# Latest **URL:** https://discuss.elastic.co/latest.md?page=1007 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1008 --- ## [Kibana - Alert data viewer and Edit Rule are stuck and slow](https://discuss.elastic.co/t/kibana-alert-data-viewer-and-edit-rule-are-stuck-and-slow/312103)
**Author:** [@Mor123460](https://discuss.elastic.co/u/Mor123460)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 12:52pm UTC](https://discuss.elastic.co/t/kibana-alert-data-viewer-and-edit-rule-are-stuck-and-slow/312103 "2022-08-15T12:52:03Z")
Hey. I'm running a cluster in 2 different environments. With the same versions for all of the nodes and the kibana (8.1.2). But in one of the environments, the Alert data viewer or the Edit rule (any rule) are getting… --- ## [Viewing Documents in Kibana](https://discuss.elastic.co/t/viewing-documents-in-kibana/311459)
**Author:** [@jhop](https://discuss.elastic.co/u/jhop)\ **Replies:** 7\ **Last updated:** [August 15, 2022, 12:48pm UTC](https://discuss.elastic.co/t/viewing-documents-in-kibana/311459 "2022-08-15T12:48:46Z")
Hi, I am new to Elastic. I have successfully mapped and created a new index using Management\>Dev Tools\>Console. I can view the index on the Index Management screen. Using the console I successfully created two document… --- ## [Filebeat - Journald input and parser support](https://discuss.elastic.co/t/filebeat-journald-input-and-parser-support/312099)
**Author:** [@Philipp\_Wiesner](https://discuss.elastic.co/u/Philipp_Wiesner)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 12:38pm UTC](https://discuss.elastic.co/t/filebeat-journald-input-and-parser-support/312099 "2022-08-15T12:38:31Z")
I've seen a couple of already closed topics, with no real result about the JournalD input of Filebeat and its support for multiline messages or even the newly added parser support. There exists a couple of GitHub issues… --- ## [Failed to parse field \[msg.RequestPort\] of type \[long\]](https://discuss.elastic.co/t/failed-to-parse-field-msg-requestport-of-type-long/312080)
**Author:** [@ayarosh](https://discuss.elastic.co/u/ayarosh)\ **Replies:** 4\ **Last updated:** [August 15, 2022, 12:14pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-msg-requestport-of-type-long/312080 "2022-08-15T12:14:41Z")
Filebeat cannot parse and drop the logs when receives the different type of input. "RequestPort":"-" (it usually contains the long type number) Error: {\\"type\\":\\"mapper\_parsing\_exception\\",\\"reason\\":\\"failed to pars… --- ## [Using app.kubernetes.io/name label](https://discuss.elastic.co/t/using-app-kubernetes-io-name-label/312088)
**Author:** [@AssafKatz3](https://discuss.elastic.co/u/AssafKatz3)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 11:04am UTC](https://discuss.elastic.co/t/using-app-kubernetes-io-name-label/312088 "2022-08-15T11:04:46Z")
Hi, I am trying to define service as the content of app.kubernetes.io/name label if it empty by: if !\[service\] and \[kubernetes\]\[labels\]\[app\_kubernetes\_io/name\] { mutate { add\_field =\> { "service… --- ## [Index \_stats index\_total should be calculated with scroll?](https://discuss.elastic.co/t/index-stats-index-total-should-be-calculated-with-scroll/312085)
**Author:** [@kin122](https://discuss.elastic.co/u/kin122)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 10:55am UTC](https://discuss.elastic.co/t/index-stats-index-total-should-be-calculated-with-scroll/312085 "2022-08-15T10:55:52Z")
hi i monitors indices with \_stats API. i found index\_total affected by scroll its calculated by irate of prometheus. How do I remove the effection of scroll to get the right statsdata？ --- ## [How to (offsite) backup and recover snapshots](https://discuss.elastic.co/t/how-to-offsite-backup-and-recover-snapshots/312081)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 5\ **Last updated:** [August 15, 2022, 10:30am UTC](https://discuss.elastic.co/t/how-to-offsite-backup-and-recover-snapshots/312081 "2022-08-15T10:30:15Z")
Hi - have a ES cluster consisting of lets say 20 nodes for arguments sake. Of course the indexes and shards are spread across the nodes... now lets say I do a snapshot. It looks like each node snapshots the data on its… --- ## [Metricbeat bad request error](https://discuss.elastic.co/t/metricbeat-bad-request-error/312074)
**Author:** [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 7:23am UTC](https://discuss.elastic.co/t/metricbeat-bad-request-error/312074 "2022-08-15T07:23:56Z")
Hello, I keep getting the following Errors by metricbeat ERROR#011module/wrapper.go:259#011Error fetching data for metricset elasticsearch.index: HTTP error 400 in : 400 Bad Request ERROR#011module/wrapper.go:259#011E… --- ## [Error using API to connect to cluster](https://discuss.elastic.co/t/error-using-api-to-connect-to-cluster/311970)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 9:18am UTC](https://discuss.elastic.co/t/error-using-api-to-connect-to-cluster/311970 "2022-08-15T09:18:05Z")
ES version 7.17.1 I have just enabled security on an existing cluster that date back to the time when one had to pay to get "security". ;). I can connect using curl on the elastic user and get the cluster health. So t… --- ## [Logstash match Thai timestamp](https://discuss.elastic.co/t/logstash-match-thai-timestamp/312077)
**Author:** [@Denis\_Smereka](https://discuss.elastic.co/u/Denis_Smereka)\ **Replies:** 0\ **Last updated:** [August 15, 2022, 8:22am UTC](https://discuss.elastic.co/t/logstash-match-thai-timestamp/312077 "2022-08-15T08:22:09Z")
I have certain logs which contain the following entries: 2022-08-10 12:55:58.535 Started. ๒๐๒๒-๐๘-๑๐ ๑๘:๓๔:๔๘.๒๗๑ Reader #0: ... The first line successfully matches using the pattern TIMESTAMP\_ISO8601. Second line als… --- ## [The \_ignored field not working?](https://discuss.elastic.co/t/the-ignored-field-not-working/310460)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 4\ **Last updated:** [August 15, 2022, 8:16am UTC](https://discuss.elastic.co/t/the-ignored-field-not-working/310460 "2022-08-15T08:16:18Z")
Summary I'm using ignore\_malformed, but get no results when searching for the \_ignored field. Details I've isolated the problem to a small example. I: Create the index with ignore\_malformed set to true. Insert a cou… --- ## [Searchable snapshots](https://discuss.elastic.co/t/searchable-snapshots/310598)
**Author:** [@Morez](https://discuss.elastic.co/u/Morez)\ **Replies:** 6\ **Last updated:** [August 15, 2022, 5:49am UTC](https://discuss.elastic.co/t/searchable-snapshots/310598 "2022-08-15T05:49:36Z")
As mentioned in the Elasticsearch documentation, searchable snapshot is created typically by ILM, when index reaches to the cold or frozen data tier. Some times ago, it was mentioned that frozen data tier is deprecated … --- ## [How to make an alert for the JVM CPU usage?](https://discuss.elastic.co/t/how-to-make-an-alert-for-the-jvm-cpu-usage/311933)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 4:31am UTC](https://discuss.elastic.co/t/how-to-make-an-alert-for-the-jvm-cpu-usage/311933 "2022-08-15T04:31:07Z")
Version: 7.17.3 Elastic Cloud Hello everyone, I have a Java Agent running on apm and I want to set an alert for the CPU usage of the JVM. Is there any way to approach it? Been trying by the Alerts app in Kibana but coul… --- ## [HashMap\ to JsonData in new elasticsearch Java client API](https://discuss.elastic.co/t/hashmap-string-object-to-jsondata-in-new-elasticsearch-java-client-api/311357)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 1:58am UTC](https://discuss.elastic.co/t/hashmap-string-object-to-jsondata-in-new-elasticsearch-java-client-api/311357 "2022-08-15T01:58:38Z")
How to convert a hashmap to co.elastic.clients.json.JsonData in new elasticsearch Java client API? I am doing this conversion to provide the document to a IndexRequest.Builder. IndexRequest.Builder\ request = … --- ## [Secure specific indices from users manually updating documents](https://discuss.elastic.co/t/secure-specific-indices-from-users-manually-updating-documents/312042)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 1:54am UTC](https://discuss.elastic.co/t/secure-specific-indices-from-users-manually-updating-documents/312042 "2022-08-15T01:54:49Z")
Hi, Elasticsearch Version: 7.16.1 ECK version: 1.6.1 We use ELK to push audit logs from one of our applications and we'd like to know if there is a way to know if any HUMAN user manually updated any documents in that … --- ## [Layer dot found result](https://discuss.elastic.co/t/layer-dot-found-result/312028)
**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\ **Replies:** 28\ **Last updated:** [August 14, 2022, 6:37pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028 "2022-08-14T18:37:57Z")
Hello everyone, I am having trouble viewing points in my kibana map, It says No results found , I have made sure the data is in geo.point format, so I have no clue what the problem could be. below is an image of the pr… --- ## [Ruby exception occurred: uninitialized constant when i am trying to devide a field value by 100](https://discuss.elastic.co/t/ruby-exception-occurred-uninitialized-constant-when-i-am-trying-to-devide-a-field-value-by-100/312058)
**Author:** [@Faiz\_Shamri](https://discuss.elastic.co/u/Faiz_Shamri)\ **Replies:** 7\ **Last updated:** [August 14, 2022, 6:19pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-uninitialized-constant-when-i-am-trying-to-devide-a-field-value-by-100/312058 "2022-08-14T18:19:08Z")
I am trying to devide filed value by 100 but i am getting Pipelines running {:count=\>1, :running\_pipelines=\>\[:main\], :non\_running\_pipelines=\>\[\]} \[ERROR\] 2022-08-14 00:10:07.738 \[\[main\]\>worker2\] ruby - Ruby exception occu… --- ## [\[Logstash\] \[Filebeat\] Using codec Plain and JSON for the same input](https://discuss.elastic.co/t/logstash-filebeat-using-codec-plain-and-json-for-the-same-input/310836)
**Author:** [@hdryx](https://discuss.elastic.co/u/hdryx)\ **Replies:** 8\ **Last updated:** [August 14, 2022, 4:55pm UTC](https://discuss.elastic.co/t/logstash-filebeat-using-codec-plain-and-json-for-the-same-input/310836 "2022-08-14T16:55:46Z")
Hi, Actually we have this architecture : Filebeat --\> Kafaka --\> Logstash The Logstash is using this input config : file1.conf input { kafka { codec =\> json bootstrap\_servers =\> "....." topics\_pattern =\>… --- ## [\[Filebeat Threat Intel\] MISP doesnt show anything](https://discuss.elastic.co/t/filebeat-threat-intel-misp-doesnt-show-anything/311539)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 2\ **Last updated:** [August 14, 2022, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-threat-intel-misp-doesnt-show-anything/311539 "2022-08-14T15:18:45Z")
\[Filebeat Threat Intel\] MISP doesnt show any information. What can i do to resolve this problem? --- ## [Deploy Elastic Agent successful but has no data steams](https://discuss.elastic.co/t/deploy-elastic-agent-successful-but-has-no-data-steams/311955)
**Author:** [@Han\_Cloud\_Strife](https://discuss.elastic.co/u/Han_Cloud_Strife)\ **Replies:** 1\ **Last updated:** [August 14, 2022, 3:00pm UTC](https://discuss.elastic.co/t/deploy-elastic-agent-successful-but-has-no-data-steams/311955 "2022-08-14T15:00:11Z")
Hi there! I got a problem with Elastic Agent when using ELK on docker. I have two docker-compose files for creating certificate and deploying ELK purpose. I enrolled elastic agent successfull \[1\] however I got bad\_certi… --- ## [Logstatsh throws cluster - Exception in monitor thread while connecting to server](https://discuss.elastic.co/t/logstatsh-throws-cluster-exception-in-monitor-thread-while-connecting-to-server/312049)
**Author:** [@momarious](https://discuss.elastic.co/u/momarious)\ **Replies:** 4\ **Last updated:** [August 14, 2022, 2:10pm UTC](https://discuss.elastic.co/t/logstatsh-throws-cluster-exception-in-monitor-thread-while-connecting-to-server/312049 "2022-08-14T14:10:17Z")
Hello everyone this is my first post in this forum, well I would like to synchronize a MongoDB database with Elasticsearch thanks to Logstash, I used version 8.3.3 of ELK with a MongoDriver4.4. I have configured the pipe… --- ## [Version\_conflict\_engine\_exception，help me](https://discuss.elastic.co/t/version-conflict-engine-exception-help-me/312065)
**Author:** [@wangshouqi111](https://discuss.elastic.co/u/wangshouqi111)\ **Replies:** 1\ **Last updated:** [August 14, 2022, 12:29pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-help-me/312065 "2022-08-14T12:29:17Z")
Elasticsearch Version 7.1.1 client: public void index(List\ promoSkuInfoEsEntries) throws IOException { BulkRequest request = new BulkRequest(); List\\> list… --- ## [java.lang.IllegalStateException: Unable to access 'path.repo'](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-repo/312009)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 6\ **Last updated:** [August 14, 2022, 9:29am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-repo/312009 "2022-08-14T09:29:55Z")
Hi guys, I have a single node elastic setup o windows10. i tried to create repository on shared folder. the process i did was, i created a folder (Es\_backup) in shared drive then i mapped folder on my elastic local mach… --- ## [What is "Process" in JVM metrics? \[APM\]](https://discuss.elastic.co/t/what-is-process-in-jvm-metrics-apm/312015)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [August 14, 2022, 5:40am UTC](https://discuss.elastic.co/t/what-is-process-in-jvm-metrics-apm/312015 "2022-08-14T05:40:24Z")
I know that this "CPU" refers to the System metrics as I checked it here, what I can't picture for sure is what this process mean. Silly question but I still don't want to go without being sure of what it means. Glad … --- ## [Kibana 7.17.1 -- can't find index pattern uuids?](https://discuss.elastic.co/t/kibana-7-17-1-cant-find-index-pattern-uuids/312059)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [August 13, 2022, 10:25pm UTC](https://discuss.elastic.co/t/kibana-7-17-1-cant-find-index-pattern-uuids/312059 "2022-08-13T22:25:23Z")
On several occasions with older release I have exported saved objects fiddled with the pattern uuid and then imported them back. I am now doing a major migration of dashboards where I need to change the index patterns, … --- ## [Help to parse date time](https://discuss.elastic.co/t/help-to-parse-date-time/312045)
**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\ **Replies:** 1\ **Last updated:** [August 13, 2022, 4:15pm UTC](https://discuss.elastic.co/t/help-to-parse-date-time/312045 "2022-08-13T16:15:47Z")
Hi, I am trying to parse datetime bellow on logstash but i couldnt. The line is: "Aug 13, 2022 02:24:02.532177318 -03"|10.191.69.248|60542|10.110.62.45|3868|||PABLM01-SAECIS01-Gx-Openet;787252731;575065246;62f6e893-9… --- ## [When sorting by distance truncating the distance sort value for fallback sort criteria](https://discuss.elastic.co/t/when-sorting-by-distance-truncating-the-distance-sort-value-for-fallback-sort-criteria/312055)
**Author:** [@quesurifn](https://discuss.elastic.co/u/quesurifn)\ **Replies:** 0\ **Last updated:** [August 13, 2022, 2:50pm UTC](https://discuss.elastic.co/t/when-sorting-by-distance-truncating-the-distance-sort-value-for-fallback-sort-criteria/312055 "2022-08-13T14:50:21Z")
Hello all, We're sorting with elasticsearch like so: { "size": 300, "from": 0, "sort": \[ { "\_geo\_distance": { "geoLocation": { "lat": 29.7407, … --- ## [Remove Arguments from URI in kibana visualization](https://discuss.elastic.co/t/remove-arguments-from-uri-in-kibana-visualization/312053)
**Author:** [@Vaibhav\_Mathur1](https://discuss.elastic.co/u/Vaibhav_Mathur1)\ **Replies:** 0\ **Last updated:** [August 13, 2022, 12:37pm UTC](https://discuss.elastic.co/t/remove-arguments-from-uri-in-kibana-visualization/312053 "2022-08-13T12:37:09Z")
I am creating a visualisation with counting total urls hits I am able to get all urls and counts but i am getting url with arguments as below ur1?a=1. =\> count 100 url1?b=2 =\> count 100 what i want is url1 =\> co… --- ## [Ece proxy 9200 Connection reset by peer](https://discuss.elastic.co/t/ece-proxy-9200-connection-reset-by-peer/311889)
**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\ **Replies:** 1\ **Last updated:** [August 13, 2022, 3:47am UTC](https://discuss.elastic.co/t/ece-proxy-9200-connection-reset-by-peer/311889 "2022-08-13T03:47:34Z")
ece version: 2.3.1 os: CentOS Linux release 7.9.2009 (Core) #curl 127.0.0.1:9200 curl: (56) Recv failure: Connection reset by peer proxy error log \[2022-08-11 01:19:54,648\]\[ERROR\]\[akka.io.SelectionHandler$$anon$1\] a… --- ## [Getting exception while searching search as type field type](https://discuss.elastic.co/t/getting-exception-while-searching-search-as-type-field-type/310839)
**Author:** [@Munish\_Bhardwaj](https://discuss.elastic.co/u/Munish_Bhardwaj)\ **Replies:** 1\ **Last updated:** [August 13, 2022, 2:04am UTC](https://discuss.elastic.co/t/getting-exception-while-searching-search-as-type-field-type/310839 "2022-08-13T02:04:16Z")
I have a requirement where I need to implement search recommendations and I have opted for the search as you type field. My existing mapping for the field was "text" and now I have changed it to "search\_as\_you\_type" and … [Previous page](https://discuss.elastic.co/latest.md?page=1006) [Next page](https://discuss.elastic.co/latest.md?page=1008)