# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=934

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 935

---

## [Resource Utilization Machine Learning](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 8:18am UTC](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502 "2022-05-19T08:18:16Z")

</div>

Hello, I am working on the Machine Learning capability within two of the clusters that I am responsible for. I am trying to figure out the relationship between the size of my nodes, their configuration and model\_memory …

---

## [With out xpack.security.enabled: true can we install Elastic version 8.2,](https://discuss.elastic.co/t/with-out-xpack-security-enabled-true-can-we-install-elastic-version-8-2/305138)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 0\
**Last updated:** [May 19, 2022, 8:17am UTC](https://discuss.elastic.co/t/with-out-xpack-security-enabled-true-can-we-install-elastic-version-8-2/305138 "2022-05-19T08:17:51Z")

</div>

Hi , We are trying demo using 8.2 version, we are able to setup Elastic with out XPACK, but for Kibana integration its says need to enable XPACK security, please let me know how can we install the 8.2 version without …

---

## [Cannot create visulization on Kibana](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972)

<div class="topic-metadata">

**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\
**Replies:** 11\
**Last updated:** [May 19, 2022, 8:01am UTC](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972 "2022-05-19T08:01:10Z")

</div>

Hi, I'm using elk v:7.5.0, i uploaded my indexes correctly, but when i want to create a visualization all the indexs are in the list but i can't select any of them. I don't know what's the problem, i can see the hint on…

---

## [Timelion graph tuning](https://discuss.elastic.co/t/timelion-graph-tuning/304798)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 4\
**Last updated:** [May 19, 2022, 7:54am UTC](https://discuss.elastic.co/t/timelion-graph-tuning/304798 "2022-05-19T07:54:42Z")

</div>

Hi Again, I want to remove this vertical straight line. Can we able to do that? And also remove the horizontal straight line. All things has been encircled with blue line which I want to remove. Can we do that? Reg…

---

## [About the immutableOpenmap in elasticsearch](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121)

<div class="topic-metadata">

**Author:** [@xingzhao](https://discuss.elastic.co/u/xingzhao)\
**Replies:** 5\
**Last updated:** [May 19, 2022, 7:45am UTC](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121 "2022-05-19T07:45:46Z")

</div>

I would like to ask what consideration is the immutableOpenmap in Elasticsearch designed for? What kind of utility does it have? It is used in both aliasmetadata and indexmetadata. My personal guess is that it has someth…

---

## [Logstash parse logfiles](https://discuss.elastic.co/t/logstash-parse-logfiles/305128)

<div class="topic-metadata">

**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\
**Replies:** 1\
**Last updated:** [May 19, 2022, 7:43am UTC](https://discuss.elastic.co/t/logstash-parse-logfiles/305128 "2022-05-19T07:43:31Z")

</div>

Hello Team, kindly advise how I can parse the following logfile entry on Kibana/logstash? {"log":"LOG: aborting any active transactions\\n","stream":"stderr","time":"2022-05-17T11:04:05.353977974Z"} {"log":"FATAL: ter…

---

## [Show highlights for matched terms query (for integer values)](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080)

<div class="topic-metadata">

**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\
**Replies:** 2\
**Last updated:** [May 19, 2022, 7:00am UTC](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080 "2022-05-19T07:00:31Z")

</div>

We've got a mapping for field classes: "classes" : { "type" : "integer" } Is there a way to show highlight for the matching classes if we search it e.g. via terms-query: { "terms" : { "classes" : \[ 1, 5, 10 \] …

---

## [Iam not Getting Logs in elasticstack](https://discuss.elastic.co/t/iam-not-getting-logs-in-elasticstack/305126)

<div class="topic-metadata">

**Author:** [@Rajesh119](https://discuss.elastic.co/u/Rajesh119)\
**Replies:** 1\
**Last updated:** [May 19, 2022, 4:58am UTC](https://discuss.elastic.co/t/iam-not-getting-logs-in-elasticstack/305126 "2022-05-19T04:58:45Z")

</div>

Iam not getting logs in elaticsearch please anyone help me regarding this issue. It's helps me alot, last from few days iam struggling. Thanks in advance.

---

## [Extract folder name as field in logstash](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026)

<div class="topic-metadata">

**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Replies:** 7\
**Last updated:** [May 19, 2022, 4:38am UTC](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026 "2022-05-19T04:38:06Z")

</div>

Hi everyone The following is my filebeat input in my yml file- filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below a…

---

## [Kibana not starting correctly \[SOLVED\]](https://discuss.elastic.co/t/kibana-not-starting-correctly-solved/305067)

<div class="topic-metadata">

**Author:** [@Ricard-CT](https://discuss.elastic.co/u/Ricard-CT)\
**Replies:** 2\
**Last updated:** [May 19, 2022, 4:25am UTC](https://discuss.elastic.co/t/kibana-not-starting-correctly-solved/305067 "2022-05-19T04:25:05Z")

</div>

Hi, i just installed ELK Stack, and after restart kibana it stops working: Kibana startup logs tells me this: FATAL Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index. Error: pic…

---

## [Failed to start Elasticsearch 8.2 on CentOSs](https://discuss.elastic.co/t/failed-to-start-elasticsearch-8-2-on-centoss/305072)

<div class="topic-metadata">

**Author:** [@Bhanu\_1212](https://discuss.elastic.co/u/Bhanu_1212)\
**Replies:** 2\
**Last updated:** [May 19, 2022, 4:24am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-8-2-on-centoss/305072 "2022-05-19T04:24:31Z")

</div>

\[2022-05-18T12:41:58,264\]\[INFO \]\[o.e.e.NodeEnvironment \] \[elastic-centos\] heap size \[7.7gb\], compressed ordinary object pointers \[true\] \[2022-05-18T12:41:58,351\]\[INFO \]\[o.e.n.Node \] \[elastic-centos\] node…

---

## [Is it possible to embed {{ctx.trigger.scheduled\_time}} variable in the reporting url inside a watcher script?](https://discuss.elastic.co/t/is-it-possible-to-embed-ctx-trigger-scheduled-time-variable-in-the-reporting-url-inside-a-watcher-script/305042)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 0\
**Last updated:** [May 18, 2022, 10:14am UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-ctx-trigger-scheduled-time-variable-in-the-reporting-url-inside-a-watcher-script/305042 "2022-05-18T10:14:38Z")

</div>

Hi All, I have deployed a watcher script that triggered for certain search criteria. The action of the watch is to generate a dashboard.pdf and send it through email. Now the problem is, I'm using two systems for this …

---

## [Elasticsearch.service: Main process exited, code=killed, status=9/KILL](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358)

<div class="topic-metadata">

**Author:** [@viththakan](https://discuss.elastic.co/u/viththakan)\
**Replies:** 2\
**Last updated:** [May 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358 "2022-05-19T03:59:13Z")

</div>

Hi I havefirst installed Elasticsearch, logstash, kibana and filebeats in the same order. When I installed Elasticsearch and checked status It worked. Now it is showing the error like systemctl status elasticsearch.serv…

---

## [Configure xpack.security.enabled but not work in elasticsearch v8.2.0](https://discuss.elastic.co/t/configure-xpack-security-enabled-but-not-work-in-elasticsearch-v8-2-0/304895)

<div class="topic-metadata">

**Author:** [@stanpao](https://discuss.elastic.co/u/stanpao)\
**Replies:** 3\
**Last updated:** [May 19, 2022, 3:29am UTC](https://discuss.elastic.co/t/configure-xpack-security-enabled-but-not-work-in-elasticsearch-v8-2-0/304895 "2022-05-19T03:29:25Z")

</div>

In my basic cluster, configure all nodes with xpack.security.enabled : true, but API GET \_xpack, always "security" is available but no enabled, why?

---

## [Scroll failed on some shards?](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116)

<div class="topic-metadata">

**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\
**Replies:** 1\
**Last updated:** [May 19, 2022, 2:08am UTC](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116 "2022-05-19T02:08:18Z")

</div>

Hi, We're using 6.2.3, and I noticed some errors in our application logs yesterday that indicated a few shards (eg, 1-4 out of total of 90) failed while processing a scroll request. Unfortunately I don't have access to …

---

## [Logstash input file configuration](https://discuss.elastic.co/t/logstash-input-file-configuration/305081)

<div class="topic-metadata">

**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\
**Replies:** 10\
**Last updated:** [May 19, 2022, 2:07am UTC](https://discuss.elastic.co/t/logstash-input-file-configuration/305081 "2022-05-19T02:07:05Z")

</div>

Hi! I use logstash to import a json file into Elasticsearch. I use the following configuration but the index is not created in Elasticsearch (or the consol). input{ file{ codec=\>multiline{ pattern =\>"^{header" …

---

## [Is the Index Lifecycle Management a free or paid feature?](https://discuss.elastic.co/t/is-the-index-lifecycle-management-a-free-or-paid-feature/305113)

<div class="topic-metadata">

**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\
**Replies:** 1\
**Last updated:** [May 18, 2022, 11:24pm UTC](https://discuss.elastic.co/t/is-the-index-lifecycle-management-a-free-or-paid-feature/305113 "2022-05-18T23:24:39Z")

</div>

I am trying to assess the cost impact of using Index Lifecycle Management. According to Subscriptions | Elastic Stack Products & Support | Elastic, it seems to be a free feature but the same page shows "Configurable rete…

---

## [Ingestion pipelines for new indices created everyday](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051)

<div class="topic-metadata">

**Author:** [@katakam\_chaitanya](https://discuss.elastic.co/u/katakam_chaitanya)\
**Replies:** 4\
**Last updated:** [May 18, 2022, 9:41pm UTC](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051 "2022-05-18T21:41:16Z")

</div>

I have new indices created on my Elasticsearch cluster everyday. I want to take all my docs through a ingestion pipeline. But as new indices get created automatically as date changes ( index name example:cwl-12.12.2022…

---

## [Couldn't start elasticsearch daemon on my magento2 cloud](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079)

<div class="topic-metadata">

**Author:** [@ingEnricoGiorgi](https://discuss.elastic.co/u/ingEnricoGiorgi)\
**Replies:** 4\
**Last updated:** [May 18, 2022, 9:39pm UTC](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079 "2022-05-18T21:39:36Z")

</div>

Couldn't start Elasticsearch daemon on my magento2 cloud log after sudo journactl -xe systemctl status of Elasticsearch

---

## [ES is upgraded from version 6.3.2 to 6.8.22 in a rolling manner. After the upgrade, the cluster status is abnormal. How to roll back to 6.3.2?](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533)

<div class="topic-metadata">

**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\
**Replies:** 10\
**Last updated:** [May 18, 2022, 9:37pm UTC](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533 "2022-05-18T21:37:04Z")

</div>

Currently I am working on the ES rolling upgrade plan. The official manual lists the rolling upgrade steps, but there is no rollback step. After the ES rolling upgrade, the cluster status is abnormal or the application w…

---

## [SSL certificate](https://discuss.elastic.co/t/ssl-certificate/304933)

<div class="topic-metadata">

**Author:** [@Harris11](https://discuss.elastic.co/u/Harris11)\
**Replies:** 3\
**Last updated:** [May 18, 2022, 8:23pm UTC](https://discuss.elastic.co/t/ssl-certificate/304933 "2022-05-18T20:23:54Z")

</div>

how to implement SSL certificate for the Elasticsearch version 8.2.0, can any one explain

---

## [Cannot properly display object in Kibana Discover](https://discuss.elastic.co/t/cannot-properly-display-object-in-kibana-discover/304692)

<div class="topic-metadata">

**Author:** [@NadyLeez123](https://discuss.elastic.co/u/NadyLeez123)\
**Replies:** 2\
**Last updated:** [May 18, 2022, 7:38pm UTC](https://discuss.elastic.co/t/cannot-properly-display-object-in-kibana-discover/304692 "2022-05-18T19:38:24Z")

</div>

Hello! We just migrate from kibana 7.6.2 to 7.15.1 We have a field named ConteneurUnity( object type), with nested fields as showed in the mapping below: "ConteneurUnity": { "type": "object", …

---

## [Bulk request how to?](https://discuss.elastic.co/t/bulk-request-how-to/305096)

<div class="topic-metadata">

**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\
**Replies:** 2\
**Last updated:** [May 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/bulk-request-how-to/305096 "2022-05-18T18:20:50Z")

</div>

Hi I'm a bit confused on how to perform a bulk request with the new Java API client. To index one document I use the following code that works without problems. Since we are using GSON I pass the json string representat…

---

## [Lens in Kibana 8.2.0 Only Works When Host Machine Connected to Internet](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998)

<div class="topic-metadata">

**Author:** [@eafrost.cissp](https://discuss.elastic.co/u/eafrost.cissp)\
**Replies:** 6\
**Last updated:** [May 18, 2022, 6:09pm UTC](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998 "2022-05-18T18:09:41Z")

</div>

I have upgraded my ELK stack on Windows 10 from version 7.71.1 to version 8.2.0. My production machines have no Internet connectivity. Everything works fine except for Lens visualizations in Kibana. I get a blank screen…

---

## [Is there any change in the query-syntax of Elasticsearch?](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084)

<div class="topic-metadata">

**Author:** [@Ashrut](https://discuss.elastic.co/u/Ashrut)\
**Replies:** 0\
**Last updated:** [May 18, 2022, 2:42pm UTC](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084 "2022-05-18T14:42:19Z")

</div>

Hi, everyone. I had written this query when I was using Elasticsearch (5.6). --\> \< { from: params.fetch(:offset), size: params.fetch(:size), \_source: { excludes: \["attachments.\*"\] }, sort: SortB…

---

## [Reindexing error es\_rejected\_execution\_exception](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099)

<div class="topic-metadata">

**Author:** [@luciana](https://discuss.elastic.co/u/luciana)\
**Replies:** 3\
**Last updated:** [May 18, 2022, 5:28pm UTC](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099 "2022-05-18T17:28:54Z")

</div>

Both my indices are on the same node. The source has about 200k documents, I'm using AWS and the instance type is "t3.small.search" so 2 vCPUs. I tried slicing already but it just gives me the same error. Any ideas on wh…

---

## [Vega Boxplot - referencing properties in \_source (infinite extent error)](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 3\
**Last updated:** [May 18, 2022, 5:16pm UTC](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696 "2022-05-18T17:16:52Z")

</div>

Hello - In an effort to build a boxplot against my real elastic data, I have started by following this documentation to create a simple boxplot using Vega (v5) in Kibana (v8.0) Instead of using the pre-canned penguins.…

---

## [Http\_poller input and excluding parent json properties for output to elastic](https://discuss.elastic.co/t/http-poller-input-and-excluding-parent-json-properties-for-output-to-elastic/305098)

<div class="topic-metadata">

**Author:** [@dwittner](https://discuss.elastic.co/u/dwittner)\
**Replies:** 1\
**Last updated:** [May 18, 2022, 5:12pm UTC](https://discuss.elastic.co/t/http-poller-input-and-excluding-parent-json-properties-for-output-to-elastic/305098 "2022-05-18T17:12:08Z")

</div>

afternoon My poller reads from a source where the array that I wish to be the source of the Elasticsearch output plugin in not the parent and not the only property. How can I either filter appropriately OR instruct the…

---

## [How to filter data in cavas only time filter is there](https://discuss.elastic.co/t/how-to-filter-data-in-cavas-only-time-filter-is-there/304671)

<div class="topic-metadata">

**Author:** [@Ritika123](https://discuss.elastic.co/u/Ritika123)\
**Replies:** 4\
**Last updated:** [May 18, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-filter-data-in-cavas-only-time-filter-is-there/304671 "2022-05-18T17:03:13Z")

</div>

unable to apply filter in my canvas workpad only time filter is there

---

## [Removing time range from a view in Kibana Canvas](https://discuss.elastic.co/t/removing-time-range-from-a-view-in-kibana-canvas/304950)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 2\
**Last updated:** [May 18, 2022, 4:43pm UTC](https://discuss.elastic.co/t/removing-time-range-from-a-view-in-kibana-canvas/304950 "2022-05-18T16:43:50Z")

</div>

I've been trying out the Canvas and got the problem that I can't remove the time range for a view if I make it on the Select type\>Create tab. Is there anything I'm missing or that's how it is?

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=933)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=935)
