# Latest **URL:** https://discuss.elastic.co/latest.md?page=1333 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1334 --- ## [MSSQL input hanging after update](https://discuss.elastic.co/t/mssql-input-hanging-after-update/292742)
**Author:** [@tobias\_c](https://discuss.elastic.co/u/tobias_c)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 9:41pm UTC](https://discuss.elastic.co/t/mssql-input-hanging-after-update/292742 "2021-12-22T21:41:45Z")
Hi all After updating from logstash 7.5.1 to 7.16.2 and updating from mssql.jdbc.4.2.jar to mssql.jdbc.9.4 (for jdk11 as the bundled jdk version) I cannot transfer my mssql data to Elasticsearch anymore. Logstash jdbc … --- ## [Apache Log4j2 vulnerability](https://discuss.elastic.co/t/apache-log4j2-vulnerability/292690)
**Author:** [@Amina\_LAARIM-SC](https://discuss.elastic.co/u/Amina_LAARIM-SC)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 9:25pm UTC](https://discuss.elastic.co/t/apache-log4j2-vulnerability/292690 "2021-12-22T21:25:23Z")
Hello community, I am using Elasticsearch 6.2.1 and I can't find any information if this version is impacted with the Apache Log4j2 vulnerability discovered at the begining of this month. Do you have any information pl… --- ## [Is it possible to add custom labels to Maps?](https://discuss.elastic.co/t/is-it-possible-to-add-custom-labels-to-maps/292640)
**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 8:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-custom-labels-to-maps/292640 "2021-12-22T20:41:04Z")
So currently my map shows count of article\* where article is my database name and is counting based on how many data I have; which is alright for me. However, I was wondering is it possible to add more custom labels to m… --- ## [Setup Filebeat to run as a service](https://discuss.elastic.co/t/setup-filebeat-to-run-as-a-service/292726)
**Author:** [@vharabor](https://discuss.elastic.co/u/vharabor)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 8:25pm UTC](https://discuss.elastic.co/t/setup-filebeat-to-run-as-a-service/292726 "2021-12-22T20:25:40Z")
I've setup Filebeat on AWS Amazon Linux 2 AMI using the setup instruction here : (Filebeat quick start: installation and configuration | Filebeat Reference \[7.16\] | Elastic) So basically : curl -L -O https://artifacts.… --- ## [Question regarding the IDF value for the optional fields in a document](https://discuss.elastic.co/t/question-regarding-the-idf-value-for-the-optional-fields-in-a-document/290598)
**Author:** [@kaykanloo](https://discuss.elastic.co/u/kaykanloo)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 8:18pm UTC](https://discuss.elastic.co/t/question-regarding-the-idf-value-for-the-optional-fields-in-a-document/290598 "2021-12-22T20:18:46Z")
Hi, I'm relatively new to Elasticsearch, so I'm probably missing something trivial here, but I'm having issues with the relevancy score of the search results when it comes to optional fields in documents. Consider the f… --- ## [Getting APM metrics using the/an API](https://discuss.elastic.co/t/getting-apm-metrics-using-the-an-api/292614)
**Author:** [@Maxi\_Donadio](https://discuss.elastic.co/u/Maxi_Donadio)\ **Replies:** 10\ **Last updated:** [December 22, 2021, 8:15pm UTC](https://discuss.elastic.co/t/getting-apm-metrics-using-the-an-api/292614 "2021-12-22T20:15:19Z")
Hi! I'm have the elastic APM set up on some machines. It's working quite well and all the stats are showing perfectly fine, but I don't want to use just the GUI. I'd like to get metrics (CPU Usage, Disk Usage, etc) for … --- ## [Math computation in TSVB](https://discuss.elastic.co/t/math-computation-in-tsvb/292704)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 8:00pm UTC](https://discuss.elastic.co/t/math-computation-in-tsvb/292704 "2021-12-22T20:00:29Z")
Hi ES team, Attached is the screenshot of the computation done using TSVB via filter ratio and TinyMath. The desired output I'm looking at is to filter Total Blanks \> 2 and display only the ID's corresponding to the sa… --- ## [Why is /\_search with scroll different?](https://discuss.elastic.co/t/why-is-search-with-scroll-different/292720)
**Author:** [@PeterMmm](https://discuss.elastic.co/u/PeterMmm)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 7:56pm UTC](https://discuss.elastic.co/t/why-is-search-with-scroll-different/292720 "2021-12-22T19:56:27Z")
I have this api search (ES 7.10.2) https://host:19102/myindex/cat/\_search?filter\_path=hits.total that returns { "hits": { "total": { "value": 10000, "relation": "gte" } … --- ## [Metrics Disappearing](https://discuss.elastic.co/t/metrics-disappearing/292488)
**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 4:47pm UTC](https://discuss.elastic.co/t/metrics-disappearing/292488 "2021-12-21T16:47:03Z")
Hello everyone, I have a very frustrating problem. Upon looking up my metrics, there is some data that is missing. Sometimes, I have metrics that appear, then disappear suddenly. The thing is, those metrics that are disa… --- ## [My Kibana is not being able to connect with my Elasticsearch because of Self-Signed Certificate](https://discuss.elastic.co/t/my-kibana-is-not-being-able-to-connect-with-my-elasticsearch-because-of-self-signed-certificate/292730)
**Author:** [@FernandoDurier](https://discuss.elastic.co/u/FernandoDurier)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 7:15pm UTC](https://discuss.elastic.co/t/my-kibana-is-not-being-able-to-connect-with-my-elasticsearch-because-of-self-signed-certificate/292730 "2021-12-22T19:15:11Z")
Good day, everyone! Hope you are doing well. I'm trying to connect my dockerized Kibana service with my IBM Cloud Elasticsearch. In the past, I had no issue with another instance of Elasticsearch running inside a RHOS… --- ## [Logs ML event.dataset type error](https://discuss.elastic.co/t/logs-ml-event-dataset-type-error/292510)
**Author:** [@Travis\_Marble](https://discuss.elastic.co/u/Travis_Marble)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 12:08am UTC](https://discuss.elastic.co/t/logs-ml-event-dataset-type-error/292510 "2021-12-22T00:08:02Z")
I am trying to setup Logs ML anomaly detection and getting the following error at least one index has a field event.dataset without the correct type Here is the typings for my index, I have seen various questions abo… --- ## [Logstash - grokparsefailure](https://discuss.elastic.co/t/logstash-grokparsefailure/292705)
**Author:** [@hassen\_k](https://discuss.elastic.co/u/hassen_k)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 6:27pm UTC](https://discuss.elastic.co/t/logstash-grokparsefailure/292705 "2021-12-22T18:27:31Z")
Hi, Logstash version 7.16.2 I am trying to parse the following logs: amAuthWindowsDesktopSSO:12/22/2021 03:55:44:349 PM CET: Thread\[http-nio-8080-exec-3,5,main\]: TransactionId\[b742688f-6089-41c4-925d-ba08dce4d7b7-1491… --- ## [Kibana 7.16 External Plugin creation](https://discuss.elastic.co/t/kibana-7-16-external-plugin-creation/292733)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-16-external-plugin-creation/292733 "2021-12-22T18:08:27Z")
I'm trying to create an external plugin using Kibana 7.16. I've done this with 7.5 and 7.10. I'm hoping I can move our plugins over to 7.16. I ran the kibana generate\_plugin script and created a plugin with a UI componen… --- ## [Cluster re-balancing issue](https://discuss.elastic.co/t/cluster-re-balancing-issue/292685)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 5:34pm UTC](https://discuss.elastic.co/t/cluster-re-balancing-issue/292685 "2021-12-22T17:34:31Z")
We have a cluster with zoning enabled. Zone-A has 15 hot nodes+10 warm nodes and Zone-B has 14 hot nodes + 10 warm nodes (one node was taken out due to repeated issues). The cluster was doing well until the last we… --- ## [Data Analysis with Kibana (On-Demand): new lab machine](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-new-lab-machine/292728)
**Author:** [@rinnes](https://discuss.elastic.co/u/rinnes)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 5:30pm UTC](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-new-lab-machine/292728 "2021-12-22T17:30:28Z")
Hello, I'm still working through the course and my lab machine has shutdown. Is it possible to have a new lab machine started so I can finish the lab exercises? v/r, Ken --- ## [One or more required cgroup files or directories not found: /proc/self/cgroup, /sys/fs/cgroup/cpuacct, /sys/fs/cgroup/cpu](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup-sys-fs-cgroup-cpuacct-sys-fs-cgroup-cpu/292689)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 5:21pm UTC](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup-sys-fs-cgroup-cpuacct-sys-fs-cgroup-cpu/292689 "2021-12-22T17:21:14Z")
Hi Guys, I have logstash running on a windows machine. My inputs and parsers are set up correctly and everything works fine. The only issue I have - when I start the logstash process, it wont ingest files, instead it… --- ## [Elasticsearch 7.16.2 fails to start as service under windows server 2019](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708)
**Author:** [@yankun0567](https://discuss.elastic.co/u/yankun0567)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708 "2021-12-22T16:40:59Z")
Hi, I've just downloaded Elasticsearch 7.16.2 and installed it as a service under Windows Server 2019. Previously I had 7.10.2. running without any issues. If I'm trying to start the service, it fails with following er… --- ## [Elastic-agent : endpoint-security.sock no such file or directory](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293)
**Author:** [@Lnood5](https://discuss.elastic.co/u/Lnood5)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 4:08pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-security-sock-no-such-file-or-directory/292293 "2021-12-22T16:08:41Z")
Hello, I work with self-managed stack v7.16.1 I have a probleme with endpoint security deployment elastic-agent diagnostics give for endpoint this error: elastic-agent diagnostics \* name: endpoint-security … --- ## [Failed test QueueTest](https://discuss.elastic.co/t/failed-test-queuetest/292719)
**Author:** [@SirBouBou](https://discuss.elastic.co/u/SirBouBou)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 4:23pm UTC](https://discuss.elastic.co/t/failed-test-queuetest/292719 "2021-12-22T16:23:24Z")
Hi, I'm trying to discover Logstash and its uses to be able to contribute and help the community but I have a problem. When launching a ./gradlew test I have a timeout error for the concurrentWritesTest in the QueueTest… --- ## [Problem importing saved\_objects using api](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304)
**Author:** [@fkoene](https://discuss.elastic.co/u/fkoene)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 4:18pm UTC](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304 "2021-12-22T16:18:53Z")
I want to export saved\_objects and use the output file to import the objects in another space. The export goes well, the file can be imported by hand in the ELK GUI, but when I try importing it using the just exported f… --- ## [Uptime visualization only down monitors](https://discuss.elastic.co/t/uptime-visualization-only-down-monitors/292632)
**Author:** [@Rajesh\_Rai](https://discuss.elastic.co/u/Rajesh_Rai)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 4:16pm UTC](https://discuss.elastic.co/t/uptime-visualization-only-down-monitors/292632 "2021-12-22T16:16:11Z")
any idea how we can visualize uptime down monitors details only(not up monitors) --- ## [How to find the step names for each ILM action in each phases](https://discuss.elastic.co/t/how-to-find-the-step-names-for-each-ilm-action-in-each-phases/292662)
**Author:** [@Kannappan\_Somu](https://discuss.elastic.co/u/Kannappan_Somu)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 3:53pm UTC](https://discuss.elastic.co/t/how-to-find-the-step-names-for-each-ilm-action-in-each-phases/292662 "2021-12-22T15:53:05Z")
How to find the step names for each ILM action in each phases ? For example , how to find the sequence of step names for searchable snapshot action in cold phase ? I know that we can use ilm explain api, but that will… --- ## [Index routing allocation does appear to move shards over to specified node](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682 "2021-12-22T15:34:33Z")
I am trying to separate indexes so that they are assigned to specific nodes. I have been following this documentation in order to achieve that. I have an Elasticsearch cluster with 3 nodes. Each node has been given a … --- ## [SNMP input with MIB](https://discuss.elastic.co/t/snmp-input-with-mib/292673)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 3:29pm UTC](https://discuss.elastic.co/t/snmp-input-with-mib/292673 "2021-12-22T15:29:37Z")
"Hello. I´m trying to setup an snmp polling function in our Elasticsearch with Logstash. Today it is an "Proof of Concept" with only one 4G router from the vendor named Advantech. I have followed the instructions foun… --- ## [Logstash Internal API server error](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707 "2021-12-22T15:27:40Z")
I am receiving error in logstash after upgraded from 7.11.x to 7.16.1 this log is not frequent, I feel some action is generating that log but I am not sure which action is generating this error, My pipelines are proper… --- ## [Calculate time difference between two log lines - Logstash](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284)
**Author:** [@giancringo](https://discuss.elastic.co/u/giancringo)\ **Replies:** 4\ **Last updated:** [December 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284 "2021-12-22T14:56:34Z")
Hello, I'm looking for a solution to calculate the difference between two time on two different log lines as below: 2020-06-11 15:31:22,817 \[http-8080-0\] INFO it.example.sign.sign.SignTool - \[TYPE\] trackingID: x12e65… --- ## [Query suggestion performance time](https://discuss.elastic.co/t/query-suggestion-performance-time/292692)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 2:55pm UTC](https://discuss.elastic.co/t/query-suggestion-performance-time/292692 "2021-12-22T14:55:10Z")
I have a meta engine that contains 1.8 M docs im assuming that the size of the engine is around 1.5GB. i tried to tune as much as i can via UI result setting and adding gzip compression. The best result i got w… --- ## [How to filter in message this value "${date:"](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 5\ **Last updated:** [December 22, 2021, 2:54pm UTC](https://discuss.elastic.co/t/how-to-filter-in-message-this-value-date/292313 "2021-12-22T14:54:52Z")
Hi, is it possible to search for this string ${date: including the symbol '${:' in the message field? to date I have not succeeded . I have tried this: message:"${date:" but excludes ${: who can help me? Thanks! --- ## [Delete and recreate index in elasticsearch](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651)
**Author:** [@Vikrant1](https://discuss.elastic.co/u/Vikrant1)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651 "2021-12-22T14:17:51Z")
Hi All, Thanks for taking your time to read this query - I have to delete the existing index and the need to create same Index in Elasticsearch using the logstash config file before data loading start (reading from or… --- ## [Patch log4j vulnerability on Windows](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679)
**Author:** [@Erni](https://discuss.elastic.co/u/Erni)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679 "2021-12-22T14:15:09Z")
Hi, I was following instructions from: Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation But changed it to powershell commands as I am runnng elasticsearch on Windows: Copy-I… [Previous page](https://discuss.elastic.co/latest.md?page=1332) [Next page](https://discuss.elastic.co/latest.md?page=1334)