# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=962 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 963 --- ## [Server crashed with status code 1](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206)
**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\ **Replies:** 11\ **Last updated:** [April 26, 2022, 7:34am UTC](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206 "2022-04-26T07:34:14Z")
I'm running kibana 7.14.2 on Linux from my localhost and with wazuh installed, however the server keep crashing after some time functioning properly. I have tried different approaches including limit the memory use from … --- ## [No ML nodes with sufficient capacity](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity/303150)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 7:27am UTC](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity/303150 "2022-04-26T07:27:40Z")
Hello ! I am trying to create a job that handles a large amount of information and the recommended memory is 19 GB. I currently have 2 ml nodes with 64gb each. When executing the job with that memory, the following erro… --- ## [Can't use average agg on number lower than 1](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091)
**Author:** [@xxk](https://discuss.elastic.co/u/xxk)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 7:07am UTC](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091 "2022-04-26T07:07:48Z")
I have a field pctr which values are all between (0,1). But i can't use average agg on pctr in visualize --- ## [Jdbc streaming no records returned even when there are records](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222)
**Author:** [@James\_Valan](https://discuss.elastic.co/u/James_Valan)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 6:41am UTC](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222 "2022-04-26T06:41:39Z")
I am getting no records sometimes but the db has records. (using JDBC Streaming) is there a timeout issue? --- ## [Elasticsearch 6.8 crear vista de dos indices](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953 "2022-04-26T06:15:28Z")
Hola, necesitaría crear una vista o índice que una mediante un field dos índices diferentes. Es posible? como puedo hacerlo? Gracias, un saludo Javier. --- ## [I tried to upgrade the Elasticsearch to 7.16.2 and it’s working fine but Logstash upgrade to 7.16.2 still not working with upgraded elastic. I am getting below error with it, I tried to troubleshoot the issue but it’s still the same](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216)
**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216 "2022-04-26T06:15:08Z")
\[2022-04-22T04:24:45,425\]\[WARN \]\[deprecation.logstash.filters.json\] Relying on default value of pipeline.ecs\_compatibility, which may change in a future major release of Logstash. To avoid unexpected changes when upgradi… --- ## [Anomaly Detection Categorization: Kibana Signs used for Severities(warning, minor, major, critical)](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-signs-used-for-severities-warning-minor-major-critical/303039)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 4\ **Last updated:** [April 26, 2022, 5:59am UTC](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-signs-used-for-severities-warning-minor-major-critical/303039 "2022-04-26T05:59:51Z")
Hi, I am using Elasticsearch 8.1.0 and kibana 8.1.0 I have created a Categorization job in kibana. As input, I have given the index field which contains the log messages. After the job gets completed processing, I can… --- ## [How to pull AZURE APP SERVICE logs to ELK](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115)
**Author:** [@vinayborra](https://discuss.elastic.co/u/vinayborra)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 5:18am UTC](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115 "2022-04-26T05:18:40Z")
Hi, From last two days, I am facing to find out how to pull azure app service logs to local server ELK. I didn't find any supported links. Can you please help on this. Thanks in advance. --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/302698)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 3:51am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/302698 "2022-04-26T03:51:31Z")
ES:7.10.2 this is my error log： \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\] would be \[30380624822/28.2gb\], which is larger than the limit of \[28975929753/26.9gb\], real usage: \[30380571432/28.2gb\],… --- ## [Log4jHotPatchFat.jar IllegalAccessError](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 3:44am UTC](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209 "2022-04-26T03:44:09Z")
Hi, We recently updated our Amazon AMI to pickup a newer version and after recycling our nodes to re-deploy Elasticsearch 7.16.3 we started seeing the following exception. Is this a known issue and something with a rec… --- ## [What is the impact if we increase max buckets value](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 2:55am UTC](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189 "2022-04-26T02:55:06Z")
Hi, i just wanna know what is the impact on elastic if i increase max buckets value to a higher number. our grafana getting an error "unkown elastic error" and what we found is grafana require buckets more than the defa… --- ## [Field Collisions](https://discuss.elastic.co/t/field-collisions/302798)
**Author:** [@Hummellt](https://discuss.elastic.co/u/Hummellt)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:57am UTC](https://discuss.elastic.co/t/field-collisions/302798 "2022-04-26T01:57:06Z")
Hi, this is my first time working with elastic so i think im missing something. Im trying to setup the Elastic Stack to analyze Cowrie Logs. Problem is there are different sources for the Input field. In the Cowrie Lo… --- ## [What is the maximum number of indices allowed in elasticsearch?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793)
**Author:** [@raqeeb](https://discuss.elastic.co/u/raqeeb)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793 "2022-04-26T01:39:32Z")
I am using MySQL for storing data in my software. We have to generate hundreds of reports using the data and it is taking more time when the size of data in increasing. For some reports it is taking 1 or 2 minutes. So we… --- ## [Limit the Transform scope based on timestamp](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 3:30pm UTC](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832 "2022-04-20T15:30:31Z")
Hi! Supposedly I have logs, with timestamp for each one of them. Those logs can be group by a few dozens and describe a "session", which can take between 1 second - 1 minute. I currently have a Transform who is groupi… --- ## [Metricbeat 8.1.1 windows service does not startup](https://discuss.elastic.co/t/metricbeat-8-1-1-windows-service-does-not-startup/302816)
**Author:** [@tim135](https://discuss.elastic.co/u/tim135)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:36am UTC](https://discuss.elastic.co/t/metricbeat-8-1-1-windows-service-does-not-startup/302816 "2022-04-26T01:36:03Z")
Hi, I'm trying to deploy metrics beat agent 8.1.1 using ansible playbook on our servers. But the service "metricbeat" does not start up. --- ## [Help create ILM policy](https://discuss.elastic.co/t/help-create-ilm-policy/302876)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:34am UTC](https://discuss.elastic.co/t/help-create-ilm-policy/302876 "2022-04-26T01:34:41Z")
Good day! Please advice! I have a couple of indices - filebeat-current and filebeat-old I need to create ILM policy, which will copy data that is more than 7 days old from filebeat-current to filebeat-old. New incoming… --- ## [Custom path for elasticsearch.yml, kibana.yml and logstash.yml](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:24am UTC](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895 "2022-04-26T01:24:53Z")
Hello, I have installed ELK stack on my test server using the default installation options and have been able to set up an end to end test system working. However now, I have a new requirement to change the default ins… --- ## [Logstash configuration from elk cloud](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961)
**Author:** [@Jesus\_Leguizamon](https://discuss.elastic.co/u/Jesus_Leguizamon)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:15am UTC](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961 "2022-04-26T01:15:29Z")
How can download agent logstash from my elk cloud, like Elasticsearch for easy setup, regards --- ## [I got received plaintext http traffic on an https channel, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973)
**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:13am UTC](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973 "2022-04-26T01:13:41Z")
i got this error on Elasticsearch 8.1.3 , how can i solve it i see many solutions but it doesn't work here is the output of the terminal when i go ot "http://localhost:9200/" it shows no data come and on the terminal i … --- ## [Logstash / Elastic CVE-2022-21449](https://discuss.elastic.co/t/logstash-elastic-cve-2022-21449/302962)
**Author:** [@saberph](https://discuss.elastic.co/u/saberph)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 7:52pm UTC](https://discuss.elastic.co/t/logstash-elastic-cve-2022-21449/302962 "2022-04-21T19:52:14Z")
Hi, Are Elasticsearch or Logstash affected by CVE-2022-21449 ? The bundle jdk v16 seems vulnerable. /usr/share/Elasticsearch/jdk/bin/java is not yet updated to fix the CVE. Thanks. --- ## [Some question about soft\_deletes and Reindex API](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765)
**Author:** [@zhangzongdong](https://discuss.elastic.co/u/zhangzongdong)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 1:12am UTC](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765 "2022-04-26T01:12:31Z")
Two questions How to use reindex API with zero downtime. Could the index setting of index.soft\_deletes\_enabled be non-dynamic and replace reindex API with setting index.soft\_deletes\_enabled to true for a exist index wit… --- ## [Need help with pfx certificate installation on Windows Server 2016](https://discuss.elastic.co/t/need-help-with-pfx-certificate-installation-on-windows-server-2016/302954)
**Author:** [@vikas.shirke](https://discuss.elastic.co/u/vikas.shirke)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 6:00pm UTC](https://discuss.elastic.co/t/need-help-with-pfx-certificate-installation-on-windows-server-2016/302954 "2022-04-21T18:00:21Z")
Hi All, Any help would be appreciated! I have downloaded latest 8.1.2 Elasticsearch version on my windows Server 2016 (.zip file). After extracting it, I tried creating certificates by following below two commands with… --- ## [Could not connect to SQL DB using JDBC in Logstash](https://discuss.elastic.co/t/could-not-connect-to-sql-db-using-jdbc-in-logstash/302990)
**Author:** [@Sakshi.Clover](https://discuss.elastic.co/u/Sakshi.Clover)\ **Replies:** 0\ **Last updated:** [April 22, 2022, 7:33am UTC](https://discuss.elastic.co/t/could-not-connect-to-sql-db-using-jdbc-in-logstash/302990 "2022-04-22T07:33:12Z")
Hi All, I am trying to connect SQL DB with Logstash. Getting exception please refer attachment Below is the Logstash code input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://server;databaseName=… --- ## [Elasticsearch Cluster Configuration when upgrading ES to 7.16.2](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042)
**Author:** [@PAVK\_PRASAD](https://discuss.elastic.co/u/PAVK_PRASAD)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:08am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042 "2022-04-26T01:08:13Z")
Hi Team, Required "Elasticsearch.yml" configuration for cluster (i.e 2 nodes) when upgrading ES to 7.16.2 from 7.3.2. Is below two properties are enough for cluster xpack.security.enabled: true xpack.security.transpo… --- ## [How to create a user with the security API in ElasticSearch create a user with Node JS Client?](https://discuss.elastic.co/t/how-to-create-a-user-with-the-security-api-in-elasticsearch-create-a-user-with-node-js-client/303017)
**Author:** [@Saurabh24](https://discuss.elastic.co/u/Saurabh24)\ **Replies:** 0\ **Last updated:** [April 22, 2022, 10:39am UTC](https://discuss.elastic.co/t/how-to-create-a-user-with-the-security-api-in-elasticsearch-create-a-user-with-node-js-client/303017 "2022-04-22T10:39:45Z")
The user is not getting created when the security API is used to create a user with the help of Node JS client. Can you please specify a code snippet or an example? --- ## [Scale down cluster recommendations](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123)
**Author:** [@elementcz](https://discuss.elastic.co/u/elementcz)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:02am UTC](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123 "2022-04-26T01:02:50Z")
Hello, we made a demo setup of Elasticsearch cluster on k8s consisting of 2 ingest nodes, 3 data nodes and 3 master nodes. As we bought the platinum license valid for only 3 nodes now we will need to scale cluster down … --- ## [Elasticsearch index shard size expanding/contracting by more than 75% of size](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149)
**Author:** [@Vamsi\_Htc](https://discuss.elastic.co/u/Vamsi_Htc)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:01am UTC](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149 "2022-04-26T01:01:13Z")
We run cluster on 5.6.3 , a 45 node cluster with single replica and shard size is around 70 GB . On some occasions shard size is expanding more than 75% of usual size and reaching to 120GB . This is causing diskspace hi… --- ## [Elastic Index is getting delete automatically without any policy configuration in Amazon opensearch service](https://discuss.elastic.co/t/elastic-index-is-getting-delete-automatically-without-any-policy-configuration-in-amazon-opensearch-service/303153)
**Author:** [@Mayur\_Jain2](https://discuss.elastic.co/u/Mayur_Jain2)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 12:59am UTC](https://discuss.elastic.co/t/elastic-index-is-getting-delete-automatically-without-any-policy-configuration-in-amazon-opensearch-service/303153 "2022-04-26T00:59:28Z")
We have setup Elasticsearch engine in amazon open service. Some how multiple times around 60 days of gaps , all indexes got deleted automatically. We are not able to find any configuration or solution for preventing the … --- ## [7.9.3 Elasticsearch Installation Error](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175)
**Author:** [@Parvi](https://discuss.elastic.co/u/Parvi)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:57am UTC](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175 "2022-04-26T00:57:17Z")
I am getting this error tryin to install Elasticsearch 7.9.3 on my Windows system. Please suggest. Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/logging/log4j/core/config/properties/PropertiesCon… --- ## [Elasticsearch RAM remains busy. Elasticsearch version 6.3.0](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985)
**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 12:49am UTC](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985 "2022-04-26T00:49:47Z")
Elasticsearch consumes a lot of memory during load testing. But the main problem is that after the termination of the load testing, the RAM remains busy. Elasticsearch version 6.3.0. What could be the problem? What clari… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=961) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=963)