# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1582 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1583 --- ## [Ingest processor for sending email gives \`access denied ("java.lang.RuntimePermission" "setFactory")\`](https://discuss.elastic.co/t/ingest-processor-for-sending-email-gives-access-denied-java-lang-runtimepermission-setfactory/262594)
**Author:** [@Ripu\_Sudan](https://discuss.elastic.co/u/Ripu_Sudan)\ **Replies:** 4\ **Last updated:** [January 29, 2021, 7:05am UTC](https://discuss.elastic.co/t/ingest-processor-for-sending-email-gives-access-denied-java-lang-runtimepermission-setfactory/262594 "2021-01-29T07:05:06Z")
I was making an ingest processor that would send an email on a particular condition, i'm using "compile 'javax.mail:javax.mail-api:1.5.3'" while running "gradle check" if gives permisson error. REPRODUCE WITH: ./gradle… --- ## ["Signed fields invalid" for configuring HTTPS transport layer](https://discuss.elastic.co/t/signed-fields-invalid-for-configuring-https-transport-layer/262491)
**Author:** [@gvx3](https://discuss.elastic.co/u/gvx3)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 6:53am UTC](https://discuss.elastic.co/t/signed-fields-invalid-for-configuring-https-transport-layer/262491 "2021-01-29T06:53:01Z")
Hi all, I know that these kind of questions have been asking a lot, but I'm really stuck and can't help it I'm using Helm to deploy elasticsearch, I use letsencrypt to generate cert, so I have fullchain.pem which is fo… --- ## [Permission to give permission to Indices](https://discuss.elastic.co/t/permission-to-give-permission-to-indices/262253)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 4\ **Last updated:** [January 29, 2021, 5:57am UTC](https://discuss.elastic.co/t/permission-to-give-permission-to-indices/262253 "2021-01-29T05:57:07Z")
Hi! I was wondering - is it possible to give someone permission to read some indices AND also a permission to give read-only permissions to other users? My point is: I have 5 indices and 5 people, each person has permi… --- ## [Elasticsearch 7.10 | XPACK enabled | Does not start after machine reboot](https://discuss.elastic.co/t/elasticsearch-7-10-xpack-enabled-does-not-start-after-machine-reboot/262508)
**Author:** [@dp119](https://discuss.elastic.co/u/dp119)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-7-10-xpack-enabled-does-not-start-after-machine-reboot/262508 "2021-01-29T05:53:15Z")
Hello, I enabled X-Pack with this command elasticsearch-setup-passwords auto I had to stop ES and restart the host machine. I'm trying to start Elasticsearch after the machine boot. ES doesn't start and has the below… --- ## [Multiple indices in kibana dashboard](https://discuss.elastic.co/t/multiple-indices-in-kibana-dashboard/261751)
**Author:** [@Srikanth\_Kesireddy](https://discuss.elastic.co/u/Srikanth_Kesireddy)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 5:49am UTC](https://discuss.elastic.co/t/multiple-indices-in-kibana-dashboard/261751 "2021-01-29T05:49:56Z")
I have 10 target servers installed Filebeat on all machines... Logstash , ElasticSearch , Kibana these 3 are installed on main server. How can I create 10 indices for 10 target machines --- ## [SSLError: ConnectionErro SSL: WRONG\_VERSION\_NUMBER](https://discuss.elastic.co/t/sslerror-connectionerro-ssl-wrong-version-number/262566)
**Author:** [@pemfir](https://discuss.elastic.co/u/pemfir)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 5:49am UTC](https://discuss.elastic.co/t/sslerror-connectionerro-ssl-wrong-version-number/262566 "2021-01-29T05:49:15Z")
After enabling Xpack and setting SSL/TSL for a single node and username and password, i am trying to index a single data point from elasticsearch import Elasticsearch from datetime import datetime es = Elasticsearch( … --- ## [How to escape sprintf (to compare against an uninterpolated value)](https://discuss.elastic.co/t/how-to-escape-sprintf-to-compare-against-an-uninterpolated-value/262581)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 3:59am UTC](https://discuss.elastic.co/t/how-to-escape-sprintf-to-compare-against-an-uninterpolated-value/262581 "2021-01-29T03:59:43Z")
Hi all, I'm on Elastic 7.10.2, and I noticed a problem with my processing. Some incoming data has tried to set a field using a sprintf string, but the sprintf expression did not result in a replacement, so I'm left with … --- ## [Machine learning, No node found to open the job because job memory requirements are stale](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 29, 2021, 2:33am UTC](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582 "2021-01-29T02:33:16Z")
Hi, Im getting this warning from ML jobs after restart the nodes on docker I run this commands in devs tools before restart the nodes PUT \_cluster/settings { "persistent": { "cluster.routing.allocation.enable":… --- ## [High load after upgrading ElasticSearch/Kibana/Logstash from 7.5.1 to 7.9.3](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307)
**Author:** [@stideswell](https://discuss.elastic.co/u/stideswell)\ **Replies:** 8\ **Last updated:** [January 29, 2021, 1:14am UTC](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307 "2021-01-29T01:14:43Z")
Hello I've upgraded an ElasticSearch server running on Ubuntu 18 from version 7.5.1 to 7.9.3. I use ES, Kibana and Logstash on this server. The load was immediately much higher after the upgrade and this has persisted. … --- ## [Elasticsearch Upgrade from 2.4 to 6.8](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 6\ **Last updated:** [January 29, 2021, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580 "2021-01-29T01:07:37Z")
We are planning to upgrade elasticsearch from version 2.4 to 6.8. The current version of elasticsearch was an upgrade from 1.7 (side by side upgrade. Indices were restored to the new cluster). Since the indices are creat… --- ## [Elasticsearch query returning score of 1.0 for all documents?](https://discuss.elastic.co/t/elasticsearch-query-returning-score-of-1-0-for-all-documents/262567)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 12:32am UTC](https://discuss.elastic.co/t/elasticsearch-query-returning-score-of-1-0-for-all-documents/262567 "2021-01-29T00:32:54Z")
For the following query GET /test/\_search { "query": "fire" } I get hits with no match all showing a score of 1.0. Any variations of queries I try gives the same results. What's going on here? Results: { "took" … --- ## [Elastic security throwing "Authentication to realm default\_native failed - Password authentication failed for \"](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455)
**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 11:01pm UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455 "2021-01-28T23:01:45Z")
Hi Team, I have es cluster with the below version |version|| |---|---| |number|"7.8.1"| |build\_flavor|"default"| |build\_type|"rpm"| |build\_hash|"b5ca9c58fb664ca8bf9e4057fc229b3396bf3a89"| |build\_date… --- ## [Filebeat Error: connect: connection refused](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866)
**Author:** [@haithem899](https://discuss.elastic.co/u/haithem899)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 10:48pm UTC](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866 "2021-01-28T22:48:21Z")
Hello, i've setup ELK stack with three nodes ( kibana-elasticsearch-logstash) separating however i can't recieve logs and with checking filebeat log i see this error: "connect: connection refused". Even i increased clie… --- ## [Api Key Help](https://discuss.elastic.co/t/api-key-help/262576)
**Author:** [@ukuleleplayer](https://discuss.elastic.co/u/ukuleleplayer)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 10:34pm UTC](https://discuss.elastic.co/t/api-key-help/262576 "2021-01-28T22:34:48Z")
I apologize in advance, I'm new to auditbeat and could use some help. Basically, I'm trying to get just system logs from machines I'm monitoring. I previously had this working by just putting cloud.id and cloud.auth int… --- ## [Multiple nodes in a single Ubuntu host with Debian package based install](https://discuss.elastic.co/t/multiple-nodes-in-a-single-ubuntu-host-with-debian-package-based-install/262396)
**Author:** [@Citeyes](https://discuss.elastic.co/u/Citeyes)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 10:16pm UTC](https://discuss.elastic.co/t/multiple-nodes-in-a-single-ubuntu-host-with-debian-package-based-install/262396 "2021-01-28T22:16:57Z")
Hello community, I have installed elastic 7 and Kibana in a ubuntu host for dev purpose. I need to run multiple nodes under this unique host. However I installed elastic using apt install (Debian package) method ending … --- ## [Error mapping with an object](https://discuss.elastic.co/t/error-mapping-with-an-object/262390)
**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 10:00pm UTC](https://discuss.elastic.co/t/error-mapping-with-an-object/262390 "2021-01-28T22:00:41Z")
Hello, I am trying to save a document with the following structure but it gives me an error, I understand that it is an error in the map since validationForm.content.value is for some cases as an object and in other case… --- ## [How do I make a Kibana histogram that plots the distribution of the average of key A for each distinct value of key B?](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541)
**Author:** [@eric4](https://discuss.elastic.co/u/eric4)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 9:36pm UTC](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541 "2021-01-28T21:36:32Z")
This applies to any Kibana graph but the one I am interested in is a Histogram. My data is structured like this: \[ { "user\_id" : 3, "score" : 10 }, { "user\_id" : 1, "score" : 20 }, { "user\_id" : 2, "score" : 60 }… --- ## [Watcher Actions Greyed Out](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:10pm UTC](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956 "2021-01-28T21:10:13Z")
Hi, I am trying to edit email field in the Watcher actions as super user but the fields are greyed out and I am wondering why and how I may fix that? Thank you. --- ## [Kibana Dashboard Links for a PDF](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543 "2021-01-28T21:07:12Z")
Hi, I've created a dashboard in kibana (7.6.2) but wanted to edit the dashboard to include links to help PDFs that expalin how to use the dashboard. Question is... Is there a way to get the Dashboard links to bring u… --- ## [How to keep 2 clusters in sync](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 8:38pm UTC](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084 "2021-01-28T20:38:06Z")
We are in process of creating an ES cluster in GCP and our old cluster in AWS. I have used es reindex api https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html to copy data from old aws clust… --- ## [Ingest Pipeline: drop processor: compile error](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548)
**Author:** [@asc-adean](https://discuss.elastic.co/u/asc-adean)\ **Replies:** 3\ **Last updated:** [January 28, 2021, 7:45pm UTC](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548 "2021-01-28T19:45:42Z")
As documented here https://www.elastic.co/guide/en/elasticsearch/reference/current/drop-processor.html I want to be able to drop a document when matching on a field, like so { "processors": \[ { "js… --- ## [Kibana](https://discuss.elastic.co/t/kibana/261795)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 7:32pm UTC](https://discuss.elastic.co/t/kibana/261795 "2021-01-28T19:32:34Z")
hi guys. the Linzensen can be found in kibana under LicensingState. But i only want to issue unlicensed host. how can i do that ? thank you. --- ## [Kibana returns no data. Error: 70 of 2425 shards failed](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 6:40pm UTC](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514 "2021-01-28T18:40:08Z")
I encounter an error, when I trying to show messages from my index pattern. After short time, I am receiving error: 70 of 2425 shards failed This message cant be enlarged, I can't click on it so basically, I do not kno… --- ## [How to extract string from JSON string using painless script](https://discuss.elastic.co/t/how-to-extract-string-from-json-string-using-painless-script/262513)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 2:20pm UTC](https://discuss.elastic.co/t/how-to-extract-string-from-json-string-using-painless-script/262513 "2021-01-28T14:20:35Z")
Hi team, script: if(doc\['charstream.keyword'\].size() == 0){ return "null" } else{ String\[\] parts = /\\|/.split(doc\['charstream.keyword'\].value); return parts\[4\]; } Message string: "charstream": "Conte… --- ## [How to write query for a property which exists but can also not exist?](https://discuss.elastic.co/t/how-to-write-query-for-a-property-which-exists-but-can-also-not-exist/262544)
**Author:** [@lmuresan](https://discuss.elastic.co/u/lmuresan)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 6:37pm UTC](https://discuss.elastic.co/t/how-to-write-query-for-a-property-which-exists-but-can-also-not-exist/262544 "2021-01-28T18:37:08Z")
I have the next weird case: I have the fruitBox. This fruit box can have apples, pears, bananas. But it also can be empty, in this case it doesn't have any property for box. Now lets say that i want to get from the Elas… --- ## [Logstash, Date plugin not working as expected](https://discuss.elastic.co/t/logstash-date-plugin-not-working-as-expected/262525)
**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 6:14pm UTC](https://discuss.elastic.co/t/logstash-date-plugin-not-working-as-expected/262525 "2021-01-28T18:14:38Z")
Logstash Version: 7.10.1 OS: Debian 10 Buster Architecture: x86-64 Kernel: Linux 4.19.0-11-amd64 I'm trying to parse this date: 20210128 94501065 The pattern is: date { match =\> \["timestamp", "yyyyM… --- ## [How calculed Uptime in Kibana](https://discuss.elastic.co/t/how-calculed-uptime-in-kibana/262486)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:49pm UTC](https://discuss.elastic.co/t/how-calculed-uptime-in-kibana/262486 "2021-01-28T17:49:12Z")
Hallo everyone. I need heep in kibana. I want to write one Scripted field that converts Sessionlogontime(string) and gives me the result per day. i would be very proud if someone can offer me a solution. It is calculated… --- ## [CPU thread info metrics](https://discuss.elastic.co/t/cpu-thread-info-metrics/262536)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 3\ **Last updated:** [January 28, 2021, 5:42pm UTC](https://discuss.elastic.co/t/cpu-thread-info-metrics/262536 "2021-01-28T17:42:50Z")
Hello, Is there any metrics that collects CPU thread related information. I couldn't find anything related to thread under cpu metricset fields. Thanks --- ## [Logstash grok](https://discuss.elastic.co/t/logstash-grok/262498)
**Author:** [@igormarqs](https://discuss.elastic.co/u/igormarqs)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:23pm UTC](https://discuss.elastic.co/t/logstash-grok/262498 "2021-01-28T17:23:20Z")
hey all; I have this log line: TID: \[\] \[\] \[2021-01-28 12:25:50,298\] INFO {org.wso2.carbon.databridge.core.DataBridge} - user admin connected {org.wso2.carbon.databridge.core.DataBridge} and i use this grok: TID: \\\[\] … --- ## [Optional grok pattern field doesnt match](https://discuss.elastic.co/t/optional-grok-pattern-field-doesnt-match/262483)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:20pm UTC](https://discuss.elastic.co/t/optional-grok-pattern-field-doesnt-match/262483 "2021-01-28T17:20:48Z")
Hi, my log looks like this: "rootModel":"modelR","providedByRM":false,"rm\_user":"100001935398@rm.com","publishers":\["Unknown"\] the part: ,"rm\_user":"100001935398@rm.com" is optional so i marked it with ()?, but it do… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1581) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1583)