# Latest **URL:** https://discuss.elastic.co/latest.md?page=1534 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1535 --- ## [org.elasticsearch.bootstrap.StartupException: ElasticsearchException \[Failure running machine learning native code](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failure-running-machine-learning-native-code/280865)
**Author:** [@Logenleedev](https://discuss.elastic.co/u/Logenleedev)\ **Replies:** 3\ **Last updated:** [August 10, 2021, 11:11am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failure-running-machine-learning-native-code/280865 "2021-08-10T11:11:05Z")
Hi I am new to elastic search. Currently, I am doing a project that requires machine learning functionality in elasticsearch. Here is the error I get: \[2021-08-10T12:09:08,266\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptio… --- ## [Cluster cannot find nodes](https://discuss.elastic.co/t/cluster-cannot-find-nodes/280507)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 9:56am UTC](https://discuss.elastic.co/t/cluster-cannot-find-nodes/280507 "2021-08-10T09:56:58Z")
Hello! I read a lot of Internet Guides on how to set-up an elasticsearch cluster. Yet I was not successful. I will paste one elasticsearch.yml file, so you can maybe tell me what is wrong with it. # ==================… --- ## [Extended bounds on auto-interval date histogram](https://discuss.elastic.co/t/extended-bounds-on-auto-interval-date-histogram/280904)
**Author:** [@rooch](https://discuss.elastic.co/u/rooch)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 9:41am UTC](https://discuss.elastic.co/t/extended-bounds-on-auto-interval-date-histogram/280904 "2021-08-10T09:41:43Z")
I need to be able to run a query with a set of filters and an auto-interval date histogram aggregation to retrieve a set of bins. I then need to be able to rerun that query but with additional filters, and receive exact… --- ## [Logstash-codec-nmap undefined Method'\[\]'](https://discuss.elastic.co/t/logstash-codec-nmap-undefined-method/280517)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 9:33am UTC](https://discuss.elastic.co/t/logstash-codec-nmap-undefined-method/280517 "2021-08-10T09:33:20Z")
Hi, I saved my nmap scan output as a xml file as well use a file input and logstash-codec-nmap to decode, also i use the filter and direct output into elasticsearch just like the following configuration logstash-codec-… --- ## [Elasticsearch "READ ONLY" Indices](https://discuss.elastic.co/t/elasticsearch-read-only-indices/280837)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 7\ **Last updated:** [August 10, 2021, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-read-only-indices/280837 "2021-08-10T07:36:06Z")
Hello Team: I am using Elasticsearch version 7.8.0.. I am using Index Settings : index.blocks.read\_only\_allow\_delete: true for my indices ... If i run a CURL command to update my index settings curl -X PUT "localh… --- ## [Plugin "metricsEntities" is disabled](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728)
**Author:** [@Naim\_Rihan](https://discuss.elastic.co/u/Naim_Rihan)\ **Replies:** 6\ **Last updated:** [August 10, 2021, 7:27am UTC](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728 "2021-08-10T07:27:09Z")
Hi, I install Kibana 7.14 and command with "my\_path".\\bin\\kibana.bat but I get the following error: Plugin "metricsEntities" is disabled How can I fix it? Thanks --- ## [How to setup multiple Logstash conf reading the same input](https://discuss.elastic.co/t/how-to-setup-multiple-logstash-conf-reading-the-same-input/280878)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 3\ **Last updated:** [August 10, 2021, 6:50am UTC](https://discuss.elastic.co/t/how-to-setup-multiple-logstash-conf-reading-the-same-input/280878 "2021-08-10T06:50:34Z")
I want to push 2 different transformations of the same data to 2 different outputs. conf-v1: source/.txt -\> filter A -\> output 1 conf-v2: source/.txt -\> filter B -\> output 2 If I use 2 different pipelines, they will s… --- ## [Regex with "interval" flag enabled to filter private-ip-addresses](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826)
**Author:** [@jnair](https://discuss.elastic.co/u/jnair)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 3:37pm UTC](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826 "2021-08-09T15:37:21Z")
In the kibana visualization query interface, in the "Add filter -\> Edit as Query DSL" editor, I am using the below "REGEX" filter queries with the "INTERVAL" flag set, to filter the Private-IP addresses. I did check the … --- ## [Memory management for elasticsearch](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 4\ **Last updated:** [August 10, 2021, 6:32am UTC](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702 "2021-08-10T06:32:50Z")
Hi Team, I am trying to calculate good balance of total memory in three node es cluster. If I have three node e.s cluster each with 32G memory, 8 vcpu. Which combination would be more suitable for balancing memory betw… --- ## [Openshift metrics to ELK](https://discuss.elastic.co/t/openshift-metrics-to-elk/280879)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 6:16am UTC](https://discuss.elastic.co/t/openshift-metrics-to-elk/280879 "2021-08-10T06:16:43Z")
Hi, I watched this webinar and we're planning to implement the same. But i noticed this implementation requires an elastic cloud? Is it possible to send the data to our on prem setup? Thank you in advance. --- ## [Group by, having sql ..How to Convert](https://discuss.elastic.co/t/group-by-having-sql-how-to-convert/280029)
**Author:** [@HYOJIN\_LEE](https://discuss.elastic.co/u/HYOJIN_LEE)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 5:31am UTC](https://discuss.elastic.co/t/group-by-having-sql-how-to-convert/280029 "2021-08-10T05:31:26Z")
hello. I want to achieve some functionality which is available in SQL data stores. I have tried a lot but having a hard time achieving that functionality with elasticsearch. SQL SELECT CD\_HASH, COUNT(\*) FROM GRW\_MAIL… --- ## [Elasticsearch update by query using C#](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-c/280874)
**Author:** [@HYOJIN\_LEE](https://discuss.elastic.co/u/HYOJIN_LEE)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-c/280874 "2021-08-10T05:26:17Z")
hi, I have a problem. I want to update only one data in sub\_info. example.. yn\_complete to "N" in cd\_emp = "2021019" But, Currently I get all the sub\_info sets, change only the part you want, and update the whole… --- ## [Auditbeat: Index file grows rapidly causing No space left issue](https://discuss.elastic.co/t/auditbeat-index-file-grows-rapidly-causing-no-space-left-issue/280492)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 5:08am UTC](https://discuss.elastic.co/t/auditbeat-index-file-grows-rapidly-causing-no-space-left-issue/280492 "2021-08-10T05:08:07Z")
I have noticed that auditbeat index grows very rapidly in Linux using high disk space. It grows to around 500 MB. This fills up the disk space causing 'No space left on device' error. Has someone experienced a similar … --- ## [Elasticsearch Mappings from version 5 to version 7](https://discuss.elastic.co/t/elasticsearch-mappings-from-version-5-to-version-7/280802)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 9\ **Last updated:** [August 10, 2021, 4:12am UTC](https://discuss.elastic.co/t/elasticsearch-mappings-from-version-5-to-version-7/280802 "2021-08-10T04:12:18Z")
Hello Team I am using Elasticsearch version 5.6.3 , cluster (A). I am planning to move to Elasticsearch version 7.8.0 using separate cluster (B) for it. I am using \_reindex api to move my index data from A to B clust… --- ## [Dynamic index mappings and autogenerated searches](https://discuss.elastic.co/t/dynamic-index-mappings-and-autogenerated-searches/280767)
**Author:** [@MattG1](https://discuss.elastic.co/u/MattG1)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 3:45am UTC](https://discuss.elastic.co/t/dynamic-index-mappings-and-autogenerated-searches/280767 "2021-08-10T03:45:15Z")
Hey, I hope this is the correct category (please point me in the correct direction if it is not). I want to give my users the ability to add custom data into an ES index and then search based on that custom data. I wil… --- ## [Have been using ES OSS, now require FIPS and x-pack. Do I need to switch and purchase license?](https://discuss.elastic.co/t/have-been-using-es-oss-now-require-fips-and-x-pack-do-i-need-to-switch-and-purchase-license/280861)
**Author:** [@Zoheb\_Khan](https://discuss.elastic.co/u/Zoheb_Khan)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 3:34am UTC](https://discuss.elastic.co/t/have-been-using-es-oss-now-require-fips-and-x-pack-do-i-need-to-switch-and-purchase-license/280861 "2021-08-10T03:34:41Z")
Hi Team, Pardon me if the question sounds pretty obvious but I wanted to make sure before I proceed - I have a requirement to enable FIPS for search feature on a existing application (monolithic) that uses ES as single… --- ## [Logstash grok](https://discuss.elastic.co/t/logstash-grok/280779)
**Author:** [@KaPBaJIOJI](https://discuss.elastic.co/u/KaPBaJIOJI)\ **Replies:** 4\ **Last updated:** [August 10, 2021, 3:28am UTC](https://discuss.elastic.co/t/logstash-grok/280779 "2021-08-10T03:28:49Z")
Good afternoon to everyone, my question is quite simple, but I'm still quite new to the elk stack. it is necessary to digest the expression through the grok filter Mon Aug 9 15:18:25 +07 2021 mail 0 the date passes no… --- ## [Pulling more than 2000 records from ServiceNow api using http\_poller](https://discuss.elastic.co/t/pulling-more-than-2000-records-from-servicenow-api-using-http-poller/280840)
**Author:** [@Purushottam22](https://discuss.elastic.co/u/Purushottam22)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 3:08am UTC](https://discuss.elastic.co/t/pulling-more-than-2000-records-from-servicenow-api-using-http-poller/280840 "2021-08-10T03:08:46Z")
I have created the pipeline using http\_poller to pull the serviceNow CI records. To pull more than 2000 records, i am hitting the ServiceNow api multiple time with setting up start and count values using http\_poller in… --- ## [Is Logstash JDBC tracking\_column meant to work with BIGINT?](https://discuss.elastic.co/t/is-logstash-jdbc-tracking-column-meant-to-work-with-bigint/280856)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 1:50am UTC](https://discuss.elastic.co/t/is-logstash-jdbc-tracking-column-meant-to-work-with-bigint/280856 "2021-08-10T01:50:14Z")
I have a Logstash JDBC configuration with tracking\_column set to a BIGINT of the format YYYYMMDDhhmmsss This is obviously a very big number and the value set in last\_run\_metadata\_path is always set to zero. If I use a … --- ## [Logstash Http Poller Method Head](https://discuss.elastic.co/t/logstash-http-poller-method-head/280855)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 1:18am UTC](https://discuss.elastic.co/t/logstash-http-poller-method-head/280855 "2021-08-10T01:18:59Z")
I'm trying to retrieve data from an CUSTOM API which only allows HEAD requests, consequently the result is an empty body. where could the header response data be? is it possible to capture the data from a response head… --- ## [RUM react missing page load by region and time spent by span type breakdown](https://discuss.elastic.co/t/rum-react-missing-page-load-by-region-and-time-spent-by-span-type-breakdown/278604)
**Author:** [@Jake1](https://discuss.elastic.co/u/Jake1)\ **Replies:** 4\ **Last updated:** [August 10, 2021, 12:19am UTC](https://discuss.elastic.co/t/rum-react-missing-page-load-by-region-and-time-spent-by-span-type-breakdown/278604 "2021-08-10T00:19:01Z")
Kibana version: 7.13.0 Elasticsearch version: 7.13.0 APM Server version: 7.13.0 APM Agent language and version: react "@elastic/apm-rum": "^5.9.0", "@elastic/apm-rum-react": "^1.3.0", Browser version: Chrome Ve… --- ## [Logstash secuirty](https://discuss.elastic.co/t/logstash-secuirty/280854)
**Author:** [@Rickenson\_Robert](https://discuss.elastic.co/u/Rickenson_Robert)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 11:42pm UTC](https://discuss.elastic.co/t/logstash-secuirty/280854 "2021-08-09T23:42:17Z")
After enabling xpack in the elasticsearch yml and setting passwords for elasticsearch I get the following error when trying to index into my elasticsearch cluster using logstash: BadResponseCodeError, :message=\>"Got res… --- ## [Load balancer for elasticsearch cluster](https://discuss.elastic.co/t/load-balancer-for-elasticsearch-cluster/280589)
**Author:** [@markrity](https://discuss.elastic.co/u/markrity)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 10:11pm UTC](https://discuss.elastic.co/t/load-balancer-for-elasticsearch-cluster/280589 "2021-08-09T22:11:02Z")
Elasticsearch version - 5.1.2 16GB of max heap configured Installed and used enterprise modules, if any - No JVM version and operating system version - openjdk version "1.8.0\_292" , CentOS Other installed Elasticsearch … --- ## [Upgrade Elastic 7.9 from helm 2 to helm 3 in 1.16](https://discuss.elastic.co/t/upgrade-elastic-7-9-from-helm-2-to-helm-3-in-1-16/280851)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 9:06pm UTC](https://discuss.elastic.co/t/upgrade-elastic-7-9-from-helm-2-to-helm-3-in-1-16/280851 "2021-08-09T21:06:18Z")
Is there a recommended way to migrate from helm2 to helm3 for Elastic helm charts. Since helm2 and helm3 are quite different how to retain the Elasticsearch/Kibana indexes etc.. when I upgrade to an entirely new chart --- ## [Custom analyzer doesn't work in mapping but is fine through index/\_analyze endpoint, ES v6.8.10](https://discuss.elastic.co/t/custom-analyzer-doesnt-work-in-mapping-but-is-fine-through-index-analyze-endpoint-es-v6-8-10/280665)
**Author:** [@tehowe](https://discuss.elastic.co/u/tehowe)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 8:49pm UTC](https://discuss.elastic.co/t/custom-analyzer-doesnt-work-in-mapping-but-is-fine-through-index-analyze-endpoint-es-v6-8-10/280665 "2021-08-09T20:49:26Z")
Why, if I've written an analyzer for Elasticsearch which works when I use the analysis API endpoint, does it not get picked up and used when I set the mapping for a field to that analyzer? This works: GET cobalt\_strike… --- ## [Mapping elastic rule to o365 logs](https://discuss.elastic.co/t/mapping-elastic-rule-to-o365-logs/280849)
**Author:** [@Jorge\_Dieguez\_Perez](https://discuss.elastic.co/u/Jorge_Dieguez_Perez)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 8:13pm UTC](https://discuss.elastic.co/t/mapping-elastic-rule-to-o365-logs/280849 "2021-08-09T20:13:49Z")
Hi guys, can someone tell me what is the field in o365 logs related to event.category? --- ## [Logstash - grokfilter is successful using grokdebug, but fails in live](https://discuss.elastic.co/t/logstash-grokfilter-is-successful-using-grokdebug-but-fails-in-live/280829)
**Author:** [@One\_Punch](https://discuss.elastic.co/u/One_Punch)\ **Replies:** 13\ **Last updated:** [August 9, 2021, 7:50pm UTC](https://discuss.elastic.co/t/logstash-grokfilter-is-successful-using-grokdebug-but-fails-in-live/280829 "2021-08-09T19:50:05Z")
Hello, im integratin filebeats and logstash, sample grok pattern works in grokdebug but throwing grokfailure in logstash Message: \[2m2021-08-09 15:50:07.850 \[0;39m \[32m INFO \[0;39m \[35m1 \[0;39m \[2m--- \[0;39m \[2m\[ni… --- ## [Wich urls use kibana maps?](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823)
**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 7:14pm UTC](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823 "2021-08-09T19:14:11Z")
Hi, I have a server without internet connection running Kibana, I need to add to my firewall rules the URLs that Kibana Maps use to allow the traffic between the server and the APIs of the kibana maps. I don't find the… --- ## [Index lifecycle error on metricbeat and heartbeat](https://discuss.elastic.co/t/index-lifecycle-error-on-metricbeat-and-heartbeat/280715)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 6:17pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-on-metricbeat-and-heartbeat/280715 "2021-08-09T18:17:08Z")
Hi Team, In kibana under, in index management under indices its showing 79 indices have lifecycle errors and this no. is getting increased daily on elasticsearch v7.4 I am going through ILM docs, for beats ILM is enabl… --- ## [ECK workspace search?](https://discuss.elastic.co/t/eck-workspace-search/261159)
**Author:** [@sc75651](https://discuss.elastic.co/u/sc75651)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 6:06pm UTC](https://discuss.elastic.co/t/eck-workspace-search/261159 "2021-08-09T18:06:23Z")
Can we install the free version of workplace search using ECK? [Previous page](https://discuss.elastic.co/latest.md?page=1533) [Next page](https://discuss.elastic.co/latest.md?page=1535)