouts.openUrl timeout during create report pdf on elastic 7.11.2](https://discuss.elastic.co/t/found-xpack-reporting-capture-timeouts-openurl-timeout-during-create-report-pdf-on-elastic-7-11-2/277582)
**Author:** [@golfreeze](https://discuss.elastic.co/u/golfreeze)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 4:49pm UTC](https://discuss.elastic.co/t/found-xpack-reporting-capture-timeouts-openurl-timeout-during-create-report-pdf-on-elastic-7-11-2/277582 "2021-07-06T16:49:55Z")
elastic 7.11.2 xpack.reporting.capture.timeouts.openUrl timeout on security onion and try to added xpack.reporting.capture.timeouts.renderComplete: 120000 xpack.reporting.capture.timeouts.openUrl: 120000 xpack.report… --- ## [Data Validation in Logstash](https://discuss.elastic.co/t/data-validation-in-logstash/277922)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 4:43pm UTC](https://discuss.elastic.co/t/data-validation-in-logstash/277922 "2021-07-06T16:43:58Z")
Hi, I am trying data validation in logstash. Example : column 1 in CSV should only allow number (double data type). No other text should be allowed if any other string found then trigger mail. Similarly, need date va… --- ## [Pearson Correlation & Spearman Correlation](https://discuss.elastic.co/t/pearson-correlation-spearman-correlation/277984)
**Author:** [@Ahmed\_Elsheikh](https://discuss.elastic.co/u/Ahmed_Elsheikh)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 4:33pm UTC](https://discuss.elastic.co/t/pearson-correlation-spearman-correlation/277984 "2021-07-06T16:33:32Z")
Hello, I am new to ElasticSearch I am following this tutorial trying to implement Semantic Textual Similarity between a query and set of questions/documents in the Stackoverflow dataset. I found that Pearson/Spearman c… --- ## [Packetbeat filter](https://discuss.elastic.co/t/packetbeat-filter/275087)
**Author:** [@luweijun](https://discuss.elastic.co/u/luweijun)\ **Replies:** 11\ **Last updated:** [July 6, 2021, 4:07pm UTC](https://discuss.elastic.co/t/packetbeat-filter/275087 "2021-07-06T16:07:41Z")
How does packetbeat filter its own data packets sent to es, because the server itself sends data to es:9200 in the collected data. How to filter the information in this part. --- ## [Bucket selector null pointer exception](https://discuss.elastic.co/t/bucket-selector-null-pointer-exception/277543)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 4:01pm UTC](https://discuss.elastic.co/t/bucket-selector-null-pointer-exception/277543 "2021-07-06T16:01:27Z")
Hey, I'm trying to get an overall avg vs grouped avg aggregation in DevTools: GET index1/\_search { "query": { "bool": { "filter": \[ { "exists": { "field": "my\_measurement" … --- ## [Fleet requires insecure flag to enroll](https://discuss.elastic.co/t/fleet-requires-insecure-flag-to-enroll/277395)
**Author:** [@Jukocross](https://discuss.elastic.co/u/Jukocross)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 3:53pm UTC](https://discuss.elastic.co/t/fleet-requires-insecure-flag-to-enroll/277395 "2021-07-06T15:53:11Z")
I tried setting up TLS with reference to Encrypt traffic in a self-managed cluster | Fleet User Guide \[7.13\] | Elastic. However, I faced Error: fail to enroll: fail to execute request to fleet-server: x509: certificate… --- ## [Capturing servername and appending/propogating it to all other lines of logfile](https://discuss.elastic.co/t/capturing-servername-and-appending-propogating-it-to-all-other-lines-of-logfile/277876)
**Author:** [@Nanelastic](https://discuss.elastic.co/u/Nanelastic)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 3:39pm UTC](https://discuss.elastic.co/t/capturing-servername-and-appending-propogating-it-to-all-other-lines-of-logfile/277876 "2021-07-06T15:39:18Z")
Hello Guys, I am very new to ELK stack. I am trying to parse below mentioned log using logstash config. I figured out the grok pattern for last 3 lines. I need help in capturing the server name mentioned in either line… --- ## [Ingest pipeline processors what constitutes a failure?](https://discuss.elastic.co/t/ingest-pipeline-processors-what-constitutes-a-failure/277980)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 3:30pm UTC](https://discuss.elastic.co/t/ingest-pipeline-processors-what-constitutes-a-failure/277980 "2021-07-06T15:30:50Z")
If i use an ingest pipeline with a processor of some kind say an enrich processor and i provide a valid enrich policy with valid fields to match and enrich. If no match is found i assume this would not constitute a failu… --- ## [ElasticSearch Inline script compilation circuit breaker triggered on static script code](https://discuss.elastic.co/t/elasticsearch-inline-script-compilation-circuit-breaker-triggered-on-static-script-code/277228)
**Author:** [@Anver\_S](https://discuss.elastic.co/u/Anver_S)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-inline-script-compilation-circuit-breaker-triggered-on-static-script-code/277228 "2021-07-06T14:48:33Z")
Using java rest api I submit bulk update requests with painless script for (entry in params.entrySet()) {ctx.\_source\[entry.getKey()\] = entry.getValue();} Occasionally I get dynamic compilation circuit breaker triggerin… --- ## [Bucket sorting dates](https://discuss.elastic.co/t/bucket-sorting-dates/277971)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 2:41pm UTC](https://discuss.elastic.co/t/bucket-sorting-dates/277971 "2021-07-06T14:41:12Z")
I am using Elastic 7.11 and I was trying to implement bucket\_sort in a field type date and I couldn't, so I kind of workarrounded it haha, but I'm sure there is a more efficient way of doing it. This is the kind of docum… --- ## [Disk usage difference between data nodes](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798)
**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 2:40pm UTC](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798 "2021-07-06T14:40:33Z")
Hello, we have a pretty big cluster (26 data nodes, almost 100TB), and I have a question about the disk usage distribution across data nodes. I know that Elasticsearch takes to consideration the equality between number… --- ## [Kibana pie chart show unique to non-unique](https://discuss.elastic.co/t/kibana-pie-chart-show-unique-to-non-unique/277825)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-show-unique-to-non-unique/277825 "2021-07-06T14:33:41Z")
Im doing something wrong, i want a pie chart to show for all the docs in the index the number of unique docs (based on a string) and non-unique(based on the same string) So if i had doc1 field: test doc2 field: test … --- ## [\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968)
**Author:** [@Phoybe](https://discuss.elastic.co/u/Phoybe)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 2:22pm UTC](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968 "2021-07-06T14:22:50Z")
Hi, I'm stuck in "Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..." My kibana.yml server.host: 0.0.0.0 server.name: "elk1" elasticsearch.hosts: \["https://loc… --- ## [Monitoring Logstash with Metricbeat](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat/277635)
**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 1:42pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat/277635 "2021-07-06T13:42:22Z")
Hello, I'm trying to monitor Logstash with Metricbeat. I already enabled Elasticsearch X-Pack with metricbeat. I followed instructions regarding Logstash monitoring with metricbeat. In "Stack monitoring", i can see m… --- ## [I have100 microservices on single server so Can I collect all services logs using single filebeat?](https://discuss.elastic.co/t/i-have100-microservices-on-single-server-so-can-i-collect-all-services-logs-using-single-filebeat/277917)
**Author:** [@mba](https://discuss.elastic.co/u/mba)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 1:26pm UTC](https://discuss.elastic.co/t/i-have100-microservices-on-single-server-so-can-i-collect-all-services-logs-using-single-filebeat/277917 "2021-07-06T13:26:00Z")
I have100 microservices on single server so Can I collect all services logs using single filebeat ?? --- ## [Route indexing requests to a specific node instead of a shard](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939)
**Author:** [@Joel4](https://discuss.elastic.co/u/Joel4)\ **Replies:** 8\ **Last updated:** [July 6, 2021, 1:09pm UTC](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939 "2021-07-06T13:09:00Z")
Hi, I searched through the docs but I could not find a way to route index requests to a specific node, instead of a specific shard. If routing to a specific node is not possible, then is it possible to create shard-node… --- ## [Send to different Logstash pipelines based on input](https://discuss.elastic.co/t/send-to-different-logstash-pipelines-based-on-input/277959)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 1:08pm UTC](https://discuss.elastic.co/t/send-to-different-logstash-pipelines-based-on-input/277959 "2021-07-06T13:08:57Z")
Hi i have two logstash pipelines in Pipelines.yml. I need to redirect events to appropriate pipelines based on input. If input is "abc", send to pipeline "pipeline 1", else send to "pipeline2". I cant handle this at sou… --- ## [Icons in Datatable](https://discuss.elastic.co/t/icons-in-datatable/277958)
**Author:** [@PradeepJ](https://discuss.elastic.co/u/PradeepJ)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 1:05pm UTC](https://discuss.elastic.co/t/icons-in-datatable/277958 "2021-07-06T13:05:31Z")
Hi, I want to add icons in datatable. Can anyone help me with this?(It can be as part of a column value or a seperate column for icons) --- ## [Metricbeat error starting](https://discuss.elastic.co/t/metricbeat-error-starting/277851)
**Author:** [@yassoukoin](https://discuss.elastic.co/u/yassoukoin)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 1:03pm UTC](https://discuss.elastic.co/t/metricbeat-error-starting/277851 "2021-07-06T13:03:46Z")
Hello, I configured metricbeat on my serveur and when I enabled system.yml file and restart service's i got this error (fetching data for metricset beat.stats). see below the error snapchat Need Help Thanks. --- ## [How to write conditional statements/calculations in elastic Machine Learning](https://discuss.elastic.co/t/how-to-write-conditional-statements-calculations-in-elastic-machine-learning/277783)
**Author:** [@laiweida](https://discuss.elastic.co/u/laiweida)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 12:57pm UTC](https://discuss.elastic.co/t/how-to-write-conditional-statements-calculations-in-elastic-machine-learning/277783 "2021-07-06T12:57:51Z")
How can I perform a Kibana machine learning anomaly detection job to find out anomalies in query duration. Any ideas how to perform below calculation and include it in the ML detector? Something like this (postgresql.ac… --- ## [Kibana dashboard having no index pattern issue](https://discuss.elastic.co/t/kibana-dashboard-having-no-index-pattern-issue/277954)
**Author:** [@Megalith\_Marlin](https://discuss.elastic.co/u/Megalith_Marlin)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 12:15pm UTC](https://discuss.elastic.co/t/kibana-dashboard-having-no-index-pattern-issue/277954 "2021-07-06T12:15:29Z")
Hi i have created a dashboard with some visualization and add the dashboard to a new space.the i create a new user and give access only to that dashboard nut when i logged into the new account i see an error which says c… --- ## [Cannot start ES inside LXC using \_site\_ (error shows memory issue)](https://discuss.elastic.co/t/cannot-start-es-inside-lxc-using-site-error-shows-memory-issue/277735)
**Author:** [@johnmarkcausing](https://discuss.elastic.co/u/johnmarkcausing)\ **Replies:** 12\ **Last updated:** [July 6, 2021, 12:07pm UTC](https://discuss.elastic.co/t/cannot-start-es-inside-lxc-using-site-error-shows-memory-issue/277735 "2021-07-06T12:07:52Z")
Hi, I can't seem to start ES inside my Centos 7 container. I am using mac --\> multipass --\> LXD --\> LXC centos7. So I can start ES with no errors if I remove site in my yml config like this: network.host: \["\_local\_"\] B… --- ## [Http filter plugin adds \_jsonparsefailure in tag](https://discuss.elastic.co/t/http-filter-plugin-adds-jsonparsefailure-in-tag/277744)
**Author:** [@priyaankaa](https://discuss.elastic.co/u/priyaankaa)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 9:47am UTC](https://discuss.elastic.co/t/http-filter-plugin-adds-jsonparsefailure-in-tag/277744 "2021-07-06T09:47:55Z")
My logstash pipeline - input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "s1test-processcode-temp" user =\> "elastic" password =\> "elastic" schedule =\> "\*/10 \* \* \* \*" } } filter { j… --- ## [org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\[r\]\]](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-indices-data-write-bulk-s-r/275660)
**Author:** [@Vdm88](https://discuss.elastic.co/u/Vdm88)\ **Replies:** 13\ **Last updated:** [July 6, 2021, 10:14am UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-indices-data-write-bulk-s-r/275660 "2021-07-06T10:14:55Z")
Cluster always get CircuitBreakingException after update to ES7.13. -Xms31g -Xmx31g 14-:-XX:+UseG1GC 14-:-XX:G1ReservePercent=25 14-:-XX:InitiatingHeapOccupancyPercent=30 We checked and we have no huge query execut… --- ## [Agent stuck on "Updating" when enrolling](https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703)
**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 11:26am UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703 "2021-07-06T11:26:18Z")
Hi everybody, After updating our stack to version 7.13.2 we have been experiencing problems when trying to enroll agents to Fleet. Since fleet-server was introduced we added it to our stack and behind our reverse proxy… --- ## [Filebeat configuration file troubles](https://discuss.elastic.co/t/filebeat-configuration-file-troubles/277952)
**Author:** [@111489](https://discuss.elastic.co/u/111489)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 11:20am UTC](https://discuss.elastic.co/t/filebeat-configuration-file-troubles/277952 "2021-07-06T11:20:03Z")
Hello, I have installed elasticsearch, kibana and filebeat on kubernetes cluster version 7.6.1 within separate namespace. My main goal was gather logs from other two namespaces within this cluster. But still I have tro… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1332) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1334)