# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=899 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 900 --- ## [Httpjson pagination querystring value + 1](https://discuss.elastic.co/t/httpjson-pagination-querystring-value-1/307398)
**Author:** [@frolko](https://discuss.elastic.co/u/frolko)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:31am UTC](https://discuss.elastic.co/t/httpjson-pagination-querystring-value-1/307398 "2022-06-17T10:31:40Z")
Trying to use httpjson integration to scrape an api of data, using filebeat.8.2.2 The api takes query parameters PageSize=1000&PageNumber=1, where I'm supposed to keep adding PageNumber +1 until I get a 404 error. Howe… --- ## [ACCESS to kibana interface](https://discuss.elastic.co/t/access-to-kibana-interface/307492)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:30am UTC](https://discuss.elastic.co/t/access-to-kibana-interface/307492 "2022-06-17T10:30:42Z")
is it necessary to configure an nginx reverse proxy to access kibana from the outside? --- ## [ILM Forcemerge Internal Server Error](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:23am UTC](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603 "2022-06-17T10:23:25Z")
We have ILM enabled for our indices and a number of the larger indices will fail hours into the forcemerge action with errors similar to the below: { "type": "exception", "reason": "index \[prod-jaeger-span-2022-05-1… --- ## [Visualization of the JSON documents has become ugly](https://discuss.elastic.co/t/visualization-of-the-json-documents-has-become-ugly/306686)
**Author:** [@web-develop](https://discuss.elastic.co/u/web-develop)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 8:40am UTC](https://discuss.elastic.co/t/visualization-of-the-json-documents-has-become-ugly/306686 "2022-06-17T08:40:27Z")
Kibana has become ugly in vewing JSON documents since some version, I'm not sure exactly which one, let's consider these two: v7.7.0 (normal) and v7.15.1 (abnormal). The problem is developers has replaced browsers' nati… --- ## [Scaling elasticsearch](https://discuss.elastic.co/t/scaling-elasticsearch/306945)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 8:27am UTC](https://discuss.elastic.co/t/scaling-elasticsearch/306945 "2022-06-17T08:27:30Z")
Hello, My cluster is composed of 3 nodes (Master node, hot node and warm noeaud) i want to scal my cluster by adding a new elastic node which will be dedicated only for data replication. The replicas shard of all the c… --- ## [Block in start-input (file not readable) sqlserver logstash](https://discuss.elastic.co/t/block-in-start-input-file-not-readable-sqlserver-logstash/307391)
**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 11:04am UTC](https://discuss.elastic.co/t/block-in-start-input-file-not-readable-sqlserver-logstash/307391 "2022-06-16T11:04:25Z")
Hi all, I plan to load data from SQL Server database to Elastic. While trying to load this data using the Logstash JDBC plugin I am facing a problem. I found in the community errors like this but no solution, Test: Cop… --- ## [Rename field depending on its data type](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361 "2022-06-17T07:49:55Z")
Hi, We are currently having issues with the ingestion of some documents due to the data type for one field (log.context.exception). Most of the logs come with this field as an object and the mapping is prepared to store… --- ## [Need some help understanding filebeat init scripts](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032)
**Author:** [@Hermooz](https://discuss.elastic.co/u/Hermooz)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 7:20am UTC](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032 "2022-06-17T07:20:56Z")
Hi all. I have been tasked to manage a filebeat installation on a not-so-recent machine - we're talking about a CentOS 6.4 with a filebeat version 7.12, installed by rpm. This is not (yet) a systemd-enabled distro so fil… --- ## [\[ConnectionError\]: unable to verify the first certificate](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708)
**Author:** [@Jaep](https://discuss.elastic.co/u/Jaep)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 7:19am UTC](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708 "2022-06-17T07:19:41Z")
I'm currently trying to setup kibana together with elasticSearch within the same docker-compose. In order to avoid any issue with the SSL certificates, I generated a "real" (not self signed) certificate that I'm using o… --- ## [Does elastic support Sentiment analysis using ELK stack?](https://discuss.elastic.co/t/does-elastic-support-sentiment-analysis-using-elk-stack/307359)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 7:01am UTC](https://discuss.elastic.co/t/does-elastic-support-sentiment-analysis-using-elk-stack/307359 "2022-06-17T07:01:49Z")
We are using platinum license of Elasticsearch. We are indexing the data and showing it using Kibana in terms of graphs and visualization. I wanted to know on the Index data if we can apply apply sentiment analysis and s… --- ## [One node very high load average , why?](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236)
**Author:** [@letwen](https://discuss.elastic.co/u/letwen)\ **Replies:** 8\ **Last updated:** [June 17, 2022, 6:53am UTC](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236 "2022-06-17T06:53:01Z")
version6.8.0.one data node in cluster,16cpu 2.30GHz,48G memory,8G swap.have low cpu use,low memory use,but when i use top,can see very high 'load average',it be 40,sy high too,why ? --- ## [Prevent users to delete saved filters](https://discuss.elastic.co/t/prevent-users-to-delete-saved-filters/307383)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:52am UTC](https://discuss.elastic.co/t/prevent-users-to-delete-saved-filters/307383 "2022-06-17T06:52:20Z")
It has been already asked in 2017 Is there a way to prevent user from deleting saved Searches/Visualizations/Dashboards? Checking if there a way to avoid users to not be allowed removing filters in a separate space. We … --- ## [Ansible Setup](https://discuss.elastic.co/t/ansible-setup/307472)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/ansible-setup/307472 "2022-06-17T06:47:30Z")
Continuing the discussion from \[Set up Repository on multi-node Cluster via Ansible\] Hi all , Please have a look at this post (Set up Repository on multi-node Cluster via Ansible): Hi all, There are some doubts which… --- ## [Getting kibana logs in my java application](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444)
**Author:** [@shivam\_agrawal1](https://discuss.elastic.co/u/shivam_agrawal1)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444 "2022-06-17T06:47:02Z")
I am pushing multiple logs into Elasticsearch using filebeats and visualising them in kibana. Now, I want to get all these logs into my java application and make a slack bot for monitoring purposes. How can I get all tho… --- ## [Stack percentage bar chart in Canvas](https://discuss.elastic.co/t/stack-percentage-bar-chart-in-canvas/307227)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 6:08am UTC](https://discuss.elastic.co/t/stack-percentage-bar-chart-in-canvas/307227 "2022-06-17T06:08:03Z")
Hi all, I want to create 100% stack bar visual in canvas and also need data label to be visible in order to know the percentage of each stack. Refer to the 1st image that I have tried with demodata and 2nd image for how… --- ## [Elastic Search query that matches all elements in nested document](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395)
**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 5:22am UTC](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395 "2022-06-17T05:22:33Z")
I have an index with nested document structure as below - { "firstindex": { "mappings": { "properties": { "Name": { "type": "text" }, "SecurityCo… --- ## [How to fix host issue in filebeat-7.17.4 without drop\_fields](https://discuss.elastic.co/t/how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/306890)
**Author:** [@mbmannubisht](https://discuss.elastic.co/u/mbmannubisht)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 4:51am UTC](https://discuss.elastic.co/t/how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/306890 "2022-06-17T04:51:43Z")
Hi Team, Stuck in one issue if I drop\_fields of host then it will work otherwise not working Working condition code: - drop\_fields: fields: \["beat", "offset", "source", "type", "input\_type", "host"\] igno… --- ## [Return fields format when retrieving more than one documents using Elasticsearch Filter plugin in Logstash](https://discuss.elastic.co/t/return-fields-format-when-retrieving-more-than-one-documents-using-elasticsearch-filter-plugin-in-logstash/307467)
**Author:** [@Zhihai\_Xian](https://discuss.elastic.co/u/Zhihai_Xian)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 4:05am UTC](https://discuss.elastic.co/t/return-fields-format-when-retrieving-more-than-one-documents-using-elasticsearch-filter-plugin-in-logstash/307467 "2022-06-17T04:05:48Z")
Hi, I could not find any topic or documentation about return fields processing when retrieving more than one documents using Elasticsearch filter plugin in Logstash. Is it possible and how to parse the fields format in … --- ## [Ingest data and. fetch data through groovy in the. URL https://testsearch-cca1f6.ent.us-central1.gcp.cloud.es.io](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463)
**Author:** [@Pritam\_Thing](https://discuss.elastic.co/u/Pritam_Thing)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 3:40am UTC](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463 "2022-06-17T03:40:53Z")
Hey everyone, I want to ingest data dynamically though groovy and search through jquery . While i was testing the search api, I found some issue related to cors. Could someone help me out with the following code. … --- ## [Search on Multiple Indices](https://discuss.elastic.co/t/search-on-multiple-indices/307105)
**Author:** [@QuanMinhTran](https://discuss.elastic.co/u/QuanMinhTran)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:31am UTC](https://discuss.elastic.co/t/search-on-multiple-indices/307105 "2022-06-17T03:31:05Z")
I doing a query to search for multiple indices on Elasticsearch. The problem here is the priority of the result doesn't follow what I think. For example, I have 2 indices: index\_1 and index\_2 In Index\_1 have ~80 docs, … --- ## [Filebeat and Metricbeat process cause CPU high for 8.2.0 version](https://discuss.elastic.co/t/filebeat-and-metricbeat-process-cause-cpu-high-for-8-2-0-version/307207)
**Author:** [@wisdomluo](https://discuss.elastic.co/u/wisdomluo)\ **Replies:** 9\ **Last updated:** [June 17, 2022, 1:13am UTC](https://discuss.elastic.co/t/filebeat-and-metricbeat-process-cause-cpu-high-for-8-2-0-version/307207 "2022-06-17T01:13:19Z")
top - 09:18:06 up 7 min, 1 user, load average: 10.19, 8.81, 4.51 Tasks: 124 total, 3 running, 58 sleeping, 0 stopped, 1 zombie %Cpu(s): 82.0 us, 7.7 sy, 0.0 ni, 10.3 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st KiB … --- ## [Change dashboard logo](https://discuss.elastic.co/t/change-dashboard-logo/307440)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 11:25pm UTC](https://discuss.elastic.co/t/change-dashboard-logo/307440 "2022-06-16T23:25:41Z")
need to change dashboard logo. Saw that if i hosted it in locally or using a docker,simply changing yml file i can change the logo. But how can i change it if i hosted on aws. --- ## [Changed node port - now it doesn't have shards, but storage is still used](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451)
**Author:** [@matiasgarciaisaia](https://discuss.elastic.co/u/matiasgarciaisaia)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 8:40pm UTC](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451 "2022-06-16T20:40:08Z")
I've setup a 6-node Elasticsearch 7.17.0 cluster which has to serve a single read-only ~1TB index. The nodes have 2TB of storage, so I've set that index to be a single shard, with 5 replicas (so each node gets a full co… --- ## [Kibana shows double with slightly changed value](https://discuss.elastic.co/t/kibana-shows-double-with-slightly-changed-value/307318)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 8:51pm UTC](https://discuss.elastic.co/t/kibana-shows-double-with-slightly-changed-value/307318 "2022-06-16T20:51:52Z")
How do I get Kibana Discover to display a double (number) as a double? I have a document indexed with the double value 2555417833004 for a particular field. But when Kibana Discover shows the same document, it displays… --- ## [Elasticsearch service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290)
**Author:** [@Lukasz1](https://discuss.elastic.co/u/Lukasz1)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290 "2022-06-16T20:45:42Z")
Elasticsearch (7.17.0) service won't start The config file is so simple that I can't find any error there. My config is: cluster.name: elkos node.name: elkos-1 path.data: /mnt/elasticsearch/data path.logs: /mnt/elast… --- ## [Subtracting two values of a field](https://discuss.elastic.co/t/subtracting-two-values-of-a-field/306915)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 8:36pm UTC](https://discuss.elastic.co/t/subtracting-two-values-of-a-field/306915 "2022-06-16T20:36:41Z")
Hello All, I have a set up which parses the following line in a log file: \[2022-06-10T19:52:05.017+0000\]\[info\]\[gc \] GC(35959) Pause Full (Diagnostic Command) 1850M-\>1140M(2560M) 506.831ms The resultant get… --- ## [How to debug filebeat module, it doesn't seem to be getting syslog data](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 7:24pm UTC](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307 "2022-06-16T19:24:42Z")
I'm trying to use the panw module receiving data via a syslog port. I've enabled the module and can see that filebeat is listening on the proper udp port. I can see traffic arrive in tcpdump and the events look valid. … --- ## [Logstash - .gz files - Error: Unexpected end of ZLIB input stream](https://discuss.elastic.co/t/logstash-gz-files-error-unexpected-end-of-zlib-input-stream/263028)
**Author:** [@sam281](https://discuss.elastic.co/u/sam281)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 6:54pm UTC](https://discuss.elastic.co/t/logstash-gz-files-error-unexpected-end-of-zlib-input-stream/263028 "2022-06-16T18:54:57Z")
Hi, I am using logstash to read .gz files. The gzip files are around 10 to 15GB for which logstash was unable to process and crashing. So I have split the .gz files using 7zip split based on size of 3GB .gz file chunks.… --- ## [Format is showing wrong in label](https://discuss.elastic.co/t/format-is-showing-wrong-in-label/306627)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 3\ **Last updated:** [June 16, 2022, 6:30pm UTC](https://discuss.elastic.co/t/format-is-showing-wrong-in-label/306627 "2022-06-16T18:30:54Z")
I draw a vertical bar graph but in one of my column, values are in decimal and i set it to 0 also but still label are showing decimal values. --- ## [Unknown response error when running using \`\_disk\_usage\` api](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330)
**Author:** [@Ryan\_Morrison](https://discuss.elastic.co/u/Ryan_Morrison)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 6:06pm UTC](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330 "2022-06-16T18:06:38Z")
I'm looking at utilizing the new \[\_disk\_usage\](https://www.elastic.co/guide/en/elasticsearch/reference/master/indices-disk-usage.html) api and doing so successfully in our staging environment. However, when running agai… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=898) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=900)