# Latest **URL:** https://discuss.elastic.co/latest.md?page=1072 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1073 --- ## [No able to Setup ELK on kubernetes](https://discuss.elastic.co/t/no-able-to-setup-elk-on-kubernetes/306358)
**Author:** [@jaskarn.kalsi](https://discuss.elastic.co/u/jaskarn.kalsi)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 9:42am UTC](https://discuss.elastic.co/t/no-able-to-setup-elk-on-kubernetes/306358 "2022-06-27T09:42:10Z")
Hi I followed the Quick start guide for setting ELK on Kubernetes. My elasticsearch pod remains in Applying Changes kubectl get elasticsearch NAME HEALTH NODES VERSION PHASE AGE staging unkn… --- ## [Logstash Split input and save new event.original](https://discuss.elastic.co/t/logstash-split-input-and-save-new-event-original/308222)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 0\ **Last updated:** [June 27, 2022, 9:11am UTC](https://discuss.elastic.co/t/logstash-split-input-and-save-new-event-original/308222 "2022-06-27T09:11:52Z")
Good Morning, I am trying to split up some JSON logs that are collected from an Eventhub and i'm running into a few issues. My logstash filter below works fine and splits the json based on a field called records, and t… --- ## [How dump/ingest nested API json data to elastic search](https://discuss.elastic.co/t/how-dump-ingest-nested-api-json-data-to-elastic-search/308221)
**Author:** [@azizullah2017](https://discuss.elastic.co/u/azizullah2017)\ **Replies:** 0\ **Last updated:** [June 27, 2022, 9:03am UTC](https://discuss.elastic.co/t/how-dump-ingest-nested-api-json-data-to-elastic-search/308221 "2022-06-27T09:03:33Z")
looking for help for large scale API calls of http like hundres if api call, trying to automate them with cron job. I am looking for solution where I can get data from different nested REST API and dump them on Elastics… --- ## [Error Enroll agent Centos](https://discuss.elastic.co/t/error-enroll-agent-centos/308218)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [June 27, 2022, 8:11am UTC](https://discuss.elastic.co/t/error-enroll-agent-centos/308218 "2022-06-27T08:11:23Z")
hi guys, i have many centos server. but why in my other centos is failed to enroll agent Error: could not read configuration file /var/lib/elastic-agent/elastic-agent.yml: open /var/lib/elastic-agent/elastic-agent.yml: … --- ## [Sorting Vega](https://discuss.elastic.co/t/sorting-vega/307608)
**Author:** [@Yashwini\_Daphne](https://discuss.elastic.co/u/Yashwini_Daphne)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 7:53am UTC](https://discuss.elastic.co/t/sorting-vega/307608 "2022-06-27T07:53:36Z")
Not able to sort Kibana Vega graph using sort command, Only dates are getting sorted, but not the bars, Could anyone plz help with the issue --- ## [Is it possible to use custom indices for one APM agent](https://discuss.elastic.co/t/is-it-possible-to-use-custom-indices-for-one-apm-agent/308117)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 7:49am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-custom-indices-for-one-apm-agent/308117 "2022-06-27T07:49:25Z")
Hi, Is it possible to use custom indices for one APM agent in elastic 8+ ( with fleet) . I want to restrict the accessibility of one app to a specific space using RBAC. --- ## [Graphs not showing](https://discuss.elastic.co/t/graphs-not-showing/308085)
**Author:** [@aryamishra](https://discuss.elastic.co/u/aryamishra)\ **Replies:** 7\ **Last updated:** [June 27, 2022, 7:46am UTC](https://discuss.elastic.co/t/graphs-not-showing/308085 "2022-06-27T07:46:00Z")
I have taken reboot of of my kibana cluster, post reboot the graphs are not showing neither for 15mins or any orher timeline.Earlier it was showing exceptions of \[2\] total shards, but this cluster currently has \[3902\]/\[… --- ## [Dashboards appearing](https://discuss.elastic.co/t/dashboards-appearing/308207)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 7:38am UTC](https://discuss.elastic.co/t/dashboards-appearing/308207 "2022-06-27T07:38:02Z")
On one of the spaces we have in kibana, we observe that some system dashboards have started showing up. We did not create these, any idea how this could happen? Thanks.. --- ## [Strange results when trying to run an aggregration query](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100)
**Author:** [@gep13](https://discuss.elastic.co/u/gep13)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 7:20am UTC](https://discuss.elastic.co/t/strange-results-when-trying-to-run-an-aggregration-query/308100 "2022-06-27T07:20:41Z")
Hello, I am trying to run a query similar to the following: "aggs": { "authors": { "terms": { "field": "packageAuthors.keyword" } } } Initially, this seems to be working exactly as I wo… --- ## [Default retention policy](https://discuss.elastic.co/t/default-retention-policy/308088)
**Author:** [@patriczek](https://discuss.elastic.co/u/patriczek)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/default-retention-policy/308088 "2022-06-27T05:56:29Z")
Hi, do we have any way to set up a default retention policy that doesn't affect system indices? --- ## [Run Python script continuously from Logstash](https://discuss.elastic.co/t/run-python-script-continuously-from-logstash/307656)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 5:12am UTC](https://discuss.elastic.co/t/run-python-script-continuously-from-logstash/307656 "2022-06-27T05:12:04Z")
Hi Team, My requirement is to run python script in background from logstash, and the output I need to take as event in logstash how to achieve that. Note: I am using exec input plugins, which eventually is not sending … --- ## [Automated reports](https://discuss.elastic.co/t/automated-reports/308154)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 5:10am UTC](https://discuss.elastic.co/t/automated-reports/308154 "2022-06-27T05:10:10Z")
Hi, What is the best way to have automated CSV reports emailed/scheduled in Kibana? Thanks.. --- ## [Authentication failed in APM Server in 7.17.4 but works in 8.2.0](https://discuss.elastic.co/t/authentication-failed-in-apm-server-in-7-17-4-but-works-in-8-2-0/307469)
**Author:** [@User28](https://discuss.elastic.co/u/User28)\ **Replies:** 6\ **Last updated:** [June 27, 2022, 5:07am UTC](https://discuss.elastic.co/t/authentication-failed-in-apm-server-in-7-17-4-but-works-in-8-2-0/307469 "2022-06-27T05:07:03Z")
Kibana version: 7.17.4 Elasticsearch version: 7.17.4 APM Server version: 7.17.4 APM Agent language and version: Java APM agent 1.30.0 Browser version: Chrome Original install method (e.g. download page, yum, deb,… --- ## [APM Server not identified by Kibana](https://discuss.elastic.co/t/apm-server-not-identified-by-kibana/307948)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 5\ **Last updated:** [June 27, 2022, 4:32am UTC](https://discuss.elastic.co/t/apm-server-not-identified-by-kibana/307948 "2022-06-27T04:32:16Z")
Kibana version : 7.17 Elasticsearch version : 7.17 APM Server version : 7.17 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [ERROR: Could not find or load main class](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class/306297)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 13\ **Last updated:** [June 27, 2022, 4:30am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class/306297 "2022-06-27T04:30:35Z")
Hai. I have a problem regarding Logstash start. Before this when i use Logstash for ingestion, everything works well. but now, the Logstash seems having problem with java where the error as followed: I already have … --- ## [Got response code '403' contacting Elasticsearch at URL 'http://localhost:9200/](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067)
**Author:** [@paulohperes](https://discuss.elastic.co/u/paulohperes)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 4:04am UTC](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200/308067 "2022-06-27T04:04:38Z")
Hi, My pipeline not working with ouput elasticsearch, I created user and role like this: root@logserver:/home/g0004830# curl -k -u admin:my\_password -XGET "http://localhost:9200/\_security/user/syslog?pretty" { "sysl… --- ## [Hive into es err \[HEAD\] on \[pon\_ihgu\_sp\_day\_ln20220627\] failed; server\[10.204.172.64:9200\] returned \[503|Service Unavailable:\]](https://discuss.elastic.co/t/hive-into-es-err-head-on-pon-ihgu-sp-day-ln20220627-failed-server-10-204-172-64-9200-returned-503-service-unavailable/308203)
**Author:** [@baishangkun2011](https://discuss.elastic.co/u/baishangkun2011)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 2:21am UTC](https://discuss.elastic.co/t/hive-into-es-err-head-on-pon-ihgu-sp-day-ln20220627-failed-server-10-204-172-64-9200-returned-503-service-unavailable/308203 "2022-06-27T02:21:30Z")
HI i use hive into es have err Caused by: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: \[HEAD\] on \[pon\_ihgu\_sp\_day\_ln20220627\] failed; server\[10.204.172.64:9200\] returned \[503|Service Unavailable:\] at org.el… --- ## [ILM lifecycle error](https://discuss.elastic.co/t/ilm-lifecycle-error/307880)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 1:29am UTC](https://discuss.elastic.co/t/ilm-lifecycle-error/307880 "2022-06-27T01:29:48Z")
So I created a lifecycle policy with an Index templates using wild card for all my tests env. : test\* I get an error for all the indecies. Index lifecycle error illegal\_argument\_exception: setting \[index.lifecycle.rol… --- ## [Is it necessary to put "Discovery Seed\_hosts\[\]" when working on a single node in elasticsearch 8.2?](https://discuss.elastic.co/t/is-it-necessary-to-put-discovery-seed-hosts-when-working-on-a-single-node-in-elasticsearch-8-2/308179)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 1:21am UTC](https://discuss.elastic.co/t/is-it-necessary-to-put-discovery-seed-hosts-when-working-on-a-single-node-in-elasticsearch-8-2/308179 "2022-06-27T01:21:32Z")
is it necessary to put "Discovery Seed\_hosts" when working on a single node in elasticsearch 8.2? --- ## [Bulk Insert documents - Getting BulkError](https://discuss.elastic.co/t/bulk-insert-documents-getting-bulkerror/308198)
**Author:** [@Hardik\_Sanghavi](https://discuss.elastic.co/u/Hardik_Sanghavi)\ **Replies:** 2\ **Last updated:** [June 27, 2022, 1:08am UTC](https://discuss.elastic.co/t/bulk-insert-documents-getting-bulkerror/308198 "2022-06-27T01:08:42Z")
Hello, I am new to inserting bulk documents into ElasticSearch using Python When I am trying to bulk insert documents, I am getting "elasticsearch.helpers.BulkIndexError: 100 document(s) failed to index." The index do… --- ## [Mapper parsing exception - Am I looking in the right place or is ES fooling me!?](https://discuss.elastic.co/t/mapper-parsing-exception-am-i-looking-in-the-right-place-or-is-es-fooling-me/308022)
**Author:** [@js-jp](https://discuss.elastic.co/u/js-jp)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 12:25am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-am-i-looking-in-the-right-place-or-is-es-fooling-me/308022 "2022-06-27T00:25:39Z")
Hi all Apologies if I don't have all the correct terminology as I am new to the elastic stack. I have just been allocated a task to remedy this problem; We have a Filebeat - ES - Kibana installation When users run th… --- ## [Get error while on "Add your Fleet Server host"](https://discuss.elastic.co/t/get-error-while-on-add-your-fleet-server-host/308021)
**Author:** [@ghostmomo](https://discuss.elastic.co/u/ghostmomo)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 2:10pm UTC](https://discuss.elastic.co/t/get-error-while-on-add-your-fleet-server-host/308021 "2022-06-23T14:10:11Z")
Trying to add the Fleet Server host but turn out having error as below. Any idea what did I setup incorrectly please? Thank you. --- ## [APM access to different spaces](https://discuss.elastic.co/t/apm-access-to-different-spaces/308097)
**Author:** [@antoteo](https://discuss.elastic.co/u/antoteo)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 10:11am UTC](https://discuss.elastic.co/t/apm-access-to-different-spaces/308097 "2022-06-24T10:11:12Z")
Is it possible to seperate apm services and give access to specific spaces for different apm service i have apm with fleet all 7.17 version i have many apps to give access to different teams thanks --- ## [Kibana Error](https://discuss.elastic.co/t/kibana-error/308135)
**Author:** [@Lsegura13](https://discuss.elastic.co/u/Lsegura13)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 12:16am UTC](https://discuss.elastic.co/t/kibana-error/308135 "2022-06-27T00:16:30Z")
Can someone help me with the below error? I have no idea how to resolved it. Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] Reason: missing authentication cre… --- ## [Is the java jdk by default available in elk stack 8.2](https://discuss.elastic.co/t/is-the-java-jdk-by-default-available-in-elk-stack-8-2/308192)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 5\ **Last updated:** [June 26, 2022, 9:40pm UTC](https://discuss.elastic.co/t/is-the-java-jdk-by-default-available-in-elk-stack-8-2/308192 "2022-06-26T21:40:29Z")
is the java jdk by default available in elk stack 8.2 ? because when i try java --version this the response elastic@elastic:~$ java -version Command 'java' not found, but can be installed with: sudo apt install openjdk… --- ## [Only write ops with an op\_type of create are allowed in data streams"}}}}](https://discuss.elastic.co/t/only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/308182)
**Author:** [@Nightshade](https://discuss.elastic.co/u/Nightshade)\ **Replies:** 3\ **Last updated:** [June 26, 2022, 8:50pm UTC](https://discuss.elastic.co/t/only-write-ops-with-an-op-type-of-create-are-allowed-in-data-streams/308182 "2022-06-26T20:50:27Z")
Not sure what to do here, have tried a bunch of suggestions from Github for this issue.. input { beats { port =\> 5044 } } output { elasticsearch { data\_stream =\> "true" data\_stream\_timestamp =\> "@time… --- ## [How does match\_phrase result data order in detail?](https://discuss.elastic.co/t/how-does-match-phrase-result-data-order-in-detail/308188)
**Author:** [@mktriniti](https://discuss.elastic.co/u/mktriniti)\ **Replies:** 0\ **Last updated:** [June 26, 2022, 3:00pm UTC](https://discuss.elastic.co/t/how-does-match-phrase-result-data-order-in-detail/308188 "2022-06-26T15:00:29Z")
Hello there, I am new to Elasticsearch. I am trying to use match\_phrase to accomplish a search task on item name that having a phrase match in order. But the result order is a little bit strange in my case. Example quer… --- ## [Bulk API Failing](https://discuss.elastic.co/t/bulk-api-failing/308184)
**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\ **Replies:** 2\ **Last updated:** [June 26, 2022, 2:45pm UTC](https://discuss.elastic.co/t/bulk-api-failing/308184 "2022-06-26T14:45:55Z")
Hi, I am using ElasticSearch 8.2.3 version in Windows 10 I have tried modifying in multiple ways.. but its still failing Could you please help. curl --insecure -H "Content-Type: application/x-ndjson" -XPUT "https://… --- ## [Elastic Search Fleet Agents | Kibana not showing the Fleet URL](https://discuss.elastic.co/t/elastic-search-fleet-agents-kibana-not-showing-the-fleet-url/308185)
**Author:** [@soumilshah1995](https://discuss.elastic.co/u/soumilshah1995)\ **Replies:** 2\ **Last updated:** [June 26, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elastic-search-fleet-agents-kibana-not-showing-the-fleet-url/308185 "2022-06-26T14:43:54Z")
Hello I am using Kibana Version 8.2 and Elasticsearch Version"8.2.0" Here you will see that i am not prompted with a URL can someone advise, please Please note I have already copy-pasted YML that I got from kib… --- ## [Collapse over more then 10,000 docs](https://discuss.elastic.co/t/collapse-over-more-then-10-000-docs/308096)
**Author:** [@LenaM](https://discuss.elastic.co/u/LenaM)\ **Replies:** 1\ **Last updated:** [June 26, 2022, 1:43pm UTC](https://discuss.elastic.co/t/collapse-over-more-then-10-000-docs/308096 "2022-06-26T13:43:33Z")
I have an index that contains more than 1 million documents. I am using a query with the "collapse" parameter to group a field and get its unique values. Do I get ALL unique values from this field that might match the qu… [Previous page](https://discuss.elastic.co/latest.md?page=1071) [Next page](https://discuss.elastic.co/latest.md?page=1073)