# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=158

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 159

---

## [Kibana Map Doesnt Load](https://discuss.elastic.co/t/kibana-map-doesnt-load/368284)

<div class="topic-metadata">

**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\
**Replies:** 2\
**Last updated:** [October 7, 2024, 7:57am UTC](https://discuss.elastic.co/t/kibana-map-doesnt-load/368284 "2024-10-07T07:57:50Z")

</div>

Hello, I make a post because I'm not be able to load map in Kibana. My deployment is a VM with Elastic+Kibana+Elastic-Agent (standalone) On Premise without license and with Internet Connection. VM uses Linux SUSE. I co…

---

## [Implications and reasons of field mapping limit](https://discuss.elastic.co/t/implications-and-reasons-of-field-mapping-limit/368173)

<div class="topic-metadata">

**Author:** [@Devanshu\_Shah](https://discuss.elastic.co/u/Devanshu_Shah)\
**Replies:** 1\
**Last updated:** [October 7, 2024, 7:39am UTC](https://discuss.elastic.co/t/implications-and-reasons-of-field-mapping-limit/368173 "2024-10-07T07:39:45Z")

</div>

There are many blogs stating that a high number of fields in the mapping leads to a mapping explosion which may cause out-of-memory errors. However, I am unable to understand what exact data structure is causing this mem…

---

## [I can't open JSON on Kibana](https://discuss.elastic.co/t/i-cant-open-json-on-kibana/368305)

<div class="topic-metadata">

**Author:** [@rogergm62](https://discuss.elastic.co/u/rogergm62)\
**Replies:** 9\
**Last updated:** [October 6, 2024, 6:19pm UTC](https://discuss.elastic.co/t/i-cant-open-json-on-kibana/368305 "2024-10-06T18:19:14Z")

</div>

When I select JSON, I get the error "An Error Occurred. Could not fetch data at this time. Refresh the tab to try again." I get the same error even after refreshing. What could be the problem? Thanks

---

## [Filebeat Error: failed to load template: couldn't load template: 400 Bad Request](https://discuss.elastic.co/t/filebeat-error-failed-to-load-template-couldnt-load-template-400-bad-request/368018)

<div class="topic-metadata">

**Author:** [@Muhammad\_Adil\_Talay](https://discuss.elastic.co/u/Muhammad_Adil_Talay)\
**Replies:** 1\
**Last updated:** [October 6, 2024, 5:40pm UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-load-template-couldnt-load-template-400-bad-request/368018 "2024-10-06T17:40:28Z")

</div>

I'm trying to setup Filebeat, but am getting this error that I share with related info. Error Exiting: error loading template: failed to load template: couldn't load template: 400 Bad Request Logs {"log.level":"info"…

---

## [Slow indexing rate](https://discuss.elastic.co/t/slow-indexing-rate/368299)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 3\
**Last updated:** [October 6, 2024, 1:29pm UTC](https://discuss.elastic.co/t/slow-indexing-rate/368299 "2024-10-06T13:29:58Z")

</div>

We are using ELK version 8.13.4 currently and from last 8 months we always used to encounter with lag issue we could not able to find the solution that time , the only thing we can do is restart the coordinate node , log…

---

## [How to change the order of the heat map vertical axis](https://discuss.elastic.co/t/how-to-change-the-order-of-the-heat-map-vertical-axis/368254)

<div class="topic-metadata">

**Author:** [@maaa](https://discuss.elastic.co/u/maaa)\
**Replies:** 3\
**Last updated:** [October 6, 2024, 11:33am UTC](https://discuss.elastic.co/t/how-to-change-the-order-of-the-heat-map-vertical-axis/368254 "2024-10-06T11:33:22Z")

</div>

When using the visualization type HeatMap, the order of the vertical axis is descending. How can I change it to ascending order? I want to set the origin coordinate to 0.

---

## ['Unterminated quoted string' when installing elastic-agent](https://discuss.elastic.co/t/unterminated-quoted-string-when-installing-elastic-agent/367007)

<div class="topic-metadata">

**Author:** [@turnerud](https://discuss.elastic.co/u/turnerud)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 10:19pm UTC](https://discuss.elastic.co/t/unterminated-quoted-string-when-installing-elastic-agent/367007 "2024-10-05T22:19:43Z")

</div>

Getting this error when running the curl installation command on my VM. I'm running Kali Linux through UTM on a Mac. "./elastic-agent: 3: Syntax error: Unterminated quoted string" Couldn't see anything wrong with the c…

---

## [Elastic agent unable to connect to kibana](https://discuss.elastic.co/t/elastic-agent-unable-to-connect-to-kibana/368298)

<div class="topic-metadata">

**Author:** [@aws\_account](https://discuss.elastic.co/u/aws_account)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 6:45pm UTC](https://discuss.elastic.co/t/elastic-agent-unable-to-connect-to-kibana/368298 "2024-10-05T18:45:11Z")

</div>

I have enabled the fleet-server and fleet-server pods are running fine, but when i run elsatic-agent daemonset its unable to connect to kibana over https and throws x509 unknow certificate, i have tried giving same certi…

---

## [How to use ingest pipelines with logstash](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-with-logstash/368281)

<div class="topic-metadata">

**Author:** [@Magnificeent](https://discuss.elastic.co/u/Magnificeent)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 2:58pm UTC](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-with-logstash/368281 "2024-10-05T14:58:52Z")

</div>

I want to use the Apache access ingest pipeline with Filebeat and with Logstash (not directly to Elasticsearch). When I put direct output to Elasticsearch in the filebeat file (filebeat.yml) everything is fine, I can se…

---

## [Upgrade security index while ES upgrade from version 7 to 8](https://discuss.elastic.co/t/upgrade-security-index-while-es-upgrade-from-version-7-to-8/366935)

<div class="topic-metadata">

**Author:** [@abhadauria](https://discuss.elastic.co/u/abhadauria)\
**Replies:** 4\
**Last updated:** [October 5, 2024, 8:02am UTC](https://discuss.elastic.co/t/upgrade-security-index-while-es-upgrade-from-version-7-to-8/366935 "2024-10-05T08:02:33Z")

</div>

I am working on in-place ES version upgrade from ES version 7.17 to ES 8.14, however I am blocked at a place as I see that .security-6 exist in the current cluster, and I am not sure how to upgrade this index in product…

---

## [Load json text in oracle table to elastic search via logstash](https://discuss.elastic.co/t/load-json-text-in-oracle-table-to-elastic-search-via-logstash/367208)

<div class="topic-metadata">

**Author:** [@karthikeyanc2003](https://discuss.elastic.co/u/karthikeyanc2003)\
**Replies:** 7\
**Last updated:** [October 5, 2024, 4:32am UTC](https://discuss.elastic.co/t/load-json-text-in-oracle-table-to-elastic-search-via-logstash/367208 "2024-10-05T04:32:16Z")

</div>

Dear Team, I have data in Oracle table Tbl\_user in the below table format. JSON column has the value in the JSON format. I want to insert this data into the Elastic search index with userid as a document ID via logstas…

---

## [Kibana 8.14.3 plugin build failure breaks Kibana](https://discuss.elastic.co/t/kibana-8-14-3-plugin-build-failure-breaks-kibana/368278)

<div class="topic-metadata">

**Author:** [@tdsalty](https://discuss.elastic.co/u/tdsalty)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 3:12am UTC](https://discuss.elastic.co/t/kibana-8-14-3-plugin-build-failure-breaks-kibana/368278 "2024-10-05T03:12:06Z")

</div>

Two part problem. Trying to be brief. Part 1 - Plugin build error Plugin works fine in dev environment. Here's the yarn error - it seems that the outdated caniuse-lite is causing the problem. I've tried npx update-b…

---

## [Elasticsearch ignores config file /etc/elasticsearch/elasticsearch.yml](https://discuss.elastic.co/t/elasticsearch-ignores-config-file-etc-elasticsearch-elasticsearch-yml/368276)

<div class="topic-metadata">

**Author:** [@Dmitry\_Stallion](https://discuss.elastic.co/u/Dmitry_Stallion)\
**Replies:** 2\
**Last updated:** [October 4, 2024, 11:08pm UTC](https://discuss.elastic.co/t/elasticsearch-ignores-config-file-etc-elasticsearch-elasticsearch-yml/368276 "2024-10-04T23:08:39Z")

</div>

Hello. I have a single node elasticsearch version 8.13.4. It was installed using the repository on Ubuntu version 22.04. Just yesterday, I decided to update the xpack.security.transport.ssl ​​certificates. I regenerate…

---

## [Logging is not happening after migration to Elasticsearch version 8](https://discuss.elastic.co/t/logging-is-not-happening-after-migration-to-elasticsearch-version-8/368267)

<div class="topic-metadata">

**Author:** [@gaurav\_r](https://discuss.elastic.co/u/gaurav_r)\
**Replies:** 0\
**Last updated:** [October 4, 2024, 5:50pm UTC](https://discuss.elastic.co/t/logging-is-not-happening-after-migration-to-elasticsearch-version-8/368267 "2024-10-04T17:50:04Z")

</div>

We have desktop application that we deploy on VMware Horizon. The application was able to write logs on Elasticsearch server (version 7.\*). Now it is planned to upgrade Elasticsearch server from version 7 to version 8. …

---

## [GeoIP problems](https://discuss.elastic.co/t/geoip-problems/368244)

<div class="topic-metadata">

**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\
**Replies:** 7\
**Last updated:** [October 4, 2024, 5:38pm UTC](https://discuss.elastic.co/t/geoip-problems/368244 "2024-10-04T17:38:05Z")

</div>

Hello, I make a post because I'm not be able to set up GeoIP fields and map in my Elasticsearch. My deployment is a VM with Elastic+Kibana+Elastic-Agent (standalone) On Premise without license and with Internet Connecti…

---

## [Elastic MongoDB Connector - Orphaned Syncs?](https://discuss.elastic.co/t/elastic-mongodb-connector-orphaned-syncs/368250)

<div class="topic-metadata">

**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\
**Replies:** 4\
**Last updated:** [October 4, 2024, 5:04pm UTC](https://discuss.elastic.co/t/elastic-mongodb-connector-orphaned-syncs/368250 "2024-10-04T17:04:00Z")

</div>

We are testing the elastic connectors docker container as a replacement for monstache to push mongodb documents into elasticsearch. I have configured the connector(s) and done an manual sync (which all completed fine), …

---

## [Kibana server not ready/SSL wrong version number](https://discuss.elastic.co/t/kibana-server-not-ready-ssl-wrong-version-number/367206)

<div class="topic-metadata">

**Author:** [@CipherMethod](https://discuss.elastic.co/u/CipherMethod)\
**Replies:** 2\
**Last updated:** [October 4, 2024, 4:43pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-ssl-wrong-version-number/367206 "2024-10-04T16:43:32Z")

</div>

Hello, After an OS patch and reboot of our Elasticsearch server, we are getting the "Kibana server not ready yet" when attempting to log in. The Kibana log shows: "message": "Unable to retrieve version information fro…

---

## [Cannot access kibana feature](https://discuss.elastic.co/t/cannot-access-kibana-feature/368096)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mudallal](https://discuss.elastic.co/u/Mohammad_Mudallal)\
**Replies:** 0\
**Last updated:** [October 1, 2024, 1:37pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-feature/368096 "2024-10-01T13:37:53Z")

</div>

I have kibana 8.14 configured locally, and I am trying to access the visualize library page but it's blank and this error is printed in the dev console: The above error occurred in he: at he (http://51.77.157.52:5601/5…

---

## [Create a dashboard and a simple visualization](https://discuss.elastic.co/t/create-a-dashboard-and-a-simple-visualization/368252)

<div class="topic-metadata">

**Author:** [@karankamat\_21](https://discuss.elastic.co/u/karankamat_21)\
**Replies:** 1\
**Last updated:** [October 4, 2024, 2:03pm UTC](https://discuss.elastic.co/t/create-a-dashboard-and-a-simple-visualization/368252 "2024-10-04T14:03:09Z")

</div>

Hello, I need help in creating a simple visualization and a dashboard, can someone share articles/videos which could help me.

---

## [Pipeline with id \[packetbeat-8.15.2-routing\] does not exist, dropping event!](https://discuss.elastic.co/t/pipeline-with-id-packetbeat-8-15-2-routing-does-not-exist-dropping-event/368135)

<div class="topic-metadata">

**Author:** [@jimB100](https://discuss.elastic.co/u/jimB100)\
**Replies:** 11\
**Last updated:** [October 4, 2024, 1:14pm UTC](https://discuss.elastic.co/t/pipeline-with-id-packetbeat-8-15-2-routing-does-not-exist-dropping-event/368135 "2024-10-04T13:14:34Z")

</div>

Hi, I'm testing out packetbeat to ship dns data to our self-hosted elastic server, I have tried version x64 windows 8.15.2 and 8.15.0 and neither version created the routing pipeline {"log.level":"warn","@timestamp":"20…

---

## [Indexing and searching of flattened](https://discuss.elastic.co/t/indexing-and-searching-of-flattened/368247)

<div class="topic-metadata">

**Author:** [@ivenhov](https://discuss.elastic.co/u/ivenhov)\
**Replies:** 0\
**Last updated:** [October 4, 2024, 12:22pm UTC](https://discuss.elastic.co/t/indexing-and-searching-of-flattened/368247 "2024-10-04T12:22:47Z")

</div>

Hi Assuming I have a document like below { "name": "Document 1", "fieldA": 123.45, "fieldB": "Sample text", "fieldC": "keyword\_value", "ValuesDocument": { "al6gq": "true", "63c095bebb3a6b02afcb2cbd": …

---

## [LDAP Configuration for Cluster with coordinating nodes: Apply to all nodes or only coordinators?](https://discuss.elastic.co/t/ldap-configuration-for-cluster-with-coordinating-nodes-apply-to-all-nodes-or-only-coordinators/368242)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 1\
**Last updated:** [October 4, 2024, 12:20pm UTC](https://discuss.elastic.co/t/ldap-configuration-for-cluster-with-coordinating-nodes-apply-to-all-nodes-or-only-coordinators/368242 "2024-10-04T12:20:30Z")

</div>

Hi, I have a cluster setup with around 11 nodes, consisting of: 3 master nodes 6 data nodes 2 coordinating-only nodes I am planning to integrate LDAP for authentication purposes, but I am unsure where to apply the c…

---

## [Data loss in Elasticsearch docker](https://discuss.elastic.co/t/data-loss-in-elasticsearch-docker/368188)

<div class="topic-metadata">

**Author:** [@Sandeep\_Thakur](https://discuss.elastic.co/u/Sandeep_Thakur)\
**Replies:** 3\
**Last updated:** [October 4, 2024, 12:09pm UTC](https://discuss.elastic.co/t/data-loss-in-elasticsearch-docker/368188 "2024-10-04T12:09:02Z")

</div>

When I was try to commit Elasticsearch container and run image again Elasticsearch credential not working and data was also lost in new container.Why its happening ?

---

## [Stacking Multiple Enterprise Licenses](https://discuss.elastic.co/t/stacking-multiple-enterprise-licenses/368240)

<div class="topic-metadata">

**Author:** [@sivanov](https://discuss.elastic.co/u/sivanov)\
**Replies:** 1\
**Last updated:** [October 4, 2024, 9:20am UTC](https://discuss.elastic.co/t/stacking-multiple-enterprise-licenses/368240 "2024-10-04T09:20:56Z")

</div>

Hi Team, Simple question, is it possible to stack multiple Enterprise license (files), which are of course valid licenses? When we add two enterprise license JSON files to Elasticsearch, all we get is the last added li…

---

## [Use of bootstrap.memory\_lock](https://discuss.elastic.co/t/use-of-bootstrap-memory-lock/368236)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 2\
**Last updated:** [October 4, 2024, 9:03am UTC](https://discuss.elastic.co/t/use-of-bootstrap-memory-lock/368236 "2024-10-04T09:03:10Z")

</div>

Hi Team, What is the use of the parameter in elasticsearch.yml file bootstrap.memory\_lock and how it impacts the performance of elastic cluster. Is it related JVM heap memory. Please help me to understand. Thanks, De…

---

## [Filebeat 0 inputs loaded](https://discuss.elastic.co/t/filebeat-0-inputs-loaded/367200)

<div class="topic-metadata">

**Author:** [@alon\_hen](https://discuss.elastic.co/u/alon_hen)\
**Replies:** 4\
**Last updated:** [October 4, 2024, 8:57am UTC](https://discuss.elastic.co/t/filebeat-0-inputs-loaded/367200 "2024-10-04T08:57:21Z")

</div>

Hey, i'm not sure if seeing 0 inputs loaded in the log means nothing is registered in filebeat as in it is going to start reading logs or not but my config file looks like this filebeat.inputs: - type: filestream id:…

---

## [How to send 75 percentile of one field(duration) value to kafka servers](https://discuss.elastic.co/t/how-to-send-75-percentile-of-one-field-duration-value-to-kafka-servers/368235)

<div class="topic-metadata">

**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\
**Replies:** 0\
**Last updated:** [October 4, 2024, 6:31am UTC](https://discuss.elastic.co/t/how-to-send-75-percentile-of-one-field-duration-value-to-kafka-servers/368235 "2024-10-04T06:31:14Z")

</div>

Hi, I am trying to send 75 percentile of "duration" field(type is number) value to kafka servers by using logstash pipeline. But i did not get idea how to write aggregate filter in logstash. Could you please help me how…

---

## [How can I restore a snapshot from S3 to a different cluster?](https://discuss.elastic.co/t/how-can-i-restore-a-snapshot-from-s3-to-a-different-cluster/368182)

<div class="topic-metadata">

**Author:** [@summoner](https://discuss.elastic.co/u/summoner)\
**Replies:** 9\
**Last updated:** [October 4, 2024, 3:59am UTC](https://discuss.elastic.co/t/how-can-i-restore-a-snapshot-from-s3-to-a-different-cluster/368182 "2024-10-04T03:59:24Z")

</div>

I have managed to get a snapshot stored on S3, now trying to get that snapshot onto my elasticsearch deployment using an operator on GKE. Currently I have 1 master data pod elasticsearch-config-es-master-data-1 active. W…

---

## [Failed signature check for enterprise license : crypto/rsa verification error](https://discuss.elastic.co/t/failed-signature-check-for-enterprise-license-crypto-rsa-verification-error/368227)

<div class="topic-metadata">

**Author:** [@freynolds1](https://discuss.elastic.co/u/freynolds1)\
**Replies:** 3\
**Last updated:** [October 4, 2024, 2:52am UTC](https://discuss.elastic.co/t/failed-signature-check-for-enterprise-license-crypto-rsa-verification-error/368227 "2024-10-04T02:52:50Z")

</div>

I have an eck instance and the operator does not like my enterprise license. I can use the api to upload the license to elastic. however, it reverts to basic after a few hours.

---

## [No cipher suites in common](https://discuss.elastic.co/t/no-cipher-suites-in-common/368108)

<div class="topic-metadata">

**Author:** [@Mahesh\_Kumar\_S](https://discuss.elastic.co/u/Mahesh_Kumar_S)\
**Replies:** 3\
**Last updated:** [October 4, 2024, 2:48am UTC](https://discuss.elastic.co/t/no-cipher-suites-in-common/368108 "2024-10-04T02:48:25Z")

</div>

Hello Elastic Community, I am facing an issue after configuring custom cipher suites for the TCP input plugin in Logstash. Below is my configuration: tcp{ port =\> 6515 type =\> syslog dns\_reverse\_lookup\_ena…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=157)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=159)
