# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1603 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1604 --- ## [Canvas Issue - math](https://discuss.elastic.co/t/canvas-issue-math/261086)
**Author:** [@florian.wallner](https://discuss.elastic.co/u/florian.wallner)\ **Replies:** 6\ **Last updated:** [January 14, 2021, 4:13pm UTC](https://discuss.elastic.co/t/canvas-issue-math/261086 "2021-01-14T16:13:34Z")
Hey Maybe someone got that issue already - I am doing a SQL query which is working fine - but as soon as I change the value from AVG to PERCENTILE I am getting following error message: Whoops! Expression failed Express… --- ## [Unconfined services with Elasticsearch](https://discuss.elastic.co/t/unconfined-services-with-elasticsearch/260151)
**Author:** [@redplastic](https://discuss.elastic.co/u/redplastic)\ **Replies:** 5\ **Last updated:** [January 14, 2021, 4:01pm UTC](https://discuss.elastic.co/t/unconfined-services-with-elasticsearch/260151 "2021-01-14T16:01:17Z")
I'm attempting to use Elasticsearch on Centos but have some concerns over the unconfined java and controller services that Elasticsearch uses. With the system's initial blocking of unconfined services due to security con… --- ## [Shards rebalance when adding nodes and using one primary and one replica](https://discuss.elastic.co/t/shards-rebalance-when-adding-nodes-and-using-one-primary-and-one-replica/260954)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 6\ **Last updated:** [January 14, 2021, 3:35pm UTC](https://discuss.elastic.co/t/shards-rebalance-when-adding-nodes-and-using-one-primary-and-one-replica/260954 "2021-01-14T15:35:50Z")
Hello ! I plan to use one primary and one replica by day. If I add more nodes, does the shards will be automatically rebalanced equally on all the nodes even if I have only one primary and one replica ? I'm asking th… --- ## [S3 Output Plugin tag in Filename](https://discuss.elastic.co/t/s3-output-plugin-tag-in-filename/261087)
**Author:** [@okgnae](https://discuss.elastic.co/u/okgnae)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 3:31pm UTC](https://discuss.elastic.co/t/s3-output-plugin-tag-in-filename/261087 "2021-01-14T15:31:18Z")
The filenames uploaded to S3 are auto generated by logstash, but there seems to be a way to add a "tag" to the file name. What is the proper syntaxt to preform this function? The docs mention this as a possibility, bu… --- ## [Elastic and kibana doesnt work anymor after editing and restore configuration file](https://discuss.elastic.co/t/elastic-and-kibana-doesnt-work-anymor-after-editing-and-restore-configuration-file/259309)
**Author:** [@first100](https://discuss.elastic.co/u/first100)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 11:21pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-doesnt-work-anymor-after-editing-and-restore-configuration-file/259309 "2020-12-21T23:21:39Z")
I am working on an instance of Elastic already installed on a Windows server and running fine. I tried to change the Elastic configuration file to set the https by adding the lines I saw here: \[https://www.elastic.co/b… --- ## [Can't add a new node to an es cluster with x-pack:enabled](https://discuss.elastic.co/t/cant-add-a-new-node-to-an-es-cluster-with-x-pack-enabled/260862)
**Author:** [@KaZuKi\_Yashiro](https://discuss.elastic.co/u/KaZuKi_Yashiro)\ **Replies:** 4\ **Last updated:** [January 14, 2021, 3:04pm UTC](https://discuss.elastic.co/t/cant-add-a-new-node-to-an-es-cluster-with-x-pack-enabled/260862 "2021-01-14T15:04:43Z")
I need to transfer the elasticsearch cluster from two servers to another two servers, without downtime or restart. How can this be done? I've tried to add a new node to an existing cluster with x-pack, but it doesn't w… --- ## [Logstash-http-poller-plugin-fails-to-disable-ssl-validation](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/261135)
**Author:** [@Moataz\_abd\_el\_fattah](https://discuss.elastic.co/u/Moataz_abd_el_fattah)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 2:36pm UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/261135 "2021-01-14T14:36:12Z")
I have solved http-poller ssl check issue (conflict of CN name) with the below workaround Modify the below file /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/manticore-0.7.0-java/lib/manticore/client.rb add veri… --- ## [ELK 7.8.0 two node cluster "At least one primary shard for the index \[.security-7\] is unavailable"](https://discuss.elastic.co/t/elk-7-8-0-two-node-cluster-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/261031)
**Author:** [@Vishnu\_Oyitty](https://discuss.elastic.co/u/Vishnu_Oyitty)\ **Replies:** 3\ **Last updated:** [January 14, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elk-7-8-0-two-node-cluster-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/261031 "2021-01-14T14:23:07Z")
Hello, We are on a two node ELK cluster and noticing the below error suddennly. As the error says .security index seems to be corrupted. Is there anyway to restore the old state? Due to this kibana is not loading, none… --- ## [Pop up is coming in discover screen after increasing network latency (20000ms)](https://discuss.elastic.co/t/pop-up-is-coming-in-discover-screen-after-increasing-network-latency-20000ms/259546)
**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\ **Replies:** 8\ **Last updated:** [January 14, 2021, 2:14pm UTC](https://discuss.elastic.co/t/pop-up-is-coming-in-discover-screen-after-increasing-network-latency-20000ms/259546 "2021-01-14T14:14:21Z")
Hi, Use Case : I am using google chrome, and I set the network latency to 20000ms from throttling tab under the settings. Then go to the discover screen and click on the refresh button. it will process the page and it w… --- ## [Kibana: docker environment variable translation for xpack.task\_manager.index](https://discuss.elastic.co/t/kibana-docker-environment-variable-translation-for-xpack-task-manager-index/260624)
**Author:** [@ade.syseng](https://discuss.elastic.co/u/ade.syseng)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-docker-environment-variable-translation-for-xpack-task-manager-index/260624 "2021-01-14T14:12:56Z")
Hi, I'm just learning to implement Elastic Stack on Docker swarm configuration. I have an issue to rename index default name ".kibana\_task\_manager" using "xpack.task\_manager.index". According to this documentation all … --- ## [Failed to create tempfile (/.filebeat.new) for writing: open /.filebeat.new: permission denied](https://discuss.elastic.co/t/failed-to-create-tempfile-filebeat-new-for-writing-open-filebeat-new-permission-denied/261132)
**Author:** [@prashant\_Rajenderan](https://discuss.elastic.co/u/prashant_Rajenderan)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 2:08pm UTC](https://discuss.elastic.co/t/failed-to-create-tempfile-filebeat-new-for-writing-open-filebeat-new-permission-denied/261132 "2021-01-14T14:08:34Z")
I noticed that filebeat agent is not shipping the logs, when I tried restarting the service I found the following error. Also, when I run sudo ./filebeat -e output returns nothing. By looking at the logs "permission deni… --- ## [Query\_string not working as expected for multiple fields with AND as default\_operator](https://discuss.elastic.co/t/query-string-not-working-as-expected-for-multiple-fields-with-and-as-default-operator/261128)
**Author:** [@san87singh](https://discuss.elastic.co/u/san87singh)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 1:51pm UTC](https://discuss.elastic.co/t/query-string-not-working-as-expected-for-multiple-fields-with-and-as-default-operator/261128 "2021-01-14T13:51:13Z")
We are not able to get match for a query on multiple fields using query\_string. We are not sure why it is not working even if it's a simple query. Below is the query, document and mapping (index) that we are using: Quer… --- ## [Updated docker application logs not getting processed](https://discuss.elastic.co/t/updated-docker-application-logs-not-getting-processed/260991)
**Author:** [@codex](https://discuss.elastic.co/u/codex)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 1:45pm UTC](https://discuss.elastic.co/t/updated-docker-application-logs-not-getting-processed/260991 "2021-01-14T13:45:12Z")
Hi, I'm fairly new to Elastic Search, and I'm experiencing strange behaviour when re-deploying an application that sends its logs to ELK. The application is a Java app and using Filebeat to send the logs (both running in… --- ## [How can I sync an entire dynamodb table with Elasticsearch?](https://discuss.elastic.co/t/how-can-i-sync-an-entire-dynamodb-table-with-elasticsearch/261063)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 3\ **Last updated:** [January 14, 2021, 1:35pm UTC](https://discuss.elastic.co/t/how-can-i-sync-an-entire-dynamodb-table-with-elasticsearch/261063 "2021-01-14T13:35:48Z")
Hi all, I am having trouble to connect ES to dynamodb. Today I use a python lambda (serverless) to send every dynamodb change (update, delete, modify) to the Elasticsearch clusters. But we want to be able to reindex old… --- ## [How to extract out a index worth of data to read](https://discuss.elastic.co/t/how-to-extract-out-a-index-worth-of-data-to-read/261117)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 11:59am UTC](https://discuss.elastic.co/t/how-to-extract-out-a-index-worth-of-data-to-read/261117 "2021-01-14T11:59:43Z")
Hi All, So my current elastic search setup is configured to receive records in monthly indexes. Typically, to view a record of a specific condition, all I would need to do is to input some filter conditions through ela… --- ## [Kibana server is not ready yet - All collectors are not ready. Waiting for 60000ms longer](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-all-collectors-are-not-ready-waiting-for-60000ms-longer/260864)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 11\ **Last updated:** [January 14, 2021, 11:52am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-all-collectors-are-not-ready-waiting-for-60000ms-longer/260864 "2021-01-14T11:52:01Z")
I succesfuly upgraded my 3\*nodes Elasticsearch cluster from 6.5.4 to 6.8.13 Then, I upgraded my Kibana server along the same path. Then no way to get kibana portal ... always displaying "Kibana server is not ready yet" … --- ## [How to prevent autmatically type conversion in elasticsearch](https://discuss.elastic.co/t/how-to-prevent-autmatically-type-conversion-in-elasticsearch/260999)
**Author:** [@Vahid\_Alizadeh](https://discuss.elastic.co/u/Vahid_Alizadeh)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 7:19am UTC](https://discuss.elastic.co/t/how-to-prevent-autmatically-type-conversion-in-elasticsearch/260999 "2021-01-14T07:19:50Z")
hi, i use filebeat to send tomcat accesslog to logstash and after that send from logstash to elasticsearch, my data has a field with name logDate, i convert it to string in filebeat and logstash but its type in elastic… --- ## [How to tun two ES nodes on same server on two diffrent cluster](https://discuss.elastic.co/t/how-to-tun-two-es-nodes-on-same-server-on-two-diffrent-cluster/260983)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-to-tun-two-es-nodes-on-same-server-on-two-diffrent-cluster/260983 "2021-01-14T11:44:21Z")
HI , We need to migrate one of the node from one ES cluster1 to ES clsuter2 without any data loss during the process , so we are trying to execute one more instance of elasticsearch on same node with cluster.name as cl… --- ## [Best Practices for templates created for Indexing?](https://discuss.elastic.co/t/best-practices-for-templates-created-for-indexing/260301)
**Author:** [@mohamed.farhan](https://discuss.elastic.co/u/mohamed.farhan)\ **Replies:** 4\ **Last updated:** [January 14, 2021, 11:18am UTC](https://discuss.elastic.co/t/best-practices-for-templates-created-for-indexing/260301 "2021-01-14T11:18:53Z")
Hello, Can anyone would let me know if there are best practices for creating templates for indices? --- ## [7.10 packages without bundled JDK?](https://discuss.elastic.co/t/7-10-packages-without-bundled-jdk/261108)
**Author:** [@robleady](https://discuss.elastic.co/u/robleady)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 11:08am UTC](https://discuss.elastic.co/t/7-10-packages-without-bundled-jdk/261108 "2021-01-14T11:08:58Z")
Are any pre-built binaries for 7.10.x available (specifically Debian) that don't have a bundled JDK? I'm in the process of creating an OS build which will require its own JDK and I'm keen on not having multiple versions… --- ## [Timelion filtering on array property](https://discuss.elastic.co/t/timelion-filtering-on-array-property/259380)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 11:03am UTC](https://discuss.elastic.co/t/timelion-filtering-on-array-property/259380 "2021-01-14T11:03:09Z")
Hi, I have index that holds documents like this one : { "\_index": "flights\_points", "\_type": "\_doc", "\_id": "dsgh-htg-2664.32080600", "\_score": 1, "\_source": … --- ## [Filebeat -\> logstash -\> elastic -\> kibana succesfully connected each other .But i dont see any log from filebeat in kibana view. Also index created in elasticsearch when filebeat connected](https://discuss.elastic.co/t/filebeat-logstash-elastic-kibana-succesfully-connected-each-other-but-i-dont-see-any-log-from-filebeat-in-kibana-view-also-index-created-in-elasticsearch-when-filebeat-connected/261114)
**Author:** [@Seymur855](https://discuss.elastic.co/u/Seymur855)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 10:59am UTC](https://discuss.elastic.co/t/filebeat-logstash-elastic-kibana-succesfully-connected-each-other-but-i-dont-see-any-log-from-filebeat-in-kibana-view-also-index-created-in-elasticsearch-when-filebeat-connected/261114 "2021-01-14T10:59:23Z")
ElasticSearch version :7.5.2 Kibana version : 7.5.2 Filebeat version: 7.6.0 Logstash version:7.10.1 filebeat.yml filebeat.inputs: type: log enabled: true paths: C:\\ELASTIC\_KIBANA\\filebeat-7.6.0-windows-x86\_64\\lo… --- ## [Fleet won't Work in Kibana](https://discuss.elastic.co/t/fleet-wont-work-in-kibana/259274)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 10:54am UTC](https://discuss.elastic.co/t/fleet-wont-work-in-kibana/259274 "2021-01-14T10:54:36Z")
Hi guys , lately i downloaded the ELK latest version (7.10.1) and the latest version of the elastic Agent , when i start kibana the fleet tab won't show a thing, it keeps on loanding and then shows me this message \> Unab… --- ## [On Kibana web interface l doesn't appear result of logstash](https://discuss.elastic.co/t/on-kibana-web-interface-l-doesnt-appear-result-of-logstash/260793)
**Author:** [@Tabriz](https://discuss.elastic.co/u/Tabriz)\ **Replies:** 13\ **Last updated:** [January 12, 2021, 12:36pm UTC](https://discuss.elastic.co/t/on-kibana-web-interface-l-doesnt-appear-result-of-logstash/260793 "2021-01-12T12:36:29Z")
What l need to do Thanks --- ## [Hyphenation\_decompounder tokens do not consider "Operator" in multi-match query](https://discuss.elastic.co/t/hyphenation-decompounder-tokens-do-not-consider-operator-in-multi-match-query/261102)
**Author:** [@wn1099](https://discuss.elastic.co/u/wn1099)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 10:10am UTC](https://discuss.elastic.co/t/hyphenation-decompounder-tokens-do-not-consider-operator-in-multi-match-query/261102 "2021-01-14T10:10:49Z")
Hi, I used hyphenation\_decompounder(https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-hyp-decomp-tokenfilter.html) for German language and followed the example as mentioned in the documentation. S… --- ## [Bootstrap check failed in es 7.10.1](https://discuss.elastic.co/t/bootstrap-check-failed-in-es-7-10-1/261080)
**Author:** [@f4ct0r](https://discuss.elastic.co/u/f4ct0r)\ **Replies:** 4\ **Last updated:** [January 14, 2021, 9:38am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-in-es-7-10-1/261080 "2021-01-14T09:38:04Z")
Hey guys, I'm using kubernetes to deploy Elasticsearch 7.10.1. at first, my elasticsearch cluster running perfect. but when i restart the pods of elasticsearch, the elasticsearch cluster going error: ERROR: \[1\] bootst… --- ## [Logging in an ElasticSearch plugin](https://discuss.elastic.co/t/logging-in-an-elasticsearch-plugin/261097)
**Author:** [@coreation](https://discuss.elastic.co/u/coreation)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 9:28am UTC](https://discuss.elastic.co/t/logging-in-an-elasticsearch-plugin/261097 "2021-01-14T09:28:18Z")
Hello everyone, I'm working on a simple ElasticSearch plugin that computes a score for a document. What I would love to do is to be able to debug the plugin so that I can write to the standard output which document is b… --- ## [Add tags in filebeat modules](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/261014)
**Author:** [@vasilev](https://discuss.elastic.co/u/vasilev)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 9:25am UTC](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/261014 "2021-01-14T09:25:01Z")
Hello, I have read this information: Can I add a tag in ibmmq module ? tried with: errorlog: enabled: true var.paths: \["/var/mqm/qmgrs/\*/errors/\*.json"\] # json.tags: ibmmq # tags: \["ibmmq", json\] and… --- ## [Max value of index with scripted field in visualizasion](https://discuss.elastic.co/t/max-value-of-index-with-scripted-field-in-visualizasion/260688)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 7\ **Last updated:** [January 14, 2021, 9:21am UTC](https://discuss.elastic.co/t/max-value-of-index-with-scripted-field-in-visualizasion/260688 "2021-01-14T09:21:47Z")
Hello. I'm trying to make linear visualization with average workTime per document and max workTime throw all index. I have two dates: start and end process. So i created scripted field doc\['end\_time'\].value.toInstant().… --- ## [Using Elasticsearch in intergration test](https://discuss.elastic.co/t/using-elasticsearch-in-intergration-test/260742)
**Author:** [@mojtaba\_safavi](https://discuss.elastic.co/u/mojtaba_safavi)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 9:06am UTC](https://discuss.elastic.co/t/using-elasticsearch-in-intergration-test/260742 "2021-01-14T09:06:58Z")
I want elasticsearch in memorydb for Integration test in .net platform. same as other db in memorydb. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1602) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1604)