# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=293

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 294

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/351607)

<div class="topic-metadata">

**Author:** [@rash4ford](https://discuss.elastic.co/u/rash4ford)\
**Replies:** 9\
**Last updated:** [March 5, 2024, 8:20am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/351607 "2024-03-05T08:20:05Z")

</div>

I'm new to Elasticsearch and i'm having issue try to get your elastic searc working. I'm getting Kibana server is not ready yet. I have checked services on both kibana and Elasticsearch working fine. I have colect the l…

---

## [No logout option on the Kibana GUI](https://discuss.elastic.co/t/no-logout-option-on-the-kibana-gui/354132)

<div class="topic-metadata">

**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\
**Replies:** 2\
**Last updated:** [March 5, 2024, 7:39am UTC](https://discuss.elastic.co/t/no-logout-option-on-the-kibana-gui/354132 "2024-03-05T07:39:21Z")

</div>

Hello I can understand this is a very basic thing. But I don't see any logout option in the Kibana GUI. Please find the attached ss below. When we installed this in previous days neither it asked for the login credent…

---

## [Es rally list tracks error](https://discuss.elastic.co/t/es-rally-list-tracks-error/354694)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 1\
**Last updated:** [March 5, 2024, 7:35am UTC](https://discuss.elastic.co/t/es-rally-list-tracks-error/354694 "2024-03-05T07:35:36Z")

</div>

esrally list tracks \_\_\_\_ \_\_\_\_ / \_\_ \_\_\_\_ / / / \_\_ / // / \_\_ \`/ / / / / / / , / // / / / // / // ||\_,///\_, / /\_\_\_\_/ \[ERROR\] Cannot list. substring not found. What could be the reason? Here is a snapshot of …

---

## [Slow search response](https://discuss.elastic.co/t/slow-search-response/354501)

<div class="topic-metadata">

**Author:** [@shivam\_raj](https://discuss.elastic.co/u/shivam_raj)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 4:51am UTC](https://discuss.elastic.co/t/slow-search-response/354501 "2024-03-05T04:51:38Z")

</div>

I have created a python appilication , to connect with es, there I am doing a document\_id search that is list es = Elasticsearch( CLOUD\_ID, http\_auth=(elastic\_user, ELASTIC\_PASSWORD) query = { "query": { "bool": { …

---

## [Esrally list tracks](https://discuss.elastic.co/t/esrally-list-tracks/354687)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 1\
**Last updated:** [March 5, 2024, 4:35am UTC](https://discuss.elastic.co/t/esrally-list-tracks/354687 "2024-03-05T04:35:07Z")

</div>

I have installed esrally on an ec2 instance and I am running list tracks and encountering this error. Can someone assist? esrally list tracks Traceback (most recent call last): File "/home/ec2-user/.local/bin/esrally"…

---

## [Math in TSVB (and how to handle 0 in the denominator)](https://discuss.elastic.co/t/math-in-tsvb-and-how-to-handle-0-in-the-denominator/352581)

<div class="topic-metadata">

**Author:** [@adam.richey](https://discuss.elastic.co/u/adam.richey)\
**Replies:** 2\
**Last updated:** [March 5, 2024, 4:20am UTC](https://discuss.elastic.co/t/math-in-tsvb-and-how-to-handle-0-in-the-denominator/352581 "2024-03-05T04:20:10Z")

</div>

Some of my data for smaller time values may result in a divide by 0 error. At the moment, if this happens the whole visualization breaks and I can't see any columns even with correct data for that time period. Is there …

---

## [How to determine which node is the master (without using \_cat endpoint) in an application](https://discuss.elastic.co/t/how-to-determine-which-node-is-the-master-without-using-cat-endpoint-in-an-application/354672)

<div class="topic-metadata">

**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\
**Replies:** 4\
**Last updated:** [March 5, 2024, 2:39am UTC](https://discuss.elastic.co/t/how-to-determine-which-node-is-the-master-without-using-cat-endpoint-in-an-application/354672 "2024-03-05T02:39:59Z")

</div>

I am trying to determine if a node is the master elasticsearch node so that I can determine if my script should run. My script creates a user using the elasticsearch-cli binary and I want to ensure that this happens a si…

---

## [Stable-esplugin bundlePlugin does not add classname to stable-plugtin-descriptor.properties file](https://discuss.elastic.co/t/stable-esplugin-bundleplugin-does-not-add-classname-to-stable-plugtin-descriptor-properties-file/354681)

<div class="topic-metadata">

**Author:** [@Steph\_van\_Schalkwyk](https://discuss.elastic.co/u/Steph_van_Schalkwyk)\
**Replies:** 0\
**Last updated:** [March 5, 2024, 12:19am UTC](https://discuss.elastic.co/t/stable-esplugin-bundleplugin-does-not-add-classname-to-stable-plugtin-descriptor-properties-file/354681 "2024-03-05T00:19:11Z")

</div>

Using 8.12.2. when building plugin with Gradle, the classname is not added to the stable-plugin-descriptor.properties file. The plugin deploys, but the classname property is NULL. Any ideas?

---

## [Logstash not sending data to ELK](https://discuss.elastic.co/t/logstash-not-sending-data-to-elk/354561)

<div class="topic-metadata">

**Author:** [@bigelkman](https://discuss.elastic.co/u/bigelkman)\
**Replies:** 8\
**Last updated:** [March 4, 2024, 11:39pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elk/354561 "2024-03-04T23:39:08Z")

</div>

Hello all, I am struggling to get logstash setup and sending data over to ES. I am trying to have logstash act a syslog server and send that data over to ES. I do not see any logstash-\* on the indices or data streams. I …

---

## [ElasticSearch JAVA create custom sort in place of attribute value sort](https://discuss.elastic.co/t/elasticsearch-java-create-custom-sort-in-place-of-attribute-value-sort/354677)

<div class="topic-metadata">

**Author:** [@Manoj\_Upadhyay](https://discuss.elastic.co/u/Manoj_Upadhyay)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-java-create-custom-sort-in-place-of-attribute-value-sort/354677 "2024-03-04T23:19:08Z")

</div>

For example, I have 6 accounts (1,2,34,5,6)of transactions in index and I want to search transactions and sort by order by account 4,6,3,2,1,5(custom order ) then how I can use it . SearchResponse\<MyClass\> esResponse = …

---

## [Version 8.10 still has recovery/rebalance issue?](https://discuss.elastic.co/t/version-8-10-still-has-recovery-rebalance-issue/354490)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 4\
**Last updated:** [March 4, 2024, 10:12pm UTC](https://discuss.elastic.co/t/version-8-10-still-has-recovery-rebalance-issue/354490 "2024-03-04T22:12:06Z")

</div>

We often add many data nodes at once (say 10). If I don't tweak the default setting, there are only 2 recovery tasks at any given moment and it'll take forever to rebalance. If I tweak "cluster.routing.allocation.clust…

---

## [What's the recommended method for checking if a string is part of a field?](https://discuss.elastic.co/t/whats-the-recommended-method-for-checking-if-a-string-is-part-of-a-field/354266)

<div class="topic-metadata">

**Author:** [@favoca](https://discuss.elastic.co/u/favoca)\
**Replies:** 1\
**Last updated:** [March 4, 2024, 10:01pm UTC](https://discuss.elastic.co/t/whats-the-recommended-method-for-checking-if-a-string-is-part-of-a-field/354266 "2024-03-04T22:01:44Z")

</div>

My research mainly pointed me towards two or three solutions. Firstly, using wildcards: { "query": { "wildcard": { "name": "\*searchTerm\*" } } } However, the drawback is that wildcards can be slow. S…

---

## [About Metricbeat modules integration test](https://discuss.elastic.co/t/about-metricbeat-modules-integration-test/354361)

<div class="topic-metadata">

**Author:** [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\
**Replies:** 3\
**Last updated:** [March 4, 2024, 7:33pm UTC](https://discuss.elastic.co/t/about-metricbeat-modules-integration-test/354361 "2024-03-04T19:33:45Z")

</div>

Hello i was trying to contribute metricbeat modules because of my school project. I made some things now i can see metrics through kibana and in logs on my local. But there is something that i can't done and that is inte…

---

## [Filebeat modules](https://discuss.elastic.co/t/filebeat-modules/354665)

<div class="topic-metadata">

**Author:** [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\
**Replies:** 2\
**Last updated:** [March 4, 2024, 7:08pm UTC](https://discuss.elastic.co/t/filebeat-modules/354665 "2024-03-04T19:08:48Z")

</div>

Hello, when I enable filebeat module, for example nginx module, in Kibana appears about 7217 fields. How to get fields that related just to nginx access.log or error.log ? OR when I enable system module, also appears abo…

---

## [Running es rally](https://discuss.elastic.co/t/running-es-rally/354663)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 3:37pm UTC](https://discuss.elastic.co/t/running-es-rally/354663 "2024-03-04T15:37:35Z")

</div>

Hi Team! I need to test the performance of an elasticsearch cluster and check: how much compute and RAM needed to run 20K requests for a minute my current cluster is set up on elastic cloud Is this something es rally…

---

## [Esrally installation](https://discuss.elastic.co/t/esrally-installation/354662)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 2\
**Last updated:** [March 4, 2024, 3:30pm UTC](https://discuss.elastic.co/t/esrally-installation/354662 "2024-03-04T15:30:16Z")

</div>

I am trying to install esrally on my EC2 instance and I am getting this error: running build\_ext building 'psutil.\_psutil\_linux' extension creating build/temp.linux-x86\_64-cpython-37 creating build/temp.linux-x86\_64…

---

## [Fleet Elastic Agent Upgrade only partially available](https://discuss.elastic.co/t/fleet-elastic-agent-upgrade-only-partially-available/354093)

<div class="topic-metadata">

**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\
**Replies:** 7\
**Last updated:** [March 4, 2024, 3:02pm UTC](https://discuss.elastic.co/t/fleet-elastic-agent-upgrade-only-partially-available/354093 "2024-03-04T15:02:26Z")

</div>

After upgrading from 8.12.1 to 8.12.2, only 4 of my agents are displaying upgrade available (non of them are fleet-server). Could this be due to the problem resolve of the other known issue or is this a new bug? I know…

---

## [Issues with Kibana installation](https://discuss.elastic.co/t/issues-with-kibana-installation/354460)

<div class="topic-metadata">

**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\
**Replies:** 5\
**Last updated:** [March 4, 2024, 2:28pm UTC](https://discuss.elastic.co/t/issues-with-kibana-installation/354460 "2024-03-04T14:28:50Z")

</div>

PLEASE CAN YOU ALL HELP I AM SEEINFG THIS ERROR IN THE KIBANA.LOG service":{"node":{"roles":\["background\_tasks","ui"\]}},"ecs":{"version":"8.6.1" …

---

## [Kibana Maps Point To Point Limitation on number of lines](https://discuss.elastic.co/t/kibana-maps-point-to-point-limitation-on-number-of-lines/354572)

<div class="topic-metadata">

**Author:** [@longtake](https://discuss.elastic.co/u/longtake)\
**Replies:** 2\
**Last updated:** [March 4, 2024, 1:57pm UTC](https://discuss.elastic.co/t/kibana-maps-point-to-point-limitation-on-number-of-lines/354572 "2024-03-04T13:57:17Z")

</div>

Hi .. referring to 2020 topic https://discuss.elastic.co/t/point-to-point-lines-have-to-zoom-in-to-show-in-map/230730 .. Is the limit of 100 source points for lines still in effect .. in my case I have very few destinat…

---

## [Geoip expired\_database error](https://discuss.elastic.co/t/geoip-expired-database-error/354643)

<div class="topic-metadata">

**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\
**Replies:** 2\
**Last updated:** [March 4, 2024, 1:14pm UTC](https://discuss.elastic.co/t/geoip-expired-database-error/354643 "2024-03-04T13:14:16Z")

</div>

Hello, I get the following error on logstash logs; \[2024-03-04T13:38:54,437\]\[ERROR\]\[logstash.filters.geoip.downloadmanager\] Permission denied - /var/lib/logstash/plugins/filters/geoip/1709555933 {:cause=\>nil} \[2024-03-…

---

## [Add an ASA to ELK](https://discuss.elastic.co/t/add-an-asa-to-elk/354656)

<div class="topic-metadata">

**Author:** [@Ash78](https://discuss.elastic.co/u/Ash78)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 1:54pm UTC](https://discuss.elastic.co/t/add-an-asa-to-elk/354656 "2024-03-04T13:54:30Z")

</div>

Hi I'm trying to add a Cisco ASA to ELK log monitor and start collecting logs. The ASA is located at the remote site with no direct connection to where the ELK is located. I have a site-to-site VPN between sites. I'm lo…

---

## [Logstash with docker compose - Logstash not reading file input plugin - path](https://discuss.elastic.co/t/logstash-with-docker-compose-logstash-not-reading-file-input-plugin-path/354652)

<div class="topic-metadata">

**Author:** [@Fawwaz\_Hosein](https://discuss.elastic.co/u/Fawwaz_Hosein)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 1:42pm UTC](https://discuss.elastic.co/t/logstash-with-docker-compose-logstash-not-reading-file-input-plugin-path/354652 "2024-03-04T13:42:20Z")

</div>

Pleasant good day, for my docker compose ELK set up I have created a custom image for Logstash for the purposes of creating a directory to bind mount the logs into as well as writing my own logstash.conf pipeline. The lo…

---

## [Hi All, I am facing the issue, Not eligible for data streams because config contains one or more settings that are not compatible with data streams: {"index"=\>"info\_apim\_event"}](https://discuss.elastic.co/t/hi-all-i-am-facing-the-issue-not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-info-apim-event/354424)

<div class="topic-metadata">

**Author:** [@Haribabu](https://discuss.elastic.co/u/Haribabu)\
**Replies:** 8\
**Last updated:** [March 4, 2024, 1:01pm UTC](https://discuss.elastic.co/t/hi-all-i-am-facing-the-issue-not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams-index-info-apim-event/354424 "2024-03-04T13:01:34Z")

</div>

input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "TID: \\\[%{DATA:thread}\\\] \\\[%{DATA:component}\\\] \\\[%{TIMESTAMP\_ISO8601:timestamp}\\\] %{LOGLEVEL:logLevel} \\{%…

---

## [ELK Data Storage](https://discuss.elastic.co/t/elk-data-storage/354641)

<div class="topic-metadata">

**Author:** [@Rutuja\_More](https://discuss.elastic.co/u/Rutuja_More)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 12:55pm UTC](https://discuss.elastic.co/t/elk-data-storage/354641 "2024-03-04T12:55:10Z")

</div>

How can I configure elk data storage with 120 server in real time ?

---

## [ELasticSearch for high frequency update scenario](https://discuss.elastic.co/t/elasticsearch-for-high-frequency-update-scenario/354619)

<div class="topic-metadata">

**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\
**Replies:** 10\
**Last updated:** [March 4, 2024, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-for-high-frequency-update-scenario/354619 "2024-03-04T12:44:25Z")

</div>

We have a scenario where in our domain entity undergoes very high frequency updates. Say a max of 100 updates for a domain entity in a minute. Currently we plan to index a summary of the domain information (few attribut…

---

## [Intermittent error while ingesting files in pipeline](https://discuss.elastic.co/t/intermittent-error-while-ingesting-files-in-pipeline/354638)

<div class="topic-metadata">

**Author:** [@ChristopheL77](https://discuss.elastic.co/u/ChristopheL77)\
**Replies:** 0\
**Last updated:** [March 4, 2024, 12:41pm UTC](https://discuss.elastic.co/t/intermittent-error-while-ingesting-files-in-pipeline/354638 "2024-03-04T12:41:53Z")

</div>

Hi, When indexing files with BulkOperation with NEST (7.17.5) client and Elastic Search 8.8.0 or 8.12.2, after a few successful operations we have an error message. If we retry, the error will happen on different file. …

---

## [Elasticsearch Java API Client BulkRequest](https://discuss.elastic.co/t/elasticsearch-java-api-client-bulkrequest/354625)

<div class="topic-metadata">

**Author:** [@Ansh\_Kumar](https://discuss.elastic.co/u/Ansh_Kumar)\
**Replies:** 3\
**Last updated:** [March 4, 2024, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-bulkrequest/354625 "2024-03-04T12:28:52Z")

</div>

Hello , I am using new JAVA API Client version 8.7 in my Java multiThreaded Application I am doing two task 1)task1) Reading , first different threads reading data from elasticsearch indexes 2)task2)After reading dat…

---

## [Show Critical(Red background), Heathy(Green backround) using Top hit](https://discuss.elastic.co/t/show-critical-red-background-heathy-green-backround-using-top-hit/354416)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [March 4, 2024, 11:31am UTC](https://discuss.elastic.co/t/show-critical-red-background-heathy-green-backround-using-top-hit/354416 "2024-03-04T11:31:30Z")

</div>

Hello All, I've a simple requirement and now it seems complex to achieve this in kibana and not sure how data can be handled here to show desired result. There are multiple tomcat servers sending there status in tomcat…

---

## [Need guidance on upgrading production elastic stack](https://discuss.elastic.co/t/need-guidance-on-upgrading-production-elastic-stack/354620)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 2\
**Last updated:** [March 4, 2024, 10:22am UTC](https://discuss.elastic.co/t/need-guidance-on-upgrading-production-elastic-stack/354620 "2024-03-04T10:22:22Z")

</div>

Hi All, I want to upgrade my ELK version in production. Below are the details - Current Version: 7.11.1 Elasticsearch Node - 3 Dedicated VMs for Kibana and Logstash OS - Ubuntu Please guide me to upgrade the stack.…

---

## [Filebeat - CryptoJS is not defined](https://discuss.elastic.co/t/filebeat-cryptojs-is-not-defined/354441)

<div class="topic-metadata">

**Author:** [@siva0030](https://discuss.elastic.co/u/siva0030)\
**Replies:** 8\
**Last updated:** [March 4, 2024, 9:36am UTC](https://discuss.elastic.co/t/filebeat-cryptojs-is-not-defined/354441 "2024-03-04T09:36:06Z")

</div>

Hello Team, I was trying to implement the hashing using Filebeat script processor. But Filebeat doesnt have Crypto module by default and staring below error. Is there any option to achieve this functionality? Geting …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=292)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=294)
