# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1824

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1825

---

## [How to Run Metricbeat in Docker with Modules to Monitor Other Containers](https://discuss.elastic.co/t/how-to-run-metricbeat-in-docker-with-modules-to-monitor-other-containers/247112)

<div class="topic-metadata">

**Author:** [@chancewwr](https://discuss.elastic.co/u/chancewwr)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 6:26pm UTC](https://discuss.elastic.co/t/how-to-run-metricbeat-in-docker-with-modules-to-monitor-other-containers/247112 "2020-09-04T18:26:09Z")

</div>

Hello all, I'm trying to use Metricbeat to monitor my elasticstack. Logstash, Elasticsearch, Kibana, and some Beats are all running inside of docker containers. I am wondering what is the best way to use Metricbeat to mo…

---

## [Memory issues and Query Limitations](https://discuss.elastic.co/t/memory-issues-and-query-limitations/247451)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 6:15pm UTC](https://discuss.elastic.co/t/memory-issues-and-query-limitations/247451 "2020-09-04T18:15:00Z")

</div>

Optimizing my system Step by Step, starting from 1 master-slave node. I noticed 2 problems I was having. 1) Queries would start to time out due to the size of my cluster and 2) With Ingestion, it seems that shards woul…

---

## [Kibana -\> Stack Management -\> Index Patterns -\> filebeat-\* does not load](https://discuss.elastic.co/t/kibana-stack-management-index-patterns-filebeat-does-not-load/247427)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-stack-management-index-patterns-filebeat-does-not-load/247427 "2020-09-04T17:01:13Z")

</div>

I have a weird one. When I try to load the settings page for the filebeat-\* index pattern, no settings appear. All I see is the Kibana lefthand menu and header. If I load the metricbeat-\* index pattern settings, I see…

---

## [Elastic-Agent No Index/Data](https://discuss.elastic.co/t/elastic-agent-no-index-data/247431)

<div class="topic-metadata">

**Author:** [@crazedmeph](https://discuss.elastic.co/u/crazedmeph)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 4:34pm UTC](https://discuss.elastic.co/t/elastic-agent-no-index-data/247431 "2020-09-04T16:34:43Z")

</div>

I am trying to test out this ingestion manager and i enrolled a agent that is doing metrics and nginx and i never seem to get any new indicies that have 7.9. I go through kibana -\> Stack management -\> Index Management -\> …

---

## [Logstash intermittently fails to start using jdbc-static filter](https://discuss.elastic.co/t/logstash-intermittently-fails-to-start-using-jdbc-static-filter/247575)

<div class="topic-metadata">

**Author:** [@Paal\_Aaserud](https://discuss.elastic.co/u/Paal_Aaserud)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 4:08pm UTC](https://discuss.elastic.co/t/logstash-intermittently-fails-to-start-using-jdbc-static-filter/247575 "2020-09-04T16:08:11Z")

</div>

Environment: Red Hat Enterprise Linux release 8.2 (Ootpa) Logstash 7.9.0 I have configured logstash 7.9 with a multiple pipeline using the jdbc\_static filter to fill two local db's for enrichment. Some times starting …

---

## [Heartbeat not able to connect the HTTP Endpoint via Proxy](https://discuss.elastic.co/t/heartbeat-not-able-to-connect-the-http-endpoint-via-proxy/246393)

<div class="topic-metadata">

**Author:** [@rakesh15](https://discuss.elastic.co/u/rakesh15)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 3:59pm UTC](https://discuss.elastic.co/t/heartbeat-not-able-to-connect-the-http-endpoint-via-proxy/246393 "2020-09-04T15:59:43Z")

</div>

Hi All, Im try to configure the heartbeat to monitor the up time for endpoint. Below is the configuration for the same. - type: http name: JocataHealthCheck schedule: '@every 60s' urls: \["https://SomeURL/rest/joc…

---

## [Parser exception when use "include\_upper":true in date range query](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428)

<div class="topic-metadata">

**Author:** [@silvina](https://discuss.elastic.co/u/silvina)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 3:39pm UTC](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428 "2020-09-04T15:39:14Z")

</div>

Hi, I get parse\_exception when I try to do this query: { "from":0, "size":999, "query":{ "bool":{ "filter":\[ { "r…

---

## [xpackReporting:customPdfLogo missing](https://discuss.elastic.co/t/xpackreporting-custompdflogo-missing/247544)

<div class="topic-metadata">

**Author:** [@C0FFEEC0FFEE](https://discuss.elastic.co/u/C0FFEEC0FFEE)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 3:25pm UTC](https://discuss.elastic.co/t/xpackreporting-custompdflogo-missing/247544 "2020-09-04T15:25:02Z")

</div>

Since updating to Kibana 7.9.1 we are missing the xpackReporting:customPdfLogo in "Advanced Settings". According to the documentation it should still be there. The reports still contain our configured logos but I cannot …

---

## [Email Connector in Elastic Cloud](https://discuss.elastic.co/t/email-connector-in-elastic-cloud/246331)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 3:23pm UTC](https://discuss.elastic.co/t/email-connector-in-elastic-cloud/246331 "2020-09-04T15:23:49Z")

</div>

Good morning, I'm using the elastic cloud and I would like configure the email alerts when I detect errors using the APM. I configured the watcher using my email in the whitelist and it works, the first question is: Is…

---

## [Using authentication api of kibana /api/security/v1/login returns 404 not found](https://discuss.elastic.co/t/using-authentication-api-of-kibana-api-security-v1-login-returns-404-not-found/246920)

<div class="topic-metadata">

**Author:** [@Ananya\_Chaurasia](https://discuss.elastic.co/u/Ananya_Chaurasia)\
**Replies:** 5\
**Last updated:** [September 4, 2020, 3:17pm UTC](https://discuss.elastic.co/t/using-authentication-api-of-kibana-api-security-v1-login-returns-404-not-found/246920 "2020-09-04T15:17:21Z")

</div>

I am running Kibana 7.7.1 on windows. I am trying to share kibana dashboard to external web app by embedding the iframe into my angular code. This approach has an issue of Kibana login prompt appearing everytime I visit …

---

## [Logstash can not start](https://discuss.elastic.co/t/logstash-can-not-start/247509)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 3:12pm UTC](https://discuss.elastic.co/t/logstash-can-not-start/247509 "2020-09-04T15:12:38Z")

</div>

I have problem with my logstash. When I start the logstash service, I have this log: 2020-09-04 16:21:19,830 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender…

---

## [Filebeat process not running after upgrade from 7.6.2 to 7.8.1](https://discuss.elastic.co/t/filebeat-process-not-running-after-upgrade-from-7-6-2-to-7-8-1/247459)

<div class="topic-metadata">

**Author:** [@new11](https://discuss.elastic.co/u/new11)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 3:08pm UTC](https://discuss.elastic.co/t/filebeat-process-not-running-after-upgrade-from-7-6-2-to-7-8-1/247459 "2020-09-04T15:08:19Z")

</div>

Hi all, One of the instance is having beat error after upgrade from 7.6.2 to 7.8.1. as below, ERROR instance/beat.go:933 Exiting: data path already locked by another beat out of 2 instances one instance upgrade had be…

---

## [Metricbeat dashboards changed after kibana update](https://discuss.elastic.co/t/metricbeat-dashboards-changed-after-kibana-update/247413)

<div class="topic-metadata">

**Author:** [@kibit86](https://discuss.elastic.co/u/kibit86)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:31pm UTC](https://discuss.elastic.co/t/metricbeat-dashboards-changed-after-kibana-update/247413 "2020-09-04T14:31:45Z")

</div>

Hi all, I have a 3 nodes cluster that was on version 7.1.1 until yesterday. I updated the cluster performing small steps (7.2-7.3-7.6-7.9) in order to start playing with the new alerting framework. I use beats to send…

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:26pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733 "2020-09-04T14:26:46Z")

</div>

I'm trying to deal with an index that the Upgrade Assistant has said needs to be reindexed before an upgrade to Elasticsearch 7. The index was created with 5.6.14 and the cluster currently runs 6.8.9. Due to an issue wit…

---

## [How to get external url of kibana (loadBalancer)](https://discuss.elastic.co/t/how-to-get-external-url-of-kibana-loadbalancer/244962)

<div class="topic-metadata">

**Author:** [@melissajenner22](https://discuss.elastic.co/u/melissajenner22)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:13pm UTC](https://discuss.elastic.co/t/how-to-get-external-url-of-kibana-loadbalancer/244962 "2020-09-04T14:13:43Z")

</div>

I use the chart https://github.com/elastic/helm-charts, version 7.7.1 installed elasticsearch, kibana and logstash into Kubernetes. helm version is 2.16.10. Kubernetes version is 1.16 (eks). I use default settings. Comm…

---

## [After upgrade to 7.9.0 Kibana shows : "405 Method Not Allowed"](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279)

<div class="topic-metadata">

**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 2:04pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279 "2020-09-04T14:04:34Z")

</div>

With 7.8.0 and 7.8.1 there was no problems. But now ... { "statusCode": 405, "error": "Method Not Allowed", "message": "invalid escape sequence \`%{\[' at index 0 of: %{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-202…

---

## [Tab not responding for some visualizations after upgrading to Kibana to 7.9](https://discuss.elastic.co/t/tab-not-responding-for-some-visualizations-after-upgrading-to-kibana-to-7-9/247499)

<div class="topic-metadata">

**Author:** [@intellion](https://discuss.elastic.co/u/intellion)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 2:03pm UTC](https://discuss.elastic.co/t/tab-not-responding-for-some-visualizations-after-upgrading-to-kibana-to-7-9/247499 "2020-09-04T14:03:26Z")

</div>

After we upgraded the elastic stack to version 7.9 (all--\> logstash, elasticsearch and kibana) we experience visualisations which make the browser tab unresponsive: This was not the case before the update. Anyone else…

---

## [V8 - breaking changes - dangling indexes?](https://discuss.elastic.co/t/v8-breaking-changes-dangling-indexes/247551)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 1:49pm UTC](https://discuss.elastic.co/t/v8-breaking-changes-dangling-indexes/247551 "2020-09-04T13:49:17Z")

</div>

Upgraded to 7.9.1 this morning and had a bit of a shock when my data wasn't reloading. Finally RTFM and saw the note about dangling indexes no longer reloaded by default. Oh boy. Anyway - when v8 rolls around - how are …

---

## [Splitting multiple strings into subfields](https://discuss.elastic.co/t/splitting-multiple-strings-into-subfields/247549)

<div class="topic-metadata">

**Author:** [@ds2000](https://discuss.elastic.co/u/ds2000)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 1:46pm UTC](https://discuss.elastic.co/t/splitting-multiple-strings-into-subfields/247549 "2020-09-04T13:46:23Z")

</div>

Hi all, I'm not sure if this is possible or not. I'm collecting a lot of data and collecting it into a single line in a logfile. For reference, this is the pre-log format moduleName1 ----- InstalledVersion ----- Ne…

---

## [Redis slowlog module + Kubernetes secrets =\> error :/](https://discuss.elastic.co/t/redis-slowlog-module-kubernetes-secrets-error/246827)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 6\
**Last updated:** [September 4, 2020, 1:32pm UTC](https://discuss.elastic.co/t/redis-slowlog-module-kubernetes-secrets-error/246827 "2020-09-04T13:32:40Z")

</div>

Hi thanks for the beautiful elastic stack! I am using Redis slowlog module + k8s secrets but then it fails. EDIT: My guess - maybe the var.password do not understand k8s secrets? (just a naive guess) The yaml # ref: h…

---

## [Dynamic Timezone in Logstash csv](https://discuss.elastic.co/t/dynamic-timezone-in-logstash-csv/247502)

<div class="topic-metadata">

**Author:** [@Rakku](https://discuss.elastic.co/u/Rakku)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 1:20pm UTC](https://discuss.elastic.co/t/dynamic-timezone-in-logstash-csv/247502 "2020-09-04T13:20:46Z")

</div>

Hi there, Im completely new to pretty much anything here and got introduced at my workplace to ELK with the words: "We use ELK here, we have this and this problem, fix it". So here I am, with little to none knowledge on…

---

## [Kibana field type and Elasticsearch mapping don't match](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528)

<div class="topic-metadata">

**Author:** [@egray](https://discuss.elastic.co/u/egray)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 1:15pm UTC](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528 "2020-09-04T13:15:13Z")

</div>

I spent a long time today trying to apply a new index template, to change the type of a field from a string to an integer. Then I used the GET Mapping API and saw this : "response\_time" : { "type" : "integer" },…

---

## [Is it possible to pass Google Analytics data to Logstash?](https://discuss.elastic.co/t/is-it-possible-to-pass-google-analytics-data-to-logstash/246386)

<div class="topic-metadata">

**Author:** [@ckwm](https://discuss.elastic.co/u/ckwm)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 1:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-google-analytics-data-to-logstash/246386 "2020-09-04T13:13:22Z")

</div>

Hi, I'm new for ELK and I'm trying to pass the Google Analytics data to Logstash in order to visualize in Kibana. Is it possible to do it? Or is there a way to connect Google Analytics with Kibana directly? Hope someon…

---

## [Kibana Reporting](https://discuss.elastic.co/t/kibana-reporting/247508)

<div class="topic-metadata">

**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 1:11pm UTC](https://discuss.elastic.co/t/kibana-reporting/247508 "2020-09-04T13:11:53Z")

</div>

Hello, I hope you are doing well! I have the 7.9 ELK stack running along with some tools from the beats family, I built some kibana and canvas dashboards and I was wondering whether the reporting option is free. Kind …

---

## [Doc\_count is not returning for the index in "multi index approach" if no data present in that index](https://discuss.elastic.co/t/doc-count-is-not-returning-for-the-index-in-multi-index-approach-if-no-data-present-in-that-index/247539)

<div class="topic-metadata">

**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 12:56pm UTC](https://discuss.elastic.co/t/doc-count-is-not-returning-for-the-index-in-multi-index-approach-if-no-data-present-in-that-index/247539 "2020-09-04T12:56:03Z")

</div>

Hi, In case of multi Index approach, if the data for the specific index is not present in the Elastic \[index is empty\]. while doing the aggregation in multi index it should return at least doc\_count as '0' . tried solu…

---

## [Deploy elastic-agent with cert?](https://discuss.elastic.co/t/deploy-elastic-agent-with-cert/247397)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 5\
**Last updated:** [September 4, 2020, 11:29am UTC](https://discuss.elastic.co/t/deploy-elastic-agent-with-cert/247397 "2020-09-04T11:29:05Z")

</div>

I'm trying to deploy the agent but my kibana instance requires a certificate which won't let me connect to it. Is there a way to give it a certificate or another way around this? fail to enroll: fail to execute request …

---

## [How to get position of matched token](https://discuss.elastic.co/t/how-to-get-position-of-matched-token/247521)

<div class="topic-metadata">

**Author:** [@drewblin](https://discuss.elastic.co/u/drewblin)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 11:02am UTC](https://discuss.elastic.co/t/how-to-get-position-of-matched-token/247521 "2020-09-04T11:02:29Z")

</div>

Hi I want to migrate from Sphinxsearch to Elastic. But have task, that i don't know how to solve in elastic. I have documents with 2 fields. First field - "title". It is array of words. And each word can have some syn…

---

## [DevTools menu is not shown in the menu panel of Kibana 5.6.16](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701)

<div class="topic-metadata">

**Author:** [@girlie.tan](https://discuss.elastic.co/u/girlie.tan)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 10:43am UTC](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701 "2020-09-04T10:43:22Z")

</div>

DevTools menu is not shown in the menu panel of Kibana 5.6.16 Please share the step by step to troubleshoot. Thank you.

---

## [Average Aggregation over two fields](https://discuss.elastic.co/t/average-aggregation-over-two-fields/247516)

<div class="topic-metadata">

**Author:** [@Daniel\_Garcia](https://discuss.elastic.co/u/Daniel_Garcia)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 10:14am UTC](https://discuss.elastic.co/t/average-aggregation-over-two-fields/247516 "2020-09-04T10:14:10Z")

</div>

What I would like to achieve is, given this type of docs: { "my\_index": { "mappings": { "result": { "dynamic": "false", "\_all": { "enabled": false …

---

## [Metricbeat is not loading fields.yml](https://discuss.elastic.co/t/metricbeat-is-not-loading-fields-yml/247390)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 9:25am UTC](https://discuss.elastic.co/t/metricbeat-is-not-loading-fields-yml/247390 "2020-09-04T09:25:58Z")

</div>

Hi, I am using metricbeat 7.9.0 daemonset on k8s environment to export the metrics to ELK stack. But I am getting the errors like " Fielddata is disabled on text fields by default. Set fielddata=true on \[cloud.account.…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1823)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1825)
