# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1668 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1669 --- ## [How to solve AWS elasticsearch CircuitBreakingException error without elasticsearch.yml file?](https://discuss.elastic.co/t/how-to-solve-aws-elasticsearch-circuitbreakingexception-error-without-elasticsearch-yml-file/257226)
**Author:** [@I\_Hathout](https://discuss.elastic.co/u/I_Hathout)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-solve-aws-elasticsearch-circuitbreakingexception-error-without-elasticsearch-yml-file/257226 "2020-12-01T15:31:18Z")
I have the CircuitBreakingException issue and I found a solution in another topic, by setting the elasticsearch.yml real memory breaker variable to false, but in my case AWS Elasticsearch has no .yml file. so how to sol… --- ## [No geopoint for destination.ip but latitude and longitude field - 7.10](https://discuss.elastic.co/t/no-geopoint-for-destination-ip-but-latitude-and-longitude-field-7-10/256905)
**Author:** [@Camille](https://discuss.elastic.co/u/Camille)\ **Replies:** 3\ **Last updated:** [December 1, 2020, 3:23pm UTC](https://discuss.elastic.co/t/no-geopoint-for-destination-ip-but-latitude-and-longitude-field-7-10/256905 "2020-12-01T15:23:53Z")
Hi, i'm trying to use "geoip" module on a destination.ip. My logstash code is : if \[destination.ip\] { geoip { source =\> "destination.ip" target =\> "destination.geo" } … --- ## [Logstash starts then stops after enabling tcp output config](https://discuss.elastic.co/t/logstash-starts-then-stops-after-enabling-tcp-output-config/257224)
**Author:** [@gprimm](https://discuss.elastic.co/u/gprimm)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 3:11pm UTC](https://discuss.elastic.co/t/logstash-starts-then-stops-after-enabling-tcp-output-config/257224 "2020-12-01T15:11:46Z")
I am trying to send logs to an address listening on a tcp port, but when I add the lines to an output config and restart the logstash service logstash will start for a minute and then fail. There are no errors anywhere a… --- ## [\[Pipeline to Pipeline communication\] - passing pipeline id dinamically to send\_to =\>](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-passing-pipeline-id-dinamically-to-send-to/257222)
**Author:** [@Flavio1](https://discuss.elastic.co/u/Flavio1)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 3:08pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-passing-pipeline-id-dinamically-to-send-to/257222 "2020-12-01T15:08:30Z")
Hi everybody, does exist a method to pass the value of pipeline id dinamically in send\_to. in my environment every log has a field with a value corresponding to a pipeline id present in my pipelines.yml. A hoped that wit… --- ## [Logstash not restarting/stoping](https://discuss.elastic.co/t/logstash-not-restarting-stoping/257153)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 2:55pm UTC](https://discuss.elastic.co/t/logstash-not-restarting-stoping/257153 "2020-12-01T14:55:12Z")
Logstash is not restarting/stoping? How do we stop/restart? OS is CentOS 8 Logstash version using : 7.10 ( on previous versions also it is not stoping). \[root@INHY-PAPP-ELK01 conf.d\]# \[root@INHY-PAPP-ELK01 conf.d\]# … --- ## [Truncate filter adds tag even if no fileds were truncated](https://discuss.elastic.co/t/truncate-filter-adds-tag-even-if-no-fileds-were-truncated/257179)
**Author:** [@sarabande](https://discuss.elastic.co/u/sarabande)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 2:34pm UTC](https://discuss.elastic.co/t/truncate-filter-adds-tag-even-if-no-fileds-were-truncated/257179 "2020-12-01T14:34:40Z")
Hi, I'm using truncate filter to truncate messages longer than 32766 bytes. In that case I'd like the tag 'truncated\_message' to be added to the message. This is how I use truncate filter in my logstash configuration: … --- ## [Logstash parse csv file with a column that contains multiple comma separated data points?](https://discuss.elastic.co/t/logstash-parse-csv-file-with-a-column-that-contains-multiple-comma-separated-data-points/256874)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 7\ **Last updated:** [December 1, 2020, 2:33pm UTC](https://discuss.elastic.co/t/logstash-parse-csv-file-with-a-column-that-contains-multiple-comma-separated-data-points/256874 "2020-12-01T14:33:10Z")
I have a CSV file with multiple entries in the following format (the headers are not included in the actual data): Time, FT Data (2048 entries), SNR, Frequency 430201865, 1000, 2000, 8500,... 4.50, 1266.255 2… --- ## [Pushing data from one elastic search to another elastic search](https://discuss.elastic.co/t/pushing-data-from-one-elastic-search-to-another-elastic-search/257214)
**Author:** [@Nkrb](https://discuss.elastic.co/u/Nkrb)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 2:20pm UTC](https://discuss.elastic.co/t/pushing-data-from-one-elastic-search-to-another-elastic-search/257214 "2020-12-01T14:20:05Z")
Hi, We have a need to pull Elasticsearch data from our environment and push the same to another Elasticsearch database, which is on another environment. Our indices are of time-based pattern, hence data push should be i… --- ## [Elasticsearch stores plain text](https://discuss.elastic.co/t/elasticsearch-stores-plain-text/257212)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-stores-plain-text/257212 "2020-12-01T14:18:39Z")
Did elasticsearch allows only to store data in json format? or is to possible to pass plain text to store in elasticsearch? --- ## [Why alias field name does not show in discover mode, and index pattern has created](https://discuss.elastic.co/t/why-alias-field-name-does-not-show-in-discover-mode-and-index-pattern-has-created/257087)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 4:21pm UTC](https://discuss.elastic.co/t/why-alias-field-name-does-not-show-in-discover-mode-and-index-pattern-has-created/257087 "2020-11-30T16:21:01Z")
I have 24 actual fields in each document, and also with alias on each actual field name, so in total 24 aliases with string , number and date type. I also have created index pattern for that, but I am not sure why I am… --- ## [Message Parsing](https://discuss.elastic.co/t/message-parsing/256572)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 5\ **Last updated:** [December 1, 2020, 1:32pm UTC](https://discuss.elastic.co/t/message-parsing/256572 "2020-12-01T13:32:25Z")
Here is what my logstash output looks like: output { elasticsearch { index =\> "%{\[@metadata\]\[beat\]}" hosts =\> "192.168.0.103" } } Logstash errors are as follows: \[2020-11-18T13:08:12,824\]\[WARN \]\[logstash.c… --- ## [Wildcard queries return responses in ES 6.8.0, but not in ES 7.9.3,](https://discuss.elastic.co/t/wildcard-queries-return-responses-in-es-6-8-0-but-not-in-es-7-9-3/257207)
**Author:** [@Tamil\_Selvan](https://discuss.elastic.co/u/Tamil_Selvan)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 1:26pm UTC](https://discuss.elastic.co/t/wildcard-queries-return-responses-in-es-6-8-0-but-not-in-es-7-9-3/257207 "2020-12-01T13:26:21Z")
{ "\_source": \[ "\_id" \], "query": { "bool": { "filter": { "bool": { "must": \[ { "query\_string": { "\_name": "0", "d… --- ## [Problems creating Alerts based on Logs Fields content](https://discuss.elastic.co/t/problems-creating-alerts-based-on-logs-fields-content/257191)
**Author:** [@Ayodele\_Ajayi](https://discuss.elastic.co/u/Ayodele_Ajayi)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 1:23pm UTC](https://discuss.elastic.co/t/problems-creating-alerts-based-on-logs-fields-content/257191 "2020-12-01T13:23:30Z")
I am facing Problems creating Alerts for my Docker Application events based on Logs Fields content like error or warning or any other string in Kibana Discover, any guides or documentation that could help? --- ## [\_split\_type\_failure](https://discuss.elastic.co/t/split-type-failure/256959)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 6\ **Last updated:** [December 1, 2020, 4:03am UTC](https://discuss.elastic.co/t/split-type-failure/256959 "2020-12-01T04:03:44Z")
Hi all, i have config logstash like this input { http\_poller { urls =\> { users =\> { method =\> GET user =\> "user@gmail.com" password =\> "password" … --- ## [Unable to import Docker dashboard into kibana](https://discuss.elastic.co/t/unable-to-import-docker-dashboard-into-kibana/257195)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 11:14am UTC](https://discuss.elastic.co/t/unable-to-import-docker-dashboard-into-kibana/257195 "2020-12-01T11:14:16Z")
Hello, I cannot import Docker metrics dashboard into Kibana. Kibana version 7.9.1 Metricbeat version 7.9.1 Whenever I run the following command from machine where Metricbeat is running, Kibana API returns 400 err… --- ## [Single Line Logs - No newline character](https://discuss.elastic.co/t/single-line-logs-no-newline-character/254941)
**Author:** [@CWelsh](https://discuss.elastic.co/u/CWelsh)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 11:26am UTC](https://discuss.elastic.co/t/single-line-logs-no-newline-character/254941 "2020-12-01T11:26:07Z")
Filebeat documentation is very clear that logs not ending in a newline character will not be processed by filebeat: Documentation I do however have a number of logs which are written as single JSON objects, in a single … --- ## [Auto balancer not working in the midst of disk space crisis](https://discuss.elastic.co/t/auto-balancer-not-working-in-the-midst-of-disk-space-crisis/257173)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 8\ **Last updated:** [December 1, 2020, 11:07am UTC](https://discuss.elastic.co/t/auto-balancer-not-working-in-the-midst-of-disk-space-crisis/257173 "2020-12-01T11:07:08Z")
Hello everyone, So in my cluster, i have 3 nodes, with 70%, 88% and 65% disk space usage. As you might expect, my autobalancer is not working despite my configuration being set as 'enabled:all'. Afraid that my 2nd nod… --- ## [Filebeat to Logatsh, csv header d'ont send in first](https://discuss.elastic.co/t/filebeat-to-logatsh-csv-header-dont-send-in-first/257075)
**Author:** [@Alexis\_Devleeschauwe](https://discuss.elastic.co/u/Alexis_Devleeschauwe)\ **Replies:** 4\ **Last updated:** [December 1, 2020, 11:04am UTC](https://discuss.elastic.co/t/filebeat-to-logatsh-csv-header-dont-send-in-first/257075 "2020-12-01T11:04:34Z")
Hi. Description I need import csv file logs to elasticsearch, for this, have 3 stack Filebeats \> logstash \> elasticsearch. Filebeat read csv , datas is filter by logstash and elasticsearch is stores datas Problem Th… --- ## [Calculations between 2 Kibana hits on the @timestamp parameter](https://discuss.elastic.co/t/calculations-between-2-kibana-hits-on-the-timestamp-parameter/255958)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 11\ **Last updated:** [December 1, 2020, 10:43am UTC](https://discuss.elastic.co/t/calculations-between-2-kibana-hits-on-the-timestamp-parameter/255958 "2020-12-01T10:43:40Z")
Hello everyone, Here is the context : In Kibana, I have 2 hits, let's say A and B. The hit B is an "answer" of the hit A and will then be received after the creation of hit A (after a few seconds up to a few days). Hit… --- ## [Help sorting an average bucket visualization](https://discuss.elastic.co/t/help-sorting-an-average-bucket-visualization/257190)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 10:39am UTC](https://discuss.elastic.co/t/help-sorting-an-average-bucket-visualization/257190 "2020-12-01T10:39:45Z")
Hello, I am trying to sort results by their "Y axis" value, but I am using an average bucket aggregation and it seems that the sort option I use is bad... Context: I have users (field "penta\_source.keyword") sending a… --- ## [Watcher triggers when it shouldn't](https://discuss.elastic.co/t/watcher-triggers-when-it-shouldnt/256351)
**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\ **Replies:** 3\ **Last updated:** [December 1, 2020, 10:36am UTC](https://discuss.elastic.co/t/watcher-triggers-when-it-shouldnt/256351 "2020-12-01T10:36:09Z")
I've created some watchers to check if all communications are working in our company. This watcher should trigger when there's no hits in the pas hour. The problem is it fires sometimes, when I run the exact same query … --- ## [Not able to sort data in kibana UI](https://discuss.elastic.co/t/not-able-to-sort-data-in-kibana-ui/254102)
**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\ **Replies:** 15\ **Last updated:** [December 1, 2020, 10:24am UTC](https://discuss.elastic.co/t/not-able-to-sort-data-in-kibana-ui/254102 "2020-12-01T10:24:11Z")
Hi Team, I am not able to sort data in kibana, Data in kibana UI are jumbled . Is there any way to sort data in Kibana UI? --- ## [Filebeat Cisco ASA Module failing to parse](https://discuss.elastic.co/t/filebeat-cisco-asa-module-failing-to-parse/254304)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 11\ **Last updated:** [December 1, 2020, 10:18am UTC](https://discuss.elastic.co/t/filebeat-cisco-asa-module-failing-to-parse/254304 "2020-12-01T10:18:01Z")
I have a Filebeat 7.9.3 shipper confirmed sending logs using two modules panw and cisco, specifically the ASA feature. I am only seeing entries for the panw module, but I know the cisco logs are there somewhere. After … --- ## [Logstash file read , mode read, sincedb, duplicate events after restart logstash](https://discuss.elastic.co/t/logstash-file-read-mode-read-sincedb-duplicate-events-after-restart-logstash/257126)
**Author:** [@slast](https://discuss.elastic.co/u/slast)\ **Replies:** 2\ **Last updated:** [December 1, 2020, 10:15am UTC](https://discuss.elastic.co/t/logstash-file-read-mode-read-sincedb-duplicate-events-after-restart-logstash/257126 "2020-12-01T10:15:12Z")
Hi Guys Can you help me I have a problem with reading files from logstash. After restarting logstash, it rereads the files again and sends events to Elastic. This folder is mounted from another server /opt/Logstore/… --- ## [Use json and plain text beats from filebeat to output to syslog configured in logstash](https://discuss.elastic.co/t/use-json-and-plain-text-beats-from-filebeat-to-output-to-syslog-configured-in-logstash/257186)
**Author:** [@Arjun\_kochhar](https://discuss.elastic.co/u/Arjun_kochhar)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 10:13am UTC](https://discuss.elastic.co/t/use-json-and-plain-text-beats-from-filebeat-to-output-to-syslog-configured-in-logstash/257186 "2020-12-01T10:13:05Z")
Hi, Very new to logstash and have a use case that I want to achieve. I have two different filebeat instances that write to same logstash instance. filebeat instance 1 sends json output and also sets field as json, while … --- ## [Divide 2 scripted fields in TSVB](https://discuss.elastic.co/t/divide-2-scripted-fields-in-tsvb/257183)
**Author:** [@SwapnilKshirsagar](https://discuss.elastic.co/u/SwapnilKshirsagar)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 10:00am UTC](https://discuss.elastic.co/t/divide-2-scripted-fields-in-tsvb/257183 "2020-12-01T10:00:07Z")
Hi everyone I'm New to Elastic and Kibana. I am stuck in painless scripting to apply 2 filters on a single index and store them as a 2 different scripted fields. Each scripted field has 2 filters applied on it one is St… --- ## [Plugin is invisible after added security dependency in kibana.json in 7.9.3](https://discuss.elastic.co/t/plugin-is-invisible-after-added-security-dependency-in-kibana-json-in-7-9-3/257017)
**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\ **Replies:** 6\ **Last updated:** [December 1, 2020, 9:49am UTC](https://discuss.elastic.co/t/plugin-is-invisible-after-added-security-dependency-in-kibana-json-in-7-9-3/257017 "2020-12-01T09:49:49Z")
Hi All, I am trying to get current username in my custom plugin which is developed based on 7.9.3. I followed helpful instructions provided here. But when I added "security" as required dependencies in kibana.json my pl… --- ## [Cross cluster replication in different regions in aws elasticsearch](https://discuss.elastic.co/t/cross-cluster-replication-in-different-regions-in-aws-elasticsearch/257067)
**Author:** [@guest123](https://discuss.elastic.co/u/guest123)\ **Replies:** 8\ **Last updated:** [December 1, 2020, 9:18am UTC](https://discuss.elastic.co/t/cross-cluster-replication-in-different-regions-in-aws-elasticsearch/257067 "2020-12-01T09:18:42Z")
Hi .. i am migrating to aws managed elasticsearch from self hosted es.. as part of migration facing an issue with backup(snapshot) and restore. we have 2 distinct clusters preferably us-east and us-west , snapshot repos… --- ## [Elasticsearch available on internal and public ip](https://discuss.elastic.co/t/elasticsearch-available-on-internal-and-public-ip/257170)
**Author:** [@Bertram\_van\_de\_Ven](https://discuss.elastic.co/u/Bertram_van_de_Ven)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-available-on-internal-and-public-ip/257170 "2020-12-01T08:32:57Z")
We have an ElasticSearch cluster running, it's local (company network) available and everything works. And I also made each node available on an external ip by configuring the network.bind\_host on localhost, local and pu… --- ## [FATAL Error: \[config validation of \[server\].cors\]: expected value of type \[boolean\] but got \[Object\]](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-cors-expected-value-of-type-boolean-but-got-object/254576)
**Author:** [@JonathanDSSOUZA](https://discuss.elastic.co/u/JonathanDSSOUZA)\ **Replies:** 5\ **Last updated:** [December 1, 2020, 7:23am UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-cors-expected-value-of-type-boolean-but-got-object/254576 "2020-12-01T07:23:08Z")
After updating the ELK from version 7.6.1 to 7.9.2, the kibana does not start, presenting the errors: kibana: FATAL Error: \[config validation of \[server\].cors\]: expected value of type \[boolean\] but got \[Object\] {"type… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1667) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1669)