# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1397 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1398 --- ## [GET \_nodes/stats in 7.13 includes large amount of potentially unwanted "clients" information by default](https://discuss.elastic.co/t/get-nodes-stats-in-7-13-includes-large-amount-of-potentially-unwanted-clients-information-by-default/274090)
**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 10:36pm UTC](https://discuss.elastic.co/t/get-nodes-stats-in-7-13-includes-large-amount-of-potentially-unwanted-clients-information-by-default/274090 "2021-05-26T22:36:16Z")
Having just upgraded our Elastic Cloud cluster from 7.12.1 to 7.13.0 we've found that GET \_nodes/stats now includes a fairly large chunk of data about "clients" which wasn't present before. This could be useful, but I'm … --- ## [GET \_snapshot/\_status returns 404 "repository\_missing\_exception" even though the repository exists and works](https://discuss.elastic.co/t/get-snapshot-status-returns-404-repository-missing-exception-even-though-the-repository-exists-and-works/274098)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 9:52pm UTC](https://discuss.elastic.co/t/get-snapshot-status-returns-404-repository-missing-exception-even-though-the-repository-exists-and-works/274098 "2021-05-26T21:52:13Z")
I'm using Elasticsearch 6.8.3 The reason I discovered this is because curator calls GET \_snapshot/\_status before it starts doing snapshots, and it is failing with a 404 response. I've confirmed that the response to tha… --- ## [How to Generate report with in kibana with kibana\_all\_read permission using Opendistro plugin](https://discuss.elastic.co/t/how-to-generate-report-with-in-kibana-with-kibana-all-read-permission-using-opendistro-plugin/274117)
**Author:** [@Dipesh0711192](https://discuss.elastic.co/u/Dipesh0711192)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 8:55pm UTC](https://discuss.elastic.co/t/how-to-generate-report-with-in-kibana-with-kibana-all-read-permission-using-opendistro-plugin/274117 "2021-05-26T20:55:08Z")
Hi, We have created Kibana user with read only permission using opendistro security plugin by adding kibana\_all\_read permission on specific tenant, but we are unable to save data to generate CSV report. is their any wa… --- ## [High Availability for Kibana Console application](https://discuss.elastic.co/t/high-availability-for-kibana-console-application/273751)
**Author:** [@ggio](https://discuss.elastic.co/u/ggio)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 8:27pm UTC](https://discuss.elastic.co/t/high-availability-for-kibana-console-application/273751 "2021-05-26T20:27:38Z")
Hi, Kibana currently can be configured to connect to multiple Elasticsearch nodes in the same cluster. I discovered that Console application is limited to connecting only on the first host defined in elasticsearch.host… --- ## [OS X Filebeats resend on reboot when registry device number changes](https://discuss.elastic.co/t/os-x-filebeats-resend-on-reboot-when-registry-device-number-changes/272949)
**Author:** [@psears](https://discuss.elastic.co/u/psears)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 8:24pm UTC](https://discuss.elastic.co/t/os-x-filebeats-resend-on-reboot-when-registry-device-number-changes/272949 "2021-05-26T20:24:29Z")
We have Macs sending install.log and system.log with filebeat and using the system module. Sometimes on reboot, they will resend everything in one of the log files (usually install.log, which doesn't change as often). Th… --- ## [Hard-Removing Elastic Endpoint](https://discuss.elastic.co/t/hard-removing-elastic-endpoint/274102)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 7:27pm UTC](https://discuss.elastic.co/t/hard-removing-elastic-endpoint/274102 "2021-05-26T19:27:42Z")
Hey, after an upgrade to 7.13 and the auto-removal of Kibana-builtin Fleet, i'm now cleaning up in order to re-install Elastic Agents. On Windows Hosts, I'm not able to remove Elastic Endpoint. Unenrolling the agent … --- ## [Auditbeat multiple hosts in one file](https://discuss.elastic.co/t/auditbeat-multiple-hosts-in-one-file/271769)
**Author:** [@Slaughter](https://discuss.elastic.co/u/Slaughter)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 7:11pm UTC](https://discuss.elastic.co/t/auditbeat-multiple-hosts-in-one-file/271769 "2021-05-26T19:11:16Z")
I'm not allowed to install beats on every server. I'm using audisp to send audit.log messages to a single host where auditbeat runs. Auditbeat is not using the hostname in the message. Everything is listed as coming f… --- ## [Elasticsearch 7.12.1](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 9\ **Last updated:** [May 26, 2021, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919 "2021-05-26T19:01:08Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since mar. 2021-05-25 12:38:45 CEST; 3s ago D… --- ## [Deleting old .reporting-\* index](https://discuss.elastic.co/t/deleting-old-reporting-index/273684)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:08pm UTC](https://discuss.elastic.co/t/deleting-old-reporting-index/273684 "2021-05-26T18:08:44Z")
Hello, It seems that the .reporting-\* index are created weekly but are not deleted, it is safe to delete it manually? When I create a report I delete it using the Kibana UI after the download, so there is no need to ke… --- ## [Making Logstash configurations dynamic](https://discuss.elastic.co/t/making-logstash-configurations-dynamic/274095)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 5:31pm UTC](https://discuss.elastic.co/t/making-logstash-configurations-dynamic/274095 "2021-05-26T17:31:34Z")
Is there a way to make Logstash configuration file dynamic by reading attribute names and types from a different text file (or any other input mechanism). To explain, if my logstash configuration file looks something li… --- ## [How to make EUI part of Kibana packages?](https://discuss.elastic.co/t/how-to-make-eui-part-of-kibana-packages/273569)
**Author:** [@danburi](https://discuss.elastic.co/u/danburi)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 5:08pm UTC](https://discuss.elastic.co/t/how-to-make-eui-part-of-kibana-packages/273569 "2021-05-26T17:08:14Z")
Hello, I'm running a development version of Kibana 7.10.2. Currently, I have a fork of EUI 29.3.2, with many custom components (eui/packages/) and themes (eui/src/themes). Ideally, I want to submodule this fork in kiba… --- ## [Kibana filters aggregation using "from" and "to" values from Time Picker](https://discuss.elastic.co/t/kibana-filters-aggregation-using-from-and-to-values-from-time-picker/273952)
**Author:** [@tnarciso](https://discuss.elastic.co/u/tnarciso)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 4:37pm UTC](https://discuss.elastic.co/t/kibana-filters-aggregation-using-from-and-to-values-from-time-picker/273952 "2021-05-26T16:37:44Z")
Hi! Is it possible to use the "from" and "to" values from the Time Picker in a filters aggregation with a date field? I know i can use fixed values like "now-7d" but i'd like to filter accordingly with the period selec… --- ## [Dashboard read only without credentials?](https://discuss.elastic.co/t/dashboard-read-only-without-credentials/274052)
**Author:** [@vicgb](https://discuss.elastic.co/u/vicgb)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 4:34pm UTC](https://discuss.elastic.co/t/dashboard-read-only-without-credentials/274052 "2021-05-26T16:34:50Z")
Hi everyone. I'm using Kibana and ES with Kubernetes in my own cluster. I would like to have an only read dashboard (accessible from outside) without having credentials. All I've read about that is about Roles and xpac… --- ## [Filebeat capacity](https://discuss.elastic.co/t/filebeat-capacity/274096)
**Author:** [@AJ18](https://discuss.elastic.co/u/AJ18)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-capacity/274096 "2021-05-26T16:29:36Z")
Hey Team Can anyone help me with what the capacity of a filebeat agent is and how much data it can support? I needed to get an idea of the size of the EC2 instance I should have on my AWS Account, and how many instance… --- ## [What is the best approach to combine multiple aggregations based in same key](https://discuss.elastic.co/t/what-is-the-best-approach-to-combine-multiple-aggregations-based-in-same-key/274094)
**Author:** [@jasl](https://discuss.elastic.co/u/jasl)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 4:28pm UTC](https://discuss.elastic.co/t/what-is-the-best-approach-to-combine-multiple-aggregations-based-in-same-key/274094 "2021-05-26T16:28:09Z")
This is the query I am playing with: { "aggs": { "by\_foo": { "terms": { "field": "foo.keyword", "size": 100, "exclude": \[ "Unknown" \] } }, "by\_bar": { … --- ## [Docker Compose for CRON job](https://discuss.elastic.co/t/docker-compose-for-cron-job/274087)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 3:33pm UTC](https://discuss.elastic.co/t/docker-compose-for-cron-job/274087 "2021-05-26T15:33:44Z")
We had a task to Create a docker file with ubuntu image Create a print.sh file which has code to print date and time Write a cron file named "hello-cron" which includes the print.sh to run for every 1 min. The docker i… --- ## [Logtash pid keeps changing](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073)
**Author:** [@cyberfence](https://discuss.elastic.co/u/cyberfence)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 3:17pm UTC](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073 "2021-05-26T15:17:54Z")
I am currently running ubuntu 18 server edition and the following is java / logstash version root@monitor:/usr/share/logstash/bin# ./logstash --version Using JAVA\_HOME defined java: /usr/lib/jvm/java-1.8.0-openjdk-amd6… --- ## [Granted documents query](https://discuss.elastic.co/t/granted-documents-query/274053)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 2:41pm UTC](https://discuss.elastic.co/t/granted-documents-query/274053 "2021-05-26T14:41:53Z")
Hello! How can I specify in a granted documents query that I want show only the documents that match with a service.name AND service.environment? I tried with the following query but I also saw other service.environmen… --- ## [SIngle URL for elastic cluster](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:18pm UTC](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062 "2021-05-26T14:18:13Z")
Hi, Can we create a single URL for elastic cluster if we have a cluster with 10 12 nodes so we can use a single URL in beats or logstash output. Regards, Bryce Fernandes. --- ## [Elastic search exclude few fields while reading](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065)
**Author:** [@whiletruelearn](https://discuss.elastic.co/u/whiletruelearn)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:11pm UTC](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065 "2021-05-26T14:11:55Z")
Hi, I am using elasticsearch spark connector and trying to use es.read.field.exclude to exclude reading two fields. In the documentation there is this example given es.read.field.exclude = company.income I have two … --- ## [Request handler being called every few seconds Kibana 7.10.2](https://discuss.elastic.co/t/request-handler-being-called-every-few-seconds-kibana-7-10-2/273873)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 1:57pm UTC](https://discuss.elastic.co/t/request-handler-being-called-every-few-seconds-kibana-7-10-2/273873 "2021-05-26T13:57:58Z")
I've been able to convert a few custom plugins from Kibana 7.5 to Kibana 7.10.2. However, I've noticed that my request handlers are being called every 6-7 seconds even when I'm not interacting with the page. Is this beha… --- ## [Custom CSS to render Markdown as dropdown menu that overlays other panels?](https://discuss.elastic.co/t/custom-css-to-render-markdown-as-dropdown-menu-that-overlays-other-panels/273489)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 1:29pm UTC](https://discuss.elastic.co/t/custom-css-to-render-markdown-as-dropdown-menu-that-overlays-other-panels/273489 "2021-05-26T13:29:42Z")
In the absence of a straightforward method for adding custom links to dashboards in the Kibana sidebar menu (I've created a feature request for this), I've been experimenting with custom CSS in a TSVB Markdown panel to i… --- ## [Java: cannot find symbol class RestHighLevelClient](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028)
**Author:** [@pinto](https://discuss.elastic.co/u/pinto)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 9:57am UTC](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028 "2021-05-26T09:57:42Z")
Following Java High Level REST Client Getting started documentation. Added to the POM.xml (in IntelliJ): \ ... \ \ \org.elasticsearch.client\ … --- ## [Multiple registries for filebeat](https://discuss.elastic.co/t/multiple-registries-for-filebeat/274061)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 1:19pm UTC](https://discuss.elastic.co/t/multiple-registries-for-filebeat/274061 "2021-05-26T13:19:50Z")
Hi, I wanted to know if we can have multiple registry files rather than one file having multiple values based on modules or something based on file paths. Regards, Bryce Fernandes. --- ## [Which node ip address should I specify in Multi-Node elasticsearch cluster to store data into an elasticsearch index?](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962 "2021-05-26T12:59:55Z")
Hii.I am creating a Multi-Node Elasticsearch Cluster.I will collect logs from different server's using filebeat and store them into an elasticsearch index.I am little bit confuse that which elasticsearch node ip address … --- ## [Filebeat hints-based autodiscover with \> 2 streams](https://discuss.elastic.co/t/filebeat-hints-based-autodiscover-with-2-streams/273976)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-hints-based-autodiscover-with-2-streams/273976 "2021-05-26T12:52:22Z")
I'm using hints-based autodiscover for filebeats deployed to a Kubernetes environment. Per the docs, I can direct different streams to different filesets, per the following example for nginx: co.elastic.logs/module: ngi… --- ## [Why number is not recognized as integer](https://discuss.elastic.co/t/why-number-is-not-recognized-as-integer/273917)
**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/why-number-is-not-recognized-as-integer/273917 "2021-05-26T12:23:58Z")
Hi Here is my sample data Madhya Pradesh;22.9734;78.6569;57766;764338;7558 Maharashtra;19.7515;75.7139;351005;5579897;88620 Manipur;24.6637;93.9063;6534;44089;688 Logstash considered the text and float but it doesn'… --- ## [Logstash in free version?](https://discuss.elastic.co/t/logstash-in-free-version/274050)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 12:13pm UTC](https://discuss.elastic.co/t/logstash-in-free-version/274050 "2021-05-26T12:13:57Z")
I got filebeat working with elastic search and kibana. Now i would like to get it working with logstash as an endpoint for filebeat. I'm using using a non clustered free version of ELK using no payed license. In such … --- ## [How to import data from 2 urls and with different index using http\_roller in logstash conf file](https://discuss.elastic.co/t/how-to-import-data-from-2-urls-and-with-different-index-using-http-roller-in-logstash-conf-file/274051)
**Author:** [@Tayfun\_UNAL](https://discuss.elastic.co/u/Tayfun_UNAL)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 11:57am UTC](https://discuss.elastic.co/t/how-to-import-data-from-2-urls-and-with-different-index-using-http-roller-in-logstash-conf-file/274051 "2021-05-26T11:57:45Z")
input { http\_poller { urls =\> { "1" =\> { type =\> "article" method =\> GET url =\> "https://personel.klu.edu.tr/elasticsearch/datasets/makale\_bilgisi.json" headers =\> { Accept =\> "application/… --- ## [Token filter reference](https://discuss.elastic.co/t/token-filter-reference/274048)
**Author:** [@Lucia\_Grodecka](https://discuss.elastic.co/u/Lucia_Grodecka)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 11:52am UTC](https://discuss.elastic.co/t/token-filter-reference/274048 "2021-05-26T11:52:48Z")
Hello. I can help with Token filter reference. I have a csv dataset that I loaded via machine learning. I work in Discover. I can write here a stemmer token filter, shingle and stop token. Where and what command to use?… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1396) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1398)