# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1781 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1782 --- ## [Exception in thread "main" java.nio.file.AccessDeniedException](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849)
**Author:** [@Elastic-Noob](https://discuss.elastic.co/u/Elastic-Noob)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 2:02pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849 "2020-09-28T14:02:36Z")
I'm getting the following error when running elasticsearch.bat C:\\Program Files\\Elastic\\Elasticsearch\\7.7.0\\bin\> .\\elasticsearch.bat Exception in thread "main" java.nio.file.AccessDeniedException: C:\\ProgramData\\Elasti… --- ## [Packet beat not loading dashboard](https://discuss.elastic.co/t/packet-beat-not-loading-dashboard/250046)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 5:12pm UTC](https://discuss.elastic.co/t/packet-beat-not-loading-dashboard/250046 "2020-09-28T17:12:24Z")
Hello, Can you help me here as I'm not able to load packet beat dashboard as below. any suggestions --- ## [Converting more than one column destroys data](https://discuss.elastic.co/t/converting-more-than-one-column-destroys-data/250161)
**Author:** [@Christoph1](https://discuss.elastic.co/u/Christoph1)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 4:26pm UTC](https://discuss.elastic.co/t/converting-more-than-one-column-destroys-data/250161 "2020-09-28T16:26:11Z")
converting more than one column from string \> integer completely invalidates the logstash output. The values are interpreted as keys somehow What am I missing when converting? regardless of: CSV { convert =\> {}} mut… --- ## [Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/cant-get-text-on-a-start-object/250010)
**Author:** [@jhansibalu](https://discuss.elastic.co/u/jhansibalu)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 4:02pm UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object/250010 "2020-09-28T16:02:23Z")
Hi I am sending logs to kibana using filebeat ,and I am facing below error while sending logs .Some of the events doesn't have host in raw data facinf error for that events. \[2020-09-24T09:20:40,591\]\[WARN \]\[logstash.out… --- ## [Current recommendations for large heaps (64GB+)](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827)
**Author:** [@lechuck](https://discuss.elastic.co/u/lechuck)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 3:55pm UTC](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827 "2020-09-28T15:55:55Z")
Hey folks, I'd like to get an opinion on current recommendations for running Elasticsearch with large heaps (64-128GB) please. I understand ~30GB is generally recommended for most installs in order to benefit from com… --- ## [Using Java\_line codec on Kafka input](https://discuss.elastic.co/t/using-java-line-codec-on-kafka-input/250224)
**Author:** [@kbrisso](https://discuss.elastic.co/u/kbrisso)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 3:39pm UTC](https://discuss.elastic.co/t/using-java-line-codec-on-kafka-input/250224 "2020-09-28T15:39:03Z")
Hello- Would this be a valid way to configure the java\_line codec for the Kafka input? I need to parse events with a custom line terminator like below. Currently I have \\n in my debug statements and \\n for line terminat… --- ## [Logstash JVM Settings](https://discuss.elastic.co/t/logstash-jvm-settings/250219)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 3:37pm UTC](https://discuss.elastic.co/t/logstash-jvm-settings/250219 "2020-09-28T15:37:15Z")
Hi, When running larger heap sizes (6-8GB+) would logstash benefit from using G1 garbage collection? Thx D --- ## [Terms list may be incomplete becasue the request is taking to long 7.8.0 autocompleteTerminate after not working](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201)
**Author:** [@madison](https://discuss.elastic.co/u/madison)\ **Replies:** 5\ **Last updated:** [September 28, 2020, 3:32pm UTC](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201 "2020-09-28T15:32:53Z")
We upgraded from 7.6.2 to 7.8.0 recently. The number of documents/shards have not change, but the controls visualization is now showing the error saying "Terms list may be incomplete because the request is taking too lon… --- ## [RuntimeError: attempted adding second root element to document](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146)
**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 3:12pm UTC](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146 "2020-09-28T15:12:52Z")
Hi, I am facing below error while Logstash is parsing my xml file which was extracted for the given pattern. DUe to this error , I am not able to create visualisation as well as the required fields in Visualisation is n… --- ## [Matching with analyzer](https://discuss.elastic.co/t/matching-with-analyzer/250214)
**Author:** [@st1nc1ty](https://discuss.elastic.co/u/st1nc1ty)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 3:00pm UTC](https://discuss.elastic.co/t/matching-with-analyzer/250214 "2020-09-28T15:00:52Z")
I've got a fairly simple index that has a first and last name that are both have an ngram analyzer attached. It's working well as I can search "ali" and get "alice" among others. I probably already know the answer but … --- ## [I want to change the Kibana logo and customized the page](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 2:35pm UTC](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322 "2020-09-28T14:35:35Z")
Login logo (welcome screen) Change login in Select Space Change login in Header Change loading screen Change favicon --- ## [Kibana API Map creation](https://discuss.elastic.co/t/kibana-api-map-creation/250029)
**Author:** [@Eugene\_Dobrovolskyi](https://discuss.elastic.co/u/Eugene_Dobrovolskyi)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 2:33pm UTC](https://discuss.elastic.co/t/kibana-api-map-creation/250029 "2020-09-28T14:33:47Z")
Hi all! I would like to create a map in Kibana via REST API. I must provide JSON body in POST request to do it, but it includes some unclear fields and there are no corresponding explanations in Kibana documentation. … --- ## [Kibana is not getting any logs](https://discuss.elastic.co/t/kibana-is-not-getting-any-logs/249803)
**Author:** [@Lusca\_lusca](https://discuss.elastic.co/u/Lusca_lusca)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 2:24pm UTC](https://discuss.elastic.co/t/kibana-is-not-getting-any-logs/249803 "2020-09-28T14:24:41Z")
I am knew in ELK and I have not beeing able to see any logs in kibana. I need to get logs from PFSENSE firewall. I am getting the following error that might be the issue. nettec@Ubuntu-ELK:~$ sudo filebeat -e -d "\*"? 2… --- ## [How to set a time range in an Alert?](https://discuss.elastic.co/t/how-to-set-a-time-range-in-an-alert/248743)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 3\ **Last updated:** [September 28, 2020, 2:22pm UTC](https://discuss.elastic.co/t/how-to-set-a-time-range-in-an-alert/248743 "2020-09-28T14:22:37Z")
Hi. How can I specify a time range in a metric alert? I want to trigger the alarm only if @timestamp is between an interval. --- ## [Kibana - Gauge - fetch data based on threshold](https://discuss.elastic.co/t/kibana-gauge-fetch-data-based-on-threshold/250206)
**Author:** [@prashu421](https://discuss.elastic.co/u/prashu421)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 2:11pm UTC](https://discuss.elastic.co/t/kibana-gauge-fetch-data-based-on-threshold/250206 "2020-09-28T14:11:40Z")
Hello, I am working with AWS Elasticsearch and have recently started looking into the Kibana Visualizations, I came across a blocker that I am not able to figure how to fix. I have data coming in from certain pipelines… --- ## [Keep or restore message](https://discuss.elastic.co/t/keep-or-restore-message/250203)
**Author:** [@szandala](https://discuss.elastic.co/u/szandala)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 2:06pm UTC](https://discuss.elastic.co/t/keep-or-restore-message/250203 "2020-09-28T14:06:30Z")
Greetings, I have in filebeat.yml filebeat.modules: - module: nginx access: var.paths: \["/var/log/nginx/access.log"\] error: var.paths: \["/var/log/nginx/error.log"\] - module: system syslog: var.paths: … --- ## [Testing Kibana Alerting slack connector](https://discuss.elastic.co/t/testing-kibana-alerting-slack-connector/249521)
**Author:** [@stevewritescode](https://discuss.elastic.co/u/stevewritescode)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 1:53pm UTC](https://discuss.elastic.co/t/testing-kibana-alerting-slack-connector/249521 "2020-09-28T13:53:42Z")
Hi! I setup a slack connector to use as the action for several alerts that I created in Kibana. It was working well for a while, but suddenly stopped sending alert notifications to slack recently. I double-checked with c… --- ## [Is my scenario a good candidate to use ElasticSearch?](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034)
**Author:** [@coderberry](https://discuss.elastic.co/u/coderberry)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 1:43pm UTC](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034 "2020-09-28T13:43:26Z")
I work for a real estate company that pulls MLS data from over 500 different sources. We are currently storing the listing property data as a flat jsonb document within Postgres. For example, one MLS might have the follo… --- ## [Grok Debugger not shown in Dev Tools](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 1:36pm UTC](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853 "2020-09-28T13:36:08Z")
We are using Kibana 7.6.2. X-Pack Security is enabled, confirmed by making a request to GET \_xpack?pretty. Currently logged into Kibana with the elastic user. However, I don't see the Grok Debugger in Dev Tools. What am… --- ## [How to restore an index](https://discuss.elastic.co/t/how-to-restore-an-index/250173)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/how-to-restore-an-index/250173 "2020-09-28T13:13:48Z")
We have accidentally deleted an index through Cerebro. But we have backup of that deleted index folder from server backup. Could you please let me know how to restore that deleted index from that server backup? --- ## [Kibana Alert to ServiceNow](https://discuss.elastic.co/t/kibana-alert-to-servicenow/250035)
**Author:** [@ndefreitas](https://discuss.elastic.co/u/ndefreitas)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 1:12pm UTC](https://discuss.elastic.co/t/kibana-alert-to-servicenow/250035 "2020-09-28T13:12:43Z")
Hello everyone. I have configured an instance of kibana with metrics, and later some alerts that work with servicenow for some business tests, everything works perfectly, the question is the following there is a way to … --- ## [Packetbeat - Bug parsing http method](https://discuss.elastic.co/t/packetbeat-bug-parsing-http-method/250095)
**Author:** [@ebanashka](https://discuss.elastic.co/u/ebanashka)\ **Replies:** 0\ **Last updated:** [September 27, 2020, 4:29pm UTC](https://discuss.elastic.co/t/packetbeat-bug-parsing-http-method/250095 "2020-09-27T16:29:46Z")
Hi, I've stumbled upon a weird bug with http protocol method parsing. Upon feeding the following PCAP file https://drive.google.com/file/d/11DN4ZXbWE-W83VdwSRfJA04jBbOLMzs3/view?usp=sharing to the latest packetbeat one … --- ## [Filebeat aws readStringAndTrimDelimiter failed: context deadline exceeded in logs](https://discuss.elastic.co/t/filebeat-aws-readstringandtrimdelimiter-failed-context-deadline-exceeded-in-logs/249787)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 12:54pm UTC](https://discuss.elastic.co/t/filebeat-aws-readstringandtrimdelimiter-failed-context-deadline-exceeded-in-logs/249787 "2020-09-28T12:54:29Z")
Hi, I'm running filebeat 7.9.0, sending logs to logstash 7.9.0 before they are handed over to ES 7.9.0. For filbeat, I have the AWS module configured to retrieve elblogs. It took me a while to get it setup properly, i.… --- ## [Does Text Analysis increaase CPU utilization](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078)
**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\ **Replies:** 5\ **Last updated:** [September 28, 2020, 12:43pm UTC](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078 "2020-09-28T12:43:54Z")
Hi, I want to add some analyzer to tokenize text fields in some specific way, will it have impact to ES cluster resourses utilization (CPU, ... )? If yes, how significant? thanks --- ## [Convert Date String Into Date Format](https://discuss.elastic.co/t/convert-date-string-into-date-format/250153)
**Author:** [@wahzix](https://discuss.elastic.co/u/wahzix)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/250153 "2020-09-28T12:40:59Z")
Hi, I want to convert a date which is like this : 2020-09-18 15:42:41.5721 To do so, I have tried to use date plugin but it seems that it doesn't work. I have this \_dateparsefailure and my @timestamp hasn't changed … --- ## [ELK Setup in AWS EKS](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183 "2020-09-28T12:30:12Z")
Hi, We are planning to go for on premise ELK setup on AWS ELK (Kubernetes) for Infra/APM/Log Monitoring. I would like to know which EC2 slave machines are best suited for this. And which storage type is suited for this… --- ## [Indexing to Multiple Endpoints](https://discuss.elastic.co/t/indexing-to-multiple-endpoints/250166)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 12:28pm UTC](https://discuss.elastic.co/t/indexing-to-multiple-endpoints/250166 "2020-09-28T12:28:33Z")
Hi, In a single pipeline scenario, how much of a performance cost is there to having more than one output configured? Will all outputs run at the speed of the slowest? Thx D --- ## [Manage different type of logs with logstash](https://discuss.elastic.co/t/manage-different-type-of-logs-with-logstash/249964)
**Author:** [@Luca\_Padovan](https://discuss.elastic.co/u/Luca_Padovan)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 12:05pm UTC](https://discuss.elastic.co/t/manage-different-type-of-logs-with-logstash/249964 "2020-09-28T12:05:58Z")
I'm trying to managing different type of logs with logstash, but i don't see them in kibana. logstash pipeline: input { udp { port =\> 5000 type =\> "heartbeat" } udp { port =\> 6000 type =\> "startup\_shutdown" … --- ## [Extend Kafka Metricbeat module to add mbean missing](https://discuss.elastic.co/t/extend-kafka-metricbeat-module-to-add-mbean-missing/249779)
**Author:** [@stevizik](https://discuss.elastic.co/u/stevizik)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 11:56am UTC](https://discuss.elastic.co/t/extend-kafka-metricbeat-module-to-add-mbean-missing/249779 "2020-09-28T11:56:08Z")
Hi community, i am using Kafka metricbeat module to get metrics from a Kafka cluster. Furthermore i have enabled Jolokia (JMX - HTTP Connector) to fetch metrics also from broker, consumer and producer. The solution wor… --- ## [Watcher last\_checked](https://discuss.elastic.co/t/watcher-last-checked/250138)
**Author:** [@JHM](https://discuss.elastic.co/u/JHM)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 11:48am UTC](https://discuss.elastic.co/t/watcher-last-checked/250138 "2020-09-28T11:48:40Z")
I have following code for the range of my watcher. However, I instead of the now I would like to use the last\_checked value that you get when the watcher is executed. Is there any possibility to do that? … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1780) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1782)