# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=938 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 939 --- ## [Rename logstash.yml](https://discuss.elastic.co/t/rename-logstash-yml/304850)
**Author:** [@Marc\_Jacques](https://discuss.elastic.co/u/Marc_Jacques)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 7:26pm UTC](https://discuss.elastic.co/t/rename-logstash-yml/304850 "2022-05-16T19:26:54Z")
Hello Elastic, is this possible to rename logstash.yml? I would like to have something like logstash-name-name.yml I haven't found anything on the doc or web. There is a setting directory in startup.options, but no v… --- ## [Task cancelled warning message on elastic master node](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 6:59pm UTC](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838 "2022-05-16T18:59:00Z")
Hello guys, My master node is printing the following warning message quite frequently: \[2022-05-16T16:03:39,712\]\[WARN \]\[r.suppressed \] \[loganshrdb03s\] path: /\_xpack/usage, params: {} java.util.concurrent.Ca… --- ## [Aggregate Json input](https://discuss.elastic.co/t/aggregate-json-input/304842)
**Author:** [@shacharaj](https://discuss.elastic.co/u/shacharaj)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 4:05pm UTC](https://discuss.elastic.co/t/aggregate-json-input/304842 "2022-05-16T16:05:42Z")
Hello everyone, I am trying to aggregate JSON input I harvest through filebeat, This is my application log file: }{ "timestamp" : "2022-05-16 15:47:40", "level" : "ERROR", "thread" : "main", "logger" : "com.cr… --- ## [JSON Filter works but filter refresh doesn't fix cache mapping error](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 10\ **Last updated:** [May 16, 2022, 3:44pm UTC](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708 "2022-05-16T15:44:48Z")
Hello, I have JSON messages coming to logstash and they are getting parsed properly, however, I get the error message "no cache mapping, refresh index field list". I have done this multiple times but the error does not g… --- ## [.NET Client Connection Issue](https://discuss.elastic.co/t/net-client-connection-issue/304830)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/net-client-connection-issue/304830 "2022-05-16T15:14:17Z")
NEST/Elasticsearch.Net version : 7.17.1 Elasticsearch version : 7.16.2 (standalone instance) .NET runtime version : Framework 4.7.1 Operating system version : Windows 10 ENT (build 19042) Description of the problem i… --- ## [Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-cluster/304760)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster/304760 "2022-05-16T15:06:33Z")
Hi, a little confused reading the documentation on creating a cluster https://www.elastic.co/guide/en/elasticsearch/reference/7.17/high-availability-cluster-small-clusters.html#high-availability-cluster-design-two-nodes … --- ## [Ruby filter logstash (.length)](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832 "2022-05-16T14:32:12Z")
Hi, I would like to fix the length of message logstash.conf: filter { mutate { split =\> {"message" =\> "|"} ruby { code =\> "event.set('number\_of\_elements', event.get('message').length) " } … --- ## [How are Index Limits Reached?](https://discuss.elastic.co/t/how-are-index-limits-reached/304489)
**Author:** [@ezekiel.buck](https://discuss.elastic.co/u/ezekiel.buck)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 2:08pm UTC](https://discuss.elastic.co/t/how-are-index-limits-reached/304489 "2022-05-16T14:08:11Z")
I'm attempting to estimate a reasonable limit to the index mappings variable and I'm in dire need of knowledge regarding what all contributes to the limit (I've read field/object mappings and field aliases go toward this… --- ## [Logstash how to keep only last elements of an array?](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366)
**Author:** [@zid57](https://discuss.elastic.co/u/zid57)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 2:01pm UTC](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366 "2022-05-16T14:01:28Z")
Hello all, I have a field which is an array and I would like to keep only the last element and put it into a new field. "data": { "path": \[ 1111, 2222, 3333 \] I tried to copy da… --- ## [Removing Data View Filelds](https://discuss.elastic.co/t/removing-data-view-filelds/304825)
**Author:** [@mehrnaz](https://discuss.elastic.co/u/mehrnaz)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 1:15pm UTC](https://discuss.elastic.co/t/removing-data-view-filelds/304825 "2022-05-16T13:15:54Z")
Hello, I am trying to create a dashboard in Grafana with my Elasticsearch database. However, the fields that I am interested in are not showing up in Grafana. I am interested in the Available fields that I can see in Ki… --- ## [Kibana rules and group by](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572 "2022-05-16T12:30:53Z")
Hi all, I am trying to create a rule/alert. The rule is working as inteded, but the mail notification is causing my troubles. Hopefully someone smarter than me can point me in the right direction. I am using the UI t… --- ## [Fleet Missing API key](https://discuss.elastic.co/t/fleet-missing-api-key/304818)
**Author:** [@Samiul008](https://discuss.elastic.co/u/Samiul008)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 12:26pm UTC](https://discuss.elastic.co/t/fleet-missing-api-key/304818 "2022-05-16T12:26:25Z")
Hello Community! I have been trying to install FLEET server for Elasticsearch 7.14.2 My Elasticsearch is configured with self-signed certificate and is functional with kibana=7.14.2 as well. However, I am unable to ins… --- ## [Exists field not working on a newly added field](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:14pm UTC](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812 "2022-05-16T12:14:00Z")
hi, I am using 7.16.3 ES on windows 2012. I added a new date field to existing index. I then ran \_bulk update to add the field on some existing documents. Now, when I when query the individual document, I can see the ne… --- ## [Anomaly registered, but no Alarm Recevied](https://discuss.elastic.co/t/anomaly-registered-but-no-alarm-recevied/304667)
**Author:** [@Shahzaib\_Abid](https://discuss.elastic.co/u/Shahzaib_Abid)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 11:15am UTC](https://discuss.elastic.co/t/anomaly-registered-but-no-alarm-recevied/304667 "2022-05-16T11:15:02Z")
I have an ML job running and for the case below, it registered anomalies but then stopped reading it and thus did not send me an alarm (via watcher which uses averages over a certain time) despite satisfying all the cond… --- ## [Index Lifecycle Policy not deleting - "Waiting for all shard copies to be active"](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-waiting-for-all-shard-copies-to-be-active/304801)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 5\ **Last updated:** [May 16, 2022, 10:37am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-waiting-for-all-shard-copies-to-be-active/304801 "2022-05-16T10:37:01Z")
Can anyone help me with this? The policy is not deleting my indices after certain time. I put them to just to several days to see if its working. I am getting the message in my indices: Waiting for all shard copies to be… --- ## [Create lifecycle policy with Java API client](https://discuss.elastic.co/t/create-lifecycle-policy-with-java-api-client/304383)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 10:29am UTC](https://discuss.elastic.co/t/create-lifecycle-policy-with-java-api-client/304383 "2022-05-16T10:29:04Z")
Hi, Can someone tell me how to write this lifecycle policy test with the new Java API client? It is completely unclear to me. By the way, is there more extensive documentation on how to use the Java API client? The cod… --- ## [How to pass a parameter to a script attached to a runtime field](https://discuss.elastic.co/t/how-to-pass-a-parameter-to-a-script-attached-to-a-runtime-field/303348)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 10:25am UTC](https://discuss.elastic.co/t/how-to-pass-a-parameter-to-a-script-attached-to-a-runtime-field/303348 "2022-05-16T10:25:04Z")
Hi, Can anyone help me how to pass a parameter to a script attached to a runtime field? With scripted fields 'params' can be used to get to the parameters passed to the script but for runtime fields this does not seem t… --- ## [Anomaly detection record score error](https://discuss.elastic.co/t/anomaly-detection-record-score-error/304403)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 9:54am UTC](https://discuss.elastic.co/t/anomaly-detection-record-score-error/304403 "2022-05-16T09:54:22Z")
Hi, I've got a question regarding the scoring system of ELK anomaly detection. I've been running a job with 'high\_sum' detector, and there was an anomaly with record score 99 but actual value of the sum of the field wa… --- ## [Cannot create an index pattern](https://discuss.elastic.co/t/cannot-create-an-index-pattern/304779)
**Author:** [@lior\_doanis](https://discuss.elastic.co/u/lior_doanis)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 9:49am UTC](https://discuss.elastic.co/t/cannot-create-an-index-pattern/304779 "2022-05-16T09:49:19Z")
Hi, So I setup ELK on a single server and I try to send telemetry to him, what I did is create index template and pipeline, Now, I try to create index pattern, But I cannot create one all I have from the list is one… --- ## [Elastic search queries working for \_search endpoint are not working for query DSL filter in Kibana](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569)
**Author:** [@Noman\_Saleem](https://discuss.elastic.co/u/Noman_Saleem)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 8:33am UTC](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569 "2022-05-16T08:33:46Z")
Hi, I am trying to run the query on query DSL Kibana but its not working but the same query is working for the \_search endpoint. Here is the query. { "size": 0, "query": { "range": { "timest… --- ## [Generic solution for masking PII data in JSON payload](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464)
**Author:** [@Hammad\_Ali](https://discuss.elastic.co/u/Hammad_Ali)\ **Replies:** 5\ **Last updated:** [May 16, 2022, 8:05am UTC](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464 "2022-05-16T08:05:55Z")
Hello! Is there any generic solution to mask PII data in JSON payload, I know about mutate gsub but that doesn't seem like a generic solution. I am looking for something that filters out all of the fields and masks any … --- ## [Cisco IOS logging - help required](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 8\ **Last updated:** [May 16, 2022, 7:49am UTC](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957 "2022-05-16T07:49:30Z")
Hi, I'm trying to ingest IOS switch logs into Elasticsearch, but I feel like I'm missing out on how this all works (I'm not a network engineer which may explain it!) We're using Elastic cloud and Fleets Cisco IOS integ… --- ## [Should inside must for multiple or conditions, not working as expected](https://discuss.elastic.co/t/should-inside-must-for-multiple-or-conditions-not-working-as-expected/304787)
**Author:** [@Daniel\_Garcia](https://discuss.elastic.co/u/Daniel_Garcia)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 7:24am UTC](https://discuss.elastic.co/t/should-inside-must-for-multiple-or-conditions-not-working-as-expected/304787 "2022-05-16T07:24:43Z")
Let me explain my problem through the different cases I have. With this query, with no filters applied, I receive results for both programs (each one belonging to each different index): confess-chrome && http-down-burst… --- ## [Getting error in logstash with no other informations](https://discuss.elastic.co/t/getting-error-in-logstash-with-no-other-informations/304782)
**Author:** [@perez.koh](https://discuss.elastic.co/u/perez.koh)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 6:59am UTC](https://discuss.elastic.co/t/getting-error-in-logstash-with-no-other-informations/304782 "2022-05-16T06:59:59Z")
Hello Can anyone advice on the below error, I am trying to connect the logstash to Elasticsearch, but show the below error, there is no other information, and hard to troubleshoot sudo tail /var/log/logstash/logstash-p… --- ## [Elasticsearch&Logstash Log4j Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-logstash-log4j-vulnerabilities/304640)
**Author:** [@kyarali](https://discuss.elastic.co/u/kyarali)\ **Replies:** 5\ **Last updated:** [May 16, 2022, 5:08am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-log4j-vulnerabilities/304640 "2022-05-16T05:08:26Z")
Hello, We have log4j vulnerabilities for Elasticsearch and Logstash in the following paths: Path : /usr/share/Elasticsearch/lib/log4j-core-2.11.1.jar Path : /usr/share/logstash/logstash-core/lib/jars/log4j-core-2.14.0… --- ## [Integrating ELK 8.0 with Splunk](https://discuss.elastic.co/t/integrating-elk-8-0-with-splunk/303219)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 4:02am UTC](https://discuss.elastic.co/t/integrating-elk-8-0-with-splunk/303219 "2022-05-16T04:02:24Z")
We are planning to integrate ELK 8.0 with Splunk. can some one provide steps how to send elk data to splunk --- ## [How to uninstall Elastic search 8.0 version in windows](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 4:01am UTC](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721 "2022-05-16T04:01:33Z")
I want to uninstall Elasticsearch 8.0 version in Windows . Is there a Command that i can use to have it uninstalled completely . Thnks --- ## [ILM Error- Added Delete phase](https://discuss.elastic.co/t/ilm-error-added-delete-phase/304769)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 2:40am UTC](https://discuss.elastic.co/t/ilm-error-added-delete-phase/304769 "2022-05-16T02:40:43Z")
Hello I've updated my logstash policy to include the delete phase but I'm getting an error curl -XGET localhost:9200/\_ilm/policy/logstash-policy?pretty { "logstash-policy" : { "version" : 5, "modified\_date" :… --- ## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686)
**Author:** [@Onsrm](https://discuss.elastic.co/u/Onsrm)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 2:33am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686 "2022-05-16T02:33:23Z")
hello when i use this command bin/logstash -f /etc/logstash/conf.d/apache.conf i get this error : OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed i… --- ## [Memory locking requested for elasticsearch process but memory is not locked](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 1:53am UTC](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655 "2022-05-16T01:53:54Z")
i am enabling bootstrap.memory\_lock: true on kubrnetes deployment of elastic multi node cluster. getting below error. Tried with this one #Set memlock limit - name: memlock-limit image: busybox im… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=937) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=939)