# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=980 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 981 --- ## [Impossible to rename a field](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956)
**Author:** [@mehdielfi](https://discuss.elastic.co/u/mehdielfi)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:06am UTC](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956 "2022-04-08T11:06:48Z")
Hi i struggle to find the solution i try to rename a JSON field from X-Global-Transaction-Id to X-Global-Transaction-ID Here is the filter logstash filter { mutate { rename =\> {"\[response\_http\_head… --- ## [Filebeat (google\_workspace module) retrieving partial events on initial startup](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 7\ **Last updated:** [April 8, 2022, 10:23am UTC](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180 "2022-04-08T10:23:35Z")
Hello I would like to ask question related to below topic. I want to retrieve events backtracking up to 96 h for drive events . However, I was only able to retrieve partial of them . Looking at DEBUG log , the start… --- ## [Search\_after without PIT](https://discuss.elastic.co/t/search-after-without-pit/300788)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 10:11am UTC](https://discuss.elastic.co/t/search-after-without-pit/300788 "2022-04-08T10:11:28Z")
In the documentation for 'search\_after', it says that inconsistent results may be returned if a refresh occurs when not using a PIT. I have a few questions: Can duplicate results be returned? Will it return all the doc… --- ## [Elastic APM identify all its own - \* self discovery](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944)
**Author:** [@kunal.khandelwal](https://discuss.elastic.co/u/kunal.khandelwal)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 9:23am UTC](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944 "2022-04-08T09:23:35Z")
Hi Team, I want to know that, is there any option for auto/self discovery elastic APM? so that it can automatically identify the logs of APM with CF? Thanks! --- ## ["You are not authorized to access Monitoring" after upgrade to 8.1.0](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473)
**Author:** [@bricevalenza](https://discuss.elastic.co/u/bricevalenza)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 12:10pm UTC](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473 "2022-04-07T12:10:56Z")
Hello, after upgrading my stack to version 8.1.0, I can't access the monitoring page on Kibana. I checked rights on my (local) account and it's OK. I also made a role with very large accesses, and still the same … --- ## [The url of kibana is not showing as expected](https://discuss.elastic.co/t/the-url-of-kibana-is-not-showing-as-expected/301934)
**Author:** [@Aditya\_Maheshwari](https://discuss.elastic.co/u/Aditya_Maheshwari)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 8:16am UTC](https://discuss.elastic.co/t/the-url-of-kibana-is-not-showing-as-expected/301934 "2022-04-08T08:16:20Z")
Hello, This is my first post. I am trying to see the logs as per the filter applied on Elasticsearch but as soon as i go to kibana the url in the app state, instead of showing me the filters of Elasticsearch, it is gett… --- ## [Logstash Filter, is there a better way than mine](https://discuss.elastic.co/t/logstash-filter-is-there-a-better-way-than-mine/301879)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 3\ **Last updated:** [April 8, 2022, 7:57am UTC](https://discuss.elastic.co/t/logstash-filter-is-there-a-better-way-than-mine/301879 "2022-04-08T07:57:40Z")
Hi, I have the following Logstash filter, which works, but I find it anything but good, that should work better, right? Input: "The container group started for TEST" if "The container group started for" in \[messa… --- ## [ElasticSearch Sizing](https://discuss.elastic.co/t/elasticsearch-sizing/301931)
**Author:** [@ELIASP](https://discuss.elastic.co/u/ELIASP)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-sizing/301931 "2022-04-08T07:35:55Z")
I am trying to understand the number of shards that I need to create, primary and replicas. I have run the following calucation Total Data (GB)= Raw data (GB) per day \* Number of days retained \* (Number of replicas + 1… --- ## [Schedule salesforce plugin Logstash](https://discuss.elastic.co/t/schedule-salesforce-plugin-logstash/301873)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 7:06am UTC](https://discuss.elastic.co/t/schedule-salesforce-plugin-logstash/301873 "2022-04-08T07:06:07Z")
Hi, i'm trying to pull data from salesforce to Elasticsearch through Logstash but i didn't find something similar to the schedule parameter of the JDBC plugin. Any idea on how can i schedule the input? I can't run it m… --- ## [Jupyter -\> Vega -\> Kibana visualization (without disabling security). How?](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 4\ **Last updated:** [April 8, 2022, 6:25am UTC](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899 "2022-04-08T06:25:02Z")
So we want to leverage the data-science and visualization strengths of Python on our ELK data and then use the Elastic API to send the resulting visualization to update a dashboard. Specifically, this refers to setting t… --- ## [How convert update\_by\_query with params as array to Java Rest client SDK](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870 "2022-04-07T17:02:45Z")
Hi, Working with version 7.15 Trying to do "update all by query " using script. The main idea to iterate the params in array and update as in the query below to all matched documents. The script: POST : http://11.1… --- ## [Removing fields from Index](https://discuss.elastic.co/t/removing-fields-from-index/301623)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 4\ **Last updated:** [April 8, 2022, 5:56am UTC](https://discuss.elastic.co/t/removing-fields-from-index/301623 "2022-04-08T05:56:17Z")
Hi sorry for bothering you everytime. I upload some logs into elastic via filebeat, but there is some other information added to my original logs like the host name os kernel ..., and the main message become unformatted… --- ## [Few unassigned shards](https://discuss.elastic.co/t/few-unassigned-shards/301920)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 4:49am UTC](https://discuss.elastic.co/t/few-unassigned-shards/301920 "2022-04-08T04:49:53Z")
hi Everyone, I upgraded my last node but due to some issue 36 shards left unassigned. and its not getting assigned because of below issue: "can\_allocate" : "no\_valid\_shard\_copy", "allocate\_explanation" : "cannot alloc… --- ## [Performance issue with concurrent call ElasticSearch API](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912)
**Author:** [@css.carlyle](https://discuss.elastic.co/u/css.carlyle)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 4:43am UTC](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912 "2022-04-08T04:43:40Z")
Hello all, Recently, my program failed the stress test (Jmeter) :dizzy\_face:, my requirement is that get response from Elasticsearch within 5 seconds when it was 50, 100, 500, 1000, 1300 concurrent call. During the stre… --- ## [Metricbeat Output to Logstash, Can monitor in Stack Monitoring?](https://discuss.elastic.co/t/metricbeat-output-to-logstash-can-monitor-in-stack-monitoring/301919)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 3:55am UTC](https://discuss.elastic.co/t/metricbeat-output-to-logstash-can-monitor-in-stack-monitoring/301919 "2022-04-08T03:55:09Z")
Hi, I monitor logstash node by using metricbeat, and configure metricbeat output to logstash -\> Elasticsearch. I can received all the metricbeat events to metricbeat-\* However, can I show the metricbeat monitoring in … --- ## [How to get rid of Standalone Cluster in Kibana Stack Monitoring?](https://discuss.elastic.co/t/how-to-get-rid-of-standalone-cluster-in-kibana-stack-monitoring/301159)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 2:23am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-standalone-cluster-in-kibana-stack-monitoring/301159 "2022-04-08T02:23:15Z")
I'm monitoring Elasticsearch by using metricbeats and monitor my metricbeats using beats-xpack After I monitored metricbeats, on the stack monitoring \> cluster, it appeared the standalone cluster & my cluster.. Read th… --- ## [After add a fleet server，How to add watching my windows pc docker data?](https://discuss.elastic.co/t/after-add-a-fleet-server-how-to-add-watching-my-windows-pc-docker-data/301911)
**Author:** [@aliuq](https://discuss.elastic.co/u/aliuq)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 1:52am UTC](https://discuss.elastic.co/t/after-add-a-fleet-server-how-to-add-watching-my-windows-pc-docker-data/301911 "2022-04-08T01:52:00Z")
excute below command, it does't works in 7.15.0, and got a error message Access is denied .\\elastic-agent.exe install -f \` --fleet-server-es=http://192.168.2.122:9200 \` --fleet-server-service-token=XXXXXXXXXXXXXX… --- ## [How can I represent a config key containing a dot/period/full-stop "."?](https://discuss.elastic.co/t/how-can-i-represent-a-config-key-containing-a-dot-period-full-stop/301907)
**Author:** [@javabrett](https://discuss.elastic.co/u/javabrett)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:56am UTC](https://discuss.elastic.co/t/how-can-i-represent-a-config-key-containing-a-dot-period-full-stop/301907 "2022-04-08T00:56:53Z")
TL;DR: Can beats/metricsbeat/prometheus module tolerate a config key that contains dots/periods/full-stops, given the Beats go-ucfg config-processsing. I am using metricbeat and module prometheus. For the Prometheus sc… --- ## [Hide filters in a map layer](https://discuss.elastic.co/t/hide-filters-in-a-map-layer/301782)
**Author:** [@Jose\_Luis\_Martin\_Avi](https://discuss.elastic.co/u/Jose_Luis_Martin_Avi)\ **Replies:** 3\ **Last updated:** [April 8, 2022, 1:06am UTC](https://discuss.elastic.co/t/hide-filters-in-a-map-layer/301782 "2022-04-08T01:06:19Z")
Hi everyone I have a problem that I don't how to solve. I have free license of Kibana and I want to show information in a map with layers. In those layers I make joins with another table to show information of age avera… --- ## [Kibana TimeoutError: Request timed out](https://discuss.elastic.co/t/kibana-timeouterror-request-timed-out/301906)
**Author:** [@da57ea5e41250f119fd8](https://discuss.elastic.co/u/da57ea5e41250f119fd8)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:40am UTC](https://discuss.elastic.co/t/kibana-timeouterror-request-timed-out/301906 "2022-04-08T00:40:00Z")
The kibana service prints out this logging log. But at the same time es service is normal. The network is also normal version: kibana-7.13.3 centos: Linux 5.10.96-90.460.amzn2.x86\_64 #1 SMP Fri Feb 4 17:12:04 UTC 2022… --- ## [Question regarding size of bulk action](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 21\ **Last updated:** [April 7, 2022, 8:25pm UTC](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800 "2022-04-07T20:25:45Z")
I have 3 nodes designated to be the ingestion nodes. So all writers will round robin to those 3 nodes. My question is should the bulkWrite size be sizing to the ingestion node or primary shard on nodes? Let's say I ha… --- ## [Storing suitable document ids that matches percolator query](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900)
**Author:** [@alimbayevaf](https://discuss.elastic.co/u/alimbayevaf)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 6:52pm UTC](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900 "2022-04-07T18:52:50Z")
Hello there! I don't have good experience in using elastic and I want to know if my structure is reasonable and adequate. Problem: I have "computers" index { "mappings": { "properties": { "cpu": {"type": "… --- ## [Create a backlog report with ElasticSearch](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 4:40pm UTC](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872 "2022-04-07T16:40:49Z")
I have an index that stores created tasks, this index has the property of creation date and task end date. With Elasticsearch, can I build a histogram that displays the daily backlog since the beginning of my records, b… --- ## [Logstash pipeline configuration. Can someone please hep me? Thank you](https://discuss.elastic.co/t/logstash-pipeline-configuration-can-someone-please-hep-me-thank-you/301891)
**Author:** [@sazeens1](https://discuss.elastic.co/u/sazeens1)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:33pm UTC](https://discuss.elastic.co/t/logstash-pipeline-configuration-can-someone-please-hep-me-thank-you/301891 "2022-04-07T15:33:05Z")
Hello Everyone, Can someone please help me on this one? data in the kafka topic test sample: { "id": "2001", "name": "XYZ", "address" : "safwq", "phone": "1656161" } Sample Logstash configuration for creating a s… --- ## [JSON Parse Failure](https://discuss.elastic.co/t/json-parse-failure/301892)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 4:37pm UTC](https://discuss.elastic.co/t/json-parse-failure/301892 "2022-04-07T16:37:40Z")
I have the following pipeline config: input { file { type =\> "json" path =\> \[ C:/temp/\*.json" \] start\_position =\> "beginnning" codec =\> multiline { pattern =\> "^ZsExDrC" what =\> "previous" … --- ## [Docker container performance monitor](https://discuss.elastic.co/t/docker-container-performance-monitor/299165)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 3:27pm UTC](https://discuss.elastic.co/t/docker-container-performance-monitor/299165 "2022-04-07T15:27:30Z")
Hello, We have our ELK (on prem) as SIEM solution. Now we have an requirement is like, we want to monitor multiple docker container performance (cpu usage, memory usage, etc). Those all docker container were installed o… --- ## [Logstash doesn't send events to Elasticsearch](https://discuss.elastic.co/t/logstash-doesnt-send-events-to-elasticsearch/301887)
**Author:** [@Denis\_Abreu](https://discuss.elastic.co/u/Denis_Abreu)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:13pm UTC](https://discuss.elastic.co/t/logstash-doesnt-send-events-to-elasticsearch/301887 "2022-04-07T15:13:32Z")
Hi! Could anyone tell me what could be wrong? I'm using ELK in Docker and trying to send Elastic log to itself via Filebeat \> Logstash filebeat.yml filebeat.config: modules: path: ${path.config}/modules.d/\*.yml… --- ## [Winlogbeat performance issue](https://discuss.elastic.co/t/winlogbeat-performance-issue/301886)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:11pm UTC](https://discuss.elastic.co/t/winlogbeat-performance-issue/301886 "2022-04-07T15:11:41Z")
Hello All, Can you please help to understand and resolve the issue. Environment is like: Multiple location (branches) having many on prem Win Servers where winlogbeat is installed and their we had dedicated on prem sy… --- ## [Filebeat Registry Issue handling large number of files](https://discuss.elastic.co/t/filebeat-registry-issue-handling-large-number-of-files/301885)
**Author:** [@KillerDAN](https://discuss.elastic.co/u/KillerDAN)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:10pm UTC](https://discuss.elastic.co/t/filebeat-registry-issue-handling-large-number-of-files/301885 "2022-04-07T15:10:55Z")
Currently running filebeat 7.17.2. I have a setup where filebeat is "scrapping" a folder where per minute 5 (or more in future) CSV files are dropped and filebeat exports to kafka. (CSV are TWAMP telemetry data) Typic… --- ## [Deploying elasticsearch 7.4.0 with helm crashlooping on k8s](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876)
**Author:** [@erwa](https://discuss.elastic.co/u/erwa)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 2:57pm UTC](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876 "2022-04-07T14:57:54Z")
Hi, I've added the elastic helm repo with: helm install Elasticsearch elastic/Elasticsearch And are trying to install Elasticsearch 7.4.0 single node installation with arguments: helm install elasticsearch elastic/el… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=979) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=981)