# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1202

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1203

---

## [Getting Search suggestion from secondary field](https://discuss.elastic.co/t/getting-search-suggestion-from-secondary-field/299846)

<div class="topic-metadata">

**Author:** [@Himanshu\_Jain3](https://discuss.elastic.co/u/Himanshu_Jain3)\
**Replies:** 4\
**Last updated:** [March 25, 2022, 2:02am UTC](https://discuss.elastic.co/t/getting-search-suggestion-from-secondary-field/299846 "2022-03-25T02:02:36Z")

</div>

Please sugest a way where we can provide user with suggestion from second field other then the matchin field Example \[Name \] \[Address\] \[Phone no\] Poo…

---

## [“Parent Circuit Breaker”の推定サイズ（estimated\_size）の算出方法について](https://discuss.elastic.co/t/parent-circuit-breaker-estimated-size/300556)

<div class="topic-metadata">

**Author:** [@yusuke.kominami](https://discuss.elastic.co/u/yusuke.kominami)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 10:22am UTC](https://discuss.elastic.co/t/parent-circuit-breaker-estimated-size/300556 "2022-03-24T10:22:04Z")

</div>

\_nodes/statsで確認したところ 現在、下記に添付したデータの様な状態となっており このままでは Parent Ciruit Breaker の limit に引っかかってしまい Circuit Breakが発生してしまいかねないため 対応を考えているのですが、原因の特定が出来ず調査が行き詰まっております。 Parent Circuit Brwaker は各breakerの合計の値が入ってくるものという認識なのですが …

---

## [Search UI is not available version 8.1.0](https://discuss.elastic.co/t/search-ui-is-not-available-version-8-1-0/300106)

<div class="topic-metadata">

**Author:** [@st11x](https://discuss.elastic.co/u/st11x)\
**Replies:** 4\
**Last updated:** [March 25, 2022, 1:55am UTC](https://discuss.elastic.co/t/search-ui-is-not-available-version-8-1-0/300106 "2022-03-25T01:55:51Z")

</div>

Hi, I used the docker-compose file from Running Enterprise Search using Docker | Elastic Enterprise Search Documentation \[8.1\] | Elastic and was able to get everything running. When I go to App Search and launch the Se…

---

## [Why strong rotation](https://discuss.elastic.co/t/why-strong-rotation/300413)

<div class="topic-metadata">

**Author:** [@Oliverwq](https://discuss.elastic.co/u/Oliverwq)\
**Replies:** 2\
**Last updated:** [March 25, 2022, 1:34am UTC](https://discuss.elastic.co/t/why-strong-rotation/300413 "2022-03-25T01:34:04Z")

</div>

In ClusterHealthResponse that int numberOfNodes = (int) parsedObjects\[i++\]; int numberOfDataNodes = (int) parsedObjects\[i++\]; int activeShards = (int) parsedObjects\[i++\]; int relocat…

---

## [Ubuntu 20.04 What has happened to "http://artifacts.elastic.co/packages/7.x/apt"](https://discuss.elastic.co/t/ubuntu-20-04-what-has-happened-to-http-artifacts-elastic-co-packages-7-x-apt/300641)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 9:00pm UTC](https://discuss.elastic.co/t/ubuntu-20-04-what-has-happened-to-http-artifacts-elastic-co-packages-7-x-apt/300641 "2022-03-24T21:00:07Z")

</div>

It appear to have vanished -- Trying to install a new kibaban 7.x instance on a new VM and apt update says E: The repository 'http://artifacts.elastic.co/packages/7.x/apt stable Release' does not have a Release file. a…

---

## [Need help: amazon\_es is installed but still getting error that the plugin is not installed](https://discuss.elastic.co/t/need-help-amazon-es-is-installed-but-still-getting-error-that-the-plugin-is-not-installed/300648)

<div class="topic-metadata">

**Author:** [@dontusk1980](https://discuss.elastic.co/u/dontusk1980)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 11:53pm UTC](https://discuss.elastic.co/t/need-help-amazon-es-is-installed-but-still-getting-error-that-the-plugin-is-not-installed/300648 "2022-03-24T23:53:11Z")

</div>

Hi team, installed logstash-plugin install logstash-output-amazon\_es, but once restarted the logstash, log says not installed, detailed logs are as below \[root@ip-10-33-89-199 bin\]# ./logstash --version Using JAVA\_HOM…

---

## [Max\_snapshot\_bytes\_per\_sec - Implications of setting this value](https://discuss.elastic.co/t/max-snapshot-bytes-per-sec-implications-of-setting-this-value/300643)

<div class="topic-metadata">

**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 9:37pm UTC](https://discuss.elastic.co/t/max-snapshot-bytes-per-sec-implications-of-setting-this-value/300643 "2022-03-24T21:37:37Z")

</div>

I am after a more in depth explanation of the implications of adjusting the max\_snapshot\_bytes\_per\_sec for an S3 repository. Reading the documentation, it is simply described as max\_snapshot\_bytes\_per\_sec (Optional, byt…

---

## [Filebeat and Logstash tuning - How to align performance](https://discuss.elastic.co/t/filebeat-and-logstash-tuning-how-to-align-performance/300268)

<div class="topic-metadata">

**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 10:22pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-tuning-how-to-align-performance/300268 "2022-03-24T22:22:55Z")

</div>

I am in the process of trying to ingest a massive backlog of logs (10s of TB) via Filebeat \> Logstash \> Ingest Node \> Elasticsearch. I have scaled out the pipeline extensively and am now at a point where I am struggling…

---

## [Unable to import saved objects from Kibana 7.8.0 to 8.1.0](https://discuss.elastic.co/t/unable-to-import-saved-objects-from-kibana-7-8-0-to-8-1-0/300205)

<div class="topic-metadata">

**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 9:07pm UTC](https://discuss.elastic.co/t/unable-to-import-saved-objects-from-kibana-7-8-0-to-8-1-0/300205 "2022-03-24T21:07:54Z")

</div>

Hello team, I'm unable to import saved objects (test.ndjson)from Kibana- 7.8.0 to Kibana-8.1.0, getting below error: Sorry, there was an error The file could not be processed due to error: "Internal Server Error" No …

---

## [Kibana status shows yellow because plugins are degraded after upgrading from 7.9 to 7.16.3](https://discuss.elastic.co/t/kibana-status-shows-yellow-because-plugins-are-degraded-after-upgrading-from-7-9-to-7-16-3/300361)

<div class="topic-metadata">

**Author:** [@Bhavb08](https://discuss.elastic.co/u/Bhavb08)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 9:14pm UTC](https://discuss.elastic.co/t/kibana-status-shows-yellow-because-plugins-are-degraded-after-upgrading-from-7-9-to-7-16-3/300361 "2022-03-24T21:14:03Z")

</div>

Hi. I have been looking for answers in various forums for this. I looked into individual plugins dependencies and looks like alerting plugin might be the cause for all this. But I am unable find a solution. There wa…

---

## [How to implement pagination with large dataset](https://discuss.elastic.co/t/how-to-implement-pagination-with-large-dataset/300550)

<div class="topic-metadata">

**Author:** [@achobanov](https://discuss.elastic.co/u/achobanov)\
**Replies:** 4\
**Last updated:** [March 24, 2022, 9:03pm UTC](https://discuss.elastic.co/t/how-to-implement-pagination-with-large-dataset/300550 "2022-03-24T21:03:08Z")

</div>

Environment .Net 5 Elasticsearch.Net.Aws 7.1.0 : NuGet Gallery | Elasticsearch.Net.Aws 7.2.2 Low level client Problem Even with pagination, Elasticsearch's query API does not support more than 10\_000 records by defaul…

---

## [Retrieve all documents with a field value that is included a previous query's field values](https://discuss.elastic.co/t/retrieve-all-documents-with-a-field-value-that-is-included-a-previous-querys-field-values/300639)

<div class="topic-metadata">

**Author:** [@megancooper](https://discuss.elastic.co/u/megancooper)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 8:53pm UTC](https://discuss.elastic.co/t/retrieve-all-documents-with-a-field-value-that-is-included-a-previous-querys-field-values/300639 "2022-03-24T20:53:15Z")

</div>

I have a unique query use case that I can't seem to find covered in the documentation. (I'm using ElasticSearch 7.17) I have documents inside an index that are shaped the following way: { parentName: string childre…

---

## [Elasticsearch Cluster - no node visible](https://discuss.elastic.co/t/elasticsearch-cluster-no-node-visible/300338)

<div class="topic-metadata">

**Author:** [@zicherka](https://discuss.elastic.co/u/zicherka)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-no-node-visible/300338 "2022-03-24T20:27:58Z")

</div>

Hi System: CentOS 8 Stream Elasticsearch ver: 8.1.0 Nodes: node1.test.com 192.168.100.101 node2.test.com 192.168.100.102 node3.test.com 192.168.100.103 All nodes can be pinged by IP and FQDN, Firewalld has open port…

---

## [DotNet agent oracle database tracing](https://discuss.elastic.co/t/dotnet-agent-oracle-database-tracing/300596)

<div class="topic-metadata">

**Author:** [@sarabu\_ps](https://discuss.elastic.co/u/sarabu_ps)\
**Replies:** 3\
**Last updated:** [March 24, 2022, 8:24pm UTC](https://discuss.elastic.co/t/dotnet-agent-oracle-database-tracing/300596 "2022-03-24T20:24:35Z")

</div>

The above link says Oracle.ManagedDataAccess would be added in beta, let me know if that is available in elastic apm nuget 1.14.1, Also when Oracle.ManagedDataAccessCore would be supported for .NEt Core

---

## [Mapped\_geo\_shape test error but I don't use any geo code v7.16.3](https://discuss.elastic.co/t/mapped-geo-shape-test-error-but-i-dont-use-any-geo-code-v7-16-3/300634)

<div class="topic-metadata">

**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 8:05pm UTC](https://discuss.elastic.co/t/mapped-geo-shape-test-error-but-i-dont-use-any-geo-code-v7-16-3/300634 "2022-03-24T20:05:58Z")

</div>

I have a class that extends AbstractQueryTestCase and all of its tests are failing, included ones that I didn't override, with the same stacktrace error: Failed to parse mapping \[\_doc\]: No handler for type \[geo\_shape\] d…

---

## [Incorrect HTTP method for uri \[/\<filebeat-7.16.0-{now/d}-000001\>\] and method \[PUT\], allowed: \[POST\]](https://discuss.elastic.co/t/incorrect-http-method-for-uri-filebeat-7-16-0-now-d-000001-and-method-put-allowed-post/300629)

<div class="topic-metadata">

**Author:** [@claudioemmanuel](https://discuss.elastic.co/u/claudioemmanuel)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 7:41pm UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-filebeat-7-16-0-now-d-000001-and-method-put-allowed-post/300629 "2022-03-24T19:41:08Z")

</div>

I'm running on nginx in my docker container, I installed filebeat and configured it so that the nginx access and error logs are sent directly to my elastic/kibana but the logs are not appearing or being sent. Running a …

---

## [Logstash xml parse error](https://discuss.elastic.co/t/logstash-xml-parse-error/300624)

<div class="topic-metadata">

**Author:** [@elwdipath](https://discuss.elastic.co/u/elwdipath)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 7:14pm UTC](https://discuss.elastic.co/t/logstash-xml-parse-error/300624 "2022-03-24T19:14:35Z")

</div>

Hey all, new to logstash. I'm running into an error when trying to parse an empty xml element. failed to parse field \[xml.record.person.agedata.dob\] of type \[text\] in document with id 'DA9jvH8BhCQVGJZR4sKN'. Preview of…

---

## [Cluster Red after system patching forced upgrade 7.16.1 -\> 7.17.1](https://discuss.elastic.co/t/cluster-red-after-system-patching-forced-upgrade-7-16-1-7-17-1/300592)

<div class="topic-metadata">

**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 7:00pm UTC](https://discuss.elastic.co/t/cluster-red-after-system-patching-forced-upgrade-7-16-1-7-17-1/300592 "2022-03-24T19:00:59Z")

</div>

We have and 8 node cluster where the nodes are all running Centos 7. When they were rebooted for patching, the ES version went to 7.17.1. The master node is periodically scrolling these errors: \[2022-03-24T10:59:50,530…

---

## [Elasticsearch Querying Double Nested Object, Match Multiple Rows in Query Within Parent](https://discuss.elastic.co/t/elasticsearch-querying-double-nested-object-match-multiple-rows-in-query-within-parent/300619)

<div class="topic-metadata">

**Author:** [@CoreyFournier](https://discuss.elastic.co/u/CoreyFournier)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-querying-double-nested-object-match-multiple-rows-in-query-within-parent/300619 "2022-03-24T18:30:26Z")

</div>

My data model is related to patient records. At the highest level is the Patient, then their information such as Lab Panels and the individual rows of the results of the panel. So it looks like this: {Patient:{Labs:\[{Res…

---

## [Filter load monitoring](https://discuss.elastic.co/t/filter-load-monitoring/300461)

<div class="topic-metadata">

**Author:** [@Dargod](https://discuss.elastic.co/u/Dargod)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 5:55pm UTC](https://discuss.elastic.co/t/filter-load-monitoring/300461 "2022-03-24T17:55:53Z")

</div>

I have a lot of filters in logstash that deal with the processing of plain text logs and json. With the linear growth of connected logs, the load increased and there was an increase in the queue. In this connection, th…

---

## [Multiple Filebeat logs path configuration stops the filebeat](https://discuss.elastic.co/t/multiple-filebeat-logs-path-configuration-stops-the-filebeat/300471)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 3\
**Last updated:** [March 24, 2022, 5:54pm UTC](https://discuss.elastic.co/t/multiple-filebeat-logs-path-configuration-stops-the-filebeat/300471 "2022-03-24T17:54:51Z")

</div>

Hello All, 1)After I'm configuring multiple filebeat path in filebeat.yml,filebeat gets stopped with below error: Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing …

---

## [Problem using input snmp](https://discuss.elastic.co/t/problem-using-input-snmp/300611)

<div class="topic-metadata">

**Author:** [@Ygal\_Mizrachi](https://discuss.elastic.co/u/Ygal_Mizrachi)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 5:16pm UTC](https://discuss.elastic.co/t/problem-using-input-snmp/300611 "2022-03-24T17:16:19Z")

</div>

Hello im using this ultra simple conf file: input { snmp { hosts =\> \[{host =\> "udp:192.168.24.1/161" community =\> "public" version =\> "2c" retries =\> 2 timeout =\> 1000}\] tables =\> \[ {"name" =\> "interfaces" "columns" =\> …

---

## [Stack-monitoring](https://discuss.elastic.co/t/stack-monitoring/300384)

<div class="topic-metadata">

**Author:** [@aviad.co1](https://discuss.elastic.co/u/aviad.co1)\
**Replies:** 4\
**Last updated:** [March 24, 2022, 5:09pm UTC](https://discuss.elastic.co/t/stack-monitoring/300384 "2022-03-24T17:09:47Z")

</div>

Hi, I try to config remote monitoring to my production elk cluster... so I first install metricbeat and then config to ouput to remote monitoring Elasticsearch. I use module Elasticsearch-xpack and kibana-xpack.. I can …

---

## [COMBINEDAPACHELOG grok definition not creating the expected fields](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576)

<div class="topic-metadata">

**Author:** [@Patrick\_Lepage](https://discuss.elastic.co/u/Patrick_Lepage)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 5:04pm UTC](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576 "2022-03-24T17:04:46Z")

</div>

Complete beginner to logstash here... I'm following the "Parsing Logs with Logstash" tutorial. Input comes from filebeat reading a static log file provided with the tutorial; see example of a sample line below. 83.149.…

---

## [Using scroll API in Kibana](https://discuss.elastic.co/t/using-scroll-api-in-kibana/300558)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 5:01pm UTC](https://discuss.elastic.co/t/using-scroll-api-in-kibana/300558 "2022-03-24T17:01:50Z")

</div>

We can get the large hits of document search and retrieval using scroll API in Elasticsearch. Anyway we can use scroll API in kibana dashboards for downloading reports?

---

## [Strange bad certificate](https://discuss.elastic.co/t/strange-bad-certificate/300552)

<div class="topic-metadata">

**Author:** [@labate](https://discuss.elastic.co/u/labate)\
**Replies:** 13\
**Last updated:** [March 24, 2022, 4:55pm UTC](https://discuss.elastic.co/t/strange-bad-certificate/300552 "2022-03-24T16:55:01Z")

</div>

Dear all, I'm facing to a serious problem. I get this following message: filebeat\[29206\]: 2022-03-24T10:30:37.927+0100 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to conn…

---

## [Drill Down Dashboard with context.panel.filters](https://discuss.elastic.co/t/drill-down-dashboard-with-context-panel-filters/300589)

<div class="topic-metadata">

**Author:** [@rajeev2](https://discuss.elastic.co/u/rajeev2)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 4:54pm UTC](https://discuss.elastic.co/t/drill-down-dashboard-with-context-panel-filters/300589 "2022-03-24T16:54:25Z")

</div>

I wanted to drill down to dashboard using url but i am unable to use context.panel.filter

---

## [Xml Parsing in logstash using xml & split plugins](https://discuss.elastic.co/t/xml-parsing-in-logstash-using-xml-split-plugins/300515)

<div class="topic-metadata">

**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 4:47pm UTC](https://discuss.elastic.co/t/xml-parsing-in-logstash-using-xml-split-plugins/300515 "2022-03-24T16:47:59Z")

</div>

I have a xml which looks like \<Countries\>\<Country\>\<Name\>India\</Name\>\<ISDCode\>+91\</ISDCode\>\<Continent\>Asia\</Continent\>\<geolocationinfo\>\<lattitude\>123129\</lattitude\>\<longititude\>7890890\</longititude\>\</geolocationinfo\>\</Co…

---

## [The login page does not open](https://discuss.elastic.co/t/the-login-page-does-not-open/299141)

<div class="topic-metadata">

**Author:** [@Aynur](https://discuss.elastic.co/u/Aynur)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 4:44pm UTC](https://discuss.elastic.co/t/the-login-page-does-not-open/299141 "2022-03-24T16:44:49Z")

</div>

Version 7.16.3. After updating from version 7.16.2, the login window does not open - it freezes on loading. Errors occur in the browser developer console: login:282 Refused to execute inline script because it violates …

---

## [Issue with activemq module in metricbeat](https://discuss.elastic.co/t/issue-with-activemq-module-in-metricbeat/300499)

<div class="topic-metadata">

**Author:** [@christopherjhachey](https://discuss.elastic.co/u/christopherjhachey)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 4:35pm UTC](https://discuss.elastic.co/t/issue-with-activemq-module-in-metricbeat/300499 "2022-03-24T16:35:00Z")

</div>

Getting the following error trying to use activemq module in metricbeat framework. Exiting: 3 errors: metricset 'activemq/broker' not found; metricset 'activemq/queue' not found; metricset 'activemq/topic' not found I'…

[Previous page](https://discuss.elastic.co/latest.md?page=1201)

[Next page](https://discuss.elastic.co/latest.md?page=1203)
