# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=727 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 728 --- ## [Problems starting logstash (snmptrap)](https://discuss.elastic.co/t/problems-starting-logstash-snmptrap/319230)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 3\ **Last updated:** [November 18, 2022, 3:14pm UTC](https://discuss.elastic.co/t/problems-starting-logstash-snmptrap/319230 "2022-11-18T15:14:32Z")
Hello, I have a problem starting logstash. If I start logstash via "systemctl start logstash.service" I get the following error message: \[2022-11-17T18:11:59,947\]\[WARN \]\[logstash.inputs.snmptrap \]\[main\]\[eed358a3fbc602… --- ## [Logstash configuration error](https://discuss.elastic.co/t/logstash-configuration-error/319270)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 5\ **Last updated:** [November 18, 2022, 3:12pm UTC](https://discuss.elastic.co/t/logstash-configuration-error/319270 "2022-11-18T15:12:54Z")
Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:vpn, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\t\\r\\n\], "#", \[A-Za-z0-9\_-\], '"', "'", \[A-Za-z\_\], "-", \[0-9\], … --- ## [Clarification on base dependencies](https://discuss.elastic.co/t/clarification-on-base-dependencies/319146)
**Author:** [@chitralverma](https://discuss.elastic.co/u/chitralverma)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 2:26pm UTC](https://discuss.elastic.co/t/clarification-on-base-dependencies/319146 "2022-11-18T14:26:08Z")
Do we use the new elasticsearch-java client mentioned below in es-hadoop and es-spark ? https://mvnrepository.com/artifact/co.elastic.clients/elasticsearch-java/8.5.0 --- ## [Optimizing single-node search performance](https://discuss.elastic.co/t/optimizing-single-node-search-performance/319292)
**Author:** [@Jozef](https://discuss.elastic.co/u/Jozef)\ **Replies:** 3\ **Last updated:** [November 18, 2022, 2:13pm UTC](https://discuss.elastic.co/t/optimizing-single-node-search-performance/319292 "2022-11-18T14:13:20Z")
Hello all, I am relatively new to Elasticsearch, and am currently trying to optimize a single-node ES instance. I am trying to understand a concept, which seems to have conflicting information. First of all, the data I… --- ## [How can I know kibana dashboard latency, max indexing tps, data volume queried per time etc](https://discuss.elastic.co/t/how-can-i-know-kibana-dashboard-latency-max-indexing-tps-data-volume-queried-per-time-etc/319306)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 1:47pm UTC](https://discuss.elastic.co/t/how-can-i-know-kibana-dashboard-latency-max-indexing-tps-data-volume-queried-per-time-etc/319306 "2022-11-18T13:47:32Z")
I wanted to test my es to find ideal cluster volume in my production level (the number of shards and their size etc) I watched one video Quantitative Cluster Sizing and decided to follow steps in the video (Quantitati… --- ## [What is the approach for edge\_ngram search query to have a correct word slop count?](https://discuss.elastic.co/t/what-is-the-approach-for-edge-ngram-search-query-to-have-a-correct-word-slop-count/319301)
**Author:** [@orange.cold256](https://discuss.elastic.co/u/orange.cold256)\ **Replies:** 0\ **Last updated:** [November 18, 2022, 12:59pm UTC](https://discuss.elastic.co/t/what-is-the-approach-for-edge-ngram-search-query-to-have-a-correct-word-slop-count/319301 "2022-11-18T12:59:57Z")
I'm trying to make a soft prefix-search within n fields. Also the distance between tokens is a must. so I've decided to use edge\_ngrams with a bool query. But as far the tokens are edge\_ngrams the slop is calculated in t… --- ## [How to use DATEDIFF with logstash jdbc\_static filter](https://discuss.elastic.co/t/how-to-use-datediff-with-logstash-jdbc-static-filter/319293)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 0\ **Last updated:** [November 18, 2022, 12:11pm UTC](https://discuss.elastic.co/t/how-to-use-datediff-with-logstash-jdbc-static-filter/319293 "2022-11-18T12:11:16Z")
Hi, I want to calculate the DATEDIFF under logstash and use it later under filter-\>jdbc\_static -\>local\_lookups query for comparison. when I tried to Calculate DATEDIFF under filter-\>jdbc\_static -\>local\_lookups , I g… --- ## [Filebeat - Exiting: error unpacking config data: more than one namespace configured accessing 'queue'](https://discuss.elastic.co/t/filebeat-exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-queue/319028)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 11:56am UTC](https://discuss.elastic.co/t/filebeat-exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-queue/319028 "2022-11-18T11:56:50Z")
Hi All, I have received the following error message in the /var/log/messages - while filebeat won't start: Exiting: error unpacking config data: more than one namespace configured accessing 'queue' (source:'/usr/asdf/e… --- ## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"NoMethodError", :message=\>"undefined method \`close' for nil:NilClass"](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-nomethoderror-message-undefined-method-close-for-nil-nilclass/319186)
**Author:** [@Vedansh\_Singhal](https://discuss.elastic.co/u/Vedansh_Singhal)\ **Replies:** 10\ **Last updated:** [November 18, 2022, 11:14am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-nomethoderror-message-undefined-method-close-for-nil-nilclass/319186 "2022-11-18T11:14:37Z")
\[2022-11-17T09:26:38,925\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.8.23"} \[2022-11-17T09:26:42,617\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::Pipel… --- ## [Errors with parsing json](https://discuss.elastic.co/t/errors-with-parsing-json/319234)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [November 18, 2022, 11:03am UTC](https://discuss.elastic.co/t/errors-with-parsing-json/319234 "2022-11-18T11:03:14Z")
Hi My pipeline works for shorter json file but when it was harnessed on the production files it has been crashed. I've enclosed a log files from logstash to present output. \[WARN \] 2022-11-17 18:08:03.585 \[\[ip40\]\>wor… --- ## [.NET IIS Auto Profiler Instrumentation Stuck and Not showing in Kibana Windows](https://discuss.elastic.co/t/net-iis-auto-profiler-instrumentation-stuck-and-not-showing-in-kibana-windows/319193)
**Author:** [@giga](https://discuss.elastic.co/u/giga)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 12:46pm UTC](https://discuss.elastic.co/t/net-iis-auto-profiler-instrumentation-stuck-and-not-showing-in-kibana-windows/319193 "2022-11-17T12:46:20Z")
Hi, I've installed elasticsearch, kibana and APM Server on windows environment. Then I have .Net application run on IIS in another windows computer (client side) in the same network. I've following this guide: But the … --- ## [Connection exception during geoip database \[ERROR\]\[o.e.i.g.GeoIpDownloader \]\[WUWVC0ASX02\]](https://discuss.elastic.co/t/connection-exception-during-geoip-database-error-o-e-i-g-geoipdownloader-wuwvc0asx02/318942)
**Author:** [@Kamil\_BdBelfort](https://discuss.elastic.co/u/Kamil_BdBelfort)\ **Replies:** 4\ **Last updated:** [November 18, 2022, 9:45am UTC](https://discuss.elastic.co/t/connection-exception-during-geoip-database-error-o-e-i-g-geoipdownloader-wuwvc0asx02/318942 "2022-11-18T09:45:36Z")
Hi there, I've downloaded the latest version of elasticsearch 8.5.1 and when I try to run it (bin\\elasticsearch.bat) I get this error: \[2022-11-15T01:08:55,761\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[WUWVC0ASX02\] exception… --- ## [Separate yum repos for each architecture](https://discuss.elastic.co/t/separate-yum-repos-for-each-architecture/319220)
**Author:** [@sokratis](https://discuss.elastic.co/u/sokratis)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 4:19pm UTC](https://discuss.elastic.co/t/separate-yum-repos-for-each-architecture/319220 "2022-11-17T16:19:06Z")
Hello, I noticed that all rpms come under the same yum repo (as documented): \[logstash-8.x\] name=Elastic repository for 8.x packages baseurl=https://artifacts.elastic.co/packages/8.x/yum gpgcheck=1 gpgkey=https://artif… --- ## [Data dog+Kibana plugin](https://discuss.elastic.co/t/data-dog-kibana-plugin/317274)
**Author:** [@Racheli\_Vagenfeld](https://discuss.elastic.co/u/Racheli_Vagenfeld)\ **Replies:** 1\ **Last updated:** [October 23, 2022, 2:34pm UTC](https://discuss.elastic.co/t/data-dog-kibana-plugin/317274 "2022-10-23T14:34:53Z")
Hi, I want to use this: Datadog output plugin | Logstash Reference \[8.4\] | Elastic\](Datadog output plugin | Logstash Reference \[8.4\] | Elastic Is there anyway to make the integration based on specific filter of kibana … --- ## [Parse a json file that includes an xml](https://discuss.elastic.co/t/parse-a-json-file-that-includes-an-xml/317312)
**Author:** [@Alexandros](https://discuss.elastic.co/u/Alexandros)\ **Replies:** 7\ **Last updated:** [November 18, 2022, 8:40am UTC](https://discuss.elastic.co/t/parse-a-json-file-that-includes-an-xml/317312 "2022-11-18T08:40:06Z")
Hello all, I want to send the following json document to elasticsearch through logstash. "short\_message": "\ \ **Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [November 18, 2022, 6:27am UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-logstash-not-working-with-jdk-11-0-16-315105-5/317480 "2022-11-18T06:27:11Z") Hi, This is in continuation of my prev query that got auto-closed. Summary: Logstash 7.17.3 is not working with jdk \>= 11.0.16 As per @stephenb 's response, I've checked LS\_JAVA\_HOME is properly set. I see that th… --- ## [Getting empty response from server](https://discuss.elastic.co/t/getting-empty-response-from-server/319175)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 9\ **Last updated:** [November 18, 2022, 4:42am UTC](https://discuss.elastic.co/t/getting-empty-response-from-server/319175 "2022-11-18T04:42:00Z")
Hi I've installed elk stack of version 8.5.1. All services are active. But when i try to access curl http://localhost:9200 or publicip:9200 getting empty response error path.data: /var/lib/elasticsearch path.logs: /var… --- ## [Is there a way to combine BM25 lexical search score with dense vector score to interpolate them together?](https://discuss.elastic.co/t/is-there-a-way-to-combine-bm25-lexical-search-score-with-dense-vector-score-to-interpolate-them-together/319243)
**Author:** [@Scott\_M](https://discuss.elastic.co/u/Scott_M)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 9:54pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-combine-bm25-lexical-search-score-with-dense-vector-score-to-interpolate-them-together/319243 "2022-11-17T21:54:49Z")
Hello, this is related to the closed topic here: Sorry to make new topic but that one is closed. I created a query based on the answer there, and it runs fine but gives only the bm25 answers, none of the vector-based … --- ## [Date parsing issue](https://discuss.elastic.co/t/date-parsing-issue/319246)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 5\ **Last updated:** [November 18, 2022, 4:27am UTC](https://discuss.elastic.co/t/date-parsing-issue/319246 "2022-11-18T04:27:36Z")
I m having strange issue with Date parsing. Here is my config. input { stdin { } } output { stdout { codec =\> rubydebug } } filter { date { match =\> \["message", "ISO8601"\] } } when i run echo '2022-11-17 15:… --- ## [Error while creating index pattern](https://discuss.elastic.co/t/error-while-creating-index-pattern/317593)
**Author:** [@Kartik101](https://discuss.elastic.co/u/Kartik101)\ **Replies:** 2\ **Last updated:** [November 18, 2022, 4:12am UTC](https://discuss.elastic.co/t/error-while-creating-index-pattern/317593 "2022-11-18T04:12:37Z")
I am using ES 7.10.2 and Kibana7.10.2, and getting below error in "nohup.out" file (running kibana in background) while creating index pattern: {"type":"error","@timestamp":"2022-08-23T13:53:37Z","tags":\["connection","c… --- ## [Change logstash index creation format](https://discuss.elastic.co/t/change-logstash-index-creation-format/319254)
**Author:** [@koreagrammer](https://discuss.elastic.co/u/koreagrammer)\ **Replies:** 0\ **Last updated:** [November 18, 2022, 2:56am UTC](https://discuss.elastic.co/t/change-logstash-index-creation-format/319254 "2022-11-18T02:56:14Z")
How do I set the logstash output index name to the client IP where metricbeat is installed? I just want logstash output index format to have below Metricbeat-{metricbeat.client.ip}-metricbeat.version-{YYYY.MM.DD} --- ## [Kibana url not working. FATAL Error: \[config validation of \[elasticsearch\].username\]: value of "elastic" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead](https://discuss.elastic.co/t/kibana-url-not-working-fatal-error-config-validation-of-elasticsearch-username-value-of-elastic-is-forbidden-this-is-a-superuser-account-that-cannot-write-to-system-indices-that-kibana-needs-to-function-use-a-service-account-token-instead/317026)
**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\ **Replies:** 13\ **Last updated:** [November 18, 2022, 12:28am UTC](https://discuss.elastic.co/t/kibana-url-not-working-fatal-error-config-validation-of-elasticsearch-username-value-of-elastic-is-forbidden-this-is-a-superuser-account-that-cannot-write-to-system-indices-that-kibana-needs-to-function-use-a-service-account-token-instead/317026 "2022-11-18T00:28:06Z")
Hi Team, Kindly help here how can i fix this. ? Previously, ELK failed due to an error "java.lang. IllegalStateException: A node cannot be upgraded directly from version \[7.10.2\] to version \[8.4.3\], it must first be… --- ## [Is possible to extract \_id doc with Rally and custom track?](https://discuss.elastic.co/t/is-possible-to-extract-id-doc-with-rally-and-custom-track/319070)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [November 17, 2022, 6:41pm UTC](https://discuss.elastic.co/t/is-possible-to-extract-id-doc-with-rally-and-custom-track/319070 "2022-11-17T18:41:53Z")
Hey there, I would like to know if could be possible to extract the \_id document when creating a custom-track with Rally. The goal is to test write performance when the \_id is provided and not thanks --- ## [Waiting for input plugin, Dropping events to unblock input plugin, Pipeline terminated](https://discuss.elastic.co/t/waiting-for-input-plugin-dropping-events-to-unblock-input-plugin-pipeline-terminated/319081)
**Author:** [@AdxDaz](https://discuss.elastic.co/u/AdxDaz)\ **Replies:** 3\ **Last updated:** [November 17, 2022, 11:19pm UTC](https://discuss.elastic.co/t/waiting-for-input-plugin-dropping-events-to-unblock-input-plugin-pipeline-terminated/319081 "2022-11-17T23:19:38Z")
Hi Elastic team, I was working in the next post "Locate json field with jsonpath (logstash) - #2 by Badger" and despite the code works, i have the next error when the position of the json value change: \[2022-11-15T09:3… --- ## [Has anybody run ES cluster on AWS using either is4gen or im4gn? vs say i4i?](https://discuss.elastic.co/t/has-anybody-run-es-cluster-on-aws-using-either-is4gen-or-im4gn-vs-say-i4i/319249)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 11:06pm UTC](https://discuss.elastic.co/t/has-anybody-run-es-cluster-on-aws-using-either-is4gen-or-im4gn-vs-say-i4i/319249 "2022-11-17T23:06:55Z")
I'm curious if there's any performance difference. Since these are all storage optimized instance. I'm mainly curious about ARM vs Intel performance delta. We are mostly write heavy. Something like 80+% write vs read… --- ## [Two file output in Logstash](https://discuss.elastic.co/t/two-file-output-in-logstash/319056)
**Author:** [@Vrops](https://discuss.elastic.co/u/Vrops)\ **Replies:** 4\ **Last updated:** [November 17, 2022, 10:07pm UTC](https://discuss.elastic.co/t/two-file-output-in-logstash/319056 "2022-11-17T22:07:51Z")
Hello, I have explored several forums but can't find any answers to my question. I'm trying to get 2 Filebeat inputs and redirect them via Logstash with 2 different file outputs. Here are my configuration files: file… --- ## [Reporting SQL relational data (Oracle) in Kibana](https://discuss.elastic.co/t/reporting-sql-relational-data-oracle-in-kibana/319178)
**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 11:14am UTC](https://discuss.elastic.co/t/reporting-sql-relational-data-oracle-in-kibana/319178 "2022-11-17T11:14:27Z")
Hi all, just a theoric question about Kibana reporting capabilities. We have a Oracle database where there are at least 10 tables we want to report data of. We started using Microsoft Power Bi and the results were ver… --- ## [The client is unable to verify that the server is Elasticsearch due security privileges on the server side](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015)
**Author:** [@Vasuji](https://discuss.elastic.co/u/Vasuji)\ **Replies:** 4\ **Last updated:** [November 17, 2022, 8:23pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-security-privileges-on-the-server-side/319015 "2022-11-17T20:23:05Z")
Why am I getting this error in my Mac with Elasticsearch 8.5.1 running in Docker and Jupyter notebook is supposed to communicate with Elasticsearch through port 9200? The client is unable to verify that the server is El… --- ## [Impossible query response?](https://discuss.elastic.co/t/impossible-query-response/319236)
**Author:** [@iamthealex1](https://discuss.elastic.co/u/iamthealex1)\ **Replies:** 3\ **Last updated:** [November 17, 2022, 7:50pm UTC](https://discuss.elastic.co/t/impossible-query-response/319236 "2022-11-17T19:50:35Z")
POST /metricbeat-2022.11.17/\_search { "size": 2, "\_source": \["system.process.cpu.total.pct"\], "query": { "bool": { "must": \[ {"match": { "event.dataset": "system.process" }}, {"range": {… --- ## [Adding more log directories to System Integration](https://discuss.elastic.co/t/adding-more-log-directories-to-system-integration/319237)
**Author:** [@ster1ingArch3r](https://discuss.elastic.co/u/ster1ingArch3r)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 7:17pm UTC](https://discuss.elastic.co/t/adding-more-log-directories-to-system-integration/319237 "2022-11-17T19:17:28Z")
Heres what I have going on. I have created the elastic stack 3 nodes +a kibana Node which also is serving as my fleet server. I can deploy agents to new servers and endpoints and collect data from them. Unfortunately one… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=726) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=728)