# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=977 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 978 --- ## [New User Problem -- empty reply from server (curl)](https://discuss.elastic.co/t/new-user-problem-empty-reply-from-server-curl/302033)
**Author:** [@KatePearce](https://discuss.elastic.co/u/KatePearce)\ **Replies:** 4\ **Last updated:** [April 12, 2022, 12:36am UTC](https://discuss.elastic.co/t/new-user-problem-empty-reply-from-server-curl/302033 "2022-04-12T00:36:52Z")
Today, I was trying to run Elasticsearch for the first time, but I've been running into some issues with the tutorial (Getting started with the Elastic Stack | Getting Started \[8.1\] | Elastic). When I check whether Elast… --- ## [Completion type Is it possible to use Query after word](https://discuss.elastic.co/t/completion-type-is-it-possible-to-use-query-after-word/302157)
**Author:** [@fzxwan](https://discuss.elastic.co/u/fzxwan)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 9:07pm UTC](https://discuss.elastic.co/t/completion-type-is-it-possible-to-use-query-after-word/302157 "2022-04-11T21:07:55Z")
"settings": { "number\_of\_shards": 3, "analysis": { "analyzer": { "my\_analyzer":{ "tokenizer": "ik\_max\_word", "filter": "py" } }, "filter": { "py": { … --- ## [Filebeat.sock file do not exists anymore when deploy and configure elastic-agent using Ansible](https://discuss.elastic.co/t/filebeat-sock-file-do-not-exists-anymore-when-deploy-and-configure-elastic-agent-using-ansible/301992)
**Author:** [@Danny\_Dumenigo](https://discuss.elastic.co/u/Danny_Dumenigo)\ **Replies:** 13\ **Last updated:** [April 11, 2022, 8:17pm UTC](https://discuss.elastic.co/t/filebeat-sock-file-do-not-exists-anymore-when-deploy-and-configure-elastic-agent-using-ansible/301992 "2022-04-11T20:17:44Z")
Hello Community: Im triying to automate the deployment of elastic-agents using Ansible. I have two roles for this. Using the first, I enroll the agent using the respective command, all well until this point. The agent … --- ## [Write queue increasing](https://discuss.elastic.co/t/write-queue-increasing/302153)
**Author:** [@elephant](https://discuss.elastic.co/u/elephant)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 7:45pm UTC](https://discuss.elastic.co/t/write-queue-increasing/302153 "2022-04-11T19:45:17Z")
Hi, We have upgraded our cluster to the latest Elastic 8 version but have hit a strange bug twice in two weeks; The write queue is filling up and write tasks are very slow to complete. This monitoring screenshots clear… --- ## [Issues Elastic using Python as a client](https://discuss.elastic.co/t/issues-elastic-using-python-as-a-client/302149)
**Author:** [@Frida\_Rodriguez\_Esco](https://discuss.elastic.co/u/Frida_Rodriguez_Esco)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 7:01pm UTC](https://discuss.elastic.co/t/issues-elastic-using-python-as-a-client/302149 "2022-04-11T19:01:11Z")
Hey everybody, I have tried to carry out this tutorial: using apple health data from my iPhone, but I have failed every time when it comes to importing mapped data to Elastic. Import is just fine, but the data is no… --- ## [How to use the date filter plugin in logstash](https://discuss.elastic.co/t/how-to-use-the-date-filter-plugin-in-logstash/302137)
**Author:** [@lolo\_prime](https://discuss.elastic.co/u/lolo_prime)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 6:05pm UTC](https://discuss.elastic.co/t/how-to-use-the-date-filter-plugin-in-logstash/302137 "2022-04-11T18:05:30Z")
Hi Please find the below format of the date: 2022-04-12T05:11:47 my config date { match =\> \[ "time", "ISO8601" \] } but it giving the data parser error what is the format of the above date any one help me out --- ## [MongoDB vs Elasticsearch - indexing parallel arrays](https://discuss.elastic.co/t/mongodb-vs-elasticsearch-indexing-parallel-arrays/302142)
**Author:** [@BySpecops](https://discuss.elastic.co/u/BySpecops)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 6:02pm UTC](https://discuss.elastic.co/t/mongodb-vs-elasticsearch-indexing-parallel-arrays/302142 "2022-04-11T18:02:47Z")
I have an application that needs to filter the data based on more than 7+ fields. 2+ of these fields are array and currently stored on MongoDB (each of them individually stores almost thousands of hexadecimal id). In Mon… --- ## [Elasticsearch.net How to write a query in c#](https://discuss.elastic.co/t/elasticsearch-net-how-to-write-a-query-in-c/302140)
**Author:** [@Shushil\_Shankar](https://discuss.elastic.co/u/Shushil_Shankar)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 5:34pm UTC](https://discuss.elastic.co/t/elasticsearch-net-how-to-write-a-query-in-c/302140 "2022-04-11T17:34:03Z")
Hello everyone! How convert write a below query into another working query using c# elsaticsearch.net Currently I'm using this C# query: Queries.Add(Query\.Bool(b =\> b.Should(filter =\> filter … --- ## [How to Parse the XML logs in Logstash and Convert into Json](https://discuss.elastic.co/t/how-to-parse-the-xml-logs-in-logstash-and-convert-into-json/302035)
**Author:** [@lolo\_prime](https://discuss.elastic.co/u/lolo_prime)\ **Replies:** 3\ **Last updated:** [April 11, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-to-parse-the-xml-logs-in-logstash-and-convert-into-json/302035 "2022-04-11T17:02:44Z")
i want to convert xml input to json data. The xml format is shown below --- ## [Enhanced table](https://discuss.elastic.co/t/enhanced-table/302006)
**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\ **Replies:** 8\ **Last updated:** [April 11, 2022, 5:00pm UTC](https://discuss.elastic.co/t/enhanced-table/302006 "2022-04-11T17:00:11Z")
Hi @fbaligand i would like to use enhanced table in 8.1 version .... will you able help me? --- ## [Fleet-server: http: server gave HTTP response to HTTPS client](https://discuss.elastic.co/t/fleet-server-http-server-gave-http-response-to-https-client/301203)
**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\ **Replies:** 25\ **Last updated:** [April 11, 2022, 4:44pm UTC](https://discuss.elastic.co/t/fleet-server-http-server-gave-http-response-to-https-client/301203 "2022-04-11T16:44:48Z")
Morning Elastic, I was wondering could anyone help me with this issue on enrolling my Linux Agent into Fleet. I am getting this error message when I enroll my agent. 2022-03-31T08:41:12.570-0500 WARN \[tls\] tlsc… --- ## [How to filter the document contain some tags?](https://discuss.elastic.co/t/how-to-filter-the-document-contain-some-tags/302129)
**Author:** [@Frank1957](https://discuss.elastic.co/u/Frank1957)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 4:26pm UTC](https://discuss.elastic.co/t/how-to-filter-the-document-contain-some-tags/302129 "2022-04-11T16:26:07Z")
My document may contain a tag msg\_type "\_source": { "@timestamp": "2022-04-11T08:06:38.519Z", "message": "xxxx", "msg\_type": \[ "risk\_info" \] } I wanna use Pipeline Processor to execute another p… --- ## [Issues with Elasticseach 7 on WSL - Windows 11](https://discuss.elastic.co/t/issues-with-elasticseach-7-on-wsl-windows-11/302134)
**Author:** [@giss](https://discuss.elastic.co/u/giss)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 4:16pm UTC](https://discuss.elastic.co/t/issues-with-elasticseach-7-on-wsl-windows-11/302134 "2022-04-11T16:16:14Z")
Hi there. I tried to install Elastichseach 7.17. When I try to start elastic I have this error: sudo -i service elasticsearch start \* Starting Elasticsearch Server … --- ## [Elastic Agent Doesn't Seem to Restart ElasticEndpoint Security Service](https://discuss.elastic.co/t/elastic-agent-doesnt-seem-to-restart-elasticendpoint-security-service/302131)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 3:55pm UTC](https://discuss.elastic.co/t/elastic-agent-doesnt-seem-to-restart-elasticendpoint-security-service/302131 "2022-04-11T15:55:46Z")
Hi All, I was recently doing some troubleshooting with a degraded Elastic Agent install, and I noticed that when you restart the elastic-agent it doesn't actually cause a restart of the Elastic Endpoint service, therefo… --- ## [Filebeat harvesting only its own logs not other service on Nomad Cluster](https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125)
**Author:** [@Uzmasaman\_Chanderki](https://discuss.elastic.co/u/Uzmasaman_Chanderki)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 3:25pm UTC](https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125 "2022-04-11T15:25:08Z")
I have filebeat running on Nomad cluster. It is only sending its own logs to the central server. There are other services running too but its unable to harvest their logs. Can anyone suggest what could be the problem? T… --- ## [Request: OpenVPN integration](https://discuss.elastic.co/t/request-openvpn-integration/302119)
**Author:** [@sculptordwarf](https://discuss.elastic.co/u/sculptordwarf)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 2:50pm UTC](https://discuss.elastic.co/t/request-openvpn-integration/302119 "2022-04-11T14:50:58Z")
Request for adding OpenVPN logs as a supported integration. --- ## [Throttling plugin not working with lot of messages](https://discuss.elastic.co/t/throttling-plugin-not-working-with-lot-of-messages/300360)
**Author:** [@elmar.vonlanthen](https://discuss.elastic.co/u/elmar.vonlanthen)\ **Replies:** 10\ **Last updated:** [April 11, 2022, 2:45pm UTC](https://discuss.elastic.co/t/throttling-plugin-not-working-with-lot-of-messages/300360 "2022-04-11T14:45:02Z")
Hi all We use the plugin logstash-filter-throttle to reduce the number of logs of a certain type to one message per 5 minutes, to use them for some kind of health messages. filter { if \[labels\]\[input\_type\] and \[l… --- ## [Logstash crashes out with the following message](https://discuss.elastic.co/t/logstash-crashes-out-with-the-following-message/301215)
**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\ **Replies:** 7\ **Last updated:** [April 11, 2022, 2:25pm UTC](https://discuss.elastic.co/t/logstash-crashes-out-with-the-following-message/301215 "2022-04-11T14:25:26Z")
Logstash crashes out with the following log message: PS C:\\logstash\\bin\> .\\logstash.bat "Using bundled JDK: ." OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be… --- ## [Migrating from logstash to filebeat with field continent code](https://discuss.elastic.co/t/migrating-from-logstash-to-filebeat-with-field-continent-code/302111)
**Author:** [@jhaos](https://discuss.elastic.co/u/jhaos)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 2:09pm UTC](https://discuss.elastic.co/t/migrating-from-logstash-to-filebeat-with-field-continent-code/302111 "2022-04-11T14:09:01Z")
Hi, I'm currently using in my environment for ingestion filebeat\>logstash\>Elasticsearch, in order to reduce the resources we are going to take out logstash and start using filebeat instead directly to ingest the data to … --- ## [Snapshot and restore from local infra to aws s3](https://discuss.elastic.co/t/snapshot-and-restore-from-local-infra-to-aws-s3/302066)
**Author:** [@indrajit\_kal](https://discuss.elastic.co/u/indrajit_kal)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 2:06pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-from-local-infra-to-aws-s3/302066 "2022-04-11T14:06:33Z")
Please guide me how can i setup snapshot and restore the indices form inhouse elastic server to aws s3 bucket. --- ## [Way to get all documents more than 10,000,000](https://discuss.elastic.co/t/way-to-get-all-documents-more-than-10-000-000/302079)
**Author:** [@BonoHubby](https://discuss.elastic.co/u/BonoHubby)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 2:04pm UTC](https://discuss.elastic.co/t/way-to-get-all-documents-more-than-10-000-000/302079 "2022-04-11T14:04:11Z")
Dears, I want to get all docuemnts in an index. I already know the way but there was a limitation. Way to get documents more than 10,000. ES supprt size prametter. But the maximum value is 10,000. So to get more than … --- ## [ELK pipeline duration and performance](https://discuss.elastic.co/t/elk-pipeline-duration-and-performance/302098)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elk-pipeline-duration-and-performance/302098 "2022-04-11T14:00:48Z")
Goal Hi, I have an ELK pipeline running and I would like to measure the duration of the different steps (Logstash grok and send - Elasticsearch indexing). Those information are useful for me in order to check the scalab… --- ## [Incrementing Datetime field by one day in Elasticsearch Production Cluster using painless script](https://discuss.elastic.co/t/incrementing-datetime-field-by-one-day-in-elasticsearch-production-cluster-using-painless-script/302088)
**Author:** [@vaibhav\_sanil](https://discuss.elastic.co/u/vaibhav_sanil)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 1:45pm UTC](https://discuss.elastic.co/t/incrementing-datetime-field-by-one-day-in-elasticsearch-production-cluster-using-painless-script/302088 "2022-04-11T13:45:43Z")
I am facing difficulty in debugging a production level Elasticsearch Index Date time field in yyyy-MM-dd format & i want to update/increment the datetime field by one day Eg- 2009-07-01 i want to update it to 2009-07-02 … --- ## [How to specify a date query and another query term](https://discuss.elastic.co/t/how-to-specify-a-date-query-and-another-query-term/301986)
**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 1:34pm UTC](https://discuss.elastic.co/t/how-to-specify-a-date-query-and-another-query-term/301986 "2022-04-11T13:34:15Z")
Hello - I have an index with a single date field with n text fields. I am trying to construct a query which will search the index for a given date range while considering the value the user supplies across all the other… --- ## [Deleting old elastic logs data](https://discuss.elastic.co/t/deleting-old-elastic-logs-data/302103)
**Author:** [@Shahzaib\_Abid](https://discuss.elastic.co/u/Shahzaib_Abid)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 1:24pm UTC](https://discuss.elastic.co/t/deleting-old-elastic-logs-data/302103 "2022-04-11T13:24:40Z")
Hi all, if i delete old elastic logs data which my model was trained on, does that make my model useless? i.e. Will it stop detecting anomalies? --- ## [When setting environment variable to \`I18N\_LOCALE: zh-CN\`, Kibana's Security icon is broken](https://discuss.elastic.co/t/when-setting-environment-variable-to-i18n-locale-zh-cn-kibanas-security-icon-is-broken/301694)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 12:45pm UTC](https://discuss.elastic.co/t/when-setting-environment-variable-to-i18n-locale-zh-cn-kibanas-security-icon-is-broken/301694 "2022-04-11T12:45:17Z")
Assuming the following docker-compose.yml file, the kibana API key is generated by bin/elasticsearch-create-enrollment-token -s kibana. version: "3.8" services: elasticsearch-node01: image: elastic/elasticsearch:… --- ## [Unable to remove lines from message filed](https://discuss.elastic.co/t/unable-to-remove-lines-from-message-filed/301866)
**Author:** [@amsmzn](https://discuss.elastic.co/u/amsmzn)\ **Replies:** 11\ **Last updated:** [April 11, 2022, 12:31pm UTC](https://discuss.elastic.co/t/unable-to-remove-lines-from-message-filed/301866 "2022-04-11T12:31:27Z")
I am trying to remove the below lines from my jenkins build logs with mutate, gsub filter but unable to do so. Can anybody please help me in this. Downloaded from snapshots: https://abc.com/abc.pom 16:39:44 Progress (1)… --- ## [Migration from HLRC to Java API](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479)
**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\ **Replies:** 6\ **Last updated:** [April 11, 2022, 11:59am UTC](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479 "2022-04-11T11:59:06Z")
In this page talking about migration https://www.elastic.co/guide/en/elasticsearch/client/java-api-client/current/migrate-hlrc.html I found this keep the existing code as-is and use the new Java API Client for new fe… --- ## [Upgrade to Elastic 8.0.0 (Windows Zip package)](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 6\ **Last updated:** [April 11, 2022, 11:46am UTC](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816 "2022-04-11T11:46:22Z")
Error “… will not overwrite keystore …, because this incurs changing the file owner” Verbose at org.elasticsearch.common.settings.KeyStoreWrapper.save(KeyStoreWrapper.java:608) at org.elasticsearch.common.settings.Key… --- ## [Duplicate logs in kibana](https://discuss.elastic.co/t/duplicate-logs-in-kibana/301945)
**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 11:37am UTC](https://discuss.elastic.co/t/duplicate-logs-in-kibana/301945 "2022-04-11T11:37:51Z")
Hello, I have an issue: Logs injects more than one time. It has different IDs but log contains the same data: I use FluentD to collect logs from the k8s cluster with this config: extraConfigMaps: containe… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=976) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=978)