# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1690 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1691 --- ## [Error 1053: “The service did not respond in a timely fashion” when attempting to start winlogbeat service with MSI package](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802)
**Author:** [@mackov83](https://discuss.elastic.co/u/mackov83)\ **Replies:** 4\ **Last updated:** [November 18, 2020, 3:08pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802 "2020-11-18T15:08:05Z")
I have just started working with Winlogbeat as a forwarder to Graylog (Logstash). I was able to get this working perfectly fine with the .zip file. In order to simplify the deployment, I wanted to use the .msi file, and… --- ## [Unable to implement ssl\_enable in Logstash](https://discuss.elastic.co/t/unable-to-implement-ssl-enable-in-logstash/255838)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 3:00pm UTC](https://discuss.elastic.co/t/unable-to-implement-ssl-enable-in-logstash/255838 "2020-11-18T15:00:00Z")
I have a Nxlog agent sending windows event with om\_tcp module to a Logstash without errors. Now I am trying to implement more secure forwarding with SSL, there was no issues with the Nxlog agent, just configured with th… --- ## [ELasticsearch - ILM Policy](https://discuss.elastic.co/t/elasticsearch-ilm-policy/255856)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 2:58pm UTC](https://discuss.elastic.co/t/elasticsearch-ilm-policy/255856 "2020-11-18T14:58:47Z")
Hi There, I have a scenario to implement in Elastic cluster. I have 12 node elastic cluster 2 - coordinating Nodes 4 - Hot Data Nodes 3 - Warm data Nodes 3 - Master Nodes Im trying to implement ILM policy based on … --- ## [Kibana plugin search elastic](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504)
**Author:** [@omerf](https://discuss.elastic.co/u/omerf)\ **Replies:** 5\ **Last updated:** [November 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504 "2020-11-18T14:55:10Z")
I am creating a plugin in Kibana 7.0.1, to search through api, with an http request through server.route. In the new kibana plugins I can see: \ **Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 2:53pm UTC](https://discuss.elastic.co/t/http-output-failure/255858 "2020-11-18T14:53:18Z") Hi all, I'm using logstash 7.10.0, I made the config file as input { stdin{} } output{ http { url =\> "{URL\_SET\_CLOG}" format =\> "json" http\_method =\> "post" headers =\> \["Authorization", "Bearer {CLOG\_TOKEN}… --- ## [Need Robust Grok filter for nginx error log format](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630)
**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\ **Replies:** 4\ **Last updated:** [November 18, 2020, 2:40pm UTC](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630 "2020-11-18T14:40:04Z")
We are facing an issue while filtering nginx error log format ... suppose below are two log snippet from the error log 2020/11/17 13:04:05 \[error\] 32237#32237: \*4185303 open() "/etc/nginx/html/favicon.ico" failed (2: … --- ## [\[kbn/optimizer\] running optimizer for typescript plugin result in \ error on Kibana 7.9](https://discuss.elastic.co/t/kbn-optimizer-running-optimizer-for-typescript-plugin-result-in-exports-is-not-defined-error-on-kibana-7-9/255612)
**Author:** [@8wlgns](https://discuss.elastic.co/u/8wlgns)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 2:22pm UTC](https://discuss.elastic.co/t/kbn-optimizer-running-optimizer-for-typescript-plugin-result-in-exports-is-not-defined-error-on-kibana-7-9/255612 "2020-11-18T14:22:41Z")
Hello? I'm kind of a newbie in developing external kibana typescript plugin. I try to modify typescripts code and then running optimizer api. (https://github.com/elastic/kibana/tree/master/packages/kbn-optimizer) It se… --- ## [Read multiple sqlite .db files in logstash](https://discuss.elastic.co/t/read-multiple-sqlite-db-files-in-logstash/255854)
**Author:** [@Deepak\_Kumar3](https://discuss.elastic.co/u/Deepak_Kumar3)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 2:20pm UTC](https://discuss.elastic.co/t/read-multiple-sqlite-db-files-in-logstash/255854 "2020-11-18T14:20:01Z")
hi, trying to read sqlite .db files using jdbc plugin and here is the configuration file for logstash below. input { jdbc { jdbc\_driver\_library =\> "D:/etc/driver/sqlite-jdbc-3.32.3.2.jar" jdbc\_driver\_class… --- ## [Machine Learning - Index migration in progress](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837)
**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 2:09pm UTC](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837 "2020-11-18T14:09:16Z")
Hi all, I upgraded my elk license to Trial in order to work with the Machine Learning feature. But since 2 days ago, it only appears this message: "Index migration in progress Indices related to Machine Learning are c… --- ## [Logstash-output-syslog plugin sends incorrect facility](https://discuss.elastic.co/t/logstash-output-syslog-plugin-sends-incorrect-facility/255734)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-sends-incorrect-facility/255734 "2020-11-18T13:18:57Z")
Linux Debian 10.6 Logstash 7.10.0 OpenJDK 11.0.8+10 rsyslogd 8.1901.0 plugin logstash-output-syslog example.conf: input { stdin {} } output { stdout {} syslog { id =\> "syslog\_output" appname =\> "logsta… --- ## [How to increase the Heartbeat I/O Timeout value](https://discuss.elastic.co/t/how-to-increase-the-heartbeat-i-o-timeout-value/255719)
**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 7:12pm UTC](https://discuss.elastic.co/t/how-to-increase-the-heartbeat-i-o-timeout-value/255719 "2020-11-17T19:12:30Z")
Team, we are getting below DOwn alert for one of the uptime monitor we configured, actually the site is not down ,however we got these Get http://xxxxxxxx:5006/aaaaaa\_bbbbb\_ccccc: http: request timed out while waiting … --- ## [Logstash S3 input plugin - prefix usage](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-usage/255819)
**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-usage/255819 "2020-11-18T10:44:59Z")
Hi - I'm using the logstash S3 input plugin - and need to implement "backup\_add\_prefix" - so that I can skip processed files - to improve performance. I assumed the first step to implementing this, was to get the prefix… --- ## [Logstash-output-syslog sends invalid json message from winlogbeat agent](https://discuss.elastic.co/t/logstash-output-syslog-sends-invalid-json-message-from-winlogbeat-agent/255754)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 7:05pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-sends-invalid-json-message-from-winlogbeat-agent/255754 "2020-11-17T19:05:01Z")
Linux Debian 10.6 Logstash 7.10.0 OpenJDK 11.0.8+10 rsyslogd 8.1901.0 plugin logstash-output-syslog winlogbeat 7.10.0 logstash output.conf: output { elasticsearch { .... } syslog { id =\> "syslog\_output"… --- ## [Gauge percentage mode shows 1% after upgrade](https://discuss.elastic.co/t/gauge-percentage-mode-shows-1-after-upgrade/253434)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [November 18, 2020, 11:58am UTC](https://discuss.elastic.co/t/gauge-percentage-mode-shows-1-after-upgrade/253434 "2020-11-18T11:58:44Z")
Hi, I just upgraded my stack (7.2.1 --\> 7.9.2) and one of my visualizations changed from showing 100% to 1%. The value is either 0 or 1 (range is set to that), nothing changed besides upgrading. Any suggestion on how ca… --- ## [Creating watch for kibana to get only warning](https://discuss.elastic.co/t/creating-watch-for-kibana-to-get-only-warning/255675)
**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 11:10am UTC](https://discuss.elastic.co/t/creating-watch-for-kibana-to-get-only-warning/255675 "2020-11-18T11:10:06Z")
I am creating a script in watch to get an alert if my warning count increases more than five. in the image you can see that i get the count alert of all the data in the field (event \_type) has been exceeded more than … --- ## [Use Cisco MIB to fetch CPU and Memory using Logstash](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445)
**Author:** [@Ajay\_Singh2](https://discuss.elastic.co/u/Ajay_Singh2)\ **Replies:** 4\ **Last updated:** [November 18, 2020, 11:09am UTC](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445 "2020-11-18T11:09:38Z")
I have Cisco Switches and Routers. I have download their CPU and memory MIB's which are in .my format. How can i use logstash to utilize these MIB to fetch CPU and Memory status of cisco switches and routers ? --- ## [What is the username and password to be entered](https://discuss.elastic.co/t/what-is-the-username-and-password-to-be-entered/255825)
**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 11:09am UTC](https://discuss.elastic.co/t/what-is-the-username-and-password-to-be-entered/255825 "2020-11-18T11:09:00Z")
xpack.notification.email.account: gmail\_account: profile: gmail smtp: host: smtp.gmail.com port: 587 user: \*\*\*\*\* password: \*\*\*\*\* auth: true #starttls.required: true in the above , what is the username and passw… --- ## [Kibana.yml file in managed Elastic Stack](https://discuss.elastic.co/t/kibana-yml-file-in-managed-elastic-stack/255814)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 11:02am UTC](https://discuss.elastic.co/t/kibana-yml-file-in-managed-elastic-stack/255814 "2020-11-18T11:02:44Z")
Hello, where can I find the Kibana.yml file in a managed Elastic Stack? I'd like to change the configuration for 'xpack.security.sessionTimeout' in order to prevent session logouts. Thanks! --- ## [Logstash S3 output plugin with AWS emulation with Localstack](https://discuss.elastic.co/t/logstash-s3-output-plugin-with-aws-emulation-with-localstack/255822)
**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 10:54am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-with-aws-emulation-with-localstack/255822 "2020-11-18T10:54:58Z")
Hi All, after I spent a lot of time configuring and connecting Logstash to Localstack, I had many errors and no guide to follow . In my case I have 2 dockers , one is logstash docker with S3 output pluging , second dock… --- ## [Change format json file to metrics with Logstash and save it in Victoria Metrics](https://discuss.elastic.co/t/change-format-json-file-to-metrics-with-logstash-and-save-it-in-victoria-metrics/255732)
**Author:** [@recepbalibey](https://discuss.elastic.co/u/recepbalibey)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 3:56pm UTC](https://discuss.elastic.co/t/change-format-json-file-to-metrics-with-logstash-and-save-it-in-victoria-metrics/255732 "2020-11-17T15:56:07Z")
Here is only one example from my JSON file \>\> {"host":"ABCDEFASD","groups":\["ABVD","TEST"\],"applications": \["NETWORK"\],"itemid":143172,"name":"Operational status of interface Se0/1/0:17","clock":1604283792,"ns":926563… --- ## [Unable to setup elastic cluster](https://discuss.elastic.co/t/unable-to-setup-elastic-cluster/255794)
**Author:** [@praveencdcx](https://discuss.elastic.co/u/praveencdcx)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/unable-to-setup-elastic-cluster/255794 "2020-11-18T10:44:58Z")
Hello, Need help !! I am trying to setup a 3 Master,Data nodes and 1 ingest node. I have done the below configuration. elasticsearch service is starting but i dont see any logs in elasticsearch.log file. \[INFO \]\[o.e.… --- ## [Metricbeat service metricset doesn't work on Centos/RedHat 8.x](https://discuss.elastic.co/t/metricbeat-service-metricset-doesnt-work-on-centos-redhat-8-x/255346)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 9:46am UTC](https://discuss.elastic.co/t/metricbeat-service-metricset-doesnt-work-on-centos-redhat-8-x/255346 "2020-11-18T09:46:03Z")
I deployed a metricbeat 7.10.0 on a Centos 8.0 VM and on RedHat 8.2 VM. I defined a metricbeat system module as follows: #module system, metriceset service - module: system metricsets: - service period: 30s s… --- ## [Mapping](https://discuss.elastic.co/t/mapping/255689)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 9:36am UTC](https://discuss.elastic.co/t/mapping/255689 "2020-11-18T09:36:58Z")
Logstash creates datestamped indexes, syslog-2020.11.17 etc, so I have an index for each day. I use kv filter to parse data. The syslog source sends different parameters depending on event type, so the index pattern Fi… --- ## [Can't start Elasticsearch service (code=exited, status=1/FAILURE) affter add x.pack security](https://discuss.elastic.co/t/cant-start-elasticsearch-service-code-exited-status-1-failure-affter-add-x-pack-security/254346)
**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 8:34am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-service-code-exited-status-1-failure-affter-add-x-pack-security/254346 "2020-11-18T08:34:26Z")
Hi, I try to add Enable Elasticsearch security features by add this line in elasticsearch.yml: xpack.security.enabled: true and this is full conf: # ======================== Elasticsearch Configuration ===========… --- ## [Cannot insert data at random times. \[OptionalDataException\]](https://discuss.elastic.co/t/cannot-insert-data-at-random-times-optionaldataexception/255476)
**Author:** [@nopma](https://discuss.elastic.co/u/nopma)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 8:27am UTC](https://discuss.elastic.co/t/cannot-insert-data-at-random-times-optionaldataexception/255476 "2020-11-18T08:27:47Z")
I have 3 data nodes. I use fluentbit to send logs to elastic to only one node. Random times I see that it's failed to send data to elastic. It takes 1h exactly to resolve the issue. Its happen one per day. Some logs f… --- ## [Getting error \_.%x is not a function](https://discuss.elastic.co/t/getting-error-x-is-not-a-function/255702)
**Author:** [@sam7](https://discuss.elastic.co/u/sam7)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 1:16pm UTC](https://discuss.elastic.co/t/getting-error-x-is-not-a-function/255702 "2020-11-17T13:16:50Z")
Trying to get the count of products from my json index (eg. test-index). Aggregation output from dev tool is mentioned below. { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skippe… --- ## [Kibana Elasticsearch TLS does not work (alert and actions)](https://discuss.elastic.co/t/kibana-elasticsearch-tls-does-not-work-alert-and-actions/255682)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 1:50pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-tls-does-not-work-alert-and-actions/255682 "2020-11-17T13:50:32Z")
I followed all steps in the guide but unfortunately, it did not work for me . server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid valu… --- ## ["no cached mapping for this field"](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/255514)
**Author:** [@obloboblo](https://discuss.elastic.co/u/obloboblo)\ **Replies:** 3\ **Last updated:** [November 18, 2020, 7:36am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/255514 "2020-11-18T07:36:58Z")
hello I've seen that a warning from the topic subject makes some troubles also for other users on this forum, but I believe this one is new here. this warning shows for a field with epoch timestamp value. after some ti… --- ## [Using tiebreakers in Kibana Discover or Logs](https://discuss.elastic.co/t/using-tiebreakers-in-kibana-discover-or-logs/255441)
**Author:** [@MAE](https://discuss.elastic.co/u/MAE)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 7:59am UTC](https://discuss.elastic.co/t/using-tiebreakers-in-kibana-discover-or-logs/255441 "2020-11-17T07:59:23Z")
Hello everyone, I am regularly ingesting a pair of events with the same timestamp. If they are shown in the incorrect order, it's very confusing for the user. Used versions are logstash-7.9.1 , kibana-7.9.1 and elastic… --- ## [Continuous data synchronization between mongodb and elasticsearch](https://discuss.elastic.co/t/continuous-data-synchronization-between-mongodb-and-elasticsearch/255788)
**Author:** [@Durga\_AK](https://discuss.elastic.co/u/Durga_AK)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 7:18am UTC](https://discuss.elastic.co/t/continuous-data-synchronization-between-mongodb-and-elasticsearch/255788 "2020-11-18T07:18:02Z")
I have installed ELK stack in AWS EC2. I have created a logstash config file and I'm able to ingest existing data from mongodb to elastic search using the logstash -f config file. Now I have inserted few data into mongod… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1689) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1691)