# Latest **URL:** https://discuss.elastic.co/latest.md?page=1398 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1399 --- ## [Running cold tier on NFS storage](https://discuss.elastic.co/t/running-cold-tier-on-nfs-storage/288707)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 4:51am UTC](https://discuss.elastic.co/t/running-cold-tier-on-nfs-storage/288707 "2021-11-09T04:51:48Z")
Hi, I understand that NFS storage should be avoided. However, my task was to write fresh data into HOT SSD and potential spill to WARM spin disk. The NFS storage will be used as COLD tier with very minimal write. Does … --- ## [Filebeat running but now showing iis logs in elasticsearch](https://discuss.elastic.co/t/filebeat-running-but-now-showing-iis-logs-in-elasticsearch/288701)
**Author:** [@mehmood1](https://discuss.elastic.co/u/mehmood1)\ **Replies:** 5\ **Last updated:** [November 9, 2021, 4:02am UTC](https://discuss.elastic.co/t/filebeat-running-but-now-showing-iis-logs-in-elasticsearch/288701 "2021-11-09T04:02:49Z")
filebeat and elasticsearch running but now showing iis logs in in browser url http://172.xx.x.xxx:9200/filebeat-\*/\_count?pretty below is my config files { "count" : 0, "\_shards" : { "total" : 0, "successful" : 0, … --- ## [How to manage large messages with a few memory?](https://discuss.elastic.co/t/how-to-manage-large-messages-with-a-few-memory/288677)
**Author:** [@Jesus\_Alberto\_Carril](https://discuss.elastic.co/u/Jesus_Alberto_Carril)\ **Replies:** 4\ **Last updated:** [November 9, 2021, 3:55am UTC](https://discuss.elastic.co/t/how-to-manage-large-messages-with-a-few-memory/288677 "2021-11-09T03:55:17Z")
I have a problem. My JVM logstash only has 512M in it configurations: -Xms256m -Xmx512m Logstash read messages from mylog.json and send them to my broker. BUT when a super large message is written in my mylog.json the… --- ## [Esrally will hang if I use elasticsearch 8.0.0-alpha1](https://discuss.elastic.co/t/esrally-will-hang-if-i-use-elasticsearch-8-0-0-alpha1/288082)
**Author:** [@shankang](https://discuss.elastic.co/u/shankang)\ **Replies:** 11\ **Last updated:** [November 9, 2021, 3:39am UTC](https://discuss.elastic.co/t/esrally-will-hang-if-i-use-elasticsearch-8-0-0-alpha1/288082 "2021-11-09T03:39:10Z")
Hi, My OS is Ubuntu 21.04. esrally will hang when I tried the following command. esrally --pipeline=from-distribution --distribution-version=8.0.0-alpha1 --track=geonames --challenge=append-no-conflicts --include-tasks… --- ## [IIS logs showing as a string](https://discuss.elastic.co/t/iis-logs-showing-as-a-string/288470)
**Author:** [@Venu1](https://discuss.elastic.co/u/Venu1)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 3:21am UTC](https://discuss.elastic.co/t/iis-logs-showing-as-a-string/288470 "2021-11-09T03:21:24Z")
Hello all, I'm a newbie to ELK, I'm able to send the IIS logs and other application logs to the Elastic Kibana from the servers directly without logstash, IIS logs are showing up one string in the Elastic Kibana, I woul… --- ## [JVM setting](https://discuss.elastic.co/t/jvm-setting/287954)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [November 9, 2021, 1:49am UTC](https://discuss.elastic.co/t/jvm-setting/287954 "2021-11-09T01:49:56Z")
What should be prefer jvm option for cluster? using elasicsearch java three node x 100gig ram each, 20core each host -Xms24g -Xmx24g -XX:+UseG1GC -XX:G1ReservePercent=25 -XX:InitiatingHeapOccupancyPercent=30 or follo… --- ## [Catenate\_numbers - way to avoid joining on space and comma?](https://discuss.elastic.co/t/catenate-numbers-way-to-avoid-joining-on-space-and-comma/288690)
**Author:** [@fcntl](https://discuss.elastic.co/u/fcntl)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 1:19am UTC](https://discuss.elastic.co/t/catenate-numbers-way-to-avoid-joining-on-space-and-comma/288690 "2021-11-09T01:19:24Z")
catenate\_numbers is useful for joining numbers separated by hyphen, as it allows a non-segmented search term to match against segmented numbers in the document, e.g. Document: 02 6287-1455 Search term: 0262871455 (wil… --- ## [Increased latency with query cache](https://discuss.elastic.co/t/increased-latency-with-query-cache/288619)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 12:34am UTC](https://discuss.elastic.co/t/increased-latency-with-query-cache/288619 "2021-11-09T00:34:59Z")
Cluster stats: Version: OpenDistro 6.8.17 Elasticsearch: 6 data nodes, 202 primary shards, 412 total shards CPU model: Intel(R) Xeon(R) Gold 6248 CPU @ 2.50GHz CPU total logical cores: 8 Memory : 32GB (16gb heap) H… --- ## [\[ES 2.4\] cluster ignores docker-compose variables](https://discuss.elastic.co/t/es-2-4-cluster-ignores-docker-compose-variables/288530)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 6\ **Last updated:** [November 8, 2021, 11:44pm UTC](https://discuss.elastic.co/t/es-2-4-cluster-ignores-docker-compose-variables/288530 "2021-11-08T23:44:45Z")
Hey there, Is it possible to set environment variables using docker-compose on Elasticsearch 2.4.4? I am trying to set cluster-name with classic method environment: - cluster-name=test but the cluster is ignoring … --- ## [How to load dashboard when Kibana starts](https://discuss.elastic.co/t/how-to-load-dashboard-when-kibana-starts/288596)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 11:31pm UTC](https://discuss.elastic.co/t/how-to-load-dashboard-when-kibana-starts/288596 "2021-11-08T23:31:43Z")
Hi team, Please help me on this. I want to load some dashboard when Kibana starts. I have created a dashboard, but I want to provide the dashboard along with build. I'm not supposed to touch the Kibana. Elastic mappin… --- ## [OIDC SocketTimeoutException](https://discuss.elastic.co/t/oidc-sockettimeoutexception/288685)
**Author:** [@ibrooes](https://discuss.elastic.co/u/ibrooes)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 11:18pm UTC](https://discuss.elastic.co/t/oidc-sockettimeoutexception/288685 "2021-11-08T23:18:54Z")
Getting this error message in logs. Does anyone have an idea what could this be indicating? I have checked my token endpoint through postman, and it works. \[instance-0000000001\] Authentication to realm oidc1 failed - F… --- ## [ARM64 builds for Elasticsearch 5.6?](https://discuss.elastic.co/t/arm64-builds-for-elasticsearch-5-6/288665)
**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 10:58pm UTC](https://discuss.elastic.co/t/arm64-builds-for-elasticsearch-5-6/288665 "2021-11-08T22:58:49Z")
We are unfortunately stuck on Es5 for the foreseeable future... and I just got a new M1 MacBook. Neither of these commands work. docker run --rm --platform linux/amd64 elasticsearch:5.6.16 docker run --rm --platform li… --- ## [Daylight saving time impacting only part of the environment](https://discuss.elastic.co/t/daylight-saving-time-impacting-only-part-of-the-environment/288622)
**Author:** [@phdsantos](https://discuss.elastic.co/u/phdsantos)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 9:03pm UTC](https://discuss.elastic.co/t/daylight-saving-time-impacting-only-part-of-the-environment/288622 "2021-11-08T21:03:14Z")
Hello everyone, we are facing a strange behavior in ELK environment related to daylight saving time; the details are below: Platform: kibana 6.7.2 Logstash 5.3.0 Elasticsearch 6.7.2 Scenario: We have Weblogic domai… --- ## [The data table in the dashboard does not support click sorting](https://discuss.elastic.co/t/the-data-table-in-the-dashboard-does-not-support-click-sorting/288479)
**Author:** [@Pad0y](https://discuss.elastic.co/u/Pad0y)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 8:51pm UTC](https://discuss.elastic.co/t/the-data-table-in-the-dashboard-does-not-support-click-sorting/288479 "2021-11-08T20:51:06Z")
In kibana 7.x, the dashboard cannot be sorted by clicking on the table header --- ## [Aggregate APM metrics to another index](https://discuss.elastic.co/t/aggregate-apm-metrics-to-another-index/288654)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 6:50pm UTC](https://discuss.elastic.co/t/aggregate-apm-metrics-to-another-index/288654 "2021-11-08T18:50:49Z")
I created a SaaS application and I'm using APM to track metrics (both server side Java and client side Angular). APM is an incredible tool and it tracks very well. I track transactions and spans, but spans are useful fo… --- ## [Group by latest Plus Aggregation for Analysis or Delete old records](https://discuss.elastic.co/t/group-by-latest-plus-aggregation-for-analysis-or-delete-old-records/288663)
**Author:** [@Ahmed\_Mousa](https://discuss.elastic.co/u/Ahmed_Mousa)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 6:03pm UTC](https://discuss.elastic.co/t/group-by-latest-plus-aggregation-for-analysis-or-delete-old-records/288663 "2021-11-08T18:03:39Z")
Hello everyone, I am trying to get statistics from my elastic on some filters. I managed to get some using this: GET \/\_search { "query": { "bool": {"must":\[ {"terms":{"type.keyword":\[ "video", "tex… --- ## [Python Client : Receive illegal\_argument\_exception error when trying to create an index template](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 5:55pm UTC](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457 "2021-11-08T17:55:15Z")
Hi, I am trying to create an index template to use it for my data stream. I use this command to create the template: es = client.Elasticsearch(\['\_host\_name'\], http\_auth=('user', 'psw'), port=\_port, scheme='https', tim… --- ## [Elasticsearch cardinality aggregation not returning accurate numbers despite using precision\_threshold](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-not-returning-accurate-numbers-despite-using-precision-threshold/288632)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-not-returning-accurate-numbers-despite-using-precision-threshold/288632 "2021-11-08T17:10:15Z")
Hi folks, I am trying to show unique count in a metric and observed that the numbers are wrong. Setup: I ​used enhanced table visualisation and did a "unique count" of keyword type field. in advanced setting I used {"… --- ## [Multiple data sources over same port](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598)
**Author:** [@IsaacKr](https://discuss.elastic.co/u/IsaacKr)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 5:05pm UTC](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598 "2021-11-08T17:05:31Z")
We are ingesting data from multiple data sources over port 514 and using Logstash to ship them out to multiple destinations. Is there a way to tag ingested data based on source IP so that it can be forwarded to the corre… --- ## [Is it possible to ignore documents that exceeds index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/is-it-possible-to-ignore-documents-that-exceeds-index-mapping-nested-objects-limit/288538)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 4:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-ignore-documents-that-exceeds-index-mapping-nested-objects-limit/288538 "2021-11-08T16:43:27Z")
Hi, we have a transform that writes into a destination index, that includes a nested field. the transform failed because of the index.mapping.nested\_objects.limit. is there a way to ignore/processing/writing/updating … --- ## [Transform and Aggregate Index with an Index Rate of 200k/s](https://discuss.elastic.co/t/transform-and-aggregate-index-with-an-index-rate-of-200k-s/288286)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 4:39pm UTC](https://discuss.elastic.co/t/transform-and-aggregate-index-with-an-index-rate-of-200k-s/288286 "2021-11-08T16:39:23Z")
We are thinking about gathering our DNS traffic via packetbeat and create statistics out of the collected data. Currently we have a query rate of about 200k/s and growing... Because of the tremendous amount of data, we w… --- ## [What are the "Elastic security features" that are referred to in the \_cat/indices doc page?](https://discuss.elastic.co/t/what-are-the-elastic-security-features-that-are-referred-to-in-the-cat-indices-doc-page/288578)
**Author:** [@astanton1978](https://discuss.elastic.co/u/astanton1978)\ **Replies:** 6\ **Last updated:** [November 8, 2021, 4:27pm UTC](https://discuss.elastic.co/t/what-are-the-elastic-security-features-that-are-referred-to-in-the-cat-indices-doc-page/288578 "2021-11-08T16:27:42Z")
cat indices API | Elasticsearch Guide \[8.11\] | Elastic says If the Elasticsearch security features are enabled, you must have the monitor or manage cluster privilege to use this API. ... but there is no link to what… --- ## [Training query](https://discuss.elastic.co/t/training-query/288428)
**Author:** [@Mark3](https://discuss.elastic.co/u/Mark3)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 4:26pm UTC](https://discuss.elastic.co/t/training-query/288428 "2021-11-08T16:26:56Z")
When I move from the OBs ENG labs (2.2-2.3) I can no longer see the data metrics from both mysqk and petclinic...one or the other? is this an ongoing issue? Cheers, Mark --- ## [Does Heartbeat Support Data Stream?](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602)
**Author:** [@Ray\_Lin](https://discuss.elastic.co/u/Ray_Lin)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 4:00pm UTC](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602 "2021-11-08T16:00:46Z")
Hi Team, I want to use data stream instead of ILM to manage the data from Heartbeat. But it seems the document didn't mention related setting about data stream. Does Heartbeat supports data stream? --- ## [Waiting for a quote (Gold license Elastic Stack on Kubernetes)](https://discuss.elastic.co/t/waiting-for-a-quote-gold-license-elastic-stack-on-kubernetes/288631)
**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 3:59pm UTC](https://discuss.elastic.co/t/waiting-for-a-quote-gold-license-elastic-stack-on-kubernetes/288631 "2021-11-08T15:59:43Z")
Hello there, me and my company are waiting for a quote for many weeks now. We have a self managed Elastic Cloud on Kubernetes cluster running. Want to buy a gold license for a 3 node environment. I started here Offizie… --- ## [Unable to associate to elasticsearch on kibana](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050)
**Author:** [@KypMon](https://discuss.elastic.co/u/KypMon)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050 "2021-11-08T15:36:42Z")
basically just following this code sample: # Install OLM (Operator Lifecycle Management) kubectl apply -f https://github.com/operator-framework/operator-lifecycle-manager/releases/download/0.16.1/crds.yaml kubectl apply… --- ## [Jdbc\_streming and prepared statement](https://discuss.elastic.co/t/jdbc-streming-and-prepared-statement/288647)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-streming-and-prepared-statement/288647 "2021-11-08T14:56:21Z")
Hi , I'm trying to use a prepared statement in jdbc\_streaming filter, I setuped the prepared statement on mySql instance using this commands: PREPARE lookup\_persone FROM 'SELECT persone.id, persone.nome AS nome\_person… --- ## [TSL configuration](https://discuss.elastic.co/t/tsl-configuration/288548)
**Author:** [@SabriMahmoud](https://discuss.elastic.co/u/SabriMahmoud)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 3:06pm UTC](https://discuss.elastic.co/t/tsl-configuration/288548 "2021-11-08T15:06:54Z")
Note : My version of Elasticsearch is 7.15.0 I'm new to Elasticsearch , I'm trying to use Kibana alerts , to do that I must create a Rule and a Connector but when I've selected that field I've been got informed to en… --- ## [Kibana server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/288560)
**Author:** [@dat\_nguyen](https://discuss.elastic.co/u/dat_nguyen)\ **Replies:** 17\ **Last updated:** [November 8, 2021, 2:57pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/288560 "2021-11-08T14:57:02Z")
Dear everyone, Could you please help me solve a problem "kibana server not ready yet" although Elasticsearch and kibana service is running. Attached is the kibana log file. Thank you so much for your help --- ## [Text not stemmed after inserted in the index with language specific analyzer](https://discuss.elastic.co/t/text-not-stemmed-after-inserted-in-the-index-with-language-specific-analyzer/288645)
**Author:** [@makons](https://discuss.elastic.co/u/makons)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 2:52pm UTC](https://discuss.elastic.co/t/text-not-stemmed-after-inserted-in-the-index-with-language-specific-analyzer/288645 "2021-11-08T14:52:12Z")
I have 2 fields in my index, one containing the standardly analyzed content, while the other one uses a german analyzer. However, when I insert documents, they don't seem to be stemmed at all, even though they should be … [Previous page](https://discuss.elastic.co/latest.md?page=1397) [Next page](https://discuss.elastic.co/latest.md?page=1399)