# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=988 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 989 --- ## [Metricbeat jolokia vs Red Hat AMQ servers vs HTTP error 403](https://discuss.elastic.co/t/metricbeat-jolokia-vs-red-hat-amq-servers-vs-http-error-403/301401)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 4\ **Last updated:** [April 4, 2022, 7:24am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-vs-red-hat-amq-servers-vs-http-error-403/301401 "2022-04-04T07:24:18Z")
Trying to fetch data through jolokia module from Red Hat AMQ process(es) on a host. Have this module.d/jojokia.yml: - module: jolokia metricsets: \["jmx"\] period: 1m hosts: \["http://localhost:5008"\] namespace: "… --- ## [Logstash queue.drain: true setting not being honored](https://discuss.elastic.co/t/logstash-queue-drain-true-setting-not-being-honored/301460)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 7:19am UTC](https://discuss.elastic.co/t/logstash-queue-drain-true-setting-not-being-honored/301460 "2022-04-04T07:19:33Z")
I've enabled the queue.drain: true setting on one of my logstash instances which has a persistent queue. The behavior I would expect is that when I stop the logstash process ( systemctl logstash stop ) the page files wo… --- ## [Elasticsearch on large HW](https://discuss.elastic.co/t/elasticsearch-on-large-hw/301445)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 7:16am UTC](https://discuss.elastic.co/t/elasticsearch-on-large-hw/301445 "2022-04-04T07:16:57Z")
Hi, There is request for me to set up Elasticsearch cluster (8.1) on large hardwares. The hardware of the data nodes: RAM: 384GB Cores: 48 Storage: 11.52 TB SSD Please help me how to set the jvm.options for this set… --- ## [How to remove the white list email Id's from the elastic cloud](https://discuss.elastic.co/t/how-to-remove-the-white-list-email-ids-from-the-elastic-cloud/299860)
**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:51am UTC](https://discuss.elastic.co/t/how-to-remove-the-white-list-email-ids-from-the-elastic-cloud/299860 "2022-04-04T06:51:47Z")
Hi Team, I have situation that we have already whitelist list of email address in the elastic cloud and now our email domain was migrated last week and after migration of domain we don't receive the elastic alert for th… --- ## [Advanced Watcher: Use key value in a mail webhook](https://discuss.elastic.co/t/advanced-watcher-use-key-value-in-a-mail-webhook/299457)
**Author:** [@Jonathan\_Fernandez](https://discuss.elastic.co/u/Jonathan_Fernandez)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/advanced-watcher-use-key-value-in-a-mail-webhook/299457 "2022-04-04T06:50:03Z")
Hello everybody! So, basically I'm trying to get my 'key' value to print it into my mail body, but I'm not being able to do it. Once I get it, I will iterate over the buckets with a "foreach" before the webhook (within … --- ## [Not able to create Kibana alert on Json log due to match all is not working and time is coming as string](https://discuss.elastic.co/t/not-able-to-create-kibana-alert-on-json-log-due-to-match-all-is-not-working-and-time-is-coming-as-string/300036)
**Author:** [@riya9](https://discuss.elastic.co/u/riya9)\ **Replies:** 0\ **Last updated:** [March 18, 2022, 11:33am UTC](https://discuss.elastic.co/t/not-able-to-create-kibana-alert-on-json-log-due-to-match-all-is-not-working-and-time-is-coming-as-string/300036 "2022-03-18T11:33:01Z")
Hi All , I am looking to create alert on Json log to match on any of the 3 job name with failed condition to check this condition every 70 min . the alert is not working because of 2 reason.Preformatted text 1)the s… --- ## [Beat(Nomad cluster\>Logstash\>Elasticsearch\>Graylog](https://discuss.elastic.co/t/beat-nomad-cluster-logstash-elasticsearch-graylog/300145)
**Author:** [@Uzmasaman\_Chanderki](https://discuss.elastic.co/u/Uzmasaman_Chanderki)\ **Replies:** 0\ **Last updated:** [March 20, 2022, 11:18pm UTC](https://discuss.elastic.co/t/beat-nomad-cluster-logstash-elasticsearch-graylog/300145 "2022-03-20T23:18:31Z")
I am new to Elasticsearch. I have filebeat running on Nomad cluster as system job. I have to collect logs and ship it to a centralized server which has Logstash, Elasticsearch and graylog running on docker-compose. Some … --- ## [Resurrect Connection to dead ES Instance](https://discuss.elastic.co/t/resurrect-connection-to-dead-es-instance/300265)
**Author:** [@karewise\_tech](https://discuss.elastic.co/u/karewise_tech)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 5:08am UTC](https://discuss.elastic.co/t/resurrect-connection-to-dead-es-instance/300265 "2022-03-22T05:08:52Z")
\[logstash.outputs.Elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"http://elastic:xxxxxx@elasticsearch:9200/", :exception=\>LogStash::Outputs::Elasticsearch::HttpClient:… --- ## [Monitoring ElasticSearch pipelines](https://discuss.elastic.co/t/monitoring-elasticsearch-pipelines/300270)
**Author:** [@florinsfetea](https://discuss.elastic.co/u/florinsfetea)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:37am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-pipelines/300270 "2022-04-04T06:37:10Z")
if you want the UI monitoring of pipelines included in Kibana please Upvote! --- ## [Filebeat logstash encoding problem](https://discuss.elastic.co/t/filebeat-logstash-encoding-problem/301454)
**Author:** [@joie](https://discuss.elastic.co/u/joie)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 6:33am UTC](https://discuss.elastic.co/t/filebeat-logstash-encoding-problem/301454 "2022-04-04T06:33:31Z")
Hi Thank you in advance. i am very stuggle to deal with this problem. push the oracle alert.log from the filebeat to logstash and see int ths slack message. my data source in alert log (Mon Apr 4 15:11:52 KST 2022 한글… --- ## [Remove "Recent Log Entries" section](https://discuss.elastic.co/t/remove-recent-log-entries-section/301339)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:32am UTC](https://discuss.elastic.co/t/remove-recent-log-entries-section/301339 "2022-04-04T06:32:01Z")
Kibana 7.17. I've just upgraded Kibana on a monitoring node from 6 to 7 and now in the Overview tab there's a section called Recent Log Entries, which wasn't there in 6. I'm not interested in this, it's taking up signif… --- ## [\]\[INFO \]\[o.e.x.s.a.AuthenAuthentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/info-o-e-x-s-a-authenauthentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/300860)
**Author:** [@aman.nagi2210](https://discuss.elastic.co/u/aman.nagi2210)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 2:52pm UTC](https://discuss.elastic.co/t/info-o-e-x-s-a-authenauthentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/300860 "2022-03-28T14:52:10Z")
History: Recently moved to SSL.(xpack enabled) Cluster infra: 3 master nodes, 8 data nodes M1,M2,M3 and D1,----- D8 In elastinsearch.yml discovery.zen.ping.unicast.hosts: \[M1,M2,M3,D1\] Issue: We have generated the e… --- ## [Docker Logstash Default(Bulit-in) plugins](https://discuss.elastic.co/t/docker-logstash-default-bulit-in-plugins/301451)
**Author:** [@leeseojune53](https://discuss.elastic.co/u/leeseojune53)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 6:07am UTC](https://discuss.elastic.co/t/docker-logstash-default-bulit-in-plugins/301451 "2022-04-04T06:07:38Z")
I want know Logstash's default plugins Below is the list of plugins for logstash. Do you have any instructions on the basic plug-in? logstash-codec-avro logstash-codec-cef logstash-codec-collectd logstash-codec-dots l… --- ## [Indexing a Circle (geoshape) Using NEST](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 10\ **Last updated:** [April 4, 2022, 5:33am UTC](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421 "2022-04-04T05:33:02Z")
Is there anyway of Indexing a Circle i.e. just have the lat/lng and a radius without first having to create a geojson polygon that represents it. i.e. just using its center lat/lng and its radius. Thanks. --- ## [Parent-Child Relationship performance](https://discuss.elastic.co/t/parent-child-relationship-performance/301416)
**Author:** [@sanders\_2345](https://discuss.elastic.co/u/sanders_2345)\ **Replies:** 0\ **Last updated:** [April 3, 2022, 8:17am UTC](https://discuss.elastic.co/t/parent-child-relationship-performance/301416 "2022-04-03T08:17:16Z")
We've one usecase to implement where we want to maintain a relationship between two types of documents. We tried to put in the same document but the document size exceeding 200kb. So we're exploring parent-child relation… --- ## [How to upgrade ElasticSearch In \`docker-compose.yml\`](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:52am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408 "2022-04-04T00:52:51Z")
According to Upgrade Elasticsearch | Elastic Installation and Upgrade Guide \[8.1\] | Elastic , if I wish to update the ElasticSearch instance started within docker-compose.yml, do I just need to stop all The insert data… --- ## [The consequences of manually changing the mapping of the destination index after reindexing has started](https://discuss.elastic.co/t/the-consequences-of-manually-changing-the-mapping-of-the-destination-index-after-reindexing-has-started/301245)
**Author:** [@Lala\_D](https://discuss.elastic.co/u/Lala_D)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:42am UTC](https://discuss.elastic.co/t/the-consequences-of-manually-changing-the-mapping-of-the-destination-index-after-reindexing-has-started/301245 "2022-04-04T00:42:34Z")
Hello everyone! I am new to Elasticsearch and will highly appreciate any reply. My task is to do reindexing. Without configuring settings, mappings or even creating the destination index, I started reindexing straight… --- ## [Changing path to which pv is pointing](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311)
**Author:** [@shisir99](https://discuss.elastic.co/u/shisir99)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:41am UTC](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311 "2022-04-04T00:41:32Z")
Hello, I want to change the path to which the following pv is pointing. I am using Elasticsearch helm chart provided by elastic.co --- ## [Index old zip files along with new files with index life management](https://discuss.elastic.co/t/index-old-zip-files-along-with-new-files-with-index-life-management/301324)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:40am UTC](https://discuss.elastic.co/t/index-old-zip-files-along-with-new-files-with-index-life-management/301324 "2022-04-04T00:40:07Z")
i am indexing files collected by syslog server using filebeat. And those indexes are given index life management as to create new indexes by appending current date when the size of the index file reaches 50Gb But i have… --- ## [Elasticsearch cloud returning errors on each query](https://discuss.elastic.co/t/elasticsearch-cloud-returning-errors-on-each-query/301331)
**Author:** [@Munashe\_komichi](https://discuss.elastic.co/u/Munashe_komichi)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:36am UTC](https://discuss.elastic.co/t/elasticsearch-cloud-returning-errors-on-each-query/301331 "2022-04-04T00:36:49Z")
Trying to run queries with Elasticsearch but getting errors, help would be appreciated! elasticsearch.exceptions.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[indices:data/write/ind… --- ## [Logging on startup](https://discuss.elastic.co/t/logging-on-startup/301354)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/logging-on-startup/301354 "2022-04-04T00:35:28Z")
Does logging, including login that the application is starting, begin on startup or does it start some time after? If so is this documented anywhere? --- ## [JVM heap size arguments](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343)
**Author:** [@Leo\_Collette](https://discuss.elastic.co/u/Leo_Collette)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343 "2022-04-04T00:35:05Z")
hello guys, in my system we adopted a pattern of adjusting the heap size parameter to 1G, but over time the service ends up consuming more than this value, is this ok or not? another question, does adjusting a limit for … --- ## [Strong authentication](https://discuss.elastic.co/t/strong-authentication/301355)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 4:59pm UTC](https://discuss.elastic.co/t/strong-authentication/301355 "2022-04-01T16:59:29Z")
Does the Native Realm use strong authentication like Kerberos, IPSEC, or Secure Shell (SSH)? Is that documented somewhere? --- ## [Unable to setup filebeat dashboard on kibana](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-on-kibana/301265)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 12:30am UTC](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-on-kibana/301265 "2022-04-04T00:30:21Z")
HI I have filebeat on a ec2 windows instance.I am trying to pull IIS logs .Elasticsearch, Kibana are in docker containers on an ubuntu instance.Filebeat is not in docker. So when i try to setup filebeat dashboard on kib… --- ## [Index life cycle policy to delete indices](https://discuss.elastic.co/t/index-life-cycle-policy-to-delete-indices/300649)
**Author:** [@tkotthakota](https://discuss.elastic.co/u/tkotthakota)\ **Replies:** 14\ **Last updated:** [April 4, 2022, 12:29am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-to-delete-indices/300649 "2022-04-04T00:29:43Z")
Hi, I created below policy to delete old indices. I notice that old indices are getting deleted but slowly . Meaning the count went down from 695 to 573 in 1 hour. Is it normal? PUT \_ilm/policy/QA\_only\_cleanup\_old\_indic… --- ## [Heartbeat behind proxy](https://discuss.elastic.co/t/heartbeat-behind-proxy/301194)
**Author:** [@sulfred](https://discuss.elastic.co/u/sulfred)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 11:15pm UTC](https://discuss.elastic.co/t/heartbeat-behind-proxy/301194 "2022-04-03T23:15:03Z")
I am running heartbeat in a container. The version of the heartbeat is heartbeat:8.1.0. My heartbeat is running behind the proxy and output to the elastic cloud. In the docker-compose.yml environment: HTTP\_PROXY: "ht… --- ## [Basic Authentication not working via python client](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435)
**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 9:55pm UTC](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435 "2022-04-03T21:55:12Z")
I have been experimenting with some very simply python code to interact with Elasticsearch. Up until a couple of days ago, everything was working great. I could add data to an index, read from the index, search, etc...… --- ## [After deleting an index and creating new index with same name, new data is visible for sometime after than old data is coming](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423)
**Author:** [@sona](https://discuss.elastic.co/u/sona)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 6:10pm UTC](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423 "2022-04-03T18:10:38Z")
I have deleted an index from my Elasticsearch and created the new index with same name. When I am trying to get doc.count using below command then initially it is showing 0 curl -X GET "localhost:9200/\_cat/indices?v&pr… --- ## [Connection refused elasticsearch port 9200 on ubuntu 20.04](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335)
**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\ **Replies:** 12\ **Last updated:** [April 3, 2022, 5:15pm UTC](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335 "2022-04-03T17:15:11Z")
good afternoon guys my English is not very good but I will try to explain myself I have a test server here at digitalocean with ubuntu 20.04 and I installed Elasticsearch for log collection on this same test server but … --- ## [Logstash pipeline running but not loading the data](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427)
**Author:** [@acozme](https://discuss.elastic.co/u/acozme)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427 "2022-04-03T15:02:27Z")
Hello! I'm starting to learn Elastick Stack. Right now I'm trying to load some data from a csv file from a tutorial. I think everything is ok, the pipeline is running but no data is loaded to Elastic. This is the conf f… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=987) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=989)