# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=345 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 346 --- ## [My data view in kibana has no fields](https://discuss.elastic.co/t/my-data-view-in-kibana-has-no-fields/349902)
**Author:** [@Fatiha](https://discuss.elastic.co/u/Fatiha)\ **Replies:** 3\ **Last updated:** [December 24, 2023, 7:04pm UTC](https://discuss.elastic.co/t/my-data-view-in-kibana-has-no-fields/349902 "2023-12-24T19:04:51Z")
HI I want to visualize my data from mysql to kibana I create my file logstash.conf input { jdbc { jdbc\_driver\_library =\> "E:/ELK/mysql-connector-java-8.0.17.jar" jdbc\_driver\_class =\> "com.mysql.cj.jdbc.Driver… --- ## [Creating a data view from logstash](https://discuss.elastic.co/t/creating-a-data-view-from-logstash/349899)
**Author:** [@Dor-Alter](https://discuss.elastic.co/u/Dor-Alter)\ **Replies:** 1\ **Last updated:** [December 24, 2023, 6:59pm UTC](https://discuss.elastic.co/t/creating-a-data-view-from-logstash/349899 "2023-12-24T18:59:16Z")
I have created a pipeline that loads my logs into elasticsearch. When I run the pipeline it works and in the developer console, in elasticsearch, I can see and run queries to the index. However, when I go to discover in … --- ## [Logstash helm chart with Elasticsearch input/output starts over after finishing](https://discuss.elastic.co/t/logstash-helm-chart-with-elasticsearch-input-output-starts-over-after-finishing/349900)
**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\ **Replies:** 0\ **Last updated:** [December 24, 2023, 5:12pm UTC](https://discuss.elastic.co/t/logstash-helm-chart-with-elasticsearch-input-output-starts-over-after-finishing/349900 "2023-12-24T17:12:00Z")
Hi, I'm using the logstash helm chart with Logstash 8.9.0. The pipeline has an input and an output of Elasticsearch, basically importing an index from one cluster to another (using snapshots or reindex would've been be… --- ## [How to obtain data from multiple vsphere nodes?](https://discuss.elastic.co/t/how-to-obtain-data-from-multiple-vsphere-nodes/349308)
**Author:** [@dianne25](https://discuss.elastic.co/u/dianne25)\ **Replies:** 1\ **Last updated:** [December 24, 2023, 2:52pm UTC](https://discuss.elastic.co/t/how-to-obtain-data-from-multiple-vsphere-nodes/349308 "2023-12-24T14:52:25Z")
There's vsphere module in the metricbeat to pull data, as described in document here. I can successfuly acquire information from a single host, such as vCenter server. However, when I try to acquire data from more than … --- ## [Change duration after which warning "Datafeed has been retrieving no data for a while" appears](https://discuss.elastic.co/t/change-duration-after-which-warning-datafeed-has-been-retrieving-no-data-for-a-while-appears/348501)
**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\ **Replies:** 1\ **Last updated:** [December 24, 2023, 2:36pm UTC](https://discuss.elastic.co/t/change-duration-after-which-warning-datafeed-has-been-retrieving-no-data-for-a-while-appears/348501 "2023-12-24T14:36:53Z")
Hello everyone, is it possible to change the duration, after which the warning "Datafeed has been retrieving no data for a while" appears relating to an anomaly detection job? It is perfectly fine, that the datafeed oc… --- ## [.ds indices creating automatically in our env](https://discuss.elastic.co/t/ds-indices-creating-automatically-in-our-env/349861)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 1\ **Last updated:** [December 24, 2023, 2:24pm UTC](https://discuss.elastic.co/t/ds-indices-creating-automatically-in-our-env/349861 "2023-12-24T14:24:59Z")
Hi Team, After upgrdation of elasticearch from 7.3.2 to 7.17.16 .ds\* index automatically creating like below .ds-ilm-history-5-2023.12.18-000002 .ds-.logs-deprecation.elasticsearch-default-2023.11.18-000001 How to st… --- ## [Restoring the snapshot in our local cluster](https://discuss.elastic.co/t/restoring-the-snapshot-in-our-local-cluster/349845)
**Author:** [@Shashank\_Nagumantri](https://discuss.elastic.co/u/Shashank_Nagumantri)\ **Replies:** 3\ **Last updated:** [December 24, 2023, 10:31am UTC](https://discuss.elastic.co/t/restoring-the-snapshot-in-our-local-cluster/349845 "2023-12-24T10:31:58Z")
So, I have an elastic cloud account in which I have created dashboards and stored indices to work with. But now I have installed Elastic Search and Kibana in my local system and I don't want to use the cloud anymore. So,… --- ## [Conditional background in canvas doesn't work](https://discuss.elastic.co/t/conditional-background-in-canvas-doesnt-work/346970)
**Author:** [@fay](https://discuss.elastic.co/u/fay)\ **Replies:** 2\ **Last updated:** [December 24, 2023, 8:03am UTC](https://discuss.elastic.co/t/conditional-background-in-canvas-doesnt-work/346970 "2023-12-24T08:03:03Z")
Hi all I want to condition my background for specific value of SQL returned, I try to have a condition for my metric color and its work but in background color its not ! can anyone explain why? this is my expression … --- ## [Help with date-time conversion from Filebeat](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573)
**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\ **Replies:** 18\ **Last updated:** [December 23, 2023, 11:51am UTC](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573 "2023-12-23T11:51:46Z")
I'm sending log data from Filebeat (running on Kubernetes) to Graylog/Elasticsearch. I need to ensure that the date-time field inside the JSON message block that is part of the log entry has this format: 2023-12-11T23:… --- ## [Metricbeat configuration not applied correctly](https://discuss.elastic.co/t/metricbeat-configuration-not-applied-correctly/349873)
**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\ **Replies:** 1\ **Last updated:** [December 23, 2023, 8:33am UTC](https://discuss.elastic.co/t/metricbeat-configuration-not-applied-correctly/349873 "2023-12-23T08:33:59Z")
I am running metricbeat in a docker container and for some reasons it doesn't connect correctly to elasticsearch and logstash. This is my container configuration: metricbeat: container\_name: elk\_metricbeat ho… --- ## [Kibana 7.17 点線ラインで表示するには？](https://discuss.elastic.co/t/kibana-7-17/349876)
**Author:** [@toshihisa-nakamura](https://discuss.elastic.co/u/toshihisa-nakamura)\ **Replies:** 1\ **Last updated:** [December 23, 2023, 7:47am UTC](https://discuss.elastic.co/t/kibana-7-17/349876 "2023-12-23T07:47:08Z")
kibana7.17のDashboardでデータをLineで表示させていますが、ver6まではあったVisualoptionsのDot表示＆Line非表示がなくなり設定できません。 ver7以降ではどのようにすればDot＆Line非表示にできますか？ 教えていただけるとありがたいです。 --- ## [Osquery fails to return any data from Windows 10 or MACOS elastic agents](https://discuss.elastic.co/t/osquery-fails-to-return-any-data-from-windows-10-or-macos-elastic-agents/349880)
**Author:** [@hotcobra](https://discuss.elastic.co/u/hotcobra)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 7:40am UTC](https://discuss.elastic.co/t/osquery-fails-to-return-any-data-from-windows-10-or-macos-elastic-agents/349880 "2023-12-23T07:40:11Z")
I can see all agents are healthy (in Security Onion 2.4.30), I attempt query and all I get back is error. I assume it's a configuration or permission issue but can't find it. Recommendations? --- ## [Invalid or malformed certificate using caFingerprint](https://discuss.elastic.co/t/invalid-or-malformed-certificate-using-cafingerprint/349754)
**Author:** [@joe\_recra](https://discuss.elastic.co/u/joe_recra)\ **Replies:** 11\ **Last updated:** [December 23, 2023, 12:54am UTC](https://discuss.elastic.co/t/invalid-or-malformed-certificate-using-cafingerprint/349754 "2023-12-23T00:54:34Z")
hi, I generated a CA certificate using: ./elasticsearch-certutil ca --pem --out /certs/ca.zip and then generated a cert using: ./bin/elasticsearch-certutil cert \\ --out /var/snap/amazon-ssm-agent/7628/elasticsearch-8… --- ## [Logstash SNMP input plugin not seeing metadata](https://discuss.elastic.co/t/logstash-snmp-input-plugin-not-seeing-metadata/349524)
**Author:** [@bytelink](https://discuss.elastic.co/u/bytelink)\ **Replies:** 6\ **Last updated:** [December 22, 2023, 5:04pm UTC](https://discuss.elastic.co/t/logstash-snmp-input-plugin-not-seeing-metadata/349524 "2023-12-22T17:04:26Z")
I am trying to implement the SNMP input plugin to gther network data however when I try and access the metadata it returns the line of code not the data. I even tried copying the example from the documentation and get t… --- ## [Migrating from Nest to Elastic.Client.Elasticsearch QueryContainer not longer available](https://discuss.elastic.co/t/migrating-from-nest-to-elastic-client-elasticsearch-querycontainer-not-longer-available/349864)
**Author:** [@ricocsharp](https://discuss.elastic.co/u/ricocsharp)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 3:17pm UTC](https://discuss.elastic.co/t/migrating-from-nest-to-elastic-client-elasticsearch-querycontainer-not-longer-available/349864 "2023-12-22T15:17:16Z")
I’m rewriting our code for the new Elastic.Client.Elasticsearch and I’m trying to find some code examples how to do that. here I'm letting an example of code to be converted, the main problem is that QueryContainer is n… --- ## [Failed to indices:data/write/bulk\[s\] on replica because of Netty4TcpChannel / CompositeBytesReference more than 2GB](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797)
**Author:** [@Martin\_Berlin](https://discuss.elastic.co/u/Martin_Berlin)\ **Replies:** 5\ **Last updated:** [December 22, 2023, 3:11pm UTC](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797 "2023-12-22T15:11:59Z")
While Indexing to our Cluster sometimes this error occures turning the cluster in red & yellow state: One node is trying to "perform indices:data/write/bulk\[s\] on replica" on another node but fails because of "exception… --- ## [Not able install fleet properly on Windows7](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791)
**Author:** [@swapnalimag](https://discuss.elastic.co/u/swapnalimag)\ **Replies:** 2\ **Last updated:** [December 22, 2023, 3:00pm UTC](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791 "2023-12-22T15:00:58Z")
Hello, I am trying to install the fleet agent on Windows 7 . But during installation it is showing me the following error. "Fail to execute request to fleet-server: x509: certificate signed by Unknown authority" We ha… --- ## [Challenges while migrating elasticsearch client 6.8 to 8.7 (is mandatory)](https://discuss.elastic.co/t/challenges-while-migrating-elasticsearch-client-6-8-to-8-7-is-mandatory/349856)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 1:36pm UTC](https://discuss.elastic.co/t/challenges-while-migrating-elasticsearch-client-6-8-to-8-7-is-mandatory/349856 "2023-12-22T13:36:39Z")
Hello, Currently, I am in the midst of transitioning from Elasticsearch HLRC 6.8 to Elasticsearch REST API Java Client 8.7 within a Spring Boot application. This migration aligns with the broader upgrade of the Spring v… --- ## [Disk usage grows indefinitely over time](https://discuss.elastic.co/t/disk-usage-grows-indefinitely-over-time/349751)
**Author:** [@Tommaso\_Parisi](https://discuss.elastic.co/u/Tommaso_Parisi)\ **Replies:** 2\ **Last updated:** [December 22, 2023, 1:29pm UTC](https://discuss.elastic.co/t/disk-usage-grows-indefinitely-over-time/349751 "2023-12-22T13:29:14Z")
Hello, as you see in the screenshot above the disk usage of my index grows indefinitely over time. If I close the index and then reopen it the usage drops, as you can see from the graph. I did a \_close followed by a… --- ## [co.elastic.clients.elasticsearch.core.BulkRequest does not work against the Elasticsearch 8.11](https://discuss.elastic.co/t/co-elastic-clients-elasticsearch-core-bulkrequest-does-not-work-against-the-elasticsearch-8-11/349769)
**Author:** [@Gegata](https://discuss.elastic.co/u/Gegata)\ **Replies:** 6\ **Last updated:** [December 22, 2023, 12:30pm UTC](https://discuss.elastic.co/t/co-elastic-clients-elasticsearch-core-bulkrequest-does-not-work-against-the-elasticsearch-8-11/349769 "2023-12-22T12:30:29Z")
The issue: After the upgrade of our Elasticsearch server from version 8.6 to version 8.11 one of our services stopped working. The following errors we are receiving on this BulkRequest: POST /\_bulk \[{"update":{"\_id":"… --- ## [The remote web server is affected by a cross-site scripting vulnerability](https://discuss.elastic.co/t/the-remote-web-server-is-affected-by-a-cross-site-scripting-vulnerability/349840)
**Author:** [@Kesavan](https://discuss.elastic.co/u/Kesavan)\ **Replies:** 1\ **Last updated:** [December 22, 2023, 11:23am UTC](https://discuss.elastic.co/t/the-remote-web-server-is-affected-by-a-cross-site-scripting-vulnerability/349840 "2023-12-22T11:23:25Z")
In Our QA system we are facing the below security scan finding. Scanning tool used: nessus Above image text: |Medium|172.16.1.218|tcp|9201|Web Server Generic XSS|The remote web server is affected by a cross-site s… --- ## [What's the new FilterAggregator in the java client 8](https://discuss.elastic.co/t/whats-the-new-filteraggregator-in-the-java-client-8/349737)
**Author:** [@Darth\_vader\_22](https://discuss.elastic.co/u/Darth_vader_22)\ **Replies:** 3\ **Last updated:** [December 22, 2023, 8:36am UTC](https://discuss.elastic.co/t/whats-the-new-filteraggregator-in-the-java-client-8/349737 "2023-12-22T08:36:24Z")
hello guys , i'm having hard times trying to find a way to create a FilterAggregationBuilder in the new java client 8.11 , if anyone could point me te the solution i'll be grateful FiltersAggregationBuilder agg… --- ## [Index distribution clarification](https://discuss.elastic.co/t/index-distribution-clarification/349835)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [December 22, 2023, 2:20am UTC](https://discuss.elastic.co/t/index-distribution-clarification/349835 "2023-12-22T02:20:05Z")
I am trying to add a node in my cluster running on 7.17x with 3 existing nodes ( master eligible ), the new 4th node is data only node. I am seeing new index have all primary shards allocated to 1 node, shouldn't they b… --- ## [Logstash xml input plugin - parsing log4net:event](https://discuss.elastic.co/t/logstash-xml-input-plugin-parsing-log4net-event/349817)
**Author:** [@pumiki](https://discuss.elastic.co/u/pumiki)\ **Replies:** 4\ **Last updated:** [December 21, 2023, 10:04pm UTC](https://discuss.elastic.co/t/logstash-xml-input-plugin-parsing-log4net-event/349817 "2023-12-21T22:04:50Z")
Hello, log4net generates xml file. every event is stored in xml element called log4net:event. The issue is that logstash cant parse the element with the ":" in it. any idea ? The xml \\… --- ## [Kibana Security CVE - Building 8.9.0 docker distributable](https://discuss.elastic.co/t/kibana-security-cve-building-8-9-0-docker-distributable/349409)
**Author:** [@breno.andrade](https://discuss.elastic.co/u/breno.andrade)\ **Replies:** 5\ **Last updated:** [December 21, 2023, 9:33pm UTC](https://discuss.elastic.co/t/kibana-security-cve-building-8-9-0-docker-distributable/349409 "2023-12-21T21:33:24Z")
Hi there, Due to a security fault, I need to patchback this Kibana 8.11.1 fix: The product is already shipped and we can't upversion to 8.11.1 at this moment so we want to manage our own Kibana 8.9.0 build with this f… --- ## [Cant parse xml file generated with log4net using logstash](https://discuss.elastic.co/t/cant-parse-xml-file-generated-with-log4net-using-logstash/349728)
**Author:** [@pumiki](https://discuss.elastic.co/u/pumiki)\ **Replies:** 5\ **Last updated:** [December 21, 2023, 8:18pm UTC](https://discuss.elastic.co/t/cant-parse-xml-file-generated-with-log4net-using-logstash/349728 "2023-12-21T20:18:02Z")
Hello, I have c# app that logs xml file using log4net and log4net.Layout.XmlLayout (see configuration below). The generated log events contains message ang name-value collection: \\ **Author:** [@Julia\_Dai](https://discuss.elastic.co/u/Julia_Dai)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 6:57pm UTC](https://discuss.elastic.co/t/default-dynamic-template-uses-enum-for-text-fields-instead-of-keyword/349821 "2023-12-21T18:57:06Z") We're using Elasticsearch dynamic mapping for our indexes, but for some reason our indexes are mapping text fields to enum sub fields instead of keyword sub fields like it says in the docs (Dynamic field mapping | Elasti… --- ## [Elastic\_Log\_Kibana\_v7.17.15](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732)
**Author:** [@sossoulokoariel](https://discuss.elastic.co/u/sossoulokoariel)\ **Replies:** 18\ **Last updated:** [December 21, 2023, 6:17pm UTC](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732 "2023-12-21T18:17:30Z")
Welcome to Elastic's Discussion Forums! I find myself confronted with this error in my log kibana. When I connect to the interface I get the message: "Kibana is not yet". Even though all my services are active. Please he… --- ## [Export aggregated reports into Postgres](https://discuss.elastic.co/t/export-aggregated-reports-into-postgres/349806)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 2\ **Last updated:** [December 21, 2023, 5:42pm UTC](https://discuss.elastic.co/t/export-aggregated-reports-into-postgres/349806 "2023-12-21T17:42:32Z")
Hello, I am indexing data into an Elasticsearch cluster (of one node) based on events associated with different devices, each identified by an ID. Many events can occur during the day. At the end of each day, I would li… --- ## [Migrated elasticsearch data from a failed node](https://discuss.elastic.co/t/migrated-elasticsearch-data-from-a-failed-node/349814)
**Author:** [@anon85145925](https://discuss.elastic.co/u/anon85145925)\ **Replies:** 1\ **Last updated:** [December 21, 2023, 5:33pm UTC](https://discuss.elastic.co/t/migrated-elasticsearch-data-from-a-failed-node/349814 "2023-12-21T17:33:02Z")
Hello all, One of our elasticsearch nodes (not a master node) failed yesterday, and by failed it was a human error, when trying to add disk space - the underlying disk was shrinked. We managed to expand the disk again, … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=344) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=346)