# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1936 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1937 --- ## [Logstash snmp input module gets stuck](https://discuss.elastic.co/t/logstash-snmp-input-module-gets-stuck/240533)
**Author:** [@motox73](https://discuss.elastic.co/u/motox73)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 1:25pm UTC](https://discuss.elastic.co/t/logstash-snmp-input-module-gets-stuck/240533 "2020-07-09T13:25:32Z")
Hello, I'm trying to poll SNMP counters ( from Meraki ) using logstash SNMP input module. Sometimes the input plugin gets stuck for no apparent reason. Eventually the logs show logstash attempting a shutdown, but it nev… --- ## [Index name changed after upgrade to 7.8](https://discuss.elastic.co/t/index-name-changed-after-upgrade-to-7-8/240626)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 10:54pm UTC](https://discuss.elastic.co/t/index-name-changed-after-upgrade-to-7-8/240626 "2020-07-12T22:54:27Z")
I recently upgraded a cluster from 6.8 to 7.8. I had to use the kibana upgrade assistant to reindex all four of my indexes. Well now those indexes have a different name. It was tc\_employees but now it is reindexed-v6-tc\_… --- ## [Elasticsearch query multiple logs](https://discuss.elastic.co/t/elasticsearch-query-multiple-logs/240702)
**Author:** [@Tedd](https://discuss.elastic.co/u/Tedd)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 10:53pm UTC](https://discuss.elastic.co/t/elasticsearch-query-multiple-logs/240702 "2020-07-12T22:53:21Z")
Hi I am pretty new with Elastic search. We gather WIndows AD Auth logs from DomainConrollers. We want to set up a watcher to query 10 user failed authentication attempts in 2 mins. Attempt count will be 1x. Can you plea… --- ## [How to configure elasticsearch (in a PC) to receive connections from a devboard?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-in-a-pc-to-receive-connections-from-a-devboard/240567)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 4:33pm UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-in-a-pc-to-receive-connections-from-a-devboard/240567 "2020-07-09T16:33:28Z")
This question is related to this other one: I installed a elasticsearch python client in Google Coral devboard (Python Elasticsearch Client — Elasticsearch 8.0.0 documentation) I want to establish the communication be… --- ## [Elasticsearch Node.js client 7.6.1 ConnectionError: connect EADDRNOTAVAIL](https://discuss.elastic.co/t/elasticsearch-node-js-client-7-6-1-connectionerror-connect-eaddrnotavail/240753)
**Author:** [@yman](https://discuss.elastic.co/u/yman)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 7:40pm UTC](https://discuss.elastic.co/t/elasticsearch-node-js-client-7-6-1-connectionerror-connect-eaddrnotavail/240753 "2020-07-10T19:40:42Z")
Hi, I am running into an interesting issue with a docker container running in kubernetes We are running a Node application that is using the client found here https://www.npmjs.com/package/@elastic/elasticsearch versio… --- ## [Help with drop\_event](https://discuss.elastic.co/t/help-with-drop-event/240763)
**Author:** [@nwed](https://discuss.elastic.co/u/nwed)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 9:21pm UTC](https://discuss.elastic.co/t/help-with-drop-event/240763 "2020-07-10T21:21:33Z")
We are just starting to play around with drop\_event filtering. Auditd rules are not great at filtering so drop\_event is going to serve us well. Right now we are stuck with a nesting example and want to know what is poss… --- ## [Configuring Elastic to use SSL on Windows](https://discuss.elastic.co/t/configuring-elastic-to-use-ssl-on-windows/240787)
**Author:** [@Beefstew](https://discuss.elastic.co/u/Beefstew)\ **Replies:** 0\ **Last updated:** [July 11, 2020, 7:11am UTC](https://discuss.elastic.co/t/configuring-elastic-to-use-ssl-on-windows/240787 "2020-07-11T07:11:12Z")
Hi there, I'm totally new to Elk and am from a windows background which makes this doubly hard for me so I was hoping anyone could let me know of any good doco for configuring SSL on Elastic 7.6.2 on Windows server 2016… --- ## [Getting error while installing elastic search on windows](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search-on-windows/240785)
**Author:** [@vedantmehra18](https://discuss.elastic.co/u/vedantmehra18)\ **Replies:** 0\ **Last updated:** [July 11, 2020, 6:53am UTC](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search-on-windows/240785 "2020-07-11T06:53:48Z")
C:\\Elastic\_Stack\\elasticsearch-7.8.0-windows-x86\_64\\elasticsearch-7.8.0\\bin\>elasticsearch.bat future versions of Elasticsearch will require Java 11; your Java version from \[C:\\Program Files\\Java\\jdk1.8.0\_144\\jre\] does n… --- ## [Having difficulty having clients send data into dockerized elasticsearch](https://discuss.elastic.co/t/having-difficulty-having-clients-send-data-into-dockerized-elasticsearch/240867)
**Author:** [@timeand](https://discuss.elastic.co/u/timeand)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 10:09pm UTC](https://discuss.elastic.co/t/having-difficulty-having-clients-send-data-into-dockerized-elasticsearch/240867 "2020-07-12T22:09:35Z")
I am trying to learn the elastic stack at home with a few different systems. What I am ultimately trying to apply/monitor logs for the following: ZFS Disk stats (smartmontools) rclone Docker (nginx, plex, etc - but not… --- ## [There are continuous failures due to Http:500 internal server error, http:503 service unavailable and timeouts](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678)
**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\ **Replies:** 4\ **Last updated:** [July 12, 2020, 10:37pm UTC](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678 "2020-07-12T22:37:29Z")
There are continuous failures while running 5x load test due to Http:500 internal server error, http:503 service unavailable and timeouts in rest api In logs, we do not find any issue. 3 nodes Memory: 16 GB vCpu : 4 --- ## [Kibana won't start after server accidently restart](https://discuss.elastic.co/t/kibana-wont-start-after-server-accidently-restart/240438)
**Author:** [@anggara88](https://discuss.elastic.co/u/anggara88)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 10:17pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-server-accidently-restart/240438 "2020-07-12T22:17:48Z")
hello, I use elk-docker to develop elasticsearch kibana in my office. it worked well. but after the server was accidently restart yesterday, the kibana can't show anymore even my elasticsearch work well and can be acce… --- ## [AuthorizationException with python API to remote server](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514)
**Author:** [@yuv\_c](https://discuss.elastic.co/u/yuv_c)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 10:16pm UTC](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514 "2020-07-12T22:16:07Z")
I am trying to use the elasticsearch python API but I get an AuthorizationException every time I run the query. Here is the code: host = "https:/foo.com/es" client = Elasticsearch(host, api\_key='...MY\_API\_KEY...) re… --- ## ['preserve\_existing' documentation update](https://discuss.elastic.co/t/preserve-existing-documentation-update/240836)
**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 8:00pm UTC](https://discuss.elastic.co/t/preserve-existing-documentation-update/240836 "2020-07-12T20:00:31Z")
Hello. Topic: I have a proposal regarding one piece of documentation: Please check my PR: Update update-settings.asciidoc by tworogue · Pull Request #1 · tworogue/elasticsearch · GitHub Do you agree with it? Some m… --- ## [How to combine/pair multiple events into single event (consider as a single transaction) based on a rule](https://discuss.elastic.co/t/how-to-combine-pair-multiple-events-into-single-event-consider-as-a-single-transaction-based-on-a-rule/240862)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 7:56pm UTC](https://discuss.elastic.co/t/how-to-combine-pair-multiple-events-into-single-event-consider-as-a-single-transaction-based-on-a-rule/240862 "2020-07-12T19:56:06Z")
Let's consider below sample events, \_index:windows\_security empId:12345 action:create time:0900 \_index:windows\_security empId:12345 action:delete time:0910 \_index:windows\_security empId:12345 action:created time:150… --- ## [Efficient document structure](https://discuss.elastic.co/t/efficient-document-structure/240760)
**Author:** [@maxheyer](https://discuss.elastic.co/u/maxheyer)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 7:11pm UTC](https://discuss.elastic.co/t/efficient-document-structure/240760 "2020-07-12T19:11:19Z")
Hello, we want to use elastic search for e-commerce statistics. In our web view we have the possibility to filter products by sales, attributes like colors, categories, full text search etc. The result is a table of pr… --- ## [Painless script\_field returns just that field in query result?](https://discuss.elastic.co/t/painless-script-field-returns-just-that-field-in-query-result/240852)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 7:07pm UTC](https://discuss.elastic.co/t/painless-script-field-returns-just-that-field-in-query-result/240852 "2020-07-12T19:07:08Z")
I don't see any mention in the docs about this. When using a script\_field, only that field is returned in the results, not with the rest of the document, I have to add includes to get the rest of the fields? GET data/… --- ## [Elasticsearch nodes are visible to each other in GCE, but won't form a cluster](https://discuss.elastic.co/t/elasticsearch-nodes-are-visible-to-each-other-in-gce-but-wont-form-a-cluster/240770)
**Author:** [@yagodorea](https://discuss.elastic.co/u/yagodorea)\ **Replies:** 6\ **Last updated:** [July 12, 2020, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-are-visible-to-each-other-in-gce-but-wont-form-a-cluster/240770 "2020-07-12T19:00:58Z")
I'm trying to set up a simple cluster using 2 GCE VMs (test-elk1 and test-elk2) from inside docker containers. I've setup firewall rules so they are completely visible to each other, so performing: curl http://\ **Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 6\ **Last updated:** [July 12, 2020, 4:16pm UTC](https://discuss.elastic.co/t/convert-multiline-csv-data-to-a-single-line-csv-in-filter/240741 "2020-07-12T16:16:24Z") Hi All I have a csv file, which gives me response in multiline csv, i need convert that in a single line csv, Here is the data "header1","header2","header3" "col1row1","col2row1","col3row1" "col1row2","col2row2","col3… --- ## [Custom Scripted Field Requirement](https://discuss.elastic.co/t/custom-scripted-field-requirement/240841)
**Author:** [@Rebin](https://discuss.elastic.co/u/Rebin)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 1:37pm UTC](https://discuss.elastic.co/t/custom-scripted-field-requirement/240841 "2020-07-12T13:37:27Z")
Dear Team, I have a requirement to capture hourly count. Basically i'm pulling the data from database through logstash and storing in elastic search and want to prepare dashboard in Kibana. The count is pulled in such … --- ## [Logstash manipulate json object before indexing to ES](https://discuss.elastic.co/t/logstash-manipulate-json-object-before-indexing-to-es/240721)
**Author:** [@davehatma](https://discuss.elastic.co/u/davehatma)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/logstash-manipulate-json-object-before-indexing-to-es/240721 "2020-07-12T08:46:10Z")
A Kafka input plugin is getting messages in json format and being parsed by the json filter. One of the root keys -- transaction\_details -- can contain a very large number of fields that we don't want to flatten into d… --- ## [Master election - got Failed To Commit Cluster State Exception](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 8:22am UTC](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821 "2020-07-12T08:22:20Z")
We are working with Elastic 7.2.1. Elastic master (node-2) had a long GC pause. \[2020-06-30T07:30:11.778+0000\]\[3665\]\[gc \] GC(248) Pause Young (Allocation Failure) 222M-\>86M(494M) 32547.255ms \[2020-06-30T07:30:11.778+00… --- ## [Failed installing 'elasticsearch-service-x64' service on brand new installation](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service-on-brand-new-installation/240679)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 7:48am UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service-on-brand-new-installation/240679 "2020-07-12T07:48:04Z")
Hi, I am trying to install elastic as a service. Situation: 3 Nodes. 3 New installations of Elasticsearch 7.7.1. YMLcluster.name: ServiceTest node.name: node1 node.master: true network.host: IPofNode1 http.host: 0.0… --- ## [Run logstash as service giving error](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 6:17am UTC](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461 "2020-07-12T06:17:42Z")
Hi All, I am able to run logstash as command line , but when I try to run it as a services . It is getting restarted after every 6 seconds and no data is getting loaded to elasticsearch I have placed my conf file in et… --- ## [Unable to execute mtermvectors elasticsearch query from AWS EMR cluster using Spark](https://discuss.elastic.co/t/unable-to-execute-mtermvectors-elasticsearch-query-from-aws-emr-cluster-using-spark/240819)
**Author:** [@Salil\_Surendran](https://discuss.elastic.co/u/Salil_Surendran)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 5:22am UTC](https://discuss.elastic.co/t/unable-to-execute-mtermvectors-elasticsearch-query-from-aws-emr-cluster-using-spark/240819 "2020-07-12T05:22:10Z")
Hello, I am trying to execute this elasticsearch query via spark: POST /aa6/\_mtermvectors { "ids": \[ "ABC", "XYA", "RTE" \], "parameters": { "fields": \[ … --- ## [S3 Repository plugin works on Mac/brew but not Ubuntu/apt-get](https://discuss.elastic.co/t/s3-repository-plugin-works-on-mac-brew-but-not-ubuntu-apt-get/240766)
**Author:** [@mooreniemi](https://discuss.elastic.co/u/mooreniemi)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 2:12am UTC](https://discuss.elastic.co/t/s3-repository-plugin-works-on-mac-brew-but-not-ubuntu-apt-get/240766 "2020-07-12T02:12:41Z")
I'm using ES 6.8. I have a snapshot in an S3 bucket. On Mac, using brew installed ES, I was able to successfully restore the snapshot onto my local machine. But I am not able to do the same on Ubuntu. Additionally, the e… --- ## [Logstash node stats output --](https://discuss.elastic.co/t/logstash-node-stats-output/240793)
**Author:** [@SNJY](https://discuss.elastic.co/u/SNJY)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 1:03am UTC](https://discuss.elastic.co/t/logstash-node-stats-output/240793 "2020-07-12T01:03:35Z")
Hi, Logstash node stats API "curl localhost:9600/\_node/stats" output shows pipeine id's -- e.g. below - "id" : "abb168b315455ae7945381a4132c04afd8642d0e819883168a76566db277b94e" It seems that logstash generates random… --- ## [Is there any way to jump to the linked url when the data is clicked in vega-lite?](https://discuss.elastic.co/t/is-there-any-way-to-jump-to-the-linked-url-when-the-data-is-clicked-in-vega-lite/239605)
**Author:** [@c5101010](https://discuss.elastic.co/u/c5101010)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 12:07am UTC](https://discuss.elastic.co/t/is-there-any-way-to-jump-to-the-linked-url-when-the-data-is-clicked-in-vega-lite/239605 "2020-07-12T00:07:38Z")
Hi, I want to do I wrote my vega code as follows. However, I can not jump to the linked URL when I clicked the scatter plot. I would appreciate it if you could give me a hint to solve this. { $schema: ht… --- ## [What are the ways we can do to reduce the high utilization observe in winlogbeat agent](https://discuss.elastic.co/t/what-are-the-ways-we-can-do-to-reduce-the-high-utilization-observe-in-winlogbeat-agent/234317)
**Author:** [@realyn\_elastic](https://discuss.elastic.co/u/realyn_elastic)\ **Replies:** 1\ **Last updated:** [July 11, 2020, 11:36pm UTC](https://discuss.elastic.co/t/what-are-the-ways-we-can-do-to-reduce-the-high-utilization-observe-in-winlogbeat-agent/234317 "2020-07-11T23:36:47Z")
what are the ways we can do to reduce the high utilization observe in winlogbeat agent --- ## [SIEM, Winlogbeat and Windows Auditing](https://discuss.elastic.co/t/siem-winlogbeat-and-windows-auditing/234555)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 1\ **Last updated:** [July 11, 2020, 11:31pm UTC](https://discuss.elastic.co/t/siem-winlogbeat-and-windows-auditing/234555 "2020-07-11T23:31:48Z")
I'm testing the SIEM solution along with Winlogbeat to send event logs and sysmon logs. When viewing the premade alerts, dashboards and more I feel like certain events should be there but do not show. For example starti… --- ## [In a 3 node Cluster, having 2 data nodes and 1 node without data but this node having much less CPU and RAM resources, will compromise my overall performance?](https://discuss.elastic.co/t/in-a-3-node-cluster-having-2-data-nodes-and-1-node-without-data-but-this-node-having-much-less-cpu-and-ram-resources-will-compromise-my-overall-performance/240775)
**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\ **Replies:** 3\ **Last updated:** [July 11, 2020, 5:31pm UTC](https://discuss.elastic.co/t/in-a-3-node-cluster-having-2-data-nodes-and-1-node-without-data-but-this-node-having-much-less-cpu-and-ram-resources-will-compromise-my-overall-performance/240775 "2020-07-11T17:31:40Z")
In a 3 node Cluster, having 2 data nodes and 1 node without data but this node having much less CPU and RAM resources, will compromise my overall performance ? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1935) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1937)