# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=956 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 957 --- ## [Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735)
**Author:** [@rinki\_kumari](https://discuss.elastic.co/u/rinki_kumari)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 10:08am UTC](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735 "2022-05-02T10:08:47Z")
input { http\_poller { urls =\> { test =\> { method =\> get url =\> "http://172.24.105.27:8092/" headers =\> { Accept =\> "application/json" Authorization =\> "Basic QXBp" } } } } } o… --- ## [Can I compare Two SearchRequest Object](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487)
**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\ **Replies:** 6\ **Last updated:** [May 2, 2022, 9:37am UTC](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487 "2022-05-02T09:37:03Z")
I want to compare two SearchRequest, kind a like to see if both SearchRequest object's query are same or not. for Example: Reader queryJson = new StringReader( "{" + " \\"query\\": {" + … --- ## [Changing snapshot repo from standard to standard-ia](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 9:32am UTC](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479 "2022-05-02T09:32:24Z")
Hi all, I created a bucket in AWS s3 bucket, named "backup-s3-bucket" Then I created a snapshot repo like below: PUT \_snapshot/aws\_repo { "type": "s3", "settings": { "bucket": "backup-s3-bucket", "endp… --- ## [Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727 "2022-05-02T09:23:40Z")
input json message to logstash via filebeat is "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}" oupt… --- ## [Need help in file.conf for Logstash - Salesforce pipeline](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 8:21am UTC](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720 "2022-05-02T08:21:57Z")
I'm trying to configure a pipeline to send Salesforce's data to Elasticsearch using Logstash. I created the a Connected App and flagged the OAuth 2.0 and i've put the callback url. Now, i have the client secret and the… --- ## [How do I setup a cluster with secure enabled? (Version 8)](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 7:49am UTC](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579 "2022-05-02T07:49:48Z")
Hello! When I try to connect a new to the cluster, I am only getting this message: \[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[node-1\] client did not trust this server's certificate, closing connection Netty4TcpCh… --- ## [Hints for use of Ingest pipeline? To map IP address to Region+City and never store IP address](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712)
**Author:** [@Bevaldss](https://discuss.elastic.co/u/Bevaldss)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 7:38am UTC](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712 "2022-05-02T07:38:52Z")
Due to compliance with DPA we cannot store client IP addresses. I want to on-the-fly map client IP address to its' Region+City and also at same time make sure the IP address is never stored in any document. Looks like … --- ## [Helm Chart support for Hot-Warm-Cold Architecture with Index Lifecycle Management](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701)
**Author:** [@Vijendhar](https://discuss.elastic.co/u/Vijendhar)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 2:30am UTC](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701 "2022-05-02T02:30:14Z")
Is there a plan to support Hot-Warm-Cold Architecture with Index Lifecycle Management with the Helm chart for this issue ? --- ## [Upgrade ELK from 6.8.9 to latest stable version](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703)
**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:41am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703 "2022-05-02T06:41:02Z")
What to consider when upgrading ELK from 6.8.9 to latest stable version? I understand that I should be doing a rolling upgrade from 6.8.9 to 7.16.3 and from 7.16.3 to 8.x How can I reindex the existing indices? I also… --- ## [Kibana dashboard](https://discuss.elastic.co/t/kibana-dashboard/303704)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:35am UTC](https://discuss.elastic.co/t/kibana-dashboard/303704 "2022-05-02T06:35:15Z")
How to create a replica of stack monitoring in dashboard? like current counts, memory & cpu usage? --- ## [Elastic Cloud don't see events from NXLog](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677)
**Author:** [@vasjab](https://discuss.elastic.co/u/vasjab)\ **Replies:** 4\ **Last updated:** [May 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677 "2022-05-02T06:20:05Z")
Hello. I'm trying to configure nxlog with Elastic cloud instance but Elastic don't see events. Can you please help how I can read events on Elastic cloud? Thanks. --- ## [Conda Overriding Pip-Installed Elasticsearch Version](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684)
**Author:** [@KatePearce](https://discuss.elastic.co/u/KatePearce)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 2:22am UTC](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684 "2022-05-02T02:22:51Z")
I'm currently working on a project that requires me to use Elasticsearch version 7.0.2; however, though the pip-installed version of Elasticsearch is 7.0.2, when I check the version in my Jupyter notebook, it still says … --- ## [Problem to connect kibana with elasticsearch](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 1:55am UTC](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581 "2022-05-02T01:55:11Z")
Hello , i have two virtuel machines in vmware ESXI , I installed Elasticsearch in the first machine and kibana without Elasticsearch in the second machine and i try to cennect them this is my Elasticsearch.yml and kiban… --- ## [Inquiries about warning fields](https://discuss.elastic.co/t/inquiries-about-warning-fields/303695)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 1:43am UTC](https://discuss.elastic.co/t/inquiries-about-warning-fields/303695 "2022-05-02T01:43:55Z")
As you can see, I am going to set up an Alert, and I The field name you set is not visible. Fields starting with iso. are not visible, and fields starting with the changed forti\_ are not visible. How can I make thi… --- ## [ElasticSearch Java Client 8.1.2 - Entity content is too large for the configured buffer limit](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690)
**Author:** [@pipedreamer007](https://discuss.elastic.co/u/pipedreamer007)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690 "2022-05-02T00:34:20Z")
Hi everyone - I'm trying to index a large amount of data into my Elasticsearch 8.1 Docker container. I've already changed the setting http.max\_content\_length in the Elasticsearch.yml file so I no longer encounter the 41… --- ## [ESM tool migration](https://discuss.elastic.co/t/esm-tool-migration/303521)
**Author:** [@iliyab09](https://discuss.elastic.co/u/iliyab09)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/esm-tool-migration/303521 "2022-05-02T00:12:22Z")
Hello I have couple questions about migration, can't find the information nowhere. When the migration is in progress do I need to stop read write to my old cluster? When the migration is done I can just connect to… --- ## [How to get IP address of collectd client](https://discuss.elastic.co/t/how-to-get-ip-address-of-collectd-client/303674)
**Author:** [@Rostam](https://discuss.elastic.co/u/Rostam)\ **Replies:** 4\ **Last updated:** [May 1, 2022, 5:25pm UTC](https://discuss.elastic.co/t/how-to-get-ip-address-of-collectd-client/303674 "2022-05-01T17:25:36Z")
Hello I have configured collectd on all my devices (running Linux). The configuration is: /etc/collectd.conf LoadPlugin cpu LoadPlugin interface LoadPlugin df \ server "10.2.9.35" "5555" /Plugin My l… --- ## [Grokparsefailure ... but it's all working and logs are being parsed...?](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614)
**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\ **Replies:** 7\ **Last updated:** [May 1, 2022, 4:54pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614 "2022-05-01T16:54:29Z")
I'm seeing pretty much all of my logs in Elastic/Kibana tagged with the following tags: \_grokparsefailure\_sysloginput, \_grokparsefailure, \_geoip\_lookup\_failure Which is odd, as they are being processed just fine. Exam… --- ## [Docker implementation - Filebeats 7.17.2 - drop\_events not working](https://discuss.elastic.co/t/docker-implementation-filebeats-7-17-2-drop-events-not-working/303647)
**Author:** [@amills157](https://discuss.elastic.co/u/amills157)\ **Replies:** 8\ **Last updated:** [May 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/docker-implementation-filebeats-7-17-2-drop-events-not-working/303647 "2022-05-01T16:44:06Z")
I am trying to setup filebeats to monitor some docker containers - I am using autodiscover, but I don't want to be logging anything from my stack (Elastic, Kibana, Filebeats itself). I have tried to use drop\_events but i… --- ## [Failed to start Filebeat MISP treats](https://discuss.elastic.co/t/failed-to-start-filebeat-misp-treats/303056)
**Author:** [@Tetsuho](https://discuss.elastic.co/u/Tetsuho)\ **Replies:** 5\ **Last updated:** [May 1, 2022, 1:54pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-misp-treats/303056 "2022-05-01T13:54:50Z")
Hi Everyone im glad to be part of this comunity. Im here beacause a got a error message when I try to start the filebeat service after do some modifications related to a enable de MISP threat intel Logs. Here is the fil… --- ## [Number of vCPUS vs Number of Shards](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 3\ **Last updated:** [April 30, 2022, 11:11pm UTC](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651 "2022-04-30T23:11:32Z")
I have an on-premise server with Elasticsearch 6.8 that was created years ago, and at the time I only had one vCPU and now I have 4 vCPU on that server. It happens that when I mapped the indexes I defined the code below… --- ## [Filebeat not sending to Logstash until it's terminated](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash-until-its-terminated/303565)
**Author:** [@alex\_london](https://discuss.elastic.co/u/alex_london)\ **Replies:** 5\ **Last updated:** [April 30, 2022, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash-until-its-terminated/303565 "2022-04-30T17:07:28Z")
I've just started my Elastic Stack adventure and got myself stuck in what must be the simplest problem, but for the life of me cannot figure it out... My environment: Logstash 8.1.3 in Docker (Ubuntu 20.04) Filebeat 8… --- ## [Unclear setup for the documented "Migration from the High Level Rest Client" topic](https://discuss.elastic.co/t/unclear-setup-for-the-documented-migration-from-the-high-level-rest-client-topic/303474)
**Author:** [@patrikjetzer](https://discuss.elastic.co/u/patrikjetzer)\ **Replies:** 3\ **Last updated:** [April 30, 2022, 8:43am UTC](https://discuss.elastic.co/t/unclear-setup-for-the-documented-migration-from-the-high-level-rest-client-topic/303474 "2022-04-30T08:43:37Z")
The current java api client documentation contains a chapter regarding migration. This describes the usage of High Level Rest Client in combination with the Java API Client: But there are no information provided how t… --- ## [Migrate Elastic Cloud Regions](https://discuss.elastic.co/t/migrate-elastic-cloud-regions/303636)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 4\ **Last updated:** [April 30, 2022, 3:14am UTC](https://discuss.elastic.co/t/migrate-elastic-cloud-regions/303636 "2022-04-30T03:14:54Z")
Using Elastic Cloud with GCP, can I start using it in one region, eg North Virginia, and then change the region of this implementation to another GCP region? --- ## [Please translate this aggregation into elasticsearch](https://discuss.elastic.co/t/please-translate-this-aggregation-into-elasticsearch/303611)
**Author:** [@UchihaYuki](https://discuss.elastic.co/u/UchihaYuki)\ **Replies:** 1\ **Last updated:** [April 30, 2022, 1:55am UTC](https://discuss.elastic.co/t/please-translate-this-aggregation-into-elasticsearch/303611 "2022-04-30T01:55:52Z")
I just can't understand what does this aggregation in TSVB do exactly. I think if anybody can translate it into Elasticsearch query DSL, then I can understand it. Thank you so much in advance. --- ## [Using ElasticSerach 8 via Docker without certificate](https://discuss.elastic.co/t/using-elasticserach-8-via-docker-without-certificate/303617)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [April 30, 2022, 12:38am UTC](https://discuss.elastic.co/t/using-elasticserach-8-via-docker-without-certificate/303617 "2022-04-30T00:38:02Z")
Today my team works with Elasticsearch (6.8) through a Docker machine, connecting via HTTP (php curl), just to test our system and the integration with Elasticsearch. We tried to use the Elasticsearch 8 image on Docker,… --- ## [Combine different fields for percentile](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634)
**Author:** [@sweeper42](https://discuss.elastic.co/u/sweeper42)\ **Replies:** 0\ **Last updated:** [April 29, 2022, 9:50pm UTC](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634 "2022-04-29T21:50:03Z")
I have a situation where I have documents with multiple histogram fields. I would sometimes like to get the percentile of combined fields. Here is a sample mapping PUT /t1 { "settings": { "index": { "number… --- ## [Kibana error](https://discuss.elastic.co/t/kibana-error/303570)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 8:17pm UTC](https://discuss.elastic.co/t/kibana-error/303570 "2022-04-29T20:17:29Z")
anyone know this error?? getting it again and again. kibana starts working for a while and goes back to this error --- ## [Logstash to elastic search TCP connection error](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 7:33pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624 "2022-04-29T19:33:52Z")
Hi, I'm trying to connect to Elasticsearch using logstash and running into an TCP connection error. Below is my input plugin for logstash input { elasticsearch { hosts =\> \["https://esipAddress:9200"\] index =\> "tes… --- ## [Change path cluster](https://discuss.elastic.co/t/change-path-cluster/303610)
**Author:** [@bekk777](https://discuss.elastic.co/u/bekk777)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 3:39pm UTC](https://discuss.elastic.co/t/change-path-cluster/303610 "2022-04-29T15:39:14Z")
Hi everyone. Just one question about editing disk usage on Elasticsearch. On the existing server ELK, we added a newly attached disk and want to change disk usage, is it possible to use this new attached disk path or n… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=955) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=957)