# Latest **URL:** https://discuss.elastic.co/latest.md?page=1217 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1218 --- ## [Is it safe to ingest data while tiebreaker node is stopped?](https://discuss.elastic.co/t/is-it-safe-to-ingest-data-while-tiebreaker-node-is-stopped/299708)
**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 9:26am UTC](https://discuss.elastic.co/t/is-it-safe-to-ingest-data-while-tiebreaker-node-is-stopped/299708 "2022-03-15T09:26:39Z")
Hi, I have an Elastic Cloud deployment with two data nodes and a tiebreaker node. The tiebreaker node was stopped during a deployment configuration change, and I can't seem to restart it. The data nodes are still operat… --- ## [Elastic 7.5.1: http client did not trust this server's certificate](https://discuss.elastic.co/t/elastic-7-5-1-http-client-did-not-trust-this-servers-certificate/299704)
**Author:** [@yurii4](https://discuss.elastic.co/u/yurii4)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 9:09am UTC](https://discuss.elastic.co/t/elastic-7-5-1-http-client-did-not-trust-this-servers-certificate/299704 "2022-03-15T09:09:05Z")
Hello I have a configured elasticearch.yml that includes these settings: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.securit… --- ## [Elasticsearch scoring Issue for same data](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690 "2022-03-15T09:01:56Z")
I have an Elastic Index with the below 4 documents. PUT test/\_doc/1 { "tag" : "prove" } PUT test/\_doc/2 { "tag" : "prove" } PUT test/\_doc/3 { "tag" : "freckle" } PUT test/\_doc/4 { "tag" : "freckle" } On this i am runni… --- ## [Migration from ELK to Azure Sentinel](https://discuss.elastic.co/t/migration-from-elk-to-azure-sentinel/299703)
**Author:** [@tipper1510](https://discuss.elastic.co/u/tipper1510)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 8:57am UTC](https://discuss.elastic.co/t/migration-from-elk-to-azure-sentinel/299703 "2022-03-15T08:57:57Z")
Hi, Wondering if there is any documents/process for ingesting events from elk to Azure Sentinel as part of a migration process. So the first step is to ensure any event raised in elk is sent to Azure so it can still be … --- ## [How to get params date into fitler Kibana by scripted field?](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607)
**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\ **Replies:** 5\ **Last updated:** [March 15, 2022, 8:48am UTC](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607 "2022-03-15T08:48:06Z")
I have a filter date in dashboard Kibana and I need get param end date in this filter by scripted field. Please support me if you can! --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 12\ **Last updated:** [March 15, 2022, 8:21am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338 "2022-03-15T08:21:20Z")
Running Windows 10, Logstash 8.1.0, elasticsearch, kibana and filebeat 8.0.0 all on the same machine. I also tried running version 8.0.0 of Logstash but I get the same error. Getting the data from filebeat to kibana wor… --- ## [How to re-insert json data retrieved in Elasticsearch](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:37am UTC](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695 "2022-03-15T07:37:54Z")
I want to put the searched Json Data as below in Elasticsearch of another cluster. Will it be possible? Json file "\_type" : "\_doc", "\_id" : "1", "\_score" : 1.0, "\_source" : { "helpMe" : "hi hi hi … --- ## [Logstash Writing to Two Log Files](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 8:19am UTC](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628 "2022-03-15T08:19:32Z")
Hi, Our logstash 7.16.2 instances are writing log files to /var/log/logstash/logstash-plain.log and /var/log/logstash-stdout.log. How do we prevent the creation of the second log under /var/log? Log config looks like t… --- ## [Secret Management](https://discuss.elastic.co/t/secret-management/296171)
**Author:** [@Vishnu\_Kadavarath\_Vi](https://discuss.elastic.co/u/Vishnu_Kadavarath_Vi)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 8:06am UTC](https://discuss.elastic.co/t/secret-management/296171 "2022-03-15T08:06:13Z")
HI guys, I wanted to know if there is any way of adding custom annotations to APM/Elasticsearch secrets in ECK. I.E adding reflector annotations to APM/Elasticsearch certs and APM/Elasticsearch user-token. So that it c… --- ## [Combine data from different index in kibana](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647)
**Author:** [@Lumiere](https://discuss.elastic.co/u/Lumiere)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:44am UTC](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647 "2022-03-15T07:44:53Z")
Hello, i'm new user and i use kibana (v 7.14.2). I am trying to combine data from differents index in the another index or view. Please, it is possible? For exemple, First index : { "\_index":" index-1", "\_source":… --- ## [Error multiple index templates may not match during index creation](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 7:28am UTC](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666 "2022-03-15T07:28:23Z")
Hi, I got the following error message in kibana.log {"type":"log","@timestamp":"2022-03-14T21:31:34+01:00","tags":\["error","plugins","security","session","index"\],"pid":14270,"message":"Failed to create session index t… --- ## [APM Data Access](https://discuss.elastic.co/t/apm-data-access/299696)
**Author:** [@marx](https://discuss.elastic.co/u/marx)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 7:26am UTC](https://discuss.elastic.co/t/apm-data-access/299696 "2022-03-15T07:26:39Z")
I am using dotnet, and angular for my application integrated with elastic apm. In the APM there are many kinds data that is graphically represented. These data are stored in data streams format how can i access it? Is it… --- ## [Elasticsearch Error "Authentication using apikey failed"](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684 "2022-03-15T06:09:00Z")
Hello, i'm running Elasticsearch 8.1.0 and have many error entries like this on in the elastic logs: \[2022-03-15T07:02:15,222\]\[WARN \]\[o.e.x.s.a.ApiKeyAuthenticator\] \[NODENAMEE\] Authentication using apikey failed - unab… --- ## [How to fix this data ingesting data from mysql to filebeat to kafka to elastic?](https://discuss.elastic.co/t/how-to-fix-this-data-ingesting-data-from-mysql-to-filebeat-to-kafka-to-elastic/299681)
**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 5:57am UTC](https://discuss.elastic.co/t/how-to-fix-this-data-ingesting-data-from-mysql-to-filebeat-to-kafka-to-elastic/299681 "2022-03-15T05:57:39Z")
Data are encrypted and now can't ingest to kafka. Dev Console: CLI Kafka Thank you in advance! --- ## [Effect of increasing index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608)
**Author:** [@csdev](https://discuss.elastic.co/u/csdev)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608 "2022-03-15T05:37:01Z")
Hi Everyone, As per Elasticsearch documentation available at link Mapping limit settings | Elasticsearch Guide \[8.1\] | Elastic, the limit of 10k on index.mapping.nested\_objects.limit is kept to prevent out of memory err… --- ## [Logstash not working as a service](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 3:19am UTC](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600 "2022-03-15T03:19:26Z")
Hello, I am new to ELK and am trying to set up monitoring on few of our application jobs using ELK stack. I could run the below query successfully and the data is reflecting on Kibana: logstash -f /etc/logstash/conf.d/… --- ## [Dropped Netflow Data](https://discuss.elastic.co/t/dropped-netflow-data/299609)
**Author:** [@Alif](https://discuss.elastic.co/u/Alif)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 11:23am UTC](https://discuss.elastic.co/t/dropped-netflow-data/299609 "2022-03-14T11:23:53Z")
Me and my team currently having an issue with netflow data ingestion using logstash / filebeat. The data seems to be massively dropped to around 1/7 (using logstash) and 1/100 (using filebeat) when we compare to the actu… --- ## [Relying on default value of \`pipeline.ecs\_compatibility\`,](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/299672)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 1:36am UTC](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/299672 "2022-03-15T01:36:54Z")
Continuing the discussion from Relying on default value of \`pipeline.ecs\_compatibility\`,: 上記のエラーですが、再起動をしても出現するようになってしましました・・。 どなたか知見がある方、エラー解消方法をご教示いただけると幸いです。 よろしくお願いいたします💦 --- ## [Options for analytics on ES](https://discuss.elastic.co/t/options-for-analytics-on-es/299657)
**Author:** [@yosiasz](https://discuss.elastic.co/u/yosiasz)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 1:37am UTC](https://discuss.elastic.co/t/options-for-analytics-on-es/299657 "2022-03-15T01:37:10Z")
Greetings, We have tons of data coming into our ES from devices across the whole US. We need to do a lot of analytical research on this data. We do not want to do this on the live data but would like to do it on copies … --- ## [Cannot read configured pem certificate](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545)
**Author:** [@tehfcae](https://discuss.elastic.co/u/tehfcae)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 12:23am UTC](https://discuss.elastic.co/t/cannot-read-configured-pem-certificate/299545 "2022-03-15T00:23:04Z")
I generated a PEM certificate for my Elasticsearch however, I am getting an error that it cannot read configured PEM certificate due to a permissions issue, however, I verified the permissions and it should have read/wri… --- ## [Logstashにて特定の行のみ抽出する方法](https://discuss.elastic.co/t/logstash/298925)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 10:42pm UTC](https://discuss.elastic.co/t/logstash/298925 "2022-03-14T22:42:45Z")
filebeat,winlogbeatで受信したファイルから特定の文字列が入った行のみ抽出する方法はありますでしょうか？ 例えば、errorの文字列が入っている行のみ抽出するって感じです。 filterで指定するとは思うのですが、方法がわかりません。 どなたかご存じでしたらご教示願います💦 よろしくお願いいたします。 --- ## [Elastic Agent not retrieving kube-state-metrics](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563)
**Author:** [@mkstephenson](https://discuss.elastic.co/u/mkstephenson)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 10:13pm UTC](https://discuss.elastic.co/t/elastic-agent-not-retrieving-kube-state-metrics/299563 "2022-03-14T22:13:08Z")
I am attempting to set up an Elastic stack with ECK on k3s and getting it to monitor the k3s cluster itself using kube-state-metrics. I installed the ECK operator using the official helm chart, same for the kube-state-me… --- ## [Hesitation between three Elasticsearch-based Architectures](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625)
**Author:** [@bechir-jamoussi](https://discuss.elastic.co/u/bechir-jamoussi)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 9:51pm UTC](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625 "2022-03-14T21:51:16Z")
Hello everyone, Let me present to you my Use Case: I am trying to develop an algorithm that chooses the best communication channel(SMS, RCS, Messenger, Whatsapp, E-mail) and the best moment to communicate with the clie… --- ## [Can Kibana monitor two indexes at the same time?](https://discuss.elastic.co/t/can-kibana-monitor-two-indexes-at-the-same-time/299655)
**Author:** [@Michael\_Santos](https://discuss.elastic.co/u/Michael_Santos)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 9:48pm UTC](https://discuss.elastic.co/t/can-kibana-monitor-two-indexes-at-the-same-time/299655 "2022-03-14T21:48:44Z")
I am curios if Kibana can monitor two indexes at the same time in the Alerting section. Like in the image below. I declared two indexes, so does that mean it monitors the documents in both indexes ? --- ## [Incorrect span duration](https://discuss.elastic.co/t/incorrect-span-duration/299442)
**Author:** [@Gareth](https://discuss.elastic.co/u/Gareth)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 8:57pm UTC](https://discuss.elastic.co/t/incorrect-span-duration/299442 "2022-03-14T20:57:24Z")
Hi. I've noticed that the .NET agent is not able to measure span durations less than 16ms on my server. It either reports 0us or 16ms, nothing in between. The exception are spans for SQL calls which go to us precision. I… --- ## [Unable to visualize Restored APM data from snapshot](https://discuss.elastic.co/t/unable-to-visualize-restored-apm-data-from-snapshot/299665)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 8:27pm UTC](https://discuss.elastic.co/t/unable-to-visualize-restored-apm-data-from-snapshot/299665 "2022-03-14T20:27:56Z")
Hi, I'm trying to restore a snapshsot that contains data from a fleet managed apm server, the indices I have are hidden and use the patterns : .ds-logs-apm\* is there any procedure to do in order to restore .ds-logs a… --- ## [NGINX as revers proxy to elasticsearch coordinator nodes](https://discuss.elastic.co/t/nginx-as-revers-proxy-to-elasticsearch-coordinator-nodes/299656)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 8:06pm UTC](https://discuss.elastic.co/t/nginx-as-revers-proxy-to-elasticsearch-coordinator-nodes/299656 "2022-03-14T20:06:10Z")
Hi I'm forcing in my environment setup on nginx for Elasticsearch: -what I have a problem with the correct configuration for connect NGINX over TLS to my nodes below You can find my configuration,maybe You can point m… --- ## [Elasticsearch terms aggregation with partition does not retuning equal bucket](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346 "2022-03-14T20:03:56Z")
I have an ES index and I fetch data using term aggregation and partition. I am using the cardinality aggregation to get the total number of buckets and calculating num\_partitions, using default size values 10. E.g. Ca… --- ## [Index lifecycle error - illegal\_argument\_exception:index name does not match pattern '^.\*-\\d+$' -Use Retry But Getting same error after sometime](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:50pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-illegal-argument-exception-index-name-does-not-match-pattern-d-use-retry-but-getting-same-error-after-sometime/299660 "2022-03-14T19:50:33Z")
Hi Team, I have created ilm , Template and alias respectively as i am getting illegal\_argument\_exception: index name \[rebalance\_index\_001\] does not match pattern '^.\*-\\d+$'. error. I have run retry ilm command . I don't… --- ## [Delay in a hourly logfiles](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659)
**Author:** [@oren](https://discuss.elastic.co/u/oren)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:26pm UTC](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659 "2022-03-14T19:26:47Z")
hi I have windows system with file beat 7.4.1 and I load hourly big log files to elastic throw Logstash I have delay with the data only in this system what should be beat configuration ? [Previous page](https://discuss.elastic.co/latest.md?page=1216) [Next page](https://discuss.elastic.co/latest.md?page=1218)