# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=887 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 888 --- ## [Graphs not showing](https://discuss.elastic.co/t/graphs-not-showing/308085)
**Author:** [@aryamishra](https://discuss.elastic.co/u/aryamishra)\ **Replies:** 7\ **Last updated:** [June 27, 2022, 7:46am UTC](https://discuss.elastic.co/t/graphs-not-showing/308085 "2022-06-27T07:46:00Z")
I have taken reboot of of my kibana cluster, post reboot the graphs are not showing neither for 15mins or any orher timeline.Earlier it was showing exceptions of \[2\] total shards, but this cluster currently has \[3902\]/\[… --- ## [Dashboards appearing](https://discuss.elastic.co/t/dashboards-appearing/308207)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 7:38am UTC](https://discuss.elastic.co/t/dashboards-appearing/308207 "2022-06-27T07:38:02Z")
On one of the spaces we have in kibana, we observe that some system dashboards have started showing up. We did not create these, any idea how this could happen? Thanks.. --- ## [Strange results when trying to run an aggregration query](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100)
**Author:** [@gep13](https://discuss.elastic.co/u/gep13)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 7:20am UTC](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100 "2022-06-27T07:20:41Z")
Hello, I am trying to run a query similar to the following: "aggs": { "authors": { "terms": { "field": "packageAuthors.keyword" } } } Initially, this seems to be working exactly as I wo… --- ## [Default retention policy](https://discuss.elastic.co/t/default-retention-policy/308088)
**Author:** [@patriczek](https://discuss.elastic.co/u/patriczek)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/default-retention-policy/308088 "2022-06-27T05:56:29Z")
Hi, do we have any way to set up a default retention policy that doesn't affect system indices? --- ## [Run Python script continuously from Logstash](https://discuss.elastic.co/t/run-python-script-continuously-from-logstash/307656)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 5:12am UTC](https://discuss.elastic.co/t/run-python-script-continuously-from-logstash/307656 "2022-06-27T05:12:04Z")
Hi Team, My requirement is to run python script in background from logstash, and the output I need to take as event in logstash how to achieve that. Note: I am using exec input plugins, which eventually is not sending … --- ## [Automated reports](https://discuss.elastic.co/t/automated-reports/308154)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 5:10am UTC](https://discuss.elastic.co/t/automated-reports/308154 "2022-06-27T05:10:10Z")
Hi, What is the best way to have automated CSV reports emailed/scheduled in Kibana? Thanks.. --- ## [ERROR: Could not find or load main class](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class/306297)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 13\ **Last updated:** [June 27, 2022, 4:30am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class/306297 "2022-06-27T04:30:35Z")
Hai. I have a problem regarding Logstash start. Before this when i use Logstash for ingestion, everything works well. but now, the Logstash seems having problem with java where the error as followed: I already have … --- ## [Got response code '403' contacting Elasticsearch at URL 'http://localhost:9200/](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067)
**Author:** [@paulohperes](https://discuss.elastic.co/u/paulohperes)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 4:04am UTC](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067 "2022-06-27T04:04:38Z")
Hi, My pipeline not working with ouput elasticsearch, I created user and role like this: root@logserver:/home/g0004830# curl -k -u admin:my\_password -XGET "http://localhost:9200/\_security/user/syslog?pretty" { "sysl… --- ## [Hive into es err \[HEAD\] on \[pon\_ihgu\_sp\_day\_ln20220627\] failed; server\[10.204.172.64:9200\] returned \[503|Service Unavailable:\]](https://discuss.elastic.co/t/hive-into-es-err-head-on-pon-ihgu-sp-day-ln20220627-failed-server-10-204-172-64-9200-returned-503-service-unavailable/308203)
**Author:** [@baishangkun2011](https://discuss.elastic.co/u/baishangkun2011)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 2:21am UTC](https://discuss.elastic.co/t/hive-into-es-err-head-on-pon-ihgu-sp-day-ln20220627-failed-server-10-204-172-64-9200-returned-503-service-unavailable/308203 "2022-06-27T02:21:30Z")
HI i use hive into es have err Caused by: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: \[HEAD\] on \[pon\_ihgu\_sp\_day\_ln20220627\] failed; server\[10.204.172.64:9200\] returned \[503|Service Unavailable:\] at org.el… --- ## [ILM lifecycle error](https://discuss.elastic.co/t/ilm-lifecycle-error/307880)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 1:29am UTC](https://discuss.elastic.co/t/ilm-lifecycle-error/307880 "2022-06-27T01:29:48Z")
So I created a lifecycle policy with an Index templates using wild card for all my tests env. : test\* I get an error for all the indecies. Index lifecycle error illegal\_argument\_exception: setting \[index.lifecycle.rol… --- ## [Is it necessary to put "Discovery Seed\_hosts\[\]" when working on a single node in elasticsearch 8.2?](https://discuss.elastic.co/t/is-it-necessary-to-put-discovery-seed-hosts-when-working-on-a-single-node-in-elasticsearch-8-2/308179)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 1:21am UTC](https://discuss.elastic.co/t/is-it-necessary-to-put-discovery-seed-hosts-when-working-on-a-single-node-in-elasticsearch-8-2/308179 "2022-06-27T01:21:32Z")
is it necessary to put "Discovery Seed\_hosts" when working on a single node in elasticsearch 8.2? --- ## [Bulk Insert documents - Getting BulkError](https://discuss.elastic.co/t/bulk-insert-documents-getting-bulkerror/308198)
**Author:** [@Hardik\_Sanghavi](https://discuss.elastic.co/u/Hardik_Sanghavi)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 1:08am UTC](https://discuss.elastic.co/t/bulk-insert-documents-getting-bulkerror/308198 "2022-06-27T01:08:42Z")
Hello, I am new to inserting bulk documents into ElasticSearch using Python When I am trying to bulk insert documents, I am getting "elasticsearch.helpers.BulkIndexError: 100 document(s) failed to index." The index do… --- ## [Mapper parsing exception - Am I looking in the right place or is ES fooling me!?](https://discuss.elastic.co/t/mapper-parsing-exception-am-i-looking-in-the-right-place-or-is-es-fooling-me/308022)
**Author:** [@js-jp](https://discuss.elastic.co/u/js-jp)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 12:25am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-am-i-looking-in-the-right-place-or-is-es-fooling-me/308022 "2022-06-27T00:25:39Z")
Hi all Apologies if I don't have all the correct terminology as I am new to the elastic stack. I have just been allocated a task to remedy this problem; We have a Filebeat - ES - Kibana installation When users run th… --- ## [Get error while on "Add your Fleet Server host"](https://discuss.elastic.co/t/get-error-while-on-add-your-fleet-server-host/308021)
**Author:** [@ghostmomo](https://discuss.elastic.co/u/ghostmomo)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 2:10pm UTC](https://discuss.elastic.co/t/get-error-while-on-add-your-fleet-server-host/308021 "2022-06-23T14:10:11Z")
Trying to add the Fleet Server host but turn out having error as below. Any idea what did I setup incorrectly please? Thank you. --- ## [Kibana Error](https://discuss.elastic.co/t/kibana-error/308135)
**Author:** [@Lsegura13](https://discuss.elastic.co/u/Lsegura13)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 12:16am UTC](https://discuss.elastic.co/t/kibana-error/308135 "2022-06-27T00:16:30Z")
Can someone help me with the below error? I have no idea how to resolved it. Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] Reason: missing authentication cre… --- ## [Is the java jdk by default available in elk stack 8.2](https://discuss.elastic.co/t/is-the-java-jdk-by-default-available-in-elk-stack-8-2/308192)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 5\ **Last updated:** [June 26, 2022, 9:40pm UTC](https://discuss.elastic.co/t/is-the-java-jdk-by-default-available-in-elk-stack-8-2/308192 "2022-06-26T21:40:29Z")
is the java jdk by default available in elk stack 8.2 ? because when i try java --version this the response elastic@elastic:~$ java -version Command 'java' not found, but can be installed with: sudo apt install openjdk… --- ## [Only write ops with an op\_type of create are allowed in data streams"}}}}](https://discuss.elastic.co/t/only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/308182)
**Author:** [@Nightshade](https://discuss.elastic.co/u/Nightshade)\ **Replies:** 3\ **Last updated:** [June 26, 2022, 8:50pm UTC](https://discuss.elastic.co/t/only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/308182 "2022-06-26T20:50:27Z")
Not sure what to do here, have tried a bunch of suggestions from Github for this issue.. input { beats { port =\> 5044 } } output { elasticsearch { data\_stream =\> "true" data\_stream\_timestamp =\> "@time… --- ## [How does match\_phrase result data order in detail?](https://discuss.elastic.co/t/how-does-match-phrase-result-data-order-in-detail/308188)
**Author:** [@mktriniti](https://discuss.elastic.co/u/mktriniti)\ **Replies:** 0\ **Last updated:** [June 26, 2022, 3:00pm UTC](https://discuss.elastic.co/t/how-does-match-phrase-result-data-order-in-detail/308188 "2022-06-26T15:00:29Z")
Hello there, I am new to Elasticsearch. I am trying to use match\_phrase to accomplish a search task on item name that having a phrase match in order. But the result order is a little bit strange in my case. Example quer… --- ## [Bulk API Failing](https://discuss.elastic.co/t/bulk-api-failing/308184)
**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\ **Replies:** 2\ **Last updated:** [June 26, 2022, 2:45pm UTC](https://discuss.elastic.co/t/bulk-api-failing/308184 "2022-06-26T14:45:55Z")
Hi, I am using ElasticSearch 8.2.3 version in Windows 10 I have tried modifying in multiple ways.. but its still failing Could you please help. curl --insecure -H "Content-Type: application/x-ndjson" -XPUT "https://… --- ## [Elastic Search Fleet Agents | Kibana not showing the Fleet URL](https://discuss.elastic.co/t/elastic-search-fleet-agents-kibana-not-showing-the-fleet-url/308185)
**Author:** [@soumilshah1995](https://discuss.elastic.co/u/soumilshah1995)\ **Replies:** 2\ **Last updated:** [June 26, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elastic-search-fleet-agents-kibana-not-showing-the-fleet-url/308185 "2022-06-26T14:43:54Z")
Hello I am using Kibana Version 8.2 and Elasticsearch Version"8.2.0" Here you will see that i am not prompted with a URL can someone advise, please Please note I have already copy-pasted YML that I got from kib… --- ## [Collapse over more then 10,000 docs](https://discuss.elastic.co/t/collapse-over-more-then-10-000-docs/308096)
**Author:** [@LenaM](https://discuss.elastic.co/u/LenaM)\ **Replies:** 1\ **Last updated:** [June 26, 2022, 1:43pm UTC](https://discuss.elastic.co/t/collapse-over-more-then-10-000-docs/308096 "2022-06-26T13:43:33Z")
I have an index that contains more than 1 million documents. I am using a query with the "collapse" parameter to group a field and get its unique values. Do I get ALL unique values from this field that might match the qu… --- ## [Elastic search(8.2) and Kibana Authentication Error](https://discuss.elastic.co/t/elastic-search-8-2-and-kibana-authentication-error/308170)
**Author:** [@soumilshah1995](https://discuss.elastic.co/u/soumilshah1995)\ **Replies:** 10\ **Last updated:** [June 26, 2022, 1:17pm UTC](https://discuss.elastic.co/t/elastic-search-8-2-and-kibana-authentication-error/308170 "2022-06-26T13:17:34Z")
Hello All hope you are doing well I am trying to get Kibana working with Elastic search Version 8.2 Here is an issue I am running into and looking fwd to seeking help and advice from a community ELastic search VErsion … --- ## [Unable to Connect Filebeat to Elasticsearch](https://discuss.elastic.co/t/unable-to-connect-filebeat-to-elasticsearch/308061)
**Author:** [@Nightshade](https://discuss.elastic.co/u/Nightshade)\ **Replies:** 5\ **Last updated:** [June 26, 2022, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-to-elasticsearch/308061 "2022-06-26T12:09:58Z")
This is the error I am getting: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://10.0.0.132:9200: Get "http://10.0.0.132:9200": EOF\] Full log w… --- ## [Elastic search parse a string](https://discuss.elastic.co/t/elastic-search-parse-a-string/308164)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 8\ **Last updated:** [June 26, 2022, 10:57am UTC](https://discuss.elastic.co/t/elastic-search-parse-a-string/308164 "2022-06-26T10:57:46Z")
Hi, I search a way to find a string inside another string by parsing it. For example i index into elasticSearch a document that contain the text : "2000Newyork" in a field name "id" And now i want to find the indexed … --- ## [ILM Performance in search](https://discuss.elastic.co/t/ilm-performance-in-search/307951)
**Author:** [@Yariv\_Moshe](https://discuss.elastic.co/u/Yariv_Moshe)\ **Replies:** 6\ **Last updated:** [June 26, 2022, 7:48am UTC](https://discuss.elastic.co/t/ilm-performance-in-search/307951 "2022-06-26T07:48:55Z")
Hi, I want to use ILM to create a new index per day or month. my question is how it going to affect search performance if old indexes will move to the warm | cold stage with pure HW. let's say that I have a query rang… --- ## [Decoding json fields properly with filebeat](https://discuss.elastic.co/t/decoding-json-fields-properly-with-filebeat/307596)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [June 26, 2022, 3:57am UTC](https://discuss.elastic.co/t/decoding-json-fields-properly-with-filebeat/307596 "2022-06-26T03:57:40Z")
Hi Team, I am trying to parse modsec\_audit logs with filebeat in json format. However those are not being parsed correctly. Here is the original log. {"transaction":{"client\_ip":"66.249.66.154","time\_stamp":"Mon Jun 2… --- ## [Java client 8.2.2 Trouble loading keystore during setup](https://discuss.elastic.co/t/java-client-8-2-2-trouble-loading-keystore-during-setup/307577)
**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\ **Replies:** 20\ **Last updated:** [June 26, 2022, 12:52am UTC](https://discuss.elastic.co/t/java-client-8-2-2-trouble-loading-keystore-during-setup/307577 "2022-06-26T00:52:52Z")
I created a gist here When doing a keystore.load I get DerInputStream.getLength(): lengthTag=87, too big. Apparently that's a rich topic, as in Most of the issue seems to be on platforms other than ES. I'm hoping … --- ## [Aggregation over top hits](https://discuss.elastic.co/t/aggregation-over-top-hits/308169)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 0\ **Last updated:** [June 25, 2022, 9:33pm UTC](https://discuss.elastic.co/t/aggregation-over-top-hits/308169 "2022-06-25T21:33:23Z")
Hello, This is my query { "aggs": { "by\_agency\_id": { "terms": { "field": "agency\_id.keyword", "size": 1000 }, "aggs": { "by\_uuid": { "terms": { "fi… --- ## [Elasticsearch index on compressed string blob](https://discuss.elastic.co/t/elasticsearch-index-on-compressed-string-blob/308151)
**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\ **Replies:** 7\ **Last updated:** [June 25, 2022, 9:04pm UTC](https://discuss.elastic.co/t/elasticsearch-index-on-compressed-string-blob/308151 "2022-06-25T21:04:43Z")
I needed to index on compressed string blob.. I read that ingest attachment plugin could be the right tool for files.. and base64 strings.. ingest attachment plugin relies on appache tikka I read that Tika supports: "… --- ## [How to write remote hostname to output file with logstash](https://discuss.elastic.co/t/how-to-write-remote-hostname-to-output-file-with-logstash/308161)
**Author:** [@Yunus\_Dal](https://discuss.elastic.co/u/Yunus_Dal)\ **Replies:** 2\ **Last updated:** [June 25, 2022, 2:03pm UTC](https://discuss.elastic.co/t/how-to-write-remote-hostname-to-output-file-with-logstash/308161 "2022-06-25T14:03:32Z")
Hi, I have java application which is running at 2 instance and collect logs from these instances. I want to create output log file so far as remote hostname. my logstash config; input { tcp { codec =\> json … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=886) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=888)