# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=796 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 797 --- ## [Region Map](https://discuss.elastic.co/t/region-map/314271)
**Author:** [@aa09](https://discuss.elastic.co/u/aa09)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 9:44am UTC](https://discuss.elastic.co/t/region-map/314271 "2022-09-13T09:44:28Z")
Hi, I want to know if it possible to create a region map by using geo points? I have geo points in my index but its unclear whether I also need to have a region code or if the map can be constructed with just the geo po… --- ## [Are replicase required when using external volumes like EBS?](https://discuss.elastic.co/t/are-replicase-required-when-using-external-volumes-like-ebs/314267)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 3\ **Last updated:** [September 13, 2022, 9:26am UTC](https://discuss.elastic.co/t/are-replicase-required-when-using-external-volumes-like-ebs/314267 "2022-09-13T09:26:58Z")
Hi all, We are currently running our Elasticsearch cluster in Kubernetes and use EBS gp3 volumes as storage. We are reading everywhere that during initial load of the data one could disable replicas to speed up indexing… --- ## [Kibana 8.4.1 TSVB group by function not working correctly](https://discuss.elastic.co/t/kibana-8-4-1-tsvb-group-by-function-not-working-correctly/314208)
**Author:** [@schmittberger](https://discuss.elastic.co/u/schmittberger)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 8:43am UTC](https://discuss.elastic.co/t/kibana-8-4-1-tsvb-group-by-function-not-working-correctly/314208 "2022-09-13T08:43:51Z")
Hello, I am trying to visualize the network input and output data rates that are received using the system module of metricbeat - for multiple hosts - in kibana. I am using the predefined TSVB visualization of metricbeat… --- ## [Configuring logstash to connect to Oracle AQ (JMS) without a web server](https://discuss.elastic.co/t/configuring-logstash-to-connect-to-oracle-aq-jms-without-a-web-server/314266)
**Author:** [@ztine77](https://discuss.elastic.co/u/ztine77)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 8:35am UTC](https://discuss.elastic.co/t/configuring-logstash-to-connect-to-oracle-aq-jms-without-a-web-server/314266 "2022-09-13T08:35:30Z")
I use dockerized version of logstash and would like to use Oracle AQ as an input. This is my ./pipeline/logstash.conf file: input { jms { broker\_url =\> 'jdbc:oracle:thin:@server:1521:sid' destination =\> 'MYQ… --- ## [Limited read and write speed using Elasticsearch Hadoop](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 6\ **Last updated:** [September 13, 2022, 8:27am UTC](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180 "2022-09-13T08:27:25Z")
Hi all, We are experiencing unexpectedly low read and write speed on our ES cluster using the Elasticsearch-Hadoop connector. We have been reading a lot about the different configurations in the connector and tested aro… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314247)
**Author:** [@khanchand](https://discuss.elastic.co/u/khanchand)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 7:52am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314247 "2022-09-13T07:52:30Z")
Hi everyone, I am new on Elasticsearch and have created my lab before going to deploy in production. For lab purpose I have deployed all three (elasticsearch, kibana & logstash) on a single centos server. While I am faci… --- ## [Some values in the field is String, some is Integer, though Mapping is Integer](https://discuss.elastic.co/t/some-values-in-the-field-is-string-some-is-integer-though-mapping-is-integer/314253)
**Author:** [@Abhishek\_Soni1](https://discuss.elastic.co/u/Abhishek_Soni1)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 7:52am UTC](https://discuss.elastic.co/t/some-values-in-the-field-is-string-some-is-integer-though-mapping-is-integer/314253 "2022-09-13T07:52:17Z")
I have created a schema config, where I have mapped "Total Number of Changes" field to "Integer". But I can see the values are both number, and string. I have also tried re-indexing but results are same. How can I deal … --- ## [Kibana 8.4.1 columns of saved search in dashboard cannot be changed](https://discuss.elastic.co/t/kibana-8-4-1-columns-of-saved-search-in-dashboard-cannot-be-changed/314142)
**Author:** [@bertr](https://discuss.elastic.co/u/bertr)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 7:47am UTC](https://discuss.elastic.co/t/kibana-8-4-1-columns-of-saved-search-in-dashboard-cannot-be-changed/314142 "2022-09-13T07:47:32Z")
When a saved search from discover is added to a dashboard, the columns from the saved search are shown (which is good). When trying to add or remove columns in the dashboard panel the columns are not added or removed, so… --- ## [Elasticsearch 7.17.4 hdfs repository plugin with Hadoop 2.10.2](https://discuss.elastic.co/t/elasticsearch-7-17-4-hdfs-repository-plugin-with-hadoop-2-10-2/314258)
**Author:** [@forlianpu](https://discuss.elastic.co/u/forlianpu)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-4-hdfs-repository-plugin-with-hadoop-2-10-2/314258 "2022-09-13T07:42:54Z")
Hi. We have a multi-nodes Elasticsearch 7.17.4 with a Hadoop 2.10.2 in our offline environment. We want to setup the snapshot repository using the "repository-hdfs-7.17.4.zip" plugin. But this plugin is packed with some… --- ## [ES version range comparision is not working as expected semantic version comparison](https://discuss.elastic.co/t/es-version-range-comparision-is-not-working-as-expected-semantic-version-comparison/312904)
**Author:** [@Krishna\_Sailesh](https://discuss.elastic.co/u/Krishna_Sailesh)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 7:30am UTC](https://discuss.elastic.co/t/es-version-range-comparision-is-not-working-as-expected-semantic-version-comparison/312904 "2022-09-13T07:30:31Z")
Hi Folks I have a version mapping field data type with the property name "softwareVersion" in the Elasticsearch index. I have "softwareVersion" property values like Z100, Z300, 6.7, 7.0(3)I7(3), and 6.8.9 when I searc… --- ## [Saved Visualizations from Discover](https://discuss.elastic.co/t/saved-visualizations-from-discover/312795)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 5\ **Last updated:** [September 13, 2022, 7:28am UTC](https://discuss.elastic.co/t/saved-visualizations-from-discover/312795 "2022-09-13T07:28:48Z")
Dear Elastic Community, One customer is using Discover to search their logs. Sometimes they create a very specific query by which they obtain some interesting results. They would like to visualize them with one of the e… --- ## [How to take children filed while use sql query it's parent?](https://discuss.elastic.co/t/how-to-take-children-filed-while-use-sql-query-its-parent/314251)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:03am UTC](https://discuss.elastic.co/t/how-to-take-children-filed-while-use-sql-query-its-parent/314251 "2022-09-13T07:03:10Z")
i everyone, i have an parent child index with format like this parent\_child ES doc. "customer\_segment": { "type": "join", "eager\_global\_ordinals": true, "relations": { "customer": … --- ## [After provide time format I get; (elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] ) error](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243)
**Author:** [@golofetuk](https://discuss.elastic.co/u/golofetuk)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 7:18am UTC](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243 "2022-09-13T07:18:44Z")
Please use the following questions as a guideline to help me answer your issue/question without further inquiry. Thank you. Which version of Elastic are you using? \[ v\] elastic.v7 (for Elasticsearch 7.x) Please descri… --- ## [Kibana logs](https://discuss.elastic.co/t/kibana-logs/312915)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 8\ **Last updated:** [September 13, 2022, 7:03am UTC](https://discuss.elastic.co/t/kibana-logs/312915 "2022-09-13T07:03:51Z")
Hi, I have been trying for a while to configure a logrotate file to rotate my kibana logs(version 7.16.3),without success. I need my logs to rotate daily and delete logs older than 7 days. The configuration file I am us… --- ## [How to do Bulk API iteration from JSON lines using Python?](https://discuss.elastic.co/t/how-to-do-bulk-api-iteration-from-json-lines-using-python/314218)
**Author:** [@Ramu\_Kakaji](https://discuss.elastic.co/u/Ramu_Kakaji)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 6:11pm UTC](https://discuss.elastic.co/t/how-to-do-bulk-api-iteration-from-json-lines-using-python/314218 "2022-09-12T18:11:33Z")
Hi All, i have json data like this json\_data = { "title": "Rush", "year": 2013, "budget":500000, "earning":300000,"genere":"action"} { "title": "Jurrasic", "year": 2014,"budget":1500000, "earning":2300000,"genere":"ac… --- ## [Kibana Server is Not Yet Ready](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready/314156)
**Author:** [@justinepaulpadayao](https://discuss.elastic.co/u/justinepaulpadayao)\ **Replies:** 15\ **Last updated:** [September 13, 2022, 6:54am UTC](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready/314156 "2022-09-13T06:54:19Z")
Hello! I have trouble setting up my ELK stack as I have faced an issue regarding Kibana. Btw, I have 3 different servers where I will install Elasticsearch, Kibana, and Logstash, separately. Here are some details: In… --- ## [Elasticsearch 7 // Log4j configuration SocketAppender](https://discuss.elastic.co/t/elasticsearch-7-log4j-configuration-socketappender/314249)
**Author:** [@CrKontrol](https://discuss.elastic.co/u/CrKontrol)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-7-log4j-configuration-socketappender/314249 "2022-09-13T06:44:50Z")
Hello, I'm using Elasticsearch 7.17 under basic licence with the security features. Since Elasticsearch does not support syslog appender on log4j anymore (still the case ?), i'm trying to use SocketAppender but it seem… --- ## [Meticbeat can not collect all metric for MSSQL perfomance counter](https://discuss.elastic.co/t/meticbeat-can-not-collect-all-metric-for-mssql-perfomance-counter/313742)
**Author:** [@sondog](https://discuss.elastic.co/u/sondog)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 4:58am UTC](https://discuss.elastic.co/t/meticbeat-can-not-collect-all-metric-for-mssql-perfomance-counter/313742 "2022-09-13T04:58:07Z")
Elasticsearch Version : 8.0.0 Kbana Version : 8.0.0 Metricbeat Version : 8.0.0 MSSQL version : Micvrosoft SQL Server 2017 in documentaion, metricbeat can collect 16 metric for performance counter but, i can get … --- ## [Hardware requirements - good resilency - Elastic 8.4](https://discuss.elastic.co/t/hardware-requirements-good-resilency-elastic-8-4/314090)
**Author:** [@elkstack1](https://discuss.elastic.co/u/elkstack1)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 4:23am UTC](https://discuss.elastic.co/t/hardware-requirements-good-resilency-elastic-8-4/314090 "2022-09-13T04:23:42Z")
I would like the hardware requirements for good resiliency - Elastic 8.4 I looked on the documentation and didnt find any info pertaining to hardware specs. We currently have 3 master nodes and 17 data nodes - 13 warm … --- ## [Query hostname field with zero hit count](https://discuss.elastic.co/t/query-hostname-field-with-zero-hit-count/314240)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 2:47am UTC](https://discuss.elastic.co/t/query-hostname-field-with-zero-hit-count/314240 "2022-09-13T02:47:22Z")
Hi all, I am trying to write a watcher alert if any host hostname.keyword has a 0 hit count in the last 1d. This has asked numerous times but most of them is circulating around entire indices, not for the host field. A… --- ## [Logstash high CPU](https://discuss.elastic.co/t/logstash-high-cpu/314238)
**Author:** [@jpeppard](https://discuss.elastic.co/u/jpeppard)\ **Replies:** 6\ **Last updated:** [September 13, 2022, 1:30am UTC](https://discuss.elastic.co/t/logstash-high-cpu/314238 "2022-09-13T01:30:18Z")
Hi all. Just installed ELKstack v8.4.1 on ubuntu server 20 to play around with. All is well with the data itself, Metricbeat is sending data to Elasticsearch from two other Ubuntu server machines. Visualizations and dat… --- ## [Metricbeat modules list is empty](https://discuss.elastic.co/t/metricbeat-modules-list-is-empty/314020)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 1:06am UTC](https://discuss.elastic.co/t/metricbeat-modules-list-is-empty/314020 "2022-09-13T01:06:37Z")
\[root@rbdcelastic01 metricbeat\]# metricbeat modules list Enabled: Disabled: \[root@rbdcelastic01 metricbeat\]# vim metricbeat.yml # =========================== Modules configuration ============================ metric… --- ## [BCFKS: mac check in CCM failed](https://discuss.elastic.co/t/bcfks-mac-check-in-ccm-failed/314235)
**Author:** [@untangled-duplicate](https://discuss.elastic.co/u/untangled-duplicate)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 9:26pm UTC](https://discuss.elastic.co/t/bcfks-mac-check-in-ccm-failed/314235 "2022-09-12T21:26:47Z")
Hello: I am running into issues with using BouncyCastle keystores and truststores. The error being returned is: Error finalising cipher data: mac check in CCM failed. Any help with understanding this error and how to … --- ## [Unable to perform Fuzzy search for search query template](https://discuss.elastic.co/t/unable-to-perform-fuzzy-search-for-search-query-template/314226)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 8:07pm UTC](https://discuss.elastic.co/t/unable-to-perform-fuzzy-search-for-search-query-template/314226 "2022-09-12T20:07:50Z")
Hello Team I am trying to create search query template to allow fuzzy search to search even incomplete values from field, After following the elastic document tried to create search query but it is not working. Using b… --- ## [There is insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 7\ **Last updated:** [September 12, 2022, 8:01pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926 "2022-09-12T20:01:10Z")
Hello all, I am using ELK 8.4.1. I have a cluster setup with 3 nodes. But when I tried to Ingest data through Logstash it gave me following errors. OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x00000000c… --- ## [Elasticsearch docker container shows "unhealthy"](https://discuss.elastic.co/t/elasticsearch-docker-container-shows-unhealthy/314220)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-shows-unhealthy/314220 "2022-09-12T18:27:49Z")
my elasticsearchdocker container shows "unhealthy status" on ec2 ubuntu 1e6908aa941e docker.elastic.co/elasticsearch/elasticsearch:8.3.2 "/bin/tini -- /usr/l…" 7 weeks ago Up 7 weeks (unhealthy) 9200/tcp, 93… --- ## [Proximity and close match in the same search?](https://discuss.elastic.co/t/proximity-and-close-match-in-the-same-search/314214)
**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 5:50pm UTC](https://discuss.elastic.co/t/proximity-and-close-match-in-the-same-search/314214 "2022-09-12T17:50:29Z")
I'm using c# and Nest to interact with our Elasticearch instance. I'm passing a query string to a query container using the following code: return queryContainer .Bool(bq =\> bq … --- ## [Internal rally queue in throughput-throttled mode](https://discuss.elastic.co/t/internal-rally-queue-in-throughput-throttled-mode/314083)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 5:42pm UTC](https://discuss.elastic.co/t/internal-rally-queue-in-throughput-throttled-mode/314083 "2022-09-12T17:42:41Z")
Hi I have a question regarding latency and ES thread pool queues...I am running rally in throughput-throttled mode, targeting a throughput higher than ES will achieve in benchmarking mode. Some numbers I get are: | … --- ## [Apache Error Logs Not Parsing Correctly](https://discuss.elastic.co/t/apache-error-logs-not-parsing-correctly/314211)
**Author:** [@Loc\_Tran](https://discuss.elastic.co/u/Loc_Tran)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 5:39pm UTC](https://discuss.elastic.co/t/apache-error-logs-not-parsing-correctly/314211 "2022-09-12T17:39:30Z")
I'm not able to parse the apache error logs. I keep getting these errors: \[0\] "\_grokparsefailure" which means that there's an error in parsing the logs. Apache Error Logs \[Wed Aug 17 20:00:00.661037 2022\] \[proxy:err… --- ## [How to display @timestamp as Horizontal axis on kibana](https://discuss.elastic.co/t/how-to-display-timestamp-as-horizontal-axis-on-kibana/314165)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 1\ **Last updated:** [September 12, 2022, 4:22pm UTC](https://discuss.elastic.co/t/how-to-display-timestamp-as-horizontal-axis-on-kibana/314165 "2022-09-12T16:22:36Z")
Hey, trying to set @timestamp as Horizontal axis on kibana does not display anything, see here: Under 'discover' The logs include timestamp: @timestamp:Sep 8, 2022 @ 18:46:27.235 @timestamp:Sep 8, 2022 @ 18:37:53.9… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=795) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=797)