# Latest **URL:** https://discuss.elastic.co/latest.md?page=1248 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1249 --- ## [Profile time cost stat differ profile detail](https://discuss.elastic.co/t/profile-time-cost-stat-differ-profile-detail/297961)
**Author:** [@mxq-151](https://discuss.elastic.co/u/mxq-151)\ **Replies:** 1\ **Last updated:** [February 23, 2022, 2:43am UTC](https://discuss.elastic.co/t/profile-time-cost-stat-differ-profile-detail/297961 "2022-02-23T02:43:26Z")
{ "took" : 7510, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 1545576, "relation" : "eq" … --- ## [EQL increase the eql\_sequence memory limit](https://discuss.elastic.co/t/eql-increase-the-eql-sequence-memory-limit/297926)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [February 23, 2022, 2:48am UTC](https://discuss.elastic.co/t/eql-increase-the-eql-sequence-memory-limit/297926 "2022-02-23T02:48:28Z")
Hi all How can i increase the limit of the eql\_sequence in the elastic breaker settings. I constantly got this error while using sequence in eql { "error" : { "root\_cause" : \[ { "type" : "circuit\_b… --- ## [Winlogbeat Index](https://discuss.elastic.co/t/winlogbeat-index/297803)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 3\ **Last updated:** [February 23, 2022, 2:33am UTC](https://discuss.elastic.co/t/winlogbeat-index/297803 "2022-02-23T02:33:26Z")
Hello there, I´m trying the elk stack 8 and I´m a bit lost. Configured the security portion and when I send the logs over to the Elasticsearch cluster, I cannot see the index on index management. But I can see after tick… --- ## [Sort Facet values by alphabetical order (using Search UI)](https://discuss.elastic.co/t/sort-facet-values-by-alphabetical-order-using-search-ui/297681)
**Author:** [@JN\_JN](https://discuss.elastic.co/u/JN_JN)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 11:09pm UTC](https://discuss.elastic.co/t/sort-facet-values-by-alphabetical-order-using-search-ui/297681 "2022-02-22T23:09:14Z")
Hello - I am using Elastic.co's SearchUI (which is great!). Is it possible to sort Facet values by alphabetical order, instead of the default, which is by the number of results per value? Thank you! --- ## [Enable and configure the apache2 module](https://discuss.elastic.co/t/enable-and-configure-the-apache2-module/297882)
**Author:** [@Mariem](https://discuss.elastic.co/u/Mariem)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 11:08pm UTC](https://discuss.elastic.co/t/enable-and-configure-the-apache2-module/297882 "2022-02-22T23:08:11Z")
Hi , i'm installing apache logs and i'm stuck here because i'm using docker can someone help me ? --- ## [Creating snapshot every six months](https://discuss.elastic.co/t/creating-snapshot-every-six-months/297870)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 11:05pm UTC](https://discuss.elastic.co/t/creating-snapshot-every-six-months/297870 "2022-02-22T23:05:56Z")
Hi, I have lot of records in only one index so I want to create snapshots backup of index every six months and point those to different index pattern so that I can have different dashboards for every six months and one … --- ## [Fleet Elasticsearch CA trusted fingerprint](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 7\ **Last updated:** [February 22, 2022, 10:05pm UTC](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200 "2022-02-22T22:05:59Z")
Hello community, i am trying to setup my first fleet server and figured out that i can set the ca fingerprint as default. So I tried under fFleet \> Settings \> Output to set as wanted but i am getting the error: CA tru… --- ## [Kibana not found error when accessing Fleet on 8.0.0](https://discuss.elastic.co/t/kibana-not-found-error-when-accessing-fleet-on-8-0-0/297827)
**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 9:10pm UTC](https://discuss.elastic.co/t/kibana-not-found-error-when-accessing-fleet-on-8-0-0/297827 "2022-02-22T21:10:45Z")
Hi, I’ve recently started to upgrade my lab environment to 8.0.0. After the upgrade I can no longer access the Fleet console under Kibana (Kibana -\> Management -\> Fleet). When accessing it I receive an error message of… --- ## [Json { source =\> "message" } not parsing all of it](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 20\ **Last updated:** [February 22, 2022, 8:47pm UTC](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430 "2022-02-22T20:47:34Z")
Hello, I'm new to Logstash and was wondering if someone could help with my filter and how can I parse the rest of my json fields the intent is to bring out the other fields in "message" such that I can map them to ECS: h… --- ## [Kibana Clone Rule/Alert](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 8:26pm UTC](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639 "2022-02-22T20:26:31Z")
Hi All, Is it possible to clone a rule under Stack Management -\> Rules? Currently on 7.17.0, but don't seem to see any option for cloning an existing rule. Would be very helpful in reducing the time it takes to build si… --- ## [Is there a way to automatically connect to another ES Node when the connected ES Node stops?](https://discuss.elastic.co/t/is-there-a-way-to-automatically-connect-to-another-es-node-when-the-connected-es-node-stops/296596)
**Author:** [@Simon\_Benjamin](https://discuss.elastic.co/u/Simon_Benjamin)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 8:10pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-automatically-connect-to-another-es-node-when-the-connected-es-node-stops/296596 "2022-02-22T20:10:12Z")
Hi all. There are three ES Nodes, each of which is a master eligible node. Kibana is connected to one of them (192.168.20.100), and the hosts are configured in kibana.yml as follows. elasticsearch.hosts: \["http://192.… --- ## [Why restart kibana error?](https://discuss.elastic.co/t/why-restart-kibana-error/296926)
**Author:** [@XuShall](https://discuss.elastic.co/u/XuShall)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 8:01pm UTC](https://discuss.elastic.co/t/why-restart-kibana-error/296926 "2022-02-22T20:01:37Z")
I am using the latest version of Elasticsearch and kibana, start Elasticsearch successfully, start kibana successfully, but when I cancel the kibana process with ctrl+c and restart it again, an error will be reported. Th… --- ## [Login Failed error . giving : A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/login-failed-error-giving-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/297937)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 7:56pm UTC](https://discuss.elastic.co/t/login-failed-error-giving-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/297937 "2022-02-22T19:56:55Z")
Hi ALL, Inside my logs of logstash i am receiving the error as such : \[2022-02-22T17:00:11,265\]\[ERROR\]\[logstash.javapipeline \] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:doordash\_aut… --- ## [Hostname/IP does not match certificate's altnames](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/297928)
**Author:** [@Emile\_Plas](https://discuss.elastic.co/u/Emile_Plas)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 7:33pm UTC](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/297928 "2022-02-22T19:33:40Z")
I am trying to set up Elasticsearch and kibana 8 on a new machine. For one or another reason kibana gives me the following error: Hostname/IP does not match certificate's altnames. IP: ... is not in the certificate's al… --- ## [Keep getting Socket hang up](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 7:09pm UTC](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245 "2022-02-22T19:09:56Z")
I keep getting socket hang up. I have all hosts accessible from each other.Telnet works. Still end up with socket hang up and econnreset {"type":"log","@timestamp":"2022-02-04T01:40:36Z","tags":\["error","elasticsearch"… --- ## [Unable to log in after installation](https://discuss.elastic.co/t/unable-to-log-in-after-installation/297933)
**Author:** [@Nestoter](https://discuss.elastic.co/u/Nestoter)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 7:02pm UTC](https://discuss.elastic.co/t/unable-to-log-in-after-installation/297933 "2022-02-22T19:02:27Z")
Hi, I'm installing Elastic following this: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/deb.html Step 1. wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.0.0-amd64.deb Step 2. s… --- ## [How to enable security APi](https://discuss.elastic.co/t/how-to-enable-security-api/297259)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 7\ **Last updated:** [February 22, 2022, 6:31pm UTC](https://discuss.elastic.co/t/how-to-enable-security-api/297259 "2022-02-22T18:31:25Z")
how to enable security APi , please guide with steps --- ## [ILM, creation\_date and reindexing](https://discuss.elastic.co/t/ilm-creation-date-and-reindexing/297469)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 4\ **Last updated:** [February 22, 2022, 6:19pm UTC](https://discuss.elastic.co/t/ilm-creation-date-and-reindexing/297469 "2022-02-22T18:19:15Z")
Hello Elastic people, this is a follow-up to Is it possible change creation\_date on reindexed Indexes to get Life cycle Management to work on old indexes My usecase - so to say - is learning to use ES while trying to b… --- ## [\[Logstash\] Grok Filter does not work \_grokparsefailure](https://discuss.elastic.co/t/logstash-grok-filter-does-not-work-grokparsefailure/297823)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 15\ **Last updated:** [February 22, 2022, 5:54pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-does-not-work-grokparsefailure/297823 "2022-02-22T17:54:26Z")
Hi, I am trying to parse this: # Time: 2022-02-21T21:06:30.359422Z\\n# User@Host: backoffice\[backoffice\] @ \[0.0.0.0\] Id: 5373\\n# Query\_time: 13.690075 Lock\_time: 0.000000 Rows\_sent: 0 Rows\_examined: 189879\\nSET tim… --- ## [Failed to locate that index-pattern](https://discuss.elastic.co/t/failed-to-locate-that-index-pattern/296844)
**Author:** [@Kirk\_Sutherland](https://discuss.elastic.co/u/Kirk_Sutherland)\ **Replies:** 4\ **Last updated:** [February 22, 2022, 5:27pm UTC](https://discuss.elastic.co/t/failed-to-locate-that-index-pattern/296844 "2022-02-22T17:27:45Z")
I'm very new to elastic and through my many attempts at setup, I think I may have deleted something I shouldn't have - possibly an index or an index pattern, maybe both. Whenever I click on the "logs" link in kibana I a… --- ## [ELK upgrade to 6.8.23](https://discuss.elastic.co/t/elk-upgrade-to-6-8-23/297892)
**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 5:24pm UTC](https://discuss.elastic.co/t/elk-upgrade-to-6-8-23/297892 "2022-02-22T17:24:32Z")
Hi Team Currently I'm working on ELK upgrade. When I upgrade lostash from 5.X to 6.8.23.I got below error ----------------------------------------------------------------------------------------------------------------… --- ## [Kibana Blank Screen, migrating from 7.7.0 to 7.9.1](https://discuss.elastic.co/t/kibana-blank-screen-migrating-from-7-7-0-to-7-9-1/296751)
**Author:** [@JuanBermudezN](https://discuss.elastic.co/u/JuanBermudezN)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 5:17pm UTC](https://discuss.elastic.co/t/kibana-blank-screen-migrating-from-7-7-0-to-7-9-1/296751 "2022-02-22T17:17:13Z")
Hello, good afternoon, the Elasticsearch cluster have already been migrated to 7.9.1 version and I'm migrating kibana to 7.9.1, I have the following issue, we were getting the Server is not ready issue and we deleted the… --- ## [Pricing Platinum vs Enterprise](https://discuss.elastic.co/t/pricing-platinum-vs-enterprise/297927)
**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\ **Replies:** 3\ **Last updated:** [February 22, 2022, 5:00pm UTC](https://discuss.elastic.co/t/pricing-platinum-vs-enterprise/297927 "2022-02-22T17:00:55Z")
Hello, I'm a little confused about the pricing model for Elastic Cloud. Specifically, I don't understand why I would ever subscribe to platinum over enterprise. It appears with the inclusion of searchable snapshots in e… --- ## [Payload scoring in elasticsearch?](https://discuss.elastic.co/t/payload-scoring-in-elasticsearch/297878)
**Author:** [@pauloamed](https://discuss.elastic.co/u/pauloamed)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 4:48pm UTC](https://discuss.elastic.co/t/payload-scoring-in-elasticsearch/297878 "2022-02-22T16:48:06Z")
Hey! I've been trying to write a custom text scoring function in Elasticsearch and I can't find a way to do it. I want to weight the score of each query term with a payload passed inside the query. How can I do it using… --- ## [Elasticsearch 8.0 RPM Install Security autoconfiguration issues](https://discuss.elastic.co/t/elasticsearch-8-0-rpm-install-security-autoconfiguration-issues/297907)
**Author:** [@apjkelly](https://discuss.elastic.co/u/apjkelly)\ **Replies:** 5\ **Last updated:** [February 22, 2022, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-8-0-rpm-install-security-autoconfiguration-issues/297907 "2022-02-22T16:33:53Z")
I'm in the process of attempting to install Elasticsearch on a group of CentOS 7 servers. I am installing using the rpm provided in the Elasticsearch repo. However there appears to be an issue with the automated security… --- ## [Utc offset with timezone](https://discuss.elastic.co/t/utc-offset-with-timezone/296881)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 4:22pm UTC](https://discuss.elastic.co/t/utc-offset-with-timezone/296881 "2022-02-22T16:22:46Z")
Hello everyone. I have a timezone field in my data schema. Example: timezone: "Los Angles" Is it possible to create a scripted field and get the UTC offset from it? Thanks in advance for your future responses. --- ## [JSON INPUT](https://discuss.elastic.co/t/json-input/297789)
**Author:** [@melsj](https://discuss.elastic.co/u/melsj)\ **Replies:** 3\ **Last updated:** [February 22, 2022, 4:16pm UTC](https://discuss.elastic.co/t/json-input/297789 "2022-02-22T16:16:51Z")
Hello, I searching how to exclude the results that are \>10 in my dashboard. I have data in wich I have from 1 to 10 parcels that appear and it pollute my dashboard soI want to exclude those results. Thanks a lot --- ## [PV not attaching to Elasticsearch pod](https://discuss.elastic.co/t/pv-not-attaching-to-elasticsearch-pod/295919)
**Author:** [@Purushotham\_Reddy](https://discuss.elastic.co/u/Purushotham_Reddy)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 3:13pm UTC](https://discuss.elastic.co/t/pv-not-attaching-to-elasticsearch-pod/295919 "2022-02-22T15:13:45Z")
Hi All, I am facing an issue i.e PV is not getting attached/mounted to Elasticsearch pod. Background: I have setup Elasticsearch cluster using eck operator. Details are as follows. Cluster is setup in OKE(Oracle kuber… --- ## [Actions firing, but nothing shows up under alerts](https://discuss.elastic.co/t/actions-firing-but-nothing-shows-up-under-alerts/297783)
**Author:** [@jeremyross](https://discuss.elastic.co/u/jeremyross)\ **Replies:** 12\ **Last updated:** [February 22, 2022, 3:12pm UTC](https://discuss.elastic.co/t/actions-firing-but-nothing-shows-up-under-alerts/297783 "2022-02-22T15:12:02Z")
I've got a rule that triggers based on an arbitrary query and fires a slack message action. This works great, but no alerts show up under the Rule in Stack management, and also not seeing anything under Observability \> A… --- ## [Reading from Elasticsearch index using spark ( es-hadoop ) connectors](https://discuss.elastic.co/t/reading-from-elasticsearch-index-using-spark-es-hadoop-connectors/297590)
**Author:** [@Khushboo\_Kaul](https://discuss.elastic.co/u/Khushboo_Kaul)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 3:04pm UTC](https://discuss.elastic.co/t/reading-from-elasticsearch-index-using-spark-es-hadoop-connectors/297590 "2022-02-22T15:04:39Z")
HI Team, I was trying to read the index from Elasticsearch using es-hadoop connectors using spark using the below code- The index contains millions of records and the read is super slow. is there anything I can do t… [Previous page](https://discuss.elastic.co/latest.md?page=1247) [Next page](https://discuss.elastic.co/latest.md?page=1249)