# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=726 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 727 --- ## [Elasticsearch & Kibana Audit logs](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151)
**Author:** [@syed0510](https://discuss.elastic.co/u/syed0510)\ **Replies:** 11\ **Last updated:** [November 21, 2022, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151 "2022-11-21T05:47:37Z")
Hi Team, Elasticsearch audit logs is taking 20 gb size everyday. Can you please help me to minimize the size of audit log file. Regards, Syed --- ## [Trying to connect to elasticsearch using jenkins logstash plugin](https://discuss.elastic.co/t/trying-to-connect-to-elasticsearch-using-jenkins-logstash-plugin/319264)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 5:35am UTC](https://discuss.elastic.co/t/trying-to-connect-to-elasticsearch-using-jenkins-logstash-plugin/319264 "2022-11-21T05:35:39Z")
Hi I've installed logstash plugin on jenkins. and elk stack 8.5.1 with authentication. I can access elasticsearch only using https with -k flag. How can i configure logstash to access elasticsaearch. when i enter onl… --- ## [Elasticsearch cluster migration from 7.12 to 8.5](https://discuss.elastic.co/t/elasticsearch-cluster-migration-from-7-12-to-8-5/319271)
**Author:** [@satendra1987](https://discuss.elastic.co/u/satendra1987)\ **Replies:** 10\ **Last updated:** [November 21, 2022, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-migration-from-7-12-to-8-5/319271 "2022-11-21T05:02:30Z")
Hi, we are running an 1 node elasticsearch cluster on 7.12. we want to setup a 3 node cluster on 8.5. can someone let me know how to migrate the existing indexes to new cluster. Thanks Satendra --- ## [Kibana - important size of sdtout file](https://discuss.elastic.co/t/kibana-important-size-of-sdtout-file/319166)
**Author:** [@Stef072](https://discuss.elastic.co/u/Stef072)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 2:11am UTC](https://discuss.elastic.co/t/kibana-important-size-of-sdtout-file/319166 "2022-11-21T02:11:08Z")
Hi there, The stdout file we have in /var/log/kibana seems to increase without end reaching todayy 2.1Gb. Is there a strategy to manage this file to control hard disk occupation ? Thanks --- ## [{"statusCode":503,"error":"Service Unavailable","message":"License is not available."}](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/319150)
**Author:** [@auser](https://discuss.elastic.co/u/auser)\ **Replies:** 6\ **Last updated:** [November 21, 2022, 2:04am UTC](https://discuss.elastic.co/t/statuscode-503-error-service-unavailable-message-license-is-not-available/319150 "2022-11-21T02:04:09Z")
I recently configured https for kibana running in three different environments. One of them works fine while the other two have issue as mentioned below - 1 - {"statusCode":503,"error":"Service Unavailable","message":"L… --- ## [Delete Resources on Elastic Cloud using REST API](https://discuss.elastic.co/t/delete-resources-on-elastic-cloud-using-rest-api/319221)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 4:29pm UTC](https://discuss.elastic.co/t/delete-resources-on-elastic-cloud-using-rest-api/319221 "2022-11-17T16:29:44Z")
Hi, This is regarding Elastic cloud (cloud.elastic.co/api/v1) - there is no matching tag. It seems like there is no option to delete resources/deployments. when using the shutdown API it says that resources are hidden… --- ## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818)
**Author:** [@richardvk](https://discuss.elastic.co/u/richardvk)\ **Replies:** 1\ **Last updated:** [November 20, 2022, 11:33pm UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818 "2022-11-20T23:33:16Z")
Im trying to enable clustering as per: I get this when creating a token: root@elk-1 ~ # /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node ERROR: Failed to determine the health of the cluster… --- ## [Transmitting Kibana data through watchers](https://discuss.elastic.co/t/transmitting-kibana-data-through-watchers/314199)
**Author:** [@Nalin](https://discuss.elastic.co/u/Nalin)\ **Replies:** 10\ **Last updated:** [October 25, 2022, 8:19am UTC](https://discuss.elastic.co/t/transmitting-kibana-data-through-watchers/314199 "2022-10-25T08:19:23Z")
Hi All, We are trying to run the API call for "GET /\_cat/indices" through a watcher , but we are not able to receive the data . Could anyone please help us with the correct script for running the above GET command thro… --- ## [Error creating a new index : validation failed maximum shards open](https://discuss.elastic.co/t/error-creating-a-new-index-validation-failed-maximum-shards-open/318564)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 3\ **Last updated:** [November 20, 2022, 5:32pm UTC](https://discuss.elastic.co/t/error-creating-a-new-index-validation-failed-maximum-shards-open/318564 "2022-11-20T17:32:39Z")
Hi, I need to create a new index and get the following error: Could you please help? command: POST /myindex1213/\_doc error message: validatiion failed 1: this action would add \[2\] total shards, but this cluster cur… --- ## [Where can I see my Certificate Fingerprint?](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335)
**Author:** [@asd11](https://discuss.elastic.co/u/asd11)\ **Replies:** 6\ **Last updated:** [November 20, 2022, 3:50pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335 "2022-11-20T15:50:20Z")
The documentation says: the CA fingerprint logged by the server at initial startup. However I can't find it. Is it in security -\> CA certificates? If yes, than I can download that file, but how can I get the fingerpr… --- ## [iframeCode Single Metric Viewer](https://discuss.elastic.co/t/iframecode-single-metric-viewer/317354)
**Author:** [@Ismael\_Alvarez](https://discuss.elastic.co/u/Ismael_Alvarez)\ **Replies:** 0\ **Last updated:** [October 24, 2022, 11:21pm UTC](https://discuss.elastic.co/t/iframecode-single-metric-viewer/317354 "2022-10-24T23:21:14Z")
hey there! I need to share Single Metric Viewer as embed code Snapshot, attached example. Best regards --- ## [How can I increase number of values of visualize](https://discuss.elastic.co/t/how-can-i-increase-number-of-values-of-visualize/319289)
**Author:** [@yts85205107](https://discuss.elastic.co/u/yts85205107)\ **Replies:** 4\ **Last updated:** [November 20, 2022, 6:49am UTC](https://discuss.elastic.co/t/how-can-i-increase-number-of-values-of-visualize/319289 "2022-11-20T06:49:08Z")
Hi, I want to increase number of values of visualize, but I can't found the setting to increase. now, the number of values is 1000, I want to increase to 3000, how can I increase? Thanks. --- ## [How to get size of each event/record in logstash /elasticsearch](https://discuss.elastic.co/t/how-to-get-size-of-each-event-record-in-logstash-elasticsearch/319235)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 1\ **Last updated:** [November 20, 2022, 5:57am UTC](https://discuss.elastic.co/t/how-to-get-size-of-each-event-record-in-logstash-elasticsearch/319235 "2022-11-20T05:57:28Z")
How to get size of each event/record in logstash /elasticsearch. Based on that size i am trying to calculate size of each application in that index. --- ## [Dashboard and visualization showing No results found, but Discover page shows data](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344)
**Author:** [@D3epDiv3r](https://discuss.elastic.co/u/D3epDiv3r)\ **Replies:** 2\ **Last updated:** [November 20, 2022, 3:04am UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344 "2022-11-20T03:04:12Z")
Hello team, I am using Elastic Stack 5.2.2, I have been able to parse logs from Suricata to Logstash and Elasticsearch which displays in the Kibana Discover page as seen below: But whenever I go to the Dashboard tab… --- ## [Spark use both sql and dsl to query](https://discuss.elastic.co/t/spark-use-both-sql-and-dsl-to-query/319068)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 2\ **Last updated:** [November 20, 2022, 1:55am UTC](https://discuss.elastic.co/t/spark-use-both-sql-and-dsl-to-query/319068 "2022-11-20T01:55:13Z")
i can use API to call endpoint SQL combine both SQL query and dsl follow this doc link . my question is how can I use this query by spark-elasticsearch? Thanks and best regards --- ## [Is reindexing to a new index necessary after updating settings and mappings to support a multi-field in elasticsearch?](https://discuss.elastic.co/t/is-reindexing-to-a-new-index-necessary-after-updating-settings-and-mappings-to-support-a-multi-field-in-elasticsearch/319260)
**Author:** [@Karthik\_Amar](https://discuss.elastic.co/u/Karthik_Amar)\ **Replies:** 4\ **Last updated:** [November 20, 2022, 12:57am UTC](https://discuss.elastic.co/t/is-reindexing-to-a-new-index-necessary-after-updating-settings-and-mappings-to-support-a-multi-field-in-elasticsearch/319260 "2022-11-20T00:57:21Z")
Please consider the scenario. Existing System I have an index named contacts\_index with 100 documents. Each document has property named city with some text value in it. Index has settings as the following { … --- ## [Kibana installation error](https://discuss.elastic.co/t/kibana-installation-error/318913)
**Author:** [@Vivek\_Arumugam](https://discuss.elastic.co/u/Vivek_Arumugam)\ **Replies:** 16\ **Last updated:** [November 19, 2022, 4:28pm UTC](https://discuss.elastic.co/t/kibana-installation-error/318913 "2022-11-19T16:28:49Z")
Hi All, I have installed Elasticsearch "8.5.0". I keep getting the following problem when attempting to install Kibana. --- ## [Failed to start Ping remote services for availability and log results to Elasticsearch or send to Logstash](https://discuss.elastic.co/t/failed-to-start-ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/319343)
**Author:** [@bta16](https://discuss.elastic.co/u/bta16)\ **Replies:** 1\ **Last updated:** [November 19, 2022, 3:26pm UTC](https://discuss.elastic.co/t/failed-to-start-ping-remote-services-for-availability-and-log-results-to-elasticsearch-or-send-to-logstash/319343 "2022-11-19T15:26:23Z")
i have config heartbeat like tutorial quickstart, when i enable and start heartbeat, it noticed me: heartbeat-elastic.service - Ping remote services for availability and log results to Elasticsearch or send to Logstash.… --- ## [Logstash split the child json to the parent layer](https://discuss.elastic.co/t/logstash-split-the-child-json-to-the-parent-layer/319339)
**Author:** [@lnsane](https://discuss.elastic.co/u/lnsane)\ **Replies:** 1\ **Last updated:** [November 19, 2022, 3:32pm UTC](https://discuss.elastic.co/t/logstash-split-the-child-json-to-the-parent-layer/319339 "2022-11-19T15:32:14Z")
this is json { "@timestamp" =\> 2022-11-19T06:19:08.249Z, "database" =\> "12", "data": { "a": 1, "b": 2 } } how resolve to { "@timestamp" =\> 2022-11-19T06:19:08.249Z, "database" =\> "12… --- ## [Sort products by ids stored in product\_cat index](https://discuss.elastic.co/t/sort-products-by-ids-stored-in-product-cat-index/318772)
**Author:** [@kiko](https://discuss.elastic.co/u/kiko)\ **Replies:** 5\ **Last updated:** [November 19, 2022, 1:49pm UTC](https://discuss.elastic.co/t/sort-products-by-ids-stored-in-product-cat-index/318772 "2022-11-19T13:49:29Z")
I have a products index which I now need to sort using ordered list of IDs stored in each product category document (in product\_categories index), like so: // product index { id:1, name: "coco" }, { id:2, name: "hazel" … --- ## [Java access denied when starting elasticsearch](https://discuss.elastic.co/t/java-access-denied-when-starting-elasticsearch/319333)
**Author:** [@johnny1891](https://discuss.elastic.co/u/johnny1891)\ **Replies:** 2\ **Last updated:** [November 19, 2022, 11:08am UTC](https://discuss.elastic.co/t/java-access-denied-when-starting-elasticsearch/319333 "2022-11-19T11:08:49Z")
Hi, I'm following this tutorial to install ELK stack How to install Elastic SIEM and Elastic EDR - On The Hunt but after adding certificates, I try to restart the service but I get this: I downloaded elastic today o… --- ## [Filebeat Threat Intel Module Errors](https://discuss.elastic.co/t/filebeat-threat-intel-module-errors/319225)
**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\ **Replies:** 2\ **Last updated:** [November 19, 2022, 9:33am UTC](https://discuss.elastic.co/t/filebeat-threat-intel-module-errors/319225 "2022-11-19T09:33:39Z")
Hi, I am setting up MISP servers and Threat Intel Module. I can get the threat intel module to bring in IOCs from other feeds, but MISP is creating issues. I keep getting the following error.message: "cannot access met… --- ## [Elasticsearch Fails to Start Java Lang Illegal State Exception: No match found](https://discuss.elastic.co/t/elasticsearch-fails-to-start-java-lang-illegal-state-exception-no-match-found/319239)
**Author:** [@D3epDiv3r](https://discuss.elastic.co/u/D3epDiv3r)\ **Replies:** 7\ **Last updated:** [November 19, 2022, 1:00am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-java-lang-illegal-state-exception-no-match-found/319239 "2022-11-19T01:00:32Z")
Hello folks, I have been trying to get Elastic Stack to run for at least 2 days now, I have been given a project in school that requires me to use Elasticsearch 5.2.0 specifically (Logstash 5.2.0, and Kibana 5.2.0) I hav… --- ## [Filtering aggregation results based on nested objects in ElasticSearch](https://discuss.elastic.co/t/filtering-aggregation-results-based-on-nested-objects-in-elasticsearch/319313)
**Author:** [@kornikopic](https://discuss.elastic.co/u/kornikopic)\ **Replies:** 0\ **Last updated:** [November 18, 2022, 3:11pm UTC](https://discuss.elastic.co/t/filtering-aggregation-results-based-on-nested-objects-in-elasticsearch/319313 "2022-11-18T15:11:59Z")
In my database, I have 2 tables such as: +------------+ +-------------+ | Project | | Deliverable | +------------+ +-------------+ | id +----------+ project\_id | | |1 … --- ## [Roadmap for the Elastic Stack Subscription model](https://discuss.elastic.co/t/roadmap-for-the-elastic-stack-subscription-model/319302)
**Author:** [@hanna](https://discuss.elastic.co/u/hanna)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 9:23pm UTC](https://discuss.elastic.co/t/roadmap-for-the-elastic-stack-subscription-model/319302 "2022-11-18T21:23:21Z")
what are the plans in the future regarding the Elastic Stack subscriptions? Can I be sure that the features of the basic subscription will remain available free of charge in the future? I would like to avoid unexpected c… --- ## [Autodiscover with nomad doesn't work](https://discuss.elastic.co/t/autodiscover-with-nomad-doesnt-work/318690)
**Author:** [@Natanael\_Weslley](https://discuss.elastic.co/u/Natanael_Weslley)\ **Replies:** 5\ **Last updated:** [November 18, 2022, 8:11pm UTC](https://discuss.elastic.co/t/autodiscover-with-nomad-doesnt-work/318690 "2022-11-18T20:11:16Z")
Hi, guys! I'm having some trouble to configure autodiscover to run with nomad, to get allocation logs from the nomad agent and send to logstash. Everytime i got this message in filebeat logs. // "message":"Non-zero met… --- ## [How can I edit "network.host" from cloud.elastic.co?](https://discuss.elastic.co/t/how-can-i-edit-network-host-from-cloud-elastic-co/319327)
**Author:** [@asd11](https://discuss.elastic.co/u/asd11)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 7:26pm UTC](https://discuss.elastic.co/t/how-can-i-edit-network-host-from-cloud-elastic-co/319327 "2022-11-18T19:26:45Z")
I know that I have to edit elasticsearch.yml. I tried it from Manage user settings and extensions but the user setting is not supported... I also tried it from the API console, but it says: "persistent setting \[network… --- ## [Inconsistent results with http\_poller & XML parsing](https://discuss.elastic.co/t/inconsistent-results-with-http-poller-xml-parsing/319310)
**Author:** [@jdswifty](https://discuss.elastic.co/u/jdswifty)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 3:53pm UTC](https://discuss.elastic.co/t/inconsistent-results-with-http-poller-xml-parsing/319310 "2022-11-18T15:53:09Z")
Looking for some advice here on an issue i'm facing with http\_poller & xml parsing. I'm polling 2 urls every 60 secs that return XML & getting some very inconsistent results. Sometimes i'm getting perfect output (3 dis… --- ## [Snapshot and restore](https://discuss.elastic.co/t/snapshot-and-restore/319134)
**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\ **Replies:** 4\ **Last updated:** [November 18, 2022, 3:54pm UTC](https://discuss.elastic.co/t/snapshot-and-restore/319134 "2022-11-18T15:54:29Z")
Hi, We are planning to upgrade our ELK stack from 6.8 to 8.2. We are trying to take the snapshot and it is working fine but, wondering if there are any api to restore so we can test all the breaking changes before movi… --- ## [Logstash ConfigurationError](https://discuss.elastic.co/t/logstash-configurationerror/319218)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 4\ **Last updated:** [November 18, 2022, 3:33pm UTC](https://discuss.elastic.co/t/logstash-configurationerror/319218 "2022-11-18T15:33:05Z")
Hello, When I run logstash with this configuration file I get these errors. Do you have a solution? Best regards, /etc/logstash/conf.d/logstash-syslog.conf input { tcp { port =\> 5000 type =\> syslog } u… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=725) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=727)