# Latest **URL:** https://discuss.elastic.co/latest.md?page=1304 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1305 --- ## [Questions about the use of maxSeqNoOfUpdatesOrDeletes in planIndexingAsNonPrimary](https://discuss.elastic.co/t/questions-about-the-use-of-maxseqnoofupdatesordeletes-in-planindexingasnonprimary/294650)
**Author:** [@liurui](https://discuss.elastic.co/u/liurui)\ **Replies:** 0\ **Last updated:** [January 18, 2022, 3:48am UTC](https://discuss.elastic.co/t/questions-about-the-use-of-maxseqnoofupdatesordeletes-in-planindexingasnonprimary/294650 "2022-01-18T03:48:14Z")
Hello. :grinning: I recently encountered read IOPS high due to translog operation replay during index recovery on a 710 cluster. I want to know more about the logic of this place and have a question about the method pla… --- ## [Filebeat Write Kafka retry mechanism](https://discuss.elastic.co/t/filebeat-write-kafka-retry-mechanism/294648)
**Author:** [@WeiMengXS](https://discuss.elastic.co/u/WeiMengXS)\ **Replies:** 0\ **Last updated:** [January 18, 2022, 3:34am UTC](https://discuss.elastic.co/t/filebeat-write-kafka-retry-mechanism/294648 "2022-01-18T03:34:42Z")
Hello everyone, I am learning the process of fileBeat writing Kafka When reachable\_only is false, log sending is blocked if the leader of a partition is unreachable. 那阻塞到某个临界点，例如队列已满，会有怎样的处理呢？ 它的重试机制是一直重试吗？重试是否也有一个极限呢… --- ## [Strigo - Kibana2 not ready](https://discuss.elastic.co/t/strigo-kibana2-not-ready/294339)
**Author:** [@krissundar](https://discuss.elastic.co/u/krissundar)\ **Replies:** 2\ **Last updated:** [January 18, 2022, 3:33am UTC](https://discuss.elastic.co/t/strigo-kibana2-not-ready/294339 "2022-01-18T03:33:17Z")
I couldn't get the Kibana2 login page working even after waiting for a long time. where Kibana1 is fine and working. Applications are all started Is there a way to reload the server2 image back to its initial cl… --- ## [What's the detail about enterprise license 30$ per month?](https://discuss.elastic.co/t/whats-the-detail-about-enterprise-license-30-per-month/294643)
**Author:** [@chaishiqi](https://discuss.elastic.co/u/chaishiqi)\ **Replies:** 2\ **Last updated:** [January 18, 2022, 3:29am UTC](https://discuss.elastic.co/t/whats-the-detail-about-enterprise-license-30-per-month/294643 "2022-01-18T03:29:00Z")
As it ,In order to search snapshot on frozen tie of my private Elasticsearch cluster ,the license price on website is 30$ per month, this is all the cluster fee or single node agent? --- ## [Join the two index in the ElasticSearch to query the data with sorting](https://discuss.elastic.co/t/join-the-two-index-in-the-elasticsearch-to-query-the-data-with-sorting/294519)
**Author:** [@jamesweb1](https://discuss.elastic.co/u/jamesweb1)\ **Replies:** 3\ **Last updated:** [January 18, 2022, 3:23am UTC](https://discuss.elastic.co/t/join-the-two-index-in-the-elasticsearch-to-query-the-data-with-sorting/294519 "2022-01-18T03:23:18Z")
In my application, I have two indices like: Elasticsearch (index: 'identify\_results') deviceId value time 00245765 100 2021-11-22T08:20:01.004Z 10245888 200 2021-11-23T10:20:01.004Z 00245765 300 2021-11-24T11:20:01.004Z… --- ## [Filebeat can not get kubernetes metadata for containerd run-time](https://discuss.elastic.co/t/filebeat-can-not-get-kubernetes-metadata-for-containerd-run-time/294644)
**Author:** [@jianwu](https://discuss.elastic.co/u/jianwu)\ **Replies:** 0\ **Last updated:** [January 18, 2022, 3:03am UTC](https://discuss.elastic.co/t/filebeat-can-not-get-kubernetes-metadata-for-containerd-run-time/294644 "2022-01-18T03:03:15Z")
我使用的filebeat 7.16.2, Kubertnets 1.20.10 , 容器的运行时的版本为 v1.19.0, Filebeat 通过 DaemonSet方式部署， File beat采集部分配置如下： filebeat.inputs: - type: log paths: - /var/log/containers/\*/\*/\*.log exclude\_files: … --- ## [Issue of Configuring in Logstash](https://discuss.elastic.co/t/issue-of-configuring-in-logstash/294387)
**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\ **Replies:** 7\ **Last updated:** [January 18, 2022, 2:16am UTC](https://discuss.elastic.co/t/issue-of-configuring-in-logstash/294387 "2022-01-18T02:16:07Z")
This is the configuration in logstash-sample.conf: input{ stdin{} } output{ elasticsearch{ hosts =\> \["localhost:9200"\] index =\> "my-index-name" user =\> "elastic" passwo… --- ## [Cannot run forecast, memory usage is predicted to exceed 20MB. v7.8](https://discuss.elastic.co/t/cannot-run-forecast-memory-usage-is-predicted-to-exceed-20mb-v7-8/294623)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [January 18, 2022, 2:13am UTC](https://discuss.elastic.co/t/cannot-run-forecast-memory-usage-is-predicted-to-exceed-20mb-v7-8/294623 "2022-01-18T02:13:22Z")
Hi Im having problems runing a forecast, when I use the kibana GUI it throws me a Bad Request error and when I use devtools I get this error. Cannot run forecast: Forecast cannot be executed as forecast memory usage is … --- ## [Kibana cannot create new index'es](https://discuss.elastic.co/t/kibana-cannot-create-new-indexes/294536)
**Author:** [@Adrpan83](https://discuss.elastic.co/u/Adrpan83)\ **Replies:** 3\ **Last updated:** [January 18, 2022, 12:42am UTC](https://discuss.elastic.co/t/kibana-cannot-create-new-indexes/294536 "2022-01-18T00:42:27Z")
Hi all! I have a little bit problem with my indexes. Every day at midnight a new index should be created, but it is created only when I delete or freeze the previous index e.g. from 30 days ago. I have free space on se… --- ## [Not able to parse below multiple json objects i have lot of json objects like this please provide filebeat input and logstsah configuration for this thank you in advance](https://discuss.elastic.co/t/not-able-to-parse-below-multiple-json-objects-i-have-lot-of-json-objects-like-this-please-provide-filebeat-input-and-logstsah-configuration-for-this-thank-you-in-advance/294550)
**Author:** [@aravindpatel](https://discuss.elastic.co/u/aravindpatel)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 8:53am UTC](https://discuss.elastic.co/t/not-able-to-parse-below-multiple-json-objects-i-have-lot-of-json-objects-like-this-please-provide-filebeat-input-and-logstsah-configuration-for-this-thank-you-in-advance/294550 "2022-01-17T08:53:17Z")
{ "id": "AAA", "num": "-17.3595", "num": "-145.494", "name": "Anaa", "author": "Anaaauthor", "place": "Tuamotu-Gambier", "landmark": "French Polynesia", "spcid": "12512819", "target": "Pacific/Midway", "mob": … --- ## [Every Night- Elasticsearch. (code=killed, signal=KILL)](https://discuss.elastic.co/t/every-night-elasticsearch-code-killed-signal-kill/294397)
**Author:** [@beohna](https://discuss.elastic.co/u/beohna)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 10:58pm UTC](https://discuss.elastic.co/t/every-night-elasticsearch-code-killed-signal-kill/294397 "2022-01-17T22:58:41Z")
Hey, on my Rasperry Pi with Nextcloud and full text search (powered by Elasticsearch) every night Elasticsearch is killed (code=killed, signal=KILL). ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/s… --- ## [Force\_source seems not working](https://discuss.elastic.co/t/force-source-seems-not-working/294622)
**Author:** [@ympark](https://discuss.elastic.co/u/ympark)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:41pm UTC](https://discuss.elastic.co/t/force-source-seems-not-working/294622 "2022-01-17T19:41:17Z")
Hi all, I am testing the latest Elasticsearch 7.16.3 and encountered an issue. I have a keyword type field with the lowercase normaliser. When I get highlight on the keyword field, Highlighting seems not to be applied … --- ## [Setting up minimal security for Elasticsearch 7.16.2](https://discuss.elastic.co/t/setting-up-minimal-security-for-elasticsearch-7-16-2/294316)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 7:39pm UTC](https://discuss.elastic.co/t/setting-up-minimal-security-for-elasticsearch-7-16-2/294316 "2022-01-17T19:39:13Z")
Hello all, I am using Elastic stack version 7.16.2 with a three node cluster implementation. I am using a basic license. I understand I can set up three different levels of security for my elastic stack. Minimal secu… --- ## [Error in per bucket doc\_count\_error\_upper\_bound for Term Aggregation?](https://discuss.elastic.co/t/error-in-per-bucket-doc-count-error-upper-bound-for-term-aggregation/294249)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 7:07pm UTC](https://discuss.elastic.co/t/error-in-per-bucket-doc-count-error-upper-bound-for-term-aggregation/294249 "2022-01-17T19:07:47Z")
Below configuration for Elasticsearch: 1 Cluster 1 Node 1 Index 3 Shards (1 Replica shard for each primary, but in UNASSIGNED state as there is only 1 node). I have indexed document and those are spread across 3 Shards… --- ## [Error installing Logstash on Linux Server](https://discuss.elastic.co/t/error-installing-logstash-on-linux-server/294621)
**Author:** [@uday22](https://discuss.elastic.co/u/uday22)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 6:40pm UTC](https://discuss.elastic.co/t/error-installing-logstash-on-linux-server/294621 "2022-01-17T18:40:28Z")
OS: Linux i used rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch command to start installation process i am getting errors curl: (7) Failed connect to artifacts.elastic.co:443; connection timed out er… --- ## [Extend the legend entries in vega](https://discuss.elastic.co/t/extend-the-legend-entries-in-vega/294401)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 5:38pm UTC](https://discuss.elastic.co/t/extend-the-legend-entries-in-vega/294401 "2022-01-17T17:38:38Z")
Have a good day everyone, I have a visualization in vega and apparently it does not support more than 29 different data(entries ) for a legend called Products, can it somehow extend the capacity of a legend in vega? … --- ## [Pie chart with list](https://discuss.elastic.co/t/pie-chart-with-list/294342)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 5:23pm UTC](https://discuss.elastic.co/t/pie-chart-with-list/294342 "2022-01-17T17:23:18Z")
Hi my friends I'm very new on kibana. I want to create a pie chart with a field who contains a list, like this: \[passed, passed, passed, passed, failed, failed, failed, passed, passed, passed, passed, passed, passed, pa… --- ## [Snapshot indices to S3 repository\_exception](https://discuss.elastic.co/t/snapshot-indices-to-s3-repository-exception/294611)
**Author:** [@rymr](https://discuss.elastic.co/u/rymr)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/snapshot-indices-to-s3-repository-exception/294611 "2022-01-17T17:16:44Z")
Hi, I backup my indices with a script on s3 bucket following those steps: create repository if it doesn't exist cleanup the repository remove old snapshots snapshot in 4 repositories depending of indices types The fi… --- ## [How set context in new transaction manually for APM Agent .NET Framework](https://discuss.elastic.co/t/how-set-context-in-new-transaction-manually-for-apm-agent-net-framework/294318)
**Author:** [@juliano.maciel](https://discuss.elastic.co/u/juliano.maciel)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 5:01pm UTC](https://discuss.elastic.co/t/how-set-context-in-new-transaction-manually-for-apm-agent-net-framework/294318 "2022-01-17T17:01:37Z")
Hi, I'm instrumenting an app manually because it uses the windows self-host to run as a local service, when creating a new transaction how can I get the content of the body and set it manually in the new transaction? … --- ## [Filtering or changing user metadata with Java agent](https://discuss.elastic.co/t/filtering-or-changing-user-metadata-with-java-agent/293899)
**Author:** [@Rob5](https://discuss.elastic.co/u/Rob5)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 4:42pm UTC](https://discuss.elastic.co/t/filtering-or-changing-user-metadata-with-java-agent/293899 "2022-01-17T16:42:57Z")
Hi! I am using the apm Java agent attached to a Spring application without any custom spans or transactions. Is it possible to change or filter out the user metadata? Metadata | APM Overview \[7.15\] | Elastic The user.… --- ## [ES password containing comma can't be passed as environment variable](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450)
**Author:** [@BitPatty](https://discuss.elastic.co/u/BitPatty)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:36pm UTC](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450 "2022-01-17T16:36:25Z")
I'm passing the password as environment variable to heartbeat.yml on ES 7.16.1 as follows: heartbeat.yml: output: elasticsearch: password: '${ELASTICSEARCH\_PASSWORD}' When using ELASTICSEARCH\_PASSWORD="foo,bar" … --- ## [Aggregate filter plugin output in a single document - Logstash](https://discuss.elastic.co/t/aggregate-filter-plugin-output-in-a-single-document-logstash/294606)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:28pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-output-in-a-single-document-logstash/294606 "2022-01-17T16:28:21Z")
Hi guys, I'm using an aggregate filter plugin to map certain information to the main document that I'm processing with logstash but I don't understand why at the end I'm getting 2 documents instead of 1, the first of the… --- ## [Output conditions with logstash plugin http\_poller](https://discuss.elastic.co/t/output-conditions-with-logstash-plugin-http-poller/294608)
**Author:** [@redaER7](https://discuss.elastic.co/u/redaER7)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 4:26pm UTC](https://discuss.elastic.co/t/output-conditions-with-logstash-plugin-http-poller/294608 "2022-01-17T16:26:49Z")
I would like to implement a conditional output to Elasticsearch index using logstash http\_poller input plugin. I am using a GET request and sending the response to the index only if the response is not already in the ind… --- ## [After Upgrade Logstash is running but not sending logs to elasticsearch](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324)
**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 4:19pm UTC](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324 "2022-01-17T16:19:15Z")
hello everyone, After upgrading logstash from version 6.8 to 7.16.2, logstash is running but it didn't send logs to Elasticsearch. In the logfile of logstash server i have this error : "\[2022-01-03Tl3:50:23,910)\[FATAL)… --- ## [Error "Look-behind group does not have an obvious maximum length near index" in pattern\_capture](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:08pm UTC](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594 "2022-01-17T16:08:08Z")
Hello I just want to index the word "Samsung" in the text below Text: Samsung a30 mobile phone I mean I want to separate the text above by space and just index the word I want (the word may change by location, for exa… --- ## [How to change "message" value in index](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548)
**Author:** [@mhzr](https://discuss.elastic.co/u/mhzr)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:38pm UTC](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548 "2022-01-17T15:38:45Z")
Hello, In logstash pipeline or indexpattern how to change the following part of CDN log in "message" field to seperate or extract some data then aggrigate them. original "message" value: \<40\> 2022-01-17T08:31:22Z logs… --- ## [ES issue with bulk items](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:35pm UTC](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598 "2022-01-17T15:35:36Z")
Hello, I'm receiving below issues with bulk items, "stacktrace": \["org.elasticsearch.index.mapper.MapperParsingException: object mapping for \[rule\] tried to parse field \[rule\] as object, but found a concrete value", "a… --- ## [Separate Fields Now Displaying As One Object](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 11\ **Last updated:** [January 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950 "2022-01-17T15:25:33Z")
I use Logstash to process our logs and organize relevant fields into objects so that they display together in Kibana. log.source log.format log.time However, after upgrading, I THINK to 7.16, they're now displaying as… --- ## [Elastic Ingest Node Geoip Expired](https://discuss.elastic.co/t/elastic-ingest-node-geoip-expired/294591)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:09pm UTC](https://discuss.elastic.co/t/elastic-ingest-node-geoip-expired/294591 "2022-01-17T15:09:30Z")
I have been using Elasticsearch ingest nodes for a while. For the first time I noticed that I am getting an error on geoip mapping of data. Error is: \_geoip\_expired\_database Looking into this, looks like if libraries ar… --- ## [Assign colors to boolean pie chart](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486)
**Author:** [@kequach](https://discuss.elastic.co/u/kequach)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 2:54pm UTC](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486 "2022-01-17T14:54:44Z")
I want to have fixed colors for true/false. At the moment, the color palette simply assigns the bigger value to the default color which makes it hard to tell in one glance if the piechart is mostly false or true: I al… [Previous page](https://discuss.elastic.co/latest.md?page=1303) [Next page](https://discuss.elastic.co/latest.md?page=1305)