# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1482

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1483

---

## [APM Dotnet agent version contains extra random numbers](https://discuss.elastic.co/t/apm-dotnet-agent-version-contains-extra-random-numbers/283899)

<div class="topic-metadata">

**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 6:56am UTC](https://discuss.elastic.co/t/apm-dotnet-agent-version-contains-extra-random-numbers/283899 "2021-09-13T06:56:53Z")

</div>

Hi, I've noticed that the field agent.version since 1.8.0 has changed to something like this: 1.11.0+a4eb5008af64ca52fe6973c18810c0c8c7a99554 Is there a reason for adding this +random numbers? This makes filtering the…

---

## [Index lifecycle policy have 0 linked indice](https://discuss.elastic.co/t/index-lifecycle-policy-have-0-linked-indice/283492)

<div class="topic-metadata">

**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 6:01am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-have-0-linked-indice/283492 "2021-09-13T06:01:59Z")

</div>

Hello to all, I use logstash to send data to ElasticSeach. This data is sent with the index "aruba-mobilitymaster-logs". On Kibana, I have created an "index template" as follows: We see that the index pattern is "a…

---

## [Elastic search shutdown automatically](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927)

<div class="topic-metadata">

**Author:** [@DANISH\_MAHER](https://discuss.elastic.co/u/DANISH_MAHER)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 6:01am UTC](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927 "2021-09-13T06:01:29Z")

</div>

Elastic search shutdown automatically every hour can you tell me solution i am using magento 2 VPS cent os

---

## [Elasticsearch backup only hot indices](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856)

<div class="topic-metadata">

**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856 "2021-09-13T05:54:45Z")

</div>

I have a cluster of elastiсsearch consisting of 6 nodes. 5 indexes are created per day (each index consume about 10 to 250 gigabytes) we now have a snapshot repository (which is located on the NFS share) where these indi…

---

## [Kibana visualize table Metrics Count limit range](https://discuss.elastic.co/t/kibana-visualize-table-metrics-count-limit-range/283257)

<div class="topic-metadata">

**Author:** [@rf1388](https://discuss.elastic.co/u/rf1388)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 5:26am UTC](https://discuss.elastic.co/t/kibana-visualize-table-metrics-count-limit-range/283257 "2021-09-13T05:26:50Z")

</div>

about to extract an IP list with more than 100 "count" fields. Is there a way to implement it? kibana v7.8.1 used

---

## [Filebeat config error: Exiting: 1 error: error loading config file: invalid config: yaml: line 87: could not find expected ':'](https://discuss.elastic.co/t/filebeat-config-error-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-87-could-not-find-expected/283969)

<div class="topic-metadata">

**Author:** [@pheempon](https://discuss.elastic.co/u/pheempon)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 4:48am UTC](https://discuss.elastic.co/t/filebeat-config-error-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-87-could-not-find-expected/283969 "2021-09-13T04:48:01Z")

</div>

I keep on getting this error when I try to configure Filebeat. ERROR instance/beat.go:989 Exiting: 1 error: error loading config file: invalid config: yaml: line 87: could not find expected ':' Exiting: 1 error: er…

---

## [Elastic user not authenticate properly (Kibana Login)](https://discuss.elastic.co/t/elastic-user-not-authenticate-properly-kibana-login/282301)

<div class="topic-metadata">

**Author:** [@yasith1994](https://discuss.elastic.co/u/yasith1994)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 3:50am UTC](https://discuss.elastic.co/t/elastic-user-not-authenticate-properly-kibana-login/282301 "2021-09-13T03:50:42Z")

</div>

Hi, We have elastic cluster with 7 nodes. Because of some misconfiguration right now we can not log in to the kibana GUI. It shows username or password wrong. Then we did below steps, Try to create new super user /…

---

## [Es index segmentation question](https://discuss.elastic.co/t/es-index-segmentation-question/283997)

<div class="topic-metadata">

**Author:** [@shenjiayu](https://discuss.elastic.co/u/shenjiayu)\
**Replies:** 5\
**Last updated:** [September 13, 2021, 2:47am UTC](https://discuss.elastic.co/t/es-index-segmentation-question/283997 "2021-09-13T02:47:53Z")

</div>

Hey, I have a question. I stay at UTC+8, and I use filebeat to collect logs from k8s, then sending to es.But the default index segmentation is decided by UTC, not UTC+8. So I will find logs of 2021.9.1(UTC+8) in filebeat…

---

## [Error login](https://discuss.elastic.co/t/error-login/283597)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 2:45am UTC](https://discuss.elastic.co/t/error-login/283597 "2021-09-13T02:45:52Z")

</div>

hi everyone, i have a kibana. Yesterday I was still able to login, but today I can't. it only says "oops! Error. Try again" the username and password are all correct and the elsticsearch and kibana services are running p…

---

## [Error after launching elastic stack](https://discuss.elastic.co/t/error-after-launching-elastic-stack/283991)

<div class="topic-metadata">

**Author:** [@DaniloBatistaQueiroz](https://discuss.elastic.co/u/DaniloBatistaQueiroz)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:03am UTC](https://discuss.elastic.co/t/error-after-launching-elastic-stack/283991 "2021-09-13T02:03:20Z")

</div>

I'm using docker compose, logstash has ip 172.23.0.4, kibana has 172.23.0.3, elasticsearch 172.23.0.2. { "type": "response", "@timestamp": "2021-09-12T22:53:33+00:00", "tags": \[\], "pid": 1216, "metho…

---

## [How connect to apm server fro spring boot](https://discuss.elastic.co/t/how-connect-to-apm-server-fro-spring-boot/283846)

<div class="topic-metadata">

**Author:** [@Grigor\_Martirosyan](https://discuss.elastic.co/u/Grigor_Martirosyan)\
**Replies:** 0\
**Last updated:** [September 10, 2021, 7:44am UTC](https://discuss.elastic.co/t/how-connect-to-apm-server-fro-spring-boot/283846 "2021-09-10T07:44:01Z")

</div>

I'm using spring boot and in order to use script it needs to be connected to apm how can I do that? Or do i get it right ,do I need to configure apm with spring boot in order to be able use scripts?

---

## [What is this java\_pid%pid\_number%.hprof and can it be deleted](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 1:50am UTC](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907 "2021-09-13T01:50:29Z")

</div>

I have my ES data and ES Logs going to another location, but in my /var/lib/elasticsearch I have a file named java\_pid%pid\_number%.hprof that has cause my OS drive to be out of space. which is now causing me issues. Wha…

---

## ['More than one write index' errors still occurring in version 7.13.4](https://discuss.elastic.co/t/more-than-one-write-index-errors-still-occurring-in-version-7-13-4/283993)

<div class="topic-metadata">

**Author:** [@bvilnis](https://discuss.elastic.co/u/bvilnis)\
**Replies:** 0\
**Last updated:** [September 13, 2021, 12:18am UTC](https://discuss.elastic.co/t/more-than-one-write-index-errors-still-occurring-in-version-7-13-4/283993 "2021-09-13T00:18:00Z")

</div>

This issue has previously been raised here, but to summarise our current issue: We are currently seeing our APM stack (Elastic APM, Elasticsearch, Kibana) produce the following error: alias \[apm-7.13.4-metric\] has mor…

---

## [Painlessの配列の使用方法について](https://discuss.elastic.co/t/painless/282804)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 1:24am UTC](https://discuss.elastic.co/t/painless/282804 "2021-09-13T01:24:04Z")

</div>

painlessで以下のようなデータを扱っています。 { "\_shards": { "total": 6, "failed": 0, "successful": 6, "skipped": 0 }, "hits": { "hits": \[ { "\_index": "test-2…

---

## [Expanding non-LVM Disk with Elasticsearch indicies stored on](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 1:03am UTC](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779 "2021-09-13T01:03:26Z")

</div>

We have a capacity problem with our worker nodes (ELK stack) oot@xxx03:/elkdata# yum list | grep elasticsearch | grep \\.12 apm-server.i686 7.12.0-1 elasticsearch-7.x apm-s…

---

## [Comment added to case or event](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 12:59am UTC](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694 "2021-09-13T00:59:24Z")

</div>

Hello every body, I have a question about the notes added by the user in ELK, it is possible to have the visibility of them in ONE place? Best regards,

---

## [Can't connect to http-input of Logstash on Elastic Cloud](https://discuss.elastic.co/t/cant-connect-to-http-input-of-logstash-on-elastic-cloud/283822)

<div class="topic-metadata">

**Author:** [@Samuel\_Wehrli](https://discuss.elastic.co/u/Samuel_Wehrli)\
**Replies:** 5\
**Last updated:** [September 13, 2021, 12:44am UTC](https://discuss.elastic.co/t/cant-connect-to-http-input-of-logstash-on-elastic-cloud/283822 "2021-09-13T00:44:25Z")

</div>

Hi, i just deployed an elastic cloud instance on google cloud. I want to use the http input plugin of Logstash to receive sensor data (from "the things network") via webhook requests. I configured the Logstash pipeline o…

---

## [Issue with AWS backup and restore process](https://discuss.elastic.co/t/issue-with-aws-backup-and-restore-process/283814)

<div class="topic-metadata">

**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 12:44am UTC](https://discuss.elastic.co/t/issue-with-aws-backup-and-restore-process/283814 "2021-09-13T00:44:02Z")

</div>

I am having an issue with the snapshot and restore process for ES. I have created two nodes to test my snapshot and restore. I can't seem to make it work. I have created a bucket in AWS , added plugin for s3 and I have…

---

## [Send .evtx files to elastic cloud using winlogbeat](https://discuss.elastic.co/t/send-evtx-files-to-elastic-cloud-using-winlogbeat/281779)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 3\
**Last updated:** [September 12, 2021, 8:39pm UTC](https://discuss.elastic.co/t/send-evtx-files-to-elastic-cloud-using-winlogbeat/281779 "2021-09-12T20:39:22Z")

</div>

Hi everyone, I've more than 100 .evtx files that have to be sent to elastic cloud using winlogbeat. I know the method to send files one by one using this post But this is a hectic process to provide the path of each fil…

---

## [Watcher error 404 webhook](https://discuss.elastic.co/t/watcher-error-404-webhook/283983)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 2\
**Last updated:** [September 12, 2021, 7:38pm UTC](https://discuss.elastic.co/t/watcher-error-404-webhook/283983 "2021-09-12T19:38:13Z")

</div>

Hi guys! I'm getting the error 404 on a watcher. This is my webhook action: "actions": { "my\_webhook": { "webhook": { "scheme": "https", "host": "chat.googleapis.com", "port": 443, …

---

## [Elasticsearch enable watcher - email notifications](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 9\
**Last updated:** [September 12, 2021, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794 "2021-09-12T18:30:02Z")

</div>

Hello, I would like to ask You for help, I have one-node elasticsearch with kibana on kubernetes. I need to have on kibana watcher email notifications enabled but don't know how to do from elasticsearch yml file. Rig…

---

## [How to calculate elapsed Time between Timestamps in a given Timerange?](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-timestamps-in-a-given-timerange/283449)

<div class="topic-metadata">

**Author:** [@Elastomer](https://discuss.elastic.co/u/Elastomer)\
**Replies:** 2\
**Last updated:** [September 12, 2021, 5:25pm UTC](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-timestamps-in-a-given-timerange/283449 "2021-09-12T17:25:24Z")

</div>

Hallo fellow Users. I would like to know how i can get the Time difference from the "First" to the"Last" Document within a specific Time Range. Question: How much distance did i travel in a specific Time Range. Situat…

---

## [Vega Visualization Kibana](https://discuss.elastic.co/t/vega-visualization-kibana/283942)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [September 12, 2021, 5:14pm UTC](https://discuss.elastic.co/t/vega-visualization-kibana/283942 "2021-09-12T17:14:00Z")

</div>

Hi All, Is there any step-by-step documentation/site to learn about Vega Visualization Kibana? Please support. //Ankita

---

## [Significant Text Aggregation always returning zero buckets](https://discuss.elastic.co/t/significant-text-aggregation-always-returning-zero-buckets/283976)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [September 12, 2021, 5:09pm UTC](https://discuss.elastic.co/t/significant-text-aggregation-always-returning-zero-buckets/283976 "2021-09-12T17:09:31Z")

</div>

Hi All, I'm attempting to use the significant\_text aggregation with a field that is stored as a text field and analyzed via the english analyzer but I'm having an issue where no buckets are being returned. I'm essentia…

---

## [IOPS for a Data node is extremely high while other not](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772)

<div class="topic-metadata">

**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\
**Replies:** 8\
**Last updated:** [September 12, 2021, 4:57pm UTC](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772 "2021-09-12T16:57:45Z")

</div>

Version: Elastic Search 7.13 I am running 3 master nodes, 2 client nodes and 10 data nodes (199-399 Gb each node) And one day I have seen the IOPS for a Data node is extremely high while other not Could you please …

---

## [Visualizing systemd services using Metricbeat (Please help)](https://discuss.elastic.co/t/visualizing-systemd-services-using-metricbeat-please-help/283982)

<div class="topic-metadata">

**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\
**Replies:** 0\
**Last updated:** [September 12, 2021, 4:25pm UTC](https://discuss.elastic.co/t/visualizing-systemd-services-using-metricbeat-please-help/283982 "2021-09-12T16:25:25Z")

</div>

Hi friends, i would like to visualize systemd process. Please advice The below having issue whereby sometimes it spikes sometimes it dont. I am quite confuse

---

## [Pulling data from two different DB with Logstash JDBC Input and merging input events data](https://discuss.elastic.co/t/pulling-data-from-two-different-db-with-logstash-jdbc-input-and-merging-input-events-data/283973)

<div class="topic-metadata">

**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\
**Replies:** 1\
**Last updated:** [September 12, 2021, 3:46pm UTC](https://discuss.elastic.co/t/pulling-data-from-two-different-db-with-logstash-jdbc-input-and-merging-input-events-data/283973 "2021-09-12T15:46:14Z")

</div>

Hi and thanks for your great community. I have two database that I want configuring a pipeline with Logstash that pulling data from these two database and merging the input events based on one same field in these events…

---

## [What is this domain? intotheindex.elastic.co](https://discuss.elastic.co/t/what-is-this-domain-intotheindex-elastic-co/283951)

<div class="topic-metadata">

**Author:** [@exploitiobb](https://discuss.elastic.co/u/exploitiobb)\
**Replies:** 4\
**Last updated:** [September 12, 2021, 3:32pm UTC](https://discuss.elastic.co/t/what-is-this-domain-intotheindex-elastic-co/283951 "2021-09-12T15:32:50Z")

</div>

when I search for elastic.co in google, I see intotheindex.elastic.co domain! I there somebody here that can explain me what is this!? what is instance id?! who is it for? Can I register in it?!

---

## [Primary shard](https://discuss.elastic.co/t/primary-shard/283964)

<div class="topic-metadata">

**Author:** [@Lixing\_Yi](https://discuss.elastic.co/u/Lixing_Yi)\
**Replies:** 1\
**Last updated:** [September 12, 2021, 12:35pm UTC](https://discuss.elastic.co/t/primary-shard/283964 "2021-09-12T12:35:09Z")

</div>

situaiton: In the case that the primary itself fails, the node hosting the primary will send a message to the master about it. The indexing operation will wait (up to 1 minute) for the master to promote one of the repli…

---

## [Logstash error to finding tracking\_column in jdbc input for mongodb](https://discuss.elastic.co/t/logstash-error-to-finding-tracking-column-in-jdbc-input-for-mongodb/283329)

<div class="topic-metadata">

**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\
**Replies:** 1\
**Last updated:** [September 12, 2021, 9:35am UTC](https://discuss.elastic.co/t/logstash-error-to-finding-tracking-column-in-jdbc-input-for-mongodb/283329 "2021-09-12T09:35:44Z")

</div>

Hello, I using logstash jdbc for pulling data from mongodb and pushing to elasticsearch. I using this pipeline configuration for logstash: input { jdbc { type =\> "bb\_purchaselog" jdbc\_driver\_library =\> "/usr/…

[Previous page](https://discuss.elastic.co/latest.md?page=1481)

[Next page](https://discuss.elastic.co/latest.md?page=1483)
