# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1381 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1382 --- ## [Configuration issue](https://discuss.elastic.co/t/configuration-issue/274839)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 6:48am UTC](https://discuss.elastic.co/t/configuration-issue/274839 "2021-06-07T06:48:19Z")
I am running in my cluster 3 master nodes, two data nodes and three client nodes. I am facing an issue that we are not able to create new indexes in Elastic. I can see lot's of exceptions in the elastic search. It sta… --- ## [Kibana Elasticsearch -\> after 7 Days elastic user pw changed](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180)
**Author:** [@CleanerOne](https://discuss.elastic.co/u/CleanerOne)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:47am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180 "2021-06-07T06:47:34Z")
Hello Community Hello dear community, I have a problem ... I did Kibana and Elasticsearch after this tutorial installed in an AKS (Azure Kubernetes cluster). everything runs well until after 7 days the setup thinks… --- ## [Timeouts in cluster management requests ES 7.11.2 leading to nodes in the cluster freezing](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882)
**Author:** [@parapar](https://discuss.elastic.co/u/parapar)\ **Replies:** 7\ **Last updated:** [June 7, 2021, 6:44am UTC](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882 "2021-06-07T06:44:57Z")
Hi, I opened this bug https://github.com/elastic/elasticsearch/issues/72853, but the elastic team did not consider it a bug. My situation is quite similar to this other Kibana ticket https://github.com/elastic/kibana/is… --- ## [Mix HTTPS & HTTP nodes in the same cluster](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 6:38am UTC](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987 "2021-06-07T06:38:50Z")
Using ELK 7.13.0 - Plat. licence - xpack security - on k8s - elastic Helm charts. We run a 2 clients nodes / X data nodes / 3 master nodes cluster, with security (transport TLS) without https. Everything is OK. Since I… --- ## [Migration from single to multi-index increased searchRate and overall search time](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102)
**Author:** [@code\_merchant](https://discuss.elastic.co/u/code_merchant)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:27am UTC](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102 "2021-06-07T06:27:58Z")
Earlier, we had only 1 index of storing all the data of the cluster of around 400GB. We migrated from that architecture to a new one that has monthly indices each of size around 30 GB (recommended index size in ES). Afte… --- ## [In elasticsearch audit, for data/write/bulk event, what is the target index?](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 6:20am UTC](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001 "2021-06-07T06:20:08Z")
I'm trying to debug a winlogbeat ingest, I'm seeing data/write/bulk events for the host and user in the audit logs, but it doesn't show the target index name. That seems like a useful audit item. I'm trying to get winl… --- ## [Why log are not show in elastic?](https://discuss.elastic.co/t/why-log-are-not-show-in-elastic/274857)
**Author:** [@Salim\_Adnan](https://discuss.elastic.co/u/Salim_Adnan)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 5:01am UTC](https://discuss.elastic.co/t/why-log-are-not-show-in-elastic/274857 "2021-06-07T05:01:47Z")
--- ## [Only give access to create and manage alias and not update setting/mapping](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 12:29pm UTC](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868 "2021-06-03T12:29:17Z")
Is it possible to have access create and mange alias only and not other things like template etc which comes with manage role ? \*\*create\_index\*\* = Privilege to create an index or data stream. A create index request may … --- ## [Azure service bus](https://discuss.elastic.co/t/azure-service-bus/275085)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:59am UTC](https://discuss.elastic.co/t/azure-service-bus/275085 "2021-06-07T04:59:21Z")
Hi Elastic Team, I am just wondering if I want to import Azure Service Bus metrics and logs, what is the best approach for doing it. Most of the docs online I am coming across is getting activity logs (they are differe… --- ## [Need to write DSL to check if these 4 events occur within 1 second](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096 "2021-06-07T04:40:02Z")
1. 31628 2021-02-13T00:20:49.325893Z - xyz svn/repos open 2. 31628 2021-02-13T00:20:49.607437Z - xyz svn/repos get-latest 3. 31628 2021-02-13T00:20:49.888794Z - xyz svn/repos reparent 4. 31628 2021-02-13T00:20:50.170101… --- ## [The code does not exist in the custom logokibana guide](https://discuss.elastic.co/t/the-code-does-not-exist-in-the-custom-logokibana-guide/274968)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:34am UTC](https://discuss.elastic.co/t/the-code-does-not-exist-in-the-custom-logokibana-guide/274968 "2021-06-07T04:34:33Z")
The code does not exist in the custom logokibana guide. First of all, my Kibana version is 7.13.0. The code does not exist while trying to replace the loading logo image. How should I change it? -\> The part marke… --- ## [How do I change the elastic logo from Kibana 7.13.0 to the company logo?](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045 "2021-06-07T04:33:51Z")
How do I change the elastic logo from Kibana 7.13.0 to the company logo? How do I change the elastic logo from Kibana 7.13.0 to the company logo? my elk version : 7.13.0 Changes made in kibana 7.13.0 Change logo and… --- ## [Is it possible to recover the data if we delete the segment file for the index?](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941)
**Author:** [@Josephyan](https://discuss.elastic.co/u/Josephyan)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941 "2021-06-07T04:29:13Z")
Hi Everyone, If the segment files were deleted for the index, is it possible to recover the index's data? Thanks a lot for your great help! Elasticsearch version: 2.1 Regards, Joe --- ## [SAML Authentication version](https://discuss.elastic.co/t/saml-authentication-version/274953)
**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:28am UTC](https://discuss.elastic.co/t/saml-authentication-version/274953 "2021-06-07T04:28:13Z")
HI Team, we are trying to configure SAML authentication for Kibana but in subscription plans it mentioned like SAML SSO but can I know it is SAML 1.0 or SAML 1.1 version and which is best suitable for Kibana , can you p… --- ## [Error authentication](https://discuss.elastic.co/t/error-authentication/275005)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:17am UTC](https://discuss.elastic.co/t/error-authentication/275005 "2021-06-07T04:17:18Z")
\[2021-06-04T22:36:16,657\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or command line options are specified \[2021-06-04T22:36:16,704\]\[INFO \]\[logstash.runner \] Star… --- ## [Building elasticsearch on windows 10](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021)
**Author:** [@manishbansal8843](https://discuss.elastic.co/u/manishbansal8843)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 9:50am UTC](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021 "2021-06-05T09:50:51Z")
Hey All! I am trying to build elastic search on my local windows 10 box using jdk 15. As per ReadMe, i have executed gradlew localDistro. But i am getting following error. D:\\OpenSource\\elasticsearch\>gradlew localDi… --- ## [My Kibana is not showing logs from created indexes](https://discuss.elastic.co/t/my-kibana-is-not-showing-logs-from-created-indexes/275051)
**Author:** [@uxair996](https://discuss.elastic.co/u/uxair996)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:13am UTC](https://discuss.elastic.co/t/my-kibana-is-not-showing-logs-from-created-indexes/275051 "2021-06-07T04:13:58Z")
Hi everyone i am facing issue. My kibana is not displaying logs from the indices. Whenever I tried to request using devtools. There hits and logs are showing but I am unable to see in discover tab. --- ## [Kibana not working with HPA](https://discuss.elastic.co/t/kibana-not-working-with-hpa/275067)
**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:12am UTC](https://discuss.elastic.co/t/kibana-not-working-with-hpa/275067 "2021-06-07T04:12:49Z")
I am trying to deploy the KIBANA on Kubernetes. With a single pod, it is working fine, but when I try to increase the number of pods of kibana. I got stuck on an infinite loop on the kibana login screen. I am just using… --- ## [CSRF Protection in kibana 7.10.2](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [June 6, 2021, 2:23pm UTC](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629 "2021-06-06T14:23:15Z")
Report tools report that dashboard URLs don't have csrf protection. When looked at the request and response, don't see a csrf token in the get/post request. Please help me to enable CSRF in Kibana UI so that the request… --- ## [Elasticsearch all shards failed](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088)
**Author:** [@jake\_JJ](https://discuss.elastic.co/u/jake_JJ)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 2:41am UTC](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088 "2021-06-07T02:41:43Z")
\[2021-06-04T10:27:19,423\]\[WARN \]\[o.e.m.f.FsHealthService \] \[node-9800\] health check of \[/data/elasticsearch-7.12.0-9800/data/nodes/0\] took \[2144291ms\] which is above the warn threshold of \[5s\] \[2021-06-04T10:33:24,887\]\[… --- ## [Log akamai to elastic](https://discuss.elastic.co/t/log-akamai-to-elastic/274960)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [June 4, 2021, 8:29am UTC](https://discuss.elastic.co/t/log-akamai-to-elastic/274960 "2021-06-04T08:29:22Z")
i have an akamai, and i want to all log from akamai can detect and analysis with my elastic. what should i do to pull log akamai to elastic? --- ## [Is it necessary to copy synonym.txt to all nodes?](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 1:04am UTC](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746 "2021-06-07T01:04:38Z")
I have a cluster of 3 nodes. My index is located on node-2 (primary shard) and node-3 (replica shard) and node-1 is currently master...Anyway, I have my own synonym.txt and I need to know that, should I have to copy my … --- ## [Processing large log files in logstash failing with \_jsonparsefailure error](https://discuss.elastic.co/t/processing-large-log-files-in-logstash-failing-with-jsonparsefailure-error/275077)
**Author:** [@tejpatil](https://discuss.elastic.co/u/tejpatil)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 12:54am UTC](https://discuss.elastic.co/t/processing-large-log-files-in-logstash-failing-with-jsonparsefailure-error/275077 "2021-06-07T00:54:06Z")
The setup is like this. We send the files from mainframe to logstash server through CFI(Tibco MFT) basically a file transfer. The log file have around 700k lines in it and it is in JSON format. This is what I think is ha… --- ## [Metricbeat CPU percent on Hyper-V Server](https://discuss.elastic.co/t/metricbeat-cpu-percent-on-hyper-v-server/275083)
**Author:** [@notrix](https://discuss.elastic.co/u/notrix)\ **Replies:** 0\ **Last updated:** [June 6, 2021, 8:50pm UTC](https://discuss.elastic.co/t/metricbeat-cpu-percent-on-hyper-v-server/275083 "2021-06-06T20:50:37Z")
hey all, currently facing a problem with mericbeat on a Windows Server 2019 with Hyper-V role installed. This server is a pure virtualization server, hosting a lot of VMs. Using metricbeat 7.13.1 and have the following… --- ## [Logstash unable to Access AWS elasticsearch getting 403 role permissions seems fine](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059)
**Author:** [@Akhil\_Beeravalli05](https://discuss.elastic.co/u/Akhil_Beeravalli05)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 11:43am UTC](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059 "2021-06-06T11:43:34Z")
\[2021-06-06T08:38:50,640\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://search-xxxxxx-elasticsearch-n2wtsxzzf23iyifadn4mi2fmfy.us-ea… --- ## [How to determine how much volume is needed in an Elasticsearch cluster?](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054)
**Author:** [@Barani\_A](https://discuss.elastic.co/u/Barani_A)\ **Replies:** 3\ **Last updated:** [June 6, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054 "2021-06-06T14:43:36Z")
Hi All, I have to procure an elasticsearch cluster, part of it is to specify how much volume we would require in GB and how much the size can grow everyday. Is there any way I can calculate the volume needed? My use ca… --- ## [Master takes another cluster UUID when recovers](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026)
**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\ **Replies:** 6\ **Last updated:** [June 6, 2021, 11:30am UTC](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026 "2021-06-06T11:30:12Z")
Hello, I am running an Elasticsearch cluster on the Kubernetes cluster. My cluster has the following nodes. Master nodes : 3 Data nodes : 3 Client nodes : minimum 2(they can vary on autoscaling) My Data nodes have … --- ## [CLA signing issue](https://discuss.elastic.co/t/cla-signing-issue/275031)
**Author:** [@hmilkovi](https://discuss.elastic.co/u/hmilkovi)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 9:30am UTC](https://discuss.elastic.co/t/cla-signing-issue/275031 "2021-06-06T09:30:06Z")
Hi all, can please someone from Elastic team help to check CLA signing? First I noticed that I had different email in commits that I fixed in last commit of PR. PR: Handle RecursionError exception in perform\_request (… --- ## [How to use 'Terms' query to return value in my search order?](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052)
**Author:** [@sathiez](https://discuss.elastic.co/u/sathiez)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 7:22am UTC](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052 "2021-06-06T07:22:12Z")
My doc: {"local\_id" : 1654, "universal\_id" : 5412896 } { "local\_id" : 1657, "universal\_id" : 9658742 } { "local\_id" : 1658, "universal\_id" : 6325412 } My query : {"from": 0, "size": 10,"query": { "bool": { "must" : \[… --- ## [Elastic Search architecture](https://discuss.elastic.co/t/elastic-search-architecture/275046)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 5:28am UTC](https://discuss.elastic.co/t/elastic-search-architecture/275046 "2021-06-06T05:28:43Z")
Hi , can someone please share the architecture diagram of es and ELK stack. am interested to know, how the cluster is managed, how do we know when the node went down, data replication etc. it would be really helpful i… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1380) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1382)