# Latest **URL:** https://discuss.elastic.co/latest.md?page=1125 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1126 --- ## [Cross Cluster Search Not Caching](https://discuss.elastic.co/t/cross-cluster-search-not-caching/304504)
**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 9:13am UTC](https://discuss.elastic.co/t/cross-cluster-search-not-caching/304504 "2022-05-19T09:13:22Z")
Hi If I have a couple of clusters, both connected to each other as remote clusters. If I perform a search against a single cluster, I get the benefit of caching of search results within a refresh interval window, if I … --- ## [Grok logstash JSON](https://discuss.elastic.co/t/grok-logstash-json/305152)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/grok-logstash-json/305152 "2022-05-19T09:11:55Z")
EL 8.2 Kibana 8.2 Hello Team, could you please advise how to merge the 2 lines below and generate the GONK command? {"log":"0.3817706468179257\\r\\n","stream":"stdout","time":"2022-05-18T10:37:31.746257847Z"} {"log":"1… --- ## [Average response time](https://discuss.elastic.co/t/average-response-time/305149)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 9:02am UTC](https://discuss.elastic.co/t/average-response-time/305149 "2022-05-19T09:02:02Z")
Hello, I'm new to Elastic and Kibana, I'm working on log files that contains information about some operations on differents levels, I have a field timestamp that represent time when each operation has occured on each l… --- ## [Resource Utilization Machine Learning](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 7\ **Last updated:** [May 19, 2022, 8:18am UTC](https://discuss.elastic.co/t/resource-utilization-machine-learning/303502 "2022-05-19T08:18:16Z")
Hello, I am working on the Machine Learning capability within two of the clusters that I am responsible for. I am trying to figure out the relationship between the size of my nodes, their configuration and model\_memory … --- ## [With out xpack.security.enabled: true can we install Elastic version 8.2,](https://discuss.elastic.co/t/with-out-xpack-security-enabled-true-can-we-install-elastic-version-8-2/305138)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 8:17am UTC](https://discuss.elastic.co/t/with-out-xpack-security-enabled-true-can-we-install-elastic-version-8-2/305138 "2022-05-19T08:17:51Z")
Hi , We are trying demo using 8.2 version, we are able to setup Elastic with out XPACK, but for Kibana integration its says need to enable XPACK security, please let me know how can we install the 8.2 version without … --- ## [Cannot create visulization on Kibana](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 11\ **Last updated:** [May 19, 2022, 8:01am UTC](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972 "2022-05-19T08:01:10Z")
Hi, I'm using elk v:7.5.0, i uploaded my indexes correctly, but when i want to create a visualization all the indexs are in the list but i can't select any of them. I don't know what's the problem, i can see the hint on… --- ## [Timelion graph tuning](https://discuss.elastic.co/t/timelion-graph-tuning/304798)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 4\ **Last updated:** [May 19, 2022, 7:54am UTC](https://discuss.elastic.co/t/timelion-graph-tuning/304798 "2022-05-19T07:54:42Z")
Hi Again, I want to remove this vertical straight line. Can we able to do that? And also remove the horizontal straight line. All things has been encircled with blue line which I want to remove. Can we do that? Reg… --- ## [About the immutableOpenmap in elasticsearch](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121)
**Author:** [@xingzhao](https://discuss.elastic.co/u/xingzhao)\ **Replies:** 5\ **Last updated:** [May 19, 2022, 7:45am UTC](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121 "2022-05-19T07:45:46Z")
I would like to ask what consideration is the immutableOpenmap in Elasticsearch designed for? What kind of utility does it have? It is used in both aliasmetadata and indexmetadata. My personal guess is that it has someth… --- ## [Logstash parse logfiles](https://discuss.elastic.co/t/logstash-parse-logfiles/305128)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 7:43am UTC](https://discuss.elastic.co/t/logstash-parse-logfiles/305128 "2022-05-19T07:43:31Z")
Hello Team, kindly advise how I can parse the following logfile entry on Kibana/logstash? {"log":"LOG: aborting any active transactions\\n","stream":"stderr","time":"2022-05-17T11:04:05.353977974Z"} {"log":"FATAL: ter… --- ## [Show highlights for matched terms query (for integer values)](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 7:00am UTC](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080 "2022-05-19T07:00:31Z")
We've got a mapping for field classes: "classes" : { "type" : "integer" } Is there a way to show highlight for the matching classes if we search it e.g. via terms-query: { "terms" : { "classes" : \[ 1, 5, 10 \] … --- ## [Filebeat modules with filebeat input on ECK](https://discuss.elastic.co/t/filebeat-modules-with-filebeat-input-on-eck/305034)
**Author:** [@ryuseongryong](https://discuss.elastic.co/u/ryuseongryong)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 6:58am UTC](https://discuss.elastic.co/t/filebeat-modules-with-filebeat-input-on-eck/305034 "2022-05-19T06:58:24Z")
hi. I'm collecting my k8s containers all logs in /var/log/containers/\*.log and I need to parsing with modules(e.g. kafka, zookeeper, mongodb etc.) but I cannot find reference. I already know about way like 'how to set… --- ## [About the use of metadata in elastic search](https://discuss.elastic.co/t/about-the-use-of-metadata-in-elastic-search/305057)
**Author:** [@xingzhao](https://discuss.elastic.co/u/xingzhao)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 6:34am UTC](https://discuss.elastic.co/t/about-the-use-of-metadata-in-elastic-search/305057 "2022-05-19T06:34:04Z")
I would like to ask how the metadata data structure in Elasticsearch is used when executing various apis. Will a copy of the metadata be saved at the beginning of each call to the api? Or can you provide an entry to the … --- ## [Agent unhealthy after adding Network Packet Capture BETA integration](https://discuss.elastic.co/t/agent-unhealthy-after-adding-network-packet-capture-beta-integration/302785)
**Author:** [@rrivers](https://discuss.elastic.co/u/rrivers)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 5:46am UTC](https://discuss.elastic.co/t/agent-unhealthy-after-adding-network-packet-capture-beta-integration/302785 "2022-05-19T05:46:25Z")
I added the "Network Packet Capture BETA" integration to a self managed 8.1.2 instance running on Ubuntu 20.04LTS. Shortly after adding that integration to one of the existing policies, fleet showed the agent status as … --- ## [Iam not Getting Logs in elasticstack](https://discuss.elastic.co/t/iam-not-getting-logs-in-elasticstack/305126)
**Author:** [@Rajesh119](https://discuss.elastic.co/u/Rajesh119)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 4:58am UTC](https://discuss.elastic.co/t/iam-not-getting-logs-in-elasticstack/305126 "2022-05-19T04:58:45Z")
Iam not getting logs in elaticsearch please anyone help me regarding this issue. It's helps me alot, last from few days iam struggling. Thanks in advance. --- ## [Extract folder name as field in logstash](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 7\ **Last updated:** [May 19, 2022, 4:38am UTC](https://discuss.elastic.co/t/extract-folder-name-as-field-in-logstash/305026 "2022-05-19T04:38:06Z")
Hi everyone The following is my filebeat input in my yml file- filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below a… --- ## [Event Analyser error](https://discuss.elastic.co/t/event-analyser-error/305070)
**Author:** [@okopnik](https://discuss.elastic.co/u/okopnik)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 12:44pm UTC](https://discuss.elastic.co/t/event-analyser-error/305070 "2022-05-18T12:44:18Z")
Hello, We're using Kibana 7.17.2 and trying to enable the Timelines and Event Renderers We're using an index named logs-sysmon containing Sysmon events We can see the process tree, but when trying to look on a specifi… --- ## [Kibana not starting correctly \[SOLVED\]](https://discuss.elastic.co/t/kibana-not-starting-correctly-solved/305067)
**Author:** [@Ricard-CT](https://discuss.elastic.co/u/Ricard-CT)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 4:25am UTC](https://discuss.elastic.co/t/kibana-not-starting-correctly-solved/305067 "2022-05-19T04:25:05Z")
Hi, i just installed ELK Stack, and after restart kibana it stops working: Kibana startup logs tells me this: FATAL Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index. Error: pic… --- ## [Failed to start Elasticsearch 8.2 on CentOSs](https://discuss.elastic.co/t/failed-to-start-elasticsearch-8-2-on-centoss/305072)
**Author:** [@Bhanu\_1212](https://discuss.elastic.co/u/Bhanu_1212)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 4:24am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-8-2-on-centoss/305072 "2022-05-19T04:24:31Z")
\[2022-05-18T12:41:58,264\]\[INFO \]\[o.e.e.NodeEnvironment \] \[elastic-centos\] heap size \[7.7gb\], compressed ordinary object pointers \[true\] \[2022-05-18T12:41:58,351\]\[INFO \]\[o.e.n.Node \] \[elastic-centos\] node… --- ## [Is it possible to embed {{ctx.trigger.scheduled\_time}} variable in the reporting url inside a watcher script?](https://discuss.elastic.co/t/is-it-possible-to-embed-ctx-trigger-scheduled-time-variable-in-the-reporting-url-inside-a-watcher-script/305042)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 10:14am UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-ctx-trigger-scheduled-time-variable-in-the-reporting-url-inside-a-watcher-script/305042 "2022-05-18T10:14:38Z")
Hi All, I have deployed a watcher script that triggered for certain search criteria. The action of the watch is to generate a dashboard.pdf and send it through email. Now the problem is, I'm using two systems for this … --- ## [Elasticsearch.service: Main process exited, code=killed, status=9/KILL](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358)
**Author:** [@viththakan](https://discuss.elastic.co/u/viththakan)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-killed-status-9-kill/304358 "2022-05-19T03:59:13Z")
Hi I havefirst installed Elasticsearch, logstash, kibana and filebeats in the same order. When I installed Elasticsearch and checked status It worked. Now it is showing the error like systemctl status elasticsearch.serv… --- ## [Configure xpack.security.enabled but not work in elasticsearch v8.2.0](https://discuss.elastic.co/t/configure-xpack-security-enabled-but-not-work-in-elasticsearch-v8-2-0/304895)
**Author:** [@stanpao](https://discuss.elastic.co/u/stanpao)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 3:29am UTC](https://discuss.elastic.co/t/configure-xpack-security-enabled-but-not-work-in-elasticsearch-v8-2-0/304895 "2022-05-19T03:29:25Z")
In my basic cluster, configure all nodes with xpack.security.enabled : true, but API GET \_xpack, always "security" is available but no enabled, why? --- ## [Scroll failed on some shards?](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 2:08am UTC](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116 "2022-05-19T02:08:18Z")
Hi, We're using 6.2.3, and I noticed some errors in our application logs yesterday that indicated a few shards (eg, 1-4 out of total of 90) failed while processing a scroll request. Unfortunately I don't have access to … --- ## [Logstash input file configuration](https://discuss.elastic.co/t/logstash-input-file-configuration/305081)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 10\ **Last updated:** [May 19, 2022, 2:07am UTC](https://discuss.elastic.co/t/logstash-input-file-configuration/305081 "2022-05-19T02:07:05Z")
Hi! I use logstash to import a json file into Elasticsearch. I use the following configuration but the index is not created in Elasticsearch (or the consol). input{ file{ codec=\>multiline{ pattern =\>"^{header" … --- ## [Is the Index Lifecycle Management a free or paid feature?](https://discuss.elastic.co/t/is-the-index-lifecycle-management-a-free-or-paid-feature/305113)
**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 11:24pm UTC](https://discuss.elastic.co/t/is-the-index-lifecycle-management-a-free-or-paid-feature/305113 "2022-05-18T23:24:39Z")
I am trying to assess the cost impact of using Index Lifecycle Management. According to Subscriptions | Elastic Stack Products & Support | Elastic, it seems to be a free feature but the same page shows "Configurable rete… --- ## [Ingestion pipelines for new indices created everyday](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051)
**Author:** [@katakam\_chaitanya](https://discuss.elastic.co/u/katakam_chaitanya)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 9:41pm UTC](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051 "2022-05-18T21:41:16Z")
I have new indices created on my Elasticsearch cluster everyday. I want to take all my docs through a ingestion pipeline. But as new indices get created automatically as date changes ( index name example:cwl-12.12.2022… --- ## [Couldn't start elasticsearch daemon on my magento2 cloud](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079)
**Author:** [@ingEnricoGiorgi](https://discuss.elastic.co/u/ingEnricoGiorgi)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 9:39pm UTC](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079 "2022-05-18T21:39:36Z")
Couldn't start Elasticsearch daemon on my magento2 cloud log after sudo journactl -xe systemctl status of Elasticsearch --- ## [ES is upgraded from version 6.3.2 to 6.8.22 in a rolling manner. After the upgrade, the cluster status is abnormal. How to roll back to 6.3.2?](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 10\ **Last updated:** [May 18, 2022, 9:37pm UTC](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533 "2022-05-18T21:37:04Z")
Currently I am working on the ES rolling upgrade plan. The official manual lists the rolling upgrade steps, but there is no rollback step. After the ES rolling upgrade, the cluster status is abnormal or the application w… --- ## [SSL certificate](https://discuss.elastic.co/t/ssl-certificate/304933)
**Author:** [@Harris11](https://discuss.elastic.co/u/Harris11)\ **Replies:** 3\ **Last updated:** [May 18, 2022, 8:23pm UTC](https://discuss.elastic.co/t/ssl-certificate/304933 "2022-05-18T20:23:54Z")
how to implement SSL certificate for the Elasticsearch version 8.2.0, can any one explain --- ## [Cannot properly display object in Kibana Discover](https://discuss.elastic.co/t/cannot-properly-display-object-in-kibana-discover/304692)
**Author:** [@NadyLeez123](https://discuss.elastic.co/u/NadyLeez123)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 7:38pm UTC](https://discuss.elastic.co/t/cannot-properly-display-object-in-kibana-discover/304692 "2022-05-18T19:38:24Z")
Hello! We just migrate from kibana 7.6.2 to 7.15.1 We have a field named ConteneurUnity( object type), with nested fields as showed in the mapping below: "ConteneurUnity": { "type": "object", … --- ## [Bulk request how to?](https://discuss.elastic.co/t/bulk-request-how-to/305096)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/bulk-request-how-to/305096 "2022-05-18T18:20:50Z")
Hi I'm a bit confused on how to perform a bulk request with the new Java API client. To index one document I use the following code that works without problems. Since we are using GSON I pass the json string representat… [Previous page](https://discuss.elastic.co/latest.md?page=1124) [Next page](https://discuss.elastic.co/latest.md?page=1126)