# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1973 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1974 --- ## [Ingest Node capability in heavy load of docs](https://discuss.elastic.co/t/ingest-node-capability-in-heavy-load-of-docs/238038)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 8:11am UTC](https://discuss.elastic.co/t/ingest-node-capability-in-heavy-load-of-docs/238038 "2020-06-25T08:11:29Z")
Hi Team, I want to know capability of Ingest Node to handle heavy load of docs. Here we have 12,00,000 docs per minute will be index through Ingest Pipeline . Will Ingest Node handle this load ? Please suggest. Than… --- ## [Metricbeat Jolokia Module Not Publishing Custom MBean Data](https://discuss.elastic.co/t/metricbeat-jolokia-module-not-publishing-custom-mbean-data/238337)
**Author:** [@ronjonsilver](https://discuss.elastic.co/u/ronjonsilver)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 7:44am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-module-not-publishing-custom-mbean-data/238337 "2020-06-25T07:44:47Z")
Hello, I have been trying to get a field from a custom bean published to Kibana but it seems like jolokia is ignoring the jmx mapping for the custom bean field. Here is my metricbeat.yml: metricbeat.modules: … --- ## [Spark ES SSL handshake issue](https://discuss.elastic.co/t/spark-es-ssl-handshake-issue/238602)
**Author:** [@shirley](https://discuss.elastic.co/u/shirley)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 6:14am UTC](https://discuss.elastic.co/t/spark-es-ssl-handshake-issue/238602 "2020-06-25T06:14:38Z")
Issue description I have Elasticsearch 6.8 enable XPack SSL. Both trust and client certificate are generated and verified through java elastic search RESTAPI client. However, when I try same trust/client certificate con… --- ## [Is the X-Pack free for user authentication?](https://discuss.elastic.co/t/is-the-x-pack-free-for-user-authentication/238605)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 7:18am UTC](https://discuss.elastic.co/t/is-the-x-pack-free-for-user-authentication/238605 "2020-06-25T07:18:39Z")
I just need a feature to do a user authentication with password for my ELK. Is this feature completely free now? --- ## [Kibana Field - Objects in Array are not well supported](https://discuss.elastic.co/t/kibana-field-objects-in-array-are-not-well-supported/237475)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 7:17am UTC](https://discuss.elastic.co/t/kibana-field-objects-in-array-are-not-well-supported/237475 "2020-06-25T07:17:47Z")
Hello all, Hope someone could assist me in diagnosing this issue I have been trying to resolve for a while now but got no where. I am using kibana version 6.X. When i view my azure logs from Kibana, I am seeing some fi… --- ## [Querying with more than 1024 filters using an alias](https://discuss.elastic.co/t/querying-with-more-than-1024-filters-using-an-alias/238608)
**Author:** [@111302](https://discuss.elastic.co/u/111302)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 6:46am UTC](https://discuss.elastic.co/t/querying-with-more-than-1024-filters-using-an-alias/238608 "2020-06-25T06:46:35Z")
Hi guys I'm performance-testing queries with a lot of filters. Since the configured value of max filters is 1024, I've increased indices.query.bool.max\_clause\_count to 10,000. So, regular queries are working fine (tak… --- ## [Kibana Visualization-New field](https://discuss.elastic.co/t/kibana-visualization-new-field/237895)
**Author:** [@ali.rauf](https://discuss.elastic.co/u/ali.rauf)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 6:39am UTC](https://discuss.elastic.co/t/kibana-visualization-new-field/237895 "2020-06-25T06:39:01Z")
hi all. I have defined a new field by the grok filter and i see it in the Discovery section, but i don't see it in the field list for visualization by a linear chart and sum aggregation function. how can i resolved it? … --- ## [Unable to login via oidc azure](https://discuss.elastic.co/t/unable-to-login-via-oidc-azure/238582)
**Author:** [@clonelab](https://discuss.elastic.co/u/clonelab)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/unable-to-login-via-oidc-azure/238582 "2020-06-25T06:35:13Z")
Hi, I am having an issue with azuread oidc authentication to my elasticsearch. It works well but when it required to /api/security/v1/oidc? with the code it seems to have an issue and displays this error in the UI. {"s… --- ## [Open source commercial usage](https://discuss.elastic.co/t/open-source-commercial-usage/238566)
**Author:** [@Elastan](https://discuss.elastic.co/u/Elastan)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 6:21am UTC](https://discuss.elastic.co/t/open-source-commercial-usage/238566 "2020-06-25T06:21:49Z")
Is this free fully to use open source version or have any license limitations business (not talking about technicals and lack of features) --- ## [Does the Elastic Enterprise license count K8s node memory or container memory?](https://discuss.elastic.co/t/does-the-elastic-enterprise-license-count-k8s-node-memory-or-container-memory/238458)
**Author:** [@Anton\_H](https://discuss.elastic.co/u/Anton_H)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 6:20am UTC](https://discuss.elastic.co/t/does-the-elastic-enterprise-license-count-k8s-node-memory-or-container-memory/238458 "2020-06-25T06:20:02Z")
Hi, We have a Elastic Enterprise license and want to use K8s. Does de license count the node memory for licensing or the container memory for licensing? Tnx! --- ## [How much memory does single elastic search instance need for 200MB of document?](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217)
**Author:** [@shahidcodes](https://discuss.elastic.co/u/shahidcodes)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 6:01am UTC](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217 "2020-06-25T06:01:10Z")
Hi, I am running a single elastic search instance, the ram consumption is always above 90% of total 4GB ram. Does elasticsearch needs alot of ram by default? --- ## [What was the name of the Kibana feature that allowed searching repo code](https://discuss.elastic.co/t/what-was-the-name-of-the-kibana-feature-that-allowed-searching-repo-code/238598)
**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 5:55am UTC](https://discuss.elastic.co/t/what-was-the-name-of-the-kibana-feature-that-allowed-searching-repo-code/238598 "2020-06-25T05:55:00Z")
Greetings, Last year I recalled reading about a kibana feature that allowed searching repository code bases. I believe the feature may have been removed or deferred to a later date but I cannot recall the name of the fe… --- ## [Audit logging in elasticsearch](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 5:45am UTC](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550 "2020-06-25T05:45:16Z")
Hi, I'm trying to enable audit loging in elasticsearch, i have a 3 node cluster and on each elasticsearch.yml i added: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_host\_address: true Then … --- ## [Elasticsearch data type](https://discuss.elastic.co/t/elasticsearch-data-type/238517)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch-data-type/238517 "2020-06-25T05:40:27Z")
I have an index named users and i have a provided a field called user\_id which is int type.The question is it is accepting floating value and string value.This is the index i have created PUT /users { "mappings" : { … --- ## [Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 69](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253)
**Author:** [@priyashree](https://discuss.elastic.co/u/priyashree)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 4:38am UTC](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253 "2020-06-25T04:38:14Z")
I have 2 logstash machines and both the machines shows the following error in /var/log/logstash. \[2020-06-23T12:12:08,031\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\] \[local: logstash\_machine\_ip:5044, remote: filebeat… --- ## [java.lang.IllegalStateException: Unable to access 'path.data' (/var/lib/elasticsearch)](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456)
**Author:** [@natarajjk](https://discuss.elastic.co/u/natarajjk)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 4:35am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456 "2020-06-25T04:35:54Z")
Can some let me know why i am getting this error on ELK 7.8.0 Jun 24 08:59:02 nagiosclient.sg.com systemd\[1\]: Starting Elasticsearch... Jun 24 08:59:06 nagiosclient.sg.com systemd-entrypoint\[11107\]: uncaught exception … --- ## [Configure tcp input to accept syslog over ssl](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853)
**Author:** [@danona45](https://discuss.elastic.co/u/danona45)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 4:30am UTC](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853 "2020-06-25T04:30:52Z")
This is my input config, but I don't get anything passed input in my pipeline or I would see something in my ruby debug output. No errors in the log. \> tcp { \> type =\> "syslog" \> port =\> "4000" \> … --- ## [How to filter for queries?](https://discuss.elastic.co/t/how-to-filter-for-queries/238592)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 3:53am UTC](https://discuss.elastic.co/t/how-to-filter-for-queries/238592 "2020-06-25T03:53:53Z")
Hello, I followed this knowledge article - https://www.elastic.co/blog/monitoring-the-search-queries Not using logstash filtering, and I am getting all records from packetbeat. How can I recognise the query records? T… --- ## [Logstash shuts down after setting offset for kafka partition](https://discuss.elastic.co/t/logstash-shuts-down-after-setting-offset-for-kafka-partition/237233)
**Author:** [@Aliasgar\_Choolawala](https://discuss.elastic.co/u/Aliasgar_Choolawala)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 3:43am UTC](https://discuss.elastic.co/t/logstash-shuts-down-after-setting-offset-for-kafka-partition/237233 "2020-06-25T03:43:54Z")
this is logstash.conf input { kafka { bootstrap\_servers =\> "kafka-app-logs:9092" topics =\> \["pm2-logs"\] codec =\> multiline { pattern =\> "^\\s" what =\> "previous" } } } filter { mutate {… --- ## [Exiting: data path already locked by another beat (packetbeat)](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-packetbeat/238368)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 3:40am UTC](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-packetbeat/238368 "2020-06-25T03:40:48Z")
Hello Just installed and configured packetbeat (7.6.2) on the elastic server (7.6.2). filebeat and metricbeat also run on the same server(s), and of course elasticsearch. packetbeat is not sending any data, so I wante… --- ## [How to get a continuous transform to write to multiple indexes](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 3:35am UTC](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391 "2020-06-25T03:35:11Z")
When I load my data through logstash I specify an index name pattern, to split the index up by time. I now have a continuous transform running, grouping by a 1 hour date histogram, against that data. Problem is it's wr… --- ## [How to build Beats for ArchLinux ARM](https://discuss.elastic.co/t/how-to-build-beats-for-archlinux-arm/238588)
**Author:** [@bloke](https://discuss.elastic.co/u/bloke)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 2:53am UTC](https://discuss.elastic.co/t/how-to-build-beats-for-archlinux-arm/238588 "2020-06-25T02:53:13Z")
Hi, If you know how to use ALARM (ArchLinux ARM) this will help you build beats for the distro. For technical reasons the package seems excluded on the distro. I have also done some reading on the discuss site and mostl… --- ## [Complex Elastic Search Query](https://discuss.elastic.co/t/complex-elastic-search-query/238587)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 2:35am UTC](https://discuss.elastic.co/t/complex-elastic-search-query/238587 "2020-06-25T02:35:46Z")
I have the following documents in the elastic search index. \[{ "\_index": "ten2", "\_type": "documents", "\_id": "c323c2244a4a4c22\_en-us", "\_source": { "publish\_details": \[{ "environment": "603fe91adbdcff66… --- ## [Kibana domain whitelist](https://discuss.elastic.co/t/kibana-domain-whitelist/237671)
**Author:** [@mqcc](https://discuss.elastic.co/u/mqcc)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 2:02am UTC](https://discuss.elastic.co/t/kibana-domain-whitelist/237671 "2020-06-25T02:02:41Z")
I need to configure kibana with microsoft cloud app which acts as a proxy. When I first open kibana it takes a while for anything to load and then comes up with an message Your browser does not meet the security requirem… --- ## [Store field as text and keyword in 7.3](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520)
**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:58am UTC](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520 "2020-06-25T01:58:36Z")
I've recently migrated from 6.8 to 7.3 and noticed an apparent different in how Elasticsearch is handling my templates. Here's an excerpt from my index template: { "index\_patterns": \["xxx-\*"\], "settings":… --- ## [Drill Down Restrictions](https://discuss.elastic.co/t/drill-down-restrictions/237983)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:51am UTC](https://discuss.elastic.co/t/drill-down-restrictions/237983 "2020-06-25T01:51:23Z")
Is there anywhere where the drill down restrictions are documented? Is there any way around them? So far I've found: They aren't available with DataTables They aren't available for Lens generated visualization A mea… --- ## [Kibana: find IP addresses that are in two different indexes](https://discuss.elastic.co/t/kibana-find-ip-addresses-that-are-in-two-different-indexes/237889)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:46am UTC](https://discuss.elastic.co/t/kibana-find-ip-addresses-that-are-in-two-different-indexes/237889 "2020-06-25T01:46:47Z")
hi, i'm having trouble wrapping my head around the best way to query kibana. I have indexes lets just say: Index-Business1-firewall-Logs Index-Business2-filewall-Logs i have a kibana Index Pattern that is Index-Busine… --- ## [Compare common value in 2 documents within a index and create a field in documents](https://discuss.elastic.co/t/compare-common-value-in-2-documents-within-a-index-and-create-a-field-in-documents/237620)
**Author:** [@Vishnu\_G](https://discuss.elastic.co/u/Vishnu_G)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:43am UTC](https://discuss.elastic.co/t/compare-common-value-in-2-documents-within-a-index-and-create-a-field-in-documents/237620 "2020-06-25T01:43:19Z")
I have metricbeats configured to send process and services metrics to kibana. Process and windows services have a common field i.e., pid . My requirement is to create a TSVB that will show memory utilization of all wi… --- ## [How to access the action result to be used for the next action in watcher alert?](https://discuss.elastic.co/t/how-to-access-the-action-result-to-be-used-for-the-next-action-in-watcher-alert/238403)
**Author:** [@Pradeep\_Ganesan](https://discuss.elastic.co/u/Pradeep_Ganesan)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 8:34am UTC](https://discuss.elastic.co/t/how-to-access-the-action-result-to-be-used-for-the-next-action-in-watcher-alert/238403 "2020-06-24T08:34:41Z")
I am trying to create a Jira issue in watcher action 1 and send the jira id through an email in the watcher action 2. I have tried to read all the documents and I can't find anyhing related to this.Any help on this is mu… --- ## [Integrate Kibana custom app in dashboard](https://discuss.elastic.co/t/integrate-kibana-custom-app-in-dashboard/237646)
**Author:** [@Tejashree\_kate](https://discuss.elastic.co/u/Tejashree_kate)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:32am UTC](https://discuss.elastic.co/t/integrate-kibana-custom-app-in-dashboard/237646 "2020-06-25T01:32:51Z")
Hi Team, Is it possible to integrate a Kibana custom application in dashboard as one of the panels with its all existing functionalities like search, filter etc? My usecase doesn't fit to build a custom visualisation. … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1972) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1974)