# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1823 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1824 --- ## [Kibana 7.6 is failing with http 413 when importing saved object file 50MB](https://discuss.elastic.co/t/kibana-7-6-is-failing-with-http-413-when-importing-saved-object-file-50mb/247278)
**Author:** [@Rhonda\_Gregory](https://discuss.elastic.co/u/Rhonda_Gregory)\ **Replies:** 3\ **Last updated:** [September 6, 2020, 1:13am UTC](https://discuss.elastic.co/t/kibana-7-6-is-failing-with-http-413-when-importing-saved-object-file-50mb/247278 "2020-09-06T01:13:11Z")
We have elastic 7.6 and kibana 7.6 both on an EC2 instance and accessed via localhost. No components in between. I'm trying to import 50MB saved object file exported from another kibana instance . The import fails with… --- ## [System requirements for Elasticsearch?](https://discuss.elastic.co/t/system-requirements-for-elasticsearch/247608)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 3\ **Last updated:** [September 5, 2020, 6:49pm UTC](https://discuss.elastic.co/t/system-requirements-for-elasticsearch/247608 "2020-09-05T18:49:53Z")
We are planning to use ELK stack for logging. If we are installing Elasticsearch in a server, then how do I decide how much RAM and disk space will be required as Elasticsearch stores and indexes the logs. Answers and … --- ## [Problem with Mapping Templates](https://discuss.elastic.co/t/problem-with-mapping-templates/247370)
**Author:** [@ashu1](https://discuss.elastic.co/u/ashu1)\ **Replies:** 2\ **Last updated:** [September 5, 2020, 4:08pm UTC](https://discuss.elastic.co/t/problem-with-mapping-templates/247370 "2020-09-05T16:08:37Z")
I created a field mapping for keyword only field and ingested the data to ES,but I could still see field.keyword in my index. In my case field name is AB.Field1 Is it due to .(dot) in my field Name or any other issue? … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 6\ **Last updated:** [September 5, 2020, 3:48pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526 "2020-09-05T15:48:27Z")
Hey, I just install elasticsearch and kibana version 7.8.1. I am able to access elasticsearch through IP but when I try to access kibana through IP it says kibana server not ready yet. can someone help here below is el… --- ## [Winlogbeat is not accpeting .crt and .key](https://discuss.elastic.co/t/winlogbeat-is-not-accpeting-crt-and-key/247636)
**Author:** [@Rahul\_Dankhara](https://discuss.elastic.co/u/Rahul_Dankhara)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 3:01pm UTC](https://discuss.elastic.co/t/winlogbeat-is-not-accpeting-crt-and-key/247636 "2020-09-05T15:01:46Z")
I am using .crt and .key for authentication of filebeat with logstash. Which is working perfectly fine. I am using the same certificates for winlogbeat and it is not working as expected. Followed this doc to create .ca… --- ## [Not able to retrieve nested document in native java expert\_scripts for nested function\_score query](https://discuss.elastic.co/t/not-able-to-retrieve-nested-document-in-native-java-expert-scripts-for-nested-function-score-query/247621)
**Author:** [@Amity79](https://discuss.elastic.co/u/Amity79)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 8:37am UTC](https://discuss.elastic.co/t/not-able-to-retrieve-nested-document-in-native-java-expert-scripts-for-nested-function-score-query/247621 "2020-09-05T08:37:54Z")
Hey! I am using 7.8.1 version of elasticsearch and using script-engine to score the document. When i use function\_score query, i am able to read the documet in ScriptEngine. Once I do nested function\_score query then i … --- ## [Java Rest client builder method throwing error for using HttpClientConfigCallback() method](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558)
**Author:** [@soumrock123](https://discuss.elastic.co/u/soumrock123)\ **Replies:** 9\ **Last updated:** [September 5, 2020, 1:11pm UTC](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558 "2020-09-05T13:11:14Z")
I am trying to set up an Elasticsearch high level rest client to connect with an already set up ES cluster via Http Host setup and regular credential authentication. I am setting this up to ingest data from my local syst… --- ## [Jdbc, for getting mssql to Logstash not working :-(](https://discuss.elastic.co/t/jdbc-for-getting-mssql-to-logstash-not-working/247627)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 4\ **Last updated:** [September 5, 2020, 12:45pm UTC](https://discuss.elastic.co/t/jdbc-for-getting-mssql-to-logstash-not-working/247627 "2020-09-05T12:45:07Z")
Hello Unfortunately, I can not able to input mssql data base to logstash... This is my configuration file: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/jdbc\_driver/sqljdbc\_8.4/enu/mssql-jdbc-8.4.1.jr… --- ## [A Yocto meta layer for Beats](https://discuss.elastic.co/t/a-yocto-meta-layer-for-beats/247631)
**Author:** [@dimtass](https://discuss.elastic.co/u/dimtass)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 11:04am UTC](https://discuss.elastic.co/t/a-yocto-meta-layer-for-beats/247631 "2020-09-05T11:04:15Z")
Hi all, I've recently created a Yocto meta layer to add beats in custom images. The meta layer is only software layer with dependencies on poky and meta-openembedded. I've built and tested on a nanopi-k1-plus (allwinner … --- ## [Dashboards for zookeeper, elasticsearch](https://discuss.elastic.co/t/dashboards-for-zookeeper-elasticsearch/247565)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 5\ **Last updated:** [September 5, 2020, 10:57am UTC](https://discuss.elastic.co/t/dashboards-for-zookeeper-elasticsearch/247565 "2020-09-05T10:57:26Z")
Hi, I am monitoring elasticsearch and zookeeper using metricbeat. But I didnt find the dashboards are coming along with metricbeat. May I know if I can populate/import the dashboards from somewhere? --- ## [Events Emitted more then Events Received](https://discuss.elastic.co/t/events-emitted-more-then-events-received/247479)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 1\ **Last updated:** [September 5, 2020, 9:02am UTC](https://discuss.elastic.co/t/events-emitted-more-then-events-received/247479 "2020-09-05T09:02:15Z")
HI , suddenly I started to see backlog behavior and noticed that Events Emitted is 76M but Events Received are 61M , the average rates are different also , ## Events Emitted Rate (/s) --\> 1000 ## Events Received Rat… --- ## [Configuring multiple filebeat instances in Kubernetes](https://discuss.elastic.co/t/configuring-multiple-filebeat-instances-in-kubernetes/247620)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 8:01am UTC](https://discuss.elastic.co/t/configuring-multiple-filebeat-instances-in-kubernetes/247620 "2020-09-05T08:01:47Z")
Hi, We're currently running a well-working setup for indexing nginx sidecar logs using filebeat. It consists of a filebeat container per node, and in our app deployments we have annotations such as annotations: … --- ## [Pipeline/output.go:121 Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/246321)
**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\ **Replies:** 1\ **Last updated:** [September 5, 2020, 5:46am UTC](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/246321 "2020-09-05T05:46:00Z")
hi, I have my filebeat agent (7.4) is still running but it stop to fill index. In my log, I see the message : pipeline/output.go:121 Failed to publish events: temporary bulk send failure I try to change the bulk\_max… --- ## [Perfmon counter: The returned value is not valid](https://discuss.elastic.co/t/perfmon-counter-the-returned-value-is-not-valid/247471)
**Author:** [@sleepy](https://discuss.elastic.co/u/sleepy)\ **Replies:** 2\ **Last updated:** [September 5, 2020, 1:04am UTC](https://discuss.elastic.co/t/perfmon-counter-the-returned-value-is-not-valid/247471 "2020-09-05T01:04:24Z")
Hai, I am currently using metricbeat 7.9.0 in windows to monitor the cpu usage of it. windows.yml: - module: windows metricsets: \[perfmon\] period: 20s perfmon.ignore\_non\_existent\_counters: true … --- ## [How to disable "Open in new tab" "open in new window" in Kibana](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 4\ **Last updated:** [September 5, 2020, 1:57am UTC](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186 "2020-09-05T01:57:32Z")
How do I disable open in new tab or new window from a Kibana Dashboard report that has "URL TEMPLATE" links. --- ## [Filebeat in crashing 7.9.0](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425)
**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\ **Replies:** 2\ **Last updated:** [September 5, 2020, 12:53am UTC](https://discuss.elastic.co/t/filebeat-in-crashing-7-9-0/247425 "2020-09-05T00:53:28Z")
filebeat is crashing, everything works and feeds for 30min then filebeat crashes centos 6.10 filebeat 7.9.0 yum package install increased logging to debug these are the last lines of the filebeat logs 2020-09-03T1… --- ## [How do I decide or evaluate the system/memory requirements for Logstash](https://discuss.elastic.co/t/how-do-i-decide-or-evaluate-the-system-memory-requirements-for-logstash/247607)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 11:34pm UTC](https://discuss.elastic.co/t/how-do-i-decide-or-evaluate-the-system-memory-requirements-for-logstash/247607 "2020-09-04T23:34:32Z")
If I want to use logstash to collect logs in from server how to decide how much memory and disk space will be required for it? If you have any helpful links that are also welcome. --- ## [Is it necessary to use filebeat or logstash forwarder in ELK stack?](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 4\ **Last updated:** [September 4, 2020, 11:22pm UTC](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606 "2020-09-04T23:22:28Z")
Is it necessary to use filebeat in ELK stack for collecting logs like installing filebeat on all the servers from where we need to collect logs and installing Logstash, ES and Kibana in a single separate server. Or can … --- ## [Json Logstash](https://discuss.elastic.co/t/json-logstash/247602)
**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 10:23pm UTC](https://discuss.elastic.co/t/json-logstash/247602 "2020-09-04T22:23:56Z")
Hi guys, I'm trying to add a json file to my ELK and I can't get it in any way, they could help me, I'm posting my confs. Thank you! input { file { path =\> "/tmp/teste/teste.json" start\_position =\> "beginning" sinc… --- ## [Parsing Nested JSON inside JSON getting NilClass](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593)
**Author:** [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)\ **Replies:** 3\ **Last updated:** [September 4, 2020, 10:20pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593 "2020-09-04T22:20:09Z")
\[ERROR\] 2020-09-04 21:58:24.155 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined method 'each' for nil:NilClass \[ERROR\] 2020-09-04 21:58:24.155 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined method… --- ## [Monitor activemq inside a Kubernetes Cluster](https://discuss.elastic.co/t/monitor-activemq-inside-a-kubernetes-cluster/247604)
**Author:** [@Shereef\_Adekunle](https://discuss.elastic.co/u/Shereef_Adekunle)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 10:00pm UTC](https://discuss.elastic.co/t/monitor-activemq-inside-a-kubernetes-cluster/247604 "2020-09-04T22:00:49Z")
Hello, I am currently trying to have my Elastic Cloud monitor an activemq broker running in a Kubernetes pod. I know on VMs you would just enable the activemq module to monitor it, but how can I install metricbeat within… --- ## [Missing index pattern heartbeat-\*](https://discuss.elastic.co/t/missing-index-pattern-heartbeat/247394)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 6\ **Last updated:** [September 4, 2020, 9:08pm UTC](https://discuss.elastic.co/t/missing-index-pattern-heartbeat/247394 "2020-09-04T21:08:40Z")
Hi, I am using ELK 7.9. I have installed and confirmed working fine Winlogbeat, Packetbeat and Auditbeat. But regarding Heartbeat, apparently is working fine, as is communicating with Elasticsearch, but is the only beat… --- ## [Does watcher support EQL or KQL or eSQL?](https://discuss.elastic.co/t/does-watcher-support-eql-or-kql-or-esql/247596)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 9:04pm UTC](https://discuss.elastic.co/t/does-watcher-support-eql-or-kql-or-esql/247596 "2020-09-04T21:04:51Z")
Does watcher support EQL or SQL type syntax? it is too complex to understand DSL if someone else have written it in watcher and it recurses on and on :frowning: in DSL if watcher doesn't support a simplified language, W… --- ## [How to update Lucene version of an huge indices?](https://discuss.elastic.co/t/how-to-update-lucene-version-of-an-huge-indices/247460)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 5\ **Last updated:** [September 4, 2020, 8:44pm UTC](https://discuss.elastic.co/t/how-to-update-lucene-version-of-an-huge-indices/247460 "2020-09-04T20:44:19Z")
Hello Geeks, I have 10 indices of 2 TB size each on ES 7.7 version. Lucene version of those indices is around 7.x. I want to update Lucene version of these indices to latest version that is 8.5? I am aware of following… --- ## [Logstash 7.8.1 Beats Input Plugin does not reload TLS certificate on change](https://discuss.elastic.co/t/logstash-7-8-1-beats-input-plugin-does-not-reload-tls-certificate-on-change/247578)
**Author:** [@Sunil\_Chadha](https://discuss.elastic.co/u/Sunil_Chadha)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 5:15pm UTC](https://discuss.elastic.co/t/logstash-7-8-1-beats-input-plugin-does-not-reload-tls-certificate-on-change/247578 "2020-09-04T17:15:38Z")
Hi Elastic Experts, I recently upgraded from Logstash 6.8.7 to Logstash 7.8.1, and notice the TLS Certificate on change is not reloaded by Beats Input. I need Logstash Beats Input to reload the renewed certificate, whe… --- ## [Winlogbeat registry file issues](https://discuss.elastic.co/t/winlogbeat-registry-file-issues/247567)
**Author:** [@jlwingo](https://discuss.elastic.co/u/jlwingo)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 3:22pm UTC](https://discuss.elastic.co/t/winlogbeat-registry-file-issues/247567 "2020-09-04T15:22:22Z")
I am new to winlogbeat and just trying to get it rolled out across all of our windows servers. I just pushed out Winlogbeat to our devtest environment. I had no issues with sandbox environment or any issues when test i… --- ## [Machine learning typical value not set at the moment of firing watcher Part 2](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher-part-2/246933)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 6\ **Last updated:** [September 4, 2020, 7:57pm UTC](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher-part-2/246933 "2020-09-04T19:57:16Z")
Hi, this thread is a continuation of the previous thread which was closed due to inactivity and can be found here I urge you to visit it. Back at that time, I couldn't provide more info (watcher execution data, etc.) b… --- ## [Elasticsearch not able to see all the indices](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-all-the-indices/247590)
**Author:** [@anantvir](https://discuss.elastic.co/u/anantvir)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-all-the-indices/247590 "2020-09-04T19:39:30Z")
I am using an index file which looks like '9L9\_imsWTYO3-1p9y0MtKg' from some one else's elastic index and trying to put the file in 'elasticsearch\\data\\nodes\\0\\indices'. But my elasticsearch cannot read that particular i… --- ## [Elasticsearch cluster in Yellow state and 1 Unassigned Shard](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 26\ **Last updated:** [September 4, 2020, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290 "2020-09-04T19:00:13Z")
Hi All, I am running ELK 7.6.2 stack. Recently the cluster state went "Yellow" and it started showing one Unassigned Shard. Please see below: { "cluster\_name" : "elkcluster-prod", "status" : "yellow", "timed\_ou… --- ## [Filebeat processor](https://discuss.elastic.co/t/filebeat-processor/247585)
**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 6:54pm UTC](https://discuss.elastic.co/t/filebeat-processor/247585 "2020-09-04T18:54:45Z")
Is there any document for create one filebeat processor? how the filebeat call the processor? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1822) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1824)