# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1415

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1416

---

## [org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\<transport\_request\>\]](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-transport-request/271683)

<div class="topic-metadata">

**Author:** [@Sidharth\_Bhandari](https://discuss.elastic.co/u/Sidharth_Bhandari)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-transport-request/271683 "2021-05-14T13:46:20Z")

</div>

HI , i am getting this error org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\<transport\_request\>\] would be \[5331726724/4.9gb\], which is larger than the limit of \[5067151769/…

---

## [ES 7.7.1 -\> ES 7.12.0 WAND Performance Issue](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854)

<div class="topic-metadata">

**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 1:39pm UTC](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854 "2021-05-14T13:39:54Z")

</div>

Hello, I am upgrading an existing cluster from ES 7.7.1 (lucene 8.5.1) to ES 7.12.0 (lucene 8.8.0) and have hit a massive performance regression in basic match queries utilizing minimum should match. I believe this is…

---

## [Logstash started failing after making elasticsearch secure](https://discuss.elastic.co/t/logstash-started-failing-after-making-elasticsearch-secure/273020)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 1:18pm UTC](https://discuss.elastic.co/t/logstash-started-failing-after-making-elasticsearch-secure/273020 "2021-05-14T13:18:25Z")

</div>

Hi All , My elk cluster of one node was working fine. I tried to make it secure then elasticsearch and kibana are working fine , however logstash is not able to connect with elasticsearch. I have done below changes in …

---

## [Alerts and Actions, Log Treshold, Field not found](https://discuss.elastic.co/t/alerts-and-actions-log-treshold-field-not-found/272782)

<div class="topic-metadata">

**Author:** [@Debeste](https://discuss.elastic.co/u/Debeste)\
**Replies:** 1\
**Last updated:** [May 14, 2021, 1:13pm UTC](https://discuss.elastic.co/t/alerts-and-actions-log-treshold-field-not-found/272782 "2021-05-14T13:13:24Z")

</div>

Hi, I want to use the Alerts and Actions feature, to create a Log treshold alert on the field "cluster\_state.status". Which is a standard field used to monitor the cluster status. This field is not available in the dro…

---

## [Rename filed value with pattern](https://discuss.elastic.co/t/rename-filed-value-with-pattern/273015)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 1:08pm UTC](https://discuss.elastic.co/t/rename-filed-value-with-pattern/273015 "2021-05-14T13:08:46Z")

</div>

I hear I can rename the value in index pattern, but I cannot find this. I can only change the type. eg. from number to string. Now I need to change value itself. eg. product\_shoes --\> shoes ..and so on

---

## [The results of the stress tests for Bool query combine filter were abnormal](https://discuss.elastic.co/t/the-results-of-the-stress-tests-for-bool-query-combine-filter-were-abnormal/272893)

<div class="topic-metadata">

**Author:** [@Lijian\_Liao](https://discuss.elastic.co/u/Lijian_Liao)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 12:54pm UTC](https://discuss.elastic.co/t/the-results-of-the-stress-tests-for-bool-query-combine-filter-were-abnormal/272893 "2021-05-14T12:54:31Z")

</div>

I used rally to do stress tests , and i found one of the result was abnormal.I was confused .The query combined filter 's latency and service time was higher so much than must . I think filter should be more efficien…

---

## [Yarn kbn bootstrap failing for dev local environment](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-dev-local-environment/272983)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 5\
**Last updated:** [May 14, 2021, 12:11pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-dev-local-environment/272983 "2021-05-14T12:11:52Z")

</div>

Hi Team, I am trying to run localhost:5600 (kibana) in the development environment. Node version: v10.23.1 Kibana Version: 7.10.2 Windows: 10 (64) Steps followed: Downloaded kibana zip file from GitHub Extracted z…

---

## [Filter with exists and value: null](https://discuss.elastic.co/t/filter-with-exists-and-value-null/272990)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 9:46am UTC](https://discuss.elastic.co/t/filter-with-exists-and-value-null/272990 "2021-05-14T09:46:05Z")

</div>

I am trying to make a filter in Lens field: exists does not take in count fields that have value null ie. I am trying to only check for the key How can I achieve this?

---

## [Style guide for Kibana: text (e.g. capitalization) and graphical (e.g. layout)?](https://discuss.elastic.co/t/style-guide-for-kibana-text-e-g-capitalization-and-graphical-e-g-layout/272985)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 1\
**Last updated:** [May 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/style-guide-for-kibana-text-e-g-capitalization-and-graphical-e-g-layout/272985 "2021-05-14T09:23:22Z")

</div>

Does Elastic have its own in-house style guide for Kibana dashboards? For example, for saved object names, panel titles, axis labels, series names (e.g. capitalization)? And/or recommendations for users? I develop docum…

---

## [Logstash import date](https://discuss.elastic.co/t/logstash-import-date/272992)

<div class="topic-metadata">

**Author:** [@nikssssss](https://discuss.elastic.co/u/nikssssss)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 8:30am UTC](https://discuss.elastic.co/t/logstash-import-date/272992 "2021-05-14T08:30:02Z")

</div>

hello, i want to pass a field ("datetime") as date with this format 1/19/21 12:00 so i add in the conf file the following : date { match =\> \["datetime", "MM/dd/yy HH:mm"\] target =\> "Dateread" …

---

## [Elasticsearch output for filebeat to get only nginx logs](https://discuss.elastic.co/t/elasticsearch-output-for-filebeat-to-get-only-nginx-logs/272802)

<div class="topic-metadata">

**Author:** [@Sandeep4](https://discuss.elastic.co/u/Sandeep4)\
**Replies:** 0\
**Last updated:** [May 12, 2021, 11:41am UTC](https://discuss.elastic.co/t/elasticsearch-output-for-filebeat-to-get-only-nginx-logs/272802 "2021-05-12T11:41:12Z")

</div>

Hi Everyone, Currently I see all kinds of logs in default logstash index, I have to channelize only nginx logs from filebeat to elastic search. Tried by enabling nginx module, but that did not change anything. Do we h…

---

## [Sonarqube code coverage for custom plugins](https://discuss.elastic.co/t/sonarqube-code-coverage-for-custom-plugins/272624)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 7:31am UTC](https://discuss.elastic.co/t/sonarqube-code-coverage-for-custom-plugins/272624 "2021-05-14T07:31:52Z")

</div>

Hello Team, I am trying to understand if we can use sonarqube like tools for code coverage of the custom kibana plugins. Are there is suggested frameworks or tools for Kibana. Thanks for your help and support. Aditya

---

## [Clean up dashboard](https://discuss.elastic.co/t/clean-up-dashboard/272805)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 7:15am UTC](https://discuss.elastic.co/t/clean-up-dashboard/272805 "2021-05-14T07:15:51Z")

</div>

I created read only user role, where I try restrict as much access as possible. However, even if there is no access to adding data, the links are still there. Also "news" from Elastic cloud and other extra highly disturb…

---

## [Can a transform recalculate if old documents update their values?](https://discuss.elastic.co/t/can-a-transform-recalculate-if-old-documents-update-their-values/272954)

<div class="topic-metadata">

**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 6:51am UTC](https://discuss.elastic.co/t/can-a-transform-recalculate-if-old-documents-update-their-values/272954 "2021-05-14T06:51:44Z")

</div>

Hi all! I have an index that contains millions of documents that have this structure: { id: abc87452 timestamp: 2021-05-13T12:45:13Z client : company\_X value : $ 10000 transaction\_status : authorized } So, I hav…

---

## [GlobalCheckpoint syncer only syncs translog when the translog durability is REQUEST](https://discuss.elastic.co/t/globalcheckpoint-syncer-only-syncs-translog-when-the-translog-durability-is-request/272468)

<div class="topic-metadata">

**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 6:44am UTC](https://discuss.elastic.co/t/globalcheckpoint-syncer-only-syncs-translog-when-the-translog-durability-is-request/272468 "2021-05-14T06:44:15Z")

</div>

Elasticsearch version: 7.10 Currently, IndexShard.maybeSyncGlobalCheckpoint is called in two places: In the AsyncGlobalCheckpointTask of IndexService; In the TransportReplicationAction after a write action. In IndexS…

---

## [Insert and Update records in Elasticsearch](https://discuss.elastic.co/t/insert-and-update-records-in-elasticsearch/271459)

<div class="topic-metadata">

**Author:** [@Thamini\_NellaiKumar](https://discuss.elastic.co/u/Thamini_NellaiKumar)\
**Replies:** 6\
**Last updated:** [May 14, 2021, 2:12am UTC](https://discuss.elastic.co/t/insert-and-update-records-in-elasticsearch/271459 "2021-05-14T02:12:22Z")

</div>

Hi, I am looping through each record in elasticsearch and inserting the new records and updating the existing records. Say for example, i have a csv file which has 5000 records, only few are updated in the index and the…

---

## [None of the configured nodes are available](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935)

<div class="topic-metadata">

**Author:** [@111474](https://discuss.elastic.co/u/111474)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 1:39am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935 "2021-05-14T01:39:01Z")

</div>

I launch spring boot app that should connect with elasticsearch 5.6.1 on macos catalina with globally installed java 14 . Elasticsearch 5.6.1 run as docker container via next command : docker run -d --rm --name elastic…

---

## [How to get variable names in nested JSON format](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 4\
**Last updated:** [May 14, 2021, 1:31am UTC](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768 "2021-05-14T01:31:48Z")

</div>

I am using a JSON plugin to parse logs in JSON format. Eventually, the nested variable names are retrieved along with their parent names. How can I simply get just the variable names? target log: ... snip ... {... sn…

---

## [Scripted field cannot cast from String to Double](https://discuss.elastic.co/t/scripted-field-cannot-cast-from-string-to-double/272967)

<div class="topic-metadata">

**Author:** [@Matt\_Klaver](https://discuss.elastic.co/u/Matt_Klaver)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 10:42pm UTC](https://discuss.elastic.co/t/scripted-field-cannot-cast-from-string-to-double/272967 "2021-05-13T22:42:38Z")

</div>

I'm trying to do some scripting on a field we have... when I preview the results it works fine, but when I go to "Discover" I get the following error: \[class\_cast\_exception\] class\_cast\_exception: Cannot cast from \[java.l…

---

## [Search-ui components using Angular](https://discuss.elastic.co/t/search-ui-components-using-angular/272965)

<div class="topic-metadata">

**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 10:27pm UTC](https://discuss.elastic.co/t/search-ui-components-using-angular/272965 "2021-05-13T22:27:41Z")

</div>

How can we build a elastic-ui components using Angular? The docs Libraries for developing modern search experiences | Elastic mention: The underlying library powering Search UI can be used with any JavaScript framework…

---

## [Standalone cluster in Kibana stack monitoring page](https://discuss.elastic.co/t/standalone-cluster-in-kibana-stack-monitoring-page/272960)

<div class="topic-metadata">

**Author:** [@Tyler1](https://discuss.elastic.co/u/Tyler1)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 9:27pm UTC](https://discuss.elastic.co/t/standalone-cluster-in-kibana-stack-monitoring-page/272960 "2021-05-13T21:27:13Z")

</div>

How do I get rid of standalone cluster on kibana stack monitoring page which lists logstash nodes that are also showing metricbeat stats under their own production clusters on same monitoring page anyway. I tried added m…

---

## [Differences in values between Dev Tools SQL and Visualization](https://discuss.elastic.co/t/differences-in-values-between-dev-tools-sql-and-visualization/272955)

<div class="topic-metadata">

**Author:** [@Christopher\_Mello](https://discuss.elastic.co/u/Christopher_Mello)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 9:44pm UTC](https://discuss.elastic.co/t/differences-in-values-between-dev-tools-sql-and-visualization/272955 "2021-05-13T21:44:57Z")

</div>

Hi all, I am new to elasticsearch/kibana but am having issues matching out the figures between two seemingly similar queries in the Kibana's Dev Tools SQL function and Kibana's visualization tool. The figures are extrem…

---

## [Custom Plugin fails yarn start with addition of package.json in v7.9.3](https://discuss.elastic.co/t/custom-plugin-fails-yarn-start-with-addition-of-package-json-in-v7-9-3/271421)

<div class="topic-metadata">

**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 9:33pm UTC](https://discuss.elastic.co/t/custom-plugin-fails-yarn-start-with-addition-of-package-json-in-v7-9-3/271421 "2021-05-13T21:33:48Z")

</div>

Hi, I have a custom plugin that I modeled after "node scripts/generate\_plugin". I am trying to add a package.json file so I can build the plugin and the dependencies. But before I even get to the build, I get this error…

---

## [Setting up a multi-nodes cluster on a single machine ( 1 elasticsearch.yml file )](https://discuss.elastic.co/t/setting-up-a-multi-nodes-cluster-on-a-single-machine-1-elasticsearch-yml-file/272286)

<div class="topic-metadata">

**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\
**Replies:** 15\
**Last updated:** [May 13, 2021, 9:02pm UTC](https://discuss.elastic.co/t/setting-up-a-multi-nodes-cluster-on-a-single-machine-1-elasticsearch-yml-file/272286 "2021-05-13T21:02:04Z")

</div>

I have been using elasticsearch for development on my local machine and managed to setup a 3 nodes cluster by starting each node with the following command: elasticsearch -Epath.data=data1 -Epath.logs=log1 -Enode.name=n…

---

## [HearBeat monitor throwing IP SANS error](https://discuss.elastic.co/t/hearbeat-monitor-throwing-ip-sans-error/272916)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 8:17pm UTC](https://discuss.elastic.co/t/hearbeat-monitor-throwing-ip-sans-error/272916 "2021-05-13T20:17:41Z")

</div>

Hi All, I am trying to implement hearbeat monitor for one of my application and I am getting below error. I have done below configuration - type: http # List or urls to query urls: \["https://x.x.x.x:9090"\] # Co…

---

## [Time filter not working properly](https://discuss.elastic.co/t/time-filter-not-working-properly/272440)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 14\
**Last updated:** [May 13, 2021, 7:35pm UTC](https://discuss.elastic.co/t/time-filter-not-working-properly/272440 "2021-05-13T19:35:14Z")

</div>

Hi, Running ELK 7.11.2 Standalone Running Winlogbeat 7.11.2 I have a visualization table that is filtering Windows events from Winlogbeat, to show only events with code 4625 "Failed account log on". This dashboard has…

---

## [HTTP load balancer for dedicated master nodes](https://discuss.elastic.co/t/http-load-balancer-for-dedicated-master-nodes/272947)

<div class="topic-metadata">

**Author:** [@kianm](https://discuss.elastic.co/u/kianm)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 7:31pm UTC](https://discuss.elastic.co/t/http-load-balancer-for-dedicated-master-nodes/272947 "2021-05-13T19:31:30Z")

</div>

Hello, I'm creating an Elasticsearch cluster on AWS EC2. I currently have: 1 kibana node 3 dedicated master nodes 5 data nodes These nodes are configured with the discovery-ec2 plugin which is working well. I am co…

---

## [Trying to install elastic search with Msi keep finding the same error when requesting password](https://discuss.elastic.co/t/trying-to-install-elastic-search-with-msi-keep-finding-the-same-error-when-requesting-password/272899)

<div class="topic-metadata">

**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 9:56am UTC](https://discuss.elastic.co/t/trying-to-install-elastic-search-with-msi-keep-finding-the-same-error-when-requesting-password/272899 "2021-05-13T09:56:31Z")

</div>

i looked for config file cant find it i downloaded using msi Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack security feature is enab…

---

## [Watcher email signature](https://discuss.elastic.co/t/watcher-email-signature/271074)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 6:17pm UTC](https://discuss.elastic.co/t/watcher-email-signature/271074 "2021-05-13T18:17:18Z")

</div>

Hi, its possible to edit the body of the Watcher email: This email is sent via a Watcher alert on an Elasticsearch Service hosted cluster. Your email address was previously whitelisted. To stop receiving any Watcher al…

---

## [Kabana Environment Variables Not Getting Set](https://discuss.elastic.co/t/kabana-environment-variables-not-getting-set/271305)

<div class="topic-metadata">

**Author:** [@cstewa20](https://discuss.elastic.co/u/cstewa20)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 6:07pm UTC](https://discuss.elastic.co/t/kabana-environment-variables-not-getting-set/271305 "2021-05-13T18:07:10Z")

</div>

I'm working on getting kibana to work; however, the environment variables are not getting set, not sure what I'm missing or why they would not be set: Here is the helm chart I'm working from: helm-charts/kibana at maste…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1414)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1416)
