# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=905 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 906 --- ## [Logstash restarts every 13 seconds](https://discuss.elastic.co/t/logstash-restarts-every-13-seconds/306955)
**Author:** [@Wang\_Yin](https://discuss.elastic.co/u/Wang_Yin)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 10:12pm UTC](https://discuss.elastic.co/t/logstash-restarts-every-13-seconds/306955 "2022-06-13T22:12:14Z")
Hi, I'm new to ELK, I noticed that the Logstash (version: 8.2.2) restarted every 13 seconds, the log I found in /var/log/logstash/logstash-plain.log suggested that there are some syntax error at line 26 of a certain fi… --- ## [Peoplesoft distributed elasticsearch](https://discuss.elastic.co/t/peoplesoft-distributed-elasticsearch/307079)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 9:49pm UTC](https://discuss.elastic.co/t/peoplesoft-distributed-elasticsearch/307079 "2022-06-13T21:49:05Z")
It seems that Peoplesoft uses Elasticsearch for some search functions? Our Peoplesoft is on-prem and someone is asking questions.... Is it a current version? I searched the web and only saw references from the Elastic… --- ## [Transport 502 Error: Need Help Isolating Error](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590)
**Author:** [@raphaelli1](https://discuss.elastic.co/u/raphaelli1)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 6:23pm UTC](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590 "2022-06-13T18:23:20Z")
The command we are using is this: esrally race --track=http\_logs --target-hosts=\[IP address\] --pipeline=benchmark-only --report-file=es\_report\_E3\_32gb.md --report-format=csv --kill-running-processes The IP address is t… --- ## [How to Use Multiple Remote Hosts for Reindexing](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060)
**Author:** [@robromo](https://discuss.elastic.co/u/robromo)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 6:10pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060 "2022-06-13T18:10:25Z")
I'm just trying to get some clarification on how to use multiple remote hosts for reindexing. It seems (from the official docs) you can list multiple old servers in your reindex.remote.whitelist easily with: reindex.re… --- ## [Searching for exact phrase with \[\] in kibana kql](https://discuss.elastic.co/t/searching-for-exact-phrase-with-in-kibana-kql/306989)
**Author:** [@Alireza\_Zabihi](https://discuss.elastic.co/u/Alireza_Zabihi)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/searching-for-exact-phrase-with-in-kibana-kql/306989 "2022-06-13T17:42:26Z")
Hi, I want to filter messages by exact phrase like \[ERROR\] in message field, how can I do it ? I searched with this and many other syntaxes but it returned every error and warn messages. kubernetes.namespace :"my-names… --- ## [Kibana Permalink and Side panel not working after upgrade to 7.17.0-1](https://discuss.elastic.co/t/kibana-permalink-and-side-panel-not-working-after-upgrade-to-7-17-0-1/307058)
**Author:** [@racerx](https://discuss.elastic.co/u/racerx)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 5:41pm UTC](https://discuss.elastic.co/t/kibana-permalink-and-side-panel-not-working-after-upgrade-to-7-17-0-1/307058 "2022-06-13T17:41:07Z")
Hello Team, I recently upgraded a cluster from 7.9.3 to 7.17.0-1 and am facing some issues related to non-superusers. Problem #1: Users are unable to share permalinks - using the permalink returns a 404. Problem #2: U… --- ## [Logstash Elasticsearch Fail to Respond](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 8\ **Last updated:** [June 13, 2022, 5:39pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040 "2022-06-13T17:39:29Z")
Hello Everyone, I'm trying to connect Logstash to Elasticsearch. However, it fails with the message Failed to perform request {:message=\>"10.10.145.124:9200 failed to respond", :exception=\>Manticore::ClientProtocolExcep… --- ## [Coloration error in tournament mode](https://discuss.elastic.co/t/coloration-error-in-tournament-mode/307041)
**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 4:49pm UTC](https://discuss.elastic.co/t/coloration-error-in-tournament-mode/307041 "2022-06-13T16:49:53Z")
An upgrade in the range -90% percent take the color red for Mean Throughput Median Throughput Max Throughput --- ## [Elasticsearch Component Template Increase Total Mappings Limit](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047 "2022-06-13T16:21:23Z")
Hi All, I was wondering if there is a way to increase the total mappings limit on Component Template? I have a component template with \> 1000 mappings and am hitting the error: {"error":{"root\_cause":\[{"type":"illegal… --- ## [Manage pipeline launch order](https://discuss.elastic.co/t/manage-pipeline-launch-order/307052)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 4:19pm UTC](https://discuss.elastic.co/t/manage-pipeline-launch-order/307052 "2022-06-13T16:19:55Z")
Hi, I have a project with 8 pipelines that handle different data, some depend on the end of execution of other pipelines. Is there a way to schedule their execution and wait for some to finish executing before starting o… --- ## [Kibana Alerts - Action on Recovered still contains no context.group](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-still-contains-no-context-group/307050)
**Author:** [@Eiim](https://discuss.elastic.co/u/Eiim)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 3:04pm UTC](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-still-contains-no-context-group/307050 "2022-06-13T15:04:46Z")
This post asked about being able to use {{context.group}} in Recovered messages. Since then, the relevant pull request has been merged, seemingly for 8.2.0. However, this still doesn't seem to work in 8.2.0. Is it actual… --- ## [Side effect of command "elasticsearch-users useradd"](https://discuss.elastic.co/t/side-effect-of-command-elasticsearch-users-useradd/307044)
**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 2:23pm UTC](https://discuss.elastic.co/t/side-effect-of-command-elasticsearch-users-useradd/307044 "2022-06-13T14:23:23Z")
We have a superuser named "admin1" in config/users file, what would happen to admin1 if we add a new superuser "admin2" through below command, will it cover the existing admin1 as the only superuser and make admin1 not v… --- ## [Run elasticsearch on startup](https://discuss.elastic.co/t/run-elasticsearch-on-startup/307036)
**Author:** [@Franck\_LONGO](https://discuss.elastic.co/u/Franck_LONGO)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-startup/307036 "2022-06-13T13:18:07Z")
Hi there, I installed Nextcloud on Windows with WSL 2 and Elasticsearch. All is working great but I’m unable to run Elasticsearch on Windows Startup. I managed to have MYSQL, APACHE2 and CRON running on startup with th… --- ## [How to perform Index Stats API using NodeClient?](https://discuss.elastic.co/t/how-to-perform-index-stats-api-using-nodeclient/307002)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 12:47pm UTC](https://discuss.elastic.co/t/how-to-perform-index-stats-api-using-nodeclient/307002 "2022-06-13T12:47:18Z")
Hi, I am using ES 7.10.2 I have come across Index Stats API in ES documentation. Also in Java Lib there is class available named I did come across NodeClient, so I am trying to fetch index stats as below : NodeClient… --- ## [Old logs are not getting compressed](https://discuss.elastic.co/t/old-logs-are-not-getting-compressed/307029)
**Author:** [@Giri\_Dharan1](https://discuss.elastic.co/u/Giri_Dharan1)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 12:30pm UTC](https://discuss.elastic.co/t/old-logs-are-not-getting-compressed/307029 "2022-06-13T12:30:26Z")
I'm using the below code to delete and roll(compress) old logs ######## Server - old style pattern ########### appender.rolling\_old.type = RollingFile appender.rolling\_old.name = rolling\_old appender.rolling\_old.fil… --- ## [Query with multiple conditions on denormalized data](https://discuss.elastic.co/t/query-with-multiple-conditions-on-denormalized-data/307010)
**Author:** [@sherzinger](https://discuss.elastic.co/u/sherzinger)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 11:55am UTC](https://discuss.elastic.co/t/query-with-multiple-conditions-on-denormalized-data/307010 "2022-06-13T11:55:59Z")
Hi, I seem to be stuck formulating a certain query on a denormalized matrix. The original dataset looks like this: id fieldA fieldB fieldC "0001" 0.1 0.2 0.3 "0002" 0.4 0.5 0.6 ... In such a structure I can easily fin… --- ## [Highest ingestion speed](https://discuss.elastic.co/t/highest-ingestion-speed/307019)
**Author:** [@ktomu](https://discuss.elastic.co/u/ktomu)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 11:39am UTC](https://discuss.elastic.co/t/highest-ingestion-speed/307019 "2022-06-13T11:39:50Z")
Hi, I have a general architectical question I'm going to use Elasticsearch in the way of highest ingestion speed of data. I don't care about data save, the most important is throughput of data ingestion. I have 100k ne… --- ## [Folder status can be monitored via ELK](https://discuss.elastic.co/t/folder-status-can-be-monitored-via-elk/304519)
**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\ **Replies:** 5\ **Last updated:** [June 13, 2022, 11:21am UTC](https://discuss.elastic.co/t/folder-status-can-be-monitored-via-elk/304519 "2022-06-13T11:21:22Z")
Hello Team, I would like to monitor folder date and time change, looks like some of the files will be written on the folder, i want to monitor the parent folder date and time. Please advise. --- ## [Optimization of function\_score's functions clause to adjust scores for a range of specific fields](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015)
**Author:** [@Yuki\_Akano](https://discuss.elastic.co/u/Yuki_Akano)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 10:29am UTC](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015 "2022-06-13T10:29:53Z")
Hi everyone, I want to adjust the score according to the range of a particular field in function\_score. For example, I have the following query in mind. { "query":{ "function\_score":{ "query": { ...… --- ## [Aggregation query in logstash input](https://discuss.elastic.co/t/aggregation-query-in-logstash-input/307006)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 8:59am UTC](https://discuss.elastic.co/t/aggregation-query-in-logstash-input/307006 "2022-06-13T08:59:46Z")
Hi! I am trying to get the results of an aggregations query with logstash. Via dev tools this query works correctly but when passing it to logstash it ingests metadata but nothing related to max, min etc fields I am exp… --- ## [Kbn-monaco missing actions.find](https://discuss.elastic.co/t/kbn-monaco-missing-actions-find/307004)
**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 8:41am UTC](https://discuss.elastic.co/t/kbn-monaco-missing-actions-find/307004 "2022-06-13T08:41:28Z")
Hello, I'm am using kbn-monaco to create my own editors in Kibana. It seems that actions.find (Find actions, usually triggered by CTRL+F) doesn't function. Do you know how to find trigger the find action ? Thanks --- ## [Trying to add windows winlogbeat and the standard dashboards, but dashboards are empty](https://discuss.elastic.co/t/trying-to-add-windows-winlogbeat-and-the-standard-dashboards-but-dashboards-are-empty/306106)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 3\ **Last updated:** [June 13, 2022, 8:23am UTC](https://discuss.elastic.co/t/trying-to-add-windows-winlogbeat-and-the-standard-dashboards-but-dashboards-are-empty/306106 "2022-06-13T08:23:20Z")
Hi All After rebuilding the entire elastic stack to 7.16.3 currently, I wanted to expand the elastic to also monitor our windows servers. I have a winlogbeat config that looks like this: winlogbeat.event\_logs: - nam… --- ## [Jsonp Mapping Exception](https://discuss.elastic.co/t/jsonp-mapping-exception/306992)
**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 8:07am UTC](https://discuss.elastic.co/t/jsonp-mapping-exception/306992 "2022-06-13T08:07:22Z")
Hi all. I work on Java 8 and Elastic 8.2. I'm trying to set up a search for various fields, SearchResponse\ response = esClient.search(s -\> s .index(index) .query(q -\>… --- ## [Vulnerability CVE-2020-25649 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:36am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855 "2022-06-13T07:36:39Z")
Hello, vulnerability CVE-2020-25649 is reported on the jackson-databind-2.10.4.jar library of the ingest-geoip module of Elasticsearch (modules/ingest-geoip/jackson-databind-2.10.4.jar). Are there any official statemen… --- ## [Vulnerability CVE-2020-28491 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:35am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856 "2022-06-13T07:35:47Z")
Hello, vulnerability CVE-2020-28491 is reported on the jackson-dataformat-cbor-2.10.4.jar library of Elasticsearch (lib/jackson-dataformat-cbor-2.10.4.jar). Are there any official statements regarding if this vulnerabi… --- ## [Problem with my Elasticsearch](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 7:25am UTC](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994 "2022-06-13T07:25:33Z")
Hi! If possible- I have a question: This is my cluster: # Source: eck-operator/templates/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: elastic-operator namespace: button8 labels: con… --- ## [Can the snmptrap input plugin for logstash receive snmp version 3 traps?](https://discuss.elastic.co/t/can-the-snmptrap-input-plugin-for-logstash-receive-snmp-version-3-traps/306659)
**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\ **Replies:** 3\ **Last updated:** [June 13, 2022, 6:32am UTC](https://discuss.elastic.co/t/can-the-snmptrap-input-plugin-for-logstash-receive-snmp-version-3-traps/306659 "2022-06-13T06:32:16Z")
Hi Team, can we receive snmp v3 traps on logstash-input-smnptrap plugin. I have tried to get but getting errors. Below are my configuration and version details. logstash version : logstash 8.2.2 snmptrap plugin : logst… --- ## [Problems with match\_phrase](https://discuss.elastic.co/t/problems-with-match-phrase/306934)
**Author:** [@Nicolai\_Jee](https://discuss.elastic.co/u/Nicolai_Jee)\ **Replies:** 7\ **Last updated:** [June 13, 2022, 4:12am UTC](https://discuss.elastic.co/t/problems-with-match-phrase/306934 "2022-06-13T04:12:43Z")
Hi I have a query that looks like this: { "query": { "bool": { "must": \[ { "match\_phrase": { "fullAddress": "To-Bjerg 2" } } \] } }, "from": 0, … --- ## [Manually upload Winlogbeat ndjson files to Elasticsearch](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046)
**Author:** [@fl33t](https://discuss.elastic.co/u/fl33t)\ **Replies:** 6\ **Last updated:** [June 13, 2022, 2:54am UTC](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046 "2022-06-13T02:54:39Z")
Greetings and salutations. I'm looking for a way to manually upload locally generated Winlogbeat (8.1.3) ndjson files to my Elastic stack as the beat has to work offline and cannot connect directly to either ES or Logsta… --- ## [Deploy an ECK on another namespace](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 12, 2022, 9:16pm UTC](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958 "2022-06-12T21:16:52Z")
Hi, I tried deploy an ECK in GKE in nemespace I created and what I got: kubectl apply -f https://download.elastic.co/downloads/eck/2.2.0/operator.yaml -n ns2 W0612 12:52:31.559080 1136 gcp.go:120\] WARNING: the g… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=904) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=906)