# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=907 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 908 --- ## [Filebeat's harvester cleanup method](https://discuss.elastic.co/t/filebeats-harvester-cleanup-method/306872)
**Author:** [@xiongjunkun](https://discuss.elastic.co/u/xiongjunkun)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 10:59am UTC](https://discuss.elastic.co/t/filebeats-harvester-cleanup-method/306872 "2022-06-10T10:59:57Z")
Ask a question, when Filebeat's harvester is executed, it will call the cleanup method. Why does it need to send an additional state: h.SendStateUpdate()? Is there something wrong with persisting state through events sen… --- ## [\[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[crud\_node\] http client did not trust this server's certificate, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200](https://discuss.elastic.co/t/warn-o-e-x-s-t-n-securitynetty4httpservertransport-crud-node-http-client-did-not-trust-this-servers-certificate-closing-connection-netty4httpchannel-localaddress-127-0-0-1-9200/306859)
**Author:** [@Axel\_Ekenberg](https://discuss.elastic.co/u/Axel_Ekenberg)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 9:05am UTC](https://discuss.elastic.co/t/warn-o-e-x-s-t-n-securitynetty4httpservertransport-crud-node-http-client-did-not-trust-this-servers-certificate-closing-connection-netty4httpchannel-localaddress-127-0-0-1-9200/306859 "2022-06-10T09:05:14Z")
Hi! I just started with the ELK stack and i have downloaded kibana, logstash, Elasticsearch, made a config file in my logstash folder and i start Elasticsearch and it works well and then when i run logstash with "logstas… --- ## [Installing Kibana from source](https://discuss.elastic.co/t/installing-kibana-from-source/306045)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 10:51am UTC](https://discuss.elastic.co/t/installing-kibana-from-source/306045 "2022-06-10T10:51:50Z")
Hello, I have built Kibana 8.2.0 from source following these instructions. It has made a folder call build with 3 sub folders: default, Kibana, Kibana-docker. I couldn't find documentation on how to install my build o… --- ## [Need to remove first 10 characters using grok](https://discuss.elastic.co/t/need-to-remove-first-10-characters-using-grok/306864)
**Author:** [@Giuse\_Esse](https://discuss.elastic.co/u/Giuse_Esse)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 9:43am UTC](https://discuss.elastic.co/t/need-to-remove-first-10-characters-using-grok/306864 "2022-06-10T09:43:06Z")
Hello i need to remove first 10 char in the grok, I can get first 10 but not exclude... grok { match =\> { "message" =\> "(?\^.{-10})" … --- ## [GeoDistanceQuery Not Working](https://discuss.elastic.co/t/geodistancequery-not-working/306780)
**Author:** [@cugo](https://discuss.elastic.co/u/cugo)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 2:23pm UTC](https://discuss.elastic.co/t/geodistancequery-not-working/306780 "2022-06-09T14:23:05Z")
I am trying to create a Geo Distance filter using Spring Data Elasticsearch like the one below which is a working example created by JSON. "filter":{ "geo\_distance":{ "distance":"32.42742km", … --- ## [Show search result based on keywords](https://discuss.elastic.co/t/show-search-result-based-on-keywords/305617)
**Author:** [@silvermanoj](https://discuss.elastic.co/u/silvermanoj)\ **Replies:** 7\ **Last updated:** [June 10, 2022, 8:48am UTC](https://discuss.elastic.co/t/show-search-result-based-on-keywords/305617 "2022-06-10T08:48:36Z")
I am using Elasticsearch version 8. When I try to query a combination of two words that are stored in two different attributes, I get the search result but the record match with post\_title are not coming first For examp… --- ## [BitSet.or took high cpu usage](https://discuss.elastic.co/t/bitset-or-took-high-cpu-usage/306786)
**Author:** [@chembohuang](https://discuss.elastic.co/u/chembohuang)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 8:35am UTC](https://discuss.elastic.co/t/bitset-or-took-high-cpu-usage/306786 "2022-06-10T08:35:14Z")
Continuing the discussion from BitSet.or consumes almost 60% cpu: We found sth. new here. In fact , we ran into this problem twice after the topic was closed. And We found some similarities in these cases: this proble… --- ## [Getting an idea for resources required to locally deploy the ELK stack](https://discuss.elastic.co/t/getting-an-idea-for-resources-required-to-locally-deploy-the-elk-stack/306853)
**Author:** [@ahamza](https://discuss.elastic.co/u/ahamza)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 8:12am UTC](https://discuss.elastic.co/t/getting-an-idea-for-resources-required-to-locally-deploy-the-elk-stack/306853 "2022-06-10T08:12:56Z")
Hey, I've recently started reading up on the ELK stack and I want to understand what sort of hardware requirements I would have to do an on-premise deployment. I have about 9.5GB + 3.5GB (~13GB total) of log data comi… --- ## [Elasticsearch + Kibana on Docker](https://discuss.elastic.co/t/elasticsearch-kibana-on-docker/306849)
**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-on-docker/306849 "2022-06-10T06:59:17Z")
I'd like to just quickly run an instance of Elasticsearch and Kibana together using Docker. Having to set up all this seems overkill. Is there an easier way? --- ## [\[SOLVED WITH SADES\] Kibana server is not ready yet. After a reboot it stopped working](https://discuss.elastic.co/t/solved-with-sades-kibana-server-is-not-ready-yet-after-a-reboot-it-stopped-working/306847)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 6:30am UTC](https://discuss.elastic.co/t/solved-with-sades-kibana-server-is-not-ready-yet-after-a-reboot-it-stopped-working/306847 "2022-06-10T06:30:37Z")
It is not the first time that I have faced this error, in an operational installation, that after a restart of either the server or a restart of the elasticcsearch + kibana service, has as a result this fatal message tha… --- ## [Exception in Ingest using NEST.Attachment after upgrade to 8.2.2](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 6:23am UTC](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800 "2022-06-10T06:23:29Z")
Hi! I have upgraded Elasticsearch to 8.2.2 from 7.17.3, we are still using Elasticsearch.Net and NEST 7.17.2. To this we use Ingest for file search and we have a field of type NEST.Attachment on our model. Then we have… --- ## [How to configure NEST for separate Elastic and Kibana hosts?](https://discuss.elastic.co/t/how-to-configure-nest-for-separate-elastic-and-kibana-hosts/306834)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 6:04am UTC](https://discuss.elastic.co/t/how-to-configure-nest-for-separate-elastic-and-kibana-hosts/306834 "2022-06-10T06:04:46Z")
In Filebeat and Winlogbeat, the configuration files have separate sections for output.Elasticsearch and setup.kibana. It was easy to figure out where to put the Elasticsearch host and the Kibana host - which are 2 dif… --- ## [Generate PDF report not working in Kibana](https://discuss.elastic.co/t/generate-pdf-report-not-working-in-kibana/305674)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 11\ **Last updated:** [June 10, 2022, 5:59am UTC](https://discuss.elastic.co/t/generate-pdf-report-not-working-in-kibana/305674 "2022-06-10T05:59:42Z")
Hi, I am trying to generate the PDF report from Kibana dashboard but I end up getting the warning 'The "open URL" phase took longer than 60 seconds. You may need to increase "xpack.reporting.capture.timeouts.openUrl" I… --- ## [Bar chart ordering Kibana Lens](https://discuss.elastic.co/t/bar-chart-ordering-kibana-lens/306758)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 3\ **Last updated:** [June 10, 2022, 5:51am UTC](https://discuss.elastic.co/t/bar-chart-ordering-kibana-lens/306758 "2022-06-10T05:51:32Z")
Hi, I have a horizontal bar chart in Kibana lens which has $ value on the horizontal axis, top 3 products on the vertical axis and "group other values by other" turned off, and breakdown by manager names with top 3 man… --- ## [Redis: Error fetching metrics error determining cgroups version: error reading /proc/89458/cgroup](https://discuss.elastic.co/t/redis-error-fetching-metrics-error-determining-cgroups-version-error-reading-proc-89458-cgroup/306280)
**Author:** [@Duane\_DSouza](https://discuss.elastic.co/u/Duane_DSouza)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 4:24am UTC](https://discuss.elastic.co/t/redis-error-fetching-metrics-error-determining-cgroups-version-error-reading-proc-89458-cgroup/306280 "2022-06-10T04:24:45Z")
Hi , I am trying to use metricbeat (version 8.1.2) module for Redis. Redis cluster is managed app.redislabs.com Here is the config: metricsets: \["info", "keyspace"\] hosts: \["redis-16058.internal.xxxxxxxxx.ec2.clo… --- ## [Legends on map](https://discuss.elastic.co/t/legends-on-map/306778)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 5:29am UTC](https://discuss.elastic.co/t/legends-on-map/306778 "2022-06-10T05:29:36Z")
Is there a way to adjust the number template on the legends on a Kibana map. For e.g. it is currently showing the full length for large numbers. what if we want to show the numbers trimmed as $1000k etc. instead of the … --- ## [Get most recent distinct rows as kibana table](https://discuss.elastic.co/t/get-most-recent-distinct-rows-as-kibana-table/306524)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 3:44am UTC](https://discuss.elastic.co/t/get-most-recent-distinct-rows-as-kibana-table/306524 "2022-06-10T03:44:51Z")
I created index pattern and it has 4 fields(timestamp,Id,Type,Count). Need to get the most recent(based on the timestamp)rows with unique Type. Sample data: |timestamp|ID|Type|Count| |1/10/2022|1|A|12| |1/11/2022|2|A… --- ## [Start request repeated too quickly for filebeat.service](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005)
**Author:** [@bd67](https://discuss.elastic.co/u/bd67)\ **Replies:** 4\ **Last updated:** [June 10, 2022, 1:43am UTC](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005 "2022-06-10T01:43:35Z")
Hello All, I have several servers set up with Filebeat since few months , nothing changed in terms of config for any. Over the past few days I am observing 2 of these servers consistently failing to keep Filebeat servi… --- ## [Es\_rejected\_execution\_exception - what steps do I need to take?](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 1:29am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836 "2022-06-10T01:29:15Z")
I am using Elasticsearch docker image 7.17.4. I am on a 12 core machine using Python and the helpers.parallel\_bulk() function with the default thread count and queue size. The error I get is elasticsearch.ApiError: Ap… --- ## [How to filter an index by the maximum value of a field?](https://discuss.elastic.co/t/how-to-filter-an-index-by-the-maximum-value-of-a-field/306755)
**Author:** [@Arifullah](https://discuss.elastic.co/u/Arifullah)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 1:21am UTC](https://discuss.elastic.co/t/how-to-filter-an-index-by-the-maximum-value-of-a-field/306755 "2022-06-10T01:21:43Z")
There is a field in the index by the name of date but the data of that field is not in a proper date format its only a number. So I want a filter to include only the data of maximum data of date field I mean how to creat… --- ## [Terms are not working with multilevel nested query](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428)
**Author:** [@ravee1112](https://discuss.elastic.co/u/ravee1112)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 12:31am UTC](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428 "2022-06-10T00:31:58Z")
Below is my mapping for index: { "properties" : { "solutions" : { "type" : "nested", "properties" : { "deliverySkills" : { "type" : "nested", "properties" : { "m… --- ## [Need help configuring repository-s3 (AWS\_WEB\_IDENTITY\_TOKEN\_FILE ignored?)](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607)
**Author:** [@ericsperano](https://discuss.elastic.co/u/ericsperano)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 12:00am UTC](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607 "2022-06-10T00:00:24Z")
Hello, I'm having some difficulties setting up the repository-s3 plugin on Kubernetes (EKS) using ECK. I can confirm that my service account is configured correctly, I can launch a pod running ubuntu with this service … --- ## [NLP Summarizer Model for ES 8.2.2](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740)
**Author:** [@sim](https://discuss.elastic.co/u/sim)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 11:17pm UTC](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740 "2022-06-09T23:17:45Z")
I wonder if ES 8.2.2 already supports a PyTorch NLP model for summarization? Eg. sshleifer/distilbart-cnn-12-6 · Hugging Face It's not an option in eland's current supported task types. It is a generative model, ie. g… --- ## [Custom jar deployment](https://discuss.elastic.co/t/custom-jar-deployment/306832)
**Author:** [@igladyshev](https://discuss.elastic.co/u/igladyshev)\ **Replies:** 0\ **Last updated:** [June 9, 2022, 9:35pm UTC](https://discuss.elastic.co/t/custom-jar-deployment/306832 "2022-06-09T21:35:16Z")
Hello. I am trying to consume kafka topics and output them to s3. All works when we consume topics published in Avro, but we are struggling to make it working for JSON topics. I understood there is an option of using spe… --- ## [In Scripted Field 'Create Field' grayed out and 'Name' input box missing only for some index patterns](https://discuss.elastic.co/t/in-scripted-field-create-field-grayed-out-and-name-input-box-missing-only-for-some-index-patterns/306824)
**Author:** [@nofmxc](https://discuss.elastic.co/u/nofmxc)\ **Replies:** 5\ **Last updated:** [June 9, 2022, 7:52pm UTC](https://discuss.elastic.co/t/in-scripted-field-create-field-grayed-out-and-name-input-box-missing-only-for-some-index-patterns/306824 "2022-06-09T19:52:38Z")
I'm trying to create a scripted field for an index. For my 'dev-logs' index it works great, but for my 'logs' index, the UI won't let me save the scripted field since the button is greyed out. Also weirdly there is no op… --- ## [Modify values in json array with Ruby](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756)
**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 6:42pm UTC](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756 "2022-06-09T18:42:30Z")
Hello everyone, I have a json structure as follows: { "server":\[ { "active":true, "objID":1 }, { "active":true, "objID":2 }, { "active":false, … --- ## [Indexes not rolled over or deleted](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796 "2022-06-09T17:40:01Z")
Hello All, I've been stuck with an issue that indexes are not getting deleted after what is defined in the ILM Policy. I have the same issue on various ES clusters, so clearly I'm doing something wrong. I have the foll… --- ## [Logstash runs out of memory as soon pipelines are triggered](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 5:19pm UTC](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821 "2022-06-09T17:19:13Z")
My logstash has started suddenly running out of memory, though no changes have been made to the pipeline. Following is the error log. My server has 14-15 GB of memory free. Tried allocating different memory in jvm.optio… --- ## [Kibana behind nginx relative path](https://discuss.elastic.co/t/kibana-behind-nginx-relative-path/306764)
**Author:** [@hookenful](https://discuss.elastic.co/u/hookenful)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 4:52pm UTC](https://discuss.elastic.co/t/kibana-behind-nginx-relative-path/306764 "2022-06-09T16:52:03Z")
Hi there! Trying to achieve working kibana behing nginx relative path. Mydomain.com/kibana and it is not working. Mine docker-compose.yml kibana: image: reg.registry/only/kibana:7.11.2 environment: - SER… --- ## [Logstash shutdown with no error](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807)
**Author:** [@Hosein\_Kashefikaram](https://discuss.elastic.co/u/Hosein_Kashefikaram)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 4:43pm UTC](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807 "2022-06-09T16:43:26Z")
I got following messages after starting Logstash Jun 09 10:48:10 local systemd\[1\]: Started logstash. Jun 09 10:48:10 local logstash\[3191\]: Using bundled JDK: /usr/share/logstash/jdk Jun 09 10:48:11 local logstash\[3191\]:… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=906) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=908)