# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1523

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1524

---

## [Annotations and notification](https://discuss.elastic.co/t/annotations-and-notification/266283)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:09pm UTC](https://discuss.elastic.co/t/annotations-and-notification/266283 "2021-03-04T21:09:06Z")

</div>

Annotation due having opened dashboard can somehow make notification, like sound or something?

---

## [Condition format for pipelines in Kibana](https://discuss.elastic.co/t/condition-format-for-pipelines-in-kibana/265985)

<div class="topic-metadata">

**Author:** [@maria\_k](https://discuss.elastic.co/u/maria_k)\
**Replies:** 0\
**Last updated:** [March 2, 2021, 4:34pm UTC](https://discuss.elastic.co/t/condition-format-for-pipelines-in-kibana/265985 "2021-03-02T16:34:43Z")

</div>

Hi! I'm trying to create a pipeline in Kibana (Stack Management -\> Ingest Node pipelines). I'm creating the pipeline with JSON processor, and it works well until I'm adding a condition to it. I've got error when I trie…

---

## [Error while generating a kibana(7.11.1) plugin](https://discuss.elastic.co/t/error-while-generating-a-kibana-7-11-1-plugin/265935)

<div class="topic-metadata">

**Author:** [@Saurabh\_Patil](https://discuss.elastic.co/u/Saurabh_Patil)\
**Replies:** 5\
**Last updated:** [March 4, 2021, 8:58pm UTC](https://discuss.elastic.co/t/error-while-generating-a-kibana-7-11-1-plugin/265935 "2021-03-04T20:58:01Z")

</div>

Hello, I am trying to create a custom kibana, I am following the steps. I have downloaded the kibana-master as zip. I have yarn installed on my system also node.js(14.16.0) as per kibana requirements. When I am runni…

---

## [Drilldowns on TSVB](https://discuss.elastic.co/t/drilldowns-on-tsvb/266259)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 8:57pm UTC](https://discuss.elastic.co/t/drilldowns-on-tsvb/266259 "2021-03-04T20:57:38Z")

</div>

How use drilldowns on TSVB visualization? I created drilldown to another dashboard and I have no idea how use it, how jump to this another dashboard?

---

## [Adnnotations on TSVB](https://discuss.elastic.co/t/adnnotations-on-tsvb/266265)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 3\
**Last updated:** [March 4, 2021, 8:27pm UTC](https://discuss.elastic.co/t/adnnotations-on-tsvb/266265 "2021-03-04T20:27:24Z")

</div>

Can I change order on adnnotaions on TSVB? Sometimes when I have 2 notifications at the same time I cant see details on one of them. This is not possible somehow to make order? Do I need manually change all adnnotations …

---

## [Version Conflict Engine Exception](https://discuss.elastic.co/t/version-conflict-engine-exception/266286)

<div class="topic-metadata">

**Author:** [@edubcn](https://discuss.elastic.co/u/edubcn)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 8:13pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception/266286 "2021-03-04T20:13:15Z")

</div>

Hi. It is the first time I am using Elastic Search technology and I don't know how to face the following issue. \[6c48d578-2f5f-4d7c-9cd1-2dd356906801\_application\_unique\_id/B8Q4QxraQSW026dKuKd8Jg\]\[\[6c48d578-2f5f-4d7c-9c…

---

## [Duplicate node on Kibana UI with elasticsearch 6.8.10](https://discuss.elastic.co/t/duplicate-node-on-kibana-ui-with-elasticsearch-6-8-10/266210)

<div class="topic-metadata">

**Author:** [@Guneetbh](https://discuss.elastic.co/u/Guneetbh)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 7:31pm UTC](https://discuss.elastic.co/t/duplicate-node-on-kibana-ui-with-elasticsearch-6-8-10/266210 "2021-03-04T19:31:06Z")

</div>

Kibana UI is showing duplicate node with status offline, when the elasticsearch 6.8.10 node restarted. It disappeared after 30 mins and new one came online, started copying shards from 0. There is warning in logs- 20…

---

## [Interpolation in string should be happening but isn't](https://discuss.elastic.co/t/interpolation-in-string-should-be-happening-but-isnt/266275)

<div class="topic-metadata">

**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 6:59pm UTC](https://discuss.elastic.co/t/interpolation-in-string-should-be-happening-but-isnt/266275 "2021-03-04T18:59:22Z")

</div>

I have the following document that went through logstash (v7.10.2): and message was constructed with the snippet: mutate { add\_field =\> { "message" =\> "%{\[http\]\[request\]\[method\]} %{\[url\]\[domain\]}%{\[url\]\[ori…

---

## [Logstash CSV filter - \_dateparsefailure from string to date](https://discuss.elastic.co/t/logstash-csv-filter-dateparsefailure-from-string-to-date/266189)

<div class="topic-metadata">

**Author:** [@pmaganti](https://discuss.elastic.co/u/pmaganti)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 6:06pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-dateparsefailure-from-string-to-date/266189 "2021-03-04T18:06:57Z")

</div>

Hello, I am trying to set a field from CSV as @timestamp and is failing with a tag \_dateparsefailure. Following is the config. input { beats { port =\> 5044 } } filter { csv { separator =\> "," autodet…

---

## [How to get Fleet Agent to use CA Cert w/ Elasticsearch?](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238)

<div class="topic-metadata">

**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\
**Replies:** 3\
**Last updated:** [March 4, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238 "2021-03-04T17:45:49Z")

</div>

I'm trying to get logs sent to my Elasticsearch instance w/ Elastic Cloud Enterprise (Self Hosted), and i'm seeing the following error in the logs: {"file.name":"pipeline/output.go","file.line":154},"message":"Failed t…

---

## [Problems changing @timestamp value](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009)

<div class="topic-metadata">

**Author:** [@tstrul](https://discuss.elastic.co/u/tstrul)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 4:48pm UTC](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009 "2021-03-04T16:48:03Z")

</div>

Hi all, Im working on moving cloudfront real-time logs from kinessis to our ELK stack using functionbeat. I'm trying to convert logs timestamp (unix format) to regular date and use it in @timestemp field. unfortunatel…

---

## [Dealing with multiple number of values from the same input - Logstash](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 4:27pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101 "2021-03-04T16:27:41Z")

</div>

I have recently started using Logstash so still new at this. The use-case I am working on is that I want to ship a log file with Logstash that has different lengths of lines in it. The length of line (the number of attri…

---

## [How to Copy Elasticsearch Volume Data into Another Server Machine](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 4:22pm UTC](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262 "2021-03-04T16:22:47Z")

</div>

Hi All, Below is the content which i have to copy that data of ES which is having more than 4GB root@server ~ # du -sh /var/lib/docker/volumes/uat\_esdata/\_data/ 4.1G /var/lib/docker/volumes/uat\_esdata/\_data/ root@serve…

---

## [Failed to set monitoring pipeline \[xpack\_monitoring\_2\] And process cluster event (put-pipeline-xpack\_monitoring\_2)](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 12\
**Last updated:** [March 4, 2021, 4:13pm UTC](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754 "2021-03-04T16:13:36Z")

</div>

Hi All, Below is the Error im getting in Elasticsearch container logs 'failed to set monitoring pipeline \[xpack\_monitoring\_2\] Org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process c…

---

## [Is date\_nanos supported in Logs UI](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 3:53pm UTC](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863 "2021-03-04T15:53:28Z")

</div>

Is date\_nanos supported in the logs UI? It doesn't seem like it.

---

## [How can I stream data from ES to Azure Blob (not snapshot)?](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240)

<div class="topic-metadata">

**Author:** [@Andrei\_Budaes-Tanaru](https://discuss.elastic.co/u/Andrei_Budaes-Tanaru)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240 "2021-03-04T14:24:22Z")

</div>

Hi Guys, My company is using Elasticsearch for one of our projects to collect event data from an app. As the number of users increased on the app so did the analytics needs. We are keeping data in for about 3 months for…

---

## [Elasticsearch,yaml](https://discuss.elastic.co/t/elasticsearch-yaml/266247)

<div class="topic-metadata">

**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-yaml/266247 "2021-03-04T14:14:33Z")

</div>

I am using managed elasticsearch on AWS. I want to edit some configuration in elasticsearch.yaml file. Can anyone suggest where is Elastiucsearch.yaml is located?

---

## [I cannot load kibana from browser and got different errors when reloading it](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236)

<div class="topic-metadata">

**Author:** [@Zhifei](https://discuss.elastic.co/u/Zhifei)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 12:32pm UTC](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236 "2021-03-04T12:32:34Z")

</div>

I cannot load kibana from browser, sometimes I got the following error when reloading kibana: {"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\<ht…

---

## [Nodejs Elastic Client Setup is not working](https://discuss.elastic.co/t/nodejs-elastic-client-setup-is-not-working/266233)

<div class="topic-metadata">

**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 12:25pm UTC](https://discuss.elastic.co/t/nodejs-elastic-client-setup-is-not-working/266233 "2021-03-04T12:25:33Z")

</div>

I have setup elastic using eck guide this is working fine. i was able to run logstash by importing certificates. now im trying to write a nodejs api project to use my elastic search. trying some examples from docs const…

---

## [Not able to copy from field data1 to field data2 in an existing index in ES](https://discuss.elastic.co/t/not-able-to-copy-from-field-data1-to-field-data2-in-an-existing-index-in-es/266224)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 12:24pm UTC](https://discuss.elastic.co/t/not-able-to-copy-from-field-data1-to-field-data2-in-an-existing-index-in-es/266224 "2021-03-04T12:24:00Z")

</div>

Hi all, I'm trying to copy data from field "updated" to "STATEMENT\_DATE". POST /test\_mycns\_com/\_update\_by\_query { { "query" : { "match\_all" : {} } }, "script" : { "source": "ctx.\_source.STATEMENT\_…

---

## [How to create multiple node in one cluster](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227)

<div class="topic-metadata">

**Author:** [@Moksedul\_Islam\_16](https://discuss.elastic.co/u/Moksedul_Islam_16)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227 "2021-03-04T11:40:32Z")

</div>

I have tried to create 3 nodes in my ES for "production", "development", "testing" using command: bin/elasticsearch -Epath.data=data1 -Epath.logs=log1 My elasticsearch.yml file located at admin:///etc/elasticsearch and…

---

## [Label an exact timestamp with event name](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685)

<div class="topic-metadata">

**Author:** [@jlbassereau](https://discuss.elastic.co/u/jlbassereau)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 11:06am UTC](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685 "2021-03-04T11:06:56Z")

</div>

Hello, I order to be able to compare metrics when a new version of application is installed, I would like to be able to label a precise timestamp as "version x of the app deployed" with a visible label on graphs. Is th…

---

## [Sometimes filebeat stops collecting/flushing events](https://discuss.elastic.co/t/sometimes-filebeat-stops-collecting-flushing-events/266187)

<div class="topic-metadata">

**Author:** [@M0rdecay](https://discuss.elastic.co/u/M0rdecay)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:17am UTC](https://discuss.elastic.co/t/sometimes-filebeat-stops-collecting-flushing-events/266187 "2021-03-04T10:17:34Z")

</div>

Hello! Please help me figure out the situation Sometimes Filebeat stops collecting/flushing events. On the graph, it looks like this: This does not look like a problem with one of the inputs, since events stop comin…

---

## [Geoip with GeoIP2-Connection-Type](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089)

<div class="topic-metadata">

**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 10:50am UTC](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089 "2021-03-03T10:50:11Z")

</div>

Hello I tried to use this DB for enrichment but it throws "Unsupported database type GeoIP2-Connection-Type" error Is there any chance this will be supported in the future? logstash config geoip { …

---

## [Elastic http securing: access denied ("java.io.FilePermission" "/etc/pki/tls/private" "read")](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 10:09am UTC](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202 "2021-03-04T10:09:41Z")

</div>

Hi Elastic 7.11.1 I am trying to secure http protcol. But I am getting 2021-03-04T11:15:13,050\]\[ERROR\]\[o.e.b.Bootstrap \] \[dev-dc2-rk\] Exception java.security.AccessControlException: access denied ("java.io.F…

---

## [Logstash tcp input error : Error in Netty pipeline: java.io.IOException: Connection reset by peer](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 9:58am UTC](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206 "2021-03-04T09:58:32Z")

</div>

Hi, I still couldn't find any answer to this issue. In our case, we are collecting logs from checkpoint. Anyone can help? Thanks.

---

## [Compiling elastic-agent for linux/mips64](https://discuss.elastic.co/t/compiling-elastic-agent-for-linux-mips64/266157)

<div class="topic-metadata">

**Author:** [@kn1ght0w1](https://discuss.elastic.co/u/kn1ght0w1)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:52am UTC](https://discuss.elastic.co/t/compiling-elastic-agent-for-linux-mips64/266157 "2021-03-04T09:52:23Z")

</div>

Hi All, I am trying to compile elastic-agent for linux/mips64 and I am getting a bit beyond myself. I cloned the GIT repo and ran the following to try and get it to compile: SNAPSHOT=true DEV=true PLATFORMS=linux/mips6…

---

## [Fit size of filebeat](https://discuss.elastic.co/t/fit-size-of-filebeat/266109)

<div class="topic-metadata">

**Author:** [@The\_Guaz](https://discuss.elastic.co/u/The_Guaz)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:38am UTC](https://discuss.elastic.co/t/fit-size-of-filebeat/266109 "2021-03-04T09:38:18Z")

</div>

Hi, Generally filebeat mapping creating a lot of unused fields in my elasticsearch environment. I wonder, because size of the logs are excessivelly large (around 5-6 GB per day). Can I somehow delete unused mapping from…

---

## [Filebeat autodiscover kubernetes appenders error](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-appenders-error/266108)

<div class="topic-metadata">

**Author:** [@QCU266](https://discuss.elastic.co/u/QCU266)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:37am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-appenders-error/266108 "2021-03-04T09:37:19Z")

</div>

I want to use appenders like @icoolchn , so I test @icoolchn 's configuration, but the filebeat reports the following error(filebeat version 7.9.3): 2021-03-02T12:28:24.673Z INFO instance/beat.go:456 filebeat stopped. 2…

---

## [Filebeat: failed FilterLogEventsRequestRequestCanceled](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097)

<div class="topic-metadata">

**Author:** [@vishwas\_rajput](https://discuss.elastic.co/u/vishwas_rajput)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097 "2021-03-04T09:36:42Z")

</div>

Hi, I am using Filebeat 7.11.1 to fetch CloudWatch logs using given configuration filebeat.inputs: - type: aws-cloudwatch log\_group\_arn: arn:aws:logs:XXX:XXX:\* log\_group\_name: /aws/ …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1522)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1524)
