# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1925 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1926 --- ## [Browser security requirements warning when login](https://discuss.elastic.co/t/browser-security-requirements-warning-when-login/241257)
**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 7:51am UTC](https://discuss.elastic.co/t/browser-security-requirements-warning-when-login/241257 "2020-07-16T07:51:02Z")
Hi there, For the last few days I've been getting a warning message in the bottom right corner when I log in or open Kibana saying "Your browser does not meet the security requirements for Kibana." and is stopping me fr… --- ## [Run filebeat, enable module as non-root user](https://discuss.elastic.co/t/run-filebeat-enable-module-as-non-root-user/241407)
**Author:** [@J\_P](https://discuss.elastic.co/u/J_P)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 7:47am UTC](https://discuss.elastic.co/t/run-filebeat-enable-module-as-non-root-user/241407 "2020-07-16T07:47:35Z")
Hey, I would like to edit configuration files, enable modules, run filebeat as a non-root user. Do you have any template what permissions are required? --- ## [Logstash pipeline Elasticsearch filter if conditional not working](https://discuss.elastic.co/t/logstash-pipeline-elasticsearch-filter-if-conditional-not-working/241390)
**Author:** [@tbege](https://discuss.elastic.co/u/tbege)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 7:35am UTC](https://discuss.elastic.co/t/logstash-pipeline-elasticsearch-filter-if-conditional-not-working/241390 "2020-07-16T07:35:53Z")
Hello, I am using the following configuration to sync some data into my Elasticsearch indeces: logstashPipeline: logstash.conf: | input { jdbc { jdbc\_driver\_library =\> "/usr/share/lo… --- ## [Logstash. Export data from Elasticsearch's nested field](https://discuss.elastic.co/t/logstash-export-data-from-elasticsearchs-nested-field/240354)
**Author:** [@Alex\_D](https://discuss.elastic.co/u/Alex_D)\ **Replies:** 7\ **Last updated:** [July 16, 2020, 7:18am UTC](https://discuss.elastic.co/t/logstash-export-data-from-elasticsearchs-nested-field/240354 "2020-07-16T07:18:39Z")
Hi all ! I'am trying to export data from ElasticSearch into csv-file. I installed plugins "logstash-input-elasticsearch", "logstash-output-csv" before. Part of my ES data scheme: mappings: { properties: { … --- ## [Delete all documents from specific ES index, that are not in the logstash feed](https://discuss.elastic.co/t/delete-all-documents-from-specific-es-index-that-are-not-in-the-logstash-feed/241318)
**Author:** [@Deleanu\_Alexandru](https://discuss.elastic.co/u/Deleanu_Alexandru)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 7:15am UTC](https://discuss.elastic.co/t/delete-all-documents-from-specific-es-index-that-are-not-in-the-logstash-feed/241318 "2020-07-16T07:15:48Z")
Hello, I am writing an ES ecommerce product search. I feed data to ES using filebeat and logstash like this: - every 24h I will upload a json file containing all the products in the ES index (all products that I want … --- ## [Error while parsing date with Date filter](https://discuss.elastic.co/t/error-while-parsing-date-with-date-filter/241312)
**Author:** [@Ashish\_kapoor](https://discuss.elastic.co/u/Ashish_kapoor)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 7:11am UTC](https://discuss.elastic.co/t/error-while-parsing-date-with-date-filter/241312 "2020-07-16T07:11:41Z")
Hi, I am trying to parse date "Jan 21, 2020 1:02:24 PM". But I am getting \_dateparsefailure. I am using below conf in filter date { match =\> \["DateTime", "MMM d, yyyy h:mm a"\] target … --- ## [Grok failure, Grok debug OK](https://discuss.elastic.co/t/grok-failure-grok-debug-ok/240693)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 1\ **Last updated:** [July 11, 2020, 6:37pm UTC](https://discuss.elastic.co/t/grok-failure-grok-debug-ok/240693 "2020-07-11T18:37:13Z")
Hello, I am using grok to parse my logs, everything works in grok debugger in Kibana but when I use it in my pipeline it doesn't work!! here is an example of my log: Jul 10 12:21:08 vselk-vyos kernel: \[155099.389432\]… --- ## [Problems in using auditbeat to collect user commands](https://discuss.elastic.co/t/problems-in-using-auditbeat-to-collect-user-commands/241380)
**Author:** [@lovelysoda](https://discuss.elastic.co/u/lovelysoda)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 3:14am UTC](https://discuss.elastic.co/t/problems-in-using-auditbeat-to-collect-user-commands/241380 "2020-07-16T03:14:30Z")
HI， About collecting user commands。 I think of two solutions，If there is any misunderstanding, please correct it。 First，we can use pam\_tty\_audit , configure the system-auth PAM configuration file to enable TTY audt… --- ## [Unable to access ElasticSearch -Standalone Setup using version 6.8.10](https://discuss.elastic.co/t/unable-to-access-elasticsearch-standalone-setup-using-version-6-8-10/239150)
**Author:** [@viuha8](https://discuss.elastic.co/u/viuha8)\ **Replies:** 3\ **Last updated:** [July 16, 2020, 6:47am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-standalone-setup-using-version-6-8-10/239150 "2020-07-16T06:47:22Z")
Hello All, Iam trying to set up a Standalone ElasticSearch instance but not a Cluster One. For that , i have the following in the yml file: bootstrap.memory\_lock: false cluster.name: elasticsearch discovery.zen.min… --- ## [What is Heat Map used for](https://discuss.elastic.co/t/what-is-heat-map-used-for/241391)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 6:39am UTC](https://discuss.elastic.co/t/what-is-heat-map-used-for/241391 "2020-07-16T06:39:12Z")
I have successfully created the kibana heat map but i don't know the usage and meaning of it? --- ## [Logstash-plain.log is not rolling after upgrade to 7.x](https://discuss.elastic.co/t/logstash-plain-log-is-not-rolling-after-upgrade-to-7-x/241393)
**Author:** [@rchung-hku](https://discuss.elastic.co/u/rchung-hku)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 6:33am UTC](https://discuss.elastic.co/t/logstash-plain-log-is-not-rolling-after-upgrade-to-7-x/241393 "2020-07-16T06:33:16Z")
Hi all I was using logstash 6.5.x before, Logstash used to auto rolling the logstash-plain.log everyday to logstash-plain.log-YYYY-MM-DD-1.log.gz. However, after I upgrade the ES and Logstash to 7.6.2, the logstash-pl… --- ## [Mounting a nfs drive for snapshot](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 6:30am UTC](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218 "2020-07-16T06:30:17Z")
Hi all i have a case that i really dont know how to solve. I have a nfs share server that i mount an external drive in, and then i share that specific drive for my elastic cluster to takke snapshot in. The problems is … --- ## [CircuitBreakingException: \[parent\] Data too large, data error](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 6:27am UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690 "2020-07-16T06:27:47Z")
Hi People, I'm facing an issue that keeps crashing our cluster. Luckily it is our acceptance cluster, but still a problem because people use the cluster to log their errors. We use Elasticsearch 6.8 The error that we r… --- ## [Index structure question](https://discuss.elastic.co/t/index-structure-question/241001)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 6:24am UTC](https://discuss.elastic.co/t/index-structure-question/241001 "2020-07-16T06:24:58Z")
Can I have a index with different field name for each document? for example document1 { name: empid: location: pay: } Document2 { fullname: address: city: zip } will it cause any problem in long run? the… --- ## [High OS Cpu usage on 7.7.1](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301)
**Author:** [@chakragod](https://discuss.elastic.co/u/chakragod)\ **Replies:** 5\ **Last updated:** [July 16, 2020, 6:20am UTC](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301 "2020-07-16T06:20:50Z")
Hello, We recently upgraded our ELK stack from v 7.4.0 to 7.7.1 and now we noticed that the OS CPU is 100% on our hot data nodes which do the indexing. The OS CPU is almost always at 100%, the process CPU is close to 45… --- ## [Date format in my sql](https://discuss.elastic.co/t/date-format-in-my-sql/240182)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 6:12am UTC](https://discuss.elastic.co/t/date-format-in-my-sql/240182 "2020-07-16T06:12:02Z")
I have tried to parse data from mysql into elk stack i have date column which has date format 2020-04-01 00:00:01 and 2020-06-25 13:36:24 but when i parse the data the date is not showing in date format its still showing… --- ## [Guidance on increasing cluster.max\_shards\_per\_node](https://discuss.elastic.co/t/guidance-on-increasing-cluster-max-shards-per-node/240978)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 8\ **Last updated:** [July 16, 2020, 6:10am UTC](https://discuss.elastic.co/t/guidance-on-increasing-cluster-max-shards-per-node/240978 "2020-07-16T06:10:12Z")
Hi, We use Elasticsearch(7.x) to store application/system logs and our indices are time based where new index is created everyday. We have a requirment where different indices are created for every log types and also fo… --- ## [GROK Pattern](https://discuss.elastic.co/t/grok-pattern/241291)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 6:08am UTC](https://discuss.elastic.co/t/grok-pattern/241291 "2020-07-16T06:08:39Z")
I try to parse data from ELK to Kibana using logstash. I write some customize grok Pattern using this site https://grokdebug.herokuapp.com/ here the pattern is fine in but when i parse the data from logstash some data is… --- ## [Unable to retrive licence while trying to run logstash](https://discuss.elastic.co/t/unable-to-retrive-licence-while-trying-to-run-logstash/241386)
**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 5:56am UTC](https://discuss.elastic.co/t/unable-to-retrive-licence-while-trying-to-run-logstash/241386 "2020-07-16T05:56:49Z")
Error 2: \[2020-07-09T15:58:54,431\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:message=\>"Unrecognized SSL message, plaintext connection?" --- ## [Getting a bunch of startup errors when trying to run ES 6.3.2 on my mac](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831)
**Author:** [@Nicholas\_Hillier](https://discuss.elastic.co/u/Nicholas_Hillier)\ **Replies:** 5\ **Last updated:** [July 16, 2020, 5:10am UTC](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831 "2020-07-16T05:10:10Z")
I was running, without issue, Elastic Search 7.4.0 which comes bundled with a JDK. However, after downloading and attempting to run 6.3.2, I receive 12 errors with the following message: Message: access denied ("java.l… --- ## [Setting up ElasticSearch Cluster on Windows](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-on-windows/241266)
**Author:** [@Terizian](https://discuss.elastic.co/u/Terizian)\ **Replies:** 7\ **Last updated:** [July 16, 2020, 3:47am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-on-windows/241266 "2020-07-16T03:47:22Z")
I'm trying to set up an ES cluster on three Windows hosts. Those hosts are currently offline, and I cannot extract screenshots. All three nodes have the following elasticsearch.yml: bootstrap.memory\_lock: false cluster… --- ## [Elastic Search Basic Authentication overriding the JWT headers issue while trying to access elastic db](https://discuss.elastic.co/t/elastic-search-basic-authentication-overriding-the-jwt-headers-issue-while-trying-to-access-elastic-db/241381)
**Author:** [@Sai\_Teja\_Singamsetty](https://discuss.elastic.co/u/Sai_Teja_Singamsetty)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 3:43am UTC](https://discuss.elastic.co/t/elastic-search-basic-authentication-overriding-the-jwt-headers-issue-while-trying-to-access-elastic-db/241381 "2020-07-16T03:43:07Z")
I have a Gateway service for checking authentication and authorizations, then a microservice connecting to an elastic database. For a request I am making, I have to pass JWT token in headers to get authenticated at Gatew… --- ## [Master and Ingest node in one? Is my Hot-Warm-Cold concept any good?](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 3\ **Last updated:** [July 16, 2020, 2:01am UTC](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243 "2020-07-16T02:01:42Z")
Hi, for a customer I have set up the following cluster concept: Is it any good or do you think something should be different? In which node should I ingest the data and which one should run kibana? EDIT: Is this a… --- ## [SUGGESTION: Allow CRON based rollover expressions](https://discuss.elastic.co/t/suggestion-allow-cron-based-rollover-expressions/241256)
**Author:** [@Colbert\_Philippe](https://discuss.elastic.co/u/Colbert_Philippe)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 1:58am UTC](https://discuss.elastic.co/t/suggestion-allow-cron-based-rollover-expressions/241256 "2020-07-16T01:58:58Z")
The current rollover feature supports only rollover by age (some length of time) or by file size (size of index exceeds some number or number of entries exceeds some number). In real business applications, rollover are… --- ## ["\_grokparsefailure" for pattern that works on grok debugger](https://discuss.elastic.co/t/grokparsefailure-for-pattern-that-works-on-grok-debugger/241224)
**Author:** [@Khaled3500](https://discuss.elastic.co/u/Khaled3500)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 1:51am UTC](https://discuss.elastic.co/t/grokparsefailure-for-pattern-that-works-on-grok-debugger/241224 "2020-07-16T01:51:21Z")
Hello, I created a grok pattern and it works well on grok debugger but when i add to filter inside the pipeline it pass the restart phase for the service but on kibana it give this tag \["\_grokparsefailure"\] i tried to de… --- ## [Global filter that works accross the different apps](https://discuss.elastic.co/t/global-filter-that-works-accross-the-different-apps/236054)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [June 6, 2020, 6:40pm UTC](https://discuss.elastic.co/t/global-filter-that-works-accross-the-different-apps/236054 "2020-06-06T18:40:24Z")
Hello, Is there a way to set up a filter in kibana that works accross different apps. For example I want to see a the apm transactions in a time frame then when I move to metricbeat dashboard to keep the same selected t… --- ## [How to insert timestamps in applications that use Elastic in their logging architecture?](https://discuss.elastic.co/t/how-to-insert-timestamps-in-applications-that-use-elastic-in-their-logging-architecture/239689)
**Author:** [@TejaV](https://discuss.elastic.co/u/TejaV)\ **Replies:** 7\ **Last updated:** [July 16, 2020, 1:32am UTC](https://discuss.elastic.co/t/how-to-insert-timestamps-in-applications-that-use-elastic-in-their-logging-architecture/239689 "2020-07-16T01:32:30Z")
Hi, I want to understand the proper or the right way to insert timestamps in log messages. Is it good policy to rely on docker or k8s to take care of my log timestamps or is it a good practise to design applications/ins… --- ## [Fail to exclude Post by Term localhost:9200/abc-post-1/post/\_search/?mode=exclude:Sales&q=post\_type:%22jobs%22&size=1000&from=1 #59457](https://discuss.elastic.co/t/fail-to-exclude-post-by-term-localhost-9200-abc-post-1-post-search-mode-exclude-sales-q-post-type-22jobs-22-size-1000-from-1-59457/241374)
**Author:** [@iexpertini](https://discuss.elastic.co/u/iexpertini)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 12:18am UTC](https://discuss.elastic.co/t/fail-to-exclude-post-by-term-localhost-9200-abc-post-1-post-search-mode-exclude-sales-q-post-type-22jobs-22-size-1000-from-1-59457/241374 "2020-07-16T00:18:40Z")
Hi Guys, Need help to filter the ElasticSearch Result. I don't want to display the post that comes from certain post author. We try to filter it by localhost:9200/abc-post-1/post/\_search/?mode=exclude:authorname&q=pos… --- ## [Timeout at scroll](https://discuss.elastic.co/t/timeout-at-scroll/241373)
**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 12:12am UTC](https://discuss.elastic.co/t/timeout-at-scroll/241373 "2020-07-16T00:12:48Z")
I am trying to benchmark on a 3 node cluster using rally. A node is of 7G RAM and 2core. Everything works perfectly until the "running scroll" kicks in. Once the scroll job starts i get error GET https://40.77.60.174:9… --- ## [Client trying to route document to non-existent node?](https://discuss.elastic.co/t/client-trying-to-route-document-to-non-existent-node/240874)
**Author:** [@Dandy](https://discuss.elastic.co/u/Dandy)\ **Replies:** 6\ **Last updated:** [July 15, 2020, 11:58pm UTC](https://discuss.elastic.co/t/client-trying-to-route-document-to-non-existent-node/240874 "2020-07-15T23:58:48Z")
I'm in a bare-metal Kubernetes environment, and I see that documents sent from a fluent instance are being routed from my ingestor client to a non-existent data node: 2020-07-13 00:08:18 +0000 \[warn\]: #0 \[elasticsearch\]… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1924) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1926)