# Latest **URL:** https://discuss.elastic.co/latest.md?page=1348 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1349 --- ## [Transaction already created](https://discuss.elastic.co/t/transaction-already-created/291047)
**Author:** [@Pucky](https://discuss.elastic.co/u/Pucky)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 8:16am UTC](https://discuss.elastic.co/t/transaction-already-created/291047 "2021-12-14T08:16:58Z")
Hi all. I keep getting the following in syslog Elastic APM PHP Tracer \[PID: 3234\] 2021-12-03 11:57:31.455829+02:00 \[WARNING\] \[Public-API\] \[Tracer.php:224\] \[beginTransactionWithBuilder\] Received reque st to begin a new … --- ## [Trouble setting up Elastic Agent Fleet server on self-managed Elasticsearch setup](https://discuss.elastic.co/t/trouble-setting-up-elastic-agent-fleet-server-on-self-managed-elasticsearch-setup/291443)
**Author:** [@iamuser](https://discuss.elastic.co/u/iamuser)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 8:14am UTC](https://discuss.elastic.co/t/trouble-setting-up-elastic-agent-fleet-server-on-self-managed-elasticsearch-setup/291443 "2021-12-14T08:14:06Z")
hi all! I'm having a hard time setting up the elastic agent fleet server. The environment: single node Elasticsearch/wazuh installation with filebeat/metricbeat/heartbeat installed on the node host. I used to copy & past… --- ## [Dec 14th, 2021: \[en\] Leverage your data to build better search faster with curations powered by adaptive relevance](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470)
**Author:** [@isaacrlevin](https://discuss.elastic.co/u/isaacrlevin)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470 "2021-12-14T08:00:58Z")
The building blocks of building great search experiences Building a powerful search experience is a necessity for any applications that are built on top of data. Ensuring that the best results are delivered to users bas… --- ## [Using Elasticsearch as primary database](https://discuss.elastic.co/t/using-elasticsearch-as-primary-database/291694)
**Author:** [@Lylian1](https://discuss.elastic.co/u/Lylian1)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 5:01pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-primary-database/291694 "2021-12-13T17:01:53Z")
Some blogs say that Elasticsearch is reliable enough to be used as a primary database and some say that Elasticsearch has issues and can loose data. In order to implement a new project , we have as requirements: store… --- ## [Alert trigger monitor new index](https://discuss.elastic.co/t/alert-trigger-monitor-new-index/291757)
**Author:** [@Anatolii\_Huliaiev](https://discuss.elastic.co/u/Anatolii_Huliaiev)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 7:34am UTC](https://discuss.elastic.co/t/alert-trigger-monitor-new-index/291757 "2021-12-14T07:34:43Z")
I configured trigger inside my alerting panel of Kibana for processing events detected from logs which uses index and it worked fine for a month But after a month of successful work new indices was created by ELK an… --- ## [Kibana build from source always include xpack](https://discuss.elastic.co/t/kibana-build-from-source-always-include-xpack/290678)
**Author:** [@salamani](https://discuss.elastic.co/u/salamani)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 6:59am UTC](https://discuss.elastic.co/t/kibana-build-from-source-always-include-xpack/290678 "2021-12-14T06:59:18Z")
Hi, I am trying to build kibana 7.14.0 from source and would like to have only standard features (without the X-Pack feature). But somehow, I am to able to run yarn kbn bootstrap --oss, however yarn build --skip-os-pac… --- ## [Auditbeat настройка частоты сканирования](https://discuss.elastic.co/t/auditbeat/291753)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:59am UTC](https://discuss.elastic.co/t/auditbeat/291753 "2021-12-14T06:59:10Z")
Доброго дня! Моя цель получить точное количество логов по пути указанному в auditbeat в elastic для построения графика получения логов по дням в kibana. Проблема в том, что я получаю несколько дублей одного и того же л… --- ## [Regarding log4j with Elasticsearch 2.x which uses log4j 1.2](https://discuss.elastic.co/t/regarding-log4j-with-elasticsearch-2-x-which-uses-log4j-1-2/291751)
**Author:** [@nipun\_reddy](https://discuss.elastic.co/u/nipun_reddy)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:50am UTC](https://discuss.elastic.co/t/regarding-log4j-with-elasticsearch-2-x-which-uses-log4j-1-2/291751 "2021-12-14T06:50:47Z")
Hi All, I am looking for impact analysis of Elasticsearch 2.4.1 with the newly detected vulnerabilities. As per update from elastic, there is no impact on Elasticsearch 2 and below with cve-2021-44228. But based on CVE-2… --- ## [Esrally gets stuck on check-cluster-health](https://discuss.elastic.co/t/esrally-gets-stuck-on-check-cluster-health/291264)
**Author:** [@vtex](https://discuss.elastic.co/u/vtex)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 6:32am UTC](https://discuss.elastic.co/t/esrally-gets-stuck-on-check-cluster-health/291264 "2021-12-14T06:32:58Z")
Hi, I'm running a local/single-node esrally. My esrally version is 2.30. When I run the below command the execution hangs while checking the status of the cluster -- i.e. in check-cluster-health. $ esrally race --distr… --- ## [Issues with jvm lock](https://discuss.elastic.co/t/issues-with-jvm-lock/291318)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 9\ **Last updated:** [December 14, 2021, 6:25am UTC](https://discuss.elastic.co/t/issues-with-jvm-lock/291318 "2021-12-14T06:25:33Z")
Hello, I have below issues, after start Elasticsearch I see warnings "message": "Unable to lock JVM Memory: error=12, reason=Cannot allocate memory" "message": "This can result in part of the JVM being swapped out." "… --- ## [Translate Filter Error, Not Getting file Path?](https://discuss.elastic.co/t/translate-filter-error-not-getting-file-path/291590)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 6:25am UTC](https://discuss.elastic.co/t/translate-filter-error-not-getting-file-path/291590 "2021-12-14T06:25:08Z")
I am working on 7.14.1 Elasticsearch version. I am running it using docker-compose file. I have different files in json format. I am trying to read all those files in logstash config file but I am getting error. I think … --- ## [Data node vs level of data](https://discuss.elastic.co/t/data-node-vs-level-of-data/291708)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:46am UTC](https://discuss.elastic.co/t/data-node-vs-level-of-data/291708 "2021-12-14T05:46:47Z")
How do I equalize data levels between data nodes? --- ## [Count the occurrence of words in ElasticSearch](https://discuss.elastic.co/t/count-the-occurrence-of-words-in-elasticsearch/291595)
**Author:** [@Ashrut](https://discuss.elastic.co/u/Ashrut)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 5:20am UTC](https://discuss.elastic.co/t/count-the-occurrence-of-words-in-elasticsearch/291595 "2021-12-14T05:20:31Z")
Hello Everyone, I am a newbie in Elasticsearch. I was wondering if there is any technique to search for the count of occurrence of a word (or an array of words) in a document. For e.g. if I want to search for the arra… --- ## [Extracting fields from existing message field in windows logs](https://discuss.elastic.co/t/extracting-fields-from-existing-message-field-in-windows-logs/291705)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 4:55am UTC](https://discuss.elastic.co/t/extracting-fields-from-existing-message-field-in-windows-logs/291705 "2021-12-14T04:55:32Z")
Hi, I have winlogbeat that sends evtx files to logstash and than the output of logstash goes to elastic. In the windows event logs, there is a field named "message". the problem is that the field type is text, so i ca… --- ## [Elasticsearch upgrade using Ansible with https](https://discuss.elastic.co/t/elasticsearch-upgrade-using-ansible-with-https/291741)
**Author:** [@Roberto\_Chacon](https://discuss.elastic.co/u/Roberto_Chacon)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-using-ansible-with-https/291741 "2021-12-14T03:32:10Z")
Hello I have been following the following post, there is one response that provide an ansible script that seems to do all the magic. Question on Elasticsearch upgrade using Ansible I have found a blocker that my setup… --- ## [Configure filebeat to use API keys](https://discuss.elastic.co/t/configure-filebeat-to-use-api-keys/291726)
**Author:** [@bbangerter](https://discuss.elastic.co/u/bbangerter)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 12:58am UTC](https://discuss.elastic.co/t/configure-filebeat-to-use-api-keys/291726 "2021-12-14T00:58:06Z")
I have Elasticsearch, kibana, and filebeat (version 7.15.2 for all) running on a CentOS 8 machine using minimal security settings. I now want to get it working with TLS enabled. I have Elasticsearch and kibana working w… --- ## [Regression: Painless script fails for BinaryOperator lamdba](https://discuss.elastic.co/t/regression-painless-script-fails-for-binaryoperator-lamdba/291714)
**Author:** [@Sebastian\_Bathke](https://discuss.elastic.co/u/Sebastian_Bathke)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 11:24pm UTC](https://discuss.elastic.co/t/regression-painless-script-fails-for-binaryoperator-lamdba/291714 "2021-12-13T23:24:56Z")
Hey there, we noticed previously working painless scripts that make use of the Java Stream API passing lamdbas for BinaryOperator parameters to fail with Elasticsearch 7.16.0 onwards. E.g. the following sample works fi… --- ## [Filebeat multiline config not working](https://discuss.elastic.co/t/filebeat-multiline-config-not-working/290383)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 10:40pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-not-working/290383 "2021-12-13T22:40:30Z")
I have a 3rd party app that spits out a text file with multiple lines for a single event. An event has a consistent start line and an end line. I have tried filebeat configurations that grab everything after a specific … --- ## [Data displayed in Watcher email having issue with float values](https://discuss.elastic.co/t/data-displayed-in-watcher-email-having-issue-with-float-values/291722)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 10:20pm UTC](https://discuss.elastic.co/t/data-displayed-in-watcher-email-having-issue-with-float-values/291722 "2021-12-13T22:20:31Z")
Hi, I am new to Elasticsearch cloud. I have used aggregations in watchers to accumulate a float field. But the value of the aggregated amount is displaying incorrectly The value should be displayed as 10,800,050 but i… --- ## [Kibana converting to dubble](https://discuss.elastic.co/t/kibana-converting-to-dubble/291521)
**Author:** [@amjad-alarori](https://discuss.elastic.co/u/amjad-alarori)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 9:44pm UTC](https://discuss.elastic.co/t/kibana-converting-to-dubble/291521 "2021-12-13T21:44:47Z")
im trying to upload a csv file in kibana with fields of type "long", but somehow it convert to type "dubble" i see this error when i brows the Analysis explanation: --- ## ["invalid sequence of tokens near \['for'\]" error in painless script query](https://discuss.elastic.co/t/invalid-sequence-of-tokens-near-for-error-in-painless-script-query/291709)
**Author:** [@aashini](https://discuss.elastic.co/u/aashini)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 7:45pm UTC](https://discuss.elastic.co/t/invalid-sequence-of-tokens-near-for-error-in-painless-script-query/291709 "2021-12-13T19:45:40Z")
I an getting error while executing this script query using Nest : new ScriptQuery { Lang = "painless", … --- ## [Query text with White space](https://discuss.elastic.co/t/query-text-with-white-space/291078)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 7:20pm UTC](https://discuss.elastic.co/t/query-text-with-white-space/291078 "2021-12-13T19:20:41Z")
Hey i want to query text that include white space as single term for example los angeles I've tried some of Lucene options but fetch wrong docs. "query": "Los \\\\ Ange\*" "query": "Los\* Ange\*", "query":… --- ## [Best browser for Kibana 7.16](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 7:08pm UTC](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703 "2021-12-13T19:08:30Z")
Hello everyone, Which browser is best compatible with Kibana 7.16 ? I know that Internet explorer is old now and should use latest browsers like Google Chrome or Microsoft Edge. But is there any explanation about that … --- ## [Logstash - OutOfMemoryError from TCP input](https://discuss.elastic.co/t/logstash-outofmemoryerror-from-tcp-input/291702)
**Author:** [@vishnug](https://discuss.elastic.co/u/vishnug)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 6:38pm UTC](https://discuss.elastic.co/t/logstash-outofmemoryerror-from-tcp-input/291702 "2021-12-13T18:38:38Z")
Hi, I have a logstash pipeline that uses TCP as input. The pipeline handles around 150k to 200k events per day. I was getting the below errors. An exception was thrown by org.logstash.tcp.InputLoop$InputHandler$FlushOn… --- ## [Heartbeat.yml nano error](https://discuss.elastic.co/t/heartbeat-yml-nano-error/291680)
**Author:** [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Replies:** 3\ **Last updated:** [December 13, 2021, 6:25pm UTC](https://discuss.elastic.co/t/heartbeat-yml-nano-error/291680 "2021-12-13T18:25:17Z")
The lab says to type "nano heartbeat". When I do that all I get is gibberish (see attached). I figured out that if you type instead "nano heartbeat.yml" that it opens properly. --- ## [Can't get nodes communicate to each other via TLS-secured transport](https://discuss.elastic.co/t/cant-get-nodes-communicate-to-each-other-via-tls-secured-transport/291676)
**Author:** [@v\_melnyk](https://discuss.elastic.co/u/v_melnyk)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 6:00pm UTC](https://discuss.elastic.co/t/cant-get-nodes-communicate-to-each-other-via-tls-secured-transport/291676 "2021-12-13T18:00:18Z")
Hello, I have a question regarding deploying of a cluster of nodes and stuck with an inter-node communications issue. It seems that my mistake and the solution are pretty obvious, but somewhy I can't grasp what exactly … --- ## [How to re-name multiple field names at once in logstash](https://discuss.elastic.co/t/how-to-re-name-multiple-field-names-at-once-in-logstash/291599)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-re-name-multiple-field-names-at-once-in-logstash/291599 "2021-12-13T17:45:14Z")
Hie All, I want to rename fields names from this : "\[url\]\[path\]" =\> to "url path" and "\[server\]\[domain\]" =\> "Server domain" We can use mutate filter plugin (as mutate uses lot of cpu) ,but I have nearly 50 fields name… --- ## [Elasticsearch on Kubernetes not able to authenticate to azure container registry](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-not-able-to-authenticate-to-azure-container-registry/291682)
**Author:** [@JaydeepUniverse](https://discuss.elastic.co/u/JaydeepUniverse)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 5:30pm UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-not-able-to-authenticate-to-azure-container-registry/291682 "2021-12-13T17:30:10Z")
I have created custom docker image of Elasticsearch which contains some plugins. Then published this docker image to azure container registry. Then I configured Elasticsearch spec as below apiVersion: elasticsearch.k8s.… --- ## [CSV MalformedCSVError: Illegal quoting in line](https://discuss.elastic.co/t/csv-malformedcsverror-illegal-quoting-in-line/291639)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 4:59pm UTC](https://discuss.elastic.co/t/csv-malformedcsverror-illegal-quoting-in-line/291639 "2021-12-13T16:59:45Z")
I have used CSV filter to log the events my sample data is 2021-12-09 12:12:09,155 INFO com.tdg.box.incrindex.service.PastEventProcessor \[Thread-14\] Captured Event false dbf5b71c-faa1-4e73-b8db-bf057002e3f5 UPLOAD 1747… --- ## [Mapping Strategies For Survey Data](https://discuss.elastic.co/t/mapping-strategies-for-survey-data/291481)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 4:58pm UTC](https://discuss.elastic.co/t/mapping-strategies-for-survey-data/291481 "2021-12-13T16:58:55Z")
I am ingesting data and looking for opinions on better ways of indexing the data for later aggregation analytics. The data is currently pulled and stored in Elasticsearch as numbered q&a fields. { "question1": { … [Previous page](https://discuss.elastic.co/latest.md?page=1347) [Next page](https://discuss.elastic.co/latest.md?page=1349)