# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=984 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 985 --- ## [So many indices for activity\_page\_xxxxx in elasticsearch](https://discuss.elastic.co/t/so-many-indices-for-activity-page-xxxxx-in-elasticsearch/301690)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 6\ **Last updated:** [April 6, 2022, 6:27am UTC](https://discuss.elastic.co/t/so-many-indices-for-activity-page-xxxxx-in-elasticsearch/301690 "2022-04-06T06:27:16Z")
why there are so many indices of activity\_page\_xxxxx in Elasticsearch? The default parameter of max\_shards\_per\_node is 1000, The activity\_page\_xxxxx is nearly 2000. --- ## [Automation for version upgrade of elastic search](https://discuss.elastic.co/t/automation-for-version-upgrade-of-elastic-search/301281)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 6:08am UTC](https://discuss.elastic.co/t/automation-for-version-upgrade-of-elastic-search/301281 "2022-04-06T06:08:00Z")
Hi All, I'm planning to set the automatic jenkins pipeline for the automatic upgrade of the Elasticsearch. Is there any better way to setup the automation for the same. --- ## [Change Elasticsearch settings without Kibana](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681)
**Author:** [@carl25en](https://discuss.elastic.co/u/carl25en)\ **Replies:** 6\ **Last updated:** [April 6, 2022, 5:42am UTC](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681 "2022-04-06T05:42:21Z")
Hey there! I was wondering if there is any way to change the settings of Elasticsearch without using Kibana. I specifically have to change the size of the result of query from 10,000 (default) to 120,000. Is it possible… --- ## [KIBANA geoip configuration and map](https://discuss.elastic.co/t/kibana-geoip-configuration-and-map/301310)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 4\ **Last updated:** [April 6, 2022, 5:26am UTC](https://discuss.elastic.co/t/kibana-geoip-configuration-and-map/301310 "2022-04-06T05:26:19Z")
Good, I'm trying to visualise where the ips of the apache logs that I receive come from, but when I click on the map I get the message that I don't have the index pattern, any idea? input { beats { port =\> 5044 … --- ## [Making PatternCaptureGroupTokenFilter matches globally](https://discuss.elastic.co/t/making-patterncapturegrouptokenfilter-matches-globally/301693)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 4:29am UTC](https://discuss.elastic.co/t/making-patterncapturegrouptokenfilter-matches-globally/301693 "2022-04-06T04:29:44Z")
I have created a regex. But, the issue with that regex is that it is returning only the first match and stopped matching afterwards. Inside my java file, I know I can use the find and group methods for returning all the … --- ## [Logs are stopped](https://discuss.elastic.co/t/logs-are-stopped/301622)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 12:45pm UTC](https://discuss.elastic.co/t/logs-are-stopped/301622 "2022-04-05T12:45:20Z")
well, the logs come to me fine for about 50 minutes but suddenly it stops, if anyone knows how to fix it I would appreciate it, here are the logs and the configuration files. 2022-04-05T12:25:01.688+0200 INFO beat… --- ## [What happens if a warm node will be out of space in the middle of an index rollover?](https://discuss.elastic.co/t/what-happens-if-a-warm-node-will-be-out-of-space-in-the-middle-of-an-index-rollover/301695)
**Author:** [@aivinog1](https://discuss.elastic.co/u/aivinog1)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 5:17am UTC](https://discuss.elastic.co/t/what-happens-if-a-warm-node-will-be-out-of-space-in-the-middle-of-an-index-rollover/301695 "2022-04-06T05:17:08Z")
Hello! I have a question: what happens with a cluster's ILM if a warm node (I want to offload some data that is not frequently used to warm nodes and delete it from there after some period of time) will be out of space … --- ## [Integration of elastic with a service desk app](https://discuss.elastic.co/t/integration-of-elastic-with-a-service-desk-app/301195)
**Author:** [@Vinay\_Menon1](https://discuss.elastic.co/u/Vinay_Menon1)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 4:42am UTC](https://discuss.elastic.co/t/integration-of-elastic-with-a-service-desk-app/301195 "2022-04-06T04:42:49Z")
Hi Team, I have a query not sure if anyone can help in this We have an in house created ticketing system which one of the developers created this we plan to integrate with elastic. We have multiple client regions & on… --- ## [How to understand index and search info obtained by \_node/stats API？](https://discuss.elastic.co/t/how-to-understand-index-and-search-info-obtained-by-node-stats-api/301384)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 4:09am UTC](https://discuss.elastic.co/t/how-to-understand-index-and-search-info-obtained-by-node-stats-api/301384 "2022-04-06T04:09:10Z")
use this API can get the index\_total and query\_total GET \_nodes/stats/indices/indexing,search and from granfana can get info as below: how to understand the meaning of index\_total and query\_total ？ --- ## [How to write complex ElasticSearch query](https://discuss.elastic.co/t/how-to-write-complex-elasticsearch-query/301692)
**Author:** [@GurjitGora](https://discuss.elastic.co/u/GurjitGora)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 3:37am UTC](https://discuss.elastic.co/t/how-to-write-complex-elasticsearch-query/301692 "2022-04-06T03:37:05Z")
--- ## [Logstash package version convention in Debian](https://discuss.elastic.co/t/logstash-package-version-convention-in-debian/301607)
**Author:** [@flavono123](https://discuss.elastic.co/u/flavono123)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 9:12am UTC](https://discuss.elastic.co/t/logstash-package-version-convention-in-debian/301607 "2022-04-05T09:12:51Z")
Hi all, I just noticed that versions of the logstash in debian packages are different from others: $ lsb\_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.3 LTS Release: … --- ## [Zlib 1.2.12 getting corruption errors](https://discuss.elastic.co/t/zlib-1-2-12-getting-corruption-errors/301581)
**Author:** [@mailme\_gx](https://discuss.elastic.co/u/mailme_gx)\ **Replies:** 4\ **Last updated:** [April 6, 2022, 1:42am UTC](https://discuss.elastic.co/t/zlib-1-2-12-getting-corruption-errors/301581 "2022-04-06T01:42:35Z")
Hi all I filed a bug several days ago but have had no response, has no one else had issues after upgrading zlib to 1.2.12? I tried this on a new clean data directory with a single node, if I downgrade to 1.2.11 the s… --- ## [Adding a warm node](https://discuss.elastic.co/t/adding-a-warm-node/301663)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 15\ **Last updated:** [April 5, 2022, 11:07pm UTC](https://discuss.elastic.co/t/adding-a-warm-node/301663 "2022-04-05T23:07:26Z")
I've started with 4 ELK nodes: Host 1 Logstash & Kibana Host 2 Elasticsearch node-1 Host 3 Elasticsearch node-2 Host 4 Elasticsearch node-3 The stack is running 7.16.1 and has just over a years' worth of data. I'… --- ## [New elasticsearch installation broke after Fedor update](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569)
**Author:** [@moby](https://discuss.elastic.co/u/moby)\ **Replies:** 10\ **Last updated:** [April 5, 2022, 10:37pm UTC](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569 "2022-04-05T22:37:59Z")
Hello, I have installed the latest version of Fedora desktop and was able to install Elasticsearch and kibana via the DNF package manager. I was able to bring up Kibana and login. Shutdown the computer. A few days late… --- ## [Delayed Allocation - Multiple Node Failures](https://discuss.elastic.co/t/delayed-allocation-multiple-node-failures/301653)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 10:30pm UTC](https://discuss.elastic.co/t/delayed-allocation-multiple-node-failures/301653 "2022-04-05T22:30:00Z")
Had a unique situation occur recently, and I've been thinking about how to prevent it from recurring. I have an Elasticsearch cluster which happens to run on multiple docker containers, on rackmount servers. Essentiall… --- ## [Filebeat elasticsearch output index setting breaking change?](https://discuss.elastic.co/t/filebeat-elasticsearch-output-index-setting-breaking-change/301667)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 8:04pm UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-output-index-setting-breaking-change/301667 "2022-04-05T20:04:51Z")
In prior filebeat doc (at least in 7.5.0) the output index section stated: The index setting is ignored when index lifecycle management is enabled. If you’re sending events to a cluster that supports index lifecycle ma… --- ## [Manage Cluster admin without manage snapshot permission](https://discuss.elastic.co/t/manage-cluster-admin-without-manage-snapshot-permission/301621)
**Author:** [@Marco\_Mandricardo](https://discuss.elastic.co/u/Marco_Mandricardo)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 10:26am UTC](https://discuss.elastic.co/t/manage-cluster-admin-without-manage-snapshot-permission/301621 "2022-04-05T10:26:05Z")
hi, i need to create an admin user that have all access exept for manage other user permission, and manage snapshot. because one IT admin manage all the cluster, but his supervisor manage all plus backup(snapshot) and … --- ## [Unable to create index from c#](https://discuss.elastic.co/t/unable-to-create-index-from-c/301655)
**Author:** [@shamir](https://discuss.elastic.co/u/shamir)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 9:46pm UTC](https://discuss.elastic.co/t/unable-to-create-index-from-c/301655 "2022-04-05T21:46:20Z")
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown\_ca at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:480) ~\[netty-code… --- ## [How to change the # of folder created on my indeces folder per snapshots?](https://discuss.elastic.co/t/how-to-change-the-of-folder-created-on-my-indeces-folder-per-snapshots/301609)
**Author:** [@renatoa12](https://discuss.elastic.co/u/renatoa12)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 9:41pm UTC](https://discuss.elastic.co/t/how-to-change-the-of-folder-created-on-my-indeces-folder-per-snapshots/301609 "2022-04-05T21:41:16Z")
How to change the # of folder created on my indeces folder per snapshots?? I only need one folder per snapshot for backup purposes. --- ## [Oidc 5000milliseconds timeout. oidc realm oidc1 failed to authenticate](https://discuss.elastic.co/t/oidc-5000milliseconds-timeout-oidc-realm-oidc1-failed-to-authenticate/301659)
**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 6:33pm UTC](https://discuss.elastic.co/t/oidc-5000milliseconds-timeout-oidc-realm-oidc1-failed-to-authenticate/301659 "2022-04-05T18:33:52Z")
Hello community. I have been stuck with following message for a while now. \[2022-04-05T18:20:23,391\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[vesa-brokerage-elk-multizone-es-node-2\] Authentication to realm oidc1 failed… --- ## [From a JSON obtain the following structure of a data-table in Kibana](https://discuss.elastic.co/t/from-a-json-obtain-the-following-structure-of-a-data-table-in-kibana/301674)
**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 8:40pm UTC](https://discuss.elastic.co/t/from-a-json-obtain-the-following-structure-of-a-data-table-in-kibana/301674 "2022-04-05T20:40:16Z")
Hi, how are you? I have a problem in a visualization in kibana, I don't know if it is possible from a JSON like this: \[ { field1: "row1Columna1", field2: "row1Columna2", listas: \[ { valor: "r1text1" }, { valor:… --- ## [Minimum\_should\_match percentage rounding](https://discuss.elastic.co/t/minimum-should-match-percentage-rounding/301662)
**Author:** [@bews](https://discuss.elastic.co/u/bews)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 7:42pm UTC](https://discuss.elastic.co/t/minimum-should-match-percentage-rounding/301662 "2022-04-05T19:42:06Z")
Situation: I have a bool query with N 'should' conditions and I want to let it ignore 1 of those. Before in ES version 6 (iirc) this was achieved with 'minimum\_should\_match' =\> '99%', but now on version 8.1.1 this doesn… --- ## [Logstash log4j2.properties logfiles are not deleting](https://discuss.elastic.co/t/logstash-log4j2-properties-logfiles-are-not-deleting/301549)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 9\ **Last updated:** [April 5, 2022, 7:25pm UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-logfiles-are-not-deleting/301549 "2022-04-05T19:25:09Z")
Looking at the log4j2.properties documentation it says to make the following changes to the log4j2.properties files. I've made them but also made changes for being logstash instead of elastic but I do not see any logfil… --- ## [Nest Client search empty string does not work](https://discuss.elastic.co/t/nest-client-search-empty-string-does-not-work/301664)
**Author:** [@qwe](https://discuss.elastic.co/u/qwe)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 7:02pm UTC](https://discuss.elastic.co/t/nest-client-search-empty-string-does-not-work/301664 "2022-04-05T19:02:07Z")
I am trying to implement search for documents where a field exists and is not empty. The field is mapped as follows: { "mapping": { "properties": { "standardData": { "properties": { ... "p… --- ## [Logstash RSS Input Plugin SSL Support](https://discuss.elastic.co/t/logstash-rss-input-plugin-ssl-support/301624)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 6:17pm UTC](https://discuss.elastic.co/t/logstash-rss-input-plugin-ssl-support/301624 "2022-04-05T18:17:34Z")
Hello, Does the Logstash RSS Input plugin have the ability to use a specific CA certificate to validate an SSL enabled website? There are no "ca\_cert" settings in the docs that I can find. The specific error I'm getti… --- ## [Kibana upgrade to 8.x , can't enter monitoring](https://discuss.elastic.co/t/kibana-upgrade-to-8-x-cant-enter-monitoring/299987)
**Author:** [@yhache](https://discuss.elastic.co/u/yhache)\ **Replies:** 5\ **Last updated:** [April 5, 2022, 6:00pm UTC](https://discuss.elastic.co/t/kibana-upgrade-to-8-x-cant-enter-monitoring/299987 "2022-04-05T18:00:44Z")
Hi, i did the upgrade of Elasticsearch and Kibana to the latest version and ever since, i am not able to get into the Stack Monitoring webpage :: Here's the kibana.yml :: server.host: "0.0.0.0" server.publicBaseUrl:… --- ## [Logstash 7.17.2 and Elastic 7.10.2 (latest repo version) error: could not connect to compatible elastic version](https://discuss.elastic.co/t/logstash-7-17-2-and-elastic-7-10-2-latest-repo-version-error-could-not-connect-to-compatible-elastic-version/301611)
**Author:** [@Julynell](https://discuss.elastic.co/u/Julynell)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 5:48pm UTC](https://discuss.elastic.co/t/logstash-7-17-2-and-elastic-7-10-2-latest-repo-version-error-could-not-connect-to-compatible-elastic-version/301611 "2022-04-05T17:48:43Z")
Hi all, So yesterday we installed logstash and Elasticsearch via yum from repo: name=Elasticsearch repository for 7.x packages baseurl=https://artifacts.elastic.co/packages/oss-7.x (forgive me if a misuse terms, I am … --- ## [Logstash-output-syslog plugin with different timezone](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650)
**Author:** [@MatthiasLenhardt](https://discuss.elastic.co/u/MatthiasLenhardt)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 5:17pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-with-different-timezone/301650 "2022-04-05T17:17:30Z")
Hi, we are sending events via logstash-output-syslog plugin to a syslog server. The timestamp of the messages at the syslog server are with timezone UTC. Is it possible to change the timestamp only for these events to d… --- ## [Error creating new field with the valu of a nested field](https://discuss.elastic.co/t/error-creating-new-field-with-the-valu-of-a-nested-field/301505)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 5:13pm UTC](https://discuss.elastic.co/t/error-creating-new-field-with-the-valu-of-a-nested-field/301505 "2022-04-05T17:13:26Z")
Hello! im reciving a json with the next format: "field": \[ { "context": "CONTEXTLESS", "value": "x", "key": "subfield1" }, { "context": "CONTEXTLESS", "valu… --- ## [Pipeline/output.go:180 failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/pipeline-output-go-180-failed-to-publish-events-temporary-bulk-send-failure/299453)
**Author:** [@anubisg1](https://discuss.elastic.co/u/anubisg1)\ **Replies:** 6\ **Last updated:** [April 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/pipeline-output-go-180-failed-to-publish-events-temporary-bulk-send-failure/299453 "2022-04-05T16:58:00Z")
i have defined the following pipeline called "suzieq" and tested it against 2 documents PUT \_ingest/pipeline/suzieq { "version": 2, "processors": \[ { "dissect": { "field": "message", "patte… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=983) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=985)