# Latest **URL:** https://discuss.elastic.co/latest.md?page=1157 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1158 --- ## [Convert a search JSON into a DSL query](https://discuss.elastic.co/t/convert-a-search-json-into-a-dsl-query/303156)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 9:19am UTC](https://discuss.elastic.co/t/convert-a-search-json-into-a-dsl-query/303156 "2022-04-26T09:19:22Z")
I have created the following search query in Elastic. I am wanting to using it in a Discover query using the Elasticsearch Query DSL. However, I cannot seem to convert it. This is the query that I have using Kibana D… --- ## [We are setting up 3 node Elasticsearch cluster](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181)
**Author:** [@ak9234](https://discuss.elastic.co/u/ak9234)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 9:17am UTC](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181 "2022-04-26T09:17:53Z")
We are setting up 3 node Elasticsearch cluster using 7.17, while configuring the cluster we are getting this error message: master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, an… --- ## [Hi All I am Getting this error in the kibana log from yesterday 25 April,2022. Version 8.1.2](https://discuss.elastic.co/t/hi-all-i-am-getting-this-error-in-the-kibana-log-from-yesterday-25-april-2022-version-8-1-2/303233)
**Author:** [@srikanth.tekula](https://discuss.elastic.co/u/srikanth.tekula)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 8:15am UTC](https://discuss.elastic.co/t/hi-all-i-am-getting-this-error-in-the-kibana-log-from-yesterday-25-april-2022-version-8-1-2/303233 "2022-04-26T08:15:21Z")
Hi I have installed 8.1.2 version of Elasticsearch and kibana in centos-7 using this command in my AWS ec2 t2.medium instance : wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-$VERSION-x86\_64.rpm … --- ## [Microservices: Decouple sorting from filtering/aggregations](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232)
**Author:** [@philipschm1tt](https://discuss.elastic.co/u/philipschm1tt)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 9:14am UTC](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232 "2022-04-26T09:14:37Z")
Context: ecommerce category page We are using Elasticsearch for our product index. On a category page the users can filter products, we show the number of products in each category we sort the products using Elastics… --- ## [How to setup kibana 8.1 with Elastic Search 8.1under Windows](https://discuss.elastic.co/t/how-to-setup-kibana-8-1-with-elastic-search-8-1under-windows/301835)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-setup-kibana-8-1-with-elastic-search-8-1under-windows/301835 "2022-04-26T09:12:40Z")
Hi , we have installed Elasticsearch 8.1 windows version as a services , here localhost:9200 will be browse with user name and password . and we are not able to run Kibana , and its asking for to generate the Token, i… --- ## [How many master node should be in configuration](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 16\ **Last updated:** [April 26, 2022, 8:44am UTC](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198 "2022-04-26T08:44:48Z")
Hi I've developed such configuration host1 2 x master node 3x data hot 9x data warm host2 2 x master node 3x data hot 9x data warm in the docker logs I don't see any suspicious but I can't set up a kibana\_system … --- ## [Es service not starting up due to error](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 7\ **Last updated:** [April 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154 "2022-04-26T08:34:15Z")
Hi Team, My cluster was working fine but all of sudden i am getting below errors in elastic log. es service is not getting failed. \[T06:13:20,213\]\[ERROR\]\[o.e.x.s.a.e.ReservedRealm\] \[es\_1\] failed to retrieve password ha… --- ## [Metricbeat not collecting kubernetes.namespace field](https://discuss.elastic.co/t/metricbeat-not-collecting-kubernetes-namespace-field/303231)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 8:13am UTC](https://discuss.elastic.co/t/metricbeat-not-collecting-kubernetes-namespace-field/303231 "2022-04-26T08:13:16Z")
Hello, I'm using Elastic 7.15 for observability, I'm trying to collect metrics from each namespace but the field kubernetes.namespace is not collected. I added the processor add\_kubernetes\_metadata but still not collecti… --- ## [Rebalance primary shards, 2022](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 8:12am UTC](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911 "2022-04-26T08:12:58Z")
Hello, I, too, would like my primary shards to be balanced across the cluster. I often reduce the number of replicas on older indices to optimize disk space. When the cluster is reasonably idle, shards will recover fr… --- ## [Kbn webpack compile error and optimization failure](https://discuss.elastic.co/t/kbn-webpack-compile-error-and-optimization-failure/303226)
**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 7:49am UTC](https://discuss.elastic.co/t/kbn-webpack-compile-error-and-optimization-failure/303226 "2022-04-26T07:49:27Z")
I'm on kibana 7.14.2 with wazuh plugin, I got these 2 errors when I started the server. I'm new to this platform please help me with these problems, thank you!!! Here is the log. np bld log \[15:25:12.105\] \[info\]\[@… --- ## [Server crashed with status code 1](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206)
**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\ **Replies:** 11\ **Last updated:** [April 26, 2022, 7:34am UTC](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206 "2022-04-26T07:34:14Z")
I'm running kibana 7.14.2 on Linux from my localhost and with wazuh installed, however the server keep crashing after some time functioning properly. I have tried different approaches including limit the memory use from … --- ## [No ML nodes with sufficient capacity](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity/303150)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 7:27am UTC](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity/303150 "2022-04-26T07:27:40Z")
Hello ! I am trying to create a job that handles a large amount of information and the recommended memory is 19 GB. I currently have 2 ml nodes with 64gb each. When executing the job with that memory, the following erro… --- ## [Can't use average agg on number lower than 1](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091)
**Author:** [@xxk](https://discuss.elastic.co/u/xxk)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 7:07am UTC](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091 "2022-04-26T07:07:48Z")
I have a field pctr which values are all between (0,1). But i can't use average agg on pctr in visualize --- ## [Jdbc streaming no records returned even when there are records](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222)
**Author:** [@James\_Valan](https://discuss.elastic.co/u/James_Valan)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 6:41am UTC](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222 "2022-04-26T06:41:39Z")
I am getting no records sometimes but the db has records. (using JDBC Streaming) is there a timeout issue? --- ## [Elasticsearch 6.8 crear vista de dos indices](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953 "2022-04-26T06:15:28Z")
Hola, necesitaría crear una vista o índice que una mediante un field dos índices diferentes. Es posible? como puedo hacerlo? Gracias, un saludo Javier. --- ## [I tried to upgrade the Elasticsearch to 7.16.2 and it’s working fine but Logstash upgrade to 7.16.2 still not working with upgraded elastic. I am getting below error with it, I tried to troubleshoot the issue but it’s still the same](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216)
**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216 "2022-04-26T06:15:08Z")
\[2022-04-22T04:24:45,425\]\[WARN \]\[deprecation.logstash.filters.json\] Relying on default value of pipeline.ecs\_compatibility, which may change in a future major release of Logstash. To avoid unexpected changes when upgradi… --- ## [Anomaly Detection Categorization: Kibana Signs used for Severities(warning, minor, major, critical)](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-signs-used-for-severities-warning-minor-major-critical/303039)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 4\ **Last updated:** [April 26, 2022, 5:59am UTC](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-signs-used-for-severities-warning-minor-major-critical/303039 "2022-04-26T05:59:51Z")
Hi, I am using Elasticsearch 8.1.0 and kibana 8.1.0 I have created a Categorization job in kibana. As input, I have given the index field which contains the log messages. After the job gets completed processing, I can… --- ## [How to pull AZURE APP SERVICE logs to ELK](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115)
**Author:** [@vinayborra](https://discuss.elastic.co/u/vinayborra)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 5:18am UTC](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115 "2022-04-26T05:18:40Z")
Hi, From last two days, I am facing to find out how to pull azure app service logs to local server ELK. I didn't find any supported links. Can you please help on this. Thanks in advance. --- ## [This website does not work in Firefox](https://discuss.elastic.co/t/this-website-does-not-work-in-firefox/303182)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 4\ **Last updated:** [April 26, 2022, 3:43am UTC](https://discuss.elastic.co/t/this-website-does-not-work-in-firefox/303182 "2022-04-26T03:43:45Z")
For instance, this message looks like this. --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/302698)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 3:51am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/302698 "2022-04-26T03:51:31Z")
ES:7.10.2 this is my error log： \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\] would be \[30380624822/28.2gb\], which is larger than the limit of \[28975929753/26.9gb\], real usage: \[30380571432/28.2gb\],… --- ## [Log4jHotPatchFat.jar IllegalAccessError](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 3:44am UTC](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209 "2022-04-26T03:44:09Z")
Hi, We recently updated our Amazon AMI to pickup a newer version and after recycling our nodes to re-deploy Elasticsearch 7.16.3 we started seeing the following exception. Is this a known issue and something with a rec… --- ## [What is the impact if we increase max buckets value](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 2:55am UTC](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189 "2022-04-26T02:55:06Z")
Hi, i just wanna know what is the impact on elastic if i increase max buckets value to a higher number. our grafana getting an error "unkown elastic error" and what we found is grafana require buckets more than the defa… --- ## [Field Collisions](https://discuss.elastic.co/t/field-collisions/302798)
**Author:** [@Hummellt](https://discuss.elastic.co/u/Hummellt)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:57am UTC](https://discuss.elastic.co/t/field-collisions/302798 "2022-04-26T01:57:06Z")
Hi, this is my first time working with elastic so i think im missing something. Im trying to setup the Elastic Stack to analyze Cowrie Logs. Problem is there are different sources for the Input field. In the Cowrie Lo… --- ## [What is the maximum number of indices allowed in elasticsearch?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793)
**Author:** [@raqeeb](https://discuss.elastic.co/u/raqeeb)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793 "2022-04-26T01:39:32Z")
I am using MySQL for storing data in my software. We have to generate hundreds of reports using the data and it is taking more time when the size of data in increasing. For some reports it is taking 1 or 2 minutes. So we… --- ## [Limit the Transform scope based on timestamp](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 3:30pm UTC](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832 "2022-04-20T15:30:31Z")
Hi! Supposedly I have logs, with timestamp for each one of them. Those logs can be group by a few dozens and describe a "session", which can take between 1 second - 1 minute. I currently have a Transform who is groupi… --- ## [Metricbeat 8.1.1 windows service does not startup](https://discuss.elastic.co/t/metricbeat-8-1-1-windows-service-does-not-startup/302816)
**Author:** [@tim135](https://discuss.elastic.co/u/tim135)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:36am UTC](https://discuss.elastic.co/t/metricbeat-8-1-1-windows-service-does-not-startup/302816 "2022-04-26T01:36:03Z")
Hi, I'm trying to deploy metrics beat agent 8.1.1 using ansible playbook on our servers. But the service "metricbeat" does not start up. --- ## [Help create ILM policy](https://discuss.elastic.co/t/help-create-ilm-policy/302876)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:34am UTC](https://discuss.elastic.co/t/help-create-ilm-policy/302876 "2022-04-26T01:34:41Z")
Good day! Please advice! I have a couple of indices - filebeat-current and filebeat-old I need to create ILM policy, which will copy data that is more than 7 days old from filebeat-current to filebeat-old. New incoming… --- ## [Custom path for elasticsearch.yml, kibana.yml and logstash.yml](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:24am UTC](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895 "2022-04-26T01:24:53Z")
Hello, I have installed ELK stack on my test server using the default installation options and have been able to set up an end to end test system working. However now, I have a new requirement to change the default ins… --- ## [Logstash configuration from elk cloud](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961)
**Author:** [@Jesus\_Leguizamon](https://discuss.elastic.co/u/Jesus_Leguizamon)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:15am UTC](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961 "2022-04-26T01:15:29Z")
How can download agent logstash from my elk cloud, like Elasticsearch for easy setup, regards --- ## [I got received plaintext http traffic on an https channel, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973)
**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:13am UTC](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973 "2022-04-26T01:13:41Z")
i got this error on Elasticsearch 8.1.3 , how can i solve it i see many solutions but it doesn't work here is the output of the terminal when i go ot "http://localhost:9200/" it shows no data come and on the terminal i … [Previous page](https://discuss.elastic.co/latest.md?page=1156) [Next page](https://discuss.elastic.co/latest.md?page=1158)