# Latest **URL:** https://discuss.elastic.co/latest.md?page=1522 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1523 --- ## [Docker-compose -f elastic-docker-tls.yml up -d](https://discuss.elastic.co/t/docker-compose-f-elastic-docker-tls-yml-up-d/281695)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 2:05pm UTC](https://discuss.elastic.co/t/docker-compose-f-elastic-docker-tls-yml-up-d/281695 "2021-08-17T14:05:18Z")
Docs 7.14 "Running the Elastic Stack on Docker" In step 4 Docker-compose -f elastic-docker-tls.yml up -d What does the -d parameter mean? --- ## [How can I configure logstash in this way?](https://discuss.elastic.co/t/how-can-i-configure-logstash-in-this-way/281561)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 5\ **Last updated:** [August 17, 2021, 1:53pm UTC](https://discuss.elastic.co/t/how-can-i-configure-logstash-in-this-way/281561 "2021-08-17T13:53:31Z")
I need a way to configure a logstash instance to work as load balancer for other 5 logstash instances. How can I do that? and what are the advantages and the disavantages to use multiple instances instead of only one? … --- ## [How to ensure load balancing?](https://discuss.elastic.co/t/how-to-ensure-load-balancing/281020)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 1:51pm UTC](https://discuss.elastic.co/t/how-to-ensure-load-balancing/281020 "2021-08-17T13:51:10Z")
Hello! I report metric data through "openTelemetry". Is the connection between "openTelemetry" and "APM" maintained for a long time (not disconnected)? In this case, how to do rolling upgrade and dynamic expansion of AP… --- ## [Need to get any help in parsing a complicated logs](https://discuss.elastic.co/t/need-to-get-any-help-in-parsing-a-complicated-logs/281671)
**Author:** [@MT2021](https://discuss.elastic.co/u/MT2021)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 1:49pm UTC](https://discuss.elastic.co/t/need-to-get-any-help-in-parsing-a-complicated-logs/281671 "2021-08-17T13:49:27Z")
Hi team, I am very new in Grok. I am struggling at this point. I cannot make a parser for below log file. The issue comes in \[17/Aug/2021:16:46:33 +0700\]. I cannot pass it. 192.168.40.100 - - \[17/Aug/2021:16:46:33 +0… --- ## [Sort not works on string field](https://discuss.elastic.co/t/sort-not-works-on-string-field/281685)
**Author:** [@rahmatzadeh\_mofid](https://discuss.elastic.co/u/rahmatzadeh_mofid)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 1:26pm UTC](https://discuss.elastic.co/t/sort-not-works-on-string-field/281685 "2021-08-17T13:26:45Z")
Sort() function not working on string fields of the document. this is my query: (I use the latest version of Nest client in c# dotnet 5) var res = await elasticClient.SearchAsync\(s =\> s.Index("customers"… --- ## [Accessing Elasticsearch documents from App Search](https://discuss.elastic.co/t/accessing-elasticsearch-documents-from-app-search/281681)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 1:17pm UTC](https://discuss.elastic.co/t/accessing-elasticsearch-documents-from-app-search/281681 "2021-08-17T13:17:09Z")
Hi everyone, Is it possible from App Search to access documents already created in Elasticsearch? Thanks. --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/280518)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 16\ **Last updated:** [August 17, 2021, 1:15pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/280518 "2021-08-17T13:15:25Z")
I am confronting the above error while trying to set up minimalistic security for elasticsearch. I know there are multiple forum contributions, but none of them helped me. elasticsearch.yml: # ======================== … --- ## [Need help to figure out what functionality is free](https://discuss.elastic.co/t/need-help-to-figure-out-what-functionality-is-free/281683)
**Author:** [@Maria\_Mikhalska](https://discuss.elastic.co/u/Maria_Mikhalska)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:01pm UTC](https://discuss.elastic.co/t/need-help-to-figure-out-what-functionality-is-free/281683 "2021-08-17T13:01:19Z")
Hi! I'm confused a lot that there are oss version &. non-oss version of elasticsearch (v. 7.10). I understand that one is open source version. But what does it change for me? For example, can it be situation that I use f… --- ## [High cpu usage (90-100%) on elastic search servers](https://discuss.elastic.co/t/high-cpu-usage-90-100-on-elastic-search-servers/12268)
**Author:** [@Han\_2](https://discuss.elastic.co/u/Han_2)\ **Replies:** 21\ **Last updated:** [August 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/high-cpu-usage-90-100-on-elastic-search-servers/12268 "2021-08-17T12:36:25Z")
we are going live with elasticsearch and as soon as we put production load cpu spikes to 90-100%.. wondering whats causing the issue. here is cluster info: es version: 0.90.0 5 nodes each with following config: … --- ## [When i am running this query without filter then it is running fine but when i am putting the filter context with time range of 10 minute i am not getting any value in hits. I have to filter and get the events of last 10 minutes](https://discuss.elastic.co/t/when-i-am-running-this-query-without-filter-then-it-is-running-fine-but-when-i-am-putting-the-filter-context-with-time-range-of-10-minute-i-am-not-getting-any-value-in-hits-i-have-to-filter-and-get-the-events-of-last-10-minutes/281679)
**Author:** [@ashurajchandra](https://discuss.elastic.co/u/ashurajchandra)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 12:08pm UTC](https://discuss.elastic.co/t/when-i-am-running-this-query-without-filter-then-it-is-running-fine-but-when-i-am-putting-the-filter-context-with-time-range-of-10-minute-i-am-not-getting-any-value-in-hits-i-have-to-filter-and-get-the-events-of-last-10-minutes/281679 "2021-08-17T12:08:03Z")
{ "sort": \[{ "date": { "order": "desc" } }\], "from": 0, "size": 3, "track\_total\_hits": true, "query": { "bool": { "must": \[ … --- ## [Decode\_json\_fields and array](https://discuss.elastic.co/t/decode-json-fields-and-array/281530)
**Author:** [@s17n](https://discuss.elastic.co/u/s17n)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 12:11pm UTC](https://discuss.elastic.co/t/decode-json-fields-and-array/281530 "2021-08-17T12:11:49Z")
Hello, It seems decode\_json\_fields can't decode array. This is my log : {"level":"panic","application":"command","stack":\[{"func":"main.func1","line":"51","source":"main.go"},{"func":"gopanic","line":"965","source":"p… --- ## [Filter data using HttpRequest](https://discuss.elastic.co/t/filter-data-using-httprequest/281508)
**Author:** [@fed](https://discuss.elastic.co/u/fed)\ **Replies:** 6\ **Last updated:** [August 17, 2021, 12:02pm UTC](https://discuss.elastic.co/t/filter-data-using-httprequest/281508 "2021-08-17T12:02:12Z")
Hi! I'm new to the ELK stack and I'd like to know if there's a way to filter the logs in filebeat using a processor that checks some values from an external REST API, and based on the response, it drops or sends the eve… --- ## [Creating index name as per log file name](https://discuss.elastic.co/t/creating-index-name-as-per-log-file-name/281677)
**Author:** [@mangesh\_shinde](https://discuss.elastic.co/u/mangesh_shinde)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 11:52am UTC](https://discuss.elastic.co/t/creating-index-name-as-per-log-file-name/281677 "2021-08-17T11:52:04Z")
Hi, I have use beat to get log files and location specified .log files are there. I am sending this log through logstash to elastic search. in conf file what to do to have index name as file name --- ## [Get Windows Defender logs in Logstash using Winlogbeat](https://discuss.elastic.co/t/get-windows-defender-logs-in-logstash-using-winlogbeat/281538)
**Author:** [@Logstash\_logs](https://discuss.elastic.co/u/Logstash_logs)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 11:39am UTC](https://discuss.elastic.co/t/get-windows-defender-logs-in-logstash-using-winlogbeat/281538 "2021-08-17T11:39:43Z")
Hi, I'm trying to send windows defender logs to logstash using winlogbeat. I added name: Microsoft-Windows-Windows Defender/Operational in winlogbeat.yml file but not getting any logs related to defender only Microsoft… --- ## [Help reindexing one domain to another](https://discuss.elastic.co/t/help-reindexing-one-domain-to-another/281603)
**Author:** [@ViniciusSPaiva](https://discuss.elastic.co/u/ViniciusSPaiva)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 11:39am UTC](https://discuss.elastic.co/t/help-reindexing-one-domain-to-another/281603 "2021-08-17T11:39:38Z")
Hello, I am trying to reindex one domain that has almost 10 million documents to another. The reason I am doing that is that I made a change in the analyzer, to split the dots, ignore leading zeroes and so forth. I'm g… --- ## [Filebeat modules need better documentation (e.g. docker local logging, traefik json logging)](https://discuss.elastic.co/t/filebeat-modules-need-better-documentation-e-g-docker-local-logging-traefik-json-logging/281675)
**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 11:38am UTC](https://discuss.elastic.co/t/filebeat-modules-need-better-documentation-e-g-docker-local-logging-traefik-json-logging/281675 "2021-08-17T11:38:51Z")
Hi all, I would like to use filebeat to monitor my container infrastructure. I am wondering why some of the filebeat modules seem so insufficient documented about any details that are beyond the most standard configurat… --- ## [Beats output to Logstash AND Elastic?](https://discuss.elastic.co/t/beats-output-to-logstash-and-elastic/281597)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 6\ **Last updated:** [August 17, 2021, 11:36am UTC](https://discuss.elastic.co/t/beats-output-to-logstash-and-elastic/281597 "2021-08-17T11:36:17Z")
Is it possible to Output to Elasticsearch AND Logstash at the same time from a Beat? --- ## [Events beat](https://discuss.elastic.co/t/events-beat/281666)
**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 11:22am UTC](https://discuss.elastic.co/t/events-beat/281666 "2021-08-17T11:22:12Z")
Is it possible to fetch events via API to beats and shipped to log stash or elastic search --- ## [Elastic APM Node doing hits again and again](https://discuss.elastic.co/t/elastic-apm-node-doing-hits-again-and-again/280844)
**Author:** [@Piyush\_Mittal](https://discuss.elastic.co/u/Piyush_Mittal)\ **Replies:** 11\ **Last updated:** [August 17, 2021, 10:20am UTC](https://discuss.elastic.co/t/elastic-apm-node-doing-hits-again-and-again/280844 "2021-08-17T10:20:03Z")
I created an simple nodejs application and trying to monitoring the API using elastic-node-apm package and visualize it using kibana but when I check the discover tab of my kibana dashboard I found that my elastic-node-a… --- ## [CITRIX NETSCALER](https://discuss.elastic.co/t/citrix-netscaler/281663)
**Author:** [@Hoffmann\_Patrick](https://discuss.elastic.co/u/Hoffmann_Patrick)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 10:14am UTC](https://discuss.elastic.co/t/citrix-netscaler/281663 "2021-08-17T10:14:08Z")
Bonjour, J'ai un soucis pour parser les logs (file depuis un syslog server) d'un netscaler Citrix (Citrix VDA et loadbalancer https/smtp via logstash et grok, personne n'aurait une petite idée ou piste. J'ai … --- ## [Alert in single node](https://discuss.elastic.co/t/alert-in-single-node/281595)
**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\ **Replies:** 13\ **Last updated:** [August 16, 2021, 11:36pm UTC](https://discuss.elastic.co/t/alert-in-single-node/281595 "2021-08-16T23:36:46Z")
I'm using Machine learning 7.13 and planning to create alert rule for warning. But I saw this After searching I found these steps to enable TLS. But I saw in Set up minimal security for Elasticsearch | Elasticsearch … --- ## [Attempted to resurrect connection to dead ES instance, but got an error](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/281657)
**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 9:45am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/281657 "2021-08-17T09:45:30Z")
Hi friends, i configured accordingly. However i am getting error logstash.yml http.host: '0.0.0.0' xpack.monitoring.elasticsearch.hosts: \["https://es1:9200","https://es2:9200","https://es3:9200"\] xpack.monitoring.elast… --- ## [Update given indices by index template](https://discuss.elastic.co/t/update-given-indices-by-index-template/281645)
**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 8:57am UTC](https://discuss.elastic.co/t/update-given-indices-by-index-template/281645 "2021-08-17T08:57:05Z")
Hi, i've created a index\_template. There exist a lot of indices with more than 40 million documents. Is it possible update existing index by the template instaed to reindex all? The \_update\_by\_query doesn't do the jo… --- ## [Nest always maps values in Dictionary to string](https://discuss.elastic.co/t/nest-always-maps-values-in-dictionary-to-string/281652)
**Author:** [@AaronAlluyn](https://discuss.elastic.co/u/AaronAlluyn)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 8:56am UTC](https://discuss.elastic.co/t/nest-always-maps-values-in-dictionary-to-string/281652 "2021-08-17T08:56:16Z")
I've been trying to figure out how the dynamic mapping and templates work but not having much luck. I have a simple app that loads in data file and maps it to a Dictionary\ the values are all technically… --- ## [Endpoint Security DEGRADED, Malware failed to enable due to potential system deadlock](https://discuss.elastic.co/t/endpoint-security-degraded-malware-failed-to-enable-due-to-potential-system-deadlock/281337)
**Author:** [@c1jt](https://discuss.elastic.co/u/c1jt)\ **Replies:** 7\ **Last updated:** [August 17, 2021, 8:35am UTC](https://discuss.elastic.co/t/endpoint-security-degraded-malware-failed-to-enable-due-to-potential-system-deadlock/281337 "2021-08-17T08:35:50Z")
Hi I have a node with endpoint-security policy applied, but is set to "DEGRADED" and "Unhealthy" after policy is applied/updated. Apparantly due to "potential system deadlock" Security Endpoints says: \> Malware \>\> Con… --- ## [Rollover policy with date math not work.Date stay "old" and not changed to next day](https://discuss.elastic.co/t/rollover-policy-with-date-math-not-work-date-stay-old-and-not-changed-to-next-day/281158)
**Author:** [@anna.kuranda](https://discuss.elastic.co/u/anna.kuranda)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/rollover-policy-with-date-math-not-work-date-stay-old-and-not-changed-to-next-day/281158 "2021-08-17T08:23:35Z")
I have issue with rollover using date math Elastic ver 7.13. Tried all recommendations from this site but it still not rollover using new date.Please tell me what wrong configured? My configuration: Template: Preforma… --- ## [Filebeat not connecting to elasticsearch cluster running with ECK](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-cluster-running-with-eck/278183)
**Author:** [@aksh\_18](https://discuss.elastic.co/u/aksh_18)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 8:22am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-cluster-running-with-eck/278183 "2021-08-17T08:22:13Z")
Hi All, I have deployed ES cluster and kibana with the help of ECK. I am using filebeat-kubernetes.yaml to deploy filebeat. I deployed metricbeat with metricbeat-kubernetes.yaml and its running fine. But even after appl… --- ## [Unassigned shards Inquiry](https://discuss.elastic.co/t/unassigned-shards-inquiry/281477)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 6\ **Last updated:** [August 17, 2021, 8:16am UTC](https://discuss.elastic.co/t/unassigned-shards-inquiry/281477 "2021-08-17T08:16:46Z")
Hi, One of our teams in the company has complained that every week or so they get an alert for unassigned shards on their cluster. They asked me to look for the cause of the issue. My question is: Is there a way to se… --- ## [NetworkError when attempting to fetch resource](https://discuss.elastic.co/t/networkerror-when-attempting-to-fetch-resource/277150)
**Author:** [@iliya](https://discuss.elastic.co/u/iliya)\ **Replies:** 8\ **Last updated:** [August 17, 2021, 7:47am UTC](https://discuss.elastic.co/t/networkerror-when-attempting-to-fetch-resource/277150 "2021-08-17T07:47:26Z")
Hi Kibana version : 7.10.2 Elasticsearch version : 7.10.2 Browser version :Firefox 89.0.2 \*\*Original install method: from manjaro repository When I put in "http://localhost:5601/app/kibana/" in firefox, occur below … --- ## [How to analyze JVM heap memory ？](https://discuss.elastic.co/t/how-to-analyze-jvm-heap-memory/281631)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 4\ **Last updated:** [August 17, 2021, 7:24am UTC](https://discuss.elastic.co/t/how-to-analyze-jvm-heap-memory/281631 "2021-08-17T07:24:29Z")
I want to know where memory used in es, as shown in the following figure：21.3gb memory used now in this node.i know some of them, such as: indices.queries.cache.size indices.fielddata.cache.size index.requests.cache.si… [Previous page](https://discuss.elastic.co/latest.md?page=1521) [Next page](https://discuss.elastic.co/latest.md?page=1523)