# Latest **URL:** https://discuss.elastic.co/latest.md?page=1430 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1431 --- ## [Default values for value interpolation in autodiscovery](https://discuss.elastic.co/t/default-values-for-value-interpolation-in-autodiscovery/286950)
**Author:** [@gwvandesteeg](https://discuss.elastic.co/u/gwvandesteeg)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 5:27am UTC](https://discuss.elastic.co/t/default-values-for-value-interpolation-in-autodiscovery/286950 "2021-10-18T05:27:15Z")
Is there a way to specify a default value for a value interpolation in the metricbeat configuration. For example: modules.autodiscover: providers: # prometheus resource auto discovery - ty… --- ## [Setup repository on cluster across two servers](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:15am UTC](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945 "2021-10-18T05:15:52Z")
Hello, I have a cluster set up on two servers, Node master and coordination on IP 10.10.10.1. Node data on IP 10.10.10.2. I want to set up repository on my cluster, here is my question How I can declare my path.repo… --- ## [Delete all data streams when delete index through data stream API](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:06am UTC](https://discuss.elastic.co/t/delete-all-data-streams-when-delete-index-through-data-stream-api/286804 "2021-10-18T05:06:06Z")
I have index "test-index", and other data streams but "test index" data stream. When I try to delete this "test-index" index through data stream API (and "test-index" data stream does not exist), I get "acknowledge: tru… --- ## [How can I build a claster from two independent Elastic Servers?](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798 "2021-10-18T04:33:37Z")
Hi, I have two independent Elastic Servers in my business. I know the steeps I have to do to set up the cluster, the question is what will happens with the data of both servers when I create the cluster? Will I lose i… --- ## [Update elasticsearch index mapping through script or curl command](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905)
**Author:** [@prataprajasekhar](https://discuss.elastic.co/u/prataprajasekhar)\ **Replies:** 8\ **Last updated:** [October 18, 2021, 4:30am UTC](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905 "2021-10-18T04:30:40Z")
Dear Team, We are trying to update an index using below method in kibana dev console. Can you please let me know the method to be followed either using curl method or wget method or via a python or shell script to upda… --- ## [Checking query efficiency tool](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944)
**Author:** [@eylon\_koren](https://discuss.elastic.co/u/eylon_koren)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 4:12am UTC](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944 "2021-10-18T04:12:58Z")
Hi! I am providing accessibility to search on ES for our customers. Some of them are creating inefficient queries, which uses wildcard at the start of a sentence or without any field specified. I would like to find th… --- ## [Else conditional in ingest pipeline](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 9\ **Last updated:** [October 18, 2021, 3:55am UTC](https://discuss.elastic.co/t/else-conditional-in-ingest-pipeline/286697 "2021-10-18T03:55:58Z")
Hello, I want to make else conditional on my ingest pipeline, here's pipeline I've made: PUT \_ingest/pipeline/pipeline-test { "processors": \[ { "pipeline":{ "description": "check field1 to output to … --- ## [Metricbeat on kubernetes, conflicting configurations](https://discuss.elastic.co/t/metricbeat-on-kubernetes-conflicting-configurations/286585)
**Author:** [@gwvandesteeg](https://discuss.elastic.co/u/gwvandesteeg)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 2:20am UTC](https://discuss.elastic.co/t/metricbeat-on-kubernetes-conflicting-configurations/286585 "2021-10-18T02:20:17Z")
Been looking at the way to deploy Metricbeat onto our kubernetes cluster and I've been finding conflicting information from two sources. references the material at https://raw.githubusercontent.com/elastic/beats/7.15/… --- ## [日本語を含むダッシュボードでレポート出力すると文字化けする](https://discuss.elastic.co/t/topic/286939)
**Author:** [@air-hayashi](https://discuss.elastic.co/u/air-hayashi)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 12:31am UTC](https://discuss.elastic.co/t/topic/286939 "2021-10-18T00:31:59Z")
日本語を含んだダッシュボードからレポート出力すると、日本語の箇所が文字化けしてしまいます。 ダッシュボードでは問題なく表示できておりますが、レポート出力したPDFやPNGファイルでは文字化けしています。 設定変更等で解決できるかご教示いただけないでしょうか。 RHEL8.2でElastic 7.14を使用しております。 ダッシュボード PDF --- ## [Ingesting Web Services API data into Elasticsearch without a database](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878)
**Author:** [@rvalle](https://discuss.elastic.co/u/rvalle)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 1:40am UTC](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878 "2021-10-18T01:40:24Z")
I’m new to this forum as well as to Elasticsearch. I just recently started exploring how Elasticsearch works and if it can solve a problem. I am trying to find a solution to the following scenario: I have a web servic… --- ## [Es\_rejected\_execution\_exception -](https://discuss.elastic.co/t/es-rejected-execution-exception/286901)
**Author:** [@Paulo\_Eduardo\_Bitar](https://discuss.elastic.co/u/Paulo_Eduardo_Bitar)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 1:07am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception/286901 "2021-10-18T01:07:30Z")
Hi, I just started learning Elastic and I have already found a problem. I am running Elastic in a Docker and trying to execute this curl -H 'Content-Type: application/json' -XPOST '127.0.0.1:9200/shakespeare/\_bulk?prett… --- ## [Invalid url](https://discuss.elastic.co/t/invalid-url/286814)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 12:46am UTC](https://discuss.elastic.co/t/invalid-url/286814 "2021-10-18T00:46:56Z")
Hi I'm getting invalid url error in Logstash. My config: http\_poller { urls =\> { executedsteps =\> { method =\> get cacert =\> "/elk-stack/cert.pem" url =\> "https://odata-trial.… --- ## [Winlogbeat dont connect setup kibana](https://discuss.elastic.co/t/winlogbeat-dont-connect-setup-kibana/286854)
**Author:** [@PELK](https://discuss.elastic.co/u/PELK)\ **Replies:** 0\ **Last updated:** [October 15, 2021, 2:26pm UTC](https://discuss.elastic.co/t/winlogbeat-dont-connect-setup-kibana/286854 "2021-10-15T14:26:48Z")
salut a tous j'essaie de "connecter" winlogbeat a Elasticsearch pour ca j'ai configurer le setup et le output de winlogbeat mais quand je teste sont setup il m'affiche une erreur winlogbeat.yml : ######################… --- ## [ElasticSearch Nest query returning Null values for every field?](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796 "2021-10-17T23:28:31Z")
I finally got my Nest client set up, however, the results of every field are populated as null instead of the expected values. I looked at these c# - ElasticSearch NEST - all fields are NULL - Stack Overflow and c# - NE… --- ## [How to prevent a single node slowing down queries where it acts as the coordinator?](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937)
**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 9:20pm UTC](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937 "2021-10-17T21:20:32Z")
As per my understanding, clients do not have a server-preference for sending read queries and do either a round-robin or a random client selection. If so, then each server acts as a coordinator node (one that scatter-ga… --- ## [Warnings when service starts](https://discuss.elastic.co/t/warnings-when-service-starts/286928)
**Author:** [@aakerbeere](https://discuss.elastic.co/u/aakerbeere)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 9:16pm UTC](https://discuss.elastic.co/t/warnings-when-service-starts/286928 "2021-10-17T21:16:41Z")
fyi I get warnings when Elasticsearch.service starts. Don't know if this is important but it's considering reporting to the maintainers, which is done herewith. Elasticsearch aarch64 (RPi4). openjdk version "11.0.12" 2… --- ## [How to process these NginX logs? Grok error](https://discuss.elastic.co/t/how-to-process-these-nginx-logs-grok-error/286920)
**Author:** [@stijnos1991](https://discuss.elastic.co/u/stijnos1991)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 1:56pm UTC](https://discuss.elastic.co/t/how-to-process-these-nginx-logs-grok-error/286920 "2021-10-17T13:56:44Z")
Hello! I'm pretty new to ELK, but I have theoretical and practical background in Cyber Security. As a hobby project I'm trying to setup a simple SIEM, or log collector at home to see how the ELK stack is configured. In… --- ## [Is Elasticsearch good for such a problem?](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917)
**Author:** [@Michal\_Szymanski](https://discuss.elastic.co/u/Michal_Szymanski)\ **Replies:** 2\ **Last updated:** [October 17, 2021, 12:23pm UTC](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917 "2021-10-17T12:23:18Z")
Hi, We have been thinking about choosing the right technology for our problem for a long time. The problem is as follows: we will have tens of millions of JSON documents documents will contain any number of "entry" s… --- ## [Elasticsearch plugin to do search requests](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923)
**Author:** [@ali\_kh](https://discuss.elastic.co/u/ali_kh)\ **Replies:** 3\ **Last updated:** [October 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923 "2021-10-17T11:46:55Z")
I want to build an ES plugin to do index search requests, what type of plugins can I use? and is there some tutorial or documentation for that? Thanks --- ## [HighLevelRestClient (Java) - Client does not shut down after async requests](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836)
**Author:** [@codingchili](https://discuss.elastic.co/u/codingchili)\ **Replies:** 4\ **Last updated:** [October 17, 2021, 10:46am UTC](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836 "2021-10-17T10:46:30Z")
Hello, I'm unable to close the threadpool that is backing the HighLevelRestClient. Whenever my framework fails to deploy a part of the application or just for a graceful shutdown, I need the threadpool to shutdown to al… --- ## [Logstash-keystore Java error](https://discuss.elastic.co/t/logstash-keystore-java-error/286925)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 10:02am UTC](https://discuss.elastic.co/t/logstash-keystore-java-error/286925 "2021-10-17T10:02:28Z")
Hi, I have a problem when running logstash-keystore Windows command line: bin\\logstash-keystore create Does not work and returns the information: "Using boundled JDK:" Cannot find Java 1.5 or higher However... b… --- ## [How do I get the dns.request.registerd\_name field?](https://discuss.elastic.co/t/how-do-i-get-the-dns-request-registerd-name-field/286883)
**Author:** [@polarfox](https://discuss.elastic.co/u/polarfox)\ **Replies:** 5\ **Last updated:** [October 17, 2021, 9:10am UTC](https://discuss.elastic.co/t/how-do-i-get-the-dns-request-registerd-name-field/286883 "2021-10-17T09:10:14Z")
Hello all, I've recently started getting familiar with Elastic Security. I'm currently using the 14-day free trial and I have a very small setup with a single Windows 10 machine enrolled as an agent. When I click on Se… --- ## [Compile mips64 "io/fs" error](https://discuss.elastic.co/t/compile-mips64-io-fs-error/286907)
**Author:** [@alg42](https://discuss.elastic.co/u/alg42)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 4:43am UTC](https://discuss.elastic.co/t/compile-mips64-io-fs-error/286907 "2021-10-17T04:43:42Z")
I'm trying to compile metricbeat to run on a Ubiquiti Unifi Security Gateway (mips64). I also get the same error when trying to do filebeat. build github.com/elastic/beats/v7/metricbeat: cannot load io/fs: malformed mo… --- ## [Named multi match query](https://discuss.elastic.co/t/named-multi-match-query/286904)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 3:35am UTC](https://discuss.elastic.co/t/named-multi-match-query/286904 "2021-10-17T03:35:59Z")
Hello everyone , I need a hand here. I have a cross\_fields multi\_match query and I need to use named queries for each field. I can rewrite it into a bool/should match but then I dont know how to reproduce the cross\_field… --- ## [Cannot setup cluster of ES with Docker of 2 EC2 machines on 3 nodes](https://discuss.elastic.co/t/cannot-setup-cluster-of-es-with-docker-of-2-ec2-machines-on-3-nodes/286890)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 4\ **Last updated:** [October 16, 2021, 6:29pm UTC](https://discuss.elastic.co/t/cannot-setup-cluster-of-es-with-docker-of-2-ec2-machines-on-3-nodes/286890 "2021-10-16T18:29:53Z")
Im trying to setup 3 nodes on 2 machines as the following configuration. following the doc - Install Elasticsearch with Docker | Elasticsearch Guide \[7.15\] | Elastic (run this script on each machine) services: es01:… --- ## [Can not upload synonyms file in the elastic cloud](https://discuss.elastic.co/t/can-not-upload-synonyms-file-in-the-elastic-cloud/286888)
**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\ **Replies:** 5\ **Last updated:** [October 16, 2021, 6:27pm UTC](https://discuss.elastic.co/t/can-not-upload-synonyms-file-in-the-elastic-cloud/286888 "2021-10-16T18:27:43Z")
Can you help me to upload synonyms and stop word files in cloud ? After doing some googling i found this this link, and successfully add a custom extension but i can not enable them for existing Elasticsearch deployments… --- ## [JSON Parse error: Illegal unquoted character](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 1\ **Last updated:** [October 16, 2021, 4:08pm UTC](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894 "2021-10-16T16:08:31Z")
Hello, I am using rsyslog to send my auditd logs to logstash. Before reaching logstash, an rsyslog template is applied for better formatting. I run into an error here jsonlines - JSON parse error, original data now in… --- ## [O365.audit to message field](https://discuss.elastic.co/t/o365-audit-to-message-field/286396)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 2\ **Last updated:** [October 16, 2021, 2:43pm UTC](https://discuss.elastic.co/t/o365-audit-to-message-field/286396 "2021-10-16T14:43:34Z")
Hello, I have O365 logs coming in to my logstash via the O365 filebeat module. I am trying to create two outputs : Elasticsearch output S3 bucket output The S3 bucket output requires a "message" field to be present. … --- ## [Timed out while retrying \[indices:admin/exists\] after failure](https://discuss.elastic.co/t/timed-out-while-retrying-indices-admin-exists-after-failure/286870)
**Author:** [@akshay\_dindure1994](https://discuss.elastic.co/u/akshay_dindure1994)\ **Replies:** 0\ **Last updated:** [October 15, 2021, 7:22pm UTC](https://discuss.elastic.co/t/timed-out-while-retrying-indices-admin-exists-after-failure/286870 "2021-10-15T19:22:45Z")
Hello Team, I have single node setup in my environment. I am facing issue after an server reboot. Elastic is take 8 time more time then usual to start. And soon getting abnormal. Please find the the Error which I am g… --- ## [Elasticsearch configuration](https://discuss.elastic.co/t/elasticsearch-configuration/286480)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 29\ **Last updated:** [October 16, 2021, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-configuration/286480 "2021-10-16T04:31:14Z")
Hi , I am trying to configure Elasticsearch 7.0.0 with 2 master and 1 data nodes (will add more data nodes later). Below are the configuration details for each node. But when I ran the API (curl -X GET "rw-elkm2-vm:9200… [Previous page](https://discuss.elastic.co/latest.md?page=1429) [Next page](https://discuss.elastic.co/latest.md?page=1431)