# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1806 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1807 --- ## [Hardcoded bouncycastle versions in plugin-cli](https://discuss.elastic.co/t/hardcoded-bouncycastle-versions-in-plugin-cli/248641)
**Author:** [@josephine-rueckert](https://discuss.elastic.co/u/josephine-rueckert)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 9:24am UTC](https://discuss.elastic.co/t/hardcoded-bouncycastle-versions-in-plugin-cli/248641 "2020-09-15T09:24:04Z")
Hi elastic team! In https://github.com/elastic/elasticsearch/issues/55145 @ikakavas mentioned you're using bouncycastle version 1.64. This matches what I've found in https://github.com/elastic/elasticsearch/blob/v7.7.0/… --- ## [Fetching data from multiValued column](https://discuss.elastic.co/t/fetching-data-from-multivalued-column/248637)
**Author:** [@ThinkToday](https://discuss.elastic.co/u/ThinkToday)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 9:18am UTC](https://discuss.elastic.co/t/fetching-data-from-multivalued-column/248637 "2020-09-15T09:18:56Z")
Hiii, I have an Index with ActionId , profileID and profileStatus fields and other action details... an single action can be mapped to multiple profileID and status. In relational database we can map this as foreign key… --- ## [Index rating is increasing but document count is constant](https://discuss.elastic.co/t/index-rating-is-increasing-but-document-count-is-constant/248628)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 9:04am UTC](https://discuss.elastic.co/t/index-rating-is-increasing-but-document-count-is-constant/248628 "2020-09-15T09:04:06Z")
Hi guys, Index rating is increasing but document count is constant like this for days. What is the reason? --- ## [Make Inside libbeat fails](https://discuss.elastic.co/t/make-inside-libbeat-fails/248602)
**Author:** [@Ali\_Tahir](https://discuss.elastic.co/u/Ali_Tahir)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 8:42am UTC](https://discuss.elastic.co/t/make-inside-libbeat-fails/248602 "2020-09-15T08:42:17Z")
I get the following error on running make inside libbeat go build -ldflags "-X github.com/elastic/beats/libbeat/version.buildTime=2020-09-15T05:09:36Z -X github.com/elastic/beats/libbeat/version.commit=3435fe9f46e53708d… --- ## [Billing metricset in azure module not working](https://discuss.elastic.co/t/billing-metricset-in-azure-module-not-working/245569)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 8:21am UTC](https://discuss.elastic.co/t/billing-metricset-in-azure-module-not-working/245569 "2020-09-15T08:21:33Z")
Hello guys, I hope you are doing well ! I have ELK stack (7.8.1) deployed in kubernetes along with metricbeat (same version). I wanted to exploit the new metricset "billing" in azure module, however it didn't work. -… --- ## [How to configure rate-limits?](https://discuss.elastic.co/t/how-to-configure-rate-limits/248613)
**Author:** [@Dmitriy\_Khodakovskyi](https://discuss.elastic.co/u/Dmitriy_Khodakovskyi)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 8:18am UTC](https://discuss.elastic.co/t/how-to-configure-rate-limits/248613 "2020-09-15T08:18:04Z")
As I see , elasticsearch has support of rate limiting: Is it available only for elastic cloud ? or it can be configured for self-hosted elastic? (and how?) Thanks in advance --- ## [Problem with json bulk import to elasticsearch ( jq: error: orders/0 is not defined at \, line 1: )](https://discuss.elastic.co/t/problem-with-json-bulk-import-to-elasticsearch-jq-error-orders-0-is-not-defined-at-top-level-line-1/248625)
**Author:** [@Bahar\_Yilmaz](https://discuss.elastic.co/u/Bahar_Yilmaz)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 8:00am UTC](https://discuss.elastic.co/t/problem-with-json-bulk-import-to-elasticsearch-jq-error-orders-0-is-not-defined-at-top-level-line-1/248625 "2020-09-15T08:00:58Z")
Hi, I have problem with json bulk importing to elasticsearch. I want to send json data to elasticsearch as bulk request. My json data looks like this And this is the command I'm trying to make a bulk request by conv… --- ## [Updating the Cloudflare - Elastic.co logpush integration](https://discuss.elastic.co/t/updating-the-cloudflare-elastic-co-logpush-integration/248618)
**Author:** [@Lukasdeboer](https://discuss.elastic.co/u/Lukasdeboer)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 7:37am UTC](https://discuss.elastic.co/t/updating-the-cloudflare-elastic-co-logpush-integration/248618 "2020-09-15T07:37:43Z")
Hi! I have followed this documentation (https://developers.cloudflare.com/logs/analytics-integrations/elastic) to set up logpush from Cloudflare to an Elastic.co cluster. This uses https://github.com/cloudflare/cloudfla… --- ## [Finding which indices contain hits when making use of an alias in elasticsearch query](https://discuss.elastic.co/t/finding-which-indices-contain-hits-when-making-use-of-an-alias-in-elasticsearch-query/248465)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 10\ **Last updated:** [September 15, 2020, 7:27am UTC](https://discuss.elastic.co/t/finding-which-indices-contain-hits-when-making-use-of-an-alias-in-elasticsearch-query/248465 "2020-09-15T07:27:49Z")
I've 1000s of day-wise (time-based) indices in my cluster. Is there a way to monitor or find out at the ES Server side which indices return data when a query makes use of an alias . E.g. consider the below query that my … --- ## [Searching on text fields using wildcard](https://discuss.elastic.co/t/searching-on-text-fields-using-wildcard/248270)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 7:22am UTC](https://discuss.elastic.co/t/searching-on-text-fields-using-wildcard/248270 "2020-09-15T07:22:12Z")
Hello, I have simple question about searching on text field. Let's assume we have a text field message with value: This is example of search query. Can anyone help me? PUT index { "mappings": { "properties": { … --- ## [Struggling to parse XML using Logstash](https://discuss.elastic.co/t/struggling-to-parse-xml-using-logstash/248616)
**Author:** [@Igor\_Olikh](https://discuss.elastic.co/u/Igor_Olikh)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 7:19am UTC](https://discuss.elastic.co/t/struggling-to-parse-xml-using-logstash/248616 "2020-09-15T07:19:17Z")
I have a lot of logs each one stored in the following xml file: What I want to achieve: create fields in elasticsearch that stores the following: MainActivityText = "TEST" My config file: input { file { … --- ## [Cannot output to redis](https://discuss.elastic.co/t/cannot-output-to-redis/248446)
**Author:** [@vincentchao](https://discuss.elastic.co/u/vincentchao)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 7:14am UTC](https://discuss.elastic.co/t/cannot-output-to-redis/248446 "2020-09-15T07:14:45Z")
my config.yml is like this: filebeat.inputs: - type: log enabled: true paths: - 'D:\\1021\\\*.log' #scan\_frequency: '60s' #multiline.pattern: '^\\\[\\d{4}\\-\\d{2}' #multiline.negat… --- ## [AWS MYSQL data push to elastic search via logstash and visualise through Kibana](https://discuss.elastic.co/t/aws-mysql-data-push-to-elastic-search-via-logstash-and-visualise-through-kibana/248609)
**Author:** [@justnj](https://discuss.elastic.co/u/justnj)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 6:56am UTC](https://discuss.elastic.co/t/aws-mysql-data-push-to-elastic-search-via-logstash-and-visualise-through-kibana/248609 "2020-09-15T06:56:57Z")
I am looking for a clear step by step document on AWS to migrate data from existing MYSQL to elastic search using logstash and visulaizing the same on kibana --- ## [Collect directories & sub-directories/files data usage metrics](https://discuss.elastic.co/t/collect-directories-sub-directories-files-data-usage-metrics/248558)
**Author:** [@asmi10](https://discuss.elastic.co/u/asmi10)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 6:56am UTC](https://discuss.elastic.co/t/collect-directories-sub-directories-files-data-usage-metrics/248558 "2020-09-15T06:56:11Z")
Hello! I have a kubernetes cluster where I am using local path provisioner for creating storage for multiple projects. Basically this provisioner creates subdirecties under already existing root directory on worker nod… --- ## [Count unique values inside primitive array](https://discuss.elastic.co/t/count-unique-values-inside-primitive-array/248550)
**Author:** [@UglyBarnacle](https://discuss.elastic.co/u/UglyBarnacle)\ **Replies:** 0\ **Last updated:** [September 14, 2020, 3:13pm UTC](https://discuss.elastic.co/t/count-unique-values-inside-primitive-array/248550 "2020-09-14T15:13:17Z")
Just wanted to know if there is an elegant solution for my problem: We sort of have an index that stores orders and on those orders is an array of zipcodes which the customer selected. { "identifier": "1574417821835",… --- ## [Error fetching data for metricset kubernetes.node, DNS lookup failed on AKS](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kubernetes-node-dns-lookup-failed-on-aks/248543)
**Author:** [@Franck3](https://discuss.elastic.co/u/Franck3)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 6:51am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kubernetes-node-dns-lookup-failed-on-aks/248543 "2020-09-15T06:51:30Z")
The metricbeat pod are not able to get metrics from the /stats/summary endpoints on the nodes. Running on AKS version 1.16.10. 2020-09-14T13:35:54.081Z WARN \[transport\] transport/tcp.go:52 DNS lookup failure "aks-agen… --- ## [Elasticsearch: setting up cluster with two nodes](https://discuss.elastic.co/t/elasticsearch-setting-up-cluster-with-two-nodes/247994)
**Author:** [@Techmod](https://discuss.elastic.co/u/Techmod)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 5:28am UTC](https://discuss.elastic.co/t/elasticsearch-setting-up-cluster-with-two-nodes/247994 "2020-09-15T05:28:54Z")
I've set two master nodes in my cluster but it only shows "elastic-master" not "elastic-slave".(second node is not shown).How can I resolve it? I've already followed Elasticsearch documents but nothing changed! #my host… --- ## [Dynamic mapping](https://discuss.elastic.co/t/dynamic-mapping/248598)
**Author:** [@Milan\_Suthar](https://discuss.elastic.co/u/Milan_Suthar)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 5:58am UTC](https://discuss.elastic.co/t/dynamic-mapping/248598 "2020-09-15T05:58:07Z")
ES version 6.8.12 i want to make my index filed store anything regardless of its type im facing issue while storing string value in long type field can anyone help me --- ## [Config file load error on elastic stack](https://discuss.elastic.co/t/config-file-load-error-on-elastic-stack/248540)
**Author:** [@saiswaroop1989](https://discuss.elastic.co/u/saiswaroop1989)\ **Replies:** 0\ **Last updated:** [September 14, 2020, 2:01pm UTC](https://discuss.elastic.co/t/config-file-load-error-on-elastic-stack/248540 "2020-09-14T14:01:58Z")
Hello, Can some one help with the below error \[2020-09-14T19:28:25,643\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or command line options are specified \[2020-09-14T19:… --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/247637)
**Author:** [@Sajeeva\_Lakmal](https://discuss.elastic.co/u/Sajeeva_Lakmal)\ **Replies:** 11\ **Last updated:** [September 15, 2020, 3:58am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/247637 "2020-09-15T03:58:00Z")
We recently upgraded our elastic cloud deployment from 6.8.5 to 7.9 After the upgrade we are seeing the following error time to time. { "error" : { "root\_cause" : \[ { "type" : "circuit\_breaking\_exce… --- ## [Winlogbeat doesn't create custom index-patterns but Elasticsearch does create custom index names, so everything is broken](https://discuss.elastic.co/t/winlogbeat-doesnt-create-custom-index-patterns-but-elasticsearch-does-create-custom-index-names-so-everything-is-broken/248555)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 2:50am UTC](https://discuss.elastic.co/t/winlogbeat-doesnt-create-custom-index-patterns-but-elasticsearch-does-create-custom-index-names-so-everything-is-broken/248555 "2020-09-15T02:50:43Z")
Let’s say I want to have winlogbeat and metricbeat in windows machines for two areas of my company… so I created two spaces in Kibana: “foo” and “bar”. I want to have different indices for each space.. so, instead of wi… --- ## [High RAM Usage Across Cluster](https://discuss.elastic.co/t/high-ram-usage-across-cluster/248582)
**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\ **Replies:** 7\ **Last updated:** [September 15, 2020, 1:44am UTC](https://discuss.elastic.co/t/high-ram-usage-across-cluster/248582 "2020-09-15T01:44:00Z")
Hello again, we are continuing to test out our new elasticsearch cluster. I'm trying to understand the following: Why is ram usage always so high? (it doesn't ever decrease, even when nobody is searching or indexing). … --- ## [Values that have the same meaning](https://discuss.elastic.co/t/values-that-have-the-same-meaning/248389)
**Author:** [@abregman](https://discuss.elastic.co/u/abregman)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 12:59am UTC](https://discuss.elastic.co/t/values-that-have-the-same-meaning/248389 "2020-09-15T00:59:22Z")
I have a field called "DVR" which has one of the following values: "False", "No", "True", "Yes". Since "False" and "No" are the same (as in having the same meaning) and same goes for "True" and "Yes", Is there a way to … --- ## [Custom field format doesn't get applied, some field types get changed](https://discuss.elastic.co/t/custom-field-format-doesnt-get-applied-some-field-types-get-changed/248396)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 12:51am UTC](https://discuss.elastic.co/t/custom-field-format-doesnt-get-applied-some-field-types-get-changed/248396 "2020-09-15T00:51:04Z")
I am editing the mybeat/\_meta/fields.yml file to include a section like: fields: - name: resulturl type: text format: url required: true description: \> PLEASE UPDATE DOCUMENTATION … --- ## [Different user will view a dashboard that contain their own information](https://discuss.elastic.co/t/different-user-will-view-a-dashboard-that-contain-their-own-information/248587)
**Author:** [@atiqah\_yusri](https://discuss.elastic.co/u/atiqah_yusri)\ **Replies:** 1\ **Last updated:** [September 14, 2020, 10:46pm UTC](https://discuss.elastic.co/t/different-user-will-view-a-dashboard-that-contain-their-own-information/248587 "2020-09-14T22:46:56Z")
Hi, I would like to ask about how different user can view a dashboard that only contains their own information? for example, when students log in to the kibana, they only can view a dashboard that has their own result, t… --- ## [Separate data and metadata](https://discuss.elastic.co/t/separate-data-and-metadata/248531)
**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\ **Replies:** 3\ **Last updated:** [September 14, 2020, 10:17pm UTC](https://discuss.elastic.co/t/separate-data-and-metadata/248531 "2020-09-14T22:17:02Z")
Hello. In Hadoop echo system and some other solution: data and metadata are stored separately. For Hadoop, there are master nodes to store metadata. Question: does Elasticsearch have similar architecture? I mean is th… --- ## [Unable to create architecture to get system logs from another server using metricbeat](https://discuss.elastic.co/t/unable-to-create-architecture-to-get-system-logs-from-another-server-using-metricbeat/248470)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 1\ **Last updated:** [September 14, 2020, 10:12pm UTC](https://discuss.elastic.co/t/unable-to-create-architecture-to-get-system-logs-from-another-server-using-metricbeat/248470 "2020-09-14T22:12:46Z")
I am completely new to ELK stack concept. i want to capture the system metric of my organizations servers which is of AWS using metricbeat and want to receive those logs on one central server where i have installed elast… --- ## [How to use manage\_own\_api\_key privilege in elk](https://discuss.elastic.co/t/how-to-use-manage-own-api-key-privilege-in-elk/248573)
**Author:** [@Ananya\_Chaurasia](https://discuss.elastic.co/u/Ananya_Chaurasia)\ **Replies:** 0\ **Last updated:** [September 14, 2020, 6:26pm UTC](https://discuss.elastic.co/t/how-to-use-manage-own-api-key-privilege-in-elk/248573 "2020-09-14T18:26:37Z")
Is it possible to have a user which has just read only privilege to Kibana dashboard and can also create its api key? Giving read only privilege to user does not allow user to create api key from kibana console. I read h… --- ## [Search distribution imbalance: Adaptive Replica Selection](https://discuss.elastic.co/t/search-distribution-imbalance-adaptive-replica-selection/247276)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 7\ **Last updated:** [September 14, 2020, 9:38pm UTC](https://discuss.elastic.co/t/search-distribution-imbalance-adaptive-replica-selection/247276 "2020-09-14T21:38:02Z")
We had a node out of a 7.6 cluster for a day and after starting ES on it and having shards allocated to it the node and cluster started acting badly. The node's CPU rose to roughly twice as much as the rest of the clust… --- ## [System Metric showing failed in Kibana dashboard when we changing time period](https://discuss.elastic.co/t/system-metric-showing-failed-in-kibana-dashboard-when-we-changing-time-period/247998)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 7\ **Last updated:** [September 14, 2020, 9:20pm UTC](https://discuss.elastic.co/t/system-metric-showing-failed-in-kibana-dashboard-when-we-changing-time-period/247998 "2020-09-14T21:20:21Z")
Hi Team, Can someone please help with this issue as sometime Kibana failed to show system metric in Dashboard when I'm changing the time period sometimes show data but again changing time period will fail. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1805) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1807)