# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1666

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1667

---

## [Setting the TLS ServerName to an IP address is not permitted by RFC 6066](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 4\
**Last updated:** [November 30, 2020, 4:36pm UTC](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090 "2020-11-30T16:36:37Z")

</div>

Hello, I am using Elasticsearch and kibana 8.0.0, and it was working perfectly. Today I run git pull and now kibana is not working anymore, when I try to run it, I am getting these errors: (node:48280) \[DEP0123\] Depre…

---

## [Recent data not being indexed](https://discuss.elastic.co/t/recent-data-not-being-indexed/257343)

<div class="topic-metadata">

**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 10:45am UTC](https://discuss.elastic.co/t/recent-data-not-being-indexed/257343 "2020-12-02T10:45:22Z")

</div>

My ELK system has been running for over a week now. All components - beats, logstash, ES and Kibana are up and running. I suddenly stopped receiving data for the past 2 days. The log files exist but I don't see those in…

---

## [Elasticsearch snapshot supported on a non-shared filesystem?](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 4\
**Last updated:** [December 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317 "2020-12-02T10:44:10Z")

</div>

Acc to elastic 6.8 docs - https://www.elastic.co/guide/en/elasticsearch/reference/6.8/modules-snapshots.html, it is mentioned that - "we can take a snapshot of individual indices or of the entire cluster and store it in …

---

## [Delete by query returns version\_conflict\_engine\_exception](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 10:26am UTC](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338 "2020-12-02T10:26:26Z")

</div>

Hello, I am trying to delete some old documents which are no longer needed using the https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-delete-by-query.html POST /aws-elb-2019.01/\_delete\_by\_query?requ…

---

## [Elasticsearch startup failure](https://discuss.elastic.co/t/elasticsearch-startup-failure/257335)

<div class="topic-metadata">

**Author:** [@Sreekanth\_Ragi](https://discuss.elastic.co/u/Sreekanth_Ragi)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-startup-failure/257335 "2020-12-02T10:16:50Z")

</div>

Hello Team, I'm facing a very peculiar issue starting up ES cluster on Openshift install running on Azure. Please note that this is more like BYO cluster set up of Openshift on Azure. We are using Azure disks for the mo…

---

## [Basic question about: Elasticsearch.hosts and discovery.seed.hosts](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 10:00am UTC](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326 "2020-12-02T10:00:56Z")

</div>

Hello, I have 2 basic questions about Elastic stack. in the elasticsearch.yml file in the field discovery.seed.hosts should I write the IP address of all the nodes \[master, data ...\], or just master nodes ? (in my case…

---

## [Is there any way to run logstash from the kibana UI](https://discuss.elastic.co/t/is-there-any-way-to-run-logstash-from-the-kibana-ui/257058)

<div class="topic-metadata">

**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\
**Replies:** 2\
**Last updated:** [December 2, 2020, 9:54am UTC](https://discuss.elastic.co/t/is-there-any-way-to-run-logstash-from-the-kibana-ui/257058 "2020-12-02T09:54:57Z")

</div>

I want to know if it is possible to run log-stash from the kibana UI instead of going to terminal and then providing the config file and running it. Can we do all these steps like, 1 writing config file for log-stash …

---

## [Aggregation filter half work](https://discuss.elastic.co/t/aggregation-filter-half-work/257038)

<div class="topic-metadata">

**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\
**Replies:** 3\
**Last updated:** [December 2, 2020, 9:54am UTC](https://discuss.elastic.co/t/aggregation-filter-half-work/257038 "2020-12-02T09:54:19Z")

</div>

Hi, i need to aggregate 6 log file , i have 6 grok parser, each for one of my logs. This is my conf filter { if \[type\] == "application\_log" { grok { match =\> \[ "message", "%{DATA:jcaption\_id}\\s+%{TIME:orari…

---

## [Add fields in an existing Kibana Index Pattern](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096)

<div class="topic-metadata">

**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\
**Replies:** 3\
**Last updated:** [December 2, 2020, 9:41am UTC](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096 "2020-12-02T09:41:20Z")

</div>

Hello everyone, I would like to know if it's possible to add new fields to an existing index pattern in Kibana. I've had new parameters to existings logs recently but they haven't been ingested well (sort of ?) because…

---

## [How to reset elastic user default password](https://discuss.elastic.co/t/how-to-reset-elastic-user-default-password/256761)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 14\
**Last updated:** [December 2, 2020, 9:02am UTC](https://discuss.elastic.co/t/how-to-reset-elastic-user-default-password/256761 "2020-12-02T09:02:21Z")

</div>

Hi I have a question. How to reset the default password? I have no idea why this suddenly became restricted account? Previously was working fine with tis predefine account. Now have this Connection refused error too to…

---

## [Elasticsearch error: curl: (7) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313)

<div class="topic-metadata">

**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\
**Replies:** 6\
**Last updated:** [December 2, 2020, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313 "2020-12-02T09:01:40Z")

</div>

I installed the elasticsearch in my local but when I tried to access this command curl -X GET http://localhost:9200/ it's giving me the error that the connection was refused. curl: (7) Failed to connect to localhost por…

---

## ["Illegal argument exception" with timestamp](https://discuss.elastic.co/t/illegal-argument-exception-with-timestamp/257305)

<div class="topic-metadata">

**Author:** [@Enigmatr](https://discuss.elastic.co/u/Enigmatr)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 7:43am UTC](https://discuss.elastic.co/t/illegal-argument-exception-with-timestamp/257305 "2020-12-02T07:43:11Z")

</div>

Hi, I'm trying to create an index pattern for my logs, but I seem to be having some issues with the timestamp format, this is what I'm getting tin the Data Visualizer in Kibana: File could not be read \[illegal\_argument…

---

## [Create Index using RestHighLevelClient](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302)

<div class="topic-metadata">

**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\
**Replies:** 3\
**Last updated:** [December 2, 2020, 7:42am UTC](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302 "2020-12-02T07:42:34Z")

</div>

IndexRequest indexRequest = new IndexRequest("my\_index"); indexRequest.create(true); indexRequest.source("{\\n" + " \\"settings\\" : {\\n" + " \\"number\_of\_shards\\" : …

---

## [How to run logstash config file automatically after system restarts?](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177)

<div class="topic-metadata">

**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\
**Replies:** 4\
**Last updated:** [December 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177 "2020-12-02T07:26:37Z")

</div>

I want to load/run my logstash config file automatically after system restarts everytime (after updates). How to do that? Thanks in advance.

---

## [Is there a curator operation order?](https://discuss.elastic.co/t/is-there-a-curator-operation-order/257308)

<div class="topic-metadata">

**Author:** [@kwonsoonwoo](https://discuss.elastic.co/u/kwonsoonwoo)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 6:49am UTC](https://discuss.elastic.co/t/is-there-a-curator-operation-order/257308 "2020-12-02T06:49:30Z")

</div>

Hello. Currently, elasticsearch distributed as bosh release is in operation. As you can see I have a cluster\_monitor and maintenance vm inside logsearch Deployment. Deployment 'logsearch' Instance VM Type …

---

## [How to upgrade the elastic cluster deployed by docker?](https://discuss.elastic.co/t/how-to-upgrade-the-elastic-cluster-deployed-by-docker/256986)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 7\
**Last updated:** [December 2, 2020, 6:41am UTC](https://discuss.elastic.co/t/how-to-upgrade-the-elastic-cluster-deployed-by-docker/256986 "2020-12-02T06:41:19Z")

</div>

I started the elasticsearch cluster with docker-compose, and I wanted to upgrade from 7.9.1 to 7.10.0. There is already some data(Advanced Settings,Spaces,Saved Objects) on kibana. How to upgrade the cluster without losi…

---

## [Why is the discover graph only available for 30 days?](https://discuss.elastic.co/t/why-is-the-discover-graph-only-available-for-30-days/256431)

<div class="topic-metadata">

**Author:** [@kwonsoonwoo](https://discuss.elastic.co/u/kwonsoonwoo)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 6:29am UTC](https://discuss.elastic.co/t/why-is-the-discover-graph-only-available-for-30-days/256431 "2020-12-02T06:29:13Z")

</div>

In curator config.yml, indexes after 90 days of creation are to be deleted. --- actions: 2: action: delete\_indices description: \>- Delete indices older than 90 days (based on index name), for logs- …

---

## ["Index" of Elasticserach](https://discuss.elastic.co/t/index-of-elasticserach/257304)

<div class="topic-metadata">

**Author:** [@qohelet](https://discuss.elastic.co/u/qohelet)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 4:26am UTC](https://discuss.elastic.co/t/index-of-elasticserach/257304 "2020-12-02T04:26:05Z")

</div>

I'm a beginner but the more I deal with Elasticsearch the more I'd like to dig deeper. Just I struggle a little to find the "Index" of Elasticsearch which is supposed to evaluate and process the REST-Queries. I have be…

---

## [How to configure beat to automatically rotate indices without ILM (7.9.1)](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211)

<div class="topic-metadata">

**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\
**Replies:** 3\
**Last updated:** [December 2, 2020, 5:49am UTC](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211 "2020-12-02T05:49:03Z")

</div>

Hi I am trying to implement an automatic indices rollover based on their size while ILM is disabled. So, in beats configuration yml (e.g. metricbeat.yml) I specified the following: setup.ilm.enabled: false output.ela…

---

## [Connect with certificate to elasticsearch](https://discuss.elastic.co/t/connect-with-certificate-to-elasticsearch/257047)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 4:11am UTC](https://discuss.elastic.co/t/connect-with-certificate-to-elasticsearch/257047 "2020-12-02T04:11:38Z")

</div>

I'm trying to connect to elasticsearch on localhost machine with certificate and key but when I try to connect I have this error: curl --cacert /etc/elasticsearch/cert/node\_testuserCA.pem --cert /etc/elasticsearch/cert…

---

## [Kibana 7.10 not loading in browser](https://discuss.elastic.co/t/kibana-7-10-not-loading-in-browser/256842)

<div class="topic-metadata">

**Author:** [@ameyk](https://discuss.elastic.co/u/ameyk)\
**Replies:** 2\
**Last updated:** [December 2, 2020, 3:48am UTC](https://discuss.elastic.co/t/kibana-7-10-not-loading-in-browser/256842 "2020-12-02T03:48:35Z")

</div>

Hello, Kibana 7.10 is not getting loaded in browser , it is stuck at loading on browser , there is no error in kibana. We have load balancer(running with SSL) who redirect the request to apache and then apache redirect…

---

## [Format alert and action email](https://discuss.elastic.co/t/format-alert-and-action-email/257300)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 3:31am UTC](https://discuss.elastic.co/t/format-alert-and-action-email/257300 "2020-12-02T03:31:03Z")

</div>

Hi all I want to format the mail that when SIEM or system monitor send mail there will be some information that i can see so i dont really have to access SIEM app to see them. From what i know the watcher has that form…

---

## [ELK sizing guidance](https://discuss.elastic.co/t/elk-sizing-guidance/256999)

<div class="topic-metadata">

**Author:** [@Raghava\_Reddy\_Kapu\_V](https://discuss.elastic.co/u/Raghava_Reddy_Kapu_V)\
**Replies:** 2\
**Last updated:** [December 2, 2020, 2:48am UTC](https://discuss.elastic.co/t/elk-sizing-guidance/256999 "2020-12-02T02:48:47Z")

</div>

Hi, I am considering the ELK stack in a large telco opportunity in the MEA region as the propsosed log management solutions (Humio, Splunk Enterprise, etc,.) are turning out to be expensive in the overall solution approa…

---

## [Not properly formated XML](https://discuss.elastic.co/t/not-properly-formated-xml/257003)

<div class="topic-metadata">

**Author:** [@shani](https://discuss.elastic.co/u/shani)\
**Replies:** 0\
**Last updated:** [November 29, 2020, 7:20pm UTC](https://discuss.elastic.co/t/not-properly-formated-xml/257003 "2020-11-29T19:20:22Z")

</div>

Hi All, I have raw event logs like this \<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'\>\<System\>\<Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceNam…

---

## [A question from newbie about an index structure](https://discuss.elastic.co/t/a-question-from-newbie-about-an-index-structure/256993)

<div class="topic-metadata">

**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 1:02am UTC](https://discuss.elastic.co/t/a-question-from-newbie-about-an-index-structure/256993 "2020-12-02T01:02:58Z")

</div>

Hi there ! I am completely new in Elasticsearch so I want to query about the things unclear to me. My first question is about amount of indices. Basically I am going to get a lot of a different data from different so…

---

## [Best way to ingest data from windows c++ app](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093)

<div class="topic-metadata">

**Author:** [@robderon](https://discuss.elastic.co/u/robderon)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 12:48am UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093 "2020-12-02T00:48:31Z")

</div>

Hello, I must create a Kibana dashboard to analyze a windows c++ application usage : screen viewed, actions, app launching, subscription etc.. Our plan is to send data from the clients to our server (not elastic) once …

---

## [Upgrading ELK stack to 7.10 along with filebeat](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 1\
**Last updated:** [December 2, 2020, 12:44am UTC](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099 "2020-12-02T00:44:34Z")

</div>

Hi, currently we are using ELK stack version 7.8.0 and to push the logs to ES we are using filebeat(7.8.0). we are planning to upgrade our ELK stack to 7.10. so my doubts are 1) after upgrading ELK to 7.10 should we al…

---

## [Custom Beat creation was not successful on windows10 machine](https://discuss.elastic.co/t/custom-beat-creation-was-not-successful-on-windows10-machine/257159)

<div class="topic-metadata">

**Author:** [@pradeep.kumarsk](https://discuss.elastic.co/u/pradeep.kumarsk)\
**Replies:** 0\
**Last updated:** [December 1, 2020, 6:08am UTC](https://discuss.elastic.co/t/custom-beat-creation-was-not-successful-on-windows10-machine/257159 "2020-12-01T06:08:29Z")

</div>

Tried to create the custom beats following the officlial documentation on Windows 10 machine we were facing issue $mage GenerateCustomBeat ends in throwing the out of memory error error seems to be at $make update

---

## [Reindex: how to limit number of docs for testing:](https://discuss.elastic.co/t/reindex-how-to-limit-number-of-docs-for-testing/257137)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 1, 2020, 6:44pm UTC](https://discuss.elastic.co/t/reindex-how-to-limit-number-of-docs-for-testing/257137 "2020-12-01T18:44:14Z")

</div>

I am having problem getting reindex to do what I want and the indexes I have available for testing have over 100,000 docs and when things fail this is 100.000 tracebacks in the logs! I see from the docs that there is a …

---

## [Watcher: How to execute "condition" after "transform"?](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/257232)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 0\
**Last updated:** [December 1, 2020, 3:52pm UTC](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/257232 "2020-12-01T15:52:48Z")

</div>

in Elastic Watcher, we have a situation whereby I need to do some transform and calculate some value. Once calculating these values, I need to do the condition logic But it seems like condition is executed BEFORE transf…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1665)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1667)
