# Latest **URL:** https://discuss.elastic.co/latest.md?page=1127 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1128 --- ## [ILM forcemerge of empty index takes ~5 minutes](https://discuss.elastic.co/t/ilm-forcemerge-of-empty-index-takes-5-minutes/305048)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 10:46am UTC](https://discuss.elastic.co/t/ilm-forcemerge-of-empty-index-takes-5-minutes/305048 "2022-05-18T10:46:03Z")
This is a minor observation on 7.17: When ILM tries to forcemerge a new & completely empty index, it takes surprisingly long. I often reindex like this: I first create and empty index with index.lifecycle.origination\_d… --- ## [How to create login page for kibana 7.16.2](https://discuss.elastic.co/t/how-to-create-login-page-for-kibana-7-16-2/305047)
**Author:** [@Madhu\_Adi](https://discuss.elastic.co/u/Madhu_Adi)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 10:45am UTC](https://discuss.elastic.co/t/how-to-create-login-page-for-kibana-7-16-2/305047 "2022-05-18T10:45:01Z")
Hi I am using traefik as Ingress in kubernetes. Before I was using traefik 1.7 version everything was working fine, but after upgrading traefik 2.6 then I cannot see the login page of kibana and directly populating to th… --- ## [Is a Authentication neccessary?](https://discuss.elastic.co/t/is-a-authentication-neccessary/304656)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 16\ **Last updated:** [May 18, 2022, 8:45am UTC](https://discuss.elastic.co/t/is-a-authentication-neccessary/304656 "2022-05-18T08:45:01Z")
Hi, I installed Elastic and Kibana localy on my device and I create a index. Than I create a C# console project using .NET6.0 and Visual Studio as described here. But I can't get it running. The problem I described he… --- ## [Add\_kubernetes\_metadata with elatsicsearch on kubernetes, elasticsearch-operator does not add k8s field in kibana](https://discuss.elastic.co/t/add-kubernetes-metadata-with-elatsicsearch-on-kubernetes-elasticsearch-operator-does-not-add-k8s-field-in-kibana/304646)
**Author:** [@ryuseongryong](https://discuss.elastic.co/u/ryuseongryong)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 8:15am UTC](https://discuss.elastic.co/t/add-kubernetes-metadata-with-elatsicsearch-on-kubernetes-elasticsearch-operator-does-not-add-k8s-field-in-kibana/304646 "2022-05-18T08:15:56Z")
hi, I've got a problem with add\_kubernetes\_metadata setting in my filebeat.yaml set-up with Elasticsearch-operator and Elasticsearch, metricbeat and filebeat, kibana as elasticsearch.k8s.elastic.co/v1, beat.k8s.elastic.… --- ## [How to create a custom dropdown which will populate the elasticsearch multi bucket data as different bar charts](https://discuss.elastic.co/t/how-to-create-a-custom-dropdown-which-will-populate-the-elasticsearch-multi-bucket-data-as-different-bar-charts/305033)
**Author:** [@Priya\_Bari](https://discuss.elastic.co/u/Priya_Bari)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 8:11am UTC](https://discuss.elastic.co/t/how-to-create-a-custom-dropdown-which-will-populate-the-elasticsearch-multi-bucket-data-as-different-bar-charts/305033 "2022-05-18T08:11:15Z")
I am trying to create a custom visualization for which will be fetching details from Elasticsearch using following query GET sample/\_search { "aggs": { "open\_entries": { "filter": { "range": { … --- ## [MaxListenersExceededWarning in kibana 8.2.0](https://discuss.elastic.co/t/maxlistenersexceededwarning-in-kibana-8-2-0/305031)
**Author:** [@wo7387196](https://discuss.elastic.co/u/wo7387196)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 8:00am UTC](https://discuss.elastic.co/t/maxlistenersexceededwarning-in-kibana-8-2-0/305031 "2022-05-18T08:00:42Z")
\[2022-05-18T15:52:58.633+08:00\]\[WARN \]\[process\] MaxListenersExceededWarning: Possible EventTarget memory leak detected. 11 abort listeners added to \[AbortSignal\]. Use events.setMaxListeners() to increase limit at Abo… --- ## [Filebeat allow only specific line or content](https://discuss.elastic.co/t/filebeat-allow-only-specific-line-or-content/305017)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 5\ **Last updated:** [May 18, 2022, 7:47am UTC](https://discuss.elastic.co/t/filebeat-allow-only-specific-line-or-content/305017 "2022-05-18T07:47:23Z")
Hello, How can I allow only specific lines and for specific log files as well? example: I have lots of files in the inputs.d file but for the xyz.log file, I wanna set up the filter only to allow "out of memory" line o… --- ## [About the implements of alias, addAlias and removeAlias](https://discuss.elastic.co/t/about-the-implements-of-alias-addalias-and-removealias/305013)
**Author:** [@xingzhao](https://discuss.elastic.co/u/xingzhao)\ **Replies:** 3\ **Last updated:** [May 18, 2022, 7:32am UTC](https://discuss.elastic.co/t/about-the-implements-of-alias-addalias-and-removealias/305013 "2022-05-18T07:32:35Z")
Hello, I would like to ask about the methods of alias, how are addAlias and removeAlias implemented? How do they avoid problems with atomicity among other operations? For example, how to ensure that the alias information… --- ## [Wrong Mapping of ECS fields on fleet-managed datastreams causing multiple issues](https://discuss.elastic.co/t/wrong-mapping-of-ecs-fields-on-fleet-managed-datastreams-causing-multiple-issues/305014)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 4:27am UTC](https://discuss.elastic.co/t/wrong-mapping-of-ecs-fields-on-fleet-managed-datastreams-causing-multiple-issues/305014 "2022-05-18T04:27:37Z")
Hi, We recently migrated part of our environment from beats to the elastic-agent managed by fleet integrations. While this makes agent management very easy, it introduced a lot of mapping issues which then cause search … --- ## [Elasticsearch with Go and Docker](https://discuss.elastic.co/t/elasticsearch-with-go-and-docker/305008)
**Author:** [@mrfirdauss-20](https://discuss.elastic.co/u/mrfirdauss-20)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-with-go-and-docker/305008 "2022-05-18T04:21:43Z")
I use docker and Elasticsearch, i got confused, when i set the Elasticsearch url (when initialize it) in golang to "Elasticsearch:9200", the massages shows \> "health check timeout: no Elasticsearch node available" but … --- ## [Refresh\_interval and segment size](https://discuss.elastic.co/t/refresh-interval-and-segment-size/305011)
**Author:** [@hechangqin](https://discuss.elastic.co/u/hechangqin)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 3:11am UTC](https://discuss.elastic.co/t/refresh-interval-and-segment-size/305011 "2022-05-18T03:11:02Z")
Hi Elastic Team. In my current cluster, refresh\_interval is set to 5m , cluster jvm heap memory is 8g , index.buffer defaults to 10% , but when I continue to index, I still find very small segments, such as a few kb . Ac… --- ## [Logstash to influxdb version2.x is it possible?](https://discuss.elastic.co/t/logstash-to-influxdb-version2-x-is-it-possible/304913)
**Author:** [@surinkim](https://discuss.elastic.co/u/surinkim)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 2:14am UTC](https://discuss.elastic.co/t/logstash-to-influxdb-version2-x-is-it-possible/304913 "2022-05-18T02:14:24Z")
HI. I designed a structure to put data from Logstash to influxdb. So, I succeeded in putting data into influx db version 1.8 in the window environment. However, influxdb version 2 gives this error. Connection Error w… --- ## [Having trouble starting Elasticsearch + Kibana out of the box 8.2.0](https://discuss.elastic.co/t/having-trouble-starting-elasticsearch-kibana-out-of-the-box-8-2-0/304972)
**Author:** [@jpark321](https://discuss.elastic.co/u/jpark321)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 10:22pm UTC](https://discuss.elastic.co/t/having-trouble-starting-elasticsearch-kibana-out-of-the-box-8-2-0/304972 "2022-05-17T22:22:04Z")
Hello, I'm new to Elasticsearch. I went ahead and followed through the quick start guide and I am having some trouble getting kibana to work and load the starting dashboard. Here are some outputs from terminal for refer… --- ## [Create backup siem server with same integration](https://discuss.elastic.co/t/create-backup-siem-server-with-same-integration/304926)
**Author:** [@indrajit\_kal](https://discuss.elastic.co/u/indrajit_kal)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 11:22am UTC](https://discuss.elastic.co/t/create-backup-siem-server-with-same-integration/304926 "2022-05-17T11:22:25Z")
if my live siem server is crash than how i connect my all elastic agent on new server which working on same elastic&kibana certificate and same IP. elastic version 7.17.\* please guide is it work or not. Thanks & regar… --- ## [Logstash Kafka input and output with oauth](https://discuss.elastic.co/t/logstash-kafka-input-and-output-with-oauth/304886)
**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\ **Replies:** 3\ **Last updated:** [May 17, 2022, 10:02pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-and-output-with-oauth/304886 "2022-05-17T22:02:08Z")
Does anyone know how to use the logstash Kafka input/output plugin with oauth2? I couldn't find any settings with the current plugins. and I'm trying to develop one with the Kafka Java client. It failed with the followin… --- ## [Es document count != wc -l output of file after sending data with logstash?](https://discuss.elastic.co/t/es-document-count-wc-l-output-of-file-after-sending-data-with-logstash/304293)
**Author:** [@elk-user-99](https://discuss.elastic.co/u/elk-user-99)\ **Replies:** 20\ **Last updated:** [May 17, 2022, 9:19pm UTC](https://discuss.elastic.co/t/es-document-count-wc-l-output-of-file-after-sending-data-with-logstash/304293 "2022-05-17T21:19:47Z")
Hi friends! I've got what I thought was a simple configuration -- the input is a file that passes through 3 filters -- csv to parse the file, mutate to do a character replace that makes the timestamp automatically detec… --- ## [New filebeat implementation for Fortinet module not starting](https://discuss.elastic.co/t/new-filebeat-implementation-for-fortinet-module-not-starting/304995)
**Author:** [@doublejz](https://discuss.elastic.co/u/doublejz)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 9:12pm UTC](https://discuss.elastic.co/t/new-filebeat-implementation-for-fortinet-module-not-starting/304995 "2022-05-17T21:12:41Z")
I'm not sure what I'm missing here. I apologize for being a noob but I've just started getting into setting up my ELK stack and can't figure this out. I thought I had it all configured but yet filebeat won't start and I… --- ## [Custom plugin doesn't autoRefresh when added to a dashboard](https://discuss.elastic.co/t/custom-plugin-doesnt-autorefresh-when-added-to-a-dashboard/303766)
**Author:** [@dmprieto](https://discuss.elastic.co/u/dmprieto)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 6:58pm UTC](https://discuss.elastic.co/t/custom-plugin-doesnt-autorefresh-when-added-to-a-dashboard/303766 "2022-05-17T18:58:47Z")
Hi I developed a custom plugin for Kibana 7.17.0 and when I enable the autoRefresh in the Visualization editor page it works ok, but when I add the custom plugin to an empty dashboard it doesn't refresh when autoRefres… --- ## [Using TermsQuery in Java API Client \[7.17\]](https://discuss.elastic.co/t/using-termsquery-in-java-api-client-7-17/304904)
**Author:** [@Vipul\_Kumar](https://discuss.elastic.co/u/Vipul_Kumar)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 5:37pm UTC](https://discuss.elastic.co/t/using-termsquery-in-java-api-client-7-17/304904 "2022-05-17T17:37:30Z")
I'm using Java API Client \[7.17\] in my project. I'm able to do most of the queries, but I'm trying to figure out how to search for multiple values in a particular fields and return values containing any of the values pro… --- ## [Unexpected results when filtering docs in nested field](https://discuss.elastic.co/t/unexpected-results-when-filtering-docs-in-nested-field/304960)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 5:06pm UTC](https://discuss.elastic.co/t/unexpected-results-when-filtering-docs-in-nested-field/304960 "2022-05-17T17:06:28Z")
Hi, suppose we have the following docs: (index name is test\_index) { session\_id: "123", "session\_details":\[ { "page": "/abc" }, { "page": "/xyz" } \] }… --- ## [Kibana embedded Iframe URLs for Dashboards: Can we specify a tag in the URL](https://discuss.elastic.co/t/kibana-embedded-iframe-urls-for-dashboards-can-we-specify-a-tag-in-the-url/304252)
**Author:** [@StephaneRodier](https://discuss.elastic.co/u/StephaneRodier)\ **Replies:** 5\ **Last updated:** [May 17, 2022, 5:26pm UTC](https://discuss.elastic.co/t/kibana-embedded-iframe-urls-for-dashboards-can-we-specify-a-tag-in-the-url/304252 "2022-05-17T17:26:46Z")
Hi, I was wondering if I can specify a tag associated to dashboards in the url to list all associated dashboards? --- ## [Packetbeat not sending to Logstash after Elastic-Agent uninstall](https://discuss.elastic.co/t/packetbeat-not-sending-to-logstash-after-elastic-agent-uninstall/303059)
**Author:** [@fl33t](https://discuss.elastic.co/u/fl33t)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 5:09pm UTC](https://discuss.elastic.co/t/packetbeat-not-sending-to-logstash-after-elastic-agent-uninstall/303059 "2022-05-17T17:09:07Z")
While experimenting with elastic-agent/fleet-server I noticed that once the agent was uninstalled, packetbeat didn't seem able to send to logstash anymore. No more indexes, nothing. The sequence is basically: Packetbe… --- ## [Elasticsearch Weight query](https://discuss.elastic.co/t/elasticsearch-weight-query/304975)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 4:58pm UTC](https://discuss.elastic.co/t/elasticsearch-weight-query/304975 "2022-05-17T16:58:24Z")
I tried finding the example queries where weight param is used to do relevancy and scoring, but couldn't; able to do so. Is it possible to add weight in the search query similar to boost in the Elasticsearch community e… --- ## [Export kibana dashboard from wui and import using cli](https://discuss.elastic.co/t/export-kibana-dashboard-from-wui-and-import-using-cli/304582)
**Author:** [@zakirpcs](https://discuss.elastic.co/u/zakirpcs)\ **Replies:** 4\ **Last updated:** [May 17, 2022, 4:35pm UTC](https://discuss.elastic.co/t/export-kibana-dashboard-from-wui-and-import-using-cli/304582 "2022-05-17T16:35:32Z")
My Elasticsearch version is 6.8.21 and i want to export my specific dashboard & visualization from Web User Interface . Then want to import using cli (curl). Is there any way to do so? Regards, Zakir --- ## [Initialize counter in logstash and replace the '%{\[message\]\[0\]}'?](https://discuss.elastic.co/t/initialize-counter-in-logstash-and-replace-the-message-0/304912)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [May 17, 2022, 4:28pm UTC](https://discuss.elastic.co/t/initialize-counter-in-logstash-and-replace-the-message-0/304912 "2022-05-17T16:28:12Z")
Hi, after doing the split filter, so my message was an array ok, so %{\[message\]\[0\]} %{\[message\]\[1\]} ... that gives me their value fine. now I have an array of length 30 for example and I start the condition if {} examp… --- ## [Cluster health turns to red](https://discuss.elastic.co/t/cluster-health-turns-to-red/304870)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/cluster-health-turns-to-red/304870 "2022-05-17T16:21:52Z")
Please have a look at the output of \_cluster/health?pretty { "cluster\_name" : "Elasticsearch", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 2, "number\_of\_data\_nodes" : 2, "active\_primary\_shards… --- ## [Filebeat filestream input not releasing file handler with hard-linked file](https://discuss.elastic.co/t/filebeat-filestream-input-not-releasing-file-handler-with-hard-linked-file/304041)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 4:12pm UTC](https://discuss.elastic.co/t/filebeat-filestream-input-not-releasing-file-handler-with-hard-linked-file/304041 "2022-05-17T16:12:20Z")
Hello, I have a use case where I ingest files created by the Wazuh agent, these files are created in paths with the following format: /var/ossec/logs/archives/YYYY/MM/ossec-archive-dd.json For example: /var/ossec/log… --- ## [The limit of 1000 metricsets has been reached, no new metricss will be created](https://discuss.elastic.co/t/the-limit-of-1000-metricsets-has-been-reached-no-new-metricss-will-be-created/304966)
**Author:** [@khurrams84](https://discuss.elastic.co/u/khurrams84)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 4:01pm UTC](https://discuss.elastic.co/t/the-limit-of-1000-metricsets-has-been-reached-no-new-metricss-will-be-created/304966 "2022-05-17T16:01:37Z")
My main question is we have 800k requests coming to our Net Core API. but if we see the count of transactions on Elastic Kabana. it shows less than the actual no of requests happening on azure. we have 4 instances of web… --- ## [Problem with checkpoint module and datastream](https://discuss.elastic.co/t/problem-with-checkpoint-module-and-datastream/304965)
**Author:** [@Salvatore\_Mattei](https://discuss.elastic.co/u/Salvatore_Mattei)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 3:53pm UTC](https://discuss.elastic.co/t/problem-with-checkpoint-module-and-datastream/304965 "2022-05-17T15:53:20Z")
Hi, we are ingesting data using checkpoint filebeat module. Some records are not ingested and gives this error: May 17 09:24:45 XXXX filebeat\[3110397\]: 2022-05-17T09:24:45.674Z#011WARN#011\[elasticsearch\]#011elasticsea… --- ## [New to ELK and need some help with existing environment](https://discuss.elastic.co/t/new-to-elk-and-need-some-help-with-existing-environment/304885)
**Author:** [@Jason2](https://discuss.elastic.co/u/Jason2)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 3:53pm UTC](https://discuss.elastic.co/t/new-to-elk-and-need-some-help-with-existing-environment/304885 "2022-05-17T15:53:16Z")
My company uses ELK on kubernetes to monitor CICD infrastructure. We have an index that gathers a massive amount of data every day. We recently stopped showing data in the discover section. All data before two weeks ago … [Previous page](https://discuss.elastic.co/latest.md?page=1126) [Next page](https://discuss.elastic.co/latest.md?page=1128)