# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=836

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 837

---

## [Kibana map's timeslider option](https://discuss.elastic.co/t/kibana-maps-timeslider-option/311668)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [August 9, 2022, 9:43am UTC](https://discuss.elastic.co/t/kibana-maps-timeslider-option/311668 "2022-08-09T09:43:45Z")

</div>

I have map visulization. when I go to edit mode I have timeslider option avalibale but when I am on a dashboard for map visulization I don't have that option available. How do I enable that option? But no such option…

---

## [Elastic Upgrade: 6.60 to 7.14, can I keep the index with old mapping?](https://discuss.elastic.co/t/elastic-upgrade-6-60-to-7-14-can-i-keep-the-index-with-old-mapping/311520)

<div class="topic-metadata">

**Author:** [@iyan](https://discuss.elastic.co/u/iyan)\
**Replies:** 5\
**Last updated:** [August 9, 2022, 9:09am UTC](https://discuss.elastic.co/t/elastic-upgrade-6-60-to-7-14-can-i-keep-the-index-with-old-mapping/311520 "2022-08-09T09:09:19Z")

</div>

I have the task to upgrade our elastic from 6.60 to 7.14. According to Upgrade to Elasticsearch 7.x | Elasticsearch Service Documentation | Elastic the 6.x indices are compatible with 7.x. Elasticsearch 7.x is compatib…

---

## [Filename starts with numeric value type of log not working in filebeat](https://discuss.elastic.co/t/filename-starts-with-numeric-value-type-of-log-not-working-in-filebeat/311620)

<div class="topic-metadata">

**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 8:18am UTC](https://discuss.elastic.co/t/filename-starts-with-numeric-value-type-of-log-not-working-in-filebeat/311620 "2022-08-09T08:18:50Z")

</div>

Hello Team, I need to collect the log from files to lofgstash. My filename looks like the below. D:\\test\\test\\app\\20220808-appname.log While i configure the same path in filebeat its not working. Could you please ad…

---

## [To get the data of Index size into Kibana Dashboards](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/310136)

<div class="topic-metadata">

**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\
**Replies:** 2\
**Last updated:** [August 9, 2022, 8:14am UTC](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/310136 "2022-08-09T08:14:25Z")

</div>

Hi Team, We have a request for you.. we need live dashboard with each application volumes per index in Kibana(7.15.1) Firstly ,we would like to get to know about the volume of each and every indices in a unique dashboa…

---

## [Logstash-8.3.3 (latest) still using jackson-databind-2.9.10.8](https://discuss.elastic.co/t/logstash-8-3-3-latest-still-using-jackson-databind-2-9-10-8/311694)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 0\
**Last updated:** [August 9, 2022, 8:12am UTC](https://discuss.elastic.co/t/logstash-8-3-3-latest-still-using-jackson-databind-2-9-10-8/311694 "2022-08-09T08:12:06Z")

</div>

As per logstash 8.3.0 release notes , Jackson and jackson-databind have been updated to 2.13.3 #13945 But we see the logstash rpm also brings a plugin logstash-input-beats - that still uses jackson-databind-2.9.10.8. …

---

## [What are the options to integrate interactive graphs into my webapp?](https://discuss.elastic.co/t/what-are-the-options-to-integrate-interactive-graphs-into-my-webapp/311669)

<div class="topic-metadata">

**Author:** [@Kibanosi](https://discuss.elastic.co/u/Kibanosi)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 7:56am UTC](https://discuss.elastic.co/t/what-are-the-options-to-integrate-interactive-graphs-into-my-webapp/311669 "2022-08-09T07:56:53Z")

</div>

Hi, I'm looking for a library to display data from ES (graphs and statistics, charts) in my frontend and I would like to be able to add filters like date filters to these components. Is there something specifically for…

---

## [Why don't the queries built by Kibana in discover use must?](https://discuss.elastic.co/t/why-dont-the-queries-built-by-kibana-in-discover-use-must/311434)

<div class="topic-metadata">

**Author:** [@Vincent92](https://discuss.elastic.co/u/Vincent92)\
**Replies:** 4\
**Last updated:** [August 9, 2022, 7:53am UTC](https://discuss.elastic.co/t/why-dont-the-queries-built-by-kibana-in-discover-use-must/311434 "2022-08-09T07:53:43Z")

</div>

Hello, I am developing a web application to visualize data in an elastic and I am inspired by the queries made by Kibana in the Discover application by going to inspect the query object created in the Inspect tab of Dis…

---

## [Control the log flow from Logstash](https://discuss.elastic.co/t/control-the-log-flow-from-logstash/311691)

<div class="topic-metadata">

**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\
**Replies:** 0\
**Last updated:** [August 9, 2022, 7:51am UTC](https://discuss.elastic.co/t/control-the-log-flow-from-logstash/311691 "2022-08-09T07:51:12Z")

</div>

Hi Team, We are frequently facing logs lagging in Kibana due to other application team while doing performance testing and also they are sending a bulk data at a time. In that scenario, that would be taking too much ti…

---

## [Sum by quantity and sort by lowest price](https://discuss.elastic.co/t/sum-by-quantity-and-sort-by-lowest-price/311242)

<div class="topic-metadata">

**Author:** [@brampurnot](https://discuss.elastic.co/u/brampurnot)\
**Replies:** 4\
**Last updated:** [August 9, 2022, 6:55am UTC](https://discuss.elastic.co/t/sum-by-quantity-and-sort-by-lowest-price/311242 "2022-08-09T06:55:12Z")

</div>

I have a requirement in Elasticsearch which I'm not able to implement at the moment. The use case is as follows; we have certain products uploaded in elastic (1 million + items) and each item has a quantity, a price and …

---

## [World Map not displaying geodata](https://discuss.elastic.co/t/world-map-not-displaying-geodata/311610)

<div class="topic-metadata">

**Author:** [@Raj\_test](https://discuss.elastic.co/u/Raj_test)\
**Replies:** 9\
**Last updated:** [August 9, 2022, 5:27am UTC](https://discuss.elastic.co/t/world-map-not-displaying-geodata/311610 "2022-08-09T05:27:29Z")

</div>

Hello Team, I am using kibana 8.3.3 and the world map is not displaying geo data via packetbeat I am getting this err. can anyone please help. { "error": { "root\_cause": \[ { "type": "index\_not\_found\_exception", …

---

## [Logstash, ES connection error](https://discuss.elastic.co/t/logstash-es-connection-error/311683)

<div class="topic-metadata">

**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Replies:** 3\
**Last updated:** [August 9, 2022, 3:45am UTC](https://discuss.elastic.co/t/logstash-es-connection-error/311683 "2022-08-09T03:45:02Z")

</div>

Hello I used ubuntu20.04 version and ELK stack 8.3.2 version. Then, I's working in connecting with logstash and ES. 2022-08-09T02:14:45,699\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Failed to perform request {:me…

---

## [Why we have to generate Token for node?](https://discuss.elastic.co/t/why-we-have-to-generate-token-for-node/311615)

<div class="topic-metadata">

**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 3:20am UTC](https://discuss.elastic.co/t/why-we-have-to-generate-token-for-node/311615 "2022-08-09T03:20:11Z")

</div>

Hello I installed Elasticsearch and set security for https setting. I used ubuntu 20.04 version. Elasticsearch 8.3.2 version Then, --\> this page, we have to make token for node. "bin/elasticsearch-create-enrollm…

---

## [How to prevent Logstash file input duplicate reading with rotating log?](https://discuss.elastic.co/t/how-to-prevent-logstash-file-input-duplicate-reading-with-rotating-log/311264)

<div class="topic-metadata">

**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\
**Replies:** 14\
**Last updated:** [August 9, 2022, 3:14am UTC](https://discuss.elastic.co/t/how-to-prevent-logstash-file-input-duplicate-reading-with-rotating-log/311264 "2022-08-09T03:14:01Z")

</div>

I have a system that keeps writing logs (with log4j) and it will rotate and compress to a .gz file when the log file reaches 100 MB. I use Logstash file input plugin to read those log files, and there are several compre…

---

## [Complex aggregations on multiple indices alias](https://discuss.elastic.co/t/complex-aggregations-on-multiple-indices-alias/310912)

<div class="topic-metadata">

**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 12:30am UTC](https://discuss.elastic.co/t/complex-aggregations-on-multiple-indices-alias/310912 "2022-08-09T00:30:59Z")

</div>

Hi, If we create multiple indices under an alias and run query aggregations like stats aggregation, how does Elasticsearch compute metrics like Standard deviation? Will the accuracy of these types of metrics be lower th…

---

## [How to send xml and csv data from postman to elasticsearch or logstash](https://discuss.elastic.co/t/how-to-send-xml-and-csv-data-from-postman-to-elasticsearch-or-logstash/311635)

<div class="topic-metadata">

**Author:** [@gopikrish](https://discuss.elastic.co/u/gopikrish)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 12:12am UTC](https://discuss.elastic.co/t/how-to-send-xml-and-csv-data-from-postman-to-elasticsearch-or-logstash/311635 "2022-08-09T00:12:41Z")

</div>

Hi, Im new to Elasticsearch all I want to know how to send XML and CSV data to elasticsearch or logstash through postman and how to mapping and configuration for this type of data .can anyone please explain me. THANKS …

---

## [Can an Elasticsearch cluster have nodes running different Linux distributions?](https://discuss.elastic.co/t/can-an-elasticsearch-cluster-have-nodes-running-different-linux-distributions/311466)

<div class="topic-metadata">

**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\
**Replies:** 2\
**Last updated:** [August 9, 2022, 12:03am UTC](https://discuss.elastic.co/t/can-an-elasticsearch-cluster-have-nodes-running-different-linux-distributions/311466 "2022-08-09T00:03:18Z")

</div>

We are moving from a Red Hat-based distro to a Debian one (Ubuntu). Looking at options for converting our Elasticsearch cluster over. One option would be rolling upgrades to convert each node to Ubuntu, one at a time, wi…

---

## [ILM policy in logstash is not working](https://discuss.elastic.co/t/ilm-policy-in-logstash-is-not-working/311486)

<div class="topic-metadata">

**Author:** [@Ankit\_Grover](https://discuss.elastic.co/u/Ankit_Grover)\
**Replies:** 1\
**Last updated:** [August 9, 2022, 12:02am UTC](https://discuss.elastic.co/t/ilm-policy-in-logstash-is-not-working/311486 "2022-08-09T00:02:08Z")

</div>

Hi there My logstash ILM policy is not working, it does not roll over to the new index can please someone help me ? Can someone please provide me instruction to setup ILM policy in logstash to rollover ? Thanks

---

## [ES Java Bulk Timeout Error](https://discuss.elastic.co/t/es-java-bulk-timeout-error/311533)

<div class="topic-metadata">

**Author:** [@Sriram\_R](https://discuss.elastic.co/u/Sriram_R)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 11:59pm UTC](https://discuss.elastic.co/t/es-java-bulk-timeout-error/311533 "2022-08-08T23:59:59Z")

</div>

I'm trying to index docs in bulk for some reason I keep getting a timeout exception. However when I try to index a single document, it works perfectly. Here's the code for indexing a single document Reader reader = new…

---

## [Kibana map drill-downs enable access to all fields](https://discuss.elastic.co/t/kibana-map-drill-downs-enable-access-to-all-fields/311386)

<div class="topic-metadata">

**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\
**Replies:** 5\
**Last updated:** [August 8, 2022, 10:16pm UTC](https://discuss.elastic.co/t/kibana-map-drill-downs-enable-access-to-all-fields/311386 "2022-08-08T22:16:00Z")

</div>

I've been using drill-downs for about a year now and have been meaning to post on this topic to get feedback on if I'm missing something in what I'm attempting to do. We use drill-downs mainly from maps and I'll describ…

---

## [ELK-functionbeat-not-able-to-push-data](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311662)

<div class="topic-metadata">

**Author:** [@vijay23vikram](https://discuss.elastic.co/u/vijay23vikram)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 5:17pm UTC](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311662 "2022-08-08T17:17:46Z")

</div>

Hello Team, We are facing the below error in AWS function beat lambda. Cannot index event publisher.Event{Content:beat.Event More error details as below: Error: 2022-07-22T15:15:01.087Z WARN \[elasticsearch\] elastics…

---

## [Integration error of Power BI with Elasticsearch](https://discuss.elastic.co/t/integration-error-of-power-bi-with-elasticsearch/311673)

<div class="topic-metadata">

**Author:** [@ibrahim.hamza](https://discuss.elastic.co/u/ibrahim.hamza)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 8:34pm UTC](https://discuss.elastic.co/t/integration-error-of-power-bi-with-elasticsearch/311673 "2022-08-08T20:34:35Z")

</div>

Dears, Kindly need your help regarding the error below which happens when I integrate Power BI with Elasticsearch Details: "ODBC: ERROR \[HY000\] \[Elastic\]\[EsODBC 6.8.23(v6.8.21-3-g0e334a6+,u,r) Driver\]invalid\_index\_name…

---

## [Elastic-agent overhead/resource consumption](https://discuss.elastic.co/t/elastic-agent-overhead-resource-consumption/311654)

<div class="topic-metadata">

**Author:** [@lineconnect](https://discuss.elastic.co/u/lineconnect)\
**Replies:** 6\
**Last updated:** [August 8, 2022, 8:38pm UTC](https://discuss.elastic.co/t/elastic-agent-overhead-resource-consumption/311654 "2022-08-08T20:38:44Z")

</div>

Hi, i'm using the standalone elastic agent and wondering why there is so much memory usage. Without limiting the resources. elastic-agent is using 1GB memory for monitoring one file. (Filebeat is using 100-150 mb for …

---

## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc/311661)

<div class="topic-metadata">

**Author:** [@bezder](https://discuss.elastic.co/u/bezder)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 5:42pm UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc/311661 "2022-08-08T17:42:24Z")

</div>

hello, any idea how to get rid of that warning? OpenJDK 64-Bit Server VM warning: .... thanks root@universe-new:/home/heap# sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t Using bun…

---

## [Simple query "match" relevance](https://discuss.elastic.co/t/simple-query-match-relevance/311655)

<div class="topic-metadata">

**Author:** [@Guillaume\_R](https://discuss.elastic.co/u/Guillaume_R)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 4:50pm UTC](https://discuss.elastic.co/t/simple-query-match-relevance/311655 "2022-08-08T16:50:46Z")

</div>

Hi all, I'm a bit surprised with the result of the query (see the code below) I would expect the doc 4 to be first ... but this is the 1, 2, 5,6,3,4 If anyone can help. Thanks a lot DELETE shop PUT shop { "setting…

---

## [Some logs with more json fields are not processed (Filebeat 8.3.3)](https://discuss.elastic.co/t/some-logs-with-more-json-fields-are-not-processed-filebeat-8-3-3/311597)

<div class="topic-metadata">

**Author:** [@nobeerhere](https://discuss.elastic.co/u/nobeerhere)\
**Replies:** 3\
**Last updated:** [August 8, 2022, 4:42pm UTC](https://discuss.elastic.co/t/some-logs-with-more-json-fields-are-not-processed-filebeat-8-3-3/311597 "2022-08-08T16:42:22Z")

</div>

Hi there, I am using the ECS-Logging for Jaba with filebeat 8.3.3 (Get started | ECS Logging Java Reference \[1.x\] | Elastic) and i have a strange problem where the log entries are not processed by the filestream of file…

---

## [Trailing Whitespaces in Message Field](https://discuss.elastic.co/t/trailing-whitespaces-in-message-field/311574)

<div class="topic-metadata">

**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\
**Replies:** 16\
**Last updated:** [August 8, 2022, 4:31pm UTC](https://discuss.elastic.co/t/trailing-whitespaces-in-message-field/311574 "2022-08-08T16:31:36Z")

</div>

Here is my sample data: EventQ 00001350 Fri 08/05 20:19:20.541 \_00008\_ 39765 990 HEARTBEAT SYSTEM=\>MDETMGR i"SINGLETON" //beep// added to EventQueue for a new total of 1 Pending Event This is one line and Ela…

---

## [Elasticsearch 8.3.3 localhost:9200 not working](https://discuss.elastic.co/t/elasticsearch-8-3-3-localhost-9200-not-working/311613)

<div class="topic-metadata">

**Author:** [@Kay\_Yes](https://discuss.elastic.co/u/Kay_Yes)\
**Replies:** 14\
**Last updated:** [August 8, 2022, 3:49pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-3-localhost-9200-not-working/311613 "2022-08-08T15:49:32Z")

</div>

Hello Elasticsearch experts, I followed the installation procedure given by a few videos on youtube. I have downloaded elasticsearch 8.3.3. I installed JDK 17.0.4 I added the bin folder of jdk to my PATH: C:\\Program…

---

## [Your settings are invalid. Reason: Cloud Id, after decoding, is invalid. Format: '\<segment1\>$\<segment2\>$\<segment3\>'. Received: ""](https://discuss.elastic.co/t/your-settings-are-invalid-reason-cloud-id-after-decoding-is-invalid-format-segment1-segment2-segment3-received/311331)

<div class="topic-metadata">

**Author:** [@Reset](https://discuss.elastic.co/u/Reset)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 3:16pm UTC](https://discuss.elastic.co/t/your-settings-are-invalid-reason-cloud-id-after-decoding-is-invalid-format-segment1-segment2-segment3-received/311331 "2022-08-08T15:16:26Z")

</div>

Hello, Been struggling with this issue for a few days. Not sure what's going on. Here's the command executed: root@machine:/home/devops# /usr/share/logstash/bin/logstash --config.debug --log.level=debug --path.settings…

---

## [AWS CloudWatch integration with Elastic using Elastic Agent](https://discuss.elastic.co/t/aws-cloudwatch-integration-with-elastic-using-elastic-agent/308318)

<div class="topic-metadata">

**Author:** [@JypraGroup](https://discuss.elastic.co/u/JypraGroup)\
**Replies:** 27\
**Last updated:** [August 8, 2022, 2:52pm UTC](https://discuss.elastic.co/t/aws-cloudwatch-integration-with-elastic-using-elastic-agent/308318 "2022-08-08T14:52:36Z")

</div>

Hi all, I have Elastic agent installed on the endpoint and I can see the logs coming in. The policy has AWS CloudWatch integration however I am not sure what else is required to get the logs and metrics flowing from the…

---

## [Elastic-agent not recognizing provider section correctly](https://discuss.elastic.co/t/elastic-agent-not-recognizing-provider-section-correctly/311652)

<div class="topic-metadata">

**Author:** [@lineconnect](https://discuss.elastic.co/u/lineconnect)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elastic-agent-not-recognizing-provider-section-correctly/311652 "2022-08-08T14:43:48Z")

</div>

Hi there, banging my head against a wall for a few ours now... Using elastic-agent 7.16.2(docker image) in k8s and i want to disable certain providers as well as the leader election. But the agent will always try to r…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=835)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=837)
