# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1826 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1827 --- ## [Can't load modules](https://discuss.elastic.co/t/cant-load-modules/247382)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 10:29pm UTC](https://discuss.elastic.co/t/cant-load-modules/247382 "2020-09-03T22:29:27Z")
I have a website that is hosted with apache. I can't seem to get the apache module working. I think this is happening because filebeat output is directed to logstash (not elasticsearch). If I just a regular filebeat se… --- ## [What is the unit of measure for rtt times in heartbeat](https://discuss.elastic.co/t/what-is-the-unit-of-measure-for-rtt-times-in-heartbeat/247455)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 10:18pm UTC](https://discuss.elastic.co/t/what-is-the-unit-of-measure-for-rtt-times-in-heartbeat/247455 "2020-09-03T22:18:49Z")
I have a sample showing the following json snippet "tcp": { "rtt": { "connect": { "us": 79589 } } }, Is that 79,589 nanoseconds? --- ## [Kibana alerts to Opsgenie](https://discuss.elastic.co/t/kibana-alerts-to-opsgenie/247396)
**Author:** [@Bala\_Kumaar\_1653](https://discuss.elastic.co/u/Bala_Kumaar_1653)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 9:29pm UTC](https://discuss.elastic.co/t/kibana-alerts-to-opsgenie/247396 "2020-09-03T21:29:04Z")
Hi All, Am trying to integrate Kibana alerts and action with Opsgenie I have used webhook actions in kibana to send the alerts to opsgenie, but it is not sending any alerts. Can any one help on this --- ## [Setting up beat.hostname in Metricbeat](https://discuss.elastic.co/t/setting-up-beat-hostname-in-metricbeat/247442)
**Author:** [@YemaneZewdu](https://discuss.elastic.co/u/YemaneZewdu)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 9:24pm UTC](https://discuss.elastic.co/t/setting-up-beat-hostname-in-metricbeat/247442 "2020-09-03T21:24:50Z")
0 I am super new to these concepts, I apologize if this is a silly thing. I am trying to visualize Metricbeat data on Grafana with Elasticsearch data source, all running locally, but unable to find where "beat.hostname"… --- ## [Adding new properties to kibana.yml](https://discuss.elastic.co/t/adding-new-properties-to-kibana-yml/247368)
**Author:** [@anilreddyd](https://discuss.elastic.co/u/anilreddyd)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 9:23pm UTC](https://discuss.elastic.co/t/adding-new-properties-to-kibana-yml/247368 "2020-09-03T21:23:27Z")
Hi, I want to add new properties to kibana.yml file. When I add new properties to the file, I get an error while running "yarn kbn bootstrap" saying those properties are not valid. I would like to know what all places … --- ## [Not able to use console.log() in plugin components in kibana 7.8 OSS version](https://discuss.elastic.co/t/not-able-to-use-console-log-in-plugin-components-in-kibana-7-8-oss-version/247331)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 9:04pm UTC](https://discuss.elastic.co/t/not-able-to-use-console-log-in-plugin-components-in-kibana-7-8-oss-version/247331 "2020-09-03T21:04:23Z")
I am developing a plugin for authentication in Kibana 7.8 oss version In that plugin, showing error while using console.log() statement For resolving the error, I tried to declare console variable first and gave it Con… --- ## [How to hide plugin in sidebar menu plugin list in 7.8 kibana OSS version](https://discuss.elastic.co/t/how-to-hide-plugin-in-sidebar-menu-plugin-list-in-7-8-kibana-oss-version/247426)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 8:57pm UTC](https://discuss.elastic.co/t/how-to-hide-plugin-in-sidebar-menu-plugin-list-in-7-8-kibana-oss-version/247426 "2020-09-03T20:57:35Z")
Need to hide plugin in sidebar but still plugin should be enabled I tried doing my\_plugin.enabled : false in kibana.yml file but it is disabling my plugin completely from working it in background So, Please tell how t… --- ## [Elasticsearch to get the content length](https://discuss.elastic.co/t/elasticsearch-to-get-the-content-length/247417)
**Author:** [@EvelynC](https://discuss.elastic.co/u/EvelynC)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-to-get-the-content-length/247417 "2020-09-03T15:27:05Z")
Hi all, I was getting back the error saying "content length is too long for configured buffer limit (104857600)" in production environment. But when I try to reproduce the issue, it is not reproducible in lower environ… --- ## [Elasticsearch NEST client copatibilty](https://discuss.elastic.co/t/elasticsearch-nest-client-copatibilty/247430)
**Author:** [@Ayoub96](https://discuss.elastic.co/u/Ayoub96)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 7:48pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-client-copatibilty/247430 "2020-09-03T19:48:01Z")
Hello, According to the NEST matrix compatibility https://github.com/elastic/elasticsearch-net/blob/master/readme.md#compatibility-matrix, i'm having some troubles!, we worked for a long time with NEST 2.5 client & Elas… --- ## [Rollover alias with date does not put the right date](https://discuss.elastic.co/t/rollover-alias-with-date-does-not-put-the-right-date/247273)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 6:37pm UTC](https://discuss.elastic.co/t/rollover-alias-with-date-does-not-put-the-right-date/247273 "2020-09-03T18:37:52Z")
Hi: I need to have a new index every day with the myindex + datetime (myindex-YYYY.MM.DD). I created an index with initial name myindex-2020.09.01-000001. index\_body = { "aliases": { "myindex": {… --- ## [Optimization of Elasticsearch Based on different Parameters and Techniques](https://discuss.elastic.co/t/optimization-of-elasticsearch-based-on-different-parameters-and-techniques/247432)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 6:21pm UTC](https://discuss.elastic.co/t/optimization-of-elasticsearch-based-on-different-parameters-and-techniques/247432 "2020-09-03T18:21:55Z")
I am planning to pursue my master thesis researching about different parameters and techniques that can affect the Elasticsearch performance. Can somebody guide me to the quality research materials/papers I can refer to… --- ## [Kibana - TypeError: Failed to fetch](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 5\ **Last updated:** [September 3, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960 "2020-09-03T17:07:43Z")
Hi, After upgrading to kibana 7.9, I begun getting an error that I cannot find referenced anywhere. I was wondering if anyone has come across this? TypeError: Failed to fetch at Fetch.\_callee3$ (https://10.23.45.78… --- ## [7.9 Watcher bug - Cannot save Watchers with an index set via a transform](https://discuss.elastic.co/t/7-9-watcher-bug-cannot-save-watchers-with-an-index-set-via-a-transform/247136)
**Author:** [@jessvin.thomas](https://discuss.elastic.co/u/jessvin.thomas)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 4:41pm UTC](https://discuss.elastic.co/t/7-9-watcher-bug-cannot-save-watchers-with-an-index-set-via-a-transform/247136 "2020-09-03T16:41:55Z")
I was going to submit this as a confirmed bug, but I figured I would check here first. Anyone notice if I'm doing anything wrong or can reproduce my issue? I'll submit as a bug if no response or if no one finds a mista… --- ## [Why kibana.yml needs a user given, when kibana already gets the credentials by UI prompt?](https://discuss.elastic.co/t/why-kibana-yml-needs-a-user-given-when-kibana-already-gets-the-credentials-by-ui-prompt/247402)
**Author:** [@mrraj470](https://discuss.elastic.co/u/mrraj470)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 4:41pm UTC](https://discuss.elastic.co/t/why-kibana-yml-needs-a-user-given-when-kibana-already-gets-the-credentials-by-ui-prompt/247402 "2020-09-03T16:41:19Z")
This is a simple question, but I could not find answers from the internet. Also, I'm a beginner in using elk. I know, the security (x-pack) is free from 6.8 version onwards. Even I'm trying to use that feature. But I'm … --- ## [Separate data stream per customer?](https://discuss.elastic.co/t/separate-data-stream-per-customer/247300)
**Author:** [@Adam\_Wilson](https://discuss.elastic.co/u/Adam_Wilson)\ **Replies:** 10\ **Last updated:** [September 3, 2020, 4:36pm UTC](https://discuss.elastic.co/t/separate-data-stream-per-customer/247300 "2020-09-03T16:36:08Z")
Hello! I'm evaluating whether to use Elasticsearch as an OLAP backend for our Reports+Dashboards feature We have timeseries data that's ingested for different customers The data between these customers is 100% independ… --- ## [Multiline not working properly when used along with exclude\_lines](https://discuss.elastic.co/t/multiline-not-working-properly-when-used-along-with-exclude-lines/247422)
**Author:** [@MANI\_M](https://discuss.elastic.co/u/MANI_M)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 4:24pm UTC](https://discuss.elastic.co/t/multiline-not-working-properly-when-used-along-with-exclude-lines/247422 "2020-09-03T16:24:37Z")
We were trying to combine all the logs into a single event after excluding lines with a specific pattern. But it seems filebeat is appending the excluded lines in multiline and misses out other data leading to misbehavio… --- ## [Create arrays based on certain text in a field](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 11\ **Last updated:** [September 3, 2020, 4:29pm UTC](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811 "2020-09-03T16:29:51Z")
I am parsing chat messages and I want to create three arrays for tag cloud purposes. One for normal chat words, one for user tags, and one for chat emotes. For example, take this chat message: WE LOVE YOU @CHANDLER, Y… --- ## [Will replica shards in single node cluster consume jvm heap memory](https://discuss.elastic.co/t/will-replica-shards-in-single-node-cluster-consume-jvm-heap-memory/246940)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 7\ **Last updated:** [September 3, 2020, 4:14pm UTC](https://discuss.elastic.co/t/will-replica-shards-in-single-node-cluster-consume-jvm-heap-memory/246940 "2020-09-03T16:14:31Z")
Hi, I am using single node with 8 GB JVM (half of total 16 GB). Total shards = 1951 I know ES will refuse to allocate both the primary shard and a replica shard on the same machine.but is this replica shards consuming… --- ## [Plugin startup fails in V7.9 but works in 7.3](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-but-works-in-7-3/246800)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 6\ **Last updated:** [September 3, 2020, 4:10pm UTC](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-but-works-in-7-3/246800 "2020-09-03T16:10:25Z")
My cbsa plugin fails on startup. It fails at xpackMainPlugin.registerFeature in init.js with the following message " FATAL Error: Feature cbsa specifies app entries which are not granted to any privileges: cbsa,kibana".… --- ## [How to handle rotated logs](https://discuss.elastic.co/t/how-to-handle-rotated-logs/247341)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 4:07pm UTC](https://discuss.elastic.co/t/how-to-handle-rotated-logs/247341 "2020-09-03T16:07:38Z")
I am analyzing logs using logstash that are getting updated realtime from an application. The application has an inbuilt log rotation process like this. My application always writes to fsl.stream and once this fsl.stream… --- ## [Log entry payload is not present in the trigger's ctx](https://discuss.elastic.co/t/log-entry-payload-is-not-present-in-the-triggers-ctx/247378)
**Author:** [@akhettar](https://discuss.elastic.co/u/akhettar)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:54pm UTC](https://discuss.elastic.co/t/log-entry-payload-is-not-present-in-the-triggers-ctx/247378 "2020-09-03T15:54:19Z")
Hello there, I would like to include a log's field value in the alert body message. The alert is pushed to slack channel. From the log entry below, I wanted to include the payload.message and payload.customData.order… --- ## [Clarification towards logstash batch\_size and memory usage](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073)
**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:37pm UTC](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073 "2020-09-03T15:37:02Z")
Hello All, I have two concerns I have a pipeline.yml where I am explicitly setting batch size as 100, but when I start logstash it shows me 125, is this an expected behavior ? config - pipeline.id: filebeat path.c… --- ## [Explain Periodic\_flush in logsatsh common fields](https://discuss.elastic.co/t/explain-periodic-flush-in-logsatsh-common-fields/247328)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 3:35pm UTC](https://discuss.elastic.co/t/explain-periodic-flush-in-logsatsh-common-fields/247328 "2020-09-03T15:35:29Z")
Hi, Under Logstash common fields, I see a field names Periodic\_flush. Could you please explain whats is used for and also give an example with respect to translate plugin https://www.elastic.co/guide/en/logstash/curren… --- ## [New space: I wanna see "Detection Alerts" in Security and I can't disable "Stack Monitoring"](https://discuss.elastic.co/t/new-space-i-wanna-see-detection-alerts-in-security-and-i-cant-disable-stack-monitoring/247258)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:07pm UTC](https://discuss.elastic.co/t/new-space-i-wanna-see-detection-alerts-in-security-and-i-cant-disable-stack-monitoring/247258 "2020-09-03T15:07:05Z")
Dear people, I hace an ELK 7.9.0 platform running OK. I've created a new Space enabling "Security" and disabling "Stack Monitoring" feature: I've created a new rol and I have not enabled the Stack Monitoring again: … --- ## [Sort result by distance ranges](https://discuss.elastic.co/t/sort-result-by-distance-ranges/247286)
**Author:** [@r3vile](https://discuss.elastic.co/u/r3vile)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:05pm UTC](https://discuss.elastic.co/t/sort-result-by-distance-ranges/247286 "2020-09-03T15:05:32Z")
I have a document with many restaurants including their location. Is it possible to get all of them in a 100km range and group them into 3 ranges. So I will first see all which are at max 10km away from my location, sor… --- ## [Cannot parse numeric values in a search template](https://discuss.elastic.co/t/cannot-parse-numeric-values-in-a-search-template/247088)
**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 2:59pm UTC](https://discuss.elastic.co/t/cannot-parse-numeric-values-in-a-search-template/247088 "2020-09-03T14:59:31Z")
Fx. if I take the example from Elasticsearch Reference \[7.9\] » REST APIs » Search APIs » Search Template and render it I get POST \_render/template { "source" : { "query": { "match" : { "{{my\_field}}" : "{{my\_value… --- ## [Error running Metricbeat 7.6 on AKS K8S cluster](https://discuss.elastic.co/t/error-running-metricbeat-7-6-on-aks-k8s-cluster/246608)
**Author:** [@mirii1994](https://discuss.elastic.co/u/mirii1994)\ **Replies:** 5\ **Last updated:** [September 3, 2020, 2:38pm UTC](https://discuss.elastic.co/t/error-running-metricbeat-7-6-on-aks-k8s-cluster/246608 "2020-09-03T14:38:03Z")
I'm trying to run metricbeat 7.6.2 on my AKS cluster (k8s version 1.16), And getting the following errors: 2020-08-27T11:00:03.417Z INFO module/wrapper.go:252 Error fetching data for metricset kubernetes.volume: error … --- ## [Logstash WMI Input Plugin donot work](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404)
**Author:** [@souravtyson](https://discuss.elastic.co/u/souravtyson)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 2:26pm UTC](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404 "2020-09-03T14:26:06Z")
I am new to logstash and i want to gather the performance metrics of the windows system. I have been trying to run the WMI input plugin of logstash in my local setup to gather data, but it is not getting executed .This i… --- ## [Rename fields using a dictionary](https://discuss.elastic.co/t/rename-fields-using-a-dictionary/246413)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 2:20pm UTC](https://discuss.elastic.co/t/rename-fields-using-a-dictionary/246413 "2020-09-03T14:20:05Z")
Hi Folks, is it possible in Logstash to rename fields (received as json) based on a dictionary File? Basically the same function like the translate filter does, but not for values but for field names. Background: At th… --- ## [Winlogbeat drop specific system events](https://discuss.elastic.co/t/winlogbeat-drop-specific-system-events/247275)
**Author:** [@StlAR](https://discuss.elastic.co/u/StlAR)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 1:30pm UTC](https://discuss.elastic.co/t/winlogbeat-drop-specific-system-events/247275 "2020-09-03T13:30:28Z")
I'm looking to collect specific System events. I would like all error and warning events. Only 36880 information events. And finally ignore older than 72 hours. This code checks out but still including information eve… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1825) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1827)