# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1658

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1659

---

## [Search using floating point](https://discuss.elastic.co/t/search-using-floating-point/257826)

<div class="topic-metadata">

**Author:** [@jkanti](https://discuss.elastic.co/u/jkanti)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 9:54am UTC](https://discuss.elastic.co/t/search-using-floating-point/257826 "2020-12-07T09:54:40Z")

</div>

I am new to Kibana. I am doing some search in 'Discover' and plotting them in 'Visualize'. For a task I need to filter out a field which is floating point. However, when I search using the floating point in discover, kib…

---

## [Elasticsearch can not be started by service](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773)

<div class="topic-metadata">

**Author:** [@mkkang66](https://discuss.elastic.co/u/mkkang66)\
**Replies:** 4\
**Last updated:** [December 7, 2020, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773 "2020-12-07T09:52:07Z")

</div>

I installed an elasticsearch 7.10.0 by tar.gz archives because my network is a closed network. I can run it as a deamon with ' ../bin/elasticsearch -d -p es.pid' but systemctl command can not be run. The followings are …

---

## [Multiline log in elastic agent](https://discuss.elastic.co/t/multiline-log-in-elastic-agent/257698)

<div class="topic-metadata">

**Author:** [@FenixSec](https://discuss.elastic.co/u/FenixSec)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 9:44am UTC](https://discuss.elastic.co/t/multiline-log-in-elastic-agent/257698 "2020-12-07T09:44:45Z")

</div>

Hi, i have a filebeat that picks up a file in the log directory and parses it with the multiline options in the filebeath.yml file: Multiline options multiline.type: pattern multiline.pattern: '\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{…

---

## [Reverse Proxy](https://discuss.elastic.co/t/reverse-proxy/257238)

<div class="topic-metadata">

**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\
**Replies:** 4\
**Last updated:** [December 7, 2020, 8:33am UTC](https://discuss.elastic.co/t/reverse-proxy/257238 "2020-12-07T08:33:37Z")

</div>

Try to explain the best I can. I have an Apache reverse proxy configure as such and it works and is in production. \<VirtualHost https://192.168.1.1:443\> SSLEngine on SSLCertificateFile computer.cer SSLCertifi…

---

## [TSVB Visualization font inconsistent](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805)

<div class="topic-metadata">

**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 8:23am UTC](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805 "2020-12-07T08:23:13Z")

</div>

Hi, As per below example, you can see the font sizing is different between visualizations. Is there anyway to make the font sizes the same for all? My guess it is dynamically changing based on the text to be displayed…

---

## [Duplicate data in Pie chart](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816)

<div class="topic-metadata">

**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 8:19am UTC](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816 "2020-12-07T08:19:00Z")

</div>

Here is my data set stored in elastic; index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: …

---

## [Adding two nodes not displaying the number of nodes as 2](https://discuss.elastic.co/t/adding-two-nodes-not-displaying-the-number-of-nodes-as-2/257738)

<div class="topic-metadata">

**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\
**Replies:** 2\
**Last updated:** [December 7, 2020, 8:02am UTC](https://discuss.elastic.co/t/adding-two-nodes-not-displaying-the-number-of-nodes-as-2/257738 "2020-12-07T08:02:38Z")

</div>

Hi Team, Here is my task wherein add new node to exisiting es cluster. Followed below steps ;; Add instance where in es\_java\_heap\_size\_gb: 20 Added es and restarted .PFA text file for elasticsearch.yml When I run ch…

---

## [How to search for values from JSON formatted content?](https://discuss.elastic.co/t/how-to-search-for-values-from-json-formatted-content/257809)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 7:33am UTC](https://discuss.elastic.co/t/how-to-search-for-values-from-json-formatted-content/257809 "2020-12-07T07:33:26Z")

</div>

There is such a field in my data. I want to search for a string, such as '1612011230036'. How can I search ? { "\_source": { "http": { "request": { "body": { "original": "{\\"productSN\\":\\"1612011230036\\",…

---

## [Kibana freezes in "Kibana server is not ready yet" after activating xpack.security](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699)

<div class="topic-metadata">

**Author:** [@jh0mil](https://discuss.elastic.co/u/jh0mil)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 7:58am UTC](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699 "2020-12-07T07:58:36Z")

</div>

When i set true the opcion xpack.security.enabled the service stay frozen in "Kibana server is not ready yet". This is the logs of Kibana log \[19:22:35.884\] \[info\]\[plugins-service\] Plugin "visTypeXy" is disabled. log…

---

## [How to enable the suricata moudle in the filebeat](https://discuss.elastic.co/t/how-to-enable-the-suricata-moudle-in-the-filebeat/257810)

<div class="topic-metadata">

**Author:** [@zero2](https://discuss.elastic.co/u/zero2)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 7:35am UTC](https://discuss.elastic.co/t/how-to-enable-the-suricata-moudle-in-the-filebeat/257810 "2020-12-07T07:35:38Z")

</div>

when i use the command :./filebeat enable modules suricata, there's a error message: \[root@localhost filebeat\]# ./filebeat modules enable suricata Error in modules manager: modules management requires 'filebeat.config.…

---

## [Metricbeat don't show "\[Metricbeat Windows\] Services"](https://discuss.elastic.co/t/metricbeat-dont-show-metricbeat-windows-services/257807)

<div class="topic-metadata">

**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 7:12am UTC](https://discuss.elastic.co/t/metricbeat-dont-show-metricbeat-windows-services/257807 "2020-12-07T07:12:31Z")

</div>

Hi, I installed Metricbeat and enable Window module but the template Dashboard ( \[Metricbeat Windows\] Services ECS ) do not show any infomation (No results found). When I run this cmd with powershell: .\\metricbeat.exe -…

---

## [How to monitor %free disk space via metricbeat on windows server](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062)

<div class="topic-metadata">

**Author:** [@hunter\_puu](https://discuss.elastic.co/u/hunter_puu)\
**Replies:** 5\
**Last updated:** [December 7, 2020, 7:03am UTC](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062 "2020-12-07T07:03:56Z")

</div>

I am newbie on ELK. i want to monitor %free disk space on windows server via metric beat. Anybody can show parameter on windows.yml for solve this issue. Thank you.

---

## [Monitor Java 11 apps with metricbeat?](https://discuss.elastic.co/t/monitor-java-11-apps-with-metricbeat/257750)

<div class="topic-metadata">

**Author:** [@stevedwray](https://discuss.elastic.co/u/stevedwray)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 6:08am UTC](https://discuss.elastic.co/t/monitor-java-11-apps-with-metricbeat/257750 "2020-12-07T06:08:21Z")

</div>

The Metricbeat java monitoring seems to require Jolokia. Jolokia does not support Java 11. We have an application that requires Java 11 and which we'd like to monitor for performance and behavior. Can anyone please su…

---

## [Error in logs of master and data-ingest nodes](https://discuss.elastic.co/t/error-in-logs-of-master-and-data-ingest-nodes/257777)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 5\
**Last updated:** [December 7, 2020, 6:06am UTC](https://discuss.elastic.co/t/error-in-logs-of-master-and-data-ingest-nodes/257777 "2020-12-07T06:06:17Z")

</div>

I deployed Elasticsearch cluster in GCP. Using ECK: 1.3.0 and elasticsearch and kibana as 7.9.0. All pods are running fine. But when I checked the logs of data-ingest and master nodes. I can see below error. {"type": …

---

## [Unable to flow kuberbenetes logs to elasticsearch](https://discuss.elastic.co/t/unable-to-flow-kuberbenetes-logs-to-elasticsearch/253459)

<div class="topic-metadata">

**Author:** [@arunreddy00](https://discuss.elastic.co/u/arunreddy00)\
**Replies:** 13\
**Last updated:** [December 7, 2020, 5:51am UTC](https://discuss.elastic.co/t/unable-to-flow-kuberbenetes-logs-to-elasticsearch/253459 "2020-12-07T05:51:56Z")

</div>

Hello Elastic, Really need your help struggling to get logs to ElasticSearch Created EKS cluster in AWS with two nodes Later integrated VPN (site to site connection) from EKS cluster's VPC to connect to Office network…

---

## [Elastic Search Load Testing with Java Client](https://discuss.elastic.co/t/elastic-search-load-testing-with-java-client/257796)

<div class="topic-metadata">

**Author:** [@vasimsaiyad2000](https://discuss.elastic.co/u/vasimsaiyad2000)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 5:45am UTC](https://discuss.elastic.co/t/elastic-search-load-testing-with-java-client/257796 "2020-12-07T05:45:40Z")

</div>

Hi, I have used elastic search 7.X to index my database data. I have writtend geo spatial query using Java High Rest client to search from elastic search. The Java client works fine with fewer request but When I perfor…

---

## [Elasticsearch Basic Authentication](https://discuss.elastic.co/t/elasticsearch-basic-authentication/257792)

<div class="topic-metadata">

**Author:** [@ravi\_ch](https://discuss.elastic.co/u/ravi_ch)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 4:47am UTC](https://discuss.elastic.co/t/elasticsearch-basic-authentication/257792 "2020-12-07T04:47:09Z")

</div>

I have installed Elasticsearch via helm chart unable to enable basic authentication. Need help with that.

---

## [ES Thread pool how to update](https://discuss.elastic.co/t/es-thread-pool-how-to-update/257779)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 4:33am UTC](https://discuss.elastic.co/t/es-thread-pool-how-to-update/257779 "2020-12-07T04:33:54Z")

</div>

How to udpate the thread pool size for elasticsearch in elastic cloud4 { "persistent" : { "thread\_pool.write.queue\_size" : 1000 } } Above Put call is resulting in a failure { "error": { "ro…

---

## [Heartbeat-Elastic 7.10 unable to display details \[search\_phase\_execution\_exception\]](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 10\
**Last updated:** [December 7, 2020, 3:12am UTC](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481 "2020-12-07T03:12:15Z")

</div>

Versions Kibana: 7.7.0 APM Server: (if relevant) Elasticsearch: 7.10.0 Heartbeat: 7.10 After I have upgraded to version 7.10 (Heartbeat-Elastic) the table below is not showing up. Below is my heartbeat.yml, please…

---

## [Update partial fields leads to other fields missing that are excluded in the \_source](https://discuss.elastic.co/t/update-partial-fields-leads-to-other-fields-missing-that-are-excluded-in-the-source/257790)

<div class="topic-metadata">

**Author:** [@chemboking](https://discuss.elastic.co/u/chemboking)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 3:10am UTC](https://discuss.elastic.co/t/update-partial-fields-leads-to-other-fields-missing-that-are-excluded-in-the-source/257790 "2020-12-07T03:10:55Z")

</div>

For example, i have a mapping as followed: { "mappings": { "\_source": { "includes": \[ "gender" \] }, "properties": { "…

---

## [Able to list system indices in elasticsearch 7.9.0](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 8\
**Last updated:** [December 7, 2020, 2:45am UTC](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479 "2020-12-07T02:45:49Z")

</div>

I deployed elasticsearch cluster with operator 1.3.0 and es version: 7.9.0. When I am trying to list the indices, not able to see any system indices. Attaching the screenshot Able to see only created indices. Is that…

---

## [ES 1.4 google cloud storage plugin](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627)

<div class="topic-metadata">

**Author:** [@Adithya\_S](https://discuss.elastic.co/u/Adithya_S)\
**Replies:** 2\
**Last updated:** [December 7, 2020, 2:31am UTC](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627 "2020-12-07T02:31:16Z")

</div>

Hi, We have a few ES v1.4 clusters for which we need to setup snapshots to Google's cloud storage. Could anyone please point me to the plugin which would allow me to do this on ES v1 clusters? TIA

---

## [Error after upgrading to 7.10](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741)

<div class="topic-metadata">

**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 2:18am UTC](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741 "2020-12-07T02:18:17Z")

</div>

I recently upgraded my Elastic infrastructure from 7.9 - 7.10. My nodes will not start and are failing with the following message: monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException…

---

## [How to add basic user/pass authentication to elastic.yaml](https://discuss.elastic.co/t/how-to-add-basic-user-pass-authentication-to-elastic-yaml/257662)

<div class="topic-metadata">

**Author:** [@yattaes](https://discuss.elastic.co/u/yattaes)\
**Replies:** 2\
**Last updated:** [December 7, 2020, 1:07am UTC](https://discuss.elastic.co/t/how-to-add-basic-user-pass-authentication-to-elastic-yaml/257662 "2020-12-07T01:07:03Z")

</div>

Hi, I am using the yaml file below to deploy ElasticSearch to Azure Kubernetes. I can reach the Elasticsearch with port forwarding "localhost:9200" without authentication. How can I add a basic user/pass authenticatio…

---

## [Finding size of total documents in an index](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776)

<div class="topic-metadata">

**Author:** [@usamaahmadkhan](https://discuss.elastic.co/u/usamaahmadkhan)\
**Replies:** 3\
**Last updated:** [December 6, 2020, 9:29pm UTC](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776 "2020-12-06T21:29:15Z")

</div>

Hi, I want to find the sum of the sizes of all the documents containing a specific field. e.g. for an index .index-dec-6-2020 I want to get the sum of the size of all the documents containing the filed delay: 5 Can s…

---

## [Python3 query with large results, best approach](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 10\
**Last updated:** [December 6, 2020, 7:01pm UTC](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402 "2020-12-06T19:01:45Z")

</div>

hi, i'm throwing a huge amount of log data into ES each month. i'm trying to create a python script to build a report at the end of the month. my first query i need to make is to query the index and get all the unique …

---

## [Elasticsearch on AWS + raspberry pi](https://discuss.elastic.co/t/elasticsearch-on-aws-raspberry-pi/257485)

<div class="topic-metadata">

**Author:** [@Ettore\_Ciarcia](https://discuss.elastic.co/u/Ettore_Ciarcia)\
**Replies:** 9\
**Last updated:** [December 6, 2020, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-raspberry-pi/257485 "2020-12-06T17:26:24Z")

</div>

Hello everyone. I intend to send the weather data collected by a raspberry pie on ec2 instances hosting elasticsearch to view the temperature graphs on kibana. My idea is to make a comparison between the internal temper…

---

## [Issue when indexing booleans to elastic](https://discuss.elastic.co/t/issue-when-indexing-booleans-to-elastic/256634)

<div class="topic-metadata">

**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\
**Replies:** 1\
**Last updated:** [December 6, 2020, 4:08pm UTC](https://discuss.elastic.co/t/issue-when-indexing-booleans-to-elastic/256634 "2020-12-06T16:08:24Z")

</div>

Hi there, I've been having a problem regarding getting data in elastic as a boolean. I have gotten it to work only when using logstash, and explicitly converting fields to boolean both in logstash and in a created mapp…

---

## [Specifying IndicesOptions in Java Rest API call](https://discuss.elastic.co/t/specifying-indicesoptions-in-java-rest-api-call/257782)

<div class="topic-metadata">

**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\
**Replies:** 0\
**Last updated:** [December 6, 2020, 3:59pm UTC](https://discuss.elastic.co/t/specifying-indicesoptions-in-java-rest-api-call/257782 "2020-12-06T15:59:07Z")

</div>

Is there a way to specify IndicesOptions when making a rest api call through low level rest client in Elasticsearch 6.8(I see this option in ES7 docs)? We are migrating from transport client to rest client and we were ab…

---

## [Different grok patterns for different log lines](https://discuss.elastic.co/t/different-grok-patterns-for-different-log-lines/257772)

<div class="topic-metadata">

**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 1\
**Last updated:** [December 6, 2020, 3:50pm UTC](https://discuss.elastic.co/t/different-grok-patterns-for-different-log-lines/257772 "2020-12-06T15:50:03Z")

</div>

Hello. I have an application log file with 8 different patterns in it (8 different lines). Is it correct to use an array of match in grok to output all of them? if I use conditional expressions, only one pattern (for exa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1657)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1659)
