# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1738 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1739 --- ## [Cant understant this bad response](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806)
**Author:** [@Borna\_Jelic](https://discuss.elastic.co/u/Borna_Jelic)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 9:13pm UTC](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806 "2020-10-21T21:13:46Z")
Hello, I have implemented my custom search function. All tests have passed, but when I run request on Kibana, I get this response: { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", … --- ## [Map Index!](https://discuss.elastic.co/t/map-index/252833)
**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 9:06pm UTC](https://discuss.elastic.co/t/map-index/252833 "2020-10-21T21:06:27Z")
How to map index? Need help! --- ## [Format for timestamps](https://discuss.elastic.co/t/format-for-timestamps/252878)
**Author:** [@georgemichael](https://discuss.elastic.co/u/georgemichael)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:46pm UTC](https://discuss.elastic.co/t/format-for-timestamps/252878 "2020-10-21T20:46:23Z")
I am working on some logging software and was wondering what format kibana indexes timestamps. I was thinking of using something similar to log.go for formatting log header to buffer as seen here: func (l \*Logger) forma… --- ## [Nested Component Templates](https://discuss.elastic.co/t/nested-component-templates/252895)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 8:12pm UTC](https://discuss.elastic.co/t/nested-component-templates/252895 "2020-10-21T20:12:38Z")
Hi All, I was wondering if anyone knows if its possible to do nested component templates, or if there is plans to add it? An example/use case is the geo object. Currently the geo object is a nested object of client, de… --- ## [Elasticsearch, which path for elasticsearch.keystore is used?](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845)
**Author:** [@Andrea\_Marchi](https://discuss.elastic.co/u/Andrea_Marchi)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:04pm UTC](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845 "2020-10-21T20:04:41Z")
I'm trying to understand why I get 401 after initializing a new instance (goal to have multiple instances on one machine). Steps taken: created a elasticsearch.keystore add the bootstrap.password successfully, with ca… --- ## [Error message while installing Kibana : Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/error-message-while-installing-kibana-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/252436)
**Author:** [@newbie00](https://discuss.elastic.co/u/newbie00)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 7:17pm UTC](https://discuss.elastic.co/t/error-message-while-installing-kibana-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/252436 "2020-10-21T19:17:17Z")
I have trouble installing Kibana. Elasticsearch have been installed without problem but when I tried with Kibana I get the following error message log \[22:27:13.834\] \[warning\]\[savedobjects-service\] Unable to connect t… --- ## [How to minimize indexing impact on search operations?](https://discuss.elastic.co/t/how-to-minimize-indexing-impact-on-search-operations/252890)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:03pm UTC](https://discuss.elastic.co/t/how-to-minimize-indexing-impact-on-search-operations/252890 "2020-10-21T19:03:54Z")
Hi all, I'm wondering if anyone has any recommendations on how to minimize the performance impact of indexing on search operations. My use-case is very search-heavy, but indexing is also happening fairly constantly - mut… --- ## [hideTimeColumn not work in saved search dashboard](https://discuss.elastic.co/t/hidetimecolumn-not-work-in-saved-search-dashboard/252784)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 6:58pm UTC](https://discuss.elastic.co/t/hidetimecolumn-not-work-in-saved-search-dashboard/252784 "2020-10-21T18:58:27Z")
hello all i had a case... i had set my doc\_table:hideTimeColumn to on it work in discover and when we export to csv its still hide timecolumn... but in dashboard in display it still hide the timecolumn, but when … --- ## [Cisco IOS netflow dhcp/mac](https://discuss.elastic.co/t/cisco-ios-netflow-dhcp-mac/252745)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 10:50pm UTC](https://discuss.elastic.co/t/cisco-ios-netflow-dhcp-mac/252745 "2020-10-20T22:50:38Z")
So quick and easy question. How to visualize Cisco IOS netflow/syslog. What I'm after which I haven't been able to figure out yet is a MAC address to a port. Does anyone know of a way to show the MAC and IP assigned to … --- ## [KİBANA DASHBOARD İMPORT--- NOT WORKİNG](https://discuss.elastic.co/t/kibana-dashboard-import-not-working/252726)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 6:54pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-not-working/252726 "2020-10-21T18:54:10Z")
When I try to import like in this link, I get this error. why is that ? Can you help me please ? --- ## [What is the meaning of time\_in\_millis in \_node stats](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 6:40pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616 "2020-10-21T18:40:03Z")
sample output GET \_nodes/dev-iad-cluster-data-4/stats/ingest "ingest" : { "total" : { "count" : 0, "time\_in\_millis" : 0, "current" : 0, "failed" : 0 }, what… --- ## [Multiple kibana in production](https://discuss.elastic.co/t/multiple-kibana-in-production/252694)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 6:35pm UTC](https://discuss.elastic.co/t/multiple-kibana-in-production/252694 "2020-10-21T18:35:00Z")
I am going to use elasticsearch cluster in which there is 3 master node and 3 data node. And i read the docs of use kibana in production environment i am planning to have another node of elasticsearch which will act as … --- ## [Disk Full problem winlogbeat](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749)
**Author:** [@pablo1816](https://discuss.elastic.co/u/pablo1816)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 6:04pm UTC](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749 "2020-10-21T18:04:50Z")
I was running out of space on node and deleted multiple indexes, now there is space but in winlogbeat I have the following error. 2020-10-20T21:51:15.360-0300 ERROR \[elasticsearch\] elasticsearch/client.go:213 Failed to … --- ## [Multiple kibana in production](https://discuss.elastic.co/t/multiple-kibana-in-production/252879)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 5:53pm UTC](https://discuss.elastic.co/t/multiple-kibana-in-production/252879 "2020-10-21T17:53:46Z")
I want to setup elasticsearch cluster (3 master node+2 data node+2 coordinate node) and kibana also. We can secure this cluster and kibana with x pack security.There are 100 people who want to use kibana and each member … --- ## [/var/lib/elasticsearch/tmp not accessible in ES 6.8](https://discuss.elastic.co/t/var-lib-elasticsearch-tmp-not-accessible-in-es-6-8/252723)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 5:41pm UTC](https://discuss.elastic.co/t/var-lib-elasticsearch-tmp-not-accessible-in-es-6-8/252723 "2020-10-21T17:41:01Z")
Hi, I'm doing an upgrade from ES 5.6 to ES 6.8. When starting ES 6.8, I'm getting this exception: -- Logs begin at Tue 2020-10-20 00:29:07 UTC, end at Tue 2020-10-20 17:35:18 UTC. -- Oct 20 00:29:56 systemd\[1… --- ## [Bulk api without repetition the index string - performance optimisation](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 10\ **Last updated:** [October 21, 2020, 5:19pm UTC](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831 "2020-10-21T17:19:06Z")
Hi, please is there a way how to optimise the bulk insert ? Having valueless strings {"index":{}} increases the bulk load and costs extra resources. this is the example but in our case we want to write huge amounts of… --- ## [Urlparam in pdf generate POST url not working](https://discuss.elastic.co/t/urlparam-in-pdf-generate-post-url-not-working/252294)
**Author:** [@mybluedog24](https://discuss.elastic.co/u/mybluedog24)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 5:14pm UTC](https://discuss.elastic.co/t/urlparam-in-pdf-generate-post-url-not-working/252294 "2020-10-21T17:14:02Z")
Hi, I have tried to add urlparam in generate PDF POST url, but it doesn't work. It works fine without urlparam. I added the urlparam to the POST url manually: https://xxxxx.ca-central-1.aws.elastic-cloud.com:9243/api/… --- ## [How to check no of events pass in a second?](https://discuss.elastic.co/t/how-to-check-no-of-events-pass-in-a-second/252674)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 4:46pm UTC](https://discuss.elastic.co/t/how-to-check-no-of-events-pass-in-a-second/252674 "2020-10-21T16:46:06Z")
When someone say i get 1200 event per second how they determine? --- ## [Disk Usage Elasticsearch 5.6 compared to Elasticsearch 7.9](https://discuss.elastic.co/t/disk-usage-elasticsearch-5-6-compared-to-elasticsearch-7-9/251949)
**Author:** [@nate.atg](https://discuss.elastic.co/u/nate.atg)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 4:39pm UTC](https://discuss.elastic.co/t/disk-usage-elasticsearch-5-6-compared-to-elasticsearch-7-9/251949 "2020-10-21T16:39:04Z")
We are currently moving from Elasticsearch 5.6.4 to Elasticsearch 7.9.1 and are seeing some concerning differences in disk usage and CPU usage, which we suspect may be a symptom of the larger indices. The same data with… --- ## [CI/CD Pipeline for Logstash Conf file](https://discuss.elastic.co/t/ci-cd-pipeline-for-logstash-conf-file/252866)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 3:47pm UTC](https://discuss.elastic.co/t/ci-cd-pipeline-for-logstash-conf-file/252866 "2020-10-21T15:47:32Z")
Currently I have a logstash conf file, and around 20 ruby scripts doing some jobs. Now the problem is we have dev, uat, and prod environment. Daily we are making changes to the uat and fixing this, those changes are curr… --- ## [Elasticsearch filter plugin and pipeline workers race condition](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-pipeline-workers-race-condition/252862)
**Author:** [@rfferrao](https://discuss.elastic.co/u/rfferrao)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-pipeline-workers-race-condition/252862 "2020-10-21T15:22:38Z")
I'm considering migrating the aggregate filter towards a query through the elasticsearch filter plugin in favor of managing parent/child relationships between sets of data. Since I'll be backtracking in search of the st… --- ## [Filebeat Sonicwall module - dissect\_parsing\_error](https://discuss.elastic.co/t/filebeat-sonicwall-module-dissect-parsing-error/252708)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 3:16pm UTC](https://discuss.elastic.co/t/filebeat-sonicwall-module-dissect-parsing-error/252708 "2020-10-21T15:16:49Z")
I have attempted to enable the SonicWall Filebeat module but it doesn't seem to support our logs fully. I am running v7.9.2 and looked at enabling this through ingest manager in the Kibana GUI but that doesn't seem to b… --- ## [FileBeat -\> AWS MSK over TLS Client Authentication](https://discuss.elastic.co/t/filebeat-aws-msk-over-tls-client-authentication/252709)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 3:02pm UTC](https://discuss.elastic.co/t/filebeat-aws-msk-over-tls-client-authentication/252709 "2020-10-21T15:02:36Z")
Hi, Could anyone guide me with the process (or configuration) to enable TLS Client Auth while streaming data from FileBeat --\> AWS MSK What are all the params that we need to pass in FileBeat output configuration. --- ## [Unmatched responses](https://discuss.elastic.co/t/unmatched-responses/252860)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 3:00pm UTC](https://discuss.elastic.co/t/unmatched-responses/252860 "2020-10-21T15:00:08Z")
Hi there, I've got unmatched response (and requests) in my packetbeat config, capturing http resuests Metrics logs show a lot of unmatched events 2020-10-21T16:51:39.052+0200 INFO \[monitoring\] log/log.go:145 Non-zero … --- ## [Write only errors log level on logstash-plain.log](https://discuss.elastic.co/t/write-only-errors-log-level-on-logstash-plain-log/252810)
**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 2:55pm UTC](https://discuss.elastic.co/t/write-only-errors-log-level-on-logstash-plain-log/252810 "2020-10-21T14:55:14Z")
Hi guys, I have lot of informations in my logstash-plain and the size can be increased to xx Gb. I thought about two solutions : First, I noticed that my logstash-plain.log contains x days informations, the solution… --- ## [Filebeat unable to parse JSON log(contains array) output to logstash](https://discuss.elastic.co/t/filebeat-unable-to-parse-json-log-contains-array-output-to-logstash/252107)
**Author:** [@polaaditya](https://discuss.elastic.co/u/polaaditya)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-parse-json-log-contains-array-output-to-logstash/252107 "2020-10-21T14:45:28Z")
My current usage Filebeat =\> Logstash =\> Elasticsearch. Below is the error log Oct 14 14:07:21 vault-audit filebeat\[11314\]: 2020-10-13T14:07:21.055Z INFO \[publisher\] pipeline/retry.go:217 … --- ## [WinLogBeat - Windows Certificate Store](https://discuss.elastic.co/t/winlogbeat-windows-certificate-store/252727)
**Author:** [@Frank\_Barton](https://discuss.elastic.co/u/Frank_Barton)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 2:40pm UTC](https://discuss.elastic.co/t/winlogbeat-windows-certificate-store/252727 "2020-10-21T14:40:28Z")
I'm experimenting with WinLogBeat, and would like to use certificate authentication on the connection to LogStash. All of my clients have certificates in the windows certificate store. Is there a way to configure winlog… --- ## [Logstash to multiple ingest node pipelines](https://discuss.elastic.co/t/logstash-to-multiple-ingest-node-pipelines/252850)
**Author:** [@victor\_ide](https://discuss.elastic.co/u/victor_ide)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 2:15pm UTC](https://discuss.elastic.co/t/logstash-to-multiple-ingest-node-pipelines/252850 "2020-10-21T14:15:43Z")
I was looking into the forum on how to setup logstash to sent data using more than one ingest node pipelines but could not find nothing related, my objective is to split the load into elastic cloud and my logstash instan… --- ## [Winlogbeat - drop\_event (multiple event ID's with specific rules)](https://discuss.elastic.co/t/winlogbeat-drop-event-multiple-event-ids-with-specific-rules/252822)
**Author:** [@0xf](https://discuss.elastic.co/u/0xf)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 2:06pm UTC](https://discuss.elastic.co/t/winlogbeat-drop-event-multiple-event-ids-with-specific-rules/252822 "2020-10-21T14:06:06Z")
Okay so im having a hard time solving this puzzle. Tried almost everything and i cant really solve it by myself, any ideas? So i have 2 event ID's: winlog.event\_id: 4624 winlog.event\_id: 4672 What i want to do is i w… --- ## [Kafka output support in Filebeat. Anyone using Filebeat with Kafka version \>2.2.0](https://discuss.elastic.co/t/kafka-output-support-in-filebeat-anyone-using-filebeat-with-kafka-version-2-2-0/252038)
**Author:** [@Hreidar\_Joelsson](https://discuss.elastic.co/u/Hreidar_Joelsson)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 1:48pm UTC](https://discuss.elastic.co/t/kafka-output-support-in-filebeat-anyone-using-filebeat-with-kafka-version-2-2-0/252038 "2020-10-21T13:48:49Z")
Hi, I'm looking into using Filebeat as an ingress into a pipeline which is based on Kafka. I'm currently using an on-prem Kafka cluster which has brokers running Kafka version 2.5.0 but I see that the highest version sup… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1737) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1739)