# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=970 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 971 --- ## [Scroll context exceeding 500](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641)
**Author:** [@Abi\_Blista](https://discuss.elastic.co/u/Abi_Blista)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 8:01pm UTC](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641 "2022-04-18T20:01:33Z")
Im using python to pull large data from ES. When I tried to pull the data, Im getting this partucular issue scroll context exceeding 500. is there way to resolve this issue --- ## [Nest - Routing for multi tenant application](https://discuss.elastic.co/t/nest-routing-for-multi-tenant-application/302606)
**Author:** [@adrian.serban](https://discuss.elastic.co/u/adrian.serban)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:33pm UTC](https://discuss.elastic.co/t/nest-routing-for-multi-tenant-application/302606 "2022-04-18T18:33:12Z")
We try to index the data according to a Routing Key (which refers to the ID of a tenant, from a multi-tenant application) The data seems to be indexed as expected: However, searching by this Routing field does not w… --- ## [400 The plain HTTP request was sent to HTTPS port](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284)
**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\ **Replies:** 3\ **Last updated:** [April 18, 2022, 6:23pm UTC](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284 "2022-04-18T18:23:46Z")
Hi, I'm using python client only (have not installed Elasticsearch on my machine) and I'm trying to query kibana and I get following error message: Elasticsearch.exceptions.RequestError: RequestError(400, '\\r\\n400 The p… --- ## [Faield to start elastic search](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608)
**Author:** [@Paritosh\_Pandey](https://discuss.elastic.co/u/Paritosh_Pandey)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 4:37pm UTC](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608 "2022-04-18T16:37:24Z")
I am unable to start Elasticsearch, it shows code exited \ Elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/Elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Resu… --- ## [Error running winlogbeat setup on windows host](https://discuss.elastic.co/t/error-running-winlogbeat-setup-on-windows-host/302635)
**Author:** [@randyhaley](https://discuss.elastic.co/u/randyhaley)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 4:15pm UTC](https://discuss.elastic.co/t/error-running-winlogbeat-setup-on-windows-host/302635 "2022-04-18T16:15:25Z")
I am attempting to run the winlogbeat.exe setup -e command from my windows machine. ES/Kibana is in the AWS cloud and I am connecting via the public dns of my AWS instance. When I run the setup command, it states that th… --- ## [Logstash is not listening port 5044](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621)
**Author:** [@Meda\_Akshay](https://discuss.elastic.co/u/Meda_Akshay)\ **Replies:** 18\ **Last updated:** [April 18, 2022, 3:34pm UTC](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621 "2022-04-18T15:34:55Z")
Hi, Am new to Logstash, here my issue is logstash is not listening at port 5044, here is my filebeat configuration output.logstash configured as following # ------------------------------ Logstash Output -------------… --- ## [Harvester not started for new files in configured paths](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332)
**Author:** [@dchsueh](https://discuss.elastic.co/u/dchsueh)\ **Replies:** 7\ **Last updated:** [April 18, 2022, 3:19pm UTC](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332 "2022-04-18T15:19:48Z")
Hello, I have a problem I've verified in filebeat 6.8.3, 7.5.1, and 7.16.3 I have a filebeat.yml filebeat.inputs, type log, with three configured paths with \*\* in the middle portions, something like - /var/log/a/b/\*… --- ## [Get list of all indices using Elasticsearch Java API Client 7.17](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395)
**Author:** [@saurabhrs](https://discuss.elastic.co/u/saurabhrs)\ **Replies:** 6\ **Last updated:** [April 18, 2022, 2:28pm UTC](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395 "2022-04-18T14:28:33Z")
I am using Elasticsearch Java API Client 7.17 to perform operations on my cluster. I can not find a way to get list of all indices in my cluster using this API. I have found examples to achieve this using REST APIs but … --- ## [Run filebeat setup fail](https://discuss.elastic.co/t/run-filebeat-setup-fail/302626)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 2:18pm UTC](https://discuss.elastic.co/t/run-filebeat-setup-fail/302626 "2022-04-18T14:18:09Z")
Hi i just install elasticsearch and kibana on docker, i want to work with filebeat, so i followed the official documentation Run filebeat setup So i run this command: docker run docker.elastic.co/beats/filebeat:8.1.2 … --- ## [Elasticsearch - Bootstrap checks failing](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442 "2022-04-18T13:28:53Z")
Hello i want to install elk on docker, so i followed the official documentation Install Elasticsearch with Docker | Elasticsearch Guide \[8.1\] | Elastic So when i want to start Elasticsearch in Docker to get the passwor… --- ## [Same template created every minute](https://discuss.elastic.co/t/same-template-created-every-minute/302623)
**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 1:23pm UTC](https://discuss.elastic.co/t/same-template-created-every-minute/302623 "2022-04-18T13:23:39Z")
Hi, we are using Elasticsearch with Kibana and APM-Server for monitoring since two years. Since 3 weeks we are experiencing massive problems. First Kibana stopped due to a corrupted translog (TranslogCorruptedException)… --- ## [Displaying a signal element in Vega visualization within a Kibana dashboard](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562)
**Author:** [@mbsnider](https://discuss.elastic.co/u/mbsnider)\ **Replies:** 5\ **Last updated:** [April 18, 2022, 1:11pm UTC](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562 "2022-04-18T13:11:13Z")
I'm building my own visualizations in Vega, and I am adding signals to my Vega code using the "bind" option to have a "range" or "select" object that the user of my Kibana dashboard can use to customize the visualization… --- ## [Filebeat 8.1.2 - cisco module is not creating neither index nor data stream after I deleted the first data stream, index template, index pattern and pipeline to start all over](https://discuss.elastic.co/t/filebeat-8-1-2-cisco-module-is-not-creating-neither-index-nor-data-stream-after-i-deleted-the-first-data-stream-index-template-index-pattern-and-pipeline-to-start-all-over/302359)
**Author:** [@Adrian\_Gtz](https://discuss.elastic.co/u/Adrian_Gtz)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-8-1-2-cisco-module-is-not-creating-neither-index-nor-data-stream-after-i-deleted-the-first-data-stream-index-template-index-pattern-and-pipeline-to-start-all-over/302359 "2022-04-18T12:56:41Z")
I enabled cisco module and set up filebeat.yml to output Elasticsearch with user and password. At the begining everything went well. But I decided to start all over and when I deleted the data stream, related index templ… --- ## [Snapshot Backup is not deleting Across the ELK Cluster](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620)
**Author:** [@Abhishek\_Pratap\_Sin1](https://discuss.elastic.co/u/Abhishek_Pratap_Sin1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 12:34pm UTC](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620 "2022-04-18T12:34:40Z")
Hi Team, I have three nodes ELK-Cluster, I have created an SLM policy to take a Snapshot backup on the daily basis and delete the snapshot backup after three days on the cluster \[Issue\]: The snapshot backup is deleted… --- ## [Adding a new field with phonetic(metaphone) value in elasticsearch index with logstash](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614)
**Author:** [@saiyad\_arshad\_qadir](https://discuss.elastic.co/u/saiyad_arshad_qadir)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614 "2022-04-18T10:44:00Z")
I am new to Elasticsearch and trying to index phonetic value(metaphone) into my Elasticsearch index using logstash. index example: { "\_id" : "lRBYHIAB4PMEhuD9IXcF", "name":"KEVIN GENTLE" } and when we index it, i am s… --- ## [My Mapping with python is not working](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 8\ **Last updated:** [April 18, 2022, 10:34am UTC](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545 "2022-04-18T10:34:02Z")
Hello community, I was trying to upload a simple csv-File but unfortunatelty my Mapping is not working. All my fields are still "keywords". What am I missing? def csv\_reader(filename,indexname): # connection to Ela… --- ## [CPU becomes overloaded when rebooting OS](https://discuss.elastic.co/t/cpu-becomes-overloaded-when-rebooting-os/302612)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 10:32am UTC](https://discuss.elastic.co/t/cpu-becomes-overloaded-when-rebooting-os/302612 "2022-04-18T10:32:58Z")
We have CentOS6.9 with Filebeat 7.12.1 installed. It has been working normally, but the CPU load increased dramatically when the OS was rebooted. As soon as we stopped Filebeat, the CPU load dropped, so we believe that… --- ## [Elastic APM with .Net 5.0](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596 "2022-04-18T07:12:35Z")
Hi, I am trying to instrument my sample dotnet application which is .net 5.0 version with elastic APM. While I am able to get the transactions and their respective stacktraces, the traces captured seems to be intermitte… --- ## [Does ES have the 99th percentile time of request?](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557)
**Author:** [@gaojiabao1991](https://discuss.elastic.co/u/gaojiabao1991)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 8:49am UTC](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557 "2022-04-18T08:49:01Z")
Hello everyone, I'm new to ES, and I'm recently replacing our company's Solr with ES. Our current monitoring is to use the elasticsearch-exporter provided by the prometheus community to record the system operation infor… --- ## [Unable to retrieve license information from license server {:message=\>"No Available connections"}](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175)
**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\ **Replies:** 7\ **Last updated:** [April 18, 2022, 7:07am UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175 "2022-04-18T07:07:00Z")
Hello team, I'm new to Logstash when im trying to run a logstash i getting the error like this anyone can you please look on it. \[2022-04-11T19:19:07,223\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retriev… --- ## [Unable to use of beats (here journalbeat) with AWS ElasticSearch 7.10](https://discuss.elastic.co/t/unable-to-use-of-beats-here-journalbeat-with-aws-elasticsearch-7-10/301062)
**Author:** [@obourdon](https://discuss.elastic.co/u/obourdon)\ **Replies:** 3\ **Last updated:** [April 18, 2022, 6:58am UTC](https://discuss.elastic.co/t/unable-to-use-of-beats-here-journalbeat-with-aws-elasticsearch-7-10/301062 "2022-04-18T06:58:54Z")
Reopening this as my previous entry was closed for what I consider as a wrong reason not leading to any helpful answer/solution As detailed in Unable to use of beats (here journalbeat) with AWS ElasticSearch 7.x · Issu… --- ## [Elastic Lucene vs KQL vs DSL vs EQL](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588)
**Author:** [@Esha](https://discuss.elastic.co/u/Esha)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588 "2022-04-18T06:23:11Z")
Hi Team, Can you please share when should we use the lucene query, KQL, DSL and EQL query types. For rules creation is it best to use the lucene query or KQL query? Thank you --- ## [One standalone node formed in monitoring cluster](https://discuss.elastic.co/t/one-standalone-node-formed-in-monitoring-cluster/302422)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 6:22am UTC](https://discuss.elastic.co/t/one-standalone-node-formed-in-monitoring-cluster/302422 "2022-04-18T06:22:00Z")
Hello team, One standalone cluster formed when we upgraded from 7.2 to 7.16.3 in moniotring cluster. Does any one have any idea how to remove this --- ## [Steps to integrate App connect with Elasticserach](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593)
**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 5:10am UTC](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593 "2022-04-18T05:10:47Z")
Hello Team, Please help me to integrate ELK stack with IBM app connect. If any links or documents are there please let me know. --- ## [Error setting up Dashboards with auditbeat](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591)
**Author:** [@b\_tolu](https://discuss.elastic.co/u/b_tolu)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 4:41am UTC](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591 "2022-04-18T04:41:58Z")
hi so i would run the background of all i have done i am trying to create a SIEM , so I installed Elasticsearch,kibana, and auditbeat . I have made all the right settings for me to be able to startup. My issue now is tha… --- ## [Multiple logstash indexes to be created from multiple application log files](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 4:01am UTC](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399 "2022-04-18T04:01:13Z")
Hello, Still considerably new to ELK, I have successfully set up Logstash index for one of my application log files as below conf file: server1:/etc/logstash/conf.d # cat /etc/logstash/conf.d/accessinfologs.conf input … --- ## [How to change field types in xml filter](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583)
**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 11:13pm UTC](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583 "2022-04-17T23:13:57Z")
i have this xml as an example \ \ **Author:** [@jolpol\_9090](https://discuss.elastic.co/u/jolpol_9090)\ **Replies:** 0\ **Last updated:** [April 17, 2022, 6:38pm UTC](https://discuss.elastic.co/t/cannot-connect-logstash-in-filebeat-in-my-spring-boot-elk/302578 "2022-04-17T18:38:04Z") I've tried to implement a Spring Boot Elk running with Docker. The reason I've tried is to check logs in Kibana but I have a problem which I couldn't fix it. I cannot see any logs when I work with Docker. I think ther… --- ## [Disabling geoip downloader is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 5\ **Last updated:** [April 17, 2022, 4:31pm UTC](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523 "2022-04-17T16:31:13Z")
RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz. It is fully functional. I tried to disable geoip d… --- ## [Unable to create mapping of an index through Java code](https://discuss.elastic.co/t/unable-to-create-mapping-of-an-index-through-java-code/302180)
**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\ **Replies:** 3\ **Last updated:** [April 17, 2022, 4:08pm UTC](https://discuss.elastic.co/t/unable-to-create-mapping-of-an-index-through-java-code/302180 "2022-04-17T16:08:56Z")
I'm trying to create mapping from Java code by request.mapping(parameter) and request.source(parameter) but every time I'm getting "Mapper\_parsing\_exception", can anyone please help me out if they have any context about … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=969) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=971)