# Latest **URL:** https://discuss.elastic.co/latest.md?page=1062 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1063 --- ## [Failed to monitor mongo cluster](https://discuss.elastic.co/t/failed-to-monitor-mongo-cluster/308453)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 5\ **Last updated:** [July 4, 2022, 1:05pm UTC](https://discuss.elastic.co/t/failed-to-monitor-mongo-cluster/308453 "2022-07-04T13:05:05Z")
I have multiple hosts specified in hosts like this hosts: \["ip1:port1", "ip2:port1"\]. But metricbeats showing error like this. How can i configure it to work correctly fetching data for metricset mongodb.dbstats: could… --- ## [Upgrade storage space for elasticsearch](https://discuss.elastic.co/t/upgrade-storage-space-for-elasticsearch/218630)
**Author:** [@atotheb](https://discuss.elastic.co/u/atotheb)\ **Replies:** 5\ **Last updated:** [July 4, 2022, 12:59pm UTC](https://discuss.elastic.co/t/upgrade-storage-space-for-elasticsearch/218630 "2022-07-04T12:59:49Z")
I try to increase the capacity of my persistant volume for elasticsearch. However this seems to be not so straightforward, as explained in this article: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-orchestr… --- ## [How to make beats send data to multiple instances](https://discuss.elastic.co/t/how-to-make-beats-send-data-to-multiple-instances/308785)
**Author:** [@Santhosh\_Kumar247](https://discuss.elastic.co/u/Santhosh_Kumar247)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 12:03pm UTC](https://discuss.elastic.co/t/how-to-make-beats-send-data-to-multiple-instances/308785 "2022-07-04T12:03:39Z")
Hello, I have the following setting in the filebeats.yml: Two conditions input for logs filebeat.inputs: - paths: - E: \\ log\_type1 \_ \*. Log fields\_under\_root: true fields: type: type1 - paths: - E: \\ … --- ## [How to set TimeStamp from java?](https://discuss.elastic.co/t/how-to-set-timestamp-from-java/308812)
**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 12:01pm UTC](https://discuss.elastic.co/t/how-to-set-timestamp-from-java/308812 "2022-07-04T12:01:37Z")
Hi, i am using the elasticsearch-java-Client: \ \co.elastic.clients\ \elasticsearch-java\ \8.2.0\ \ and connecte… --- ## [Hi I need to remove legends from vertical graphs in kibana plots how do i do that?](https://discuss.elastic.co/t/hi-i-need-to-remove-legends-from-vertical-graphs-in-kibana-plots-how-do-i-do-that/308799)
**Author:** [@damodar\_kv](https://discuss.elastic.co/u/damodar_kv)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 10:58am UTC](https://discuss.elastic.co/t/hi-i-need-to-remove-legends-from-vertical-graphs-in-kibana-plots-how-do-i-do-that/308799 "2022-07-04T10:58:17Z")
Continuing the discussion from Can I hide legend from visualization?: --- ## [Migrating java application to Elasticsearch 8.x from ES 7.17.5](https://discuss.elastic.co/t/migrating-java-application-to-elasticsearch-8-x-from-es-7-17-5/308809)
**Author:** [@Swati\_Jain1](https://discuss.elastic.co/u/Swati_Jain1)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 10:46am UTC](https://discuss.elastic.co/t/migrating-java-application-to-elasticsearch-8-x-from-es-7-17-5/308809 "2022-07-04T10:46:51Z")
We are using Elasticsearch 7.17.5 which is used by a Java 8 application. We are planning to upgrade to Elasticsearch 8.x. Since High-level Rest Client is now deprecated I am unable to resolve dependencies in order to us… --- ## [Unable to initialize central management for Elastic Agents](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311)
**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\ **Replies:** 8\ **Last updated:** [July 4, 2022, 10:36am UTC](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311 "2022-07-04T10:36:46Z")
I am new to Elasticsearch and was trying to use Fleet and Elastic Agent. It was fine initially as everything was working perfectly fine; managed to pipe logs to ES, etc, but now when I try to navigate to the Fleet page, … --- ## [Unable to connect to Elastic-Search Server](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-server/308804)
**Author:** [@Shobhit\_Jain1](https://discuss.elastic.co/u/Shobhit_Jain1)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 9:52am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-server/308804 "2022-07-04T09:52:38Z")
A few months back, I deployed the Elastic-Search(version - 8.0.1) on Kubernetes as a service as External load balancer using this guide. Now, I am unable to perform any read or write operation on ES. I checked the logs,… --- ## [Delete document from enterprise search](https://discuss.elastic.co/t/delete-document-from-enterprise-search/308637)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 9:13am UTC](https://discuss.elastic.co/t/delete-document-from-enterprise-search/308637 "2022-07-04T09:13:19Z")
Hello Dear, I'm implementing elastic enterprise search with express.js. So my task is deleting documents from app search. Firstly i used destroyDocuments. But parameter of this function is only document id. So my questi… --- ## [Elasticsearch, Multiple Filebeat, Logstash](https://discuss.elastic.co/t/elasticsearch-multiple-filebeat-logstash/308791)
**Author:** [@balasani\_sri](https://discuss.elastic.co/u/balasani_sri)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-filebeat-logstash/308791 "2022-07-04T08:24:32Z")
Hello does anyone knows if is it possible to have multiple beats pointing to the same input port and then having single index output. Basically I need to identify which beat arrives and then how to find if any beat went … --- ## [Run aggregation on collapsed result](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 8\ **Last updated:** [July 4, 2022, 8:08am UTC](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171 "2022-07-04T08:08:42Z")
Hello, I have an issue that, first I need to collapse data by a field after sorting by another field then I need to perform some complex aggregation on that output. How to do that ? can anyone help ? --- ## [Elasticsearch recovery tools](https://discuss.elastic.co/t/elasticsearch-recovery-tools/308739)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-recovery-tools/308739 "2022-07-04T08:05:16Z")
One issue that seem to be problematic (and reoccurring) is that there isn't much information in the error messages when things like "NODE\_LEFT" / "no\_valid\_shard\_copy" populate error messages when performing things like … --- ## [ES rolling upgrade from 6.3.2 to 6.8.22, ES plug-in version should be upgraded to 6.8.22?](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 7\ **Last updated:** [July 4, 2022, 7:51am UTC](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325 "2022-07-04T07:51:11Z")
In order to fix the log4j2 vulnerability, we plan to upgrade the ES version from 6.3.2 to 6.8.22, and 7.x to 7.16.2. When reading the rolling upgrade document, the rolling upgrade document for 7.16.2 mentioned that the p… --- ## [Metricbeat fails to parse field](https://discuss.elastic.co/t/metricbeat-fails-to-parse-field/308446)
**Author:** [@cracanut](https://discuss.elastic.co/u/cracanut)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 7:41am UTC](https://discuss.elastic.co/t/metricbeat-fails-to-parse-field/308446 "2022-07-04T07:41:11Z")
I'm trying to setup monitoring of our ES cluster via MetricBeat. The cluster consists of: 1 master & 1 data node (more to be added later) running on AWS Ubuntu ARM instances I'm getting the following error in MetricB… --- ## [Metric monitoring for multi cpu systems](https://discuss.elastic.co/t/metric-monitoring-for-multi-cpu-systems/306839)
**Author:** [@Siddhant\_Gupta](https://discuss.elastic.co/u/Siddhant_Gupta)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 7:27am UTC](https://discuss.elastic.co/t/metric-monitoring-for-multi-cpu-systems/306839 "2022-07-04T07:27:29Z")
I want to monitor a multi cpu system and set up the systems metricbeat to get the values. The problem is the systems metric beat reports a cumulative metric for all the CPUs. I want to report the values of all the CPUs s… --- ## [Metricbeat does not send documents to indices other than .monitoring-es-\*-mb, even when output.elasticsearch.index specified](https://discuss.elastic.co/t/metricbeat-does-not-send-documents-to-indices-other-than-monitoring-es-mb-even-when-output-elasticsearch-index-specified/308516)
**Author:** [@Olivia\_Anderson](https://discuss.elastic.co/u/Olivia_Anderson)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 7:23am UTC](https://discuss.elastic.co/t/metricbeat-does-not-send-documents-to-indices-other-than-monitoring-es-mb-even-when-output-elasticsearch-index-specified/308516 "2022-07-04T07:23:44Z")
I have 2 elasticsearch clusters deployed with ECK, and want to send stack monitoring data from the main cluster to the monitoring cluster. Metricbeat is setup with the following configs: elasticsearch.yml: - module: el… --- ## [Metricbeat 8.2.2 / kibana 8.2.2 All nodes marked as master on kibana's monitoring section](https://discuss.elastic.co/t/metricbeat-8-2-2-kibana-8-2-2-all-nodes-marked-as-master-on-kibanas-monitoring-section/307043)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 4\ **Last updated:** [July 4, 2022, 7:02am UTC](https://discuss.elastic.co/t/metricbeat-8-2-2-kibana-8-2-2-all-nodes-marked-as-master-on-kibanas-monitoring-section/307043 "2022-07-04T07:02:55Z")
It took me a while to make monitoring with metricbeat working again after the upgrade from 7.17.4 to 8.2.2 (I had to manually delete old .monitoring\* indices). Anyway, as soon as monitoring started working in Kibana, al… --- ## [Elasticsearch NEST FunctionScoreQuery](https://discuss.elastic.co/t/elasticsearch-nest-functionscorequery/308602)
**Author:** [@Hristo\_Hristov](https://discuss.elastic.co/u/Hristo_Hristov)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 7:02am UTC](https://discuss.elastic.co/t/elasticsearch-nest-functionscorequery/308602 "2022-07-04T07:02:49Z")
Hi, I am using Elasticsearch NEST (7.17.4) with ElasticSearch 8.2.3 to build search request. After added FunctionScoreQuery with Functions param i received exception "Can not write function score json for FunctionScore… --- ## [Metricbeat not show volume mount under dev filesystem](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380)
**Author:** [@Felipe\_Illanes](https://discuss.elastic.co/u/Felipe_Illanes)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 7:00am UTC](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380 "2022-07-04T07:00:56Z")
Let me explain the problem. Im searching for a specific mount in a server (actually is a volume added), and when in terminal type df -aTh | grep "/dev" for show filesystem, its show this image: Then in metricbeat.yam… --- ## [Drop of some of the Prometheus based metrics at metric beat end](https://discuss.elastic.co/t/drop-of-some-of-the-prometheus-based-metrics-at-metric-beat-end/306846)
**Author:** [@Sagar\_Parmar](https://discuss.elastic.co/u/Sagar_Parmar)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 6:51am UTC](https://discuss.elastic.co/t/drop-of-some-of-the-prometheus-based-metrics-at-metric-beat-end/306846 "2022-07-04T06:51:29Z")
Hi Team, I followed your document to get prometheus metrics in elasticsearch using metricbeat. But metricbeat is not showing all metrics on kibana dashboard. Below is Prometheus metrics On a metricbeat side It is … --- ## [How to put indice index rate by documents and by size on a Dashboard](https://discuss.elastic.co/t/how-to-put-indice-index-rate-by-documents-and-by-size-on-a-dashboard/308694)
**Author:** [@Rodolfo\_Albuquerque](https://discuss.elastic.co/u/Rodolfo_Albuquerque)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 6:47am UTC](https://discuss.elastic.co/t/how-to-put-indice-index-rate-by-documents-and-by-size-on-a-dashboard/308694 "2022-07-04T06:47:05Z")
Hello folks, I'm trying to create a dashboard with some information about my indices. I see these metrics on Stack Monitoring \> Indices but I would like to put those on a Dashboard. So I see there is an indice .monitor… --- ## [\[Error\] updating Security Data view - Velociraptor and Alerts](https://discuss.elastic.co/t/error-updating-security-data-view-velociraptor-and-alerts/308734)
**Author:** [@Stab\_Ilo](https://discuss.elastic.co/u/Stab_Ilo)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 6:03am UTC](https://discuss.elastic.co/t/error-updating-security-data-view-velociraptor-and-alerts/308734 "2022-07-04T06:03:30Z")
Hi, I'm currently testing the ELK stack with the DFIR tool Velociraptor as an agent. My goal is to setup alerts on the received data from the Velociraptor Agent. However, I am trying to setup alerts in the Security: De… --- ## [Java Client Custom tokenizer Cannot map type](https://discuss.elastic.co/t/java-client-custom-tokenizer-cannot-map-type/308770)
**Author:** [@Huyueeer](https://discuss.elastic.co/u/Huyueeer)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 3:44am UTC](https://discuss.elastic.co/t/java-client-custom-tokenizer-cannot-map-type/308770 "2022-07-04T03:44:59Z")
I looked through the previous problem records, and my question should be: does the latest javaapi support custom tokenizer Excuse me, I have some questions about the Java client. I need to register setting in elastic th… --- ## [ERROR WHILE RELOADING THE LOCALHOST:9200 and says Unsecured and the CONNECTION GETS CLOSED AUTOMATICALLY](https://discuss.elastic.co/t/error-while-reloading-the-localhost-9200-and-says-unsecured-and-the-connection-gets-closed-automatically/308765)
**Author:** [@Tarun\_Kumar\_Yerra](https://discuss.elastic.co/u/Tarun_Kumar_Yerra)\ **Replies:** 7\ **Last updated:** [July 4, 2022, 1:19am UTC](https://discuss.elastic.co/t/error-while-reloading-the-localhost-9200-and-says-unsecured-and-the-connection-gets-closed-automatically/308765 "2022-07-04T01:19:11Z")
Hello Team, I have installed the kibana on windows by extracting the zip files. Everything seems to be running well but when I try to connect through the python script it says the error with SSL CERTIFICATE ERRO… --- ## [我的logstash docker容器启动不了](https://discuss.elastic.co/t/logstash-docker/308775)
**Author:** [@ahong](https://discuss.elastic.co/u/ahong)\ **Replies:** 3\ **Last updated:** [July 4, 2022, 5:16am UTC](https://discuss.elastic.co/t/logstash-docker/308775 "2022-07-04T05:16:42Z")
我在docker容器里部署了ELK（版本是8.2.3），但是在配置logstash时docker容器启动不了。日志报错如下： {"log":"\[2022-07-04T03:29:27,007\]\[INFO \]\[logstash.javapipeline \]\[main\] Pipeline terminated {\\"pipeline.id\\"=\\u003e\\"main\\"}\\n","stream":"stdout","time":"… --- ## [Snapshot and Restore Considerations](https://discuss.elastic.co/t/snapshot-and-restore-considerations/308741)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 3:25am UTC](https://discuss.elastic.co/t/snapshot-and-restore-considerations/308741 "2022-07-04T03:25:16Z")
Hi Everyone, just want to hear from you guys these scenarios if Elasticsearch Snapshot and Restore can consider the situation. Happy to hear your answer :slight\_smile: 1.) Is there an email notifications when snapshot i… --- ## [Filebeat ilm options don't work](https://discuss.elastic.co/t/filebeat-ilm-options-dont-work/308768)
**Author:** [@busishe](https://discuss.elastic.co/u/busishe)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 3:24am UTC](https://discuss.elastic.co/t/filebeat-ilm-options-dont-work/308768 "2022-07-04T03:24:33Z")
i edit filebeat.yml set "setup.ilm.policy\_name" to my own test policy created by kibana. filebeat log shows the option worked. {"log.level":"info","@timestamp":"2022-07-04T02:51:11.473Z","log.logger":"index-management.… --- ## [Help with "\_grokparsefailure" and "\_geoip\_lookup\_failure"](https://discuss.elastic.co/t/help-with-grokparsefailure-and-geoip-lookup-failure/308702)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 5\ **Last updated:** [July 4, 2022, 3:22am UTC](https://discuss.elastic.co/t/help-with-grokparsefailure-and-geoip-lookup-failure/308702 "2022-07-04T03:22:31Z")
I am getting those error tags. Here is my filter section from my logstash section (Note that I started to get the \_grokparsefailure after adding the second grok with the src match, it was working fine with just the top g… --- ## [How to add an alias to index by using filebeat?](https://discuss.elastic.co/t/how-to-add-an-alias-to-index-by-using-filebeat/308640)
**Author:** [@busishe](https://discuss.elastic.co/u/busishe)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 3:10am UTC](https://discuss.elastic.co/t/how-to-add-an-alias-to-index-by-using-filebeat/308640 "2022-07-04T03:10:15Z")
i want to use ilm to delete outdated logs.the ilm policy is configured for rollover ,means the index need an alias.filebeat will create an index automatically (if you configured in filebeat.yml and the index not existed)… --- ## [Searchable Snapshot vs Restore Snapshot](https://discuss.elastic.co/t/searchable-snapshot-vs-restore-snapshot/308726)
**Author:** [@tomiko](https://discuss.elastic.co/u/tomiko)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 11:24pm UTC](https://discuss.elastic.co/t/searchable-snapshot-vs-restore-snapshot/308726 "2022-07-03T23:24:11Z")
As written in the docs of searchable snapshot : "Mounting and relocating the shards of searchable snapshot indices involves copying the shard contents from the snapshot repository". So how it's different from restore th… [Previous page](https://discuss.elastic.co/latest.md?page=1061) [Next page](https://discuss.elastic.co/latest.md?page=1063)