# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1676 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1677 --- ## [Kibana 7.10 - Error connecting to package registry](https://discuss.elastic.co/t/kibana-7-10-error-connecting-to-package-registry/256701)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 4:53am UTC](https://discuss.elastic.co/t/kibana-7-10-error-connecting-to-package-registry/256701 "2020-11-26T04:53:15Z")
Currently running Kibana 7.10 and the logs are getting filled with the following message: "error","plugins","ingestManager"\],"pid":11460,"message":"Error connecting to package registry: request to https://epr.elastic.c… --- ## [Search for dinamically field name in dashboard](https://discuss.elastic.co/t/search-for-dinamically-field-name-in-dashboard/256713)
**Author:** [@Philippe\_Geraldeli\_A](https://discuss.elastic.co/u/Philippe_Geraldeli_A)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 4:44am UTC](https://discuss.elastic.co/t/search-for-dinamically-field-name-in-dashboard/256713 "2020-11-26T04:44:01Z")
I'm using kibana 6.2 and because of the problem that arrays are not well supported, i changed my json like that: {"array1" : \[ { "array2" : \[ {"nam… --- ## [Too Many Scroll Context ERROR but found no active scroll context](https://discuss.elastic.co/t/too-many-scroll-context-error-but-found-no-active-scroll-context/256598)
**Author:** [@zchar](https://discuss.elastic.co/u/zchar)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 3:34am UTC](https://discuss.elastic.co/t/too-many-scroll-context-error-but-found-no-active-scroll-context/256598 "2020-11-26T03:34:33Z")
Hi team, Recently, I upgraded my ES cluster from 7.4.2 to 7.6.2. Then I found "Too Many Scroll Context ..." error always occurred and scroll search is not available on my cluster. I followed the exception tips and turn… --- ## [When i add extended.plugins=lang-mustache in plugin-descriptor.properties im getting below error](https://discuss.elastic.co/t/when-i-add-extended-plugins-lang-mustache-in-plugin-descriptor-properties-im-getting-below-error/256439)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 1:16am UTC](https://discuss.elastic.co/t/when-i-add-extended-plugins-lang-mustache-in-plugin-descriptor-properties-im-getting-below-error/256439 "2020-11-26T01:16:38Z")
java.lang.IllegalStateException: Plugin \[search-engine-plugin\] cannot extend non-extensible plugin \[lang-mustache\] at org.elasticsearch.plugins.PluginsService.loadBundle(PluginsService.java:624) at org.elasticsearch.pl… --- ## [Upgrade to 7.10 new beats writing to former indices/index patterns?](https://discuss.elastic.co/t/upgrade-to-7-10-new-beats-writing-to-former-indices-index-patterns/256719)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 12:10am UTC](https://discuss.elastic.co/t/upgrade-to-7-10-new-beats-writing-to-former-indices-index-patterns/256719 "2020-11-26T00:10:18Z")
Hello all. I just upgraded the Elastic stack we have across the board to 7.10. Logstash and 5 Elastic nodes with auditbeat, metricbeat, and filebeat. After upgrade I took the necessary steps and stopped the output to … --- ## [Stopping automatic update of beats via public elasticsearch reop](https://discuss.elastic.co/t/stopping-automatic-update-of-beats-via-public-elasticsearch-reop/255908)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 12:03am UTC](https://discuss.elastic.co/t/stopping-automatic-update-of-beats-via-public-elasticsearch-reop/255908 "2020-11-26T00:03:08Z")
Hello all. When we first installed ELK on our series of boxes the external Elasticsearch repo was used for Linux and installed. Unfortunately we are seeing that the beats on this box (Metricbeat, etc) are updating ON T… --- ## [Date Mapping Parse Failure](https://discuss.elastic.co/t/date-mapping-parse-failure/256469)
**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 11:29pm UTC](https://discuss.elastic.co/t/date-mapping-parse-failure/256469 "2020-11-25T23:29:50Z")
Hello there, I am trying to send a date in the format 2020-10-29T05:36:06.143Z\[UTC\]. My mapping looks like this: "timeStamp": { "type": "date" } And I am getting the following error: Elasticsearch excep… --- ## [Data\_detection setting in the ECS index template](https://discuss.elastic.co/t/data-detection-setting-in-the-ecs-index-template/256715)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 11:07pm UTC](https://discuss.elastic.co/t/data-detection-setting-in-the-ecs-index-template/256715 "2020-11-25T23:07:08Z")
Hi, I posted first in the Logstash category, and it looks like this might be more Elasticsearch related... I am collecting http access logs and wanting to place some date headers into date type fields. I've tried a coup… --- ## [Vega Kibana Tree Visualization ignore missing parent node](https://discuss.elastic.co/t/vega-kibana-tree-visualization-ignore-missing-parent-node/256712)
**Author:** [@ejmath12](https://discuss.elastic.co/u/ejmath12)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 9:34pm UTC](https://discuss.elastic.co/t/vega-kibana-tree-visualization-ignore-missing-parent-node/256712 "2020-11-25T21:34:32Z")
Is there a way to gracefully handle missing parent node in kibana/vega tree visualization? For example, if the below json represents data, since X is non existent parent is it possible to ignore that link? \[ {"id": "A… --- ## [Date type fields not being created though date format conversion works](https://discuss.elastic.co/t/date-type-fields-not-being-created-though-date-format-conversion-works/256709)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 8:21pm UTC](https://discuss.elastic.co/t/date-type-fields-not-being-created-though-date-format-conversion-works/256709 "2020-11-25T20:21:50Z")
Hi, I am collecting http access logs and wanting to place some date headers into date type fields. I've tried a couple of things, shown below, but while the date format is converted properly, the resulting field is still… --- ## [Problem with deployment docker-compose](https://discuss.elastic.co/t/problem-with-deployment-docker-compose/256678)
**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 8:18pm UTC](https://discuss.elastic.co/t/problem-with-deployment-docker-compose/256678 "2020-11-25T20:18:41Z")
Hello Community, I got this error: kib01 | 2020-11-25T15:23:45.708146631Z {"type":"log","@timestamp":"2020-11-25T15:23:45Z","tags":\["warning","elasticsearch","monitoring"\],"pid":6,"message":"Unable to revive connect… --- ## [RequestElaspedTime](https://discuss.elastic.co/t/requestelaspedtime/256369)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 8\ **Last updated:** [November 25, 2020, 8:01pm UTC](https://discuss.elastic.co/t/requestelaspedtime/256369 "2020-11-25T20:01:25Z")
Recently upgraded log message include field requestElapsedTime to replaced elapsed\_tme but from index pattern for requestElaspedTIme the type is 'string' only not 'number' for metric result. I've added below on logstash… --- ## [Missing data in log - Source field is always Null](https://discuss.elastic.co/t/missing-data-in-log-source-field-is-always-null/256705)
**Author:** [@hilne1](https://discuss.elastic.co/u/hilne1)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 7:12pm UTC](https://discuss.elastic.co/t/missing-data-in-log-source-field-is-always-null/256705 "2020-11-25T19:12:57Z")
Hi, I'm using ELK stack in docker swarm with 6 filebeat, 1 logstash, 1 elasticsearch and 1 kibana. All is in version 7.6.1. I have a problem when receiving data (cf the photo below) All logs are sending with empty … --- ## [Logstash 7.10 fails with date filter UNIX\_MS - failed to parse date field strict\_date\_optional\_time](https://discuss.elastic.co/t/logstash-7-10-fails-with-date-filter-unix-ms-failed-to-parse-date-field-strict-date-optional-time/256583)
**Author:** [@dfrewin](https://discuss.elastic.co/u/dfrewin)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 6:55pm UTC](https://discuss.elastic.co/t/logstash-7-10-fails-with-date-filter-unix-ms-failed-to-parse-date-field-strict-date-optional-time/256583 "2020-11-25T18:55:59Z")
Initially logstash was running when we were on 6.8 but as soon as we upgraded to 7.9.3 it started failing. Using salesforce logstash plugin error msg retrieves the time value successfully, but looks to fail when sending… --- ## [Filebeat 7.10 is not harvesting](https://discuss.elastic.co/t/filebeat-7-10-is-not-harvesting/256182)
**Author:** [@elkwhat](https://discuss.elastic.co/u/elkwhat)\ **Replies:** 16\ **Last updated:** [November 25, 2020, 6:50pm UTC](https://discuss.elastic.co/t/filebeat-7-10-is-not-harvesting/256182 "2020-11-25T18:50:24Z")
Hi, I got a weird problem that i would like to share. I have one filebeat instance trying to harvest a particular file and its just doing nothing. Here's my filebeat config - # ============================== Filebea… --- ## [Issues with Elastic Agent](https://discuss.elastic.co/t/issues-with-elastic-agent/256578)
**Author:** [@abdeslam.mazouz](https://discuss.elastic.co/u/abdeslam.mazouz)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 6:29pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578 "2020-11-25T18:29:40Z")
What do you think about this; Elastic agent shows up in SIEM under administration for some servers but not all. Even if they are suing the same config and managed from Fleet. The agent piece working but the endpoint secu… --- ## [Dashboard Time Frame Not Affecting Pie Chart or Table Visualizations](https://discuss.elastic.co/t/dashboard-time-frame-not-affecting-pie-chart-or-table-visualizations/256198)
**Author:** [@biker2o](https://discuss.elastic.co/u/biker2o)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:42pm UTC](https://discuss.elastic.co/t/dashboard-time-frame-not-affecting-pie-chart-or-table-visualizations/256198 "2020-11-25T17:42:10Z")
How can I have the DatePicker on a Dashboard filter data in Pie Charts and Data Tables? Please view attached images. Example below: There has been no data in the last 15 minutes, so this entire dashboard should be empty… --- ## [AWS Elasticsearch 7.7 : Query index for one field to match a subset of chars in another text field in a document? Can it be done?](https://discuss.elastic.co/t/aws-elasticsearch-7-7-query-index-for-one-field-to-match-a-subset-of-chars-in-another-text-field-in-a-document-can-it-be-done/256509)
**Author:** [@yoyomonkey](https://discuss.elastic.co/u/yoyomonkey)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 5:30pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-7-7-query-index-for-one-field-to-match-a-subset-of-chars-in-another-text-field-in-a-document-can-it-be-done/256509 "2020-11-25T17:30:09Z")
Hi everyone, I hope someone can guide me with some guides or links on this please . I have an index with two fields of interest : adapterid and country and I am trying to write a query without going thorugh every permu… --- ## [Only getting node and node\_stats metricsets from elasticsearch module](https://discuss.elastic.co/t/only-getting-node-and-node-stats-metricsets-from-elasticsearch-module/256585)
**Author:** [@chapterthree](https://discuss.elastic.co/u/chapterthree)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:16pm UTC](https://discuss.elastic.co/t/only-getting-node-and-node-stats-metricsets-from-elasticsearch-module/256585 "2020-11-25T17:16:40Z")
I seem to only be getting the node and node\_stats metricsets when I enable the elasticsearch-xpack.yml module. Any ideas why? I have tried with and without the xpack.enabled: true setting. --- ## [ELI5: Elasticsearch, Kibana and Logstash (and Beats)](https://discuss.elastic.co/t/eli5-elasticsearch-kibana-and-logstash-and-beats/256694)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 5:15pm UTC](https://discuss.elastic.co/t/eli5-elasticsearch-kibana-and-logstash-and-beats/256694 "2020-11-25T17:15:38Z")
Im having some issues understanding the components. Elasticsearch: Used for indexing and searching thru logs. Pretty straight forward. Kibana: Used as a GUI. Pretty straight forward. Logstash: Is this a syslog? Does t… --- ## [JSON Filter Making Events Disappear](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 5:08pm UTC](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199 "2020-11-25T17:08:21Z")
I've been using the same filter configuration across multiple upgrades of Logstash. After upgrading to 7.10.0, the JSON filter now makes events...disappear. Events are sent to Logstash via filebeat (running v 7.10.0). … --- ## [NEST: customize creation of HttpClient](https://discuss.elastic.co/t/nest-customize-creation-of-httpclient/256687)
**Author:** [@jonsagara](https://discuss.elastic.co/u/jonsagara)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 4:29pm UTC](https://discuss.elastic.co/t/nest-customize-creation-of-httpclient/256687 "2020-11-25T16:29:57Z")
Hello, There is a known issue with targeting net5.0 on Azure App Service and trying to connect to Elasticsearch on a virtual machine connected to via an Azure VNet. The main ticket is here: The issue is essentially t… --- ## [ILM trying to rollover old index](https://discuss.elastic.co/t/ilm-trying-to-rollover-old-index/256573)
**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 4:06pm UTC](https://discuss.elastic.co/t/ilm-trying-to-rollover-old-index/256573 "2020-11-25T16:06:42Z")
Hello, I have a single-node ES setup that's receiving data from Filebeat running on a separate server. Since I have Filebeat shipping data from different log sources, I went through the process of manually creating an i… --- ## [Visualization doesn't follow time picker vlues in the dashboard](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-vlues-in-the-dashboard/256560)
**Author:** [@Agenobarb](https://discuss.elastic.co/u/Agenobarb)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 3:53pm UTC](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-vlues-in-the-dashboard/256560 "2020-11-25T15:53:41Z")
Time-based visualization (Line type) doesn't follow the time picker values in the dashboard - regardless what time interval I select in the time picker has no impact on the visualization. Please take a look at the screen… --- ## [Elasticsearch job to end messages with beginning messages, merge, then reindex](https://discuss.elastic.co/t/elasticsearch-job-to-end-messages-with-beginning-messages-merge-then-reindex/256541)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-job-to-end-messages-with-beginning-messages-merge-then-reindex/256541 "2020-11-25T15:44:21Z")
The system I'm running is currently matching beginning messages with end messages then sending them to logstash for further processing. This is done through a web of python code. I was wondering if this could be accompl… --- ## [Timelion 7.10 Error : Syntax Error](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 4\ **Last updated:** [November 25, 2020, 3:31pm UTC](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016 "2020-11-25T15:31:04Z")
Hi, Recently upgraded ELK to try v7.10. I am getting an error in Timelion: Timelion request error: undefined SyntaxError: {"type":"incompleteFunction","function":"es","location":{"min":0,"max":3},"text":".es"} This… --- ## [Intervals wildcard 128 expansion limit](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390)
**Author:** [@prasad.deshpande](https://discuss.elastic.co/u/prasad.deshpande)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390 "2020-11-25T14:57:23Z")
Hi, I'm trying out intervals wildcard queries. But in the process, depending on the term I'm hitting the 128 expansion limit. I know that this is a hard limit imposed by Lucene. But my question is if I have to get past … --- ## [Something went wrong on start http://localhost:5601](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272)
**Author:** [@kaibox-git](https://discuss.elastic.co/u/kaibox-git)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 2:51pm UTC](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272 "2020-11-25T14:51:26Z")
Windows 10 Google Chrome 86.0.4240.193 Elasticsearch just installed, ver 7.10 as a service. Kibana ver.7.10 When I go to http://localhost:5601 Clicking on button "Clear your session" has no effect. Page is reloa… --- ## [Kibana filter by sort and uniq value](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659 "2020-11-25T14:44:57Z")
Hello, At the discover navigation page, I would like to do a search (KQL) by creating a filter that will find a pattern for a specific field, sort all values and produce unique values. Is this possible? If yes, how? th… --- ## [Grok increase CPU usage to 700+%](https://discuss.elastic.co/t/grok-increase-cpu-usage-to-700/256633)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 2:42pm UTC](https://discuss.elastic.co/t/grok-increase-cpu-usage-to-700/256633 "2020-11-25T14:42:28Z")
Hello team, we have implemented a following GROK multi pattern match but when we deploy the pipeline for this component it raises CPU from 100 to 700%. Is there a way how to improve its performance? One way would be t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1675) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1677)