# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=686 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 687 --- ## [Default ILM creating issues](https://discuss.elastic.co/t/default-ilm-creating-issues/321882)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [December 26, 2022, 5:52pm UTC](https://discuss.elastic.co/t/default-ilm-creating-issues/321882 "2022-12-26T17:52:20Z")
Hi Team, I am using vmetricbeat and heartbeat to collect data from multiple devices. I want to setup ILM for automatic index cleaning as well. However, both creates a default policy and are not allowing to use other ILM… --- ## [No system Metrics reported by \_cat/nodes](https://discuss.elastic.co/t/no-system-metrics-reported-by-cat-nodes/321969)
**Author:** [@ben75020](https://discuss.elastic.co/u/ben75020)\ **Replies:** 6\ **Last updated:** [December 26, 2022, 6:22pm UTC](https://discuss.elastic.co/t/no-system-metrics-reported-by-cat-nodes/321969 "2022-12-26T18:22:21Z")
Hello ! I'm a beginner and I might have missed something important. Elasticsearch is not returning any system metrics when I'm invoking the following command GET \_cat/nodes?v=true ip heap.percent ram.percent … --- ## [Policy Assignation](https://discuss.elastic.co/t/policy-assignation/320917)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 1\ **Last updated:** [December 26, 2022, 6:21pm UTC](https://discuss.elastic.co/t/policy-assignation/320917 "2022-12-26T18:21:34Z")
Hi there! I would like to understand something related to elastic agents. When I have two agents enrolled with the same policy, is the ingestion automatically balanced depending on the agent's available resources, or do… --- ## [Elasticsearch config issue](https://discuss.elastic.co/t/elasticsearch-config-issue/321999)
**Author:** [@Lakshmi\_Kumari](https://discuss.elastic.co/u/Lakshmi_Kumari)\ **Replies:** 2\ **Last updated:** [December 26, 2022, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-config-issue/321999 "2022-12-26T18:11:05Z")
Running a duplicate node for the first time in the server, getting below issue. \[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch org.elasticsearch.http.BindHttpException: Failed to… --- ## [Entire data is not coming in watcher's PDF](https://discuss.elastic.co/t/entire-data-is-not-coming-in-watchers-pdf/322000)
**Author:** [@darshan\_folane](https://discuss.elastic.co/u/darshan_folane)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 5:46pm UTC](https://discuss.elastic.co/t/entire-data-is-not-coming-in-watchers-pdf/322000 "2022-12-26T17:46:21Z")
Hello, I have set up a basic watcher which will generate a PDF every 10min, but when I get a PDF on my mail it is like only a screenshot of that dashboard, the entire data is not coming. In the dashboard, I have a tabl… --- ## [What happens when warm tier gets filled up?](https://discuss.elastic.co/t/what-happens-when-warm-tier-gets-filled-up/321975)
**Author:** [@darshan\_folane](https://discuss.elastic.co/u/darshan_folane)\ **Replies:** 3\ **Last updated:** [December 26, 2022, 5:27pm UTC](https://discuss.elastic.co/t/what-happens-when-warm-tier-gets-filled-up/321975 "2022-12-26T17:27:17Z")
Currently, I'm having three warm nodes, and ILM continuously ingesting data in warm nodes. Warm nodes is holding 85%, 80%, and 86% of the data, and data is continuously ingested. So what happens when the warm tier gets … --- ## [Adding items to a new field](https://discuss.elastic.co/t/adding-items-to-a-new-field/321995)
**Author:** [@Glad](https://discuss.elastic.co/u/Glad)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 4:15pm UTC](https://discuss.elastic.co/t/adding-items-to-a-new-field/321995 "2022-12-26T16:15:31Z")
Hi, I recently started using Elastic and I'm having a problem. I am using a monitoring system for my tests to retrieve various data from the machines I am using. This monitoring system has an api that allows Logstash to … --- ## [Extract timestamp from multiple records](https://discuss.elastic.co/t/extract-timestamp-from-multiple-records/321993)
**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 3:38pm UTC](https://discuss.elastic.co/t/extract-timestamp-from-multiple-records/321993 "2022-12-26T15:38:45Z")
Hi, Below is my config file, input { file{ path =\> "/Users/.../Work/Projects/ELK/Logstash/Input/\*.txt" start\_position =\> beginning codec =\> "json" type =\> "data" sincedb\_path =\> "NUL" } } filter { … --- ## [How to get the graph similar to kibana demo](https://discuss.elastic.co/t/how-to-get-the-graph-similar-to-kibana-demo/317936)
**Author:** [@sixsenseninja](https://discuss.elastic.co/u/sixsenseninja)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 9:55am UTC](https://discuss.elastic.co/t/how-to-get-the-graph-similar-to-kibana-demo/317936 "2022-11-02T09:55:53Z")
Hi, i saw a graph from the following url: Elastic Demos) I wonder what widget being use and how can i achieve the similar result? I can't figure out what widget being used for that. --- ## [String to IP Convert](https://discuss.elastic.co/t/string-to-ip-convert/321984)
**Author:** [@nonameo](https://discuss.elastic.co/u/nonameo)\ **Replies:** 5\ **Last updated:** [December 26, 2022, 12:59pm UTC](https://discuss.elastic.co/t/string-to-ip-convert/321984 "2022-12-26T12:59:16Z")
Hi everyone, I have a problem converting the string field to IP datatype. I'm trying to convert via convert processor in the pipeline, also tried with the grok but nothing. How can I do that? Why the processors do not w… --- ## [Pagination issue on elasticsearch query result](https://discuss.elastic.co/t/pagination-issue-on-elasticsearch-query-result/321990)
**Author:** [@Manzoor\_Faisal](https://discuss.elastic.co/u/Manzoor_Faisal)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 12:52pm UTC](https://discuss.elastic.co/t/pagination-issue-on-elasticsearch-query-result/321990 "2022-12-26T12:52:47Z")
Hy, I hope you are good and doing well. I am facing issue during search query result of ELS. I configured ELS with my Code and When I search using ELS it shows result fine but the issue is it shows loading sign (three do… --- ## ["The heap is empty" error on KNN search](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550)
**Author:** [@abay.kenzhekhan](https://discuss.elastic.co/u/abay.kenzhekhan)\ **Replies:** 10\ **Last updated:** [December 26, 2022, 12:28pm UTC](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550 "2022-12-26T12:28:35Z")
I am doing following KNN search request { "filter": { "bool": { "must\_not": { "term": { "some\_field": 14642652 } }, "must": { "term": { "some\_field2": true } } } }, "knn": { … --- ## [Index.lifecycle.rollover\_alias \[filebeat-7.17.7\] does not point to index \[filebeat-7.17.7-2022.12.21\]](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-17-7-does-not-point-to-index-filebeat-7-17-7-2022-12-21/321917)
**Author:** [@tjay](https://discuss.elastic.co/u/tjay)\ **Replies:** 14\ **Last updated:** [December 26, 2022, 11:40am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-17-7-does-not-point-to-index-filebeat-7-17-7-2022-12-21/321917 "2022-12-26T11:40:19Z")
Hi, I started using elasticsearch, kibana, logstash and filebeat and noticed that the rollover error is occurring. Can someone shed a light on this? It looks there are two indexes and the second one (000002) is used at… --- ## [Which URLs should allow for Kibana](https://discuss.elastic.co/t/which-urls-should-allow-for-kibana/317873)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 1\ **Last updated:** [November 1, 2022, 9:47am UTC](https://discuss.elastic.co/t/which-urls-should-allow-for-kibana/317873 "2022-11-01T09:47:22Z")
Hi Which URL or links should allow for the Kibana server since we have restricted internet from our servers. Once disconnected from the internet then integration and other services are getting stuck (not loading) so is… --- ## [What type to choose for Dates Column](https://discuss.elastic.co/t/what-type-to-choose-for-dates-column/321979)
**Author:** [@Hasan](https://discuss.elastic.co/u/Hasan)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 9:26am UTC](https://discuss.elastic.co/t/what-type-to-choose-for-dates-column/321979 "2022-12-26T09:26:42Z")
Hello, I have got the dataset consisting of a date column. The Format for the date in my data file is MM-DD-YYYY. While importing the dataset to Kibana what type should I choose in the pipeline and in mappings to make it… --- ## [How to start Elastic Observability](https://discuss.elastic.co/t/how-to-start-elastic-observability/321978)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 9:13am UTC](https://discuss.elastic.co/t/how-to-start-elastic-observability/321978 "2022-12-26T09:13:09Z")
We are using heartbeat for node availability and filebeat for logs shipment. Now we want to explore elastic observability features. In kibana observability section there is uptime option with heartbeat we have used one o… --- ## [Logstash filter not working](https://discuss.elastic.co/t/logstash-filter-not-working/321948)
**Author:** [@parisila](https://discuss.elastic.co/u/parisila)\ **Replies:** 2\ **Last updated:** [December 26, 2022, 8:29am UTC](https://discuss.elastic.co/t/logstash-filter-not-working/321948 "2022-12-26T08:29:36Z")
I have filebeat, logstash and elasticsearch. My logstash config.d looks like this 02-beats-input.conf receives the message from filebeat 30-elasticsearch-output.conf sends to elasticsearch ingest pipeline. Logstash… --- ## [Document is not saved](https://discuss.elastic.co/t/document-is-not-saved/321976)
**Author:** [@dave3](https://discuss.elastic.co/u/dave3)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 8:18am UTC](https://discuss.elastic.co/t/document-is-not-saved/321976 "2022-12-26T08:18:59Z")
I have created a documet with many fields, some of them are lists of Strings as follows: @Field(type = FieldType.Nested) private Set\ locationList = new HashSet\<\>(); but when I try to save this document, i get t… --- ## [Upgrade from 7.16.2 to 7.171.7](https://discuss.elastic.co/t/upgrade-from-7-16-2-to-7-171-7/320439)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [December 26, 2022, 7:37am UTC](https://discuss.elastic.co/t/upgrade-from-7-16-2-to-7-171-7/320439 "2022-12-26T07:37:07Z")
Hi, I have a three-node cluster version 716.2 and I want to upgrade it to 7.17.7. in my current cluster, TLS setting is activated by following: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpa… --- ## [Unable to add event filter exception](https://discuss.elastic.co/t/unable-to-add-event-filter-exception/319764)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 3\ **Last updated:** [November 28, 2022, 10:28am UTC](https://discuss.elastic.co/t/unable-to-add-event-filter-exception/319764 "2022-11-28T10:28:57Z")
I'm trying to drop some events and I'm not able to select any fields in Security\>manage\>Event Filters This is on 8.5.2 run in docker. No error is shown. --- ## [Matching data in two different indexes](https://discuss.elastic.co/t/matching-data-in-two-different-indexes/317741)
**Author:** [@OlegBochkarev](https://discuss.elastic.co/u/OlegBochkarev)\ **Replies:** 2\ **Last updated:** [October 31, 2022, 11:59pm UTC](https://discuss.elastic.co/t/matching-data-in-two-different-indexes/317741 "2022-10-31T23:59:00Z")
Hi, team! I collect authorising logs from two systems into two separate indexes. Index content: Index1: system1\_timestamp system1\_username system1\_ip ... Index2: system2\_timesamp system2\_username system2\_ip ..… --- ## [Metricbeat does not collect memory and disc io statistics of docker containers](https://discuss.elastic.co/t/metricbeat-does-not-collect-memory-and-disc-io-statistics-of-docker-containers/321663)
**Author:** [@Nil\_Jeffoy](https://discuss.elastic.co/u/Nil_Jeffoy)\ **Replies:** 2\ **Last updated:** [December 25, 2022, 7:15pm UTC](https://discuss.elastic.co/t/metricbeat-does-not-collect-memory-and-disc-io-statistics-of-docker-containers/321663 "2022-12-25T19:15:28Z")
I have installed Metricbeat and enabled Docker and System modules. I can see CPU usage statistics, but there is no Memory and DicsIO data. Also, I can see memory and other data from System Module. But I need Memory an… --- ## [See data in Kibana](https://discuss.elastic.co/t/see-data-in-kibana/319893)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 12:01am UTC](https://discuss.elastic.co/t/see-data-in-kibana/319893 "2022-11-28T00:01:58Z")
Hello Installed ELK on one host and FileBeat on another. Configured FileBeat to send data to Elasticsearch How can I see my logs in Kibana? Thank you --- ## [Bad elastic document](https://discuss.elastic.co/t/bad-elastic-document/321904)
**Author:** [@thuy\_do\_thi](https://discuss.elastic.co/u/thuy_do_thi)\ **Replies:** 5\ **Last updated:** [December 25, 2022, 2:49pm UTC](https://discuss.elastic.co/t/bad-elastic-document/321904 "2022-12-25T14:49:11Z")
Why is the Elastic document so bad? I am a devops engineer. I spent a week on deploy elasticsearch+logstash+kibana+kafka. After Xpack is enabled by default, I try to modify the user name of elasticsearch. It took me a… --- ## [Create time-series with stream data](https://discuss.elastic.co/t/create-time-series-with-stream-data/317352)
**Author:** [@Ismael\_Alvarez](https://discuss.elastic.co/u/Ismael_Alvarez)\ **Replies:** 4\ **Last updated:** [October 31, 2022, 4:17pm UTC](https://discuss.elastic.co/t/create-time-series-with-stream-data/317352 "2022-10-31T16:17:55Z")
hey there! I need to create a graph with the stream data, I attach an example graph that I need to create and stream logs. I appreciate the support, I have tried to create but without results, best Regards Ismael … --- ## [Kibana case sensitive search?](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [December 25, 2022, 2:18pm UTC](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788 "2022-12-25T14:18:05Z")
kibana case sensitive search? i try but is not have operator base on dashboard --- ## [Safe usage of \`\_forcemerge\` with \`only\_expunge\_deletes\`](https://discuss.elastic.co/t/safe-usage-of-forcemerge-with-only-expunge-deletes/321964)
**Author:** [@Au6ojlut](https://discuss.elastic.co/u/Au6ojlut)\ **Replies:** 0\ **Last updated:** [December 25, 2022, 10:31am UTC](https://discuss.elastic.co/t/safe-usage-of-forcemerge-with-only-expunge-deletes/321964 "2022-12-25T10:31:37Z")
Hello Team I am using the Elasticsearch 8.4.2. I have several indices, that is receiving updates (or deletes). On some indices update operation goes with the optimistic-concurrency-control. After some time, when the p… --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/321963)
**Author:** [@SaM9](https://discuss.elastic.co/u/SaM9)\ **Replies:** 0\ **Last updated:** [December 25, 2022, 9:59am UTC](https://discuss.elastic.co/t/logstash-configuration/321963 "2022-12-25T09:59:41Z")
in my elastic stack i have the following components : elastic agnet , fleet server , logstach and ealsticsearch cluster in my logstach output config do I have to send data directory to ealstcisearch data nodes or to flee… --- ## [Hey I created canvas widget using below script but widgets failed to load in 8.4.2 Version](https://discuss.elastic.co/t/hey-i-created-canvas-widget-using-below-script-but-widgets-failed-to-load-in-8-4-2-version/317782)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 6\ **Last updated:** [October 31, 2022, 12:31pm UTC](https://discuss.elastic.co/t/hey-i-created-canvas-widget-using-below-script-but-widgets-failed-to-load-in-8-4-2-version/317782 "2022-10-31T12:31:40Z")
I'm facing an issue of failed loading of widgets and even assets like images when elasticsearch moves to 8.3.2 to 8.4.2. I have two kinds of widgets like Status count and percentage of status (Also handle divide by zero… --- ## [Translog\_ops too slow while moving shards](https://discuss.elastic.co/t/translog-ops-too-slow-while-moving-shards/321960)
**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\ **Replies:** 0\ **Last updated:** [December 25, 2022, 8:52am UTC](https://discuss.elastic.co/t/translog-ops-too-slow-while-moving-shards/321960 "2022-12-25T08:52:14Z")
I have serval ES cluster that will do shards moving periodically(from hot node to cold node). Recently I notice that some of the shards are moved very slow compared to others. Here is one of the slow cluster: $ curl -XG… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=685) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=687)