# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1238

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1239

---

## [Remove services from elastic cloud](https://discuss.elastic.co/t/remove-services-from-elastic-cloud/298414)

<div class="topic-metadata">

**Author:** [@Eran\_Hadad](https://discuss.elastic.co/u/Eran_Hadad)\
**Replies:** 2\
**Last updated:** [March 1, 2022, 7:20am UTC](https://discuss.elastic.co/t/remove-services-from-elastic-cloud/298414 "2022-03-01T07:20:05Z")

</div>

Hi all, I have a small 1GB test deployment on elastic cloud that I inherited. This deployment has 255 shards that I want to reduce obviously. I only created 2 indices so the rest of 253 shards are system once. Most …

---

## [Fscrawler and elasticsearch 8](https://discuss.elastic.co/t/fscrawler-and-elasticsearch-8/298422)

<div class="topic-metadata">

**Author:** [@Emile\_Plas](https://discuss.elastic.co/u/Emile_Plas)\
**Replies:** 2\
**Last updated:** [March 1, 2022, 6:46am UTC](https://discuss.elastic.co/t/fscrawler-and-elasticsearch-8/298422 "2022-03-01T06:46:11Z")

</div>

Hey! I am using Elasticsearch 8 on a local server and fscrawler. Fscrawler logs the following error at the moment of startup: WARN \[f.p.e.c.f.c.ElasticsearchClient\] failed to create index \[dbrc\], disabling crawler... …

---

## [Force Merge To do or not to do](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070)

<div class="topic-metadata">

**Author:** [@Neeraj\_Jain7483](https://discuss.elastic.co/u/Neeraj_Jain7483)\
**Replies:** 7\
**Last updated:** [March 1, 2022, 5:22am UTC](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070 "2022-03-01T05:22:43Z")

</div>

I have a scenario in which we have indices for each month, and each document has a field, say expiry date, and according to that expiry date, documents will be deleted when they reach their expiry. One-month-old index wi…

---

## [Invalid configuration for xpack.security.transport.ssl](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl/297989)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 5\
**Last updated:** [March 1, 2022, 4:12am UTC](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl/297989 "2022-03-01T04:12:05Z")

</div>

We tried to update to ES 8.0 deb package. ES refused to start with an error \[2022-02-23T09:10:15,109\]\[ERROR\]\[o.e.b.Bootstrap \] \[mon\] Exception org.elasticsearch.ElasticsearchSecurityException: invalid configura…

---

## [Kibana 7.17.0 Security Update](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [February 3, 2022, 5:34pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215 "2022-02-03T17:34:35Z")

</div>

Kibana Cross-site scripting issue (ESA-2022-01) An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious jav…

---

## [How to get the default password](https://discuss.elastic.co/t/how-to-get-the-default-password/298463)

<div class="topic-metadata">

**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 3:17am UTC](https://discuss.elastic.co/t/how-to-get-the-default-password/298463 "2022-03-01T03:17:54Z")

</div>

branch:master commitid: 6b50cf75b3f I compiled the ES from command ./gradlew localDistro then started the server by bin/elasticsearch -d then I got no password in logs/elasticsearch.log

---

## [Error: java.lang.ClassNotFoundException: com.dbschema.MongoJdbcDriver. Are you sure you've included the correct jdbc driver in :jdbc\_driver\_library?](https://discuss.elastic.co/t/error-java-lang-classnotfoundexception-com-dbschema-mongojdbcdriver-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/298460)

<div class="topic-metadata">

**Author:** [@Amal\_Anush](https://discuss.elastic.co/u/Amal_Anush)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 3:04am UTC](https://discuss.elastic.co/t/error-java-lang-classnotfoundexception-com-dbschema-mongojdbcdriver-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/298460 "2022-03-01T03:04:03Z")

</div>

hi , im using dbschema mongo driver to connect to move data from mongo to logstash . but here is the error Error: java.lang.ClassNotFoundException: com.dbschema.MongoJdbcDriver. Are you sure you've included the correct…

---

## [No new data getting indexed after disabling rollover in ILM](https://discuss.elastic.co/t/no-new-data-getting-indexed-after-disabling-rollover-in-ilm/298429)

<div class="topic-metadata">

**Author:** [@diraj](https://discuss.elastic.co/u/diraj)\
**Replies:** 3\
**Last updated:** [March 1, 2022, 2:47am UTC](https://discuss.elastic.co/t/no-new-data-getting-indexed-after-disabling-rollover-in-ilm/298429 "2022-03-01T02:47:07Z")

</div>

Hello, We have implemented ILM for indexes recently. We have a rollover policy for hot tier that gets triggered when the index gets larger than 40gb. This particular change did not go well with the policy, as it had ali…

---

## [How to skip downloading ml-cpp-8.2.0-SNAPSHOT.zip while using "./gradlew localDistro"](https://discuss.elastic.co/t/how-to-skip-downloading-ml-cpp-8-2-0-snapshot-zip-while-using-gradlew-localdistro/298390)

<div class="topic-metadata">

**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\
**Replies:** 3\
**Last updated:** [March 1, 2022, 2:26am UTC](https://discuss.elastic.co/t/how-to-skip-downloading-ml-cpp-8-2-0-snapshot-zip-while-using-gradlew-localdistro/298390 "2022-03-01T02:26:43Z")

</div>

Because of the network is not very stable, every time the "./gradlew localDistro" command reaches the downloading of ml-cpp-8.2.0-SNAPSHOT.zip,it will fail after long download before finish. I have downloaded the packag…

---

## [Filebeat configuration allows multiple pipelines for a log file?](https://discuss.elastic.co/t/filebeat-configuration-allows-multiple-pipelines-for-a-log-file/298458)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 1:57am UTC](https://discuss.elastic.co/t/filebeat-configuration-allows-multiple-pipelines-for-a-log-file/298458 "2022-03-01T01:57:11Z")

</div>

Specifically, I have a pipeline preprocessing log file does not match the log is not saved, I want to not match the log file is saved in the log file data loss.

---

## [Logtstash updating fron 7.9 to 7.16.2](https://discuss.elastic.co/t/logtstash-updating-fron-7-9-to-7-16-2/298453)

<div class="topic-metadata">

**Author:** [@Faisal\_Malik](https://discuss.elastic.co/u/Faisal_Malik)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 11:54pm UTC](https://discuss.elastic.co/t/logtstash-updating-fron-7-9-to-7-16-2/298453 "2022-02-28T23:54:10Z")

</div>

Hi i am trying to update logstash from 7.9.0 to 7.16.2 (Using Helm chart ) Getting error. Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<LogStash::ConfigurationError: Could not connect to a compatible version of E…

---

## [Logstash in docker fails after plugin installed](https://discuss.elastic.co/t/logstash-in-docker-fails-after-plugin-installed/298446)

<div class="topic-metadata">

**Author:** [@djschny](https://discuss.elastic.co/u/djschny)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 11:48pm UTC](https://discuss.elastic.co/t/logstash-in-docker-fails-after-plugin-installed/298446 "2022-02-28T23:48:19Z")

</div>

When using the official image for logstash (8.0.0) if a plugin is installed, after that Logstash will not load. If I use the image without the plugin installed then it works. For example: docker run --rm --name my-logst…

---

## [APM engine not sampling all requests](https://discuss.elastic.co/t/apm-engine-not-sampling-all-requests/298355)

<div class="topic-metadata">

**Author:** [@Abhiraj\_Kulaar](https://discuss.elastic.co/u/Abhiraj_Kulaar)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 11:45pm UTC](https://discuss.elastic.co/t/apm-engine-not-sampling-all-requests/298355 "2022-02-28T23:45:50Z")

</div>

Hi Team, We have an implementation of NodeJS APM agent running in our Firebase server-less functions along with custom spans in some of the transactions. After trying to compare logs on the APM console with application …

---

## [Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 4\
**Last updated:** [January 13, 2022, 9:17pm UTC](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476 "2022-01-13T21:17:27Z")

</div>

Subject: Apache Log4j2 Vulnerability - CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832 - ESA-2021-31 ​​Note - We will update this announcement with new details as they emerge from our analysis. Please chec…

---

## [Unable to display Array of Polygons in Kibana Maps](https://discuss.elastic.co/t/unable-to-display-array-of-polygons-in-kibana-maps/298358)

<div class="topic-metadata">

**Author:** [@scottfred](https://discuss.elastic.co/u/scottfred)\
**Replies:** 10\
**Last updated:** [February 28, 2022, 10:46pm UTC](https://discuss.elastic.co/t/unable-to-display-array-of-polygons-in-kibana-maps/298358 "2022-02-28T22:46:46Z")

</div>

Kibana is unable to display an Array of geo\_shape "polygon" data; however, I am able to display a single Polygon geo\_shape. I would expect Kibana to parse the Array of results and display each of the polygon objects fro…

---

## [How to increase Kibana Memory?](https://discuss.elastic.co/t/how-to-increase-kibana-memory/297204)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 10:01pm UTC](https://discuss.elastic.co/t/how-to-increase-kibana-memory/297204 "2022-02-28T22:01:51Z")

</div>

Hello, How can i Increase the memory that Kibana uses? I tried following this part of the documentation, but it does not work, there is no change in the memory used in the monitoring. I want to use 4096 MB for Kibana,…

---

## [Can you use copy\_fields processor for @timestamp in winlogbeat](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 2:12pm UTC](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501 "2020-07-01T14:12:49Z")

</div>

Hi guys, Does anyone know if there is a way to copy the @timestamp value from winlogbeat json to a separate field (for troubleshooting purposes) using winlogbeat.yml file? I'm trying to use the copy fields processor: …

---

## [Elasticsearch response does not have desired fields/data](https://discuss.elastic.co/t/elasticsearch-response-does-not-have-desired-fields-data/298237)

<div class="topic-metadata">

**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\
**Replies:** 5\
**Last updated:** [February 28, 2022, 9:58pm UTC](https://discuss.elastic.co/t/elasticsearch-response-does-not-have-desired-fields-data/298237 "2022-02-28T21:58:16Z")

</div>

I have been using ElastAlert to monitor and alert on my Elasticsearch data. However the Elasticsearch response does not have the fields that I want to pull data from in my alerts. I have been using the DEBUG feature to v…

---

## [Logstash-plugin install logstash-output-influxdb error proxy](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451)

<div class="topic-metadata">

**Author:** [@bob\_monty](https://discuss.elastic.co/u/bob_monty)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 9:38pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451 "2022-02-28T21:38:52Z")

</div>

Greetings im trying to logstash-plugin install logstash-output-influxdb but im behind a firewall and we have a proxy. i set the proxy at the command line with HTTP\_PROXY, and also tried setting it in logstash-7.16.1/vend…

---

## [Collecting logs with rsyslog instead of beats](https://discuss.elastic.co/t/collecting-logs-with-rsyslog-instead-of-beats/298425)

<div class="topic-metadata">

**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 3:54pm UTC](https://discuss.elastic.co/t/collecting-logs-with-rsyslog-instead-of-beats/298425 "2022-02-28T15:54:45Z")

</div>

i got used to use beats (especially filebeat ) to collect logs from linux machines and send them to logstash where i do parsing and filtering .. there is a while since i have heard about rsyslog and i tried it and it's…

---

## [Two master nodes loose connection to the third master node, after its IP changes](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320)

<div class="topic-metadata">

**Author:** [@vibgy](https://discuss.elastic.co/u/vibgy)\
**Replies:** 7\
**Last updated:** [February 28, 2022, 8:59pm UTC](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320 "2022-02-28T20:59:01Z")

</div>

We are running 3 master nodes in k8s env (as a stateful set). When one of the master nodes dies and changes its IP, the other two master nodes are not able to find it. Any insights on what we can do better ? {"timesta…

---

## [Logstash installed on GCP compute engine having issues connecting to Mongo Atlas](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461)

<div class="topic-metadata">

**Author:** [@justjaidev](https://discuss.elastic.co/u/justjaidev)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 8:33pm UTC](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461 "2022-02-28T20:33:33Z")

</div>

Logstash installed on GCP compute engine is unable to connect Mongo Atlas.. Tried all the below 3 versions of mongo output plugin. 3.1.5 3.1.6 3.1.7 Below error observed with 3.1.5 version of mongo output plugin \[WA…

---

## [Support of mongodb+srv to connect with Atlas Mongo](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445)

<div class="topic-metadata">

**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 8:26pm UTC](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445 "2022-02-28T20:26:55Z")

</div>

Hi, I am trying to push data coming into Logstash to MongoDB on Atlas. My output configuration is as following: mongodb { id =\> "logs" collection =\> "logentries" database =\> "logs" uri =\>…

---

## [Errors Setting all Password ElasticStack 7.16.3 running on IBM Cloud](https://discuss.elastic.co/t/errors-setting-all-password-elasticstack-7-16-3-running-on-ibm-cloud/298096)

<div class="topic-metadata">

**Author:** [@Bryan\_Kribbs](https://discuss.elastic.co/u/Bryan_Kribbs)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 7:13pm UTC](https://discuss.elastic.co/t/errors-setting-all-password-elasticstack-7-16-3-running-on-ibm-cloud/298096 "2022-02-28T19:13:40Z")

</div>

Hi, I have been working on setting up the basic security for elastic and kibana, but when I follow this guide. When I run the "Elasticsearch-setup-passwords" command. I am receiving the following error - "could not find…

---

## [Unable to get issuer certificate with TLS enabled Kibana & Elasticsearch in k8s](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779)

<div class="topic-metadata">

**Author:** [@Scottapotamus](https://discuss.elastic.co/u/Scottapotamus)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779 "2022-02-28T18:42:29Z")

</div>

I am trying to enable TLS on Elasticsearch and kibana in kubernetes using the ECK operator. But when kibana tries to connect to Elasticsearch I get {"type":"log","@timestamp":"\*\*\*\*\*\*\*\*\*\*","tags":\["error","elasticsearch-…

---

## [Create geopoint from lat, lon values in nested json file to be visible in Kibana maps](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147)

<div class="topic-metadata">

**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\
**Replies:** 5\
**Last updated:** [February 28, 2022, 6:35pm UTC](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147 "2022-02-28T18:35:29Z")

</div>

Hi all, I have the following json file where there are different locations with their own coordinates. { "A001": { "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.9542869569135…

---

## [\[ERROR\] Logstash JDBC plugin - PKIX path building failed](https://discuss.elastic.co/t/error-logstash-jdbc-plugin-pkix-path-building-failed/298439)

<div class="topic-metadata">

**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 6:25pm UTC](https://discuss.elastic.co/t/error-logstash-jdbc-plugin-pkix-path-building-failed/298439 "2022-02-28T18:25:29Z")

</div>

Hi, I have an issue with logstash jdbc plugin configuration for MSSQL. My config file: input { jdbc { jdbc\_driver\_library =\> "/opt/elastic/drivers/mssql-jdbc-10.2.0.jre11.jar" jdbc\_driver\_class =\> "com…

---

## [Elastic Endpoint Security Degraded](https://discuss.elastic.co/t/elastic-endpoint-security-degraded/298074)

<div class="topic-metadata">

**Author:** [@jobr97](https://discuss.elastic.co/u/jobr97)\
**Replies:** 3\
**Last updated:** [February 28, 2022, 5:41pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-degraded/298074 "2022-02-28T17:41:27Z")

</div>

Hi all, I'm having an issue with the Endpoint Security integration on my Windows devices. The agent status is showing up as "Unhealthy" and the status command on the endpoint gives the following result: Status: DEGRAD…

---

## [Kibana SSL/Certificate - Service Auto-Restarts & Fails to Start](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195)

<div class="topic-metadata">

**Author:** [@Adventures\_Of\_Arch](https://discuss.elastic.co/u/Adventures_Of_Arch)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 5:39pm UTC](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195 "2022-02-28T17:39:41Z")

</div>

Hey all - Unsure where to turn with this one. Running Elasticsearch 7.16.3 and Kibana 7.16.3 on Ubuntu Server 20.04 Elasticsearch is configured and running successfully as a single-node deployment, currently with... x…

---

## [Remove kibana deprecation warnings](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 5:21pm UTC](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438 "2022-02-28T17:21:16Z")

</div>

I am trying to remove kibana deprecation warnings. I am using kibana 7.10.2. There were some configurations that have been deprecated and I fixed those warnings. There is another deprecation warning that is still appeari…

[Previous page](https://discuss.elastic.co/latest.md?page=1237)

[Next page](https://discuss.elastic.co/latest.md?page=1239)
