# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=879 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 880 --- ## [Default security parameters are not coming in elasticsearch--- default super user password is not set](https://discuss.elastic.co/t/default-security-parameters-are-not-coming-in-elasticsearch-default-super-user-password-is-not-set/308709)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 9:06pm UTC](https://discuss.elastic.co/t/default-security-parameters-are-not-coming-in-elasticsearch-default-super-user-password-is-not-set/308709 "2022-07-02T21:06:38Z")
Hi , I have installed Elasticsearch 8.3 from RPM repository and it installed properly. started Elasticsearch on linxe machine. but i could see some issue in elasticsearch logs. \[2022-07-02T10:48:00,891\]\[INFO \]\[o.e.x.s.I… --- ## [Monitoring AWS Environment](https://discuss.elastic.co/t/monitoring-aws-environment/308623)
**Author:** [@JypraGroup](https://discuss.elastic.co/u/JypraGroup)\ **Replies:** 1\ **Last updated:** [July 2, 2022, 1:49pm UTC](https://discuss.elastic.co/t/monitoring-aws-environment/308623 "2022-07-02T13:49:07Z")
Hi All, I need some advice! We have a AWS CloudWatch collecting all the logs from different sources (WAF, application, EC2 etc.), and we need to pull those logs into Elastic for monitoring from both the application avai… --- ## [I am having problem with logstash](https://discuss.elastic.co/t/i-am-having-problem-with-logstash/308712)
**Author:** [@CodeRed](https://discuss.elastic.co/u/CodeRed)\ **Replies:** 1\ **Last updated:** [July 2, 2022, 12:09pm UTC](https://discuss.elastic.co/t/i-am-having-problem-with-logstash/308712 "2022-07-02T12:09:44Z")
after i did add xpack.security.enabled :true to elasticserach.yml file then i set password but i was not able to restart logstash anymore this is what i see in logstash's log file Attempted to resurrect connection to d… --- ## [Whitespace problem in multimatch](https://discuss.elastic.co/t/whitespace-problem-in-multimatch/308710)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 0\ **Last updated:** [July 2, 2022, 7:20am UTC](https://discuss.elastic.co/t/whitespace-problem-in-multimatch/308710 "2022-07-02T07:20:24Z")
Am using elasticsearch dsl with python , am facing a problem where whitespace comes in. for example if I search "dairymilk" without whitespace am not getting the results but am geting results for "dairy milk" with whites… --- ## [Data Node like working Alone](https://discuss.elastic.co/t/data-node-like-working-alone/308697)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 6:39am UTC](https://discuss.elastic.co/t/data-node-like-working-alone/308697 "2022-07-02T06:39:21Z")
Hi Everyone, I found something odd in our cluster like this picture below We have quite a lot of data node here actually but i think something's wrong with our cluster. of all existing data nodes, only data-1 has t… --- ## [New Elasticsearch Java client API](https://discuss.elastic.co/t/new-elasticsearch-java-client-api/308695)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 5:41am UTC](https://discuss.elastic.co/t/new-elasticsearch-java-client-api/308695 "2022-07-02T05:41:29Z")
I am trying to switch from high level rest client to this new client (Java). I tried a simple matchAll query as follows and I got 2 questions need your help: SearchResponse\ response = esClient.search(s … --- ## [Error: Request error, retrying - connect EMFILE](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681)
**Author:** [@mcolla](https://discuss.elastic.co/u/mcolla)\ **Replies:** 6\ **Last updated:** [July 1, 2022, 9:54pm UTC](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681 "2022-07-01T21:54:03Z")
I have 240k requests to insert on Elasticsearch, but i get the error: How can I fix this? --- ## [Unassigned Shards with error 'Failed to create index' - NullPointerException](https://discuss.elastic.co/t/unassigned-shards-with-error-failed-to-create-index-nullpointerexception/308682)
**Author:** [@LisaJ](https://discuss.elastic.co/u/LisaJ)\ **Replies:** 3\ **Last updated:** [July 1, 2022, 6:32pm UTC](https://discuss.elastic.co/t/unassigned-shards-with-error-failed-to-create-index-nullpointerexception/308682 "2022-07-01T18:32:44Z")
I encountered a problem bringing a cluster back from a full cluster restart. The cluster has 3 master, 3 coordinating, 2 hot, 2 warm, and 2 cold nodes. All nodes appear to have rejoined the cluster successfully: ip … --- ## [Search across multiple fields with a query string query](https://discuss.elastic.co/t/search-across-multiple-fields-with-a-query-string-query/308678)
**Author:** [@jheebscs](https://discuss.elastic.co/u/jheebscs)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 4:38pm UTC](https://discuss.elastic.co/t/search-across-multiple-fields-with-a-query-string-query/308678 "2022-07-01T16:38:13Z")
Hi I have a query string query configured to search across multiple fields with type "most\_fields". Unfortunately when the query string consists of more than one word it only matches if all words occur in the same field… --- ## [How to add more nodes to an existing elastic search](https://discuss.elastic.co/t/how-to-add-more-nodes-to-an-existing-elastic-search/306818)
**Author:** [@eliumoraes](https://discuss.elastic.co/u/eliumoraes)\ **Replies:** 10\ **Last updated:** [July 1, 2022, 4:09pm UTC](https://discuss.elastic.co/t/how-to-add-more-nodes-to-an-existing-elastic-search/306818 "2022-07-01T16:09:03Z")
Hello guys, I'm new to Elasticsearch and started to work on a company that assigned me a taqsk to add more nodes in an existing environment. We are using the integration between Elastic and Azure in our environment. W… --- ## [Regarding Date filter format](https://discuss.elastic.co/t/regarding-date-filter-format/308626)
**Author:** [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\ **Replies:** 16\ **Last updated:** [July 1, 2022, 3:50pm UTC](https://discuss.elastic.co/t/regarding-date-filter-format/308626 "2022-07-01T15:50:45Z")
Hi team, I have a field having value as "updatedDate" =\> 2019-12-31T00:27:17.356Z I am trying to convert date format to updatedDate" =\> 2019-12-31 I am using below filter.But getting datetime parse error: date { m… --- ## [Rally esrally.mechanic.mechanic.NodeMechanicActor transport run exception](https://discuss.elastic.co/t/rally-esrally-mechanic-mechanic-nodemechanicactor-transport-run-exception/308489)
**Author:** [@ramzis](https://discuss.elastic.co/u/ramzis)\ **Replies:** 8\ **Last updated:** [July 1, 2022, 3:34pm UTC](https://discuss.elastic.co/t/rally-esrally-mechanic-mechanic-nodemechanicactor-transport-run-exception/308489 "2022-07-01T15:34:45Z")
Hi, trying to run esrally race --distribution-version=8.3.0 --kill-running-processes --track=geonames hangs on ~/.rally/logs/rally.log: ActorAddr-(T|:50500)/PID:8353 esrally.actor INFO Starting node(s) \[0\] on \[127.0.… --- ## [Can't see profiler in Kibana Dev Tools? v7.10.2](https://discuss.elastic.co/t/cant-see-profiler-in-kibana-dev-tools-v7-10-2/308408)
**Author:** [@chrisml](https://discuss.elastic.co/u/chrisml)\ **Replies:** 2\ **Last updated:** [July 1, 2022, 2:26pm UTC](https://discuss.elastic.co/t/cant-see-profiler-in-kibana-dev-tools-v7-10-2/308408 "2022-07-01T14:26:01Z")
Hi all, I'm trying to profile my ES query but can't see the profile button in Dev Tools in v7.10.2? I'm using blacktop/kibana:7.10.2 docker image. Is there anything I'm missing? Thanks --- ## [Failed to create report](https://discuss.elastic.co/t/failed-to-create-report/306577)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 4\ **Last updated:** [July 1, 2022, 2:24pm UTC](https://discuss.elastic.co/t/failed-to-create-report/306577 "2022-07-01T14:24:28Z")
I am not able to create any type (pdf, png, or csv) of reports in Kibana. The error message just states, "Failed to create report. Reporting task runner has not been initialized!" I ran the reporting diagnostic tool whi… --- ## [Beats on VMS to Logstash deployed in kubernetes with ingress definition - Beats Config Question](https://discuss.elastic.co/t/beats-on-vms-to-logstash-deployed-in-kubernetes-with-ingress-definition-beats-config-question/308668)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 2:22pm UTC](https://discuss.elastic.co/t/beats-on-vms-to-logstash-deployed-in-kubernetes-with-ingress-definition-beats-config-question/308668 "2022-07-01T14:22:53Z")
Overview of data flow: Beats on VMs -→ nginx -→ logstash (ingress definition, see below) -→ elasticsearch Logstash Ingress Definition: ingress: enabled: true className: "nginx" pathtype: ImplementationSpecific … --- ## [Timezone related issue](https://discuss.elastic.co/t/timezone-related-issue/308596)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 2:19pm UTC](https://discuss.elastic.co/t/timezone-related-issue/308596 "2022-07-01T14:19:54Z")
Hello Again, I am getting as actual data for the attribute(FILE\_CREATION\_DATE) as "2022-06-30 16:34:27" but when I see in the kibana table format; I can see the time has been added exactly two hours. Here is the data i… --- ## [Does jdbc\_user get signed out after run of pipeline?](https://discuss.elastic.co/t/does-jdbc-user-get-signed-out-after-run-of-pipeline/307407)
**Author:** [@DazDotOne](https://discuss.elastic.co/u/DazDotOne)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 2:18pm UTC](https://discuss.elastic.co/t/does-jdbc-user-get-signed-out-after-run-of-pipeline/307407 "2022-07-01T14:18:32Z")
Sorry if this is answered elsewhere, I had a look around the web but couldn't really find anything. After a pipeline has executed, does this plugin sign the given user out from the SQL server or retain the connection fo… --- ## [Is it possible to parse ISO 8583 into Elasticsearch using logstash](https://discuss.elastic.co/t/is-it-possible-to-parse-iso-8583-into-elasticsearch-using-logstash/308633)
**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\ **Replies:** 1\ **Last updated:** [July 1, 2022, 1:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-parse-iso-8583-into-elasticsearch-using-logstash/308633 "2022-07-01T13:53:34Z")
I want to monitor a log containing ISO 5853, I have succeeded in parsing the ISO log into single line, then how do I parse it according to ISO 5853 standards? Is there a plugin program or something else that can fit it i… --- ## [Logstash elasticsearch filter and array of string substitution](https://discuss.elastic.co/t/logstash-elasticsearch-filter-and-array-of-string-substitution/308646)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 1\ **Last updated:** [July 1, 2022, 11:01am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-and-array-of-string-substitution/308646 "2022-07-01T11:01:45Z")
I'm using the logstash elasticsearch filter to make a terms query where i need to substitute an array on the selected query\_template. The query template is as follows: { "size": 5, "query": { "bool": {"filter":… --- ## [Elasticsearch cluster not coming up](https://discuss.elastic.co/t/elasticsearch-cluster-not-coming-up/307439)
**Author:** [@sahanc](https://discuss.elastic.co/u/sahanc)\ **Replies:** 7\ **Last updated:** [July 1, 2022, 10:29am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-not-coming-up/307439 "2022-07-01T10:29:28Z")
Readiness probe failed: Waiting for Elasticsearch cluster to become ready. Cluster is not ready. I'm using a microk8s HA cluster. I can provide details. --- ## [Failed to execute action logstash message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"{\\" at line 9, column 8 (byte 62) after filter {\\n json "](https://discuss.elastic.co/t/failed-to-execute-action-logstash-message-expected-one-of-t-r-n-at-line-9-column-8-byte-62-after-filter-n-json/308559)
**Author:** [@Hemabh\_Ravee](https://discuss.elastic.co/u/Hemabh_Ravee)\ **Replies:** 2\ **Last updated:** [July 1, 2022, 9:04am UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash-message-expected-one-of-t-r-n-at-line-9-column-8-byte-62-after-filter-n-json/308559 "2022-07-01T09:04:03Z")
I am new to the Elastic stack and tried using the json filter plugin to parse kibana's logs. But adding the filter started throwing this error - Failed to execute action logstash message=\>"Expected one of \[ \\\\t\\\\r\\\\n\],… --- ## [Logstash certificate error issue](https://discuss.elastic.co/t/logstash-certificate-error-issue/308641)
**Author:** [@nairobi](https://discuss.elastic.co/u/nairobi)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 8:58am UTC](https://discuss.elastic.co/t/logstash-certificate-error-issue/308641 "2022-07-01T08:58:47Z")
hi Are therer any relation between cert certificate error and logstash performance? When i restarted logstash it is solved but i can't find any reason. thank you --- ## [2 Nodes crashed, how to get last Node up an running](https://discuss.elastic.co/t/2-nodes-crashed-how-to-get-last-node-up-an-running/308605)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 4\ **Last updated:** [July 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/2-nodes-crashed-how-to-get-last-node-up-an-running/308605 "2022-07-01T07:26:58Z")
I'm running Elastic 7.13.3 in a 3 Node Cluster Environment on Windows at a Customer where within 3-4 hours two SSD's failed to operate and from 3 Nodes only one Node is still up an running although i can not access this … --- ## [Combining Logstash and RavenDB](https://discuss.elastic.co/t/combining-logstash-and-ravendb/308631)
**Author:** [@AurelioAranzana](https://discuss.elastic.co/u/AurelioAranzana)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 7:25am UTC](https://discuss.elastic.co/t/combining-logstash-and-ravendb/308631 "2022-07-01T07:25:49Z")
Hi everyone! I would like to know if anyone knows if it is possible to implement a pipeline to extract data from RavenDB to export it to another database via logstash. At the moment, I'm used to using the pluging jdbc … --- ## [Kibana log file (kibana.log, Size is 38.2 GB) is too large in (/var/log/kibana) how to free space or delete old logs from file. If i delete this files should i lost index log data?](https://discuss.elastic.co/t/kibana-log-file-kibana-log-size-is-38-2-gb-is-too-large-in-var-log-kibana-how-to-free-space-or-delete-old-logs-from-file-if-i-delete-this-files-should-i-lost-index-log-data/308557)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 7:11am UTC](https://discuss.elastic.co/t/kibana-log-file-kibana-log-size-is-38-2-gb-is-too-large-in-var-log-kibana-how-to-free-space-or-delete-old-logs-from-file-if-i-delete-this-files-should-i-lost-index-log-data/308557 "2022-07-01T07:11:34Z")
--- ## [Elasticsearch not generating password when started for the first time](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 3\ **Last updated:** [July 1, 2022, 6:33am UTC](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403 "2022-07-01T06:33:10Z")
Hi, I have installed a fresh instance of Elasticsearch 8.1.0. Configurations I added: cluster.name: elasticsearch-8\_1\_0\_windows\_local\_2 network.host: localhost http.port: 29200 I open cmd on windows machine as an adm… --- ## [Invalid mapping error in metricbeat 7.16.2](https://discuss.elastic.co/t/invalid-mapping-error-in-metricbeat-7-16-2/308264)
**Author:** [@ritesh811](https://discuss.elastic.co/u/ritesh811)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 4:26am UTC](https://discuss.elastic.co/t/invalid-mapping-error-in-metricbeat-7-16-2/308264 "2022-07-01T04:26:00Z")
I am facing the below error in my metricbeat index in kibana illegal\_state\_exception: invalid mapping definition, expected a single map underneath \[\_doc\] but it was: \[{\_meta={beat=metricbeat, version=7.16.2}, dynamic\_te… --- ## [Drop ingest pipeline for one host](https://discuss.elastic.co/t/drop-ingest-pipeline-for-one-host/308555)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [July 1, 2022, 2:21am UTC](https://discuss.elastic.co/t/drop-ingest-pipeline-for-one-host/308555 "2022-07-01T02:21:41Z")
I am running 7.17 ELS and trying to drop all docs which come from one specific host "drop": { "if" : ("agent.name" == 'ABC') }, I have added this as drop processor in ingest pipeline however it keep… --- ## [Logstash Multi pipeline with beats input](https://discuss.elastic.co/t/logstash-multi-pipeline-with-beats-input/308612)
**Author:** [@MM2022](https://discuss.elastic.co/u/MM2022)\ **Replies:** 1\ **Last updated:** [July 1, 2022, 1:45am UTC](https://discuss.elastic.co/t/logstash-multi-pipeline-with-beats-input/308612 "2022-07-01T01:45:03Z")
Hi All, I have one ELK stack and multiple clients to send their data to it. Each client should have their own Index and clients should not be able to see each others data. I am using filebeats on the client servers. the… --- ## [Unable to start the elasticsearch.service](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065)
**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 1:25am UTC](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065 "2022-07-01T01:25:25Z")
Hello, I'm trying to start my Elasticsearch servcie on RHEL Environment but I'm unable to start it after N days of not monitoring it. With this, I'm unable to access the Kibana dashboard. \[2022-06-24T09:34:05,594\]\[ERRO… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=878) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=880)