# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=971 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 972 --- ## [Mantain source IP TCP Output](https://discuss.elastic.co/t/mantain-source-ip-tcp-output/302556)
**Author:** [@SecRobe](https://discuss.elastic.co/u/SecRobe)\ **Replies:** 6\ **Last updated:** [April 17, 2022, 3:26pm UTC](https://discuss.elastic.co/t/mantain-source-ip-tcp-output/302556 "2022-04-17T15:26:45Z")
Hello, I'm absolutely newbie in Logstash. I'm using Logstash 6.2.3 with a simple input filter (TCP and UDP) and Syslog output, the problem with syslog output (as we know) it's it adds the "logstash" header, I'm trying t… --- ## [Value too large to output (9971 bytes)! First 255 chars are](https://discuss.elastic.co/t/value-too-large-to-output-9971-bytes-first-255-chars-are/302449)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 2\ **Last updated:** [April 17, 2022, 1:56pm UTC](https://discuss.elastic.co/t/value-too-large-to-output-9971-bytes-first-255-chars-are/302449 "2022-04-17T13:56:50Z")
Hello All, I got the error below while parsing through logstash. \[2022-04-14T16:46:53,545\]\[WARN \]\[logstash.filters.grok \]\[main\]\[71f87e3c7ed04afa020468f007ac1a64411b0298a6452730ffc54f56f8121e61\] Timeout executing gro… --- ## [Correlating fields between 2 different logs/indices](https://discuss.elastic.co/t/correlating-fields-between-2-different-logs-indices/302294)
**Author:** [@cnwdoug23](https://discuss.elastic.co/u/cnwdoug23)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 8:59am UTC](https://discuss.elastic.co/t/correlating-fields-between-2-different-logs-indices/302294 "2022-04-17T08:59:00Z")
Hi I m trying to correlate different logs/indices based on a certain fields. Unfortunately the target field in these logs are not the same naming. I have found a way creating runtime field to rename the field to sync up … --- ## [How to index CSV files with big number of columns/fields](https://discuss.elastic.co/t/how-to-index-csv-files-with-big-number-of-columns-fields/302555)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 3:19pm UTC](https://discuss.elastic.co/t/how-to-index-csv-files-with-big-number-of-columns-fields/302555 "2022-04-16T15:19:19Z")
Hi all, We have a lot of csv files with varied number of columns. The majority just have few columns but some have more than 1000 columns. At first we decided to consider each column as a field but the index.mapping.tot… --- ## [Using token to enrol kibana without a local browser](https://discuss.elastic.co/t/using-token-to-enrol-kibana-without-a-local-browser/302426)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 6\ **Last updated:** [April 17, 2022, 6:53am UTC](https://discuss.elastic.co/t/using-token-to-enrol-kibana-without-a-local-browser/302426 "2022-04-17T06:53:02Z")
Hi, I have two virtual machines, one running Elasticsearch, one running kibana. I have generated a token to enrol kibana, but have been unable to apply it. I start kibana and can see the link generated to apply the to… --- ## [Handle big numbers in elasticsearch](https://discuss.elastic.co/t/handle-big-numbers-in-elasticsearch/302535)
**Author:** [@max4b](https://discuss.elastic.co/u/max4b)\ **Replies:** 4\ **Last updated:** [April 17, 2022, 6:34am UTC](https://discuss.elastic.co/t/handle-big-numbers-in-elasticsearch/302535 "2022-04-17T06:34:31Z")
Hi, I need to store big ints that can have more than 20 numbers. I tried with long and double in the mappings for my numeric fields, but none of them work. I can't put them in text fields either, because that doesn't al… --- ## [Elasticsearch on a virtual machine do or dont?](https://discuss.elastic.co/t/elasticsearch-on-a-virtual-machine-do-or-dont/302509)
**Author:** [@licensebypass](https://discuss.elastic.co/u/licensebypass)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-on-a-virtual-machine-do-or-dont/302509 "2022-04-17T06:20:15Z")
Hello everybody, I've been assigned the task of evaluating a few unused machines in a corporate network for the sole purpose of finding a place to setup Elasticsearch for a medium to large Magento installation, after ext… --- ## [Logstash Http poller plugin for JIRA](https://discuss.elastic.co/t/logstash-http-poller-plugin-for-jira/302568)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 0\ **Last updated:** [April 17, 2022, 5:39am UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin-for-jira/302568 "2022-04-17T05:39:25Z")
Hello Guys I want one solution I want JIRA Issue Tickete all record create update delete exapand comment etc. all thing I want to add into Elasticsearch using via http\_poller plugin how can I achive that and what filt… --- ## [EMPTY\_BYTE\_ARRAY error for for log4j configuration file after update](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 7:40pm UTC](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560 "2022-04-16T19:40:36Z")
I just did a full system update for my Linux machine and now have this error when trying to start the Elasticsearch service: Apr 14 09:58:38 ELK-Stack.uhtasi.local systemd-entrypoint\[16746\]: Exception in thread "main" j… --- ## [Filebeat load json file like bulk mode](https://discuss.elastic.co/t/filebeat-load-json-file-like-bulk-mode/302504)
**Author:** [@walid\_louis](https://discuss.elastic.co/u/walid_louis)\ **Replies:** 7\ **Last updated:** [April 16, 2022, 6:24pm UTC](https://discuss.elastic.co/t/filebeat-load-json-file-like-bulk-mode/302504 "2022-04-16T18:24:05Z")
Hey Everybody, i have worked with Elasticsearch on inserting data with the \_bulk mode with the Api(json ) , and now i want to insert data with the Filebeat loading file with the same json used with bulk mode..... and h… --- ## [What is the correct way to start up elasticsearch & kibana and connect them under docker swarm](https://discuss.elastic.co/t/what-is-the-correct-way-to-start-up-elasticsearch-kibana-and-connect-them-under-docker-swarm/302551)
**Author:** [@UchihaYuki](https://discuss.elastic.co/u/UchihaYuki)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 10:57am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-start-up-elasticsearch-kibana-and-connect-them-under-docker-swarm/302551 "2022-04-16T10:57:48Z")
I will post most relevant info from my docker-compose.yml. Please look at the following: services: es-1: hostname: es-1 environment: - ELASTIC\_PASSWORD=${ADMIN\_PASSWORD} - node.name=es-1 - cl… --- ## [Losgtash Ruby split nested fields as new field](https://discuss.elastic.co/t/losgtash-ruby-split-nested-fields-as-new-field/302539)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 2\ **Last updated:** [April 16, 2022, 2:35pm UTC](https://discuss.elastic.co/t/losgtash-ruby-split-nested-fields-as-new-field/302539 "2022-04-16T14:35:25Z")
Hi, I have below type of events. I m looking to split nested field (group\_kpi\_value) and trying to store in new field. kpi\_name=E & kpi\_value=511871 per chunk. Im able to split single event in to multiple events wi… --- ## [Unable to install & enroll fleet server - v8.1.2](https://discuss.elastic.co/t/unable-to-install-enroll-fleet-server-v8-1-2/302553)
**Author:** [@jdswifty](https://discuss.elastic.co/u/jdswifty)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 2:17pm UTC](https://discuss.elastic.co/t/unable-to-install-enroll-fleet-server-v8-1-2/302553 "2022-04-16T14:17:09Z")
Hi, having some issues getting our first fleet server up & running using 8.1.2 on Windows followed the guided process from Kibana but the install fails each time. It doesnt even look like its getting to the point where… --- ## [CSV file uploading error](https://discuss.elastic.co/t/csv-file-uploading-error/302552)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 2\ **Last updated:** [April 16, 2022, 12:03pm UTC](https://discuss.elastic.co/t/csv-file-uploading-error/302552 "2022-04-16T12:03:20Z")
Hello, I am using ES 7.10 and tried to upload a csv file, so I can make a dashboard in Kibana. But unfortunately I get this error. My csv file looks like this: My Mapping looks like this: and this is the error: … --- ## [How to group docs by latest doc and run aggregation on the group in elastic search?](https://discuss.elastic.co/t/how-to-group-docs-by-latest-doc-and-run-aggregation-on-the-group-in-elastic-search/302524)
**Author:** [@Adil\_Ismail](https://discuss.elastic.co/u/Adil_Ismail)\ **Replies:** 2\ **Last updated:** [April 16, 2022, 11:10am UTC](https://discuss.elastic.co/t/how-to-group-docs-by-latest-doc-and-run-aggregation-on-the-group-in-elastic-search/302524 "2022-04-16T11:10:25Z")
Hi , I need to get all clients under a partnerId & since there would be many clients I need to group the clients by clientId,latest reportDate and run some aggregations . Index data is like below - \[ { partnerId:… --- ## [How to update a document in NEST whose document ID (which is autogenerated) is not known?](https://discuss.elastic.co/t/how-to-update-a-document-in-nest-whose-document-id-which-is-autogenerated-is-not-known/302544)
**Author:** [@Tanveer\_Khan](https://discuss.elastic.co/u/Tanveer_Khan)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 9:06am UTC](https://discuss.elastic.co/t/how-to-update-a-document-in-nest-whose-document-id-which-is-autogenerated-is-not-known/302544 "2022-04-16T09:06:54Z")
\[Route("api/CancelSlotAppointment")\] \[HttpGet\] public string CancelSlotAppointment(string SlotID, bool Cancel) { var uri = new Uri("http://localhost:9200"); var settings = new ConnectionSettings(uri); var client = … --- ## [Cacert can not access credentials logstash](https://discuss.elastic.co/t/cacert-can-not-access-credentials-logstash/302536)
**Author:** [@darguello](https://discuss.elastic.co/u/darguello)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 7:07am UTC](https://discuss.elastic.co/t/cacert-can-not-access-credentials-logstash/302536 "2022-04-16T07:07:19Z")
Hi! I am trying to deploy a cluster with 3 Elasticsearch nodes and both Kibana and Logstash. Moreover, the communication between them must be protected. In order to do so, I have followed the tutorial where it is descri… --- ## [Cluster going read only, trying to understand why](https://discuss.elastic.co/t/cluster-going-read-only-trying-to-understand-why/302502)
**Author:** [@graphman](https://discuss.elastic.co/u/graphman)\ **Replies:** 4\ **Last updated:** [April 16, 2022, 5:40am UTC](https://discuss.elastic.co/t/cluster-going-read-only-trying-to-understand-why/302502 "2022-04-16T05:40:10Z")
Hi, I have a really simple setup with a cluster of 2 nodes, and a really small number of documents (\<20k). But it's the second time my cluster goes to read only mode and I can't understand why. I've plenty of storage l… --- ## [Logstash 8.1 configuration with elasticsearch](https://discuss.elastic.co/t/logstash-8-1-configuration-with-elasticsearch/302533)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 2:53am UTC](https://discuss.elastic.co/t/logstash-8-1-configuration-with-elasticsearch/302533 "2022-04-16T02:53:43Z")
Hello every body, This is my first configuraton of an elk stack 8.1 with autoconfiguration enabled. My cluster is composed of 3 Elasticsearch nodes and a kibana master. I want to configure logstash to index logs to E… --- ## [Checking log parsing using the Simulate API](https://discuss.elastic.co/t/checking-log-parsing-using-the-simulate-api/302518)
**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\ **Replies:** 10\ **Last updated:** [April 15, 2022, 11:58pm UTC](https://discuss.elastic.co/t/checking-log-parsing-using-the-simulate-api/302518 "2022-04-15T23:58:17Z")
Disclaimer: As with the OP of the linked thread, I too am learning but the Simulate API is a little confusing to me so apologies for my noobiness. Thank you in advance for your insights and feedback. In this thread ES … --- ## [Overriding default jvm options is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/overriding-default-jvm-options-is-not-working-elastic-7-16-2-and-java-11/302525)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:04pm UTC](https://discuss.elastic.co/t/overriding-default-jvm-options-is-not-working-elastic-7-16-2-and-java-11/302525 "2022-04-15T21:04:58Z")
RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz and it is fully functional. I tried to override defa… --- ## [How to import syslog data into logstash](https://discuss.elastic.co/t/how-to-import-syslog-data-into-logstash/302521)
**Author:** [@trubeat\_elk](https://discuss.elastic.co/u/trubeat_elk)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 8:19pm UTC](https://discuss.elastic.co/t/how-to-import-syslog-data-into-logstash/302521 "2022-04-15T20:19:04Z")
Hello , I am newbie in ELK.This is the first time I am working on ELK .I want to know how to import syslog data into Logtash and then see that data in Kibana. Sample events looks like below. date/time host… --- ## [Kibana Maps features not displaying (failed net::ERR\_CONTENT\_DECODING\_FAILED)](https://discuss.elastic.co/t/kibana-maps-features-not-displaying-failed-net-err-content-decoding-failed/302424)
**Author:** [@quentin.renoux](https://discuss.elastic.co/u/quentin.renoux)\ **Replies:** 7\ **Last updated:** [April 15, 2022, 6:38pm UTC](https://discuss.elastic.co/t/kibana-maps-features-not-displaying-failed-net-err-content-decoding-failed/302424 "2022-04-15T18:38:06Z")
Hi, All layers on my Kibana maps are reporting No result found. with the minusInCircle icon from EUI (Elastic UI Framework | Elastic UI Framework). When I use the term "features", it is in reference of the Elastic Guid… --- ## [Contribute to Elastic Tech Blog](https://discuss.elastic.co/t/contribute-to-elastic-tech-blog/302490)
**Author:** [@EmersonDing](https://discuss.elastic.co/u/EmersonDing)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 5:21pm UTC](https://discuss.elastic.co/t/contribute-to-elastic-tech-blog/302490 "2022-04-15T17:21:35Z")
Is https://www.elastic.co/blog welcome blog submission from outside of Elastic? We've ran into some interesting issues for the past few years, and thought it'll be useful to share the experience. Elastic blog will be an … --- ## ['suggest\_mode' =\> 'always' does not return suggestion's full word query](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268)
**Author:** [@jacreich](https://discuss.elastic.co/u/jacreich)\ **Replies:** 8\ **Last updated:** [April 15, 2022, 4:49pm UTC](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268 "2022-04-15T16:49:29Z")
Hello, I am running an suggestions query using Elasticsearch v5.5. When looking for a whole word in the document (e.g. 'kneecap'), suggestions are not returned when the whole word is typed, but it does appear when typing… --- ## [ECS issues](https://discuss.elastic.co/t/ecs-issues/301804)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 4:14pm UTC](https://discuss.elastic.co/t/ecs-issues/301804 "2022-04-15T16:14:53Z")
Hi, We have recently upgraded from 7.x to 8.x which overall has been OK. We have a number of feeds via logstash which were in place under 7.x which are indexing correctly due to having been created under 7.x, however w… --- ## [Logging ES queries in elasticsearch-spark-30](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435)
**Author:** [@sergeyka](https://discuss.elastic.co/u/sergeyka)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 2:03pm UTC](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435 "2022-04-15T14:03:48Z")
Is there a way to log Elasticsearch queries issued by the elasticsearch-spark-30\_2.12 library? What I tried: Setting everything to trace log level. URLs of requests sent to Elasticsearch were printed, but not the body… --- ## [Elastic 8.1 RAM memory leak](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497)
**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:55am UTC](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497 "2022-04-15T09:55:31Z")
Hello. I'm using Elasticsearch 8.1, dependency co.elastic.clients Elasticsearch-java version 8.1.2. When creating one scroll request for 15\_000 records, a large memory consumption occurs. The request consumed 8 GB of mem… --- ## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 12:20pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396 "2022-04-15T12:20:05Z")
Hello, We are using Elasticsearch 7.16.3 and Elasticsearch 7.15.1. Can you let us know which java version both the Elasticsearch versions are using? Please let us know, whether ES is affected any way by the report… --- ## [ODBC failed connection to remote ES server](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 12:03pm UTC](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493 "2022-04-15T12:03:34Z")
Hi, I'm trying to connect to my remote server, where i have ES and all my data, with the ODBC driver to pull data to excel in my PC. When i try to configure the remote connection in the ODBC data sources, i receive thi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=970) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=972)