# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1540 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1541 --- ## [Elasticsearch only binds to localhost but not IP / hostname / fqdn hostname - WHY?](https://discuss.elastic.co/t/elasticsearch-only-binds-to-localhost-but-not-ip-hostname-fqdn-hostname-why/265198)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 7\ **Last updated:** [February 23, 2021, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-only-binds-to-localhost-but-not-ip-hostname-fqdn-hostname-why/265198 "2021-02-23T12:20:55Z")
Hi there, I am wondering: build a multinode stack. On a stack I would llike to to a: curl -s -k -u elastic:changeme -XGET https://SOMETHING:9200/\_cat/health If SOMETHING is: 127.0.0.1 or localhost it works machine i… --- ## [Preventing SearchPhaseExecutionExceptions during rolling restart of cluster nodes](https://discuss.elastic.co/t/preventing-searchphaseexecutionexceptions-during-rolling-restart-of-cluster-nodes/265182)
**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 12:06pm UTC](https://discuss.elastic.co/t/preventing-searchphaseexecutionexceptions-during-rolling-restart-of-cluster-nodes/265182 "2021-02-23T12:06:18Z")
Several Scroll Search requests fail with SearchPhaseExecutionException around the time when there is a rolling restart of the nodes in the cluster(ES 6.8). These SearchPhaseExecution exception has an underlying cause tha… --- ## [Aggregation - Multiplication of multiple nested fields and sum](https://discuss.elastic.co/t/aggregation-multiplication-of-multiple-nested-fields-and-sum/265199)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 11:50am UTC](https://discuss.elastic.co/t/aggregation-multiplication-of-multiple-nested-fields-and-sum/265199 "2021-02-23T11:50:40Z")
Hi, Could you please help me to solve this problem. Really appreciate your help. I want to multiply and sum of two properties (or fields). One is from main object and another one is from nested object. History object c… --- ## [Heatmap - There are too many series defined](https://discuss.elastic.co/t/heatmap-there-are-too-many-series-defined/263265)
**Author:** [@jamie0691](https://discuss.elastic.co/u/jamie0691)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 11:22am UTC](https://discuss.elastic.co/t/heatmap-there-are-too-many-series-defined/263265 "2021-02-23T11:22:09Z")
Trying to create a heatmap and get the error - There are too many series defined. Having look on the GitHub this was fixed under https://github.com/elastic/kibana/pull/39578, I am running version 7.1.1 and the setting un… --- ## [Elasticsearch WARN : Failed to update shard information for ClusterInfoUpdateJob within 15s timeout](https://discuss.elastic.co/t/elasticsearch-warn-failed-to-update-shard-information-for-clusterinfoupdatejob-within-15s-timeout/265192)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 11:06am UTC](https://discuss.elastic.co/t/elasticsearch-warn-failed-to-update-shard-information-for-clusterinfoupdatejob-within-15s-timeout/265192 "2021-02-23T11:06:27Z")
Hi every one, i am running elasticsearch 7.10 on windows server 2016. elasticsearch installed as a service and worked well. but in elastic logs i see this warnings: \[2021-02-23T13:12:06,472\]\[WARN \]\[o.e.c.InternalCluste… --- ## [High availability of system indices: how-to mitigate system index failures](https://discuss.elastic.co/t/high-availability-of-system-indices-how-to-mitigate-system-index-failures/265082)
**Author:** [@bertr](https://discuss.elastic.co/u/bertr)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 10:23am UTC](https://discuss.elastic.co/t/high-availability-of-system-indices-how-to-mitigate-system-index-failures/265082 "2021-02-23T10:23:10Z")
I notice that system indices in Elasticsearch have "index.number\_of\_replicas": "0" and this cannot be updated. Is there a reason why this cannot be set to 1 (or more) and how safe is it to have no replicas for system ind… --- ## [Filter document with not null value in Kibana Discover. Should I use "exist", but it still return me docs with empty field](https://discuss.elastic.co/t/filter-document-with-not-null-value-in-kibana-discover-should-i-use-exist-but-it-still-return-me-docs-with-empty-field/265103)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 9:47am UTC](https://discuss.elastic.co/t/filter-document-with-not-null-value-in-kibana-discover-should-i-use-exist-but-it-still-return-me-docs-with-empty-field/265103 "2021-02-23T09:47:22Z")
Hi, I am trying to filter out field without "null/empty" value in Kibana, but when I try to use operator exist. THen it still show me docs without any value. Just wondering is there a way to filter only see documents wi… --- ## [Sorting based on scripted metrics aggregation](https://discuss.elastic.co/t/sorting-based-on-scripted-metrics-aggregation/262384)
**Author:** [@Abbass](https://discuss.elastic.co/u/Abbass)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 9:45am UTC](https://discuss.elastic.co/t/sorting-based-on-scripted-metrics-aggregation/262384 "2021-02-23T09:45:25Z")
Hello! I faced a limitation on sorting buckets of a term aggrigation, based on a scripted metrics sub aggregation values. This issue clearly states that it is not possible to do this in elasticsearch. However, i mana… --- ## [Limiting the time range filter](https://discuss.elastic.co/t/limiting-the-time-range-filter/265162)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 9:43am UTC](https://discuss.elastic.co/t/limiting-the-time-range-filter/265162 "2021-02-23T09:43:16Z")
Issue: I have set up a visual with data histogram on the x-axis. From time to time, it returns an error saying too many buckets. Possible solutions: Limit the time range filter to say the last week? month? year? in … --- ## [Error: A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/265101)
**Author:** [@jaispirit](https://discuss.elastic.co/u/jaispirit)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 9:37am UTC](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/265101 "2021-02-23T09:37:49Z")
I am running Elastick-Stack with Security on a single node successfully. I am trying to send logs from another instance with Filebeat to Logstash (Elastic-Stack) without success and receive following 2 errors: \[ERROR\]… --- ## [Elasticsearch terms query is very slow?](https://discuss.elastic.co/t/elasticsearch-terms-query-is-very-slow/265169)
**Author:** [@Karthick\_K](https://discuss.elastic.co/u/Karthick_K)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 9:24am UTC](https://discuss.elastic.co/t/elasticsearch-terms-query-is-very-slow/265169 "2021-02-23T09:24:25Z")
Elasticsearch cluster Master node : 1 (16cpus, 128GB RAM) - 32GB is allocated for HEAP Data nodes : 6 (each node 16cpus, 128GB RAM) - 32GB is allocated for HEAP for all nodes Indices : 9 Total documents : 48,826,456… --- ## [We cannot see the variables we want in the available field section](https://discuss.elastic.co/t/we-cannot-see-the-variables-we-want-in-the-available-field-section/265089)
**Author:** [@eceguzeell](https://discuss.elastic.co/u/eceguzeell)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 9:04am UTC](https://discuss.elastic.co/t/we-cannot-see-the-variables-we-want-in-the-available-field-section/265089 "2021-02-23T09:04:18Z")
We cannot see the variables we want in the available field section. I can see the logs I want in the Discover section. But I cannot see all of these logs while designing graphics in the dashboard. E.g; The log example … --- ## [Query to return a result set bounded by a fixed number of zeros (no rainfall)](https://discuss.elastic.co/t/query-to-return-a-result-set-bounded-by-a-fixed-number-of-zeros-no-rainfall/264992)
**Author:** [@rosselton](https://discuss.elastic.co/u/rosselton)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 9:03am UTC](https://discuss.elastic.co/t/query-to-return-a-result-set-bounded-by-a-fixed-number-of-zeros-no-rainfall/264992 "2021-02-23T09:03:05Z")
I'm using ES to store rainfall data from a weather API that updates every 10 minutes. I'm trying to write a query to return a set of records where a spell of dry weather ( 30 consecutive rain values in the range of 0 to … --- ## [Update items in a rolled-over index](https://discuss.elastic.co/t/update-items-in-a-rolled-over-index/265087)
**Author:** [@Jorge\_Ruiz](https://discuss.elastic.co/u/Jorge_Ruiz)\ **Replies:** 6\ **Last updated:** [February 23, 2021, 8:37am UTC](https://discuss.elastic.co/t/update-items-in-a-rolled-over-index/265087 "2021-02-23T08:37:51Z")
Hi there! A quick and simple question related to rolled-over indexes. Is it a good approach to have a rollover index if, eventually, we want to update items that belong to an already completed index (rolled-over)? As f… --- ## [Terminate\_after with aggregation](https://discuss.elastic.co/t/terminate-after-with-aggregation/265179)
**Author:** [@dobkum](https://discuss.elastic.co/u/dobkum)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 8:32am UTC](https://discuss.elastic.co/t/terminate-after-with-aggregation/265179 "2021-02-23T08:32:52Z")
I want to know how aggregation behaves when combined with terminate\_after. Is it that first the aggregations are performed from records belonging to all shards and then terminate\_after setting are applied or first the… --- ## [Transformed index is missing data](https://discuss.elastic.co/t/transformed-index-is-missing-data/264725)
**Author:** [@kazuki](https://discuss.elastic.co/u/kazuki)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 8:20am UTC](https://discuss.elastic.co/t/transformed-index-is-missing-data/264725 "2021-02-23T08:20:53Z")
We have a transform that creates aggregation based on userId and clientID from a source index and write to a destination index. We've noticed the destination index is missing data it should have even after waiting 10+ mi… --- ## [Memory lock check on Elastic Cloud](https://discuss.elastic.co/t/memory-lock-check-on-elastic-cloud/264867)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 7\ **Last updated:** [February 23, 2021, 7:41am UTC](https://discuss.elastic.co/t/memory-lock-check-on-elastic-cloud/264867 "2021-02-23T07:41:52Z")
I'm curious how it is possible that a cluster on Elastic Cloud passes the memory lock bootstrap check even though the memory doesn't seem to be locked. Here is the mlockall state on all nodes GET \_nodes?filter\_path=\*\*.… --- ## [Beginner Questions - Interaction Filebeat and Modules and General Q](https://discuss.elastic.co/t/beginner-questions-interaction-filebeat-and-modules-and-general-q/265173)
**Author:** [@maxxlight](https://discuss.elastic.co/u/maxxlight)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 7:35am UTC](https://discuss.elastic.co/t/beginner-questions-interaction-filebeat-and-modules-and-general-q/265173 "2021-02-23T07:35:49Z")
Hey, im new to ELK Stack and installed a Linux Server with Filebeat, Logstash, Elastic and Kibana. I want to get the syslog and netflow Streams from Palo Alto FW / Cisco 2900 Series / WLAN and some more other Syslog D… --- ## [Filter issue with Logstash](https://discuss.elastic.co/t/filter-issue-with-logstash/265171)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 7:31am UTC](https://discuss.elastic.co/t/filter-issue-with-logstash/265171 "2021-02-23T07:31:54Z")
Hi, I recently added a filter to my logstash to change indexing for spesific indices(weekly, monthly etc.) The filter is this: filter { if \[retention\] == "weekly" { mutate { add\_field =\> { "\[@metadata\]… --- ## [How to config TLS/SSL on single node?](https://discuss.elastic.co/t/how-to-config-tls-ssl-on-single-node/265064)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 7:30am UTC](https://discuss.elastic.co/t/how-to-config-tls-ssl-on-single-node/265064 "2021-02-23T07:30:56Z")
Hi I use ELK 7.10 single node ( all ELK are installed on one OS) How to config TLS/SSL on single node? Should I do that and is it necessary? It is important to mention I access kibana and elastic from remote computer… --- ## [Filebeat kafka output hash.hash get negative partition cause stuck](https://discuss.elastic.co/t/filebeat-kafka-output-hash-hash-get-negative-partition-cause-stuck/265153)
**Author:** [@Vvv](https://discuss.elastic.co/u/Vvv)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 5:27am UTC](https://discuss.elastic.co/t/filebeat-kafka-output-hash-hash-get-negative-partition-cause-stuck/265153 "2021-02-23T05:27:58Z")
Summarry I use filebeat to collect logs and output to kafka. Due to partition.hash.hash config hash message then mod to select partition, in some situation, this may cause filebeat stuck, e.g.: massage: 2304669687 hash… --- ## [Problem with xpack maps app when configured document layer with remote index pattern](https://discuss.elastic.co/t/problem-with-xpack-maps-app-when-configured-document-layer-with-remote-index-pattern/264426)
**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 6:05am UTC](https://discuss.elastic.co/t/problem-with-xpack-maps-app-when-configured-document-layer-with-remote-index-pattern/264426 "2021-02-23T06:05:32Z")
I am trying to configure a document layer with an index pattern which is in remote cluster. I am getting below exception. Unable to fetch index settings for index pattern '\'. Ensure you ha… --- ## [Kafka output with SASL\_SSL authentication -- message to topic failed](https://discuss.elastic.co/t/kafka-output-with-sasl-ssl-authentication-message-to-topic-failed/265156)
**Author:** [@Abhijit\_Talukdar](https://discuss.elastic.co/u/Abhijit_Talukdar)\ **Replies:** 0\ **Last updated:** [February 23, 2021, 5:57am UTC](https://discuss.elastic.co/t/kafka-output-with-sasl-ssl-authentication-message-to-topic-failed/265156 "2021-02-23T05:57:06Z")
Connection established 2021-02-23T04:37:47.565Z INFO \[publisher\_pipeline\_output\] pipeline/output.go:143 Connecting to kafka(xxxxxxxxxxxxxxxxxxxxxxxxx:9093,yyyyyyyyyyyyyyyyyyyyyyyyy:9093,zzzzzzzzzzzzzzzzzz… --- ## [Problem With parsing mikrotik log](https://discuss.elastic.co/t/problem-with-parsing-mikrotik-log/264977)
**Author:** [@asan](https://discuss.elastic.co/u/asan)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 5:17am UTC](https://discuss.elastic.co/t/problem-with-parsing-mikrotik-log/264977 "2021-02-23T05:17:08Z")
Hi i've been trying to normalize mikrotik log with grok in logstash and my sample log is : Feb 20 04:38:02 192.168.202.101 id=firewall sn=C0EAE45CA55 time="2021-02-20 12:54:43" fw=188.126.145.3 pri=6 c=1 m=911 msg="A… --- ## [Java high-level REST client fails to connect over https](https://discuss.elastic.co/t/java-high-level-rest-client-fails-to-connect-over-https/264911)
**Author:** [@shivkumar.chelwa](https://discuss.elastic.co/u/shivkumar.chelwa)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 3:44am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-fails-to-connect-over-https/264911 "2021-02-23T03:44:10Z")
Hi, I am trying to connect Elastic over https using high-level REST client. But the clients fails with below exception. java.io.IOException: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter m… --- ## [Permissions on $ES\_HOME](https://discuss.elastic.co/t/permissions-on-es-home/265142)
**Author:** [@zellamsee](https://discuss.elastic.co/u/zellamsee)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 2:19am UTC](https://discuss.elastic.co/t/permissions-on-es-home/265142 "2021-02-23T02:19:07Z")
Hello, We've installed the elasticsearch on linux via the .tar.gz archive. I was wondering what the permissions on this $ES\_HOME directory and it's subdirectories are suppose to be? I have set up and elasticsearch us… --- ## [Logstash iterate through loop](https://discuss.elastic.co/t/logstash-iterate-through-loop/265092)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 4\ **Last updated:** [February 23, 2021, 2:12am UTC](https://discuss.elastic.co/t/logstash-iterate-through-loop/265092 "2021-02-23T02:12:16Z")
if \[field2\] == 10 { mutate { replace =\> { "field2" =\> "1" } } } if \[field2\] == 11 { mutate { replace =\> { "field2" =\> "2" } } } if \[field2\] == 12 { mutate { replace =\> { "field2" =\> "3" } } } I h… --- ## [Kibana Plugin detect Dark Mode on New Platform](https://discuss.elastic.co/t/kibana-plugin-detect-dark-mode-on-new-platform/264924)
**Author:** [@npm\_install](https://discuss.elastic.co/u/npm_install)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 2:03am UTC](https://discuss.elastic.co/t/kibana-plugin-detect-dark-mode-on-new-platform/264924 "2021-02-23T02:03:52Z")
Hi I have a Kibana Plugin that I have installed on my Kibana instance, but it is in light mode while the rest of the instance is in dark mode. I have tried to find information on retrieving the dark mode setting config,… --- ## [Logstash](https://discuss.elastic.co/t/logstash/265052)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 12:58am UTC](https://discuss.elastic.co/t/logstash/265052 "2021-02-23T00:58:49Z")
Hi All {"log":"abc","system":"ABC","country":"India","ids":\["111222","22233344"\]} logtag= event.get('system') --\> value getting as ABC itemIds = event.get('ids') --\> Not getting How can we take a String array value? --- ## [How to watch the watchers?](https://discuss.elastic.co/t/how-to-watch-the-watchers/265084)
**Author:** [@anmmok](https://discuss.elastic.co/u/anmmok)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 12:50am UTC](https://discuss.elastic.co/t/how-to-watch-the-watchers/265084 "2021-02-23T00:50:36Z")
Is there a simple way to create a kind of dashboard or simple an index to track the execution history of the watchers as well as the watcher setup? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1539) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1541)