# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1629 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1630 --- ## [java.io.StreamCorruptedException: invalid internal transport message format, got (16,3,3,0)](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-16-3-3-0/257679)
**Author:** [@prashanth\_sri](https://discuss.elastic.co/u/prashanth_sri)\ **Replies:** 16\ **Last updated:** [December 24, 2020, 3:55am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-16-3-3-0/257679 "2020-12-24T03:55:13Z")
hi , i am updating my xpack security in all my cluster nodes , by using this yml.file, action.auto\_create\_index: .monitoring\*,.watches,.triggered\_watches,.watcher-history\*,.ml\* xpack.security.audit.enabled: true … --- ## [How do we include the stack trace of the error on the JavaScript client?](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436)
**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 2:34am UTC](https://discuss.elastic.co/t/how-do-we-include-the-stack-trace-of-the-error-on-the-javascript-client/259436 "2020-12-24T02:34:42Z")
How do we include the stack trace of the error on the JavaScript client? The API says error\_trace is an accepted common parameter, but I couldn't get the complete stack trace of the error\* I was troubleshooting : var … --- ## [Multiple auditbeat file\_integrity module configurations](https://discuss.elastic.co/t/multiple-auditbeat-file-integrity-module-configurations/259540)
**Author:** [@p\_ansell](https://discuss.elastic.co/u/p_ansell)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 1:14am UTC](https://discuss.elastic.co/t/multiple-auditbeat-file-integrity-module-configurations/259540 "2020-12-24T01:14:02Z")
I have had issues in the past with the flexibility of the auditbeat file\_integrity module configuration. On one hand I want to monitor most changes under /etc and similar directories, but on another hand I also want to m… --- ## [Elasticsearch and Logstash logs retention to 7 days](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 11:42pm UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-logs-retention-to-7-days/259464 "2020-12-23T23:42:12Z")
Hi guys, Is there any way to reduce the Elasticsearch and logstash app logs count to 7 days using log4j.properties? Currently as I can observe, the log rotation in /var/log/elasticsearch and /var/log/logstash has no lim… --- ## [How to Search elasticsearch Indexes name filter on Index Creation date](https://discuss.elastic.co/t/how-to-search-elasticsearch-indexes-name-filter-on-index-creation-date/259479)
**Author:** [@yael](https://discuss.elastic.co/u/yael)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 11:24pm UTC](https://discuss.elastic.co/t/how-to-search-elasticsearch-indexes-name-filter-on-index-creation-date/259479 "2020-12-23T23:24:21Z")
How can I filter the result I get from the query: GET /\_cat/indices?h=h,s,i,id,p,r,dc,dd,ss,creation.date.string to all indexes from specific creation.date. Thanks Yael --- ## [Canvas Free Filter](https://discuss.elastic.co/t/canvas-free-filter/259533)
**Author:** [@Caio\_Morgado](https://discuss.elastic.co/u/Caio_Morgado)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 10:58pm UTC](https://discuss.elastic.co/t/canvas-free-filter/259533 "2020-12-23T22:58:47Z")
I would like to know if Canvas has any manual filter option, where I can freely type what I want to filter instead of being a combo with the options. I ask this because there is a field in my index that has many varieti… --- ## [Vega : Area chart - strange datapoints](https://discuss.elastic.co/t/vega-area-chart-strange-datapoints/259465)
**Author:** [@Ganymede](https://discuss.elastic.co/u/Ganymede)\ **Replies:** 2\ **Last updated:** [December 23, 2020, 8:53pm UTC](https://discuss.elastic.co/t/vega-area-chart-strange-datapoints/259465 "2020-12-23T20:53:13Z")
Does somebody know why my data points are twisted at some positions? (fig.1) I use the same data-set in Vega-Lite and it works there. But in Vega I'm missing someting. Maybe someone can help me out in this regard beca… --- ## [How to match every element in the array](https://discuss.elastic.co/t/how-to-match-every-element-in-the-array/259536)
**Author:** [@yaddes](https://discuss.elastic.co/u/yaddes)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-to-match-every-element-in-the-array/259536 "2020-12-23T22:48:22Z")
I am trying to perform an elastic-search query that will return documents where "every" element of the nested collection has a match, not just one. For example, I have a Driver object, with the List of cars, and each ca… --- ## [Why are the arm64 builds hidden?](https://discuss.elastic.co/t/why-are-the-arm64-builds-hidden/258860)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 10:43pm UTC](https://discuss.elastic.co/t/why-are-the-arm64-builds-hidden/258860 "2020-12-23T22:43:38Z")
A few weeks ago ARM64 builds for most beats were available on the download page - now they are hidden but still on artifacts, i.e: https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.9.0-arm64.deb Can … --- ## [How to increase the number of values in kibana lens](https://discuss.elastic.co/t/how-to-increase-the-number-of-values-in-kibana-lens/259450)
**Author:** [@sungjin.kim](https://discuss.elastic.co/u/sungjin.kim)\ **Replies:** 2\ **Last updated:** [December 23, 2020, 9:51pm UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-values-in-kibana-lens/259450 "2020-12-23T21:51:21Z")
Hi folks, How to increase the number of values in kibana lens? in lens, the maximum of number of values is 20. I'd like to show all of data --- ## [Zeek - Filebeat module and Processors for DNS Lookups](https://discuss.elastic.co/t/zeek-filebeat-module-and-processors-for-dns-lookups/259163)
**Author:** [@thinkagain](https://discuss.elastic.co/u/thinkagain)\ **Replies:** 5\ **Last updated:** [December 23, 2020, 9:30pm UTC](https://discuss.elastic.co/t/zeek-filebeat-module-and-processors-for-dns-lookups/259163 "2020-12-23T21:30:56Z")
hi everyone, I'm trying to get acquainted with the ELK platform and trying to understand how the different modules interact with each other. Besides the (internal) ip addresses I would like the result of a dns lookup i… --- ## [Logstash Failed to load the sqljdbc\_auth.dll cause : no sqljdbc\_auth in java.library.path](https://discuss.elastic.co/t/logstash-failed-to-load-the-sqljdbc-auth-dll-cause-no-sqljdbc-auth-in-java-library-path/259530)
**Author:** [@jjfellers](https://discuss.elastic.co/u/jjfellers)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 9:27pm UTC](https://discuss.elastic.co/t/logstash-failed-to-load-the-sqljdbc-auth-dll-cause-no-sqljdbc-auth-in-java-library-path/259530 "2020-12-23T21:27:58Z")
I have pasted the required dll in about 20 different places. Always the same error. With the default logstash installation on CentOS, where is the correct place to place the sqljdbc42.jar (version 4.2.8112) and dll? I pl… --- ## [Kibana gets timed out](https://discuss.elastic.co/t/kibana-gets-timed-out/259512)
**Author:** [@john8](https://discuss.elastic.co/u/john8)\ **Replies:** 8\ **Last updated:** [December 23, 2020, 7:10pm UTC](https://discuss.elastic.co/t/kibana-gets-timed-out/259512 "2020-12-23T19:10:22Z")
I am new to the elk stack I am running kibana in a VM with NAT I am able to ping the virtual machine from the host but when I navigate to http://VMipaddress:9200 it gets timed out. Thanks in advance. --- ## [Pass the url params to my app](https://discuss.elastic.co/t/pass-the-url-params-to-my-app/258401)
**Author:** [@Introverrso](https://discuss.elastic.co/u/Introverrso)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 6:34pm UTC](https://discuss.elastic.co/t/pass-the-url-params-to-my-app/258401 "2020-12-23T18:34:14Z")
Hi! Can anybody please tell me if it is possible to pass the url parameters to my application if they were specified with the base Kibana url? Smth like we get http://kibana:5601?param1=1¶m2=2… then redirecting to … --- ## [Kibana: \["error","elasticsearch","data"\],"pid":35607,"message":"\[status\_exception\]: error while executing search"}](https://discuss.elastic.co/t/kibana-error-elasticsearch-data-pid-35607-message-status-exception-error-while-executing-search/259055)
**Author:** [@Somesh\_ng](https://discuss.elastic.co/u/Somesh_ng)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 6:20pm UTC](https://discuss.elastic.co/t/kibana-error-elasticsearch-data-pid-35607-message-status-exception-error-while-executing-search/259055 "2020-12-23T18:20:51Z")
I'm getting below error while trying to search data from the kibana dashboard. Attaching the UI screenshot. { "request": {}, "response": {}, "body": { "statusCode": 400, "error": "Bad Request", "… --- ## [Unusual timestamp data that needs fixing](https://discuss.elastic.co/t/unusual-timestamp-data-that-needs-fixing/259209)
**Author:** [@dan.mackie](https://discuss.elastic.co/u/dan.mackie)\ **Replies:** 0\ **Last updated:** [December 20, 2020, 11:54pm UTC](https://discuss.elastic.co/t/unusual-timestamp-data-that-needs-fixing/259209 "2020-12-20T23:54:19Z")
Hello all, Elastic 7.9.2 Kibana 7.9.2 I have an index that has somehow ended up with a date 20000 years in the future. I thought at first that the @timestamp field had simply been misinterpreted as text by elastic, w… --- ## [Logstash parse object](https://discuss.elastic.co/t/logstash-parse-object/259513)
**Author:** [@bbwolf](https://discuss.elastic.co/u/bbwolf)\ **Replies:** 4\ **Last updated:** [December 23, 2020, 6:13pm UTC](https://discuss.elastic.co/t/logstash-parse-object/259513 "2020-12-23T18:13:52Z")
Hello, I have in a field which I need to split thé next values FieldA : "\[{" FieldA1" :"A", "FieldA2" :"B"}{"FieldA1" :"C", "FieldA2" :"D"\]}" I wan't to split FieldA as two documents {" FieldA1" :"A", "FieldA2" :"B"}… --- ## [Creating watcher script if particular value ina field occurs more than five times in five minutes interval of time](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259375)
**Author:** [@sangatamilan](https://discuss.elastic.co/u/sangatamilan)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 11:16am UTC](https://discuss.elastic.co/t/creating-watcher-script-if-particular-value-ina-field-occurs-more-than-five-times-in-five-minutes-interval-of-time/259375 "2020-12-22T11:16:57Z")
Hi can anyone help how can we create a watcher script for the below requirement I having a field called "log\_message" contaning the below message Failed to load TermRecord for TermID=\*\*\*\*\*\* here the terminal id can be… --- ## [ERROR: Something went wrong when installing logstash-input-websocket,](https://discuss.elastic.co/t/error-something-went-wrong-when-installing-logstash-input-websocket/259518)
**Author:** [@srigayathri](https://discuss.elastic.co/u/srigayathri)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 6:02pm UTC](https://discuss.elastic.co/t/error-something-went-wrong-when-installing-logstash-input-websocket/259518 "2020-12-23T18:02:04Z")
Trying to install the logstash-input-websocket plugin in a corporate environment and been receiving the following error. Could anyone please help me out. WARNING: A maven settings file already exist at C:\\Users\\\ **Author:** [@jtillman2020](https://discuss.elastic.co/u/jtillman2020)\ **Replies:** 6\ **Last updated:** [December 23, 2020, 5:58pm UTC](https://discuss.elastic.co/t/winlogbeat-not-dropping-multicast-traffic-using-drop-event-when-or/259428 "2020-12-23T17:58:40Z") Using drop\_event.when.or I've attempted to exclude multicast traffic logs from being sent over as well as logs containing the keyword "zabbix". However, I am still receiving these events. winlogbeat.event\_logs: - name… --- ## [Search across all fields on Kibana](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499)
**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\ **Replies:** 5\ **Last updated:** [December 23, 2020, 5:25pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499 "2020-12-23T17:25:00Z")
Hi, I'm sorry to ask this question but I didn't find anything on google on on the forum concerning this. I would like to search, on kibana, on all fields with a simple value. For example, in Discover, into the KQL bar… --- ## [Can a filter created from Kibana Canvas be applied to saved visualizations created from Kibana Visualisations?](https://discuss.elastic.co/t/can-a-filter-created-from-kibana-canvas-be-applied-to-saved-visualizations-created-from-kibana-visualisations/258396)
**Author:** [@Sandeep\_Bhargava\_Vem](https://discuss.elastic.co/u/Sandeep_Bhargava_Vem)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 5:24pm UTC](https://discuss.elastic.co/t/can-a-filter-created-from-kibana-canvas-be-applied-to-saved-visualizations-created-from-kibana-visualisations/258396 "2020-12-23T17:24:43Z")
I have a few visualizations that I have created using Kibana Visualize panel. I now have built a Canvas workpad and have added these visualizations to the workpad. What I want to do now is, create a filter using Add Ele… --- ## [How bars charts ordering works?](https://discuss.elastic.co/t/how-bars-charts-ordering-works/259269)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 5:20pm UTC](https://discuss.elastic.co/t/how-bars-charts-ordering-works/259269 "2020-12-23T17:20:57Z")
Hello everyone, I would like to understand how does bars charts are working with the ordering of the values we input because I have this example which doesn't seems logic to me: For the client RTENOT I have 11,178 hi… --- ## [Life Cycle Policies: Alias for rollover index](https://discuss.elastic.co/t/life-cycle-policies-alias-for-rollover-index/259390)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 1:55pm UTC](https://discuss.elastic.co/t/life-cycle-policies-alias-for-rollover-index/259390 "2020-12-22T13:55:12Z")
Kibana version : 7.10.0 Elasticsearch version : 7.10.0 Filebeat version : 7.10.0 Logstash version : 7.10.0 Good day, I'm trying to set up a lifecycle management for my indices. Therefore I created two index template… --- ## [Removed field mapping is still shown in index](https://discuss.elastic.co/t/removed-field-mapping-is-still-shown-in-index/259511)
**Author:** [@raghavendra186](https://discuss.elastic.co/u/raghavendra186)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 4:39pm UTC](https://discuss.elastic.co/t/removed-field-mapping-is-still-shown-in-index/259511 "2020-12-23T16:39:21Z")
Hi, I faced error saying "could not index to elastic limit of 9k exceeded". i planned to reduce unwanted fields using remove\_field in logstash. my incoming json gets 9k fields. i have applied mutate filter in logstash t… --- ## [Health check failed](https://discuss.elastic.co/t/health-check-failed/259430)
**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\ **Replies:** 5\ **Last updated:** [December 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/health-check-failed/259430 "2020-12-23T16:31:33Z")
I am trying to install Elasticserver in Linux, after I ran the server I am facing the below issue. Can you please help me to resolve this? \[2020-12-22T00:02:31,363\]\[ERROR\]\[o.e.m.f.FsHealthService \] \[GTHYJDEV01.pneus.to… --- ## [How to handle watermark.low](https://discuss.elastic.co/t/how-to-handle-watermark-low/258955)
**Author:** [@Kxn7](https://discuss.elastic.co/u/Kxn7)\ **Replies:** 3\ **Last updated:** [December 23, 2020, 4:02pm UTC](https://discuss.elastic.co/t/how-to-handle-watermark-low/258955 "2020-12-23T16:02:13Z")
Hi, We recently had the case that multiple nodes of our ElasticSearch cluster running version 7.3.2 reached the low watermark threshold. We immediately added some nodes to counteract the increase in disk usage and made… --- ## [How this elasticsearch input plugin works in logstash?](https://discuss.elastic.co/t/how-this-elasticsearch-input-plugin-works-in-logstash/259371)
**Author:** [@deshpas](https://discuss.elastic.co/u/deshpas)\ **Replies:** 3\ **Last updated:** [December 23, 2020, 3:58pm UTC](https://discuss.elastic.co/t/how-this-elasticsearch-input-plugin-works-in-logstash/259371 "2020-12-23T15:58:51Z")
I am trying to transfer data from one AWS ES cluster to another AWS ES cluster and in this case, i am going to use the schedule option to pull the data from input every time. I would like to understand how this elastic… --- ## [Fixed time instead of time range](https://discuss.elastic.co/t/fixed-time-instead-of-time-range/259474)
**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 3:56pm UTC](https://discuss.elastic.co/t/fixed-time-instead-of-time-range/259474 "2020-12-23T15:56:01Z")
Hi. I create visualize metric, I want to Fix the time for this visualize metric and show the all count index. Somehow if I created a dashboard and I use this visualize metic in the dashboard and when I change the time ra… --- ## [Connect kibana with Other application](https://discuss.elastic.co/t/connect-kibana-with-other-application/259475)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [December 23, 2020, 3:55pm UTC](https://discuss.elastic.co/t/connect-kibana-with-other-application/259475 "2020-12-23T15:55:20Z")
Hi, I want to show kibana dashboard in my application and also I don't want my user to enter credentials, with the application credentials the user can able to access kibana. can some one give me a method or a way to s… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1628) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1630)