# Latest **URL:** https://discuss.elastic.co/latest.md?page=1171 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1172 --- ## [Eck does take metadata name as role name](https://discuss.elastic.co/t/eck-does-take-metadata-name-as-role-name/302186)
**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 7:35am UTC](https://discuss.elastic.co/t/eck-does-take-metadata-name-as-role-name/302186 "2022-04-14T07:35:52Z")
hi I have encountered a potentially ridiculous problem and can't find my way out I would appreciate any help my YAML file apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: logging na… --- ## [Monitoring a dedicated Monitoring Instance on ECK](https://discuss.elastic.co/t/monitoring-a-dedicated-monitoring-instance-on-eck/302318)
**Author:** [@mag-mkorn](https://discuss.elastic.co/u/mag-mkorn)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 7:24am UTC](https://discuss.elastic.co/t/monitoring-a-dedicated-monitoring-instance-on-eck/302318 "2022-04-14T07:24:17Z")
Hi Folks, with spec.monitoring ECK provides a very nice way to enable monitoring and ship data to a dedicated monitoring instance. However, you can not configure an instance to send the data to itself (stated here). So… --- ## [Elasticsearch non blocking ElasticsearchAsyncSearchAsyncClient and ElasticsearchAsyncClient](https://discuss.elastic.co/t/elasticsearch-non-blocking-elasticsearchasyncsearchasyncclient-and-elasticsearchasyncclient/302077)
**Author:** [@saeed\_shahsavan](https://discuss.elastic.co/u/saeed_shahsavan)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-non-blocking-elasticsearchasyncsearchasyncclient-and-elasticsearchasyncclient/302077 "2022-04-14T06:57:32Z")
Recently I have upgraded my project to use Elasticsearch so I have changed my client to use ElasticsearchAsyncSearchAsyncClient and ElasticsearchAsyncClient unfortunately in both clients my response time increased huge… --- ## [Filebeat Barracuda module](https://discuss.elastic.co/t/filebeat-barracuda-module/300008)
**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\ **Replies:** 4\ **Last updated:** [April 14, 2022, 6:34am UTC](https://discuss.elastic.co/t/filebeat-barracuda-module/300008 "2022-04-14T06:34:55Z")
Hello! I have a problem with ingest barracuda logs. But I have trouble on setting up barracuda module. It gives me this error when I enable module and run "sudo filebeat setup -e" 2022-03-15T15:32:39.986Z ERROR instanc… --- ## [Display data from external REST API in Kibana](https://discuss.elastic.co/t/display-data-from-external-rest-api-in-kibana/301317)
**Author:** [@SuprithaAradhya](https://discuss.elastic.co/u/SuprithaAradhya)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 6:06am UTC](https://discuss.elastic.co/t/display-data-from-external-rest-api-in-kibana/301317 "2022-04-14T06:06:32Z")
I want to display some data in Kibana but this data is not present in Elasticsearch or Kibana. I want to read this data from an external REST API, i would be happy if I can do this inside Kibana page or can I add a new p… --- ## [Query array of keyword responce different in source and docfields](https://discuss.elastic.co/t/query-array-of-keyword-responce-different-in-source-and-docfields/302389)
**Author:** [@waitingF](https://discuss.elastic.co/u/waitingF)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 3:34am UTC](https://discuss.elastic.co/t/query-array-of-keyword-responce-different-in-source-and-docfields/302389 "2022-04-14T03:34:43Z")
I have an mapping of keyword field, like below PUT test-map { "mappings": { "properties": { "field": { "type": "keyword" } } } } And I post a doc: POST … --- ## [Track Queries with High Heap Usage](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [April 14, 2022, 3:24am UTC](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267 "2022-04-14T03:24:29Z")
Hi All, I was wondering the best way to track queries based on their Heap usage. Context: I've recently had to increase heap allocation (currently 20GB RAM - 18GB Heap, up from 10GB RAM - 8GB Heap) on coordinating node… --- ## [Forced-awareness in Elastic 8.0.1](https://discuss.elastic.co/t/forced-awareness-in-elastic-8-0-1/301738)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 10\ **Last updated:** [April 14, 2022, 2:44am UTC](https://discuss.elastic.co/t/forced-awareness-in-elastic-8-0-1/301738 "2022-04-14T02:44:57Z")
Hi I have a question: how I can ensure shard replication for to scatter shards to other hosts?, My Elastic cluster consist from 3 host (under 51 data nodes) As You can see Elasticsearch has made replicat on the same … --- ## [Editing and re-indexing large amounts of data in elasticsearch (millions of records)](https://discuss.elastic.co/t/editing-and-re-indexing-large-amounts-of-data-in-elasticsearch-millions-of-records/302373)
**Author:** [@jp184](https://discuss.elastic.co/u/jp184)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 12:55am UTC](https://discuss.elastic.co/t/editing-and-re-indexing-large-amounts-of-data-in-elasticsearch-millions-of-records/302373 "2022-04-14T00:55:20Z")
I recently made a new version of an index for my Elasticsearch data with some new fields included. I re-indexed from the old index, so the new index has all of the old data with also the new mapping to include the new fi… --- ## [Weird / strange version number of cluster after migration to 8.1.2](https://discuss.elastic.co/t/weird-strange-version-number-of-cluster-after-migration-to-8-1-2/302378)
**Author:** [@Zdeno\_Liska](https://discuss.elastic.co/u/Zdeno_Liska)\ **Replies:** 4\ **Last updated:** [April 14, 2022, 12:24am UTC](https://discuss.elastic.co/t/weird-strange-version-number-of-cluster-after-migration-to-8-1-2/302378 "2022-04-14T00:24:46Z")
Hi, I have just upgraded from 7.17 ro 8.1.2. Anyway, what I see in Stack monitoring in cluster version is not 8.1.2, as before when it was there 7.17.2 but can you please help to solve it? Cluster state is green, all… --- ## [Problems getting logs in with winlogbeat](https://discuss.elastic.co/t/problems-getting-logs-in-with-winlogbeat/302169)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 10\ **Last updated:** [April 13, 2022, 8:56pm UTC](https://discuss.elastic.co/t/problems-getting-logs-in-with-winlogbeat/302169 "2022-04-13T20:56:38Z")
ES version 7.16.2 trying to upload sysmon data using winlogbeat. Cluster has "security" enabled and the winlogbeat clients are now connecting an there are no errors in the ES logs. We are using API keys -- this took so… --- ## [ElasticSearch using Docker and BitBucket DataCenter](https://discuss.elastic.co/t/elasticsearch-using-docker-and-bitbucket-datacenter/302163)
**Author:** [@ibmsorerer](https://discuss.elastic.co/u/ibmsorerer)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 8:21pm UTC](https://discuss.elastic.co/t/elasticsearch-using-docker-and-bitbucket-datacenter/302163 "2022-04-13T20:21:34Z")
We were running BitBucket v6.10.3 as a monolithic server, which has reached EOL. I've been migrating this system to BB v7.21.0 (current release). I've been able to create an ES cluster under Docker/OpenShift without re… --- ## [Elastic Search Logstash input -\>output AWS s3](https://discuss.elastic.co/t/elastic-search-logstash-input-output-aws-s3/302376)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 7:35pm UTC](https://discuss.elastic.co/t/elastic-search-logstash-input-output-aws-s3/302376 "2022-04-13T19:35:14Z")
Is it possible not to query all the data(duplication) when we ingest data from Elasticsearch input -\>aws s3 output? I want to ingest the data daily but it would duplicate it querying all the data from the start again bu… --- ## [How to parse json logs in logstash](https://discuss.elastic.co/t/how-to-parse-json-logs-in-logstash/302358)
**Author:** [@hassnain](https://discuss.elastic.co/u/hassnain)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 7:02pm UTC](https://discuss.elastic.co/t/how-to-parse-json-logs-in-logstash/302358 "2022-04-13T19:02:10Z")
{"className":"HomePageBusiness.java","msisdn":"912345678902","method":"HOMEPAGE","externalAPI":"My project info","message":"Delta this is successfull","timestamp":"2022/04/06 21:49:14","timeElapsed":"0:0:0:109"} This is… --- ## [Default Search in Discover](https://discuss.elastic.co/t/default-search-in-discover/302362)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:28pm UTC](https://discuss.elastic.co/t/default-search-in-discover/302362 "2022-04-13T16:28:05Z")
Is there a way to set Discover to open to a default saved search? I know you can set the default index pattern, but my ideal would be that - for each Space's Discover - it would open with a default saved search with all … --- ## [Filebeat hangs on Windows Server](https://discuss.elastic.co/t/filebeat-hangs-on-windows-server/300654)
**Author:** [@Cuong\_Hoang](https://discuss.elastic.co/u/Cuong_Hoang)\ **Replies:** 0\ **Last updated:** [March 25, 2022, 3:23am UTC](https://discuss.elastic.co/t/filebeat-hangs-on-windows-server/300654 "2022-03-25T03:23:50Z")
Hi all. I have a problem with beats (winlogbeat, filebeat) on Windows Server 2016. I use filebeat to collect IIS logs. Server information: OS Name: Microsoft Windows Server 2016 Standard OS Version: 10.0.14393 N/A Bu… --- ## [Winlogbeat & Logstash - Ingest Pipelines](https://discuss.elastic.co/t/winlogbeat-logstash-ingest-pipelines/301758)
**Author:** [@bct.timo.crabbe](https://discuss.elastic.co/u/bct.timo.crabbe)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 6:31pm UTC](https://discuss.elastic.co/t/winlogbeat-logstash-ingest-pipelines/301758 "2022-04-13T18:31:39Z")
Hi everyone, I am having an issue with the ingest pipelines for powershell while using winlogbeat and the logstash output (both version 8.1.0). The powershell events seem not to be processed by the pipeline. There is a… --- ## [Reducing relevance for viewed videos](https://discuss.elastic.co/t/reducing-relevance-for-viewed-videos/302352)
**Author:** [@Gustavo\_Leite\_Silvan](https://discuss.elastic.co/u/Gustavo_Leite_Silvan)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 6:14pm UTC](https://discuss.elastic.co/t/reducing-relevance-for-viewed-videos/302352 "2022-04-13T18:14:05Z")
Hello there! We have a social network app that contains user's videos. The video URL is stored in a timeline index on Elastic. When the users opens the app, we will retrieve relevant videos for him based on the video p… --- ## [How to configure syslog output plugin to useboth tcp and udp protocols based on Remote syslog protocol](https://discuss.elastic.co/t/how-to-configure-syslog-output-plugin-to-useboth-tcp-and-udp-protocols-based-on-remote-syslog-protocol/302312)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:58pm UTC](https://discuss.elastic.co/t/how-to-configure-syslog-output-plugin-to-useboth-tcp-and-udp-protocols-based-on-remote-syslog-protocol/302312 "2022-04-13T17:58:01Z")
logstash syslog output plugin protocol should be configured to use tcp or udp dynamically instead of being hardcoded to any one protocol. Can someone help me with this. --- ## [Kibana server is not ready yet ~ missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 5:43pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-missing-authentication-credentials-for-rest-request/302249 "2022-04-13T17:43:56Z")
I installed Elasticsearch and Kibana 8.1.2 locally with standard configurations and without Docker on Windows 11. I just changed the passwords for all systems and bootstrap. Elasticsearch is starting fine (using the bat… --- ## [How to Index duplicate documents with the different routing id](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:20pm UTC](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353 "2022-04-13T17:20:26Z")
My index settings: { "aliases": { "alias\_test\_read": {} }, "mappings": { "\_routing": { "required": true }, "properties": { "id": { "typ… --- ## [Specifying multiple preferences](https://discuss.elastic.co/t/specifying-multiple-preferences/302367)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 5:30pm UTC](https://discuss.elastic.co/t/specifying-multiple-preferences/302367 "2022-04-13T17:30:35Z")
Hi, Is it possible to specify multiple preferences in an Elasticsearch query? I'm getting an error when using \_local and \_shard as preferences: URL: localhost:9200/testindex/\_search?preference=\_local,\_shards:1 { "… --- ## [Restore MediaWiki ElasticSearch functionality](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786)
**Author:** [@lenhartp](https://discuss.elastic.co/u/lenhartp)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:29pm UTC](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786 "2022-04-13T17:29:32Z")
A couple months ago, had a mediawiki server with 3 wikis running on it dumped in my lap to support. The search box was using CirrusSearch and Elasticsearch / Elastica to generate results, but that was recently broken whe… --- ## [Beats in elastic-agent reporting "failed to connect to backoff"](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506)
**Author:** [@trudyc](https://discuss.elastic.co/u/trudyc)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:16pm UTC](https://discuss.elastic.co/t/beats-in-elastic-agent-reporting-failed-to-connect-to-backoff/299506 "2022-04-13T17:16:47Z")
Apologies in advance if I ask ignorant questions, or don't provide all relevant info in my post. I'm not an expert sysadmin, or network admin, or security admin. I've inherited Elastic from a departed co-worker, and have… --- ## [Fleet Server - Waiting on default policy with Fleet Server integration](https://discuss.elastic.co/t/fleet-server-waiting-on-default-policy-with-fleet-server-integration/302281)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 11:13pm UTC](https://discuss.elastic.co/t/fleet-server-waiting-on-default-policy-with-fleet-server-integration/302281 "2022-04-12T23:13:25Z")
Hello, I am not able to run Fleet. Probably I miss something but not sure; tried also quickstart yaml files, and I got the same result. Kibana Config: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name… --- ## [Error running sudo filebeat setup command](https://discuss.elastic.co/t/error-running-sudo-filebeat-setup-command/302273)
**Author:** [@LeonardoCoco](https://discuss.elastic.co/u/LeonardoCoco)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:51pm UTC](https://discuss.elastic.co/t/error-running-sudo-filebeat-setup-command/302273 "2022-04-13T16:51:33Z")
I'm configuring Elasticsearch, Kibana and Filebeat from scratch. I have already configured the Elasticsearch.yam, kibana.yam files and I am finishing the filebeat installation, but when executing the command below, the … --- ## [I'm getting this error while looking for logs Error loading data bad gateway](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361)
**Author:** [@Prasadevops0710](https://discuss.elastic.co/u/Prasadevops0710)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:30pm UTC](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361 "2022-04-13T16:30:13Z")
SearchError: Bad Gateway at https://elk.abc.com/bundles/commons.bundle.js:5:1844068 at processQueue (https://elk.abc.com/built\_assets/dlls/vendors.bundle.dll.js:417:203810) at https://elk.abc.com/built\_assets/dlls/ven… --- ## [Display Name for Index Patterns](https://discuss.elastic.co/t/display-name-for-index-patterns/302357)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 4:26pm UTC](https://discuss.elastic.co/t/display-name-for-index-patterns/302357 "2022-04-13T16:26:29Z")
I was wondering if it is possible to use a different, more intuitive/human-readable, display name for index patterns in Discover rather than the actual pattern? My reason is that some index patterns are ugly and I'd it t… --- ## [How to skip errors on snapshots](https://discuss.elastic.co/t/how-to-skip-errors-on-snapshots/302295)
**Author:** [@views\_eos](https://discuss.elastic.co/u/views_eos)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:23pm UTC](https://discuss.elastic.co/t/how-to-skip-errors-on-snapshots/302295 "2022-04-13T16:23:22Z")
I was backing up the Snapshot data through NFS, but the NFS connection was cut off, so I received an error as below curl -H 'content-type: application/JSON' -XPUT "http://localhost:39023/\_snapshot/fs\_snapshot/$TARGET\_LO… --- ## [Change data stream name in filebeat 8.\*](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531)
**Author:** [@Andres\_Altamirano](https://discuss.elastic.co/u/Andres_Altamirano)\ **Replies:** 6\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531 "2022-04-13T15:58:35Z")
We used to store filebeat data from different sources in a different index due to storage size and document category using different ILM policies. Now we can't do that because if we use ILM, we can't change the index na… [Previous page](https://discuss.elastic.co/latest.md?page=1170) [Next page](https://discuss.elastic.co/latest.md?page=1172)