# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=966 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 967 --- ## ["Unable to retrieve version information from Elasticsearch nodes. "](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852 "2022-04-21T15:49:41Z")
Trying to set up a small barebones (for now) 3 node cluster in Centos 7. Cluster appears to be up, but I can't connect kibana to it. I have installed kibana on one of the Elasticsearch nodes. Elasticsearch is running … --- ## [Add button links to dashboard nav via custom plugin](https://discuss.elastic.co/t/add-button-links-to-dashboard-nav-via-custom-plugin/302865)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 3\ **Last updated:** [April 21, 2022, 3:44pm UTC](https://discuss.elastic.co/t/add-button-links-to-dashboard-nav-via-custom-plugin/302865 "2022-04-21T15:44:56Z")
Hi, I need to add some global dashboard custom action buttons (top right below time filter"Refresh" button) , I'm able to create a new visualization type and add the button to the dashboard but I cant find a way to add … --- ## [Filebeat o365 error](https://discuss.elastic.co/t/filebeat-o365-error/302936)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:30pm UTC](https://discuss.elastic.co/t/filebeat-o365-error/302936 "2022-04-21T15:30:16Z")
Hello, we want to integrate office 365 with filebeat, we have activated the module and filled the config file as shown audit: enabled: true var.application\_id: "\*\*\*\*\*" var.tenants: - id: "\*\*\*\*\*\*\*" name: ".onmicros… --- ## [Correct way to use aliases?](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:06pm UTC](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931 "2022-04-21T15:06:57Z")
I am trying to improve the way I manage my indexes in Elasticsearch and am considering using aliases. But I want to make sure I understand the pattern properly. Right now I have some indexes that are grouped by year, and… --- ## [Watcher reporting mail attachment: Visualizations in PDF report not fully loaded](https://discuss.elastic.co/t/watcher-reporting-mail-attachment-visualizations-in-pdf-report-not-fully-loaded/302930)
**Author:** [@patricia\_kraft](https://discuss.elastic.co/u/patricia_kraft)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:05pm UTC](https://discuss.elastic.co/t/watcher-reporting-mail-attachment-visualizations-in-pdf-report-not-fully-loaded/302930 "2022-04-21T15:05:53Z")
Hi there, we are using automatically generated PDF reports to send out an email once a day with the PDF report (from one dashboard) as an attachment. This worked fine in version 7.5.2, but since we upgraded to 7.16.3 so… --- ## [How to get a service token with api/curl](https://discuss.elastic.co/t/how-to-get-a-service-token-with-api-curl/302929)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 3:00pm UTC](https://discuss.elastic.co/t/how-to-get-a-service-token-with-api-curl/302929 "2022-04-21T15:00:43Z")
how to get a service token with api/curl ? i know how to create. --- ## [Problem with Kibana - white page](https://discuss.elastic.co/t/problem-with-kibana-white-page/302830)
**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 2:45pm UTC](https://discuss.elastic.co/t/problem-with-kibana-white-page/302830 "2022-04-21T14:45:11Z")
Hello, I have install Elasticsearch, Kibana and Logstash and it was working. But after I needed to change the network of the stack ELK. So I have changed IP adress of my VM and change IP address in yaml file. I can c… --- ## [Kibana Showing partial data for Mulesoft API’s. Urgent help needed](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-api-s-urgent-help-needed/302922)
**Author:** [@surya4](https://discuss.elastic.co/u/surya4)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 2:08pm UTC](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-api-s-urgent-help-needed/302922 "2022-04-21T14:08:31Z")
We also have different Elastic servers where the ELK stack is hosted like Master node(3), Kibana Node(2), Ingest Node(2) and Data nodes(4). We have tested locally using Filebeat and there is no issue. Filebeat is parsin… --- ## [ELK Painless: count unique distinct occurrences](https://discuss.elastic.co/t/elk-painless-count-unique-distinct-occurrences/302582)
**Author:** [@angeloimm](https://discuss.elastic.co/u/angeloimm)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elk-painless-count-unique-distinct-occurrences/302582 "2022-04-21T14:00:27Z")
Hi there I'm using ELK stack version 7. What I need to do is to count the unique occorence of a value in my indexes. My indexes are created by WSO2 Identity Server version 5.10 and they are so defined: { "lo… --- ## [8.1 This dashboard is empty. You need additional privileges to edit this dashboard](https://discuss.elastic.co/t/8-1-this-dashboard-is-empty-you-need-additional-privileges-to-edit-this-dashboard/302913)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 1:07pm UTC](https://discuss.elastic.co/t/8-1-this-dashboard-is-empty-you-need-additional-privileges-to-edit-this-dashboard/302913 "2022-04-21T13:07:28Z")
I am refencing a dashboard in a custom panel in 8.1 using DashboardContainerInput interface. The dashboard displays "This dashboard is empty. You need additional privileges to edit this dashboard." (image below). This i… --- ## [Need assistance calculating CPU Busy from prometheus node exporter metric](https://discuss.elastic.co/t/need-assistance-calculating-cpu-busy-from-prometheus-node-exporter-metric/302910)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 12:50pm UTC](https://discuss.elastic.co/t/need-assistance-calculating-cpu-busy-from-prometheus-node-exporter-metric/302910 "2022-04-21T12:50:51Z")
Hello team, i currently have Grafana dashboard but considering that i try to learn ES as much as possible and have been using it for log aggregation for quite some time, i would like to switch to Kibana/ES to view metri… --- ## [Upgrade to 8.1.2 failing with unexpected folder encountered during data folder upgrade](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 9\ **Last updated:** [April 21, 2022, 12:36pm UTC](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767 "2022-04-21T12:36:10Z")
Hello, I upgraded 1 of the 2 data nodes in my 3 node cluster (3rd node is voting only and does not store any data) from 7.17.2 to 8.1.2. Post the upgrade, Elasticsearch service is crashing with the following error: Exc… --- ## [Windows Environment Variables not accessible when Logstash is run as a service](https://discuss.elastic.co/t/windows-environment-variables-not-accessible-when-logstash-is-run-as-a-service/302901)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 11:14am UTC](https://discuss.elastic.co/t/windows-environment-variables-not-accessible-when-logstash-is-run-as-a-service/302901 "2022-04-21T11:14:32Z")
I have used Windows environment variables in Logstash config file. Following command was used to create env variable: $env:MW\_Index = 'mw-test-index-temp' In my config file, I have called this index. mutate { add\_fie… --- ## [Logstash Elasticsearch Filter Lookup 99% not finding if End to close to Start?](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-99-not-finding-if-end-to-close-to-start/302695)
**Author:** [@Dan\_M](https://discuss.elastic.co/u/Dan_M)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 11:01am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-99-not-finding-if-end-to-close-to-start/302695 "2022-04-21T11:01:32Z")
Hi, I am trying to do the standard End items enrichment with the Start item details. filter{ if \[benchmarkType\] == "End" { elasticsearch { hosts =\> \["MY-IP:9200"\] index =\> "prod-\*" … --- ## [Yarn build results in "error Command failed with exit code 1." error](https://discuss.elastic.co/t/yarn-build-results-in-error-command-failed-with-exit-code-1-error/302597)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 10:54am UTC](https://discuss.elastic.co/t/yarn-build-results-in-error-command-failed-with-exit-code-1-error/302597 "2022-04-21T10:54:45Z")
Hi Experts, I am trying to build my cutome kibana pluging using yarn build and getting "error Command failed with exit code 1." error . Can someone please assist me on how I can fix it ? \[@kbn/optimizer/node\] GET error… --- ## [Logstash Unable to Retrieve License Info](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-info/302900)
**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 11:02am UTC](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-info/302900 "2022-04-21T11:02:42Z")
I have enabled SSL security with the password security as well on my Elasticsearch and Kibana. Whole cluster is behaving correctly as I have done this on ELK stack 7.13 as well. But Now while I am doing the same thing on… --- ## [Add\_field not working](https://discuss.elastic.co/t/add-field-not-working/302887)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 10:31am UTC](https://discuss.elastic.co/t/add-field-not-working/302887 "2022-04-21T10:31:10Z")
Hi, the following is my logstash conf file for passing a few sample audit log messages sample messages: type=SYSCALL msg=audit(1547800652.003:103): arch=c00000b7 syscall=200 success=no exit=-13 a0=c a1=ffffe65a3648 a2=… --- ## [Break down unknown number of iteration with same pattern](https://discuss.elastic.co/t/break-down-unknown-number-of-iteration-with-same-pattern/302878)
**Author:** [@julien34](https://discuss.elastic.co/u/julien34)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/break-down-unknown-number-of-iteration-with-same-pattern/302878 "2022-04-21T09:48:52Z")
Hello there ! I'm new to ELK and GROK filter, I look for a long time but cannot find a proper way to achieve what I want to do, so I'm asking here. I have log coming via filebeat, the "message" field containing my orig… --- ## [Metricbeat autodiscovery: use 'unique' with Prometheus exporters](https://discuss.elastic.co/t/metricbeat-autodiscovery-use-unique-with-prometheus-exporters/302707)
**Author:** [@Dali\_Ben\_amor](https://discuss.elastic.co/u/Dali_Ben_amor)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 9:34am UTC](https://discuss.elastic.co/t/metricbeat-autodiscovery-use-unique-with-prometheus-exporters/302707 "2022-04-21T09:34:35Z")
Metricbeat 7.16.2 Hi, I'm trying to scrape prometheus metrics of multiple pods on different nodes from the same metricbeat pod. Actually metricbeat is deployed as a daemonset and prometheus collection is done on node … --- ## [Cannot run bin/elasticsearch](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821)
**Author:** [@FARIDUN\_ISMAILOV](https://discuss.elastic.co/u/FARIDUN_ISMAILOV)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:32am UTC](https://discuss.elastic.co/t/cannot-run-bin-elasticsearch/302821 "2022-04-21T09:32:47Z")
bin/elasticsearch Exception in thread "main" java.lang.NullPointerException: Cannot invoke "org.apache.logging.log4j.core.config.AbstractConfiguration.getLoggerContext()" because the return value of "java.util.List.get(… --- ## [Best practice in using elasticClient with authentication in .net core](https://discuss.elastic.co/t/best-practice-in-using-elasticclient-with-authentication-in-net-core/302888)
**Author:** [@Or\_Komlosh](https://discuss.elastic.co/u/Or_Komlosh)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 9:28am UTC](https://discuss.elastic.co/t/best-practice-in-using-elasticclient-with-authentication-in-net-core/302888 "2022-04-21T09:28:00Z")
Hey, we are trying to create a POC for using Elasticsearch in one of our features. I couldn't find a proper example of how to use Elasticsearch in .netcore DI. what is the best life time for elasticClient? I manage to… --- ## [Using Windows ENV variables in Logstash](https://discuss.elastic.co/t/using-windows-env-variables-in-logstash/302883)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 9:23am UTC](https://discuss.elastic.co/t/using-windows-env-variables-in-logstash/302883 "2022-04-21T09:23:43Z")
I have set an environment variable in windows using Powershell with following command: $env:MW\_Index = 'mw-test-index' In my logstash.config file, I am trying to use this variable in the following way: mutate { add\_fi… --- ## [Can we disable displaying "(empty)" string when data is not present in table column - Top Hit Aggregation](https://discuss.elastic.co/t/can-we-disable-displaying-empty-string-when-data-is-not-present-in-table-column-top-hit-aggregation/302397)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 9:18am UTC](https://discuss.elastic.co/t/can-we-disable-displaying-empty-string-when-data-is-not-present-in-table-column-top-hit-aggregation/302397 "2022-04-21T09:18:41Z")
When we use "Top Hit" to display the value in column, in table/enhanced table visualization, if the value for the field is not present earlier we used to see just blank now we see a string called "empty" like shown belo… --- ## [Search Profiler in Kibana - Unable to Clear Cached Data](https://discuss.elastic.co/t/search-profiler-in-kibana-unable-to-clear-cached-data/302754)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 3\ **Last updated:** [April 21, 2022, 9:14am UTC](https://discuss.elastic.co/t/search-profiler-in-kibana-unable-to-clear-cached-data/302754 "2022-04-21T09:14:13Z")
I'm attempting to optimize a query using the Search Profiler in Kibana. I'm having issues as it appears ES keeps caching something so my first query is slow and subsequent ones are quick. I have attempted the following… --- ## [Logs Stream slow and timeouts](https://discuss.elastic.co/t/logs-stream-slow-and-timeouts/302873)
**Author:** [@Brash](https://discuss.elastic.co/u/Brash)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 9:10am UTC](https://discuss.elastic.co/t/logs-stream-slow-and-timeouts/302873 "2022-04-21T09:10:44Z")
Dear elastic community, we are facing some issues with Kibana. The problem started some time ago after an update/migration of our elastic stack. We had a basic elk server with the version 7.3.1. We migrated the indice… --- ## [Delete file logstash](https://discuss.elastic.co/t/delete-file-logstash/302314)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 8:47am UTC](https://discuss.elastic.co/t/delete-file-logstash/302314 "2022-04-21T08:47:57Z")
Hi, I have a small problem i have logs and i read it with filebeat filebeat.yml - type: log enabled: true paths: - D:\\elastic\_stack\\LOGS\\CMS\_LOGS\\\* fields: kafka\_topic: "kafka-topic-cms-test1" mult… --- ## [Maps - Customize Map Visualize](https://discuss.elastic.co/t/maps-customize-map-visualize/301971)
**Author:** [@RPaolo](https://discuss.elastic.co/u/RPaolo)\ **Replies:** 4\ **Last updated:** [April 21, 2022, 8:30am UTC](https://discuss.elastic.co/t/maps-customize-map-visualize/301971 "2022-04-21T08:30:22Z")
Would there be a way to visualize Italy as the second photo? kiabana version 7.5 1 2 --- ## [Is that a problem using Elasticsearch-dsl-py 7.4 with Elasticsearch version8?](https://discuss.elastic.co/t/is-that-a-problem-using-elasticsearch-dsl-py-7-4-with-elasticsearch-version8/302479)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 8:04am UTC](https://discuss.elastic.co/t/is-that-a-problem-using-elasticsearch-dsl-py-7-4-with-elasticsearch-version8/302479 "2022-04-21T08:04:38Z")
I am using Elasticsearch and Kibana version 7.17.0 and panning to upgrade version 8.y.z. My application use Elasticsearch and Elasticsearch DSL pyhton client with major version 7. I know that the latest version of dsl-… --- ## [Fix log4j ：upgrade ES version OR replace log4j.jar to 2.17.2](https://discuss.elastic.co/t/fix-log4j-upgrade-es-version-or-replace-log4j-jar-to-2-17-2/302786)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 7:48am UTC](https://discuss.elastic.co/t/fix-log4j-upgrade-es-version-or-replace-log4j-jar-to-2-17-2/302786 "2022-04-21T07:48:05Z")
At present, we have more than 500 Elasticsearch clusters, with thousands of nodes. The Elasticsearch versions are 6.3.2, 7.2 and 7.4. In order to solve the log4j vulnerability, if you choose to upgrade the Elasticsearch … --- ## [GET method not allowed after update in 7.16.2](https://discuss.elastic.co/t/get-method-not-allowed-after-update-in-7-16-2/302719)
**Author:** [@Docrom](https://discuss.elastic.co/u/Docrom)\ **Replies:** 2\ **Last updated:** [April 21, 2022, 7:44am UTC](https://discuss.elastic.co/t/get-method-not-allowed-after-update-in-7-16-2/302719 "2022-04-21T07:44:35Z")
Hello everyone, I have a script that generates a PNG from Kibana at a certain date when I click on a button on my website. For this purpose I use the POST URL but since I updated to 7.16.2 I get the following error mes… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=965) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=967)