# Latest **URL:** https://discuss.elastic.co/latest.md?page=1205 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1206 --- ## [Alerting in Kibana : formatting for dates](https://discuss.elastic.co/t/alerting-in-kibana-formatting-for-dates/300470)
**Author:** [@agaucher](https://discuss.elastic.co/u/agaucher)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 2:27pm UTC](https://discuss.elastic.co/t/alerting-in-kibana-formatting-for-dates/300470 "2022-03-23T14:27:44Z")
Hello, I use the alerting rules that are directly available in Kibana (i don't use "Watcher"). As action, I send an email and i put the field {{context.hits.0.\_source.inventoryDate}} in the body. It works well, but the… --- ## [Elastic Cloud Ingest Pipeline Change](https://discuss.elastic.co/t/elastic-cloud-ingest-pipeline-change/300365)
**Author:** [@kinderrs](https://discuss.elastic.co/u/kinderrs)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 1:41pm UTC](https://discuss.elastic.co/t/elastic-cloud-ingest-pipeline-change/300365 "2022-03-23T13:41:18Z")
Hi all! I am using Elastic Cloud to collect information from a custom log. I created a ingest pipeline but then found that I had to change/update a portion of the pipeline (a dissect processor) which went from somethin… --- ## [Repository-hdfs error while creating repository to backup elasticsearch index to HDFS](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917)
**Author:** [@Sahana\_Murthy](https://discuss.elastic.co/u/Sahana_Murthy)\ **Replies:** 6\ **Last updated:** [March 23, 2022, 1:39pm UTC](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917 "2022-03-23T13:39:29Z")
Hello everyone, I am stuck in a situation where my Elasticsearch(7.9.0) upgradation is pending due to backup /snapshot not being in place We have 10 ELK node in cluster based in Azure cloud out of which 3 master nodes … --- ## [Aggregation bucket for 1 Million documents in Kibana](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 1:34pm UTC](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420 "2022-03-23T13:34:43Z")
Hi all, I have to process 1M records and download 1M records. So is it practical to use a bucket size of 1Million so that when i download CSV report , it must have 1 Million documents? Or is there another approach for… --- ## [Where are timelion visualizations saved?](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387)
**Author:** [@fcarrasco](https://discuss.elastic.co/u/fcarrasco)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 1:22pm UTC](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387 "2022-03-23T13:22:39Z")
Hi we have Elasticsearch 7.16.3 Platinum, we create 35 viz in timelion but we need change name of index. Where are timelion visualizations saved? In any system index? Anybody have script to update index name? Any ap… --- ## [High CPU Usage on some filebeat instances](https://discuss.elastic.co/t/high-cpu-usage-on-some-filebeat-instances/298426)
**Author:** [@Lebvanih](https://discuss.elastic.co/u/Lebvanih)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 12:25pm UTC](https://discuss.elastic.co/t/high-cpu-usage-on-some-filebeat-instances/298426 "2022-03-23T12:25:15Z")
Hello, Some information about the system as this can help: Installation inside K8S using elastic helm charts. Filebeat version 7.16.3 Amount of pods per nodes: ~160 Amount of logs harvested per nodes: ~100 CPU usage r… --- ## [Communicate between elk and nagios](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439)
**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\ **Replies:** 5\ **Last updated:** [March 23, 2022, 12:21pm UTC](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439 "2022-03-23T12:21:29Z")
how to communicate between elk and nagios --- ## [Search\_as\_you\_type field as subfield](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425)
**Author:** [@casparxu](https://discuss.elastic.co/u/casparxu)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 11:02am UTC](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425 "2022-03-23T11:02:52Z")
Hello experts, I'm using ES v7. I noticed there's a fantastic type called 'search\_ar\_you\_type' can help me with auto-completion. The samples from doc is map the field to this type like: { "mappings": { "propertie… --- ## [ELK stack upgrade 7.13.4 to 8.1](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:58am UTC](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392 "2022-03-23T10:58:47Z")
I apologize in advance if this topic has already been addressed, but I am relatively new to this type of configurations. I currently have the stack (ES, Kibana and Filebeat) at version 7.13.4 but I want to update to the… --- ## [Error on Elastic Search status](https://discuss.elastic.co/t/error-on-elastic-search-status/300406)
**Author:** [@Asha\_Anie\_Bose](https://discuss.elastic.co/u/Asha_Anie_Bose)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 10:55am UTC](https://discuss.elastic.co/t/error-on-elastic-search-status/300406 "2022-03-23T10:55:55Z")
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearc… --- ## [GeoSpatial Query using NEST and ES 7.14](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 2:54pm UTC](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206 "2022-03-22T14:54:48Z")
We are using ES 17.14 and have looked at the docs but have been unable to create a query and wondered if anyone can shed some light on it. 1- We have an IndexA that has a FieldA of type Geoshape with its latitude and l… --- ## [Kibana server is not ready](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:06am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432 "2022-03-23T10:06:55Z")
Hi i am using kibana 7.12.0. i am facing this issue frequently.can please help me with a solution \[ FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index. Please check the health of your El… --- ## [Winlogbeat is not shipping Data to Elasticsearch after enabling xpack Security](https://discuss.elastic.co/t/winlogbeat-is-not-shipping-data-to-elasticsearch-after-enabling-xpack-security/300423)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:05am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-shipping-data-to-elasticsearch-after-enabling-xpack-security/300423 "2022-03-23T10:05:59Z")
Hello, so we've started to renew our Cluster for various reasons: 3 Node Cluster (CentOS 7) Using: Kibana 7.15 Elasticsearch 7.15 Logstash 7.15 Filebeat 7.15 Winlogbeat 7.15 After we setup xpack Security within … --- ## [Will es nodes connect with each other in 9200?](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 9:53am UTC](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421 "2022-03-23T09:53:26Z")
Hi, there. The official doc said, Each Elasticsearch node has two different network interfaces. Clients send requests to Elasticsearch’s REST APIs using its HTTP interface, but nodes communicate with other nodes using… --- ## [Logstash Not Loading Config Files Running as Service](https://discuss.elastic.co/t/logstash-not-loading-config-files-running-as-service/300430)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 9:35am UTC](https://discuss.elastic.co/t/logstash-not-loading-config-files-running-as-service/300430 "2022-03-23T09:35:22Z")
Dear all, My Logstash is not reading config files I have specified in pipelines.yml. pipelines.yml # This file is where you define your pipelines. You can define multiple. # For more information on multiple pipelines,… --- ## [Increase search thread pool capacity by adding more non "data" nodes](https://discuss.elastic.co/t/increase-search-thread-pool-capacity-by-adding-more-non-data-nodes/300230)
**Author:** [@ben5556](https://discuss.elastic.co/u/ben5556)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 9:17am UTC](https://discuss.elastic.co/t/increase-search-thread-pool-capacity-by-adding-more-non-data-nodes/300230 "2022-03-23T09:17:16Z")
Hi, We encounter search thread pool rejection errors on random days during peak usage. I was wondering if we can dynamically (scale UP) add non "data" nodes for example more master or other type of nodes to increase the… --- ## [Beats input plugin to support TLS 1.3](https://discuss.elastic.co/t/beats-input-plugin-to-support-tls-1-3/299042)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 9:07am UTC](https://discuss.elastic.co/t/beats-input-plugin-to-support-tls-1-3/299042 "2022-03-23T09:07:24Z")
Currently tls\_min\_version and tls\_max\_version maximum supported version is 1.2 only. Does logstash beats plugin support TLS 1.3? --- ## [Event.original field](https://discuss.elastic.co/t/event-original-field/300417)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 7:58am UTC](https://discuss.elastic.co/t/event-original-field/300417 "2022-03-23T07:58:46Z")
I am storing log files in Elasticsearch indexes via Filebeat and logstash. And I also use metricbeat to monitor the stack. In this case, the "event.original" field is automatically stored in the index." If you know ho… --- ## [Search if only the all word is repeated more than 1 times in a particular string](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426)
**Author:** [@div927](https://discuss.elastic.co/u/div927)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 9:02am UTC](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426 "2022-03-23T09:02:11Z")
I am trying to write a search engine where I want to get the result only, if say -\> chess, player, game words are there I would return result only if all these 3 words present twice or thrice in any of the field \["… --- ## [Java RestHighLevelClient vs Elasticsearch Java API Client Improvements](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398)
**Author:** [@Ashfur](https://discuss.elastic.co/u/Ashfur)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 8:26am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398 "2022-03-23T08:26:24Z")
Hello, We are on 7.16.2 and are currently using the org.Elasticsearch.client.RestHighLevelClient. I am aware that the RestHighLevelClient has been deprecated in favor of the new Java API client. I'd just like to know… --- ## [Filebeat: Exiting: couldn't connect to any of the configured Elasticsearch hosts](https://discuss.elastic.co/t/filebeat-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/297997)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 6\ **Last updated:** [March 23, 2022, 8:01am UTC](https://discuss.elastic.co/t/filebeat-exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts/297997 "2022-03-23T08:01:08Z")
Running Windows 10 the Elastic and Kibana as .bat work fine but configuring beats from .zip download fails for me. I run all on the same machine and only changed the .yml file with this guide: Even after a reset to de… --- ## [\[KIBANA\] Customize the result of a metric in a Data Table Aggregation](https://discuss.elastic.co/t/kibana-customize-the-result-of-a-metric-in-a-data-table-aggregation/298311)
**Author:** [@Sisiniya](https://discuss.elastic.co/u/Sisiniya)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 7:39am UTC](https://discuss.elastic.co/t/kibana-customize-the-result-of-a-metric-in-a-data-table-aggregation/298311 "2022-03-23T07:39:59Z")
Hello, In my application, each action generates a series of logs. For example : First suite of logs for the same value of data1/data2/data3 : {data1: "val1", data2: "val2", data3: "val3", level: "INFO", level\_value: 2… --- ## [Ignore\_inactive does not work in filebeat with filestream config type (filebeat version:8.1.0)](https://discuss.elastic.co/t/ignore-inactive-does-not-work-in-filebeat-with-filestream-config-type-filebeat-version-8-1-0/300410)
**Author:** [@BinGuoGuo](https://discuss.elastic.co/u/BinGuoGuo)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 6:45am UTC](https://discuss.elastic.co/t/ignore-inactive-does-not-work-in-filebeat-with-filestream-config-type-filebeat-version-8-1-0/300410 "2022-03-23T06:45:31Z")
When I use the filestream type instead of the log type, filebeat always reads the entire log file from the beginning. - type: filestream id: test\_id enable: true paths: - "/usr/share/filebeat/inputs.d/\*.log" … --- ## [Ignore\_inactive is not working](https://discuss.elastic.co/t/ignore-inactive-is-not-working/299193)
**Author:** [@lingminzeng](https://discuss.elastic.co/u/lingminzeng)\ **Replies:** 4\ **Last updated:** [March 23, 2022, 6:18am UTC](https://discuss.elastic.co/t/ignore-inactive-is-not-working/299193 "2022-03-23T06:18:37Z")
\#filebeat-8.0.0 filebeat.inputs: \* type: filestream enabled: true paths: \* /var/log/\*.log ignore\_inactive: since\_last\_start I configure ignore\_inactive: since\_last\_start,but filebeat still read at the beginning posit… --- ## [High disk read resulting in io wait on new Cluster 7.9](https://discuss.elastic.co/t/high-disk-read-resulting-in-io-wait-on-new-cluster-7-9/298884)
**Author:** [@borch-inc](https://discuss.elastic.co/u/borch-inc)\ **Replies:** 10\ **Last updated:** [March 23, 2022, 5:23am UTC](https://discuss.elastic.co/t/high-disk-read-resulting-in-io-wait-on-new-cluster-7-9/298884 "2022-03-23T05:23:34Z")
Hey hope for some help on where to optimize We have just moved our cluster into new and bigger servers. so we went from 8 to 5 data nodes since the hardware should have improved a lot. Once we started our application … --- ## [Elasticsearch Became case sensitive after add synonym analyzer](https://discuss.elastic.co/t/elasticsearch-became-case-sensitive-after-add-synonym-analyzer/300283)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 4:42am UTC](https://discuss.elastic.co/t/elasticsearch-became-case-sensitive-after-add-synonym-analyzer/300283 "2022-03-23T04:42:22Z")
After I added synonym analyzer to my\_index, the index became case-sensitive I have one property called nationality that has synonym analyzer. But it seems that this property become case sensitive because of the synonym … --- ## [Logstash SNMP input error](https://discuss.elastic.co/t/logstash-snmp-input-error/298106)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 4:02am UTC](https://discuss.elastic.co/t/logstash-snmp-input-error/298106 "2022-03-23T04:02:11Z")
I am getting some error when running logstash config as below input { snmp { get =\> \[".1.3.6.1.2.1.5.1.0", ".1.3.6.1.2.1.5.2.0", ".1.3.6.1.2.1.5.3.0", ".1.3.6.1.2.1.5.4.0", ".1.3.6.1.2.1.5.5.0", ".1.3.6.1.… --- ## [\[Agent thread\] sourceloader - No configuration found in the configured sources](https://discuss.elastic.co/t/agent-thread-sourceloader-no-configuration-found-in-the-configured-sources/300394)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:35am UTC](https://discuss.elastic.co/t/agent-thread-sourceloader-no-configuration-found-in-the-configured-sources/300394 "2022-03-23T03:35:44Z")
good day I reinstalled logstash and when I try to test a snmp file I get the following error: \[2022-03-22T23:56:52,421\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Failed to install template {:message=\>"Got response … --- ## [FATAL Error: \[config validation of \[xpack.security\].enabled\]: definition for this key is missing](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-enabled-definition-for-this-key-is-missing/300396)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:07am UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-enabled-definition-for-this-key-is-missing/300396 "2022-03-23T03:07:47Z")
Hi Today I've install kibana 8.1.1 on docker and I'm facing this case with FATAL Error: \[config validation of \[xpack.security\].enabled\]: definition for this key is missing what's wrong with config??? version: '3.3'… --- ## [Is there any introduction about the action in \_cat/tasks api](https://discuss.elastic.co/t/is-there-any-introduction-about-the-action-in-cat-tasks-api/300271)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 4\ **Last updated:** [March 23, 2022, 12:42am UTC](https://discuss.elastic.co/t/is-there-any-introduction-about-the-action-in-cat-tasks-api/300271 "2022-03-23T00:42:56Z")
Is there any introduction about all list of the action of \_cat/tasks? [Previous page](https://discuss.elastic.co/latest.md?page=1204) [Next page](https://discuss.elastic.co/latest.md?page=1206)