# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=841 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 842 --- ## [Why is retry\_on\_conflict necessary?](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177 "2022-08-04T06:50:09Z")
We are battling to understand why version conflicts occur and why retry\_on\_conflict is a sensible strategy to resolving them. Consider Document \_id: 1 which has value foo: 1 and \_version: 1. If several processes try to … --- ## [ES VersionConflictEngineException current version \[-1\]](https://discuss.elastic.co/t/es-versionconflictengineexception-current-version-1/311282)
**Author:** [@zhcwang](https://discuss.elastic.co/u/zhcwang)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:33am UTC](https://discuss.elastic.co/t/es-versionconflictengineexception-current-version-1/311282 "2022-08-04T06:33:23Z")
I am using ElasticSearch Cluster backed by 3 nodes and batch update several items in one run. It reports version conflicts of one item, and the raw log is VersionConflictEngineException\[\[informationObjects\]\[BTRB3H7GNVG… --- ## [Logstash filter condition not working some times](https://discuss.elastic.co/t/logstash-filter-condition-not-working-some-times/310722)
**Author:** [@perezdev](https://discuss.elastic.co/u/perezdev)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 6:31am UTC](https://discuss.elastic.co/t/logstash-filter-condition-not-working-some-times/310722 "2022-08-04T06:31:29Z")
Hello, I have following logstash configuration file for winlogbeat events: input { #Winlgobeat beats { port =\> 5044 } } filter { #Filter winlogbeat events mutate { rename =\> { "… --- ## [No support for distance between a term and an exact term with slop](https://discuss.elastic.co/t/no-support-for-distance-between-a-term-and-an-exact-term-with-slop/311309)
**Author:** [@Savi\_Ifraimov](https://discuss.elastic.co/u/Savi_Ifraimov)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 6:16am UTC](https://discuss.elastic.co/t/no-support-for-distance-between-a-term-and-an-exact-term-with-slop/311309 "2022-08-04T06:16:59Z")
Hello, I am trying to use the 'simple query string query' (as well as other query options) to give me certain results and wonder about my options / if it is possible. The challenge: to search for a term1 within distanc… --- ## [Elasticsearch: Nested JSON object parsing and aggregation](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340)
**Author:** [@Josh\_Thatcher](https://discuss.elastic.co/u/Josh_Thatcher)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340 "2022-08-04T06:12:33Z")
I am currently working on a project that takes GitLab Security Scanner artifacts, curls the JSON artifact files to ElasticSearch, and then visualizes certain information from said artifacts. In this scenario, I am trying… --- ## [Configuration of heartbeat on Scale](https://discuss.elastic.co/t/configuration-of-heartbeat-on-scale/311027)
**Author:** [@syd05](https://discuss.elastic.co/u/syd05)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 5:33am UTC](https://discuss.elastic.co/t/configuration-of-heartbeat-on-scale/311027 "2022-08-04T05:33:28Z")
Hello, I'm evaluating the option of configuring heartbeat to monitor URL's at scale. I have 1000's of endpoints to monitor with a check interval ranging between 30 seconds to a few minutes . I don't have an idea of how … --- ## [Transport Error 503](https://discuss.elastic.co/t/transport-error-503/311201)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 2:00am UTC](https://discuss.elastic.co/t/transport-error-503/311201 "2022-08-04T02:00:21Z")
Traceback (most recent call last): File "/usr/lib/python3.8/code.py", line 90, in runcode exec(code, self.locals) File "", line 1, in File "/usr/local/lib/python3.8/dist-packages/elasticsearch/client/utils.py", line… --- ## [Failed to put mappings on indices](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/311224)
**Author:** [@davekang](https://discuss.elastic.co/u/davekang)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 1:59am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/311224 "2022-08-04T01:59:59Z")
hi I created a new index for re-indexing and tried re-indexing, but I get the following error: \[DEBUG\]\[o.e.a.a.i.m.p.TransportPutMappingAction\] \[node-01\] failed to put mappings on indices \[\[\[ma\_2022/mmRNrJPwRfutlNQs8L… --- ## [LICENSE \[EXPIRED\]?](https://discuss.elastic.co/t/license-expired/311279)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:57am UTC](https://discuss.elastic.co/t/license-expired/311279 "2022-08-04T01:57:16Z")
HELLO, I used elasticsearch + kibana for a 30 day trial on mars so LICENSE \[EXPIRED\] ON \[WEDNESDAY, APRIL 20, 2022\]. so i reinstalled another elasticsearch+kibana and i start using normally. yesterday i created new inde… --- ## [Elastalert certification on ELK 8](https://discuss.elastic.co/t/elastalert-certification-on-elk-8/311350)
**Author:** [@Mohamed\_Alawami](https://discuss.elastic.co/u/Mohamed_Alawami)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 12:04am UTC](https://discuss.elastic.co/t/elastalert-certification-on-elk-8/311350 "2022-08-04T00:04:54Z")
I am having an error and not ebale to setup the certification for pem in ELK. The certification comes end with. . 12 not pem. I tired to generate it using ELK tools but it did not work --- ## [Watcher Rule](https://discuss.elastic.co/t/watcher-rule/311153)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 7\ **Last updated:** [August 3, 2022, 7:44pm UTC](https://discuss.elastic.co/t/watcher-rule/311153 "2022-08-03T19:44:29Z")
I want to do a universal Rule for if All indices fall below a certain threshold , then alert on specific index at question. How do i specify the Index name in the Body of this watcher request ? --- ## [Kibana issue with index and Life cycle policy](https://discuss.elastic.co/t/kibana-issue-with-index-and-life-cycle-policy/311315)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 6:27pm UTC](https://discuss.elastic.co/t/kibana-issue-with-index-and-life-cycle-policy/311315 "2022-08-03T18:27:02Z")
To help me with a different issue I have reverted to trying to us the kibana ui to complete some activities. Currently I have created an index using the put command and then in the ui added an ILM. However the ui is no… --- ## [Create views on statuses with math](https://discuss.elastic.co/t/create-views-on-statuses-with-math/311327)
**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 4:06pm UTC](https://discuss.elastic.co/t/create-views-on-statuses-with-math/311327 "2022-08-03T16:06:07Z")
Hello all, I am newbie to Kibana. I am trying to create table or view for below condition: In our logs we are writing below info: "Status": 100 for pass "Status": 200 for fail "Status": 300 for stuck due to issue S… --- ## [Is Version 8 with Elastic Agent stable in medium to large environments?a](https://discuss.elastic.co/t/is-version-8-with-elastic-agent-stable-in-medium-to-large-environments-a/310536)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 3:31pm UTC](https://discuss.elastic.co/t/is-version-8-with-elastic-agent-stable-in-medium-to-large-environments-a/310536 "2022-08-03T15:31:31Z")
Hi there, I am in charge of a couple clusters that are used for security and log retention. They are both on version 7.17.3 and both have about 5000 endpoints. We are going to have to upgrade to version 8.x at some poin… --- ## [Metricbeat 8.3.2 and mongo V5](https://discuss.elastic.co/t/metricbeat-8-3-2-and-mongo-v5/309912)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 2:57pm UTC](https://discuss.elastic.co/t/metricbeat-8-3-2-and-mongo-v5/309912 "2022-08-03T14:57:11Z")
FYI Metricbeat 8.3.1+ now supports mongo V5. So i downloaded 8.3.2 and configured against my 3 server cluster with replica set. So if i add single server ( i have 3 server cluster with replica set in following template … --- ## [Removing square brackets from json key in http input](https://discuss.elastic.co/t/removing-square-brackets-from-json-key-in-http-input/311243)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 2:51pm UTC](https://discuss.elastic.co/t/removing-square-brackets-from-json-key-in-http-input/311243 "2022-08-03T14:51:09Z")
Hi Community! I've been having the following problem. I'm receiving, through http input filter, a JSON that has bracket square in the keys so Logstash isn't able to parse it, as result it returns a \_jsonparsefailure. A… --- ## [Installing Elastic License using Helm charts 7.x](https://discuss.elastic.co/t/installing-elastic-license-using-helm-charts-7-x/311319)
**Author:** [@AndreRosendo](https://discuss.elastic.co/u/AndreRosendo)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 2:45pm UTC](https://discuss.elastic.co/t/installing-elastic-license-using-helm-charts-7-x/311319 "2022-08-03T14:45:16Z")
I've just acquired a license for the elastic stack and I'm trying to install it using helm charts. It is implied by the charts that you can install the license by mounting a secret but nowhere in the documentation I was… --- ## [Logstash overfilling Persistent Queue?](https://discuss.elastic.co/t/logstash-overfilling-persistent-queue/310197)
**Author:** [@timcorwin](https://discuss.elastic.co/u/timcorwin)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 2:44pm UTC](https://discuss.elastic.co/t/logstash-overfilling-persistent-queue/310197 "2022-08-03T14:44:03Z")
I am running the logstash:7.17.4 docker image, and I've set queue.type: persisted in my logstash.yml, leaving all other queue settings at the default. Most of the time, I see the normal, expected behavior, where my even… --- ## [How to create multiple filebeats dashboard in Kibana](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 4\ **Last updated:** [August 3, 2022, 1:43pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-filebeats-dashboard-in-kibana/311225 "2022-08-03T13:43:46Z")
Hi, I have multiple Filebeats are running in multiple systems with custom index name. Filebeat send data to Logstash then logstash send data to Elasticsearch. Every thing is working fine logs are showing in Discovery ta… --- ## [JSON indexing in kibana](https://discuss.elastic.co/t/json-indexing-in-kibana/311265)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 2:01pm UTC](https://discuss.elastic.co/t/json-indexing-in-kibana/311265 "2022-08-03T14:01:02Z")
I have created a index using kibana console the sample JSON data format - \[{ "id":1, "Data":"{'patient\_name':'Amey','gender':'Male'}", "added\_on":"2021-09-28 17:58:16", "added\_by":0, "status":1 }, { "id":2, "Data":"{… --- ## [Ordering by percentile not working anymore](https://discuss.elastic.co/t/ordering-by-percentile-not-working-anymore/308995)
**Author:** [@VeraE](https://discuss.elastic.co/u/VeraE)\ **Replies:** 7\ **Last updated:** [August 3, 2022, 1:45pm UTC](https://discuss.elastic.co/t/ordering-by-percentile-not-working-anymore/308995 "2022-08-03T13:45:26Z")
Hi! I had a couple of Lens line graphs of some response times set up, ordered by the 95th percentile. In recent days I noticed they don't work anymore, although I didn't change anything (they were last changed in Januar… --- ## [Changing xpack monitoring index](https://discuss.elastic.co/t/changing-xpack-monitoring-index/309422)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [August 3, 2022, 1:27pm UTC](https://discuss.elastic.co/t/changing-xpack-monitoring-index/309422 "2022-08-03T13:27:10Z")
Hello, I want to lower the number of indices generated by monitoring modules from filebeat and metricbeat. That monitors logstash, beats, elasticserach and kibana. I would like these indices to be monthly indices. Whe… --- ## [Elasticsearch masters not discovering each other on Docker Swarm](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230)
**Author:** [@bushwhacker](https://discuss.elastic.co/u/bushwhacker)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230 "2022-08-03T13:12:36Z")
I am trying to set up an elasticsearch stack using docker swarm (Don't really need swarm functionality, but the .yml has been written now) The problem I seem to be getting is that when i start up the stack, the two mast… --- ## [Error: fail to enroll : connection timed out](https://discuss.elastic.co/t/error-fail-to-enroll-connection-timed-out/310036)
**Author:** [@koubach](https://discuss.elastic.co/u/koubach)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 12:49pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-connection-timed-out/310036 "2022-08-03T12:49:57Z")
Hi, I'm using Elastic Cloud and I'm can't seem to be able to install the elastic agent, and I get the error : Error: fail to enroll: fail to execute request to fleet-server: dial tcp IP-adress:443: connect: connection … --- ## [Hardening elasticsearch using certificate from sectigo](https://discuss.elastic.co/t/hardening-elasticsearch-using-certificate-from-sectigo/311296)
**Author:** [@xalastoi](https://discuss.elastic.co/u/xalastoi)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 11:47am UTC](https://discuss.elastic.co/t/hardening-elasticsearch-using-certificate-from-sectigo/311296 "2022-08-03T11:47:04Z")
0 Due to auditing requirements, it is necessary to encrypt all connections between the application and the elasticsearch cluster after a little googling, I realized that the elasticsearch cluster protection looks like t… --- ## [Cut off matching content and write to field](https://discuss.elastic.co/t/cut-off-matching-content-and-write-to-field/311197)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 11:44am UTC](https://discuss.elastic.co/t/cut-off-matching-content-and-write-to-field/311197 "2022-08-03T11:44:02Z")
Hi, is there any way to match a pattern inside a log and just write a port of it to a field? Here's a abstraction of my log: elapsedTimeMs=41 I'd wrap it in () because it's sporadic and want the 41 to be written into … --- ## [Custom log4j2.propoerties for Elasticsearch in docker](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 11:38am UTC](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321 "2022-08-03T11:38:51Z")
Hello, On docker, log messages go to the console and are handled by the configured Docker logging driver. To access logs we need to run docker logs $container\_name. I would like to change this behavior, and ask Elastic… --- ## [Elasticsearch data nodes](https://discuss.elastic.co/t/elasticsearch-data-nodes/311206)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 11:11am UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes/311206 "2022-08-03T11:11:49Z")
Hello I am a beginner at elastic , I want to ask you what is the criteria to add another elasticsearch data node , meaning how to know if my elasticsearch node needs another node to perform better , is there a percentage… --- ## [Fleet Server Docker Failing to Start no Error message](https://discuss.elastic.co/t/fleet-server-docker-failing-to-start-no-error-message/311294)
**Author:** [@maehue](https://discuss.elastic.co/u/maehue)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 11:00am UTC](https://discuss.elastic.co/t/fleet-server-docker-failing-to-start-no-error-message/311294 "2022-08-03T11:00:12Z")
I am having a hard time getting the Elastic Agent running as Server for Fleet in docker. I apologize I have to retype my environment here on my personal account as I am not yet on the enterprise support so its difficult… --- ## [Can't load some Security pages](https://discuss.elastic.co/t/cant-load-some-security-pages/311126)
**Author:** [@kotvmrc](https://discuss.elastic.co/u/kotvmrc)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 10:51am UTC](https://discuss.elastic.co/t/cant-load-some-security-pages/311126 "2022-08-03T10:51:27Z")
Hello all, I'm experiencing some issues when loading pages from "Security" section. Pages "Overview", "Timelines", "Cases", "Hosts" and "Network" show the following: "Alerts" page is loading correctly and all the p… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=840) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=842)