# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1748

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1749

---

## [How to check Logstash logs appearing in Elasticsearch?](https://discuss.elastic.co/t/how-to-check-logstash-logs-appearing-in-elasticsearch/252174)

<div class="topic-metadata">

**Author:** [@deanwarrenuk](https://discuss.elastic.co/u/deanwarrenuk)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 6:14pm UTC](https://discuss.elastic.co/t/how-to-check-logstash-logs-appearing-in-elasticsearch/252174 "2020-10-15T18:14:54Z")

</div>

Okay I am a noob I have ELK installed in Docker containers and am sending logs from a Python program using python-logstash. I can see Logstash receiving my logs when I do docker-compose logs . How do I check these are …

---

## [Logstash Unable to renew Kerberos ticket](https://discuss.elastic.co/t/logstash-unable-to-renew-kerberos-ticket/252241)

<div class="topic-metadata">

**Author:** [@burkeg](https://discuss.elastic.co/u/burkeg)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 4:58pm UTC](https://discuss.elastic.co/t/logstash-unable-to-renew-kerberos-ticket/252241 "2020-10-15T16:58:16Z")

</div>

Hi, I'm trying to setup logstash agent with Kafka output that has Kerberos based authentication and uses SASL\_SSL mechanism. Logstash agent works fine when started but fails to renew Kerberos ticket. I've configured th…

---

## [Update kibana style without plugin](https://discuss.elastic.co/t/update-kibana-style-without-plugin/252237)

<div class="topic-metadata">

**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 4:52pm UTC](https://discuss.elastic.co/t/update-kibana-style-without-plugin/252237 "2020-10-15T16:52:20Z")

</div>

Hello, I want to update kibana style by updating css file. I updated before (v 7.0.1) by updating common.style.css file. But I am using now 7.9.2 and there is not common.style.css file in this version. Which css file …

---

## [Elasticsearch graceful restart without rebalancing shards](https://discuss.elastic.co/t/elasticsearch-graceful-restart-without-rebalancing-shards/251660)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 3\
**Last updated:** [October 15, 2020, 3:54pm UTC](https://discuss.elastic.co/t/elasticsearch-graceful-restart-without-rebalancing-shards/251660 "2020-10-15T15:54:43Z")

</div>

Hello, I wanted to know if it is possible to restart a node of an Elasticsearch cluster in a graceful way? When I restart a node in the cluster, searches that use that node fail (shards are replicated). Is it possible …

---

## [Elasticsearch 6.8.1 xpack](https://discuss.elastic.co/t/elasticsearch-6-8-1-xpack/252076)

<div class="topic-metadata">

**Author:** [@chris1967](https://discuss.elastic.co/u/chris1967)\
**Replies:** 0\
**Last updated:** [October 14, 2020, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-1-xpack/252076 "2020-10-14T16:46:04Z")

</div>

I enabled xpack.security (xpack.security.enabled: true) and i set the built in passwords initially with the elasticsearch-setup-passwords. But now i have to change the URL, because i want to change the network.node in th…

---

## [Coordinating nodes cpu usage dropped down while data nodes rise up after upgrade elastic 7.4.0 to 7.8.1](https://discuss.elastic.co/t/coordinating-nodes-cpu-usage-dropped-down-while-data-nodes-rise-up-after-upgrade-elastic-7-4-0-to-7-8-1/252228)

<div class="topic-metadata">

**Author:** [@hadars](https://discuss.elastic.co/u/hadars)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 3:40pm UTC](https://discuss.elastic.co/t/coordinating-nodes-cpu-usage-dropped-down-while-data-nodes-rise-up-after-upgrade-elastic-7-4-0-to-7-8-1/252228 "2020-10-15T15:40:25Z")

</div>

Hey, A year +- we decided to change our ingesting pipeline to work with coordinating nodes. (https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#coordinating-node) This helped us a lot, al…

---

## [Snapshot exception](https://discuss.elastic.co/t/snapshot-exception/251861)

<div class="topic-metadata">

**Author:** [@pmk](https://discuss.elastic.co/u/pmk)\
**Replies:** 12\
**Last updated:** [October 15, 2020, 3:41pm UTC](https://discuss.elastic.co/t/snapshot-exception/251861 "2020-10-15T15:41:25Z")

</div>

Hi i'm trying to take snapshot for every 30 min , The following problems occur. ERROR) { "type": "concurrent\_snapshot\_execution\_exception", "reason": "\[reponm-prd-snapshots:scheduled-lm\_rkid\_qtoa75fr0qvlca\] a snap…

---

## [I want to delete my main Index pattern but what will be consequences?](https://discuss.elastic.co/t/i-want-to-delete-my-main-index-pattern-but-what-will-be-consequences/252023)

<div class="topic-metadata">

**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 3:37pm UTC](https://discuss.elastic.co/t/i-want-to-delete-my-main-index-pattern-but-what-will-be-consequences/252023 "2020-10-15T15:37:35Z")

</div>

Hello on my Kibana I have a few index patterns to categorize logs when they are sent from logstash I have a global index pattern named filebeat-\* I have other inde patterns named this way: filebeat--myappname- So the…

---

## [Hot-Warm Setup using Docker](https://discuss.elastic.co/t/hot-warm-setup-using-docker/252227)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 3:37pm UTC](https://discuss.elastic.co/t/hot-warm-setup-using-docker/252227 "2020-10-15T15:37:12Z")

</div>

Hello All, Looking for some support here on elastic stack setup over docker with Hot-Warm architecture approach.

---

## [How to get this Year and This Month with Date Range Query](https://discuss.elastic.co/t/how-to-get-this-year-and-this-month-with-date-range-query/252224)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 3:20pm UTC](https://discuss.elastic.co/t/how-to-get-this-year-and-this-month-with-date-range-query/252224 "2020-10-15T15:20:24Z")

</div>

Hi All Currently i have a date field where data is distributed from 2015 to 2020 I am interested in retrieving This Year, Last Year, This Month, Last Month I am able to retrieve Rolling 1 Year = From : now-1y, To :…

---

## [File not readable (please check user and group permissions for the path)](https://discuss.elastic.co/t/file-not-readable-please-check-user-and-group-permissions-for-the-path/252130)

<div class="topic-metadata">

**Author:** [@BH\_BV](https://discuss.elastic.co/u/BH_BV)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 2:43pm UTC](https://discuss.elastic.co/t/file-not-readable-please-check-user-and-group-permissions-for-the-path/252130 "2020-10-15T14:43:49Z")

</div>

im using docker-compose and suddenly logstash now unable to read the driver, but driver is in mounted folder inside the container with full read write permissions. whats possible the problem? logstash\_1 | Error: un…

---

## [Job for elasticsearch.service failed because the control process exited with error code](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/252219)

<div class="topic-metadata">

**Author:** [@Cesrion](https://discuss.elastic.co/u/Cesrion)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 2:42pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/252219 "2020-10-15T14:42:19Z")

</div>

Hello community... I am installing ELASTICSEARCH on my CentOS7.8 server BUT I am facing this error when i try to Start and enable elasticsearch service on boot, take in mind this is my second installation... ERROR: J…

---

## [Vega lite visualization](https://discuss.elastic.co/t/vega-lite-visualization/252173)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 2:27pm UTC](https://discuss.elastic.co/t/vega-lite-visualization/252173 "2020-10-15T14:27:30Z")

</div>

Hi Team, i'm very new to vega visualization i try to make a visualization like this i have a simple script like this : { $schema: https://vega.github.io/schema/vega-lite/v2.json data: { # URL object is a con…

---

## [Reverse Proxy Winlogbeat Dashboard upload](https://discuss.elastic.co/t/reverse-proxy-winlogbeat-dashboard-upload/251956)

<div class="topic-metadata">

**Author:** [@thatch56](https://discuss.elastic.co/u/thatch56)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 1:57pm UTC](https://discuss.elastic.co/t/reverse-proxy-winlogbeat-dashboard-upload/251956 "2020-10-15T13:57:41Z")

</div>

Trying to set up the winlogbeat dashboards. How would i go about this if i already have ssl set up and am running the stack behind a nginx reverse proxy? Is there anyway to do this from the ELK server itself? Thank you f…

---

## [Kibana unable to authenticate](https://discuss.elastic.co/t/kibana-unable-to-authenticate/252108)

<div class="topic-metadata">

**Author:** [@elasticbitz](https://discuss.elastic.co/u/elasticbitz)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 1:54pm UTC](https://discuss.elastic.co/t/kibana-unable-to-authenticate/252108 "2020-10-15T13:54:17Z")

</div>

I installed elasticsearch and kibana per the deb apt instructions on the site. All running fine, then added the xpack.security.enabled: true and discovery.type: single-node to the elasticsearch.yaml. Next I used the setu…

---

## [Slow performance of shape query](https://discuss.elastic.co/t/slow-performance-of-shape-query/252158)

<div class="topic-metadata">

**Author:** [@inomad](https://discuss.elastic.co/u/inomad)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 9:09am UTC](https://discuss.elastic.co/t/slow-performance-of-shape-query/252158 "2020-10-15T09:09:49Z")

</div>

I am using Shape field type to store multi-point 2D trajectory paths (LINESTRING). All coordinates are normalized to the range \[0..1\]. And it seems that query performance (say search for intersection with 2-point line) …

---

## [Java Heap Size for ElasticSearch Nodes](https://discuss.elastic.co/t/java-heap-size-for-elasticsearch-nodes/252178)

<div class="topic-metadata">

**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\
**Replies:** 3\
**Last updated:** [October 15, 2020, 1:22pm UTC](https://discuss.elastic.co/t/java-heap-size-for-elasticsearch-nodes/252178 "2020-10-15T13:22:39Z")

</div>

Hello, I have an elasticsearch cluster with two nodes. I have read that java heap size sould not be more than 50% of physical memory. Is it valid for sum of all nodes heap size or just one? For instance, my computer's …

---

## [Logstash elasticsearch input, size and schedule params](https://discuss.elastic.co/t/logstash-elasticsearch-input-size-and-schedule-params/252203)

<div class="topic-metadata">

**Author:** [@feichau](https://discuss.elastic.co/u/feichau)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 1:19pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-size-and-schedule-params/252203 "2020-10-15T13:19:47Z")

</div>

I want to use elasticsearch input to query documents that is still missing some data and I didn't find how to limit the amount of documents returned by elasticsearch. The size param defines the amount that is returned ea…

---

## [Logstash TCP Output Plugin Reconnect Interval Issue](https://discuss.elastic.co/t/logstash-tcp-output-plugin-reconnect-interval-issue/251788)

<div class="topic-metadata">

**Author:** [@Paddy\_F](https://discuss.elastic.co/u/Paddy_F)\
**Replies:** 4\
**Last updated:** [October 15, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-plugin-reconnect-interval-issue/251788 "2020-10-15T13:18:46Z")

</div>

Hi, I'm having a problem with the logstash tcp output plugin, the reconnect\_interval does not seem to have an affect on the plugin's actual reconnect attempts? I may be misunderstanding what the field is used for exactl…

---

## [Default Shard Allocation Status](https://discuss.elastic.co/t/default-shard-allocation-status/252201)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 1:14pm UTC](https://discuss.elastic.co/t/default-shard-allocation-status/252201 "2020-10-15T13:14:48Z")

</div>

Hi, I'm looking to track cluster.routing.allocation.enable. The obvious way is via cluster settings. However, that is not always explicitly set. What can I query to always return a value for this setting? Thx D

---

## [Logstash not starting after enabling xpac security](https://discuss.elastic.co/t/logstash-not-starting-after-enabling-xpac-security/252183)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 12:43pm UTC](https://discuss.elastic.co/t/logstash-not-starting-after-enabling-xpac-security/252183 "2020-10-15T12:43:30Z")

</div>

Hello Team, We are using ELK with 3 node cluster. Earlier we were using elasticsearch6.4 but now we upgraded to version6.8, because we want to use role base access feature. We upgraded successfully our Elasticsaerch n…

---

## [Mysql data fetching in ELK](https://discuss.elastic.co/t/mysql-data-fetching-in-elk/252192)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 1\
**Last updated:** [October 15, 2020, 12:41pm UTC](https://discuss.elastic.co/t/mysql-data-fetching-in-elk/252192 "2020-10-15T12:41:42Z")

</div>

Hello Folks, we got a database with data that are refreshing every hour. We'd like to fetch this data as it is to the elk (ofcourse with some filtering etc.) Can you suggest what is the best architecture and way to do t…

---

## [Error Messages in Logstash Logfile io.netty.channel](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/252189)

<div class="topic-metadata">

**Author:** [@bateskevin](https://discuss.elastic.co/u/bateskevin)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 12:20pm UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/252189 "2020-10-15T12:20:17Z")

</div>

This issue was closed without answers... That's why I am reopening this here again. Here is the old issue: https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660 Hi, I am recieving the…

---

## [Cannot connect metricbeat with an SSL secured Kafka](https://discuss.elastic.co/t/cannot-connect-metricbeat-with-an-ssl-secured-kafka/252060)

<div class="topic-metadata">

**Author:** [@JadeJaber](https://discuss.elastic.co/u/JadeJaber)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 11:48am UTC](https://discuss.elastic.co/t/cannot-connect-metricbeat-with-an-ssl-secured-kafka/252060 "2020-10-15T11:48:25Z")

</div>

Hi, I have set the following configuration on my Kafka Module - module: kafka metricsets: - partition - consumergroup period: 10s hosts: \["centralfeederkafka01.datalakefeeder###.com:9093"\] ssl.enabled: …

---

## [Filebeat opening two harvesters for the same file](https://discuss.elastic.co/t/filebeat-opening-two-harvesters-for-the-same-file/252187)

<div class="topic-metadata">

**Author:** [@jbury](https://discuss.elastic.co/u/jbury)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 11:46am UTC](https://discuss.elastic.co/t/filebeat-opening-two-harvesters-for-the-same-file/252187 "2020-10-15T11:46:11Z")

</div>

Issue: We're seeing occasional data loss in kibana. We'll get several lines from a given log file that filebeat grabs and successfully sends to elasticsearch, and then suddenly (and before we are finished processing th…

---

## [Unable to update UI setting Request failed with status code: 403](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-403/201409)

<div class="topic-metadata">

**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\
**Replies:** 3\
**Last updated:** [October 14, 2019, 9:54am UTC](https://discuss.elastic.co/t/unable-to-update-ui-setting-request-failed-with-status-code-403/201409 "2019-10-14T09:54:01Z")

</div>

Hi guys, I am not sure what I am doing wrong here. I am automatically updating user security roles also for the spaces through the kibana API. And when I login from one of those roles, I keep getting this error. Unable…

---

## [Setting an ingest pipeline in Machine learning](https://discuss.elastic.co/t/setting-an-ingest-pipeline-in-machine-learning/252029)

<div class="topic-metadata">

**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\
**Replies:** 7\
**Last updated:** [October 15, 2020, 10:44am UTC](https://discuss.elastic.co/t/setting-an-ingest-pipeline-in-machine-learning/252029 "2020-10-15T10:44:35Z")

</div>

Hi all, Hoping this is an easy question! I have created an enrichment policy that adds an additional field to documents based on whether the geo-point within the document is within a geo-shape from the source index. T…

---

## [Call to route in Kibana plugin and then to external REST API](https://discuss.elastic.co/t/call-to-route-in-kibana-plugin-and-then-to-external-rest-api/252087)

<div class="topic-metadata">

**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\
**Replies:** 6\
**Last updated:** [October 15, 2020, 10:42am UTC](https://discuss.elastic.co/t/call-to-route-in-kibana-plugin-and-then-to-external-rest-api/252087 "2020-10-15T10:42:35Z")

</div>

I am creating a visualization plugin for extracting all filters that is applied to the current dashboard and submit it to an external rest API. It is working effortlessly in my local development environment (ES & Kibana …

---

## [Logstash conf file issues (using docker container)](https://discuss.elastic.co/t/logstash-conf-file-issues-using-docker-container/252083)

<div class="topic-metadata">

**Author:** [@saj](https://discuss.elastic.co/u/saj)\
**Replies:** 8\
**Last updated:** [October 15, 2020, 10:36am UTC](https://discuss.elastic.co/t/logstash-conf-file-issues-using-docker-container/252083 "2020-10-15T10:36:07Z")

</div>

Hi, I am new to elk stuff, I am running 3 separate docker containers (i.e. elasticsearch, kibana, and logstash). I need to specify my logstash.conf but its not working out using following docker logstash command ( I am…

---

## [How to create a logtash conf file for import json file to elasticseaarch using logstash](https://discuss.elastic.co/t/how-to-create-a-logtash-conf-file-for-import-json-file-to-elasticseaarch-using-logstash/252168)

<div class="topic-metadata">

**Author:** [@Manuang](https://discuss.elastic.co/u/Manuang)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-to-create-a-logtash-conf-file-for-import-json-file-to-elasticseaarch-using-logstash/252168 "2020-10-15T10:20:24Z")

</div>

I am new to logstash and elastic search. i want to import a json file to elastic search using logstash in my windows 10 system. how to create a logtash conf file for the below json. suggest me a sample config file. json…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1747)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1749)
