# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1550 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1551 --- ## [Issues with Elasticsearch Scroll API results](https://discuss.elastic.co/t/issues-with-elasticsearch-scroll-api-results/264581)
**Author:** [@samacker77elastic](https://discuss.elastic.co/u/samacker77elastic)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 1:30pm UTC](https://discuss.elastic.co/t/issues-with-elasticsearch-scroll-api-results/264581 "2021-02-17T13:30:30Z")
Hi everyone, I am trying to read documents from an index using the scroll API. The problem that I am facing is that, Kibana Discover shows the hits to be 195,867, but my code misses or skips 10,000 documents. I am not… --- ## [Issues filtering Elasticsearch logs in Docker with Modules](https://discuss.elastic.co/t/issues-filtering-elasticsearch-logs-in-docker-with-modules/263314)
**Author:** [@leosunmo](https://discuss.elastic.co/u/leosunmo)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 12:02am UTC](https://discuss.elastic.co/t/issues-filtering-elasticsearch-logs-in-docker-with-modules/263314 "2021-02-18T00:02:54Z")
Hey there, I'm running in to some matching issues when I'm trying to use the Elasticsearch Module with the Docker provider. I've followed this blog post on how to make it play nicely together somewhat. My issue is tha… --- ## [Why word\_delimiter doesn's work on my index?](https://discuss.elastic.co/t/why-word-delimiter-doesns-work-on-my-index/264624)
**Author:** [@andymov](https://discuss.elastic.co/u/andymov)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 11:28pm UTC](https://discuss.elastic.co/t/why-word-delimiter-doesns-work-on-my-index/264624 "2021-02-17T23:28:21Z")
Hi all! I need to search my products by codes like this one: "50-14Lx". I use word\_delimiter to tokenize "50-14Lx" to "50","14","Lx". But it doesn't work on my index. Index: PUT /products { "settings": {… --- ## [Where is watcher?](https://discuss.elastic.co/t/where-is-watcher/264627)
**Author:** [@A\_Chichi](https://discuss.elastic.co/u/A_Chichi)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 11:05pm UTC](https://discuss.elastic.co/t/where-is-watcher/264627 "2021-02-17T23:05:30Z")
Hello, I would like to add alert to my ES cluster (v7.11). I have the basic licence, so normally I have access to "Watcher" feature. I've checked this link : https://www.elastic.co/guide/en/kibana/current/watcher-ui.h… --- ## [Kibana Elasticsearch TLS does not work (alert and actions)](https://discuss.elastic.co/t/kibana-elasticsearch-tls-does-not-work-alert-and-actions/264367)
**Author:** [@swood](https://discuss.elastic.co/u/swood)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 10:16pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-tls-does-not-work-alert-and-actions/264367 "2021-02-17T22:16:02Z")
Hi, I have the same problem as someone had by the topic: Does it possible to investigate the reason why it doesn't work? Maybe some checklist or to run some command to identify which of the instruction point I don't im… --- ## [Elastic Cloud : Searchable snapshots requirements and howto?](https://discuss.elastic.co/t/elastic-cloud-searchable-snapshots-requirements-and-howto/264258)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 10:14pm UTC](https://discuss.elastic.co/t/elastic-cloud-searchable-snapshots-requirements-and-howto/264258 "2021-02-17T22:14:00Z")
Hi Folks, I've been trying to get searchable snapshots working on 7.11 and have tried the setting the cold phase to take a searchable snapshot (using the found-snapshots repo - this might be a mistake) but the actions n… --- ## [Kibana Fails due to Depreciation Warning](https://discuss.elastic.co/t/kibana-fails-due-to-depreciation-warning/264413)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-fails-due-to-depreciation-warning/264413 "2021-02-17T21:47:15Z")
I have installed kibana following the elastic guide and configured it to point to my two elastic node via elasticsearch.hosts: \["https://xx.xx.xx.xx:9200","https://xx.xx.xx.xx:9200"\]. The only other settings i've changed… --- ## [Is it wise to freeze rolled over index even though it will be heavily searched?](https://discuss.elastic.co/t/is-it-wise-to-freeze-rolled-over-index-even-though-it-will-be-heavily-searched/264050)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 6\ **Last updated:** [February 17, 2021, 9:23pm UTC](https://discuss.elastic.co/t/is-it-wise-to-freeze-rolled-over-index-even-though-it-will-be-heavily-searched/264050 "2021-02-17T21:23:31Z")
As the title stated. Since the queue size for frozen index is smaller, does it impact search significantly? We rolled over index that stores events as they come in. The roll over criterion is based on shard size. We … --- ## [Filebeat on ECK with AWS Module Fails Due To Metadata Error](https://discuss.elastic.co/t/filebeat-on-eck-with-aws-module-fails-due-to-metadata-error/264616)
**Author:** [@jgriffiths](https://discuss.elastic.co/u/jgriffiths)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 9:21pm UTC](https://discuss.elastic.co/t/filebeat-on-eck-with-aws-module-fails-due-to-metadata-error/264616 "2021-02-17T21:21:41Z")
We are running an Elastic Stack with ECK in EKS (7.8). We noticed that our filebeat daemonset and the AWS module were not processing logs from S3 and our SQS queues backing up. Looking at the logs on our FileBeat conta… --- ## [How is search.max\_buckets calculated? ES 7.5.0](https://discuss.elastic.co/t/how-is-search-max-buckets-calculated-es-7-5-0/264610)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 9:11pm UTC](https://discuss.elastic.co/t/how-is-search-max-buckets-calculated-es-7-5-0/264610 "2021-02-17T21:11:57Z")
I'm wondering how search.max\_buckets is calculated. I have a multilevel terms aggregation. We have 10,000 leaf node buckets. Do the parent buckets count as part of the 10,000 limit? --- ## [Machine learning permissions failure \[Kibana Security Menu\]](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 8:44pm UTC](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475 "2021-02-17T20:44:51Z")
Hi there, Clean install using apt repo and as soon as I try to access the security overview, it display this message: Machine learning permissions failure Not Found HttpFetchError@https://192.168.0.1:5601/37897/bundle… --- ## [Encryption for hosted Elasticsearch instance](https://discuss.elastic.co/t/encryption-for-hosted-elasticsearch-instance/264604)
**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 8:27pm UTC](https://discuss.elastic.co/t/encryption-for-hosted-elasticsearch-instance/264604 "2021-02-17T20:27:46Z")
Do hosted Elasticsearch instances provide encryption at rest? --- ## [High disk usage while docker container is recreating](https://discuss.elastic.co/t/high-disk-usage-while-docker-container-is-recreating/264533)
**Author:** [@homa\_inc](https://discuss.elastic.co/u/homa_inc)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 7:29pm UTC](https://discuss.elastic.co/t/high-disk-usage-while-docker-container-is-recreating/264533 "2021-02-17T19:29:09Z")
Hi there. I have Filebeat container that configured to scan redis logs from redis container. There is configuration (filebeat.yml): filebeat.registry.flush: 2s output.elasticsearch: hosts: \['${ELASTICSEARCH\_HOST… --- ## [Metricbeat getResources failed AccessDeniedException](https://discuss.elastic.co/t/metricbeat-getresources-failed-accessdeniedexception/264556)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 7:21pm UTC](https://discuss.elastic.co/t/metricbeat-getresources-failed-accessdeniedexception/264556 "2021-02-17T19:21:14Z")
Hello guys, I am trying to setup Metricbeat for my AWS account. I have already created an IAM user with full access to EC2, S3, Cloudwatch, etc. Following is my configuration #- module: aws # period: 1m # metricsets:… --- ## [ElasticSearch on Docker Swarm using host network](https://discuss.elastic.co/t/elasticsearch-on-docker-swarm-using-host-network/264606)
**Author:** [@Nuno\_Centeio](https://discuss.elastic.co/u/Nuno_Centeio)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 6:46pm UTC](https://discuss.elastic.co/t/elasticsearch-on-docker-swarm-using-host-network/264606 "2021-02-17T18:46:51Z")
I'm trying to build a 3 node (1 master + 2 nodes) Docker Swarm using Azure's Ubuntu image. I've then tried to deploy an ElasticSearch 3 node cluster. This is my YAML file: version: '3.7' services: elasticsearch: … --- ## [Watch Execution simulation not returning results](https://discuss.elastic.co/t/watch-execution-simulation-not-returning-results/264553)
**Author:** [@Saugat\_Mukherjee](https://discuss.elastic.co/u/Saugat_Mukherjee)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 6:18pm UTC](https://discuss.elastic.co/t/watch-execution-simulation-not-returning-results/264553 "2021-02-17T18:18:47Z")
Hi, I am trying to simulate a watch and see if the actions are triggering fine. But my problem is the search returns no results. My query Checks for a particular index. Checks for a range Check for the servicename fi… --- ## [Audit Watchers](https://discuss.elastic.co/t/audit-watchers/264436)
**Author:** [@bmbrit](https://discuss.elastic.co/u/bmbrit)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 5:36pm UTC](https://discuss.elastic.co/t/audit-watchers/264436 "2021-02-17T17:36:13Z")
Hi, Is it possible to audit the watcher changes? We want to monitor who modifies the watcher and would like to audit this information. Since we as a team have got access(admin) to the Watcher, the watcher is getting m… --- ## [Parse Error json object](https://discuss.elastic.co/t/parse-error-json-object/264534)
**Author:** [@ljeganathan](https://discuss.elastic.co/u/ljeganathan)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 5:05pm UTC](https://discuss.elastic.co/t/parse-error-json-object/264534 "2021-02-17T17:05:47Z")
Hi, I am getting parse error like below JSON parse error, original data now in message field {:error=\>#\ **Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 4:13pm UTC](https://discuss.elastic.co/t/kibana-on-arm/264587 "2021-02-17T16:13:47Z") Hi, Can you give any indication of when an ARM based kibana package will become available? Thx D --- ## [Kibana bin folder contains large number of core files 7.2.0](https://discuss.elastic.co/t/kibana-bin-folder-contains-large-number-of-core-files-7-2-0/264403)
**Author:** [@gora](https://discuss.elastic.co/u/gora)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 4:08pm UTC](https://discuss.elastic.co/t/kibana-bin-folder-contains-large-number-of-core-files-7-2-0/264403 "2021-02-17T16:08:37Z")
Hi Team, Getting this error in kibana startup.log "pid":123452,"message":"You should set server.basePath along with server.rewriteBasePath. Starting in 7.0, Kibana will expect that all requests start with server.basePa… --- ## [Best Practice for Deploying Custom Metricset for Metricbeat](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811)
**Author:** [@traw1234](https://discuss.elastic.co/u/traw1234)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 11:35pm UTC](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811 "2021-02-16T23:35:14Z")
I've created my own custom module to run in Metricbeat. My process locally (following this guide) was: clone https://github.com/elastic/beats run make create-metricset write the code in the metricset run mage update … --- ## [Elasticsearch 7.11 low heap size with bundled JDK](https://discuss.elastic.co/t/elasticsearch-7-11-low-heap-size-with-bundled-jdk/264576)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 3:33pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11-low-heap-size-with-bundled-jdk/264576 "2021-02-17T15:33:46Z")
Hi all, I am currently building a brand new cluster based on 7.11. In the docs under it is said that By default, Elasticsearch automatically sizes JVM heap based on a node’s roles and total memory. We recommend this… --- ## [Filebeat + logstash infinite loop](https://discuss.elastic.co/t/filebeat-logstash-infinite-loop/264595)
**Author:** [@Edi1](https://discuss.elastic.co/u/Edi1)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-logstash-infinite-loop/264595 "2021-02-17T15:39:41Z")
Hello. I am new to elasticsearch and I am trying to send json data with filebeat to logstash -\> elasticsearch. #filebeat.yml filebeat.inputs: - type: log enabled: true paths: - /var/log/json-data2.log json.me… --- ## [Curator instead of ILM to delete old indices](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 3:37pm UTC](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186 "2021-02-17T15:37:20Z")
I have been unable to use ILM to manage my indices. The developers have the index names hardcoded in their code and don't want to change the index names. I attempted to use curator and was only partially successful. I… --- ## [Caching hotel prices](https://discuss.elastic.co/t/caching-hotel-prices/264590)
**Author:** [@half](https://discuss.elastic.co/u/half)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 3:29pm UTC](https://discuss.elastic.co/t/caching-hotel-prices/264590 "2021-02-17T15:29:48Z")
We are building a hotel reservation system. There will be 5000 hotels and each hotel can have up to 10 room types. The rates for each room depend on selected dates and number of adults. We are planning to prepare precalc… --- ## [Finding count by distinct text row using Lens](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280)
**Author:** [@Chetan\_Madaan](https://discuss.elastic.co/u/Chetan_Madaan)\ **Replies:** 7\ **Last updated:** [February 17, 2021, 3:09pm UTC](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280 "2021-02-17T15:09:18Z")
Hello, I am very very new to this, Like up until 12 hours ago I hadn't even heard of elastic Search or Kibana. I do however have basic knowledge of SQL and Other Data visualization tools (including Data Studio and othe… --- ## [Issue after disk problem: java.lang.IllegalArgumentException: requested snapshot generation \[10\] is not available. Min referenced generation is \[11\]](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305)
**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\ **Replies:** 6\ **Last updated:** [February 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305 "2021-02-17T15:01:18Z")
Hi. We've had a disk problem last night, causing a whole slew of issues in our Elasticsearch cluster. We've been able to resolve all of them but one: 1 (replica-less) shard is problematic. However, this is an issue we ha… --- ## [Elasticsearch does not send logs to filebeat and/or Logstash](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405)
**Author:** [@Royal](https://discuss.elastic.co/u/Royal)\ **Replies:** 11\ **Last updated:** [February 17, 2021, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405 "2021-02-17T14:56:11Z")
Our situation is as follows: We have a Kubernetes Cluster with a lot of logs piling up. We would like to get a centralized place for the logs to query through. This centralized place is a local VM, which has Elasticsearc… --- ## [Supporting retries on Close operation](https://discuss.elastic.co/t/supporting-retries-on-close-operation/263631)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 2:40pm UTC](https://discuss.elastic.co/t/supporting-retries-on-close-operation/263631 "2021-02-17T14:40:36Z")
I was going to open a feature request/question on Github but was guided here instead. I was interested in Curator supporting retry\_count &retry\_interval for the close operation, similar to how it exists for delete\_snaps… --- ## [Token filter doesn't work on wildcard-search](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588)
**Author:** [@TallGuru](https://discuss.elastic.co/u/TallGuru)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 2:31pm UTC](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588 "2021-02-17T14:31:07Z")
Hi I'm trying to implement a filter to find compounded words and needs to combine it with wildcard-search but it doesn't work. Example case: There are documents with names "Coca-Cola", "Cocacola" and "Coca Cola". I wa… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1549) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1551)