# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=677 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 678 --- ## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/322390)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 11\ **Last updated:** [January 5, 2023, 11:45am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/322390 "2023-01-05T11:45:14Z")
Hello, I have 5 nodes under rhel 8.7, the system is hardened so the partitions /var /var/tmp /var/log /home /var/log/audit and /tmp are in noexec I managed to work around the problem on the first two nodes by adding th… --- ## [Warm node is failing to connecting with master node](https://discuss.elastic.co/t/warm-node-is-failing-to-connecting-with-master-node/322522)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 1\ **Last updated:** [January 5, 2023, 11:33am UTC](https://discuss.elastic.co/t/warm-node-is-failing-to-connecting-with-master-node/322522 "2023-01-05T11:33:26Z")
I am migrating single-node cluster to multi node. I have started up with setting up basic security on master node using this link. As mentioned in point 2 i have copied the output file to the warm node and i have saved… --- ## [Help with kibana and elastic-agent no work](https://discuss.elastic.co/t/help-with-kibana-and-elastic-agent-no-work/322477)
**Author:** [@hernani33](https://discuss.elastic.co/u/hernani33)\ **Replies:** 4\ **Last updated:** [January 5, 2023, 11:32am UTC](https://discuss.elastic.co/t/help-with-kibana-and-elastic-agent-no-work/322477 "2023-01-05T11:32:55Z")
i have elasticsearch kibana and elastic-agent installed ok. but elastic-agent not work in kibana, I ALWAYS SAY LISTENING FOR AGENT WHEN I GO TO CLICK ADD AGENT. IN STEP 3 IN INTEGRATION POLICIE CONFIRM AGENT ENROLLMENT,… --- ## [Security\_exception while Restoring Snapshot | ES 8.3.2](https://discuss.elastic.co/t/security-exception-while-restoring-snapshot-es-8-3-2/322511)
**Author:** [@zeus7](https://discuss.elastic.co/u/zeus7)\ **Replies:** 3\ **Last updated:** [January 5, 2023, 11:24am UTC](https://discuss.elastic.co/t/security-exception-while-restoring-snapshot-es-8-3-2/322511 "2023-01-05T11:24:26Z")
I m trying to restore snapshot from version 6.2.4 to 8.3.2, getting error : { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "current license… --- ## [Multiple score fields?](https://discuss.elastic.co/t/multiple-score-fields/322323)
**Author:** [@petrskokan11](https://discuss.elastic.co/u/petrskokan11)\ **Replies:** 1\ **Last updated:** [January 5, 2023, 11:03am UTC](https://discuss.elastic.co/t/multiple-score-fields/322323 "2023-01-05T11:03:50Z")
Maybe a dummy question: is it possible to have multiple score fields? I use a custom score based on function\_score query. This score is being displayed to the user to show, how much each document matches his/her prefere… --- ## [Allow multiple selection on data tables](https://discuss.elastic.co/t/allow-multiple-selection-on-data-tables/322515)
**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\ **Replies:** 1\ **Last updated:** [January 5, 2023, 10:49am UTC](https://discuss.elastic.co/t/allow-multiple-selection-on-data-tables/322515 "2023-01-05T10:49:00Z")
Is it possible to filter multiple options from Kibana visualisations? Right now, it narrows down to only 1 selected item. --- ## [Installing ElasticSearch via Helm without VolumeClaim using existing volumeMount?](https://discuss.elastic.co/t/installing-elasticsearch-via-helm-without-volumeclaim-using-existing-volumemount/322532)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 10:47am UTC](https://discuss.elastic.co/t/installing-elasticsearch-via-helm-without-volumeclaim-using-existing-volumemount/322532 "2023-01-05T10:47:24Z")
We want to install Elasticsearch via helm chart and provide our own volumeMount. We don't really want to have anything to do with PVCs. Ideally the resulting container should have something like: volumeMounts… --- ## [Howto switch dashboards keeping the very same filter settings (aka grammar of markdown link filter)](https://discuss.elastic.co/t/howto-switch-dashboards-keeping-the-very-same-filter-settings-aka-grammar-of-markdown-link-filter/321895)
**Author:** [@DrG](https://discuss.elastic.co/u/DrG)\ **Replies:** 4\ **Last updated:** [January 5, 2023, 10:25am UTC](https://discuss.elastic.co/t/howto-switch-dashboards-keeping-the-very-same-filter-settings-aka-grammar-of-markdown-link-filter/321895 "2023-01-05T10:25:41Z")
Hello everybody, (Even this question might sound like a duplicate to Markdown link with current filter - Elastic Stack / Kibana - Discuss the Elastic Stack ) But the proposed solution of that post is not working for my… --- ## [Need help in creating a run time field](https://discuss.elastic.co/t/need-help-in-creating-a-run-time-field/318545)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 11:49am UTC](https://discuss.elastic.co/t/need-help-in-creating-a-run-time-field/318545 "2022-12-08T11:49:15Z")
Hie All, I need help in creating runtime fields, where I have a log message with exceptions in it. For example: 000002e4 AbstractBaseR E com.ibm.commerce.foundation.rest.resourcehandler.AbstractBaseResourceHandler han… --- ## [Dropdown filter is freezed](https://discuss.elastic.co/t/dropdown-filter-is-freezed/319752)
**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\ **Replies:** 12\ **Last updated:** [January 5, 2023, 8:15am UTC](https://discuss.elastic.co/t/dropdown-filter-is-freezed/319752 "2023-01-05T08:15:56Z")
Hi team, I don't know why, but quite often my dropdown list filter in Kibana Canvas freezes and I m not able at all at selecting any item from it. Moreover, I can't succeeded in selecting with my mouse other elements (f… --- ## [Scripted field & range analysis not working properly?](https://discuss.elastic.co/t/scripted-field-range-analysis-not-working-properly/322361)
**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\ **Replies:** 3\ **Last updated:** [January 5, 2023, 8:14am UTC](https://discuss.elastic.co/t/scripted-field-range-analysis-not-working-properly/322361 "2023-01-05T08:14:47Z")
Hi guys, happy new year :slight\_smile: I have a scripet field (number, percentage) with this code: double tot\_acc\_nom\_gruppo = doc\['tot\_acc\_nom\_gruppo'\].value; double tot\_acc\_pond\_gruppo = doc\['tot\_acc\_pond\_gruppo'\].v… --- ## [Fail to install Elastic-Agent](https://discuss.elastic.co/t/fail-to-install-elastic-agent/322495)
**Author:** [@pntmky](https://discuss.elastic.co/u/pntmky)\ **Replies:** 8\ **Last updated:** [January 5, 2023, 7:46am UTC](https://discuss.elastic.co/t/fail-to-install-elastic-agent/322495 "2023-01-05T07:46:33Z")
First of all, I installed Elastic Agent by DEB successfully, but I realize that cannot upgrade, so I uninstall Elastic Agent and remove installation layout of Elastic Agent. And now when I install by Linux Tar, it fai… --- ## [Show dynamic info from field names in a pie chart?](https://discuss.elastic.co/t/show-dynamic-info-from-field-names-in-a-pie-chart/322259)
**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\ **Replies:** 2\ **Last updated:** [January 5, 2023, 7:41am UTC](https://discuss.elastic.co/t/show-dynamic-info-from-field-names-in-a-pie-chart/322259 "2023-01-05T07:41:44Z")
Hi, I have a use-case which I can't seem to resolve. I have in a document a map of animals, the key is the animal name, the values is an object with information on that animal, for example: { "animals": { "cats"… --- ## [Pushing of data](https://discuss.elastic.co/t/pushing-of-data/322517)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 7:13am UTC](https://discuss.elastic.co/t/pushing-of-data/322517 "2023-01-05T07:13:02Z")
Error in pushing of data: raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)( elasticsearch.exceptions.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[indices:admin/create\] is unaut… --- ## [Elasticsearch,Kibana,logstash,filebeat](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133)
**Author:** [@Mursel](https://discuss.elastic.co/u/Mursel)\ **Replies:** 15\ **Last updated:** [January 5, 2023, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133 "2023-01-05T07:27:50Z")
The hit point in Kibana was more than one hundred thousand for 3 hours. Then I observed that this number has dropped to three thousand. The reason for this was that 90 percent of the memory was full. To fix this, I remov… --- ## [Watcher Script Calculation](https://discuss.elastic.co/t/watcher-script-calculation/322512)
**Author:** [@baoletrg](https://discuss.elastic.co/u/baoletrg)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 5:22am UTC](https://discuss.elastic.co/t/watcher-script-calculation/322512 "2023-01-05T05:22:24Z")
{ "watch\_id": "41f83e51-ea97-4383-8bae-f361fd14a81a", "node": "AUDLWhUORrCEs2E\_lEhqng", "state": "execution\_not\_needed", "@timestamp": "2023-01-05T05:08:34.144Z", "user": "baolt", "status": { "state": { … --- ## [Identify unhealthy elastic agents](https://discuss.elastic.co/t/identify-unhealthy-elastic-agents/322508)
**Author:** [@Sanjaya\_Chathuranga](https://discuss.elastic.co/u/Sanjaya_Chathuranga)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 5:07am UTC](https://discuss.elastic.co/t/identify-unhealthy-elastic-agents/322508 "2023-01-05T05:07:43Z")
Hi Some Fleet Elastic agents have become unhealthy in our environment and we have to manually identify them. can we configure fleet elastic agent to send us an alert if it becomes unhealthy? the purpose is to identify … --- ## [3-Node cluster setup](https://discuss.elastic.co/t/3-node-cluster-setup/322420)
**Author:** [@Sandeepa\_Kariyawasam](https://discuss.elastic.co/u/Sandeepa_Kariyawasam)\ **Replies:** 4\ **Last updated:** [January 5, 2023, 5:06am UTC](https://discuss.elastic.co/t/3-node-cluster-setup/322420 "2023-01-05T05:06:15Z")
I have created a Elasticsearch node with enrolment token configured. Now I'm trying to attach two other nodes to the running node as a cluster. It gave this error, This node will be reconfigured to join an existing clus… --- ## [Setup SSL via load balancer on different server](https://discuss.elastic.co/t/setup-ssl-via-load-balancer-on-different-server/322321)
**Author:** [@stes](https://discuss.elastic.co/u/stes)\ **Replies:** 3\ **Last updated:** [January 5, 2023, 5:04am UTC](https://discuss.elastic.co/t/setup-ssl-via-load-balancer-on-different-server/322321 "2023-01-05T05:04:43Z")
I have a classic setup with a Nginx load balancer that distributes traffic through all my other non-public servers. Each server contains only one service e.g. Postgres or Elasticsearch. I just discovered Elasticsearch a… --- ## [Filebeat not shipping logs to Elasticsearch service on K8S](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch-service-on-k8s/322227)
**Author:** [@Max9998](https://discuss.elastic.co/u/Max9998)\ **Replies:** 7\ **Last updated:** [January 5, 2023, 3:28am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch-service-on-k8s/322227 "2023-01-05T03:28:23Z")
Hello, I have deployed Filebeat using the Helm chart on K8s as a daemonset. We would like to use Filebeat to send Kubelet, Containerd, and docker logs to Elasticsearch Service. The config yaml is below: filebeat.inputs… --- ## [How to visualize json data obtained from filebeat in kibana](https://discuss.elastic.co/t/how-to-visualize-json-data-obtained-from-filebeat-in-kibana/317793)
**Author:** [@anu1](https://discuss.elastic.co/u/anu1)\ **Replies:** 3\ **Last updated:** [November 10, 2022, 4:25am UTC](https://discuss.elastic.co/t/how-to-visualize-json-data-obtained-from-filebeat-in-kibana/317793 "2022-11-10T04:25:06Z")
Hi, I'm new to elk. I've configured elk as a server and filebeat as a client and through filebeat, i'm sending the json format data (temperature values) to elk.Now i'm finding it difficulty to visualize only temperatur… --- ## [Adding a global label for all metrics and logs coming from an agent policy](https://discuss.elastic.co/t/adding-a-global-label-for-all-metrics-and-logs-coming-from-an-agent-policy/322143)
**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 8:46pm UTC](https://discuss.elastic.co/t/adding-a-global-label-for-all-metrics-and-logs-coming-from-an-agent-policy/322143 "2023-01-04T20:46:46Z")
Hello I need to have a way to filter all the logs and metrics that come from all elastic agent (and integrations) with a certain policy. For example all dev metrics collected by the dev agents should have a lable: env:… --- ## [How to modify host status or agent status 5mins to 2 mins when its offline](https://discuss.elastic.co/t/how-to-modify-host-status-or-agent-status-5mins-to-2-mins-when-its-offline/322093)
**Author:** [@rakeshsid01](https://discuss.elastic.co/u/rakeshsid01)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 7:27pm UTC](https://discuss.elastic.co/t/how-to-modify-host-status-or-agent-status-5mins-to-2-mins-when-its-offline/322093 "2023-01-04T19:27:03Z")
How to modify host status or agent status 5mins to 2 mins when its offline. I have configured elastic agent service in windows. Please post snaps if possible --- ## [Issues with agent on windows service start loop](https://discuss.elastic.co/t/issues-with-agent-on-windows-service-start-loop/322250)
**Author:** [@pshilling](https://discuss.elastic.co/u/pshilling)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 7:14pm UTC](https://discuss.elastic.co/t/issues-with-agent-on-windows-service-start-loop/322250 "2023-01-04T19:14:46Z")
I installed the agent on my windows 10 test machine using the script generated from my fleet server. I used cmd run as administrator to run the installer. I seem to be stuck in a service start loop. The error logs show t… --- ## [Restrict index privilege on space level](https://discuss.elastic.co/t/restrict-index-privilege-on-space-level/320588)
**Author:** [@shinki927](https://discuss.elastic.co/u/shinki927)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 7:22pm UTC](https://discuss.elastic.co/t/restrict-index-privilege-on-space-level/320588 "2022-12-07T19:22:56Z")
Hello, I have a question about how to restrict the index access on space level. I know in general we can create separate role with different index permission to a specific space. But in our use case, we sometimes need t… --- ## [Unfreeze, Read-Only, Move to Cold/Frozen](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 6:40pm UTC](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395 "2023-01-04T18:40:33Z")
Team, I'm working through the Elastic Upgrade Assistant and its telling me I have 38 Warnings, all the same warning, that I need to, "Index \[XYZ\] is frozen. Frozen indices no longer offer any advantages. Instead, unfree… --- ## [Field with long type show integer value in table visualization](https://discuss.elastic.co/t/field-with-long-type-show-integer-value-in-table-visualization/322401)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 6\ **Last updated:** [January 4, 2023, 6:35pm UTC](https://discuss.elastic.co/t/field-with-long-type-show-integer-value-in-table-visualization/322401 "2023-01-04T18:35:06Z")
Hi, I'm using Elastic v 7.17.3 I have data as followed: { "\_index" : "degradedtests", "\_type" : "\_doc", "\_id" : "87b7eIUB8OjwSAfblzEq", "\_score" : null, "\_source" : { … --- ## [Logging to logstash gets timeout from laravel application once the logstash instance(EC2) goes down](https://discuss.elastic.co/t/logging-to-logstash-gets-timeout-from-laravel-application-once-the-logstash-instance-ec2-goes-down/322456)
**Author:** [@yuguerthen](https://discuss.elastic.co/u/yuguerthen)\ **Replies:** 3\ **Last updated:** [January 4, 2023, 6:04pm UTC](https://discuss.elastic.co/t/logging-to-logstash-gets-timeout-from-laravel-application-once-the-logstash-instance-ec2-goes-down/322456 "2023-01-04T18:04:55Z")
Hello, I have a Laravel application that sends log data to Logstash on an AWS EC2 instance. Recently, the EC2 instance went down, and I noticed that the Laravel application started prompting timeouts when I tried to log … --- ## [Cannot index event publisher ERROR](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 5\ **Last updated:** [January 4, 2023, 5:01pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285 "2023-01-04T17:01:45Z")
Getting this error {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[network.forwarded\_ip\] of type \[ip\] in document with id 'msD2cIUBIsfwhIgCSPy9'. Preview of field's value: '0'","caused\_by":{"type":"i… --- ## [How elastic ML detect anomaly?](https://discuss.elastic.co/t/how-elastic-ml-detect-anomaly/321551)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 11\ **Last updated:** [January 4, 2023, 5:01pm UTC](https://discuss.elastic.co/t/how-elastic-ml-detect-anomaly/321551 "2023-01-04T17:01:14Z")
Hi Community, In above screenshot the upper bound values is between 1 to 4.8 something On dec 12th at 9:15 it detect major anomaly it actual value was 3 , upper bound value was 0.754 and lower bound was 0 so in … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=676) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=678)