# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=840 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 841 --- ## [RUM and React-Native](https://discuss.elastic.co/t/rum-and-react-native/310648)
**Author:** [@abeasley](https://discuss.elastic.co/u/abeasley)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 1:47pm UTC](https://discuss.elastic.co/t/rum-and-react-native/310648 "2022-07-26T13:47:43Z")
I'm researching adding Elastic logging to our application which is written in React-Native. It appears that the RUM integration for the Elastic Agent has everything we are looking for but there doesn't appear to be a cu… --- ## [Enrich processor error: mapper\_parsing\_exception](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 2:38pm UTC](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440 "2022-08-04T14:38:46Z")
I'm trying to enrich data to my index called "time\_availability\_alarmed\_cells". The mapping for that index is: { "mappings": { "\_doc": { "properties": { "location": { "properties": { … --- ## [Filebeat mysql module does not work for mariadb logs?](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398 "2022-08-04T13:51:47Z")
Hi, i have filebeat 7.16.2 installed with mysql module enabled to collect mariadb logs. - module: mysql error: enabled: true var.paths: \["/home/user/var/log/\*\_error.log"\] slowlog: enabled: true var.… --- ## [Getting Authentication Exception even CA cert is provided (python)](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360)
**Author:** [@Brian\_Chan](https://discuss.elastic.co/u/Brian_Chan)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:50pm UTC](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360 "2022-08-04T13:50:31Z")
Hi everyone, I have a self-managed elasticsearch 8.3.0 cluster with security enabled. When using python client, even I included the CA cert, I still get the error: AuthenticationException(401, 'security\_exception', 'mis… --- ## [New Elasticsearch 8 Java API - Sort by](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 1:33pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352 "2022-08-04T13:33:28Z")
I am using the new Elasticsearch 8 Java client API to query data and sort by one field. esClient.search(s -\> { return s .index("employee") .query(q -\> q … --- ## [MUTIPULE VALUES SEARCH](https://discuss.elastic.co/t/mutipule-values-search/311422)
**Author:** [@shanker241](https://discuss.elastic.co/u/shanker241)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 1:08pm UTC](https://discuss.elastic.co/t/mutipule-values-search/311422 "2022-08-04T13:08:11Z")
HI ALL, I Unable to search with mutipule values Please find the follwoing code its not working . function getRiskRegister(monthYear) { const client = new elasticsearch.Client({ host: elasticHost }); monthYear = 'Ma… --- ## [Logstash filling up my space inside/var/log/messages file](https://discuss.elastic.co/t/logstash-filling-up-my-space-inside-var-log-messages-file/311415)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:06pm UTC](https://discuss.elastic.co/t/logstash-filling-up-my-space-inside-var-log-messages-file/311415 "2022-08-04T13:06:39Z")
Hello all, I been tying to find a solution for this since long. Trying to reach out to the community. The logstash is filling up the file /var/log/messages file space, I understand logstash does not log to /var/log/me… --- ## [File beat log messages causing disk space to be full](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:02pm UTC](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991 "2022-08-04T13:02:57Z")
Hello all, Hope someone had this issue before. Look like my /var/log/messages is getting really high since we have configured filebeat. The disk space is getting lower and almost 95% of this. How can I make sure that… --- ## [I cant acces Elasticsearch via Webrowser](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402)
**Author:** [@notaelasticsearcher](https://discuss.elastic.co/u/notaelasticsearcher)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402 "2022-08-04T12:44:47Z")
I use elasticsearch 8.3.3. When i type curl -X GET "localhost:9200" { "name" : "elkvm", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "P\_UJ2AcOSRmj3AWwMylLvQ", "version" : { "number" : "8.3.3", "bui… --- ## [Duplicate field.keyword and field in data stream within Observability](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383)
**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383 "2022-08-04T12:44:26Z")
Hi, I recently moved an existing configuration of Logstash indexing to a setup with Logstash using a data stream with component templates. As recommended the component template was broken down into two templates, one fo… --- ## [Rollover policy is not working](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377)
**Author:** [@Ankit\_Grover](https://discuss.elastic.co/u/Ankit_Grover)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 12:14pm UTC](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377 "2022-08-04T12:14:50Z")
my rollover policy is not working after the condition fail of 2mb document size can anyone please help me. I am newbie in elk stack. Thanks --- ## [ThreatQuotient Integration needs updating](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390)
**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 12:02pm UTC](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390 "2022-08-04T12:02:50Z")
The current integration still requires the old means of authenticating with the TIP server using Oauth2 Client ID and Oauth2 Client Secret which need to be generated via CLI commands, while these days they have switched… --- ## [Failed to parse field](https://discuss.elastic.co/t/failed-to-parse-field/311392)
**Author:** [@Kevin\_Galarza](https://discuss.elastic.co/u/Kevin_Galarza)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 11:13am UTC](https://discuss.elastic.co/t/failed-to-parse-field/311392 "2022-08-04T11:13:03Z")
--- ## [If condition in logstash output doesn't work](https://discuss.elastic.co/t/if-condition-in-logstash-output-doesnt-work/311276)
**Author:** [@zzcpower](https://discuss.elastic.co/u/zzcpower)\ **Replies:** 8\ **Last updated:** [August 4, 2022, 11:05am UTC](https://discuss.elastic.co/t/if-condition-in-logstash-output-doesnt-work/311276 "2022-08-04T11:05:58Z")
The config file is shown as below input { kafka { bootstrap\_servers =\> "localhost:9092" group\_id =\> "log\_monitor" auto\_offset\_reset =\> "latest" consumer\_threads =\> 1 topics =\> \["test\_log"\] } } f… --- ## [Could not find or load main class "-](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307)
**Author:** [@AULIA\_KHOIRUN\_NISA\_N](https://discuss.elastic.co/u/AULIA_KHOIRUN_NISA_N)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:39am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307 "2022-08-04T09:39:04Z")
''' can anybody help me, cause I'm trying to start elasticsearch bu it did't work Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and… --- ## [Custom Aggregations in ES](https://discuss.elastic.co/t/custom-aggregations-in-es/311385)
**Author:** [@vishnu\_teja](https://discuss.elastic.co/u/vishnu_teja)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 9:18am UTC](https://discuss.elastic.co/t/custom-aggregations-in-es/311385 "2022-08-04T09:18:31Z")
Hi, I would like to know, if we can have custom aggregations in ElasticSearch, For EX: we have a use-case where we need a function like any\_value(), it works like this: Say I have the following documents in my index: {… --- ## [Kibana APIs: No handler found for uri](https://discuss.elastic.co/t/kibana-apis-no-handler-found-for-uri/310971)
**Author:** [@aman\_mahajan](https://discuss.elastic.co/u/aman_mahajan)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 8:57am UTC](https://discuss.elastic.co/t/kibana-apis-no-handler-found-for-uri/310971 "2022-08-04T08:57:26Z")
Hi, I am trying to do a curl request to the Kibana APIs but getting error that the handler does not exist. For eg. curl -H 'kbn-xsrf: true' -H "Authorization: Basic \" \:\/api/saved\_objects… --- ## [Compare two indexes different field value](https://discuss.elastic.co/t/compare-two-indexes-different-field-value/311303)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 8:40am UTC](https://discuss.elastic.co/t/compare-two-indexes-different-field-value/311303 "2022-08-04T08:40:11Z")
Hi, i would like to know if it is possible to compare field.value with different indexes i mean for example i have index1 and index2 and each index has fields so i want to compare field value of index1 with field value … --- ## [Query returns empty result when filtering on labels and timestamp](https://discuss.elastic.co/t/query-returns-empty-result-when-filtering-on-labels-and-timestamp/311305)
**Author:** [@ithline](https://discuss.elastic.co/u/ithline)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 8:38am UTC](https://discuss.elastic.co/t/query-returns-empty-result-when-filtering-on-labels-and-timestamp/311305 "2022-08-04T08:38:11Z")
Hello there, I'm having some problems with querying in Kibana, so I tried to create manual query using the /\_search API. My index template is composed of .alerts-ecs-mappings, logs-mappings and logs-settings component … --- ## [Separating heartbeat synthetics logs from the rest](https://discuss.elastic.co/t/separating-heartbeat-synthetics-logs-from-the-rest/311193)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 7\ **Last updated:** [August 4, 2022, 8:33am UTC](https://discuss.elastic.co/t/separating-heartbeat-synthetics-logs-from-the-rest/311193 "2022-08-04T08:33:16Z")
Hello, I'm setting up Synthetic Monitoring using dockerised heartbeat image and want to separate the synthetics logs from the http/icmp ones. What I've noticed is that with the latest upgrade to 8.3 (or perhaps it was … --- ## [How to find the ingest pipeline used to parse for Nginx logs](https://discuss.elastic.co/t/how-to-find-the-ingest-pipeline-used-to-parse-for-nginx-logs/311263)
**Author:** [@Maduranga](https://discuss.elastic.co/u/Maduranga)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 8:26am UTC](https://discuss.elastic.co/t/how-to-find-the-ingest-pipeline-used-to-parse-for-nginx-logs/311263 "2022-08-04T08:26:43Z")
Hi, I am using Elastic cloud to send our Nginx logs using Filebeat Nginx module. However, the Nginx log is not parsed and gives "Provided Grok expressions do not match field value" error. The event.original field that… --- ## [How to visualise data geometric point](https://discuss.elastic.co/t/how-to-visualise-data-geometric-point/311345)
**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 8:19am UTC](https://discuss.elastic.co/t/how-to-visualise-data-geometric-point/311345 "2022-08-04T08:19:22Z")
Hi, i would visualise my field 'geom' in kibana , but i have no idea at the moment have some one any solution --- ## [Filebeat consuming high I/O operations for smaller files](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105)
**Author:** [@diptesh2007](https://discuss.elastic.co/u/diptesh2007)\ **Replies:** 8\ **Last updated:** [August 4, 2022, 7:59am UTC](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105 "2022-08-04T07:59:39Z")
I have the following architecture: Files (\*.json) of ~1-5 KB gets written to a folder throughout the day where file beat is scanning with a frequency of 10s. A json file once written in the file system will never be up… --- ## [./filebeat setup failed to import dashboard](https://discuss.elastic.co/t/filebeat-setup-failed-to-import-dashboard/311371)
**Author:** [@cheching](https://discuss.elastic.co/u/cheching)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 7:55am UTC](https://discuss.elastic.co/t/filebeat-setup-failed-to-import-dashboard/311371 "2022-08-04T07:55:20Z")
Hello guys, I've encountered an issue when tried to install the filebeat in uBuntu Linux, can I have someone assist to look into below error messages please verwriting ILM policy is disabled. Set setup.ilm.overwrite: t… --- ## [Agent bad\_certificate](https://discuss.elastic.co/t/agent-bad-certificate/310827)
**Author:** [@immauss](https://discuss.elastic.co/u/immauss)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 7:33am UTC](https://discuss.elastic.co/t/agent-bad-certificate/310827 "2022-08-04T07:33:06Z")
There are quite a few search results on this topic, but they are all with elastic 7.x. I'm seeing it with 8.3.2. I'm certain that I'm doing something wrong, but for the life of me can not figure out what. I'm using dock… --- ## [How to filter only specific objects from nested array in elasticsearch?](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691)
**Author:** [@Munam\_Tariq](https://discuss.elastic.co/u/Munam_Tariq)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 7:08am UTC](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691 "2022-08-04T07:08:07Z")
{ "sku\_id": 12, "product\_id": 1, "product\_name": "coca-cola 1.5 L", "category\_name": "beverages", "brand\_name": "coca cola", "sellers": \[ { "seller": 1, "price": 50 }, { "seller"… --- ## [Task limitations](https://discuss.elastic.co/t/task-limitations/311271)
**Author:** [@Spyros\_Giannopulos](https://discuss.elastic.co/u/Spyros_Giannopulos)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 6:57am UTC](https://discuss.elastic.co/t/task-limitations/311271 "2022-08-04T06:57:48Z")
Hello, I am planning to push in a cluster without limits tasks in low priority that may take time from seconds to maybe sometimes minutes to finish. The number of tasks can vary without protecting it with limits. I trie… --- ## [Datastream index name](https://discuss.elastic.co/t/datastream-index-name/310985)
**Author:** [@Viktor\_Avramovski](https://discuss.elastic.co/u/Viktor_Avramovski)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:56am UTC](https://discuss.elastic.co/t/datastream-index-name/310985 "2022-08-04T06:56:55Z")
Hey I was reading the documentation here: Data streams | Elasticsearch Guide \[7.17\] | Elastic I read that the index name is generated with the following format .ds-\-\-\ This means … --- ## [Need to migrate data from Single Node Elastic Search Cluster to new Multi Node Elastic Search Cluster](https://discuss.elastic.co/t/need-to-migrate-data-from-single-node-elastic-search-cluster-to-new-multi-node-elastic-search-cluster/311324)
**Author:** [@Sidd\_Sach](https://discuss.elastic.co/u/Sidd_Sach)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 6:51am UTC](https://discuss.elastic.co/t/need-to-migrate-data-from-single-node-elastic-search-cluster-to-new-multi-node-elastic-search-cluster/311324 "2022-08-04T06:51:06Z")
We have a single node Elastic Search cluster (v7.17.1) running. We are creating a new multi node Master-Data-Client Elastic Search (v7.17.1) cluster for high-availability. We are using Kubernetes and helm charts for dep… --- ## [Combined fields error](https://discuss.elastic.co/t/combined-fields-error/311364)
**Author:** [@renxu](https://discuss.elastic.co/u/renxu)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/combined-fields-error/311364 "2022-08-04T06:50:47Z")
{ "query": { "combined\_fields" : { "query": "database systems", "fields": \[ "title", "abstract", "body"\], "operator": "and" } } } { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reas… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=839) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=841)