# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=974 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 975 --- ## [Kibana server is not ready yet ~ missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 5:43pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249 "2022-04-13T17:43:56Z")
I installed Elasticsearch and Kibana 8.1.2 locally with standard configurations and without Docker on Windows 11. I just changed the passwords for all systems and bootstrap. Elasticsearch is starting fine (using the bat… --- ## [How to Index duplicate documents with the different routing id](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:20pm UTC](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353 "2022-04-13T17:20:26Z")
My index settings: { "aliases": { "alias\_test\_read": {} }, "mappings": { "\_routing": { "required": true }, "properties": { "id": { "typ… --- ## [Specifying multiple preferences](https://discuss.elastic.co/t/specifying-multiple-preferences/302367)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 5:30pm UTC](https://discuss.elastic.co/t/specifying-multiple-preferences/302367 "2022-04-13T17:30:35Z")
Hi, Is it possible to specify multiple preferences in an Elasticsearch query? I'm getting an error when using \_local and \_shard as preferences: URL: localhost:9200/testindex/\_search?preference=\_local,\_shards:1 { "… --- ## [Restore MediaWiki ElasticSearch functionality](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786)
**Author:** [@lenhartp](https://discuss.elastic.co/u/lenhartp)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:29pm UTC](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786 "2022-04-13T17:29:32Z")
A couple months ago, had a mediawiki server with 3 wikis running on it dumped in my lap to support. The search box was using CirrusSearch and Elasticsearch / Elastica to generate results, but that was recently broken whe… --- ## [Beats in elastic-agent reporting "failed to connect to backoff"](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506)
**Author:** [@trudyc](https://discuss.elastic.co/u/trudyc)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:16pm UTC](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506 "2022-04-13T17:16:47Z")
Apologies in advance if I ask ignorant questions, or don't provide all relevant info in my post. I'm not an expert sysadmin, or network admin, or security admin. I've inherited Elastic from a departed co-worker, and have… --- ## [Fleet Server - Waiting on default policy with Fleet Server integration](https://discuss.elastic.co/t/fleet-server-waiting-on-default-policy-with-fleet-server-integration/302281)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 11:13pm UTC](https://discuss.elastic.co/t/fleet-server-waiting-on-default-policy-with-fleet-server-integration/302281 "2022-04-12T23:13:25Z")
Hello, I am not able to run Fleet. Probably I miss something but not sure; tried also quickstart yaml files, and I got the same result. Kibana Config: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name… --- ## [Error running sudo filebeat setup command](https://discuss.elastic.co/t/error-running-sudo-filebeat-setup-command/302273)
**Author:** [@LeonardoCoco](https://discuss.elastic.co/u/LeonardoCoco)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:51pm UTC](https://discuss.elastic.co/t/error-running-sudo-filebeat-setup-command/302273 "2022-04-13T16:51:33Z")
I'm configuring Elasticsearch, Kibana and Filebeat from scratch. I have already configured the Elasticsearch.yam, kibana.yam files and I am finishing the filebeat installation, but when executing the command below, the … --- ## [I'm getting this error while looking for logs Error loading data bad gateway](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361)
**Author:** [@Prasadevops0710](https://discuss.elastic.co/u/Prasadevops0710)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:30pm UTC](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361 "2022-04-13T16:30:13Z")
SearchError: Bad Gateway at https://elk.abc.com/bundles/commons.bundle.js:5:1844068 at processQueue (https://elk.abc.com/built\_assets/dlls/vendors.bundle.dll.js:417:203810) at https://elk.abc.com/built\_assets/dlls/ven… --- ## [Display Name for Index Patterns](https://discuss.elastic.co/t/display-name-for-index-patterns/302357)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 4:26pm UTC](https://discuss.elastic.co/t/display-name-for-index-patterns/302357 "2022-04-13T16:26:29Z")
I was wondering if it is possible to use a different, more intuitive/human-readable, display name for index patterns in Discover rather than the actual pattern? My reason is that some index patterns are ugly and I'd it t… --- ## [How to skip errors on snapshots](https://discuss.elastic.co/t/how-to-skip-errors-on-snapshots/302295)
**Author:** [@views\_eos](https://discuss.elastic.co/u/views_eos)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:23pm UTC](https://discuss.elastic.co/t/how-to-skip-errors-on-snapshots/302295 "2022-04-13T16:23:22Z")
I was backing up the Snapshot data through NFS, but the NFS connection was cut off, so I received an error as below curl -H 'content-type: application/JSON' -XPUT "http://localhost:39023/\_snapshot/fs\_snapshot/$TARGET\_LO… --- ## [Change data stream name in filebeat 8.\*](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531)
**Author:** [@Andres\_Altamirano](https://discuss.elastic.co/u/Andres_Altamirano)\ **Replies:** 6\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531 "2022-04-13T15:58:35Z")
We used to store filebeat data from different sources in a different index due to storage size and document category using different ILM policies. Now we can't do that because if we use ILM, we can't change the index na… --- ## [How parse mysql slow queries into elastic](https://discuss.elastic.co/t/how-parse-mysql-slow-queries-into-elastic/302364)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 4:01pm UTC](https://discuss.elastic.co/t/how-parse-mysql-slow-queries-into-elastic/302364 "2022-04-13T16:01:24Z")
Hi, I have a mysql in GCP to which I have already configured a sink to pubsub and from a VM with filebeat installed I am able to send the slow queries that reach me to the pubsub to elastic. My problem is that the slow… --- ## [Field format color](https://discuss.elastic.co/t/field-format-color/302106)
**Author:** [@Plachey](https://discuss.elastic.co/u/Plachey)\ **Replies:** 11\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/field-format-color/302106 "2022-04-13T15:58:39Z")
Hello Who can help me with index color format request I found this api /api/saved\_objects/index-pattern/xxxxx/fields but i got problem with data for it request, I can't find how to do it (format and naming fields) m… --- ## [Heartbeat 8.1.0 Kubernetes Autodiscovery Memory Leak](https://discuss.elastic.co/t/heartbeat-8-1-0-kubernetes-autodiscovery-memory-leak/300543)
**Author:** [@Protopopys](https://discuss.elastic.co/u/Protopopys)\ **Replies:** 6\ **Last updated:** [April 13, 2022, 3:18pm UTC](https://discuss.elastic.co/t/heartbeat-8-1-0-kubernetes-autodiscovery-memory-leak/300543 "2022-04-13T15:18:24Z")
Hello Heartbeat 8.1.0 has a memory leak with enabled Kubernetes autodiscovery and Openshift kills the container on memory limit reached. We have the issue on all Openshift nodes. Heartbeat Version: 8.1.0 Openshif… --- ## [Changing Index on Aggregation based widgets after Copying it from another dashboard](https://discuss.elastic.co/t/changing-index-on-aggregation-based-widgets-after-copying-it-from-another-dashboard/302069)
**Author:** [@curious\_ands](https://discuss.elastic.co/u/curious_ands)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 3:07pm UTC](https://discuss.elastic.co/t/changing-index-on-aggregation-based-widgets-after-copying-it-from-another-dashboard/302069 "2022-04-13T15:07:22Z")
Hi, I am having the dashboard1 which is created using index1 data. The dashboard contains all types of visualization but I want to talk about aggregation based widgets eg. Gauge, Goal, PI etc. When I copy the aggregati… --- ## [Error on import the Elasticsearch public GPG key into apt](https://discuss.elastic.co/t/error-on-import-the-elasticsearch-public-gpg-key-into-apt/302337)
**Author:** [@sashasingle](https://discuss.elastic.co/u/sashasingle)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 2:58pm UTC](https://discuss.elastic.co/t/error-on-import-the-elasticsearch-public-gpg-key-into-apt/302337 "2022-04-13T14:58:08Z")
Hi, cannot download GPG-KEY when i run this command wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -. System send answer - gpg: no valid OpenPGP data found --- ## [Installa elasticsearch in a different directory](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 2:27pm UTC](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226 "2022-04-13T14:27:17Z")
hi, by default Elasticsearch are installed in / directory (/etc/Elasticsearch). but i have an partition in my centos that is dedicated just for the database, how can change the default installing partition and install … --- ## [Elasticsearch downgrade / Restore](https://discuss.elastic.co/t/elasticsearch-downgrade-restore/302344)
**Author:** [@PAVK\_PRASAD](https://discuss.elastic.co/u/PAVK_PRASAD)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-downgrade-restore/302344 "2022-04-13T13:36:59Z")
Hi Team, I have multiple queries on ES Restore / Downgrade on single node Currently we have elastic server(DEV) with 7.16.2 and we would like go back to 7.3.2 but we don't have any backup snapshot of 7.3.2. How to … --- ## [Problems with EST5EDT timezone in Kibana 7.17.0](https://discuss.elastic.co/t/problems-with-est5edt-timezone-in-kibana-7-17-0/300810)
**Author:** [@lifer](https://discuss.elastic.co/u/lifer)\ **Replies:** 17\ **Last updated:** [April 13, 2022, 1:32pm UTC](https://discuss.elastic.co/t/problems-with-est5edt-timezone-in-kibana-7-17-0/300810 "2022-04-13T13:32:52Z")
Hi team! I have some problems with EST5EDT timezone in Kibana v 7.17.0: So, when I set timezone to UTC on the "Slack Management -\> Advanced Settings" page - everything works fine and I see data with correct timezone. B… --- ## [Handling Logstash with RabbitMQ Input receiving basic.cancel](https://discuss.elastic.co/t/handling-logstash-with-rabbitmq-input-receiving-basic-cancel/302339)
**Author:** [@Ben-G](https://discuss.elastic.co/u/Ben-G)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/handling-logstash-with-rabbitmq-input-receiving-basic-cancel/302339 "2022-04-13T13:29:31Z")
I have deployed a logstash pod on our k8s cluster that reads from a RabbitMQ deployment. Recently we saw lag suddenly start to increase on RabbitMQ as the number of ready messages grew linearly without stopping. The Rab… --- ## [Watcher stopped triggering](https://discuss.elastic.co/t/watcher-stopped-triggering/302085)
**Author:** [@Jonathanfranzen](https://discuss.elastic.co/u/Jonathanfranzen)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 1:20pm UTC](https://discuss.elastic.co/t/watcher-stopped-triggering/302085 "2022-04-13T13:20:04Z")
Hi, I put up two Kibana Watchers in two different deployments last week. Now, one of the watchers doesn't trigger. It randomly stopped last friday, even though I didn't edit anything around that time. Now, even if I del… --- ## [Need help how to remove unwanted fields logstash](https://discuss.elastic.co/t/need-help-how-to-remove-unwanted-fields-logstash/302315)
**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 1:08pm UTC](https://discuss.elastic.co/t/need-help-how-to-remove-unwanted-fields-logstash/302315 "2022-04-13T13:08:40Z")
Please tell me how to remove unnecessary fields. Type: agent.ephemeral\_id agent.id winlog.provider\_guid I tried, But kibana stops showing logs at all drop\_fields: fields: \["date\_created", "ecs.version", "agent.version… --- ## [esrally.exceptions.LaunchError: Daemon startup failed with exit code \[1\]](https://discuss.elastic.co/t/esrally-exceptions-launcherror-daemon-startup-failed-with-exit-code-1/302323)
**Author:** [@likhith1995](https://discuss.elastic.co/u/likhith1995)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 1:02pm UTC](https://discuss.elastic.co/t/esrally-exceptions-launcherror-daemon-startup-failed-with-exit-code-1/302323 "2022-04-13T13:02:54Z")
Hi Team, When we try to run esrally on linux server, we are getting an exception. Exception: esrally.exceptions.LaunchError: Daemon startup failed with exit code \[1\] Kindly help in resolving this error. Thanks and r… --- ## [Path.repo on ECK environment](https://discuss.elastic.co/t/path-repo-on-eck-environment/302255)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 12:46pm UTC](https://discuss.elastic.co/t/path-repo-on-eck-environment/302255 "2022-04-13T12:46:54Z")
We set path.repo on YAML file like below. path: repo: - But we are unable to add this path into kibana--\> Snapshot --\> Register Repository, it throws below error Cannot register new repository \[test\] failed to cr… --- ## [Calculate difference between current and previous values](https://discuss.elastic.co/t/calculate-difference-between-current-and-previous-values/302237)
**Author:** [@700grm](https://discuss.elastic.co/u/700grm)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 12:11pm UTC](https://discuss.elastic.co/t/calculate-difference-between-current-and-previous-values/302237 "2022-04-13T12:11:09Z")
Hi, I'm trying to create Watcher Alert for dropped packets system.network.in.dropped (the system metrics are shipped with Metricbeats) if more than 50 dropped packets are present alert should be generated. To do this I n… --- ## [Missing Datastreams in Fleet UI](https://discuss.elastic.co/t/missing-datastreams-in-fleet-ui/302326)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 12:04pm UTC](https://discuss.elastic.co/t/missing-datastreams-in-fleet-ui/302326 "2022-04-13T12:04:04Z")
Somehow my Fleet Managed Data Streams have gone missing in the UI, despite everything else working, the data exists. --- ## [Search for a text not working](https://discuss.elastic.co/t/search-for-a-text-not-working/302287)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 12:02pm UTC](https://discuss.elastic.co/t/search-for-a-text-not-working/302287 "2022-04-13T12:02:04Z")
When searching for a text in the field I'm not getting any data enough though the text is present in the logs query- message : error while getting meet audit data for customer When I search directly without putting th… --- ## [How to configure sendgrid api in elasticsearch.yml](https://discuss.elastic.co/t/how-to-configure-sendgrid-api-in-elasticsearch-yml/302113)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-to-configure-sendgrid-api-in-elasticsearch-yml/302113 "2022-04-13T11:58:40Z")
Hello, Can any one please help me? Want to configure sendgrid api in Elasticsearch.yml to send and alert notification. Thanks & Regards, Kiran Katkar. --- ## [SAML Role mapping (Keycloak Idp)](https://discuss.elastic.co/t/saml-role-mapping-keycloak-idp/302270)
**Author:** [@Vitali\_Lushchyk](https://discuss.elastic.co/u/Vitali_Lushchyk)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 11:49am UTC](https://discuss.elastic.co/t/saml-role-mapping-keycloak-idp/302270 "2022-04-13T11:49:47Z")
cluster elasticsearch configuration: xpack.security.authc.realms.saml.saml1: order: 2 idp.metadata.path: https://login-uat.exadel.com/auth/realms/exadel-uat/protocol/saml/descriptor idp.entity\_id: "https://login-u… --- ## [CCR procedure question](https://discuss.elastic.co/t/ccr-procedure-question/302325)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 11:47am UTC](https://discuss.elastic.co/t/ccr-procedure-question/302325 "2022-04-13T11:47:58Z")
Hi, I'm testing with cross cluster replication. Question: What if the leader index is unavailable, the follower index will not be updated. When the leader index is active again, CCR will be running again? No manual ta… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=973) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=975)