# Latest **URL:** https://discuss.elastic.co/latest.md?page=1215 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1216 --- ## [Elasticsearch user creation fails](https://discuss.elastic.co/t/elasticsearch-user-creation-fails/299478)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 2\ **Last updated:** [March 16, 2022, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-user-creation-fails/299478 "2022-03-16T08:50:50Z")
Hello team, When I try to create user with below command getting below error in ES version:7.17.0, please help.... ./elasticsearch-setup-passwords interactive -u "https://test.com:9085" But following settings are in e… --- ## [Error: failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/299270)
**Author:** [@samettozbay](https://discuss.elastic.co/u/samettozbay)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 9:00am UTC](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/299270 "2022-03-16T09:00:39Z")
I have issue about sending logs with filebeat. I have checked all the topics related this issue but i couldn't figure out it yet . I have Elasticsearch v 7.10.2 and i am using filebeat 7.10.0. I created my pipeline as… --- ## [Kibana Panel Filter](https://discuss.elastic.co/t/kibana-panel-filter/299468)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 8:25am UTC](https://discuss.elastic.co/t/kibana-panel-filter/299468 "2022-03-16T08:25:33Z")
Hello All, Can some tell me how can this can be achieved,just show all CPU ,Memory,Diskusage ,Process Memory etc with host name that are critical based on threshhold.Currently I am able to achieve this but issue is some… --- ## [APM Java Agent and Ehcache object reference limit](https://discuss.elastic.co/t/apm-java-agent-and-ehcache-object-reference-limit/299406)
**Author:** [@wdw-jst](https://discuss.elastic.co/u/wdw-jst)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 8:48am UTC](https://discuss.elastic.co/t/apm-java-agent-and-ehcache-object-reference-limit/299406 "2022-03-16T08:48:45Z")
Hello, we are using the Elastic Stack 7.16.2 for Logging and APM. We have instrumented our Java application with the Elastic APM Java Agent, which has been working well and lead to many insights. Recently the following … --- ## [Elasticsearch - solving \`No space left on device\`](https://discuss.elastic.co/t/elasticsearch-solving-no-space-left-on-device/299838)
**Author:** [@sokolmateusz](https://discuss.elastic.co/u/sokolmateusz)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-solving-no-space-left-on-device/299838 "2022-03-16T08:34:34Z")
Hi! I'm using ELK (Elasticsearch, kibana, filebeat, metricbeat) deployed via Helm. I'm collecting small amount logs from a few containers and PVC for Elasticsearch is set to 2Gi. For some reason this space after one n… --- ## [Keycloak Elasticsearch/Kibana Configuration](https://discuss.elastic.co/t/keycloak-elasticsearch-kibana-configuration/299624)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 8\ **Last updated:** [March 16, 2022, 7:42am UTC](https://discuss.elastic.co/t/keycloak-elasticsearch-kibana-configuration/299624 "2022-03-16T07:42:27Z")
Hi, I'm having trouble configuring Kibana and Keycloak to use SSO. I am getting an error like the one below: Failed to authenticate user with OpenID Connect (Caused by ElasticsearchSecurityException\[Failed to exchange … --- ## [Your browser does not meet the security requirements for kibana?](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813)
**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813 "2022-03-16T07:31:30Z")
There is a small popup with the message "your browser does not meet the security requirements for kibana" everytime opening Kibana. From related posts it seems to be complaining a non-CSP compliant browser and especially… --- ## [How to find missing logs](https://discuss.elastic.co/t/how-to-find-missing-logs/299823)
**Author:** [@dginfi](https://discuss.elastic.co/u/dginfi)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 7:01am UTC](https://discuss.elastic.co/t/how-to-find-missing-logs/299823 "2022-03-16T07:01:12Z")
I have logs being forwarding from Panorama to ELK. On ELK server I have filebeats setup with panw module enabled which receives the logs and forwards to logstash. In logstash filter I am using jdbc\_streaming filter for… --- ## [Need to Push cloudtrail log to ELK using Filebeat](https://discuss.elastic.co/t/need-to-push-cloudtrail-log-to-elk-using-filebeat/299818)
**Author:** [@Anwar](https://discuss.elastic.co/u/Anwar)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 5:42am UTC](https://discuss.elastic.co/t/need-to-push-cloudtrail-log-to-elk-using-filebeat/299818 "2022-03-16T05:42:42Z")
Hi, I want to push my cloudtrail logs to elk using filebeat. The Elasticsearch is a customised one. So I can't able to push the filebeat output directly to Elasticsearch. So I will use Logstash as output. From Logstash … --- ## [Nagios Performance data =\> Kafka Topic =\> Elastic search(Need to process Nagios performance data)](https://discuss.elastic.co/t/nagios-performance-data-kafka-topic-elastic-search-need-to-process-nagios-performance-data/299594)
**Author:** [@ranjithkodumbu](https://discuss.elastic.co/u/ranjithkodumbu)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 5:13am UTC](https://discuss.elastic.co/t/nagios-performance-data-kafka-topic-elastic-search-need-to-process-nagios-performance-data/299594 "2022-03-16T05:13:20Z")
Hello team, I am trying to process Nagios performance data to ELK using logstash, I am receiving Nagios performance data format below, need to process and update it to the Elastic index. {"check\_type": "service", "chec… --- ## [Cannot add 10 or more rows to Visualize Library in table view in Kibana](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350)
**Author:** [@Stek\_new](https://discuss.elastic.co/u/Stek_new)\ **Replies:** 2\ **Last updated:** [March 16, 2022, 5:12am UTC](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350 "2022-03-16T05:12:27Z")
Hello! I cannot add 10 or more rows to Visualize Library in table view in Kibana Steps on how to reproduce the issue: Go Dev Tools and run the following query: POST logs-my\_app-default/\_doc { "@timestamp": "2099-… --- ## [Run elasticsearch without initial master nodes configured](https://discuss.elastic.co/t/run-elasticsearch-without-initial-master-nodes-configured/299812)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 4:24am UTC](https://discuss.elastic.co/t/run-elasticsearch-without-initial-master-nodes-configured/299812 "2022-03-16T04:24:24Z")
Hi! i have 3 node cluster ( 7.16.2 ) with this config ( example from first node ) cluster.name: sactions cluster.routing.allocation.awareness.attributes: zone cluster.routing.allocation.awareness.force.zone.values: zo… --- ## [How to collect all types of logs from my fortinet firewall using ELK](https://discuss.elastic.co/t/how-to-collect-all-types-of-logs-from-my-fortinet-firewall-using-elk/296830)
**Author:** [@randyvinoth](https://discuss.elastic.co/u/randyvinoth)\ **Replies:** 20\ **Last updated:** [March 16, 2022, 4:20am UTC](https://discuss.elastic.co/t/how-to-collect-all-types-of-logs-from-my-fortinet-firewall-using-elk/296830 "2022-03-16T04:20:54Z")
I configured Elasticsearch, Logstash and Kibana after lots of errors. I also configured my fortinet firewall for syslogd server to send the logs to ELK server. But I am not getting any data from my firewall. Also I confi… --- ## [AWS CloudTrail SQS integration issues](https://discuss.elastic.co/t/aws-cloudtrail-sqs-integration-issues/299783)
**Author:** [@bil15](https://discuss.elastic.co/u/bil15)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 3:16am UTC](https://discuss.elastic.co/t/aws-cloudtrail-sqs-integration-issues/299783 "2022-03-16T03:16:32Z")
Hello! I'm trying to ingest AWS CloudTrail logs via AWS integration in Fleet using S3 input (SQS). I followed this article to configure CloudTrail logs forwarding to SQS: https://docs.rapid7.com/insightidr/aws-cloudtr… --- ## [Applying slowlog setting on daily rotated search index](https://discuss.elastic.co/t/applying-slowlog-setting-on-daily-rotated-search-index/299298)
**Author:** [@Nobuaki\_Ito](https://discuss.elastic.co/u/Nobuaki_Ito)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 2:58am UTC](https://discuss.elastic.co/t/applying-slowlog-setting-on-daily-rotated-search-index/299298 "2022-03-16T02:58:45Z")
My team currently own an Elasticsearch with daily rotated index. The index name changes once the daily rotation completes, and hence it requires to have slowlog threshold configured after each daily rotation completes. W… --- ## [Custom Journald logs and Elastic 8](https://discuss.elastic.co/t/custom-journald-logs-and-elastic-8/299805)
**Author:** [@ooraini](https://discuss.elastic.co/u/ooraini)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 12:43am UTC](https://discuss.elastic.co/t/custom-journald-logs-and-elastic-8/299805 "2022-03-16T00:43:25Z")
The Journald integration is not yet supported in Elastic 8 as indicated in package page: I did a test installation of Elastic 8.1, and indeed the package doesn't appear when searching for it in the integrations page in… --- ## [Logstash didn't send logs to Elasticsearch after upgrade](https://discuss.elastic.co/t/logstash-didnt-send-logs-to-elasticsearch-after-upgrade/299802)
**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\ **Replies:** 2\ **Last updated:** [March 16, 2022, 12:17am UTC](https://discuss.elastic.co/t/logstash-didnt-send-logs-to-elasticsearch-after-upgrade/299802 "2022-03-16T00:17:34Z")
hi, i upgrade logstash from version 6.8 to 7.16.2 but after this upgrade the status of logstash is running and it didn't sent logs to Elasticsearch (version 7.16.2). Here the error message from logs of logstash server : … --- ## [Elasticsearch 8.1.0 on Windows VM running in Azure not showing or creating Indices](https://discuss.elastic.co/t/elasticsearch-8-1-0-on-windows-vm-running-in-azure-not-showing-or-creating-indices/299561)
**Author:** [@ddynamight](https://discuss.elastic.co/u/ddynamight)\ **Replies:** 5\ **Last updated:** [March 16, 2022, 12:04am UTC](https://discuss.elastic.co/t/elasticsearch-8-1-0-on-windows-vm-running-in-azure-not-showing-or-creating-indices/299561 "2022-03-16T00:04:01Z")
I have just set up Elasticsearch 8.1.0 on a Windows Server 2022 VM running inside Azure, but the indexing is not working. I am unable to create new indices or view the default indices. A get request to localhost:9200/\_c… --- ## [How to deal with Elastic Cloud?](https://discuss.elastic.co/t/how-to-deal-with-elastic-cloud/299670)
**Author:** [@iNikolas](https://discuss.elastic.co/u/iNikolas)\ **Replies:** 8\ **Last updated:** [March 15, 2022, 11:38pm UTC](https://discuss.elastic.co/t/how-to-deal-with-elastic-cloud/299670 "2022-03-15T23:38:21Z")
Hi all. I have studied Elasticsearch for a while by means of DevTools, where everything worked just fine: index creation; tweaking search and data Analyzers; data population with CSV files. But for now, I decided to … --- ## [Concurrent patch updates](https://discuss.elastic.co/t/concurrent-patch-updates/296257)
**Author:** [@SriAkash](https://discuss.elastic.co/u/SriAkash)\ **Replies:** 9\ **Last updated:** [March 15, 2022, 11:01pm UTC](https://discuss.elastic.co/t/concurrent-patch-updates/296257 "2022-03-15T23:01:14Z")
Is there a way to handle concurrent patch updates to same document in Elastic App Search? Its been observed that when two concurrent update statements(patch calls) are sent to Elastic App Search, only changes in one of … --- ## [Kibana multi-line chart with legend help](https://discuss.elastic.co/t/kibana-multi-line-chart-with-legend-help/299769)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 9:38pm UTC](https://discuss.elastic.co/t/kibana-multi-line-chart-with-legend-help/299769 "2022-03-15T21:38:11Z")
I would like to draw a multi-line chart with legend from a query with format like the following: "aggregations": { "time\_buckets": { "buckets": \[ { "key\_as\_string": "2022-02-22T00:00:00.000… --- ## [Column event.dataset is empty](https://discuss.elastic.co/t/column-event-dataset-is-empty/299792)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 9:29pm UTC](https://discuss.elastic.co/t/column-event-dataset-is-empty/299792 "2022-03-15T21:29:05Z")
Hi, Inside ELK when goes to check the logs (/app/logs/stream) column "event.dataset" is empty but if I click on certain event (View Details) the value of "fields.event.dataset" are correctly informed (mylog) Value of "… --- ## [Getting multiple fields out of agent](https://discuss.elastic.co/t/getting-multiple-fields-out-of-agent/298228)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 8:22pm UTC](https://discuss.elastic.co/t/getting-multiple-fields-out-of-agent/298228 "2022-03-15T20:22:25Z")
still new and learning filters... how would I get multiple fields out of agent? "agent" =\> { "hostname" =\> "2487b31167e2", "name" =\> "123b456c", "ephemeral\_id" =\> "123b456c", "version" =\> "7.15.1", "id" =\> "123b45… --- ## [How to add cluster name in the event using add-kubernetes-metadata processor](https://discuss.elastic.co/t/how-to-add-cluster-name-in-the-event-using-add-kubernetes-metadata-processor/299784)
**Author:** [@Dario\_Louzado](https://discuss.elastic.co/u/Dario_Louzado)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 8:17pm UTC](https://discuss.elastic.co/t/how-to-add-cluster-name-in-the-event-using-add-kubernetes-metadata-processor/299784 "2022-03-15T20:17:12Z")
Hi, I'm using kubernetes autodiscover with add-kubernetes-metadata processor. In the log event I could not find the kubernetes cluster name. Only the namespace. How can I get this information? Thanks in advance. Reg… --- ## [Cisco-module (Filebeat) to Logstash - Configuration issue- Need help!](https://discuss.elastic.co/t/cisco-module-filebeat-to-logstash-configuration-issue-need-help/299765)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 8:08pm UTC](https://discuss.elastic.co/t/cisco-module-filebeat-to-logstash-configuration-issue-need-help/299765 "2022-03-15T20:08:13Z")
Hi All, I was able to send logs to Elasticsearch using Filebeat using the below configuration successfully. # ============================== Filebeat inputs =============================== filebeat.inputs: - type: log… --- ## [Searching on keywords that have spaces fail using simple\_query\_string](https://discuss.elastic.co/t/searching-on-keywords-that-have-spaces-fail-using-simple-query-string/298577)
**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\ **Replies:** 7\ **Last updated:** [March 15, 2022, 7:30pm UTC](https://discuss.elastic.co/t/searching-on-keywords-that-have-spaces-fail-using-simple-query-string/298577 "2022-03-15T19:30:08Z")
I have a tags keyword field defined simply as: 'tags' =\> \[ 'type' =\> 'keyword' \], I have a tag field that stores: "tags" : \[ "523", "523 az" \], I have a simple search set… --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299747)
**Author:** [@Diego\_T](https://discuss.elastic.co/u/Diego_T)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 7:22pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299747 "2022-03-15T19:22:58Z")
when i run logstash on windows i get the following error C:\\logstash-8.1.0\>.\\bin\\logstash.bat -f .\\config\\syslog.conf Using LS\_JAVA\_HOME defined java: C:\\Program Files\\Java\\jdk-17.0.2 WARNING: Using LS\_JAVA\_HOME while L… --- ## [Mounted Searchable Snapshot Delay Reallocation/Recovery](https://discuss.elastic.co/t/mounted-searchable-snapshot-delay-reallocation-recovery/299757)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 13\ **Last updated:** [March 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/mounted-searchable-snapshot-delay-reallocation-recovery/299757 "2022-03-15T19:07:30Z")
Hi All, I'm using searchable snapshots on a cluster and was wondering if there is a way to delay whether a searchable snapshot gets reallocated for a period of time. Example problem, if I have a cold node which gets hi… --- ## [Nofile -\> limit for open file under docker container for elasticsearch user](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 6:51pm UTC](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764 "2022-03-15T18:51:46Z")
Hi I read this post https://discuss.elastic.co/t/docs-nofile-or-nproc/142049/2 regarding construct for nofile vs nproc. Let me describe my case I've provisioned by docker compose service for elasticsearch: ulimits: … --- ## [Unable to build logstash-input-tcp - compatible versions for gem "logstash-core"](https://discuss.elastic.co/t/unable-to-build-logstash-input-tcp-compatible-versions-for-gem-logstash-core/299671)
**Author:** [@vinodhreddyg](https://discuss.elastic.co/u/vinodhreddyg)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 6:23pm UTC](https://discuss.elastic.co/t/unable-to-build-logstash-input-tcp-compatible-versions-for-gem-logstash-core/299671 "2022-03-15T18:23:11Z")
Hi Team, I'm trying to build logstash-input-tcp plugin. It is failing with the following error. Exception is showing as compatible versions for gem "logstash-core". ENV details: Centos Stream JAVA: javac 11.0.14 Jru… [Previous page](https://discuss.elastic.co/latest.md?page=1214) [Next page](https://discuss.elastic.co/latest.md?page=1216)