# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1964 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1965 --- ## [Time Based Index Query Performance](https://discuss.elastic.co/t/time-based-index-query-performance/239154)
**Author:** [@Derek\_Gallo](https://discuss.elastic.co/u/Derek_Gallo)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 4:23pm UTC](https://discuss.elastic.co/t/time-based-index-query-performance/239154 "2020-06-29T16:23:33Z")
I was reading through this old thread: https://discuss.elastic.co/t/kibana-search-performance-over-time-based-indices/168617. Based on the dialog in that thread, it seems that the latest versions of ES/Kibana should aut… --- ## [Requirements](https://discuss.elastic.co/t/requirements/235550)
**Author:** [@\_mslo](https://discuss.elastic.co/u/_mslo)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 4:20pm UTC](https://discuss.elastic.co/t/requirements/235550 "2020-06-29T16:20:20Z")
Hi All, I often see questions regarding hardware requirements and I can't find the official Elastic requirements. For instance I cant calculate budget after tests on production. I need to know how many resources I need… --- ## [ERROR instance/beat.go:932 Exiting: No outputs are defined. Please define one under the output section](https://discuss.elastic.co/t/error-instance-beat-go-932-exiting-no-outputs-are-defined-please-define-one-under-the-output-section/239153)
**Author:** [@Lin2020](https://discuss.elastic.co/u/Lin2020)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 3:57pm UTC](https://discuss.elastic.co/t/error-instance-beat-go-932-exiting-no-outputs-are-defined-please-define-one-under-the-output-section/239153 "2020-06-29T15:57:20Z")
"Hi, I am very new to ELK stack, kindly support me. I am currently configuring elasticsearch, Logstash, beats and kibana v7.7.1 to collect logs from windows server, Linux server, network devices and application logs in… --- ## [Using a custom ingest pipeline with a module](https://discuss.elastic.co/t/using-a-custom-ingest-pipeline-with-a-module/239143)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 3:30pm UTC](https://discuss.elastic.co/t/using-a-custom-ingest-pipeline-with-a-module/239143 "2020-06-29T15:30:45Z")
Picking back up on a topic that I shelved a while back: https://discuss.elastic.co/t/apache-httpd-logs-with-comma-delimited-x-forwarded-for-ips/181917 @jsoriano had been helping me and suggested that I try the following… --- ## [\[HELP\]\[ERROR\]\[FILEBEAT\] “cannot retrieve the elasticsearch license from the /\_license endpoint”](https://discuss.elastic.co/t/help-error-filebeat-cannot-retrieve-the-elasticsearch-license-from-the-license-endpoint/239123)
**Author:** [@Vikas\_Rathore](https://discuss.elastic.co/u/Vikas_Rathore)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 3:30pm UTC](https://discuss.elastic.co/t/help-error-filebeat-cannot-retrieve-the-elasticsearch-license-from-the-license-endpoint/239123 "2020-06-29T15:30:05Z")
I had below filebeat-kubernetes.yaml for my ELK where I was using filebeat v 6.6.2 and AWS Elasticsearch version 6.4. Everything was working fine. --- apiVersion: v1 kind: ConfigMap metadata: name: filebeat-config n… --- ## [Help with Logstash s3 output plugin refactoring (Feature Request #215)](https://discuss.elastic.co/t/help-with-logstash-s3-output-plugin-refactoring-feature-request-215/239141)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 3:22pm UTC](https://discuss.elastic.co/t/help-with-logstash-s3-output-plugin-refactoring-feature-request-215/239141 "2020-06-29T15:22:43Z")
I am working on refactoring logstash-output-s3 plugin so that it handles custom filenames (Feature Request #215) and I am running into an issue that has become a blocker for me and that is the refactored plugin honors th… --- ## [How to get client compatibility right with different major elasticsearch versions?](https://discuss.elastic.co/t/how-to-get-client-compatibility-right-with-different-major-elasticsearch-versions/239113)
**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 3:03pm UTC](https://discuss.elastic.co/t/how-to-get-client-compatibility-right-with-different-major-elasticsearch-versions/239113 "2020-06-29T15:03:25Z")
Client libraries are meant to be used against the same major version of the server they are using, but how do you deal with upgrades to a new major version? You can usually load both the old and the new version of the s… --- ## [Will the elasticsearch client work in a ARM64 platform like coral devboard?](https://discuss.elastic.co/t/will-the-elasticsearch-client-work-in-a-arm64-platform-like-coral-devboard/239134)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 3:00pm UTC](https://discuss.elastic.co/t/will-the-elasticsearch-client-work-in-a-arm64-platform-like-coral-devboard/239134 "2020-06-29T15:00:26Z")
Hi I am using the Coral devboard (a ARM64 platform). My project consists of taking a photo and doing inference (AI, image classification) with the devboard. Then I want to send the results directly to Elasticsearch. C… --- ## [How to create intentionally slow query?](https://discuss.elastic.co/t/how-to-create-intentionally-slow-query/239132)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 2:56pm UTC](https://discuss.elastic.co/t/how-to-create-intentionally-slow-query/239132 "2020-06-29T14:56:25Z")
I want to test things with a slow query. How can I create a slow query? I thought it can be done via script GET \_search { "script\_fields": { "AvgTicketPrice": { "script": "sleep(3000);" } } } But it … --- ## [Does aggregations runs in parallel?](https://discuss.elastic.co/t/does-aggregations-runs-in-parallel/237189)
**Author:** [@jessepeixoto](https://discuss.elastic.co/u/jessepeixoto)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 2:48pm UTC](https://discuss.elastic.co/t/does-aggregations-runs-in-parallel/237189 "2020-06-29T14:48:21Z")
Hi everyone, I have one query \_search with four separated nested terms aggregation and filters in the aggregations, this query is retrieving data in about 2 seconds when a specific term is searched. I splitted the four… --- ## [Logstash heap out of memory](https://discuss.elastic.co/t/logstash-heap-out-of-memory/239124)
**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 2:17pm UTC](https://discuss.elastic.co/t/logstash-heap-out-of-memory/239124 "2020-06-29T14:17:58Z")
Hi , I am using logstash-7.7.0 to ingest my data from mongodb to elasticsearch using JDBC input plugin. I have around 17 configuration files which polling data from mongodb and the input section of all configuration fil… --- ## [Wrong timestamp, when trying to convert local time to UTC](https://discuss.elastic.co/t/wrong-timestamp-when-trying-to-convert-local-time-to-utc/239111)
**Author:** [@asmerb](https://discuss.elastic.co/u/asmerb)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 2:21pm UTC](https://discuss.elastic.co/t/wrong-timestamp-when-trying-to-convert-local-time-to-utc/239111 "2020-06-29T14:21:09Z")
Hi everyone, I am using LogStash and ElasticSearch 6.3.1 Currently having an issue where my @timestamp is being shifted by two hours. I am picking up records in logstash that comes from filebeat, the timestamp here is… --- ## [Watcher issues using ranger query for @timestamp with slow processing speed](https://discuss.elastic.co/t/watcher-issues-using-ranger-query-for-timestamp-with-slow-processing-speed/238425)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 2:06pm UTC](https://discuss.elastic.co/t/watcher-issues-using-ranger-query-for-timestamp-with-slow-processing-speed/238425 "2020-06-29T14:06:25Z")
Hi guys, So I was wondering today if there would be a better way to do use watchers. We use the below to search the past 2minutes worth of data for anything that matches our query. "filter": \[ { … --- ## [Logstash integration Kafka: Support, or document support for, setting consumer isolation.level to read\_committed](https://discuss.elastic.co/t/logstash-integration-kafka-support-or-document-support-for-setting-consumer-isolation-level-to-read-committed/239116)
**Author:** [@Tim\_te\_Beek](https://discuss.elastic.co/u/Tim_te_Beek)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 1:39pm UTC](https://discuss.elastic.co/t/logstash-integration-kafka-support-or-document-support-for-setting-consumer-isolation-level-to-read-committed/239116 "2020-06-29T13:39:41Z")
Hi; we're using https://github.com/logstash-plugins/logstash-integration-kafka to transcribe Kafka Avro message fields from Kafka to an Elastic search index for our reports. Recently we noticed that the consumer by defa… --- ## [Monitoring UI can't find cluster data - 2h delay](https://discuss.elastic.co/t/monitoring-ui-cant-find-cluster-data-2h-delay/236055)
**Author:** [@rsustic](https://discuss.elastic.co/u/rsustic)\ **Replies:** 6\ **Last updated:** [June 29, 2020, 1:10pm UTC](https://discuss.elastic.co/t/monitoring-ui-cant-find-cluster-data-2h-delay/236055 "2020-06-29T13:10:24Z")
Hello guys, I am using ELK v6.8.5 and I recently came upon a problem with the Monitoring UI. It work just fine when I set the time to Today as seen in the image below. However, when I change the time to a smaller pe… --- ## [Logstash filter plugins not operating on field](https://discuss.elastic.co/t/logstash-filter-plugins-not-operating-on-field/238870)
**Author:** [@Asinus1223](https://discuss.elastic.co/u/Asinus1223)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 12:54pm UTC](https://discuss.elastic.co/t/logstash-filter-plugins-not-operating-on-field/238870 "2020-06-29T12:54:42Z")
I have been working with the notoriously difficult modsecurity\_audit.log in order to gather some useful statistics from it in order to tweak our Web Application firewall. So far, I've been able to separate the different… --- ## [Question about building a MAP Visualization Object](https://discuss.elastic.co/t/question-about-building-a-map-visualization-object/239018)
**Author:** [@rafaell2](https://discuss.elastic.co/u/rafaell2)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 12:44pm UTC](https://discuss.elastic.co/t/question-about-building-a-map-visualization-object/239018 "2020-06-29T12:44:42Z")
Hi, new on this so apologize if i am not asking the right question here. I am trying to add a MAP LAYER (EMS Boundaries type) for World Countries (using Kibana 7.8) by using my index built through logstash Jdbc Oracle Da… --- ## [Can't setup active-directory auth](https://discuss.elastic.co/t/cant-setup-active-directory-auth/239082)
**Author:** [@parrabol](https://discuss.elastic.co/u/parrabol)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 9:08am UTC](https://discuss.elastic.co/t/cant-setup-active-directory-auth/239082 "2020-06-29T09:08:16Z")
Hi all. I'm stuck with this active-directory auth to kibana via AD creds. When I'm trying to enable auth in kibana, after login i got a message - {"statusCode":403,"error":"Forbidden","message":"Forbidden"}. I added my… --- ## [Learning ES and Mapper Parsing Exception](https://discuss.elastic.co/t/learning-es-and-mapper-parsing-exception/239044)
**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 12:10pm UTC](https://discuss.elastic.co/t/learning-es-and-mapper-parsing-exception/239044 "2020-06-29T12:10:09Z")
Hi to all, I'm learning ES. I have ES-7.8 in a docker container and started to play around with it. I have created mappings and loaded data already. Now, I'm following a course and I'm trying to create a mapping before … --- ## [Elasticsearch does not start because of a graylog-server error](https://discuss.elastic.co/t/elasticsearch-does-not-start-because-of-a-graylog-server-error/237495)
**Author:** [@uek](https://discuss.elastic.co/u/uek)\ **Replies:** 13\ **Last updated:** [June 29, 2020, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-start-because-of-a-graylog-server-error/237495 "2020-06-29T12:05:13Z")
Hello there, my elasticsearch-oss I would like to use in combination with prometheus and grafana does not start on my centos8 machine because of theese errors : Automatic restarting of the unit graylog-server.service… --- ## [Why doesn’t change file name of source in ~/data/registry/filebeat/data.json?](https://discuss.elastic.co/t/why-doesn-t-change-file-name-of-source-in-data-registry-filebeat-data-json/239077)
**Author:** [@seungdols](https://discuss.elastic.co/u/seungdols)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 8:48am UTC](https://discuss.elastic.co/t/why-doesn-t-change-file-name-of-source-in-data-registry-filebeat-data-json/239077 "2020-06-29T08:48:14Z")
Hello. There are a few questions about filebeat 7.6.0. While writing the filebeat, the file bit pattern is used as shown below. -/seungdols/logs/node/server/server.log -/seungdols/logs/node/server/server.log.\* And wh… --- ## [How to scale out logstash when using output plugin websockets](https://discuss.elastic.co/t/how-to-scale-out-logstash-when-using-output-plugin-websockets/239106)
**Author:** [@Satish\_Kumar5](https://discuss.elastic.co/u/Satish_Kumar5)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 11:45am UTC](https://discuss.elastic.co/t/how-to-scale-out-logstash-when-using-output-plugin-websockets/239106 "2020-06-29T11:45:40Z")
Hi, when using logstash output plugin for websockets, my understanding is the output plugin works as a websocket server, and sending data to websocket clients . my question is how to ensure scaling of the websockets if… --- ## [How to pass High CPU Process Name in Kibana Alert Action](https://discuss.elastic.co/t/how-to-pass-high-cpu-process-name-in-kibana-alert-action/239105)
**Author:** [@Ranjan\_Bansal](https://discuss.elastic.co/u/Ranjan_Bansal)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 11:36am UTC](https://discuss.elastic.co/t/how-to-pass-high-cpu-process-name-in-kibana-alert-action/239105 "2020-06-29T11:36:44Z")
Hi , As part of preventive monitoring through Kibana 7.7, we triggered an alert and used action WebHook. We were able to send Server Name, which triggered the alert, in the Body. We need to pass the process name as well… --- ## [POST method to create role and grant privilege in spaces](https://discuss.elastic.co/t/post-method-to-create-role-and-grant-privilege-in-spaces/237995)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 11:05am UTC](https://discuss.elastic.co/t/post-method-to-create-role-and-grant-privilege-in-spaces/237995 "2020-06-29T11:05:13Z")
Hi, I am trying to figure out how to user DevTools to create role and grant privilege to spaces. I tried with below codes but it says failed to parse role \[QA\]. unexpected field \[spaces\]. May i know where can i find the… --- ## [CentOs vs Ubuntu for elastic](https://discuss.elastic.co/t/centos-vs-ubuntu-for-elastic/238865)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 10:53am UTC](https://discuss.elastic.co/t/centos-vs-ubuntu-for-elastic/238865 "2020-06-29T10:53:27Z")
Hi Support, I just need to confirm that, is there any difference / any issue/performance-related issue between CentOs - 7 and Ubuntu 18.04 LTS. UAT Testing was on CentOs, now the Production setup is in Ubuntu. So will… --- ## [No error thrown to RestClient on MappingParsingException](https://discuss.elastic.co/t/no-error-thrown-to-restclient-on-mappingparsingexception/239093)
**Author:** [@dancerjohn](https://discuss.elastic.co/u/dancerjohn)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 10:46am UTC](https://discuss.elastic.co/t/no-error-thrown-to-restclient-on-mappingparsingexception/239093 "2020-06-29T10:46:46Z")
I am seeing MappingParsingException logged in the elasticsearch log and I find that it is correct. My code has a bug for a field. The issue is that no error was thrown to my RestHighLevelClient. I want my application to … --- ## [Logstash websocket input plugin throwing NoMethodError exception](https://discuss.elastic.co/t/logstash-websocket-input-plugin-throwing-nomethoderror-exception/237081)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-websocket-input-plugin-throwing-nomethoderror-exception/237081 "2020-06-29T10:02:48Z")
Hi all, I am having some troubles using the Logstash websocket input plugin. I need Logstash to read a stream of events from a websocket endpoint and thus I am trying the following pipeline configuration input { webs… --- ## [Params per terms aggreations](https://discuss.elastic.co/t/params-per-terms-aggreations/239086)
**Author:** [@Eftikhar\_Abu\_Libdeh](https://discuss.elastic.co/u/Eftikhar_Abu_Libdeh)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 9:45am UTC](https://discuss.elastic.co/t/params-per-terms-aggreations/239086 "2020-06-29T09:45:49Z")
I have terms aggregation just after date histogram aggregation, each sub-bucket should apply filter on extra params based on nested bucket keys. since I can't access the bucket keys I just make it as array of aggregati… --- ## [Elastic Search Query on Two Documents](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 9\ **Last updated:** [June 29, 2020, 9:40am UTC](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479 "2020-06-29T09:40:37Z")
Hi, I have created the index PUT ten2 { "mappings": { "documents": { "properties": { "title": { "type": "text", "fields": { "raw": { "type": "keyword" } } }, "publish… --- ## [Parsing S3 bucket into Logstash](https://discuss.elastic.co/t/parsing-s3-bucket-into-logstash/237996)
**Author:** [@SunilYadav](https://discuss.elastic.co/u/SunilYadav)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 9:30am UTC](https://discuss.elastic.co/t/parsing-s3-bucket-into-logstash/237996 "2020-06-29T09:30:47Z")
Hi Team, when I am trying to use the S3 input plugin. S3 location:s3://bucket123/DAG/TASK/2020-04-26T16:01:00+00:00/1.log ''' The resulting error is : S3 input: Unable to download remote file {:remote\_key=\>"bucket12… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1963) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1965)