# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1639 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1640 --- ## [Errors in Kibana logs](https://discuss.elastic.co/t/errors-in-kibana-logs/258968)
**Author:** [@aramos](https://discuss.elastic.co/u/aramos)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 10:42am UTC](https://discuss.elastic.co/t/errors-in-kibana-logs/258968 "2020-12-17T10:42:39Z")
Good morning, The first sorry for my English. I am new on Linux, I have to install Kibana. I'm using Ubuntu Server 2004. I installed kibana 7.9.3 from the .tar file following the instructions https://www.elastic.co/gui… --- ## [Kibana Plugin Installation Fails](https://discuss.elastic.co/t/kibana-plugin-installation-fails/258781)
**Author:** [@sukur55](https://discuss.elastic.co/u/sukur55)\ **Replies:** 5\ **Last updated:** [December 17, 2020, 10:28am UTC](https://discuss.elastic.co/t/kibana-plugin-installation-fails/258781 "2020-12-17T10:28:06Z")
Hi, currently I have Kibana 7.10.0 ,I am trying to install logtrail plugin.I have followed documentation and changed Kibana version inside package.json correctly zipped again but when I install it throws following error. … --- ## [Logstash not working when started via systemctl, however it work when manually starting](https://discuss.elastic.co/t/logstash-not-working-when-started-via-systemctl-however-it-work-when-manually-starting/258973)
**Author:** [@baljka](https://discuss.elastic.co/u/baljka)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 10:20am UTC](https://discuss.elastic.co/t/logstash-not-working-when-started-via-systemctl-however-it-work-when-manually-starting/258973 "2020-12-17T10:20:39Z")
Hello, Everything was working fine. However it suddenly stopped working. Now when I try running command "/usr/share/logstash/bin/logstash --path.settings /etc/logstash" manually, it works fine When I run command "syst… --- ## [Autogenerating field names from csv headers](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638)
**Author:** [@toucan](https://discuss.elastic.co/u/toucan)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 9:27am UTC](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638 "2020-12-17T09:27:07Z")
Hi, I'm trying to parse CSV files with Logstash. Some of the files have a column called time, others have two columns called time\_from and time\_to (and they have several other columns). Ideally I'd like to have one pipe… --- ## [Searching Document (NEST) with Selecting fields to return](https://discuss.elastic.co/t/searching-document-nest-with-selecting-fields-to-return/258967)
**Author:** [@mohannad](https://discuss.elastic.co/u/mohannad)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 9:05am UTC](https://discuss.elastic.co/t/searching-document-nest-with-selecting-fields-to-return/258967 "2020-12-17T09:05:43Z")
Hi, I am quite new in Elasticsearch and I have some questions. The case is "FS-Crawler" is used with Elastic to index a group of documents. I am trying to search (using NEST) the content of the documents with filtration… --- ## [Supported output types for elastic agent?](https://discuss.elastic.co/t/supported-output-types-for-elastic-agent/258901)
**Author:** [@slmingol](https://discuss.elastic.co/u/slmingol)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/supported-output-types-for-elastic-agent/258901 "2020-12-17T08:56:29Z")
Is it safe to assume that given Elastic Agent is built on top of \*beats technology that it'll support the use of different output types such as Kafka? https://www.elastic.co/guide/en/beats/filebeat/master/kafka-output.… --- ## [Snapshot & Restore on Windows can not access directory](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 8:04am UTC](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472 "2020-12-17T08:04:23Z")
We've got a 3 Node Elastic Cluster on Windows 10 (Customer Request) and i would like to configure the snapshot restore ability for the cluster. What i've done is to create a share on one of the Node (seperate Harddisk),… --- ## [Would ES reindex API ignore all updates post reindex is triggered](https://discuss.elastic.co/t/would-es-reindex-api-ignore-all-updates-post-reindex-is-triggered/258948)
**Author:** [@the123saurav](https://discuss.elastic.co/u/the123saurav)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 7:32am UTC](https://discuss.elastic.co/t/would-es-reindex-api-ignore-all-updates-post-reindex-is-triggered/258948 "2020-12-17T07:32:49Z")
I read that ES' reindex API works by taking a snapshot of the source index. So let's say i triggered reindexing at T0 and this finished at T2. So if say any create/update/delete came for any document at T1 (T0 \< T1 \< T… --- ## [Does close index free up disk or memory](https://discuss.elastic.co/t/does-close-index-free-up-disk-or-memory/258868)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 6:40am UTC](https://discuss.elastic.co/t/does-close-index-free-up-disk-or-memory/258868 "2020-12-17T06:40:14Z")
Hi, I am using elasticsearch6.5 as single node, using 8GB of JVM and just 3% of memory is free. Will closing index using close API help to free heap memory .please tell what are the advantages of close index --- ## [Understanding RestClient.java and its use of DEFAULT\_MAX\_CONN\_TOTAL](https://discuss.elastic.co/t/understanding-restclient-java-and-its-use-of-default-max-conn-total/258583)
**Author:** [@bdbusches](https://discuss.elastic.co/u/bdbusches)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 6:07am UTC](https://discuss.elastic.co/t/understanding-restclient-java-and-its-use-of-default-max-conn-total/258583 "2020-12-17T06:07:13Z")
We're having difficulty with RestClient against a large 700 node ES cluster. Under a moderate search load (47 concurrent searches) we see extensive use of I/O Dispatchers (based on the default I/O Recator configs in th… --- ## [How to find Retention Rate of users in kibana](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 4:23am UTC](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705 "2020-12-17T04:23:01Z")
How to create a chart in kibana to represent Retention Rate. --- ## [Mapping fields xxx cannot be replaced during template composition](https://discuss.elastic.co/t/mapping-fields-xxx-cannot-be-replaced-during-template-composition/258938)
**Author:** [@amingo123](https://discuss.elastic.co/u/amingo123)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 2:44am UTC](https://discuss.elastic.co/t/mapping-fields-xxx-cannot-be-replaced-during-template-composition/258938 "2020-12-17T02:44:06Z")
When i try to create new index as below, PUT /message202010 { "mappings": { "properties": { "CrashStatus": { "type": "keyword"}}}} i got the error message: { "error" : { "root\_cause" : \[ { "type" : "illegal\_a… --- ## [Filebeats with metricbeats data in standalone cluster](https://discuss.elastic.co/t/filebeats-with-metricbeats-data-in-standalone-cluster/258841)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 1:40am UTC](https://discuss.elastic.co/t/filebeats-with-metricbeats-data-in-standalone-cluster/258841 "2020-12-17T01:40:55Z")
Hello, I am trying to move over to metricbeat monitoring running 7.10 eveywhere I have Filebeat -\> logstash -\> elastic main cluster filebeat node metricbeat -\> monitoring cluster logstash node metricbeat -\> monitorin… --- ## [Docker Metricbeat 7.6.0 doesn't send Host processes](https://discuss.elastic.co/t/docker-metricbeat-7-6-0-doesnt-send-host-processes/257684)
**Author:** [@gregbk](https://discuss.elastic.co/u/gregbk)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 1:38am UTC](https://discuss.elastic.co/t/docker-metricbeat-7-6-0-doesnt-send-host-processes/257684 "2020-12-17T01:38:26Z")
Hello ELK community! I tried to run a basic setup with ELK version 7.6.0 Metricbeat.yml metricbeat.config: modules: path: ${path.config}/modules.d/\*.yml # Reload module configs as they change: reload.ena… --- ## [Kibana Plugin Development Issue on AWS ec2](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 12\ **Last updated:** [December 17, 2020, 12:22am UTC](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511 "2020-12-17T00:22:42Z")
Hello, I am running the development environment on an AWS ec2 instance with 8GB of RAM, 25GB disk space and on AWS Linux 2. I have read somewhere that it this environment has issues running on the web. I was following… --- ## [Watcher upgrade API run required (7.10)](https://discuss.elastic.co/t/watcher-upgrade-api-run-required-7-10/256751)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 5\ **Last updated:** [December 16, 2020, 8:30pm UTC](https://discuss.elastic.co/t/watcher-upgrade-api-run-required-7-10/256751 "2020-12-16T20:30:45Z")
Hi I have not starting watcher, upgrade API run required: .watches\[false\] in my logs on 7.10 This Implies that the issue occurs between 5x and 6x but this cluster was built this year and has never been 5x or 6x ho… --- ## [How to have an attribute value to really make a difference in score? (help with rank\_feature needed)](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 11:33pm UTC](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927 "2020-12-16T23:33:29Z")
Hello we have an attribute in our documents called "popularity", which is a number between 0 and 100. Our goal is to boost the relevance of the results in such a way that the results will look ordered by popularity and … --- ## [Time filter is not working](https://discuss.elastic.co/t/time-filter-is-not-working/258000)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 6\ **Last updated:** [December 16, 2020, 10:58pm UTC](https://discuss.elastic.co/t/time-filter-is-not-working/258000 "2020-12-16T22:58:09Z")
Hello, this is our Canvas workpad: As you can see time filter on top of the page does not work correctly regarding the elements presented in the data table. This is the expression of the time filter: This is the… --- ## [Elasticsearch 7.7.1 Increasing index.mapping.total\_fields.limit](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871 "2020-12-16T22:34:16Z")
I have read the below discussions https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217 https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mappin… --- ## [Logstash error: Java::JavaLang::NoClassDefFoundError: javax/xml/bind/DatatypeConverter](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920)
**Author:** [@streible](https://discuss.elastic.co/u/streible)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:24pm UTC](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920 "2020-12-16T22:24:50Z")
Hi everyone, I'm hoping someone can lend a hand or give some guidance. I have recently installed Elasticsearch on Ubuntu 20.04 and have most everything up and running. I am working with SQL Server 2019 on a remote mac… --- ## [Can i get via API info about indicies but like pattern(index1\*,index2\*)?](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:07pm UTC](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877 "2020-12-16T22:07:10Z")
Hi all! Can i get via API info about indicies but like pattern (index1\*,index2\*)? I get info by API "GET /\_cat/indices?h=index,store.size&bytes=kb&format=json" and result like: \[ { "index" : "index1-2020.12.16", "s… --- ## [Elasticsearch Windows Manager GUI](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887 "2020-12-16T22:05:17Z")
Hello, I am looking more details about the Manager GUI feature, which can be triggered through elasticsearch-service.bat manager For example, From "Java" tab, where all the details related to Java options are b… --- ## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/258909)
**Author:** [@velu](https://discuss.elastic.co/u/velu)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/258909 "2020-12-16T22:01:49Z")
Hi , Please help me how to resolve the below issue. 2020-12-16 18:47:47 ERROR agent:123 - Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action:… --- ## [As of 7.x log4j2 no longer supports "IfLastModified"](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918)
**Author:** [@Eric\_Bates](https://discuss.elastic.co/u/Eric_Bates)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918 "2020-12-16T22:01:39Z")
There is an example given on Logging to rotate logs every 7 days instead of waiting for 2G of logs to accumulate. This example worked well for ELK 6.x, but as of upgrading to 7.x, it now produces the error: Dec 16 16:42… --- ## [Elasticsearch 7.10 : How to safely remove a node and free up space?](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624)
**Author:** [@Soumya\_Ranjan\_Sahoo](https://discuss.elastic.co/u/Soumya_Ranjan_Sahoo)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624 "2020-12-16T21:24:28Z")
As I am running out of my disk space, I want to remove all the indices from the node. Note that I have just one node, and I am running the elastic server on my local machine. Basically, when I start the elastic server, … --- ## [Upgrade issue from 5.6.8 to 6.0](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784)
**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:20pm UTC](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784 "2020-12-16T21:20:39Z")
Similar to this issue, I cannot set the suggested script.allowed\_types setting. I am using Elastic Cloud and have tried disabling Disable inline/file/stored script and Enabling sandboxed inline/file/stored scripts. None … --- ## [Can you have multiple actions in one single mutate block?](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 9:10pm UTC](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913 "2020-12-16T21:10:15Z")
Can you have multiple actions in one single mutate block or do you need a mutate block for each: mutate { copy =\> { "server\_name" =\> "syslog\_hostname" } replace =\> { "syslog\_program" =\> "\_geoip\_lookup\_failure" } } o… --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/258914)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 8:51pm UTC](https://discuss.elastic.co/t/logstash-configuration/258914 "2020-12-16T20:51:00Z")
Hi! I've installed Logstash on my Kali platform and, as it says on official site, path.settings value should be "/etc/logstash/", but when I want to use keystores I receive an error which says that I need to put my file… --- ## [Filebeat: Unexpected file opening error: file info is not identical with opened file. Aborting harvesting and retrying file later again](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315)
**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\ **Replies:** 8\ **Last updated:** [December 16, 2020, 8:43pm UTC](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315 "2020-12-16T20:43:51Z")
Hello, We have ELK 7.8.1 stack running in K8 cluster. Filebeat on one of the node is not able to keep up with the logs generated by one MS. This was working fine until couple of days. Missing logs are from a container … --- ## [Logstash - configuring pipeline.workers for input stage](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 7:47pm UTC](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900 "2020-12-16T19:47:47Z")
It seems that pipeline.workers allows to configure worker threads for filter and output stage. -w, --pipeline.workers COUNT Sets the number of pipeline workers to run. This option sets the number of workers that will,… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1638) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1640)