# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1585 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1586 --- ## [Beat me if i'm wrong harvester info 302 and 333 has no use, how to turn off](https://discuss.elastic.co/t/beat-me-if-im-wrong-harvester-info-302-and-333-has-no-use-how-to-turn-off/262337)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 8:33am UTC](https://discuss.elastic.co/t/beat-me-if-im-wrong-harvester-info-302-and-333-has-no-use-how-to-turn-off/262337 "2021-01-27T08:33:35Z")
I test deployed ELK and installed filebeat. To see if there are interesting things mentioned in log files and manage it centrally. I already disabled the 30s update about filebeat state to much clutter imo. Another o… --- ## [Create point to point map from Logstash pipeline](https://discuss.elastic.co/t/create-point-to-point-map-from-logstash-pipeline/259722)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 12\ **Last updated:** [January 27, 2021, 12:59pm UTC](https://discuss.elastic.co/t/create-point-to-point-map-from-logstash-pipeline/259722 "2021-01-27T12:59:44Z")
Hello, I am using logstash to parse my firewall logs and enrich them with geo location information geoip { source =\> "source.ip" target =\> "source.geo" } geoip { source =\> "destination.ip" … --- ## [Error reindex some data](https://discuss.elastic.co/t/error-reindex-some-data/262284)
**Author:** [@higor.grilo](https://discuss.elastic.co/u/higor.grilo)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 12:27pm UTC](https://discuss.elastic.co/t/error-reindex-some-data/262284 "2021-01-27T12:27:09Z")
Hi, I've been trying to migrate my ELK from v6.8 to v7.10, but prior to this i have to solve some issues pointed by 7.0 Upgrade Assistant. I have some fields with the format: yyyy-MM-dd HH:mm:ss, i've already created a… --- ## [ILM phase don't delete indexes, only clean up](https://discuss.elastic.co/t/ilm-phase-dont-delete-indexes-only-clean-up/261440)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 7\ **Last updated:** [January 27, 2021, 12:12pm UTC](https://discuss.elastic.co/t/ilm-phase-dont-delete-indexes-only-clean-up/261440 "2021-01-27T12:12:09Z")
I cretaed ILM policy for two steps. It's hot and delete. full template PUT \_ilm/policy/logstash-f-lb { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": {… --- ## [Delaying Tasks](https://discuss.elastic.co/t/delaying-tasks/261949)
**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 11:20am UTC](https://discuss.elastic.co/t/delaying-tasks/261949 "2021-01-27T11:20:59Z")
Hi, i try to set the delayed\_timeout variable and have an 503 master timout error. Before that the cluster start to delay tasks: "number\_of\_pending\_tasks" : 127, the command I ran was: curl -X PUT "localhost:9200/\_al… --- ## [Nodes constantly losing connection](https://discuss.elastic.co/t/nodes-constantly-losing-connection/262331)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 10:30am UTC](https://discuss.elastic.co/t/nodes-constantly-losing-connection/262331 "2021-01-27T10:30:37Z")
I have a 2-node cluster(archive and main) and today they start losing connection. These are the two logs that keep appearing: \[2021-01-27T10:26:55,816\]\[WARN \]\[o.e.g.PersistedClusterStateService\] \[XXXarchive.XXX.local\] … --- ## [Can we linked two visualization from different index in one dashboard](https://discuss.elastic.co/t/can-we-linked-two-visualization-from-different-index-in-one-dashboard/262055)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 9:28am UTC](https://discuss.elastic.co/t/can-we-linked-two-visualization-from-different-index-in-one-dashboard/262055 "2021-01-27T09:28:32Z")
Hi, I have a ELK setup of 7.10.0v. I am having two different index with some common filed names. I want to create one dashboard with index1 and index2, so the question is can we linked two visualization in one dashboa… --- ## [Sync many nodes into one](https://discuss.elastic.co/t/sync-many-nodes-into-one/262340)
**Author:** [@manyahin](https://discuss.elastic.co/u/manyahin)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 8:51am UTC](https://discuss.elastic.co/t/sync-many-nodes-into-one/262340 "2021-01-27T08:51:58Z")
Hello, This is a theoretical problem. I have 100+ servers in the world connected to the Internet. Sometimes they are offline but continue to work and collect data. I would like to sync all those servers when they are… --- ## [Winlogbeat no longer logging to Logstash](https://discuss.elastic.co/t/winlogbeat-no-longer-logging-to-logstash/261267)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 8:50am UTC](https://discuss.elastic.co/t/winlogbeat-no-longer-logging-to-logstash/261267 "2021-01-27T08:50:11Z")
Hi, We had an instance where the disk space caused logging to stop over xmas which has now since been resolved. However, since then, 2 servers which are Server 2019 are no longer logging to Logstash \> Elastic. Winlogbe… --- ## [I will get an error on Vega with new Ealsticsearch version](https://discuss.elastic.co/t/i-will-get-an-error-on-vega-with-new-ealsticsearch-version/262200)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 8:24am UTC](https://discuss.elastic.co/t/i-will-get-an-error-on-vega-with-new-ealsticsearch-version/262200 "2021-01-27T08:24:18Z")
The version of Vega is v.4.3.0 and Elasticsearch is v.7.6.1. With new version of Elasticsearch v.7.10.2, the error message below shows up on the top of Vega and no code has been changed. Infinite extent for field "y1":… --- ## [How to change data mapping to include 'suggest type' for an existing index](https://discuss.elastic.co/t/how-to-change-data-mapping-to-include-suggest-type-for-an-existing-index/261930)
**Author:** [@nadyahmed123](https://discuss.elastic.co/u/nadyahmed123)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 8:21am UTC](https://discuss.elastic.co/t/how-to-change-data-mapping-to-include-suggest-type-for-an-existing-index/261930 "2021-01-27T08:21:52Z")
Hi, I am new to ES. I have already created an index index1 which has some data. I need to implement autocomplete for one of the field, so for that I need to have the suggest type added in mappings (From what I read... d… --- ## [Masternode not being discovered in the workernode server and vice versa](https://discuss.elastic.co/t/masternode-not-being-discovered-in-the-workernode-server-and-vice-versa/262148)
**Author:** [@emem](https://discuss.elastic.co/u/emem)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 8:05am UTC](https://discuss.elastic.co/t/masternode-not-being-discovered-in-the-workernode-server-and-vice-versa/262148 "2021-01-27T08:05:49Z")
\[2021-01-25T13:45:26,577\]\[INFO \]\[o.e.b.BootstrapChecks \] \[data-1\] bound or publishing to a non-loopback address, enforcing bootstrap checks \[2021-01-25T13:45:26,603\]\[INFO \]\[o.e.c.c.ClusterBootstrapService\] \[data-1\] sk… --- ## [Understanding segments: are segments queried concurrently?](https://discuss.elastic.co/t/understanding-segments-are-segments-queried-concurrently/262239)
**Author:** [@gkman](https://discuss.elastic.co/u/gkman)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 8:03am UTC](https://discuss.elastic.co/t/understanding-segments-are-segments-queried-concurrently/262239 "2021-01-27T08:03:51Z")
I was reading about shard sizing and best practices (How many shards should I have in my Elasticsearch cluster? | Elastic Blog) , and understood that having fewer, larger segments, can improve query performance: TIP: A… --- ## [Scaling down ElasticSearch: what happens with closed indices?](https://discuss.elastic.co/t/scaling-down-elasticsearch-what-happens-with-closed-indices/262264)
**Author:** [@caarlos0](https://discuss.elastic.co/u/caarlos0)\ **Replies:** 5\ **Last updated:** [January 27, 2021, 7:56am UTC](https://discuss.elastic.co/t/scaling-down-elasticsearch-what-happens-with-closed-indices/262264 "2021-01-27T07:56:46Z")
To scale down ElasticSearch, I usually disable allocation on a node, wait for shards to relocate, and then remove the node, e.g.: curl -X PUT "localhost:9200/\_cluster/settings" -d'{ "transient" : { "cluster.routin… --- ## [Elasticsearch Not Processing Messages](https://discuss.elastic.co/t/elasticsearch-not-processing-messages/262299)
**Author:** [@Michael\_Anderson](https://discuss.elastic.co/u/Michael_Anderson)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-not-processing-messages/262299 "2021-01-27T07:52:23Z")
Hello, I have a 4 server Elasticsearch server cluster supporting graylog, and all of a sudden things have stopped working. Elasticsearch logs do not show any overt issues. The cluster is green, etc. However, graylog h… --- ## [Problem with elasticsearch ILM](https://discuss.elastic.co/t/problem-with-elasticsearch-ilm/262265)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 7:35am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-ilm/262265 "2021-01-27T07:35:22Z")
I have an index log-wlb-sysmon-2021.01.26 having 3 shards and zero replica its size is 30 mb. Here is my sysmon index template "refresh\_interval": "5s", "number\_of\_shards": "3", "number\_of\_replicas": "0" Now … --- ## [Esrally deployment on Kubernetes](https://discuss.elastic.co/t/esrally-deployment-on-kubernetes/261960)
**Author:** [@mastermind](https://discuss.elastic.co/u/mastermind)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 7:34am UTC](https://discuss.elastic.co/t/esrally-deployment-on-kubernetes/261960 "2021-01-27T07:34:51Z")
Hi, I want to deploy esrally on the Kubernetes cluster to test the performance and then run the queries can anyone tell me how I can deploy that on Kubernetes cluster. Any help would be appreciated Thank you so much --- ## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/262205)
**Author:** [@sadff](https://discuss.elastic.co/u/sadff)\ **Replies:** 8\ **Last updated:** [January 27, 2021, 6:59am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/262205 "2021-01-27T06:59:25Z")
\*\*config file \*\* version: '2.2' services: es03: image: docker.elastic.co/elasticsearch/elasticsearch:7.10.2 container\_name: es03 environment: - node.name=es03 - network.publish\_host=192.168.61.… --- ## [Grouped bar chart in vega Kibana](https://discuss.elastic.co/t/grouped-bar-chart-in-vega-kibana/262088)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 6:38am UTC](https://discuss.elastic.co/t/grouped-bar-chart-in-vega-kibana/262088 "2021-01-27T06:38:33Z")
Hello Everyone I have a grouped bar chart which is plotted correctly in Vega online editor, but when I try the code in Kibana the graph is not plotted correctly. The desired graph should be like x- axis year groupe… --- ## [Not able to connect elastic search from logstash](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-from-logstash/262309)
**Author:** [@Madhu05281](https://discuss.elastic.co/u/Madhu05281)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 6:20am UTC](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-from-logstash/262309 "2021-01-27T06:20:50Z")
kind: ConfigMap metadata: name: logstash-config namespace: ns-erp data: logstash.conf: |- input { beats { port =\> "9600" } } output { # You can uncomment this line to inves… --- ## [Logstash import two columns](https://discuss.elastic.co/t/logstash-import-two-columns/262236)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 6:08am UTC](https://discuss.elastic.co/t/logstash-import-two-columns/262236 "2021-01-27T06:08:46Z")
Hi I use JDBC driver to connect Logstash with a data base and run a SP in statement. the result of SP is one number(integer) and two columns. I want to send these into one log in Elasticsearch Could you please tell m… --- ## [Whitelisting own cloud elasticsearch instance IP](https://discuss.elastic.co/t/whitelisting-own-cloud-elasticsearch-instance-ip/262313)
**Author:** [@mkadiri](https://discuss.elastic.co/u/mkadiri)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 5:35am UTC](https://discuss.elastic.co/t/whitelisting-own-cloud-elasticsearch-instance-ip/262313 "2021-01-27T05:35:02Z")
For one our deployments we've created a traffic filter via https://cloud.elastic.co/deployment-features/traffic-filters that whitelists our VPN IP addresses. This works as expected, I can only access elasticsearch/kiban… --- ## [Do i need a paid license to configure user-name password?](https://discuss.elastic.co/t/do-i-need-a-paid-license-to-configure-user-name-password/262316)
**Author:** [@pemfir](https://discuss.elastic.co/u/pemfir)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 5:56am UTC](https://discuss.elastic.co/t/do-i-need-a-paid-license-to-configure-user-name-password/262316 "2021-01-27T05:56:20Z")
I work for a company and at this stage doing very preliminary research on toy data on one single server. Do I need a paid license to configure username/password in elastic-search stack ? In particular do I need a paid … --- ## [Request rejected(400) without details(root-cause) in 6.2.4](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185)
**Author:** [@Long\_Quanzheng](https://discuss.elastic.co/u/Long_Quanzheng)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 1:39am UTC](https://discuss.elastic.co/t/request-rejected-400-without-details-root-cause-in-6-2-4/262185 "2021-01-27T01:39:19Z")
Hi, how do I troubleshoot rejected request ElasticSearch 6.2.4? The request got Error: elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] As the returned but there is no detail… --- ## [Some visualisations does not show data in \[Metricbeat Zookeeper\] Overview dasboard in kibana](https://discuss.elastic.co/t/some-visualisations-does-not-show-data-in-metricbeat-zookeeper-overview-dasboard-in-kibana/262287)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 12:48am UTC](https://discuss.elastic.co/t/some-visualisations-does-not-show-data-in-metricbeat-zookeeper-overview-dasboard-in-kibana/262287 "2021-01-27T00:48:26Z")
I have loaded metricbeat dashboards in kibana.In \[Metricbeat Zookeeper\] Overview dashboard, Packets received / sent section does not display any data. I am unable to figure out why it is happening. All other visualisatio… --- ## [Filebeat is running but not sending logs to logstash](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/262283)
**Author:** [@ats](https://discuss.elastic.co/u/ats)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 11:09pm UTC](https://discuss.elastic.co/t/filebeat-is-running-but-not-sending-logs-to-logstash/262283 "2021-01-26T23:09:00Z")
Hi folks, I configured filebeat on a ubuntu instance in aws and sending logs to Logstash but it's not sending to Logstash. Here is my filebeat yml file # ---------------------------- Elasticsearch Output -------------… --- ## [Elasticsearch possible same \_id for parent-child](https://discuss.elastic.co/t/elasticsearch-possible-same-id-for-parent-child/262217)
**Author:** [@J\_Kit](https://discuss.elastic.co/u/J_Kit)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 9:38pm UTC](https://discuss.elastic.co/t/elasticsearch-possible-same-id-for-parent-child/262217 "2021-01-26T21:38:00Z")
Hi As I designing the elastic search for parent-child document type, I encounter this situation where my the parent and Child database table is different. And when I combine both into the parent child, the will be pos… --- ## [Watcher email configuration postfix 7.5](https://discuss.elastic.co/t/watcher-email-configuration-postfix-7-5/262262)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 5:24pm UTC](https://discuss.elastic.co/t/watcher-email-configuration-postfix-7-5/262262 "2021-01-26T17:24:44Z")
Hi, I was using this configuration in elasticsearch.yml for the email, but a friend told me that I was suposed to use the local postfix for the email, currently is pointing to the relay. xpack.notification.email.account… --- ## [Define a global default type for a string](https://discuss.elastic.co/t/define-a-global-default-type-for-a-string/262281)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:56pm UTC](https://discuss.elastic.co/t/define-a-global-default-type-for-a-string/262281 "2021-01-26T20:56:52Z")
Hello, Can I ask elasticsearch to treat incoming strings as keyword , for any future created index without a matched template? Something like global template Thanks --- ## [Remove aggregated sums that equal to 0 from visualization](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271)
**Author:** [@thedevelpr](https://discuss.elastic.co/u/thedevelpr)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 8:52pm UTC](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271 "2021-01-26T20:52:45Z")
\[Kibana 7.9.0v\] I've been trying to remove fields from a bar graph in which their sum is 0. Currently, I am doing a sum aggregation for products sold and displaying it on a bar graph. The sums are correct and the produ… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1584) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1586)