# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1312

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1313

---

## [About filebeat config error](https://discuss.elastic.co/t/about-filebeat-config-error/294119)

<div class="topic-metadata">

**Author:** [@yanwencheng](https://discuss.elastic.co/u/yanwencheng)\
**Replies:** 0\
**Last updated:** [January 12, 2022, 8:03am UTC](https://discuss.elastic.co/t/about-filebeat-config-error/294119 "2022-01-12T08:03:08Z")

</div>

filebeat config setup.kibana.then setup i get console error sudo filebeat setup Index setup finished. Loading dashboards (Kibana must be running and reachable) Exiting: error connecting to Kibana: fail to get the Kibana…

---

## [How to schedule the execution of an update\_by\_query painless script in a cluster](https://discuss.elastic.co/t/how-to-schedule-the-execution-of-an-update-by-query-painless-script-in-a-cluster/294089)

<div class="topic-metadata">

**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 8:23am UTC](https://discuss.elastic.co/t/how-to-schedule-the-execution-of-an-update-by-query-painless-script-in-a-cluster/294089 "2022-01-12T08:23:31Z")

</div>

I need to schedule the execution of an update\_by\_query painless script so that it gets executed in the current Primary shard of the cluster regardless of the nodes of the script that might me down. I think that Kibana co…

---

## [Search\_phase\_execution\_exception error: rejected execution of org.elasticsearch.common.util.concurrent.TimedRunnable@ on QueueResizingEsThreadPoolExecutor](https://discuss.elastic.co/t/search-phase-execution-exception-error-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable-on-queueresizingesthreadpoolexecutor/294008)

<div class="topic-metadata">

**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 8:18am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-error-rejected-execution-of-org-elasticsearch-common-util-concurrent-timedrunnable-on-queueresizingesthreadpoolexecutor/294008 "2022-01-12T08:18:08Z")

</div>

Sometimes I got this error from my client node, is there any ideas to fix this? search\_phase\_execution\_exception: \\n at onBody (/var/server/app/node\_modules/es7/lib/Transport.js:367:23)\\n at IncomingMessage.onEnd …

---

## [Unable to log into embedded Kibana anonymously](https://discuss.elastic.co/t/unable-to-log-into-embedded-kibana-anonymously/291797)

<div class="topic-metadata">

**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\
**Replies:** 10\
**Last updated:** [January 12, 2022, 7:59am UTC](https://discuss.elastic.co/t/unable-to-log-into-embedded-kibana-anonymously/291797 "2022-01-12T07:59:26Z")

</div>

I tried to embed Kibana into a webpage but was unable to login as they kept bringing me back to the login page. So I decided to take a different approach and allow user to log in anonymously. I create an API-Key and li…

---

## [Kibana iframe error](https://discuss.elastic.co/t/kibana-iframe-error/293997)

<div class="topic-metadata">

**Author:** [@yanwencheng](https://discuss.elastic.co/u/yanwencheng)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 7:58am UTC](https://discuss.elastic.co/t/kibana-iframe-error/293997 "2022-01-12T07:58:32Z")

</div>

i set xpack.security.sameSiteCookies: "None" Error when accessing kibana Logging in with provider "basic" (basic) log \[17:00:29.269\] \[error\]\[http\] Error: "SameSite: None" requires Secure connection at validateO…

---

## [Google Tag Manager](https://discuss.elastic.co/t/google-tag-manager/294117)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 0\
**Last updated:** [January 12, 2022, 7:10am UTC](https://discuss.elastic.co/t/google-tag-manager/294117 "2022-01-12T07:10:01Z")

</div>

Dears, Does anyone added GTM to Kibana or a custom plugin of Kibana to get some tracking informations ? Thank You

---

## [Logstash is terminating](https://discuss.elastic.co/t/logstash-is-terminating/294001)

<div class="topic-metadata">

**Author:** [@HELIXInternational](https://discuss.elastic.co/u/HELIXInternational)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 6:37am UTC](https://discuss.elastic.co/t/logstash-is-terminating/294001 "2022-01-12T06:37:09Z")

</div>

We upgraded the logstash from7.7.0 to 7.16.2, after upgrade the pipeline service is terminating. Can you please help on this. Config file: powershell .\\bin\\logstash -f config\\harvester-pipeline.conf --…

---

## [Unable to restore snapshots after reinstalling elk](https://discuss.elastic.co/t/unable-to-restore-snapshots-after-reinstalling-elk/294102)

<div class="topic-metadata">

**Author:** [@Johan\_Jesse](https://discuss.elastic.co/u/Johan_Jesse)\
**Replies:** 3\
**Last updated:** [January 12, 2022, 4:33am UTC](https://discuss.elastic.co/t/unable-to-restore-snapshots-after-reinstalling-elk/294102 "2022-01-12T04:33:57Z")

</div>

Hello Team- We have tried to update our current ELK from 7.4.0 to 7.16.0, after creating a snapshot from Kibana. However, we were unable to do so. So, we have uninstalled Elasticsearch from all our 6 nodes (which were i…

---

## [Curator: filtertype: allocated a empty key](https://discuss.elastic.co/t/curator-filtertype-allocated-a-empty-key/294100)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 0\
**Last updated:** [January 12, 2022, 2:43am UTC](https://discuss.elastic.co/t/curator-filtertype-allocated-a-empty-key/294100 "2022-01-12T02:43:22Z")

</div>

Hi i have this code: - filtertype: allocated key: role value: null allocation\_type: require exclude: True But this fails (complains that value is required), i'm trying to exclude index that…

---

## [Functionbeat 7.16.2 parses quoted strings with periods as objects](https://discuss.elastic.co/t/functionbeat-7-16-2-parses-quoted-strings-with-periods-as-objects/294097)

<div class="topic-metadata">

**Author:** [@cafuego](https://discuss.elastic.co/u/cafuego)\
**Replies:** 0\
**Last updated:** [January 12, 2022, 1:16am UTC](https://discuss.elastic.co/t/functionbeat-7-16-2-parses-quoted-strings-with-periods-as-objects/294097 "2022-01-12T01:16:44Z")

</div>

We maintain a set of billing tags on our AWS resources that are prefixed with "cost.". The 7.16.2 version of functionbeat errors out on those tags, despite me quoting the tag strings in the yaml file, it interprets them …

---

## [Load index template for beats upgrade](https://discuss.elastic.co/t/load-index-template-for-beats-upgrade/294078)

<div class="topic-metadata">

**Author:** [@Dennis\_Qian](https://discuss.elastic.co/u/Dennis_Qian)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 1:08am UTC](https://discuss.elastic.co/t/load-index-template-for-beats-upgrade/294078 "2022-01-12T01:08:35Z")

</div>

I need to upgrade filebeat 6.8 to 7.16 and winlogbeat 6.3 to 7.16. After reading the upgrade guide, my understanding is that I need to upgrade winlogbeat to 6.8 first, then load index template. However our beats output …

---

## [Elasticsearch server logs not visible in Kibana Stack monitoring](https://discuss.elastic.co/t/elasticsearch-server-logs-not-visible-in-kibana-stack-monitoring/287672)

<div class="topic-metadata">

**Author:** [@kalev](https://discuss.elastic.co/u/kalev)\
**Replies:** 5\
**Last updated:** [January 12, 2022, 1:01am UTC](https://discuss.elastic.co/t/elasticsearch-server-logs-not-visible-in-kibana-stack-monitoring/287672 "2022-01-12T01:01:09Z")

</div>

Hi, I do collect elsticsearch server (7.10.2) logs with filebeat (7.10.2) and they do exist in filebeat-\* index. These logs do NOT appear in Kibana Stack monitoring page as illustrated in https://www.elastic.co/guide/e…

---

## [File Input, just one file, with one line that is updated every 5 minutes](https://discuss.elastic.co/t/file-input-just-one-file-with-one-line-that-is-updated-every-5-minutes/294074)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 11:56pm UTC](https://discuss.elastic.co/t/file-input-just-one-file-with-one-line-that-is-updated-every-5-minutes/294074 "2022-01-11T23:56:05Z")

</div>

Hi, I need to read from logstash one file: number\_of\_connections.txt this file is updated every 5 minutes with a new number, so no new lines are added. can I do this with file input? if not is there another input that …

---

## [Are we forced to data streams in 8.0?](https://discuss.elastic.co/t/are-we-forced-to-data-streams-in-8-0/294090)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 10:58pm UTC](https://discuss.elastic.co/t/are-we-forced-to-data-streams-in-8-0/294090 "2022-01-11T22:58:52Z")

</div>

I'm researching what we need to do to get off legacy templates. For example, we have several indices like filebeat-7.14.0-index-a, filebeat-7.14.0-index-b, etc. They are different apps and different access rules. Now …

---

## [Query String Regex/WildCard Search](https://discuss.elastic.co/t/query-string-regex-wildcard-search/293845)

<div class="topic-metadata">

**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\
**Replies:** 15\
**Last updated:** [January 11, 2022, 10:36pm UTC](https://discuss.elastic.co/t/query-string-regex-wildcard-search/293845 "2022-01-11T22:36:13Z")

</div>

Hi Team, Problem Statement Search String - "Hello \* World" Expected Output - 1. "Hello First World" 2. "Hello Second World" I need results that contain one word in place of \*. I have tried using query string regex …

---

## [Failed to Start Kibana 7.16.1](https://discuss.elastic.co/t/failed-to-start-kibana-7-16-1/293900)

<div class="topic-metadata">

**Author:** [@abhayamishra](https://discuss.elastic.co/u/abhayamishra)\
**Replies:** 8\
**Last updated:** [January 11, 2022, 10:06pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-7-16-1/293900 "2022-01-11T22:06:56Z")

</div>

After Upgrading from 7.5.2or with fresh installation of Kibana 7.16.1 - it is failed to start. 7.5.2 version was working well. ROR plugin is used for authentication. This is also upgraded to readonlyrest\_kbn\_enterprise…

---

## [Fleet Apache access log integration - adding extra data from logs](https://discuss.elastic.co/t/fleet-apache-access-log-integration-adding-extra-data-from-logs/294048)

<div class="topic-metadata">

**Author:** [@ChrisTB](https://discuss.elastic.co/u/ChrisTB)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 10:04pm UTC](https://discuss.elastic.co/t/fleet-apache-access-log-integration-adding-extra-data-from-logs/294048 "2022-01-11T22:04:32Z")

</div>

Hi, We have set up an integration via Fleet/Elastic Agent for Apache. I was wondering if it is possible to add extra data that is present in the access log files, to the data stream, so we can query and visualize it in…

---

## [Elastic Agent SQL Integration](https://discuss.elastic.co/t/elastic-agent-sql-integration/294043)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 10:03pm UTC](https://discuss.elastic.co/t/elastic-agent-sql-integration/294043 "2022-01-11T22:03:33Z")

</div>

Hi All, I was wondering if there is or are plans to have an SQL integration for the Elastic Agent that is basically (SQL module | Metricbeat Reference \[7.16\] | Elastic)? I'm looking have a recurring query to collect som…

---

## [\[Help\] Understanding routing to an index partition](https://discuss.elastic.co/t/help-understanding-routing-to-an-index-partition/293812)

<div class="topic-metadata">

**Author:** [@Radaeld](https://discuss.elastic.co/u/Radaeld)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 9:34pm UTC](https://discuss.elastic.co/t/help-understanding-routing-to-an-index-partition/293812 "2022-01-11T21:34:10Z")

</div>

Hey all I have some questions regarding routing\_partition\_size field. Not sure but upon reading the documentation , this is what i understood: By default, using a routing key will access only 1 primary shard, for inde…

---

## [Options available for storing data beyond a limit](https://discuss.elastic.co/t/options-available-for-storing-data-beyond-a-limit/294080)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 9:31pm UTC](https://discuss.elastic.co/t/options-available-for-storing-data-beyond-a-limit/294080 "2022-01-11T21:31:02Z")

</div>

Hello. We have a hard limit of 4TB of disk storage that can be allocated to individual nodes in a cluster. My question is what happens when we start nearing the threshold of 4TB? Is there a way we could archive data o…

---

## [Upgrade log4j to version 2.17](https://discuss.elastic.co/t/upgrade-log4j-to-version-2-17/294058)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 9:04pm UTC](https://discuss.elastic.co/t/upgrade-log4j-to-version-2-17/294058 "2022-01-11T21:04:16Z")

</div>

hello, I have to upgrade log4j to version 2.17 I have elastic with version 7.11.1 and 7.8.0 My question is - can I do it manually on current version on ES or I need to upgrade ES to version 7.16 with log4j installed ? …

---

## [Unable to use training](https://discuss.elastic.co/t/unable-to-use-training/293672)

<div class="topic-metadata">

**Author:** [@jbellezz](https://discuss.elastic.co/u/jbellezz)\
**Replies:** 15\
**Last updated:** [January 11, 2022, 8:11pm UTC](https://discuss.elastic.co/t/unable-to-use-training/293672 "2022-01-11T20:11:48Z")

</div>

Tried working through training@elastic.co, but they directed me here. I am running into at least 2 issues at the moment. Strigo does not have my e-mail on file from the course provider, so I am unable to create a lab …

---

## [Systemd to elasticseaech](https://discuss.elastic.co/t/systemd-to-elasticseaech/294020)

<div class="topic-metadata">

**Author:** [@aviad.co1](https://discuss.elastic.co/u/aviad.co1)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 6:58pm UTC](https://discuss.elastic.co/t/systemd-to-elasticseaech/294020 "2022-01-11T18:58:23Z")

</div>

Hi, I just install Elasticsearch with tar file... there is a link that define how to add systemd to run Elasticsearch for this installation method.... Thanks

---

## [How display documents with missing date field](https://discuss.elastic.co/t/how-display-documents-with-missing-date-field/294065)

<div class="topic-metadata">

**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\
**Replies:** 5\
**Last updated:** [January 11, 2022, 6:31pm UTC](https://discuss.elastic.co/t/how-display-documents-with-missing-date-field/294065 "2022-01-11T18:31:54Z")

</div>

I have what I think is an easy question, but for some reason I can't get a straight answer. I am using Kibana with another tool. The tool has documents in it that have 10 fields. 3 of those fields are date fields. If…

---

## [Best way to migrate data disk](https://discuss.elastic.co/t/best-way-to-migrate-data-disk/293213)

<div class="topic-metadata">

**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 4:23pm UTC](https://discuss.elastic.co/t/best-way-to-migrate-data-disk/293213 "2022-01-11T16:23:48Z")

</div>

Hi, Today i was wondering what would be the best way to migrate disks ( dedicated data disk for Elasticsearch ) from one virtual machine to another. The disks are directly attached to the vms, could i stop the node and…

---

## [Boosting documents where more than one field matches terms](https://discuss.elastic.co/t/boosting-documents-where-more-than-one-field-matches-terms/294059)

<div class="topic-metadata">

**Author:** [@tensor](https://discuss.elastic.co/u/tensor)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 4:13pm UTC](https://discuss.elastic.co/t/boosting-documents-where-more-than-one-field-matches-terms/294059 "2022-01-11T16:13:34Z")

</div>

Hi We have a question regarding how to do some ranking on our queries, which may also fall back on to how to best index our data. Our scenario is that we have documents something along the lines of a Model, which then …

---

## [Devtools show all content docs on the index blogs](https://discuss.elastic.co/t/devtools-show-all-content-docs-on-the-index-blogs/293802)

<div class="topic-metadata">

**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 3:59pm UTC](https://discuss.elastic.co/t/devtools-show-all-content-docs-on-the-index-blogs/293802 "2022-01-11T15:59:45Z")

</div>

Hello, i try to do the paractice exam of Elasticsearch, i have a task wich is: Find the number of unique authors for each calendar year of blogs on cluster1 with the phrase "open source" in that order in the content fi…

---

## [Out of 10 tasks how many I have to finish in order to get pass?](https://discuss.elastic.co/t/out-of-10-tasks-how-many-i-have-to-finish-in-order-to-get-pass/294055)

<div class="topic-metadata">

**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 3:45pm UTC](https://discuss.elastic.co/t/out-of-10-tasks-how-many-i-have-to-finish-in-order-to-get-pass/294055 "2022-01-11T15:45:46Z")

</div>

Hi, I took the exam and I stuck with 1 task and it took all of the time And I didn't get a chance to finish 3 tasks. How many at least I need to finish to get a passing score?

---

## [Maps, Geoshapes, Geopoints](https://discuss.elastic.co/t/maps-geoshapes-geopoints/293906)

<div class="topic-metadata">

**Author:** [@androsteve](https://discuss.elastic.co/u/androsteve)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 3:36pm UTC](https://discuss.elastic.co/t/maps-geoshapes-geopoints/293906 "2022-01-11T15:36:46Z")

</div>

I'm new to Elasticsearch and Kibana. I've created 2 indexes. 1 - Customers containing geo\_point and name of location they purchased from 2 - Locations containing geo\_point and name of location I'm able to plot 2 laye…

---

## [Fleet : Visualizing Synthetic logs](https://discuss.elastic.co/t/fleet-visualizing-synthetic-logs/292835)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 5\
**Last updated:** [January 11, 2022, 3:15pm UTC](https://discuss.elastic.co/t/fleet-visualizing-synthetic-logs/292835 "2022-01-11T15:15:30Z")

</div>

Hello, I added a synthetics integration and I can see the Uptime monitor but I want to create a visualization with this data. How can I easily select the data I want to show? I'm trying to add different filters to isol…

[Previous page](https://discuss.elastic.co/latest.md?page=1311)

[Next page](https://discuss.elastic.co/latest.md?page=1313)
