# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=895 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 896 --- ## [Packetbeat not running in windows](https://discuss.elastic.co/t/packetbeat-not-running-in-windows/307647)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 5\ **Last updated:** [June 21, 2022, 7:12am UTC](https://discuss.elastic.co/t/packetbeat-not-running-in-windows/307647 "2022-06-21T07:12:01Z")
I have installed packetbeat 7.17.3v elk is also 7.17.3v after editing config yml file packetbeat is not running in powershell(not showing any errors too). please check the attachment. --- ## [How to express the logic to let nested field match multiple groups condition](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614)
**Author:** [@Bruce\_Zu](https://discuss.elastic.co/u/Bruce_Zu)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 7:11am UTC](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614 "2022-06-21T07:11:54Z")
Elasticsearch version 6.8.0 mappings like { "properties": { "id": { "type": "long" }, "authentication\_worker": { "type": "nested", "properties": { "authorized\_id": { "t… --- ## [The instance rejected the connection](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722)
**Author:** [@Ventsislav\_Kyorovski](https://discuss.elastic.co/u/Ventsislav_Kyorovski)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 7:08am UTC](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722 "2022-06-21T07:08:54Z")
Hello everyone, We use Elastic Cloud hosted on GCP, our production cluster is 1.41 TB storage, 32 GB RAM, 8 vCPU split in 2 zones. We have a Java application which uses the ES as a database and yesterday, when we hit 2… --- ## [Kibana table resizing of columns](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 6:37am UTC](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633 "2022-06-21T06:37:41Z")
Dear team, Is there a way to resize columns per user needs? We have a dashboard in 1 space, which is used by multiple users, each with their own monitor sizes. That causes an issue with different width of table colum… --- ## [Limitation in dashboard creation](https://discuss.elastic.co/t/limitation-in-dashboard-creation/307640)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 6:33am UTC](https://discuss.elastic.co/t/limitation-in-dashboard-creation/307640 "2022-06-21T06:33:04Z")
Hi I have a series of data that I load daily with the following information: Username assigned quota quota used last connection I'm trying to create a series of dashboards to graphically collect some results that we … --- ## [Processors Configuration taking the processors from the resource request of kubernetes](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 0\ **Last updated:** [June 21, 2022, 4:50am UTC](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707 "2022-06-21T04:50:36Z")
Hi All, I am running es-cluster on kubernetes with below resources request on container. resources: requests: cpu: 8 memory: "64Gi" I have not put limit on the resources. I have 224 VCPUs(HT on) on my host machine… --- ## [Maxtimeout Reached](https://discuss.elastic.co/t/maxtimeout-reached/307486)
**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 4:31am UTC](https://discuss.elastic.co/t/maxtimeout-reached/307486 "2022-06-21T04:31:42Z")
Hi Everyone, recently when I try to index a document. The request, response with max-timeout reached after a certain point in time, and it starts indexing again. Now, I'm trying to find the root cause of that issue. T… --- ## [Sorting on Visual](https://discuss.elastic.co/t/sorting-on-visual/307705)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 4:05am UTC](https://discuss.elastic.co/t/sorting-on-visual/307705 "2022-06-21T04:05:42Z")
Need to sort on visual By field called "Category". So i click the filter and add below code. { "sorts": \[ { "field": "Category", "direction": "ASC" } \] } But i didnt sort by "Catagory". Can some… --- ## [Elk stack license](https://discuss.elastic.co/t/elk-stack-license/307473)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 4:00am UTC](https://discuss.elastic.co/t/elk-stack-license/307473 "2022-06-21T04:00:23Z")
Hi, How can I enable the machine learning features for kibana downloaded on my system. My trial has ended. How do I upgrade from basic license? Thanks in Advance --- ## [Discarding logs in elk](https://discuss.elastic.co/t/discarding-logs-in-elk/307481)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 7\ **Last updated:** [June 21, 2022, 3:28am UTC](https://discuss.elastic.co/t/discarding-logs-in-elk/307481 "2022-06-21T03:28:33Z")
We are using winlogbeat agent. Can we discard or drop log messages based on a criteria defined in elk stack. We dont want to drop logs based on winlog yml config on systems but we want to drop logs centrally.Is it pos… --- ## [Java API - Having problem by searching data on kibana](https://discuss.elastic.co/t/java-api-having-problem-by-searching-data-on-kibana/307268)
**Author:** [@Ahsan\_Sharif](https://discuss.elastic.co/u/Ahsan_Sharif)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 2:06am UTC](https://discuss.elastic.co/t/java-api-having-problem-by-searching-data-on-kibana/307268 "2022-06-21T02:06:26Z")
SearchRequest request = new SearchRequest(); request.indices("search\_products"); request.source(new SearchSourceBuilder().query(QueryBuilders.wrapperQuery(queryString))); SearchResponse response = client.search(request, … --- ## [Watcher alert for capture the defined kubernetes pod resource limit](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281)
**Author:** [@dkumar89](https://discuss.elastic.co/u/dkumar89)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 2:05am UTC](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281 "2022-06-21T02:05:03Z")
Hi Team, we would like to know the defined resource limit for all the kubernetes pod for which we have enabled monitoring. Is there a field that can give us resource(CPU, Memory) limit values that we defined in pod dep… --- ## [Monitor roles for the user](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 0\ **Last updated:** [June 15, 2022, 12:24pm UTC](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272 "2022-06-15T12:24:41Z")
Hello, I have elastisearch exporter for getting cluster metrics to Prometheus, But we have to add a username and Password in the service file, Which roles will be okay for getting cluster details? --- ## [Fetching Documents with alias](https://discuss.elastic.co/t/fetching-documents-with-alias/307285)
**Author:** [@Skeldren](https://discuss.elastic.co/u/Skeldren)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:56am UTC](https://discuss.elastic.co/t/fetching-documents-with-alias/307285 "2022-06-21T01:56:24Z")
Hey all :wave: I have a question regarding alias. Basically was performing some tests to check how it worked. I created two Alias for the same Index with different routing keys and filters. Let's say the Index is cal… --- ## [Finding documents with "too many fields"](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:53am UTC](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313 "2022-06-21T01:53:58Z")
What's the easiest way to find documents from an index that appears to have too many fields. I want to delete those documents, but there doesn't seem to be a way to easily find them. The background to how I get here. … --- ## [Getting login prompt after configuring elasticsearch LDAP integration](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310)
**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 1:46am UTC](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310 "2022-06-21T01:46:48Z")
I have attached the login prompt. Not sure if the message is an indication of the issue. I have also attached the security section of the elasticsearch.yml --- ## [Question about Elastic Search: In Elastic Search, can we store data on a local machine and allow other machines to access the data stored on the local machine?](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:38am UTC](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704 "2022-06-21T01:38:09Z")
In Microsoft SQL server, we can store data on a local machine, deploy the server, and allow other machines to access that data. How would this be analogous to Elasticsearch? I've been sifting through the documentation an… --- ## [Trouble Installing and Configuring Elastic Search on Windows Virtual Machine](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 11:52pm UTC](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694 "2022-06-20T23:52:09Z")
I am following the documentation on this webpage: Install Elasticsearch with .zip on Windows | Elasticsearch Guide \[8.2\] | Elastic. Essentially, when I run bin\\elasticsearch-create-enrollment-token -s node while having E… --- ## [What is the best model to save data on elasticsearch?](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560)
**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 9:50pm UTC](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560 "2022-06-20T21:50:20Z")
I have a rails application and use Elasticsearch as a search engine in my rails app. this app collects data from the mobile application and could collect from any kind of mobile app. mobile app sends two types of data us… --- ## [Azure Marketplace Elasticsearch service failed](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697)
**Author:** [@Patricio\_Merino](https://discuss.elastic.co/u/Patricio_Merino)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 9:05pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697 "2022-06-20T21:05:32Z")
Hi all, In our application we are using Azure Marketplace Elasticsearch. Around two weeks ago, the service is failed: And in the application we can´t connect to this: {"name":"TimeoutError","meta":{"body":null,"s… --- ## [How to close the gap of elements in X axis of the canvas](https://discuss.elastic.co/t/how-to-close-the-gap-of-elements-in-x-axis-of-the-canvas/307678)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 8:32pm UTC](https://discuss.elastic.co/t/how-to-close-the-gap-of-elements-in-x-axis-of-the-canvas/307678 "2022-06-20T20:32:42Z")
I have a area chart configured in the kibana canvas and I want to close the gap between the date elements in the X axis. Is there a way to do so? Here is how it is looking like: Best regards. --- ## [Display Predefined Category type for Pie Chart when landing to Kibana Dashboard](https://discuss.elastic.co/t/display-predefined-category-type-for-pie-chart-when-landing-to-kibana-dashboard/307688)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 8:28pm UTC](https://discuss.elastic.co/t/display-predefined-category-type-for-pie-chart-when-landing-to-kibana-dashboard/307688 "2022-06-20T20:28:01Z")
In my dashboard there are plenty of visuals. Out of them i have filter and pie chart. Let's say using filter we can select which Ware house's asset types count distribution you want display(Asset Types: Laps, Scans and p… --- ## [New install - error setting certificate verify locations](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455)
**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\ **Replies:** 8\ **Last updated:** [June 20, 2022, 8:05pm UTC](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455 "2022-06-20T20:05:30Z")
Following the instructions here: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.2\] | Elastic Installing from apt on Ubuntu server 20.04 wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch … --- ## [Multi-fields vs Nested data type](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664)
**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 7:38pm UTC](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664 "2022-06-20T19:38:07Z")
Hey, Trying to understand difference between "fields" and "nested". For example, I have an array of objects, each one having the following fields: name name\_hash First (and probably obvious) option is to map this as … --- ## [Logstash pipeline for error logs?](https://discuss.elastic.co/t/logstash-pipeline-for-error-logs/307681)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 5\ **Last updated:** [June 20, 2022, 6:39pm UTC](https://discuss.elastic.co/t/logstash-pipeline-for-error-logs/307681 "2022-06-20T18:39:01Z")
How can I create a logstash pipeline for logstash error logs and put it in Elasticsearch?(So I can see it in discover and see the logs from kibana/discover and analytics? --- ## [Logstash Startup issue](https://discuss.elastic.co/t/logstash-startup-issue/307639)
**Author:** [@shivani\_chittauri](https://discuss.elastic.co/u/shivani_chittauri)\ **Replies:** 7\ **Last updated:** [June 20, 2022, 5:50pm UTC](https://discuss.elastic.co/t/logstash-startup-issue/307639 "2022-06-20T17:50:32Z")
unable to start logstash, while Elasticsearch and kibana both are up and running. logtstash.conf looks like no change on any other file logstash.yml has everything commented except "pipeline.ordered: auto" --- ## [Connecting logstash to remote elasticsearch running on https with no port specified](https://discuss.elastic.co/t/connecting-logstash-to-remote-elasticsearch-running-on-https-with-no-port-specified/307671)
**Author:** [@rajivraghu](https://discuss.elastic.co/u/rajivraghu)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 5:42pm UTC](https://discuss.elastic.co/t/connecting-logstash-to-remote-elasticsearch-running-on-https-with-no-port-specified/307671 "2022-06-20T17:42:56Z")
Hello , i am running Elasticsearch on a website called Cloud IDE gitpod. Once i start the docker image on the gitpod, docker run \\ --name elasticsearch \\ --net elastic \\ -p 9200:9200 \\ -e disco… --- ## [Make a string query with a range](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571 "2022-06-20T17:13:36Z")
I try to make a query string but i only want documents that have a field between a certain range. How can i do that ? --- ## [Make file URL open file](https://discuss.elastic.co/t/make-file-url-open-file/307655)
**Author:** [@Marouene\_dakhlaoui](https://discuss.elastic.co/u/Marouene_dakhlaoui)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 3:56pm UTC](https://discuss.elastic.co/t/make-file-url-open-file/307655 "2022-06-20T15:56:39Z")
I have document with value file:///C:/image\_data/images/audi.png, in my Data views dashboard I formatted the value to a URL like the following. The problem, is that when I click on the link it becomes : http://local… --- ## [Create specific column](https://discuss.elastic.co/t/create-specific-column/307669)
**Author:** [@Renato\_Souza](https://discuss.elastic.co/u/Renato_Souza)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 3:53pm UTC](https://discuss.elastic.co/t/create-specific-column/307669 "2022-06-20T15:53:48Z")
How to create or what the documentation for this: I have some data in column message, but i need to create a new column for this IP and network name. This possible? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=894) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=896)