# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1810 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1811 --- ## [java.lang.IllegalArgumentException: unknown setting \[path.conf\] please check that any required plugins are installed, or check the breaking changes documentation for removed settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 2\ **Last updated:** [September 13, 2020, 2:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438 "2020-09-13T14:53:49Z")
Hi All, Greeting !! I am creating the new setup of ELK, and now i am unable to start ES service. Logs are below for reference. ES Version: 7.9 elasticsearch.yml config:- cluster.name: BPOConnectElasticSearch 2 node… --- ## [Empty report for predefined date filters like yesterday](https://discuss.elastic.co/t/empty-report-for-predefined-date-filters-like-yesterday/247842)
**Author:** [@aelrwiny](https://discuss.elastic.co/u/aelrwiny)\ **Replies:** 2\ **Last updated:** [September 13, 2020, 12:36pm UTC](https://discuss.elastic.co/t/empty-report-for-predefined-date-filters-like-yesterday/247842 "2020-09-13T12:36:08Z")
I defined yesterday date filter like { "from": "now-1d/d", "to": "now-1d/d", "display": "Yesterday" } when applying this date filter for dashboard it is showing the data correctly but when downloading csv report from … --- ## [Metatrader: How Parse Such Logs?](https://discuss.elastic.co/t/metatrader-how-parse-such-logs/248406)
**Author:** [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)\ **Replies:** 2\ **Last updated:** [September 13, 2020, 11:56am UTC](https://discuss.elastic.co/t/metatrader-how-parse-such-logs/248406 "2020-09-13T11:56:31Z")
Hi, 0 23:35:01.102 Monitor connections: 354 free memory: 3124552 kb cpu: 3% net: 0 Kbyte/s sockets: 513 threads: 71 handles: 1423 0 23:35:01.102 Monitor max. memory block: 2064156 kb process cpu: 0% net in: 0 Kbyte/… --- ## [Lucene query on nested type](https://discuss.elastic.co/t/lucene-query-on-nested-type/248434)
**Author:** [@Yuval99](https://discuss.elastic.co/u/Yuval99)\ **Replies:** 1\ **Last updated:** [September 13, 2020, 10:43am UTC](https://discuss.elastic.co/t/lucene-query-on-nested-type/248434 "2020-09-13T10:43:48Z")
Hi guys! We are trying to make a search based on lucene syntax on object with nested type fields. We looked on DSL but it's not fitted to our requirements. Our data looks like: { scans: \[ { ip: "1.2.3.4", is\_malware:… --- ## [Unable to execute POST request to Kibana](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992)
**Author:** [@peternijem](https://discuss.elastic.co/u/peternijem)\ **Replies:** 29\ **Last updated:** [September 13, 2020, 7:29am UTC](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992 "2020-09-13T07:29:12Z")
Hi, I've built a UI that executes REST API for creating user, role, and a space in Kibana. But, the POST requests fail due to CORS poilicy: In the kibana.yml I have the following: server.cors: true server.cors.or… --- ## [Timestamp is ingest timestamp, not event timestamp](https://discuss.elastic.co/t/timestamp-is-ingest-timestamp-not-event-timestamp/248351)
**Author:** [@batninja24601](https://discuss.elastic.co/u/batninja24601)\ **Replies:** 5\ **Last updated:** [September 13, 2020, 4:03am UTC](https://discuss.elastic.co/t/timestamp-is-ingest-timestamp-not-event-timestamp/248351 "2020-09-13T04:03:52Z")
I am using Filebeat to send single line ELFF formatted logs from a Bluecoat proxy to Logstash. I believe I am grokking out the timestamp field correctly from the message, but the timestamp in ElasticSearch for all these… --- ## [Phrase suggester doesn't provide the correct suggestions](https://discuss.elastic.co/t/phrase-suggester-doesnt-provide-the-correct-suggestions/248428)
**Author:** [@smuthuka](https://discuss.elastic.co/u/smuthuka)\ **Replies:** 0\ **Last updated:** [September 13, 2020, 3:18am UTC](https://discuss.elastic.co/t/phrase-suggester-doesnt-provide-the-correct-suggestions/248428 "2020-09-13T03:18:47Z")
Phrase suggester doesn't provide the correct suggestions. This usually happens after adding/deleting documents. Index Mapping PUT sugg\_test { "settings": { "index": { "number\_of\_shards": "1", "number\_… --- ## [Alternative to using filtered index alias](https://discuss.elastic.co/t/alternative-to-using-filtered-index-alias/248419)
**Author:** [@ilya.rybak](https://discuss.elastic.co/u/ilya.rybak)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 8:32pm UTC](https://discuss.elastic.co/t/alternative-to-using-filtered-index-alias/248419 "2020-09-12T20:32:51Z")
I'm trying to figure out possible solution to the following problem. In my current implementation I'm relying on so called filtered aliases where I can create a view of the same index for each user e.g.: POST /aliases { … --- ## [Alternative to filtered index alias](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388)
**Author:** [@ilya.rybak](https://discuss.elastic.co/u/ilya.rybak)\ **Replies:** 3\ **Last updated:** [September 12, 2020, 8:31pm UTC](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388 "2020-09-12T20:31:27Z")
As with many solutions that require retention policy for data stored in elasticsearch, we’ve implemented the commonly used pattern of having a single index per day. With this pattern removing the old data would be as sim… --- ## [Issue with rollover](https://discuss.elastic.co/t/issue-with-rollover/246488)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 13\ **Last updated:** [September 12, 2020, 7:44pm UTC](https://discuss.elastic.co/t/issue-with-rollover/246488 "2020-09-12T19:44:57Z")
Hi, I am trying to bootstrap an index to write after and getting the below error: { "error" : { "root\_cause" : \[ { "type" : "resource\_already\_exists\_exception", "reason" : "index \[logs-sbk-000001/qa4ur3ZUQCmqugKN9… --- ## [Can Kibana do more than visualize?](https://discuss.elastic.co/t/can-kibana-do-more-than-visualize/248399)
**Author:** [@DThompson55](https://discuss.elastic.co/u/DThompson55)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 12:26pm UTC](https://discuss.elastic.co/t/can-kibana-do-more-than-visualize/248399 "2020-09-12T12:26:12Z")
Once I search for and find a specific row (if that's the right word) in an index, I need some way to act on it, like send it to a kafka topic for example. Is there a way to do that in kibana, or do I need something else? … --- ## [What's the performance difference between \`ids query\` and \`terms query\`?](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 8:54am UTC](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398 "2020-09-12T08:54:46Z")
Say we got a large id set, then which query would be the best choice? # ids query { "query": { "bool": { "filter": \[ { "ids" : { "values" : \["1", "2", ....,"100000"\] }… --- ## [Can I create an Elastic Search index manually against an existing mongodb collection?](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383)
**Author:** [@Juan\_Pablo\_Realini](https://discuss.elastic.co/u/Juan_Pablo_Realini)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 8:00am UTC](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383 "2020-09-12T08:00:36Z")
Hi.. I am new to ES, and have some very specific scenario I would like to achieve. I am an SDET testing a web app (Blazor / Mongo). For one of my tests I need to seed the db with 5000 records... before they implemented … --- ## [Elasticsearch could not run on public ip on AWS](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [September 12, 2020, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354 "2020-09-12T07:42:05Z")
I am trying to bind my public ip on Elasticsearch but it does not working. however, it is working ok while doing curl from localhost, but giving connection timed out on browser. I read almost every article here in commu… --- ## [No space left on device](https://discuss.elastic.co/t/no-space-left-on-device/248400)
**Author:** [@Sarang\_Dharmapurikar](https://discuss.elastic.co/u/Sarang_Dharmapurikar)\ **Replies:** 2\ **Last updated:** [September 12, 2020, 5:01am UTC](https://discuss.elastic.co/t/no-space-left-on-device/248400 "2020-09-12T05:01:54Z")
Hi folks, I'm using elasticsearch docker image but unable to run it on my Mac. It used to be fine. $ docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.… --- ## [Elasticsearch Ports apart from 9200 and 9300](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 3\ **Last updated:** [September 12, 2020, 4:11am UTC](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312 "2020-09-12T04:11:15Z")
Which other ports do elasticsearch uses apart from 9200 and 9300? Can I use 9201 for kibana assuming that Elasticsearch won't use other port in 920\* ranges? What issues it could create? --- ## [ILM Issue](https://discuss.elastic.co/t/ilm-issue/245798)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 4\ **Last updated:** [September 12, 2020, 3:33am UTC](https://discuss.elastic.co/t/ilm-issue/245798 "2020-09-12T03:33:43Z")
Hi, I am facing an issue with my index management setup. Below is the error i see when getting the policy set for my index and the patterns listed in my index templates. Steps: Created LifeCycle policies logging\_smal… --- ## [Elastic Mapping Question for Nested List of Objects](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397)
**Author:** [@vastevenson](https://discuss.elastic.co/u/vastevenson)\ **Replies:** 0\ **Last updated:** [September 12, 2020, 1:16am UTC](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397 "2020-09-12T01:16:48Z")
Hi, I am trying to upload data to an Elastic index. The each document can have many authors associated with it. How should I structure the mapping for this index so that authors will contain a list of first and last nam… --- ## [Setting version number for custom beat](https://discuss.elastic.co/t/setting-version-number-for-custom-beat/248393)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 0\ **Last updated:** [September 12, 2020, 12:43am UTC](https://discuss.elastic.co/t/setting-version-number-for-custom-beat/248393 "2020-09-12T00:43:35Z")
I found various forum posts about using commands like make set\_version or editing a version.yml but neither seem to work. Every time I build my beat, it just keeps setting itself to version beat name-8.0.0, which makes … --- ## [Can't find Stack Management \> Security \> Users](https://discuss.elastic.co/t/cant-find-stack-management-security-users/248360)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 9:41pm UTC](https://discuss.elastic.co/t/cant-find-stack-management-security-users/248360 "2020-09-11T21:41:42Z")
Hi, I'm trying to add some users in kibana, but I can't find the place to do it. I have installed the 7.9.1 version and is using the basic license. I've followed the guide: https://www.elastic.co/guide/en/elasticsearc… --- ## [Kibana 7.9.1 - Date type mapping error](https://discuss.elastic.co/t/kibana-7-9-1-date-type-mapping-error/248223)
**Author:** [@kercio](https://discuss.elastic.co/u/kercio)\ **Replies:** 11\ **Last updated:** [September 11, 2020, 9:34pm UTC](https://discuss.elastic.co/t/kibana-7-9-1-date-type-mapping-error/248223 "2020-09-11T21:34:58Z")
My data dates are in the epoch format thus I am trying to use mapping to display the date in the proper format in Kibana, however, it's failing with the following error message: \[2020-09-10T18:39:43,718\]\[INFO \]\[o.e.a.b.… --- ## [License requirements to implement ILM](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 8:44pm UTC](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380 "2020-09-11T20:44:30Z")
In order to evaluate its potential to help on our daily operations, I have deployed Elastic Search and Kibana (7.7.1 with BASIC license) and created an index template for Ntopng (our monitoring platform). So far so good… --- ## [Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"=\>\\" at line](https://discuss.elastic.co/t/expected-one-of-t-r-n-at-line/248050)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 5\ **Last updated:** [September 11, 2020, 6:45pm UTC](https://discuss.elastic.co/t/expected-one-of-t-r-n-at-line/248050 "2020-09-11T18:45:39Z")
Hi, I am trying to extract one alphanumeric field in an XML file but the config is not happy. I've search this one out for a while but I cannot seem to figure out what isnt right about this simple config: input { fil… --- ## [Stack monitoring is broken in 7.9.1](https://discuss.elastic.co/t/stack-monitoring-is-broken-in-7-9-1/248355)
**Author:** [@sknayar](https://discuss.elastic.co/u/sknayar)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 7:16pm UTC](https://discuss.elastic.co/t/stack-monitoring-is-broken-in-7-9-1/248355 "2020-09-11T19:16:36Z")
Stack monitoring displays a blank white screen. No errors in Kibana logs. It worked fine in 7.8.0, upgrade to 7.9.1 broke it. I have verified that the monitoring data is flowing to the right indices. Below is my Kibana.y… --- ## [Beats minimum requirements](https://discuss.elastic.co/t/beats-minimum-requirements/248373)
**Author:** [@Adam\_Fink](https://discuss.elastic.co/u/Adam_Fink)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 6:51pm UTC](https://discuss.elastic.co/t/beats-minimum-requirements/248373 "2020-09-11T18:51:06Z")
Howdy folks! Is there somewhere I can the minimum system requirements for each Beat? I have checked the online docs, readme files, release notes, and github but I can't find any minimum requirements. Specifically fil… --- ## [I want to configure threshold alert if totaltime exceeds 500 then mail should sent to the User](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 7\ **Last updated:** [September 11, 2020, 6:27pm UTC](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136 "2020-09-11T18:27:02Z")
I am able to send mail with some information but Particular data i want to fetch in table. Alert Configuration i pasted in this link:https://pastebin.com/A6fDZYKY Field Name and index name as follows: --- ## [Upgrade Assistant API Not Responding](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138)
**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138 "2020-09-11T17:45:42Z")
Hello, I'm attempting to resolve an issue with one of our indexes before we perform an upgrade. We're currently running v6.8.8 of Elastic Cloud. I'm following the docs here to add a default field to our index to resolv… --- ## [Kibana string search](https://discuss.elastic.co/t/kibana-string-search/248363)
**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/kibana-string-search/248363 "2020-09-11T17:45:14Z")
I cant filter for SC tried: :SC:: nothing SC nothing :SC: nothing "SC" nothing How do I find "SC" in this string? CDR|N|09:11:2020 09:00:06:939|BIG|20010|boat02|30862|35|BIG\_InitiateSMS|\_sngtv\_|02-P35-09112:SC:… --- ## [Twitter plugin : Twitter client error {:message=\>"", :exception=\>"Twitter::Error::BadRequest",](https://discuss.elastic.co/t/twitter-plugin-twitter-client-error-message-exception-twitter-badrequest/248129)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 5:28pm UTC](https://discuss.elastic.co/t/twitter-plugin-twitter-client-error-message-exception-twitter-badrequest/248129 "2020-09-11T17:28:32Z")
Hi My version of elasticsearch, logstash is 7.9.1 I am trying to get the twitter input plugin working. My input config is: input { twitter { consumer\_key =\> "aaaa" consumer\_secret =\> "bbb" oauth\_token =\> "ccc" o… --- ## [Can we get the list of all the saved objects with errors like missing references etc?](https://discuss.elastic.co/t/can-we-get-the-list-of-all-the-saved-objects-with-errors-like-missing-references-etc/248227)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 4:54pm UTC](https://discuss.elastic.co/t/can-we-get-the-list-of-all-the-saved-objects-with-errors-like-missing-references-etc/248227 "2020-09-11T16:54:28Z")
Can we get the list of all the saved objects with errors like missing references etc? Also can we get a list of all saved objects related to a index pattern? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1809) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1811)