# Latest **URL:** https://discuss.elastic.co/latest.md?page=1018 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1019 --- ## [Logstash http input plugin, 429 busy and max\_pending\_requests](https://discuss.elastic.co/t/logstash-http-input-plugin-429-busy-and-max-pending-requests/311462)
**Author:** [@dorth](https://discuss.elastic.co/u/dorth)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 10:20pm UTC](https://discuss.elastic.co/t/logstash-http-input-plugin-429-busy-and-max-pending-requests/311462 "2022-08-04T22:20:42Z")
I am using the Logstash Http Input Plugin to receive logging data from an API Gateway (Apigee) and then send it into various S3 buckets. There are 6 Logstash nodes (m5.large 2 CPU/8 GB) sitting behind an AWS Application… --- ## [Documents not showing up in Discover, but are showing up in queries in Dev Tools](https://discuss.elastic.co/t/documents-not-showing-up-in-discover-but-are-showing-up-in-queries-in-dev-tools/311451)
**Author:** [@Arjun\_Meena](https://discuss.elastic.co/u/Arjun_Meena)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:19pm UTC](https://discuss.elastic.co/t/documents-not-showing-up-in-discover-but-are-showing-up-in-queries-in-dev-tools/311451 "2022-08-04T21:19:07Z")
I have an index spoms-audit-2022.08.04 in which there are 4 documents. When I search them from the dev console, i am able to see all the documents. Below is the search query: These are the results I get back: As… --- ## [New Elasticsearch 8 Java API - Insert date time field](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 9:10pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351 "2022-08-04T21:10:46Z")
I am using the new Elasticsearch 8 Java client API to persist document that contains datetime field. Also, this is a spring boot application. The issue I got is, if I set a field as LocalDateTime, and try to save to Ela… --- ## [If Condition in JSON filter](https://discuss.elastic.co/t/if-condition-in-json-filter/311456)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 5\ **Last updated:** [August 4, 2022, 8:10pm UTC](https://discuss.elastic.co/t/if-condition-in-json-filter/311456 "2022-08-04T20:10:15Z")
Hello, I am ingesting JSON data to logstash, and I am using JSON filter. In the JSON data, when the KEY is either Value 1 or Value 2, I should add a field, and if this key is missing in the logs, I will have to drop it… --- ## [Create a field such that lookup is faster on that field](https://discuss.elastic.co/t/create-a-field-such-that-lookup-is-faster-on-that-field/311449)
**Author:** [@Aditya\_Verma2](https://discuss.elastic.co/u/Aditya_Verma2)\ **Replies:** 5\ **Last updated:** [August 4, 2022, 7:28pm UTC](https://discuss.elastic.co/t/create-a-field-such-that-lookup-is-faster-on-that-field/311449 "2022-08-04T19:28:02Z")
Is there any way i can keep a field and its mapping in memory or cached so that lookup on the basis of that field is faster even though there may be more than 1000 clauses specified for that field in search query. --- ## [Prune Plugin error](https://discuss.elastic.co/t/prune-plugin-error/311323)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 6:09pm UTC](https://discuss.elastic.co/t/prune-plugin-error/311323 "2022-08-04T18:09:50Z")
Hello, I am trying to use Prune filter to parse the data because the data format is foo:bar, but I am unsuccessful. I am getting the below error. The configuration is working without the prune filter. Please advise on … --- ## [Issue with Date Filter in Timelion (Kibana 6.8), TODAY starts at 9AM](https://discuss.elastic.co/t/issue-with-date-filter-in-timelion-kibana-6-8-today-starts-at-9am/311298)
**Author:** [@anthony\_g](https://discuss.elastic.co/u/anthony_g)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 5:44pm UTC](https://discuss.elastic.co/t/issue-with-date-filter-in-timelion-kibana-6-8-today-starts-at-9am/311298 "2022-08-04T17:44:32Z")
Hello, I'm really new to the Elastic Stack and I'm currently working on some dashboards that will rely on time series built using Timelion. I'm working on Kibana 6.8 and I have a totally unexpected issue: whenever I se… --- ## [The list of transactions no longer appears after a few seconds](https://discuss.elastic.co/t/the-list-of-transactions-no-longer-appears-after-a-few-seconds/308658)
**Author:** [@btsinfo](https://discuss.elastic.co/u/btsinfo)\ **Replies:** 5\ **Last updated:** [August 4, 2022, 5:44pm UTC](https://discuss.elastic.co/t/the-list-of-transactions-no-longer-appears-after-a-few-seconds/308658 "2022-08-04T17:44:04Z")
hello, i used 8.2.3, i use observability . In my case, I'm using pipelines to customize transaction.name. since the upgrade to 8.3, the list of service.name transactions is displayed correctly at first, then after a few… --- ## [ELK-functionbeat-not-able-to-push-data](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311333)
**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311333 "2022-08-03T17:28:15Z")
Hello Team, We are facing the below error in AWS function beat lambda. Cannot index event publisher.Event{Content:beat.Event More error details as below: Error: 2022-07-22T15:15:01.087Z WARN \[elasticsearch\] elasticse… --- ## [Pattern to extract specific integer and string](https://discuss.elastic.co/t/pattern-to-extract-specific-integer-and-string/311332)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 3:57pm UTC](https://discuss.elastic.co/t/pattern-to-extract-specific-integer-and-string/311332 "2022-08-04T15:57:59Z")
Input: CEES:1.0|NGINX|NGINX|1.17.6|400|devTime=03/Aug Output response\_code: 400 message: devTime=03/Aug Pattern i have applied ^LEEF.\*\\|%{INT:response\_code}%{GREEDYDATA:log\_message Output i got response\_code: 400 … --- ## [Highlighting using words from another field](https://discuss.elastic.co/t/highlighting-using-words-from-another-field/311444)
**Author:** [@stobyer](https://discuss.elastic.co/u/stobyer)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/highlighting-using-words-from-another-field/311444 "2022-08-04T14:52:12Z")
Hello, I'm trying to highlight text using words from other field. What do I mean? I have a documents similar to the following: { property: 1, content: "a lot of animals including cats and dogs", keywords: \["cat", "… --- ## [RUM and React-Native](https://discuss.elastic.co/t/rum-and-react-native/310648)
**Author:** [@abeasley](https://discuss.elastic.co/u/abeasley)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 1:47pm UTC](https://discuss.elastic.co/t/rum-and-react-native/310648 "2022-07-26T13:47:43Z")
I'm researching adding Elastic logging to our application which is written in React-Native. It appears that the RUM integration for the Elastic Agent has everything we are looking for but there doesn't appear to be a cu… --- ## [Enrich processor error: mapper\_parsing\_exception](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 2:38pm UTC](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440 "2022-08-04T14:38:46Z")
I'm trying to enrich data to my index called "time\_availability\_alarmed\_cells". The mapping for that index is: { "mappings": { "\_doc": { "properties": { "location": { "properties": { … --- ## [Getting FileSystemNotFoundException when using programatically self-attached apm agent](https://discuss.elastic.co/t/getting-filesystemnotfoundexception-when-using-programatically-self-attached-apm-agent/310829)
**Author:** [@moser4035](https://discuss.elastic.co/u/moser4035)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 1:55pm UTC](https://discuss.elastic.co/t/getting-filesystemnotfoundexception-when-using-programatically-self-attached-apm-agent/310829 "2022-08-04T13:55:36Z")
APM Server version: v8.3.0 APM Agent language and version: Java 1.33.0 Hi, I followed the instruction to set up the self-attached APM agent: Programmatic API setup to self-attach | APM Java Agent Reference \[1.x\] | Ela… --- ## [What are the plans for the development of php extension?](https://discuss.elastic.co/t/what-are-the-plans-for-the-development-of-php-extension/311432)
**Author:** [@Roqmeu](https://discuss.elastic.co/u/Roqmeu)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 1:52pm UTC](https://discuss.elastic.co/t/what-are-the-plans-for-the-development-of-php-extension/311432 "2022-08-04T13:52:35Z")
We have added pdo (databaseName, host, port) context support to apm-agent-php and added support for curl\_multi\_... Do you have plans to implement it? This functionality is seriously lacking for the transition from NewR… --- ## [Filebeat mysql module does not work for mariadb logs?](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398 "2022-08-04T13:51:47Z")
Hi, i have filebeat 7.16.2 installed with mysql module enabled to collect mariadb logs. - module: mysql error: enabled: true var.paths: \["/home/user/var/log/\*\_error.log"\] slowlog: enabled: true var.… --- ## [Getting Authentication Exception even CA cert is provided (python)](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360)
**Author:** [@Brian\_Chan](https://discuss.elastic.co/u/Brian_Chan)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:50pm UTC](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360 "2022-08-04T13:50:31Z")
Hi everyone, I have a self-managed elasticsearch 8.3.0 cluster with security enabled. When using python client, even I included the CA cert, I still get the error: AuthenticationException(401, 'security\_exception', 'mis… --- ## [ElasticSearch on Kubernetes (ECK): Enable OR Disable cluster-autoscaler.kubernetes.io/safe-to-evict](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-eck-enable-or-disable-cluster-autoscaler-kubernetes-io-safe-to-evict/311431)
**Author:** [@aqueous](https://discuss.elastic.co/u/aqueous)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-eck-enable-or-disable-cluster-autoscaler-kubernetes-io-safe-to-evict/311431 "2022-08-04T13:44:03Z")
I am using the Elastic on Kubernetes (operator version 2.1). How can I enable or disable the following annotation on the ElasticSearch nodes managed by ECK? "cluster-autoscaler.kubernetes.io/safe-to-evict": \ **Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 1:33pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352 "2022-08-04T13:33:28Z") I am using the new Elasticsearch 8 Java client API to query data and sort by one field. esClient.search(s -\> { return s .index("employee") .query(q -\> q … --- ## [MUTIPULE VALUES SEARCH](https://discuss.elastic.co/t/mutipule-values-search/311422)
**Author:** [@shanker241](https://discuss.elastic.co/u/shanker241)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 1:08pm UTC](https://discuss.elastic.co/t/mutipule-values-search/311422 "2022-08-04T13:08:11Z")
HI ALL, I Unable to search with mutipule values Please find the follwoing code its not working . function getRiskRegister(monthYear) { const client = new elasticsearch.Client({ host: elasticHost }); monthYear = 'Ma… --- ## [Logstash filling up my space inside/var/log/messages file](https://discuss.elastic.co/t/logstash-filling-up-my-space-inside-var-log-messages-file/311415)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:06pm UTC](https://discuss.elastic.co/t/logstash-filling-up-my-space-inside-var-log-messages-file/311415 "2022-08-04T13:06:39Z")
Hello all, I been tying to find a solution for this since long. Trying to reach out to the community. The logstash is filling up the file /var/log/messages file space, I understand logstash does not log to /var/log/me… --- ## [File beat log messages causing disk space to be full](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:02pm UTC](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991 "2022-08-04T13:02:57Z")
Hello all, Hope someone had this issue before. Look like my /var/log/messages is getting really high since we have configured filebeat. The disk space is getting lower and almost 95% of this. How can I make sure that… --- ## [I cant acces Elasticsearch via Webrowser](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402)
**Author:** [@notaelasticsearcher](https://discuss.elastic.co/u/notaelasticsearcher)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402 "2022-08-04T12:44:47Z")
I use elasticsearch 8.3.3. When i type curl -X GET "localhost:9200" { "name" : "elkvm", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "P\_UJ2AcOSRmj3AWwMylLvQ", "version" : { "number" : "8.3.3", "bui… --- ## [Duplicate field.keyword and field in data stream within Observability](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383)
**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383 "2022-08-04T12:44:26Z")
Hi, I recently moved an existing configuration of Logstash indexing to a setup with Logstash using a data stream with component templates. As recommended the component template was broken down into two templates, one fo… --- ## [Rollover policy is not working](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377)
**Author:** [@Ankit\_Grover](https://discuss.elastic.co/u/Ankit_Grover)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 12:14pm UTC](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377 "2022-08-04T12:14:50Z")
my rollover policy is not working after the condition fail of 2mb document size can anyone please help me. I am newbie in elk stack. Thanks --- ## [ThreatQuotient Integration needs updating](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390)
**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 12:02pm UTC](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390 "2022-08-04T12:02:50Z")
The current integration still requires the old means of authenticating with the TIP server using Oauth2 Client ID and Oauth2 Client Secret which need to be generated via CLI commands, while these days they have switched… --- ## [Failed to parse field](https://discuss.elastic.co/t/failed-to-parse-field/311392)
**Author:** [@Kevin\_Galarza](https://discuss.elastic.co/u/Kevin_Galarza)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 11:13am UTC](https://discuss.elastic.co/t/failed-to-parse-field/311392 "2022-08-04T11:13:03Z")
--- ## [If condition in logstash output doesn't work](https://discuss.elastic.co/t/if-condition-in-logstash-output-doesnt-work/311276)
**Author:** [@zzcpower](https://discuss.elastic.co/u/zzcpower)\ **Replies:** 8\ **Last updated:** [August 4, 2022, 11:05am UTC](https://discuss.elastic.co/t/if-condition-in-logstash-output-doesnt-work/311276 "2022-08-04T11:05:58Z")
The config file is shown as below input { kafka { bootstrap\_servers =\> "localhost:9092" group\_id =\> "log\_monitor" auto\_offset\_reset =\> "latest" consumer\_threads =\> 1 topics =\> \["test\_log"\] } } f… --- ## [Порядок слов в полнотекстном поиске](https://discuss.elastic.co/t/topic/310239)
**Author:** [@Evgeny\_Antipin](https://discuss.elastic.co/u/Evgeny_Antipin)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 11:00am UTC](https://discuss.elastic.co/t/topic/310239 "2022-08-04T11:00:54Z")
Доброго дня. Есть такой индекс: { "ta": { "mappings": { "properties": { "address": { "type": "text" }, "obj\_id": { … --- ## [Could not find or load main class "-](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307)
**Author:** [@AULIA\_KHOIRUN\_NISA\_N](https://discuss.elastic.co/u/AULIA_KHOIRUN_NISA_N)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:39am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307 "2022-08-04T09:39:04Z")
''' can anybody help me, cause I'm trying to start elasticsearch bu it did't work Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and… [Previous page](https://discuss.elastic.co/latest.md?page=1017) [Next page](https://discuss.elastic.co/latest.md?page=1019)