# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1605

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1606

---

## [Histogram There are too many series defined (n). The configured maximum is 50](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853)

<div class="topic-metadata">

**Author:** [@Dgoodwin](https://discuss.elastic.co/u/Dgoodwin)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 7:15am UTC](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853 "2021-06-24T07:15:06Z")

</div>

Is there a way to show 50 or change the configured maximum to include more than 50? Can we show the top 50? Currently, nothing shows when there are more the 50 series.

---

## [Logstash problem with \\](https://discuss.elastic.co/t/logstash-problem-with/276775)

<div class="topic-metadata">

**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\
**Replies:** 2\
**Last updated:** [June 24, 2021, 6:47am UTC](https://discuss.elastic.co/t/logstash-problem-with/276775 "2021-06-24T06:47:38Z")

</div>

Hi every one, I want to put the values inside a path in some field. I want to split the path so i can take every value inside it but i can't split with \\ because is a special character. I tried to replace \\ with / but …

---

## [Kibana permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821)

<div class="topic-metadata">

**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\
**Replies:** 4\
**Last updated:** [June 24, 2021, 6:43am UTC](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821 "2021-06-24T06:43:53Z")

</div>

I have Kibana installed under the sudo user. As I try to run /usr/share/kibana/bin/kibana -c /etc/kibana/kibana.yml I get an error: Error: EACCES: permission denied, open '/etc/kibana/kibana.yml' kibana.yml chmod i…

---

## [fileBeat Accuracy of log collection time](https://discuss.elastic.co/t/filebeat-accuracy-of-log-collection-time/276779)

<div class="topic-metadata">

**Author:** [@Link](https://discuss.elastic.co/u/Link)\
**Replies:** 3\
**Last updated:** [June 24, 2021, 6:40am UTC](https://discuss.elastic.co/t/filebeat-accuracy-of-log-collection-time/276779 "2021-06-24T06:40:33Z")

</div>

HI garylog Collect logs form Filebeat。 Now there is a problem There are multiple logs generated at the same time， Is there a way to make the log time more accurate? 2021-06-14 08:36:40.652Z ----\>2021-06-14 …

---

## [Log4j2.properties- log rotation issue in ES-7.5.2 Cluster](https://discuss.elastic.co/t/log4j2-properties-log-rotation-issue-in-es-7-5-2-cluster/276881)

<div class="topic-metadata">

**Author:** [@anguri\_sudhakar](https://discuss.elastic.co/u/anguri_sudhakar)\
**Replies:** 0\
**Last updated:** [June 24, 2021, 6:35am UTC](https://discuss.elastic.co/t/log4j2-properties-log-rotation-issue-in-es-7-5-2-cluster/276881 "2021-06-24T06:35:09Z")

</div>

Hi Team , need help on log4j2.properties, not rolling over when new day happens. We are using default log4j2.properties file with elasticsearch-7.5.2 version. One observation ,in master1&2 nodes are rolling every end o…

---

## [ECE 2.10.0 released](https://discuss.elastic.co/t/ece-2-10-0-released/276820)

<div class="topic-metadata">

**Author:** [@Przemyslaw\_H](https://discuss.elastic.co/u/Przemyslaw_H)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 6:35am UTC](https://discuss.elastic.co/t/ece-2-10-0-released/276820 "2021-06-24T06:35:01Z")

</div>

We are pleased to announce that ECE 2.10.0 has been released today. Release notes: Elastic Cloud Enterprise 2.10.0 | Elastic Cloud Enterprise Reference \[2.10\] | Elastic

---

## [Logstash 7.10.x version does not start](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178)

<div class="topic-metadata">

**Author:** [@Ramya\_Ramamurthy1](https://discuss.elastic.co/u/Ramya_Ramamurthy1)\
**Replies:** 3\
**Last updated:** [June 24, 2021, 6:06am UTC](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178 "2021-06-24T06:06:51Z")

</div>

I have downloaded the .tar.gz file and tried bringing up logstash through the logstash script. I am unable to bring up any of the 7.10.2 versions of logstash with the below error. I see posts about the permissions of th…

---

## [Date format in Index template kibana](https://discuss.elastic.co/t/date-format-in-index-template-kibana/276791)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 3\
**Last updated:** [June 24, 2021, 5:31am UTC](https://discuss.elastic.co/t/date-format-in-index-template-kibana/276791 "2021-06-24T05:31:11Z")

</div>

Can you please help me with the correct format for Date that I can give in my index mapping template to get the date in Epoch format. I am getting the date from source in epoch format like this "1624348829313". I want i…

---

## [Hosting/Indexing strategy for long-term storing data (if possible single node)](https://discuss.elastic.co/t/hosting-indexing-strategy-for-long-term-storing-data-if-possible-single-node/276657)

<div class="topic-metadata">

**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\
**Replies:** 5\
**Last updated:** [June 24, 2021, 5:26am UTC](https://discuss.elastic.co/t/hosting-indexing-strategy-for-long-term-storing-data-if-possible-single-node/276657 "2021-06-24T05:26:57Z")

</div>

I have following requirements, that appear to be not so typical: Indexing up to ~5000 documents per second (small docs, (semi) structured, needs to reliable!) Exporting / Querying of big data sets up to 5\*10^6 document…

---

## [Containerd Metrics](https://discuss.elastic.co/t/containerd-metrics/275548)

<div class="topic-metadata">

**Author:** [@jonas27](https://discuss.elastic.co/u/jonas27)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 5:23am UTC](https://discuss.elastic.co/t/containerd-metrics/275548 "2021-06-24T05:23:47Z")

</div>

Hi, We recently upgraded our container runtime from docker to containerd. Is there a (planned) module to support querying the containerd socket for container metrics? Something like: containerd.yml: |- - module:…

---

## [Filebeat modules](https://discuss.elastic.co/t/filebeat-modules/276862)

<div class="topic-metadata">

**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 5:07am UTC](https://discuss.elastic.co/t/filebeat-modules/276862 "2021-06-24T05:07:32Z")

</div>

We inherited a cluster and are trying to update the ingest pipeline (ES version 7.6) Context: When we do GET ingest/pipeline there is a 15k line pipeline. It has all the processors from the filebeat modules they have up…

---

## [FileBeat 7.9.1 - Error creating runner from config: Can only start an input when all related states are finished](https://discuss.elastic.co/t/filebeat-7-9-1-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/276867)

<div class="topic-metadata">

**Author:** [@Parveen\_Sharma](https://discuss.elastic.co/u/Parveen_Sharma)\
**Replies:** 0\
**Last updated:** [June 24, 2021, 4:33am UTC](https://discuss.elastic.co/t/filebeat-7-9-1-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/276867 "2021-06-24T04:33:30Z")

</div>

Hi I am using 7.9.1 Fileabeat version and i am observing following error in the log file. 2021-06-24T03:27:53.075Z ERROR \[autodiscover\] cfgfile/list.go:95 Error creating runner from config: Can only start…

---

## [Kibana DDOS dashboard - Detailed dashboard](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182)

<div class="topic-metadata">

**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\
**Replies:** 10\
**Last updated:** [June 24, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182 "2021-06-24T04:10:19Z")

</div>

I'm finding it a little challenging in developing dashboards beyond a line and pie chart. Looking for advice from kibana experts who can guide me towards resources or personal tips and tricks. Given the python script, d…

---

## [Filebeats 7.12 Cisco ASA module Needs RFC 5424 timestamp](https://discuss.elastic.co/t/filebeats-7-12-cisco-asa-module-needs-rfc-5424-timestamp/276434)

<div class="topic-metadata">

**Author:** [@numpty-boy](https://discuss.elastic.co/u/numpty-boy)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 3:09am UTC](https://discuss.elastic.co/t/filebeats-7-12-cisco-asa-module-needs-rfc-5424-timestamp/276434 "2021-06-24T03:09:30Z")

</div>

I hope this helps someone ... I've been having a \*mare getting the Cisco ASA module to recognise logs input to UDP/9001. I could see the records hit my machine via TCPDUMP, but nothing showed up when I ran "filebeat -e"…

---

## [Elasticsearch购买xpack安全功能官方联系方式](https://discuss.elastic.co/t/elasticsearch-xpack/276859)

<div class="topic-metadata">

**Author:** [@peng-elasticsearch](https://discuss.elastic.co/u/peng-elasticsearch)\
**Replies:** 0\
**Last updated:** [June 24, 2021, 1:39am UTC](https://discuss.elastic.co/t/elasticsearch-xpack/276859 "2021-06-24T01:39:59Z")

</div>

elasticsearch购买xpack安全功能官方咨询渠道有哪些？？ 官网都没找见联系方式或者其他 麻烦具体发下链接或者联系方式信息

---

## [Creating Custom Index Template](https://discuss.elastic.co/t/creating-custom-index-template/276847)

<div class="topic-metadata">

**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\
**Replies:** 4\
**Last updated:** [June 24, 2021, 2:22am UTC](https://discuss.elastic.co/t/creating-custom-index-template/276847 "2021-06-24T02:22:29Z")

</div>

I have a UniFi controller sending syslog data to logstash with custom patterns defined for parsing, and the data flow itself is working. However, the issue I am having is that I have no clue how to get the index definiti…

---

## [High level rest client with data stream](https://discuss.elastic.co/t/high-level-rest-client-with-data-stream/276828)

<div class="topic-metadata">

**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 1:06am UTC](https://discuss.elastic.co/t/high-level-rest-client-with-data-stream/276828 "2021-06-24T01:06:57Z")

</div>

I'm using high level rest client to bulk insert data. In the BulkRequest object, we are inserting the data with the 'index' operation. like this: { "index" : { "\_index" : "test", "\_id" : "1" } } { "field1" : "value1" } …

---

## [Data backup from prod elastic cluster to backup elastic cluster periodically](https://discuss.elastic.co/t/data-backup-from-prod-elastic-cluster-to-backup-elastic-cluster-periodically/276855)

<div class="topic-metadata">

**Author:** [@jebuna\_hau](https://discuss.elastic.co/u/jebuna_hau)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 12:31am UTC](https://discuss.elastic.co/t/data-backup-from-prod-elastic-cluster-to-backup-elastic-cluster-periodically/276855 "2021-06-24T00:31:36Z")

</div>

Hello, I am currently trying to find the best way to keep two elastic clusters in sync. I tried it by fetching the modified data from the main cluster and update/insert to the backup cluster. The idea is to keep the two…

---

## [Trying to follow can't follow instructions on Parent/Child relationships](https://discuss.elastic.co/t/trying-to-follow-cant-follow-instructions-on-parent-child-relationships/276596)

<div class="topic-metadata">

**Author:** [@bill\_d](https://discuss.elastic.co/u/bill_d)\
**Replies:** 5\
**Last updated:** [June 24, 2021, 12:21am UTC](https://discuss.elastic.co/t/trying-to-follow-cant-follow-instructions-on-parent-child-relationships/276596 "2021-06-24T00:21:19Z")

</div>

I'm following the example on this page: Parent/Child relationships | Elasticsearch.Net and NEST: the .NET clients \[7.x\] | Elastic. My program fails indexing the parent, with: ServerError: Type: routing\_missing\_exception…

---

## [Is Elasticsearch refresh interval useless option when updating document of specific index?](https://discuss.elastic.co/t/is-elasticsearch-refresh-interval-useless-option-when-updating-document-of-specific-index/276770)

<div class="topic-metadata">

**Author:** [@TheDevLuffy](https://discuss.elastic.co/u/TheDevLuffy)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 9:41pm UTC](https://discuss.elastic.co/t/is-elasticsearch-refresh-interval-useless-option-when-updating-document-of-specific-index/276770 "2021-06-23T21:41:45Z")

</div>

Hello Is Elasticsearch refresh interval useless option when updating document of specific index ? For Example, I have two indices on my Elasticsearch (index-001, index-002) and these indices have default refresh\_inter…

---

## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/276615)

<div class="topic-metadata">

**Author:** [@Sanchit\_Agrawal](https://discuss.elastic.co/u/Sanchit_Agrawal)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 9:35pm UTC](https://discuss.elastic.co/t/elasticsearch/276615 "2021-06-23T21:35:18Z")

</div>

I am new to elasticsearch. Please can you help with my other doubts- I have daily pushed to ES and the request cache is getting cleared automatically for as low as 1 document also. Can I restrict this from getting clea…

---

## [Nodes crashes, problem with leader check](https://discuss.elastic.co/t/nodes-crashes-problem-with-leader-check/276662)

<div class="topic-metadata">

**Author:** [@doc113](https://discuss.elastic.co/u/doc113)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 9:33pm UTC](https://discuss.elastic.co/t/nodes-crashes-problem-with-leader-check/276662 "2021-06-23T21:33:56Z")

</div>

Greetings all! Previously, sorry for my English. Having trouble with ES cluster. Sometimes data-nodes crashes (one or more (rarely)). This can be preceded by different events: force-merge, relocating shards, real-time u…

---

## [TLS and cross cluster search](https://discuss.elastic.co/t/tls-and-cross-cluster-search/276804)

<div class="topic-metadata">

**Author:** [@NaiaraSS](https://discuss.elastic.co/u/NaiaraSS)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 2:09pm UTC](https://discuss.elastic.co/t/tls-and-cross-cluster-search/276804 "2021-06-23T14:09:19Z")

</div>

Hello!!! Please, i'm using the same certificate in 2 different clusters, which works just fine, but I'm only able to see my cluster 1 on kibana, the cluster 2 is not being available to be seing on kibana to generate das…

---

## [Exact field value match](https://discuss.elastic.co/t/exact-field-value-match/276852)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:23pm UTC](https://discuss.elastic.co/t/exact-field-value-match/276852 "2021-06-23T21:23:40Z")

</div>

I’m trying to achieve Exact field value match, E.g. “content” : “how are you” : find all the documents which exactly have the value “how are you” inside the entire field “content” What we tried in elasticsearch: { "…

---

## [Official documentation for Alerts API?](https://discuss.elastic.co/t/official-documentation-for-alerts-api/276851)

<div class="topic-metadata">

**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:23pm UTC](https://discuss.elastic.co/t/official-documentation-for-alerts-api/276851 "2021-06-23T21:23:33Z")

</div>

Continuing the discussion from Kibana Alerts from API: "Without official documentation and support of this API I can't really steer you in any other direction." Is there roadmap that includes alerts API as an official …

---

## [Elasticsearch alert](https://discuss.elastic.co/t/elasticsearch-alert/275112)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 3\
**Last updated:** [June 23, 2021, 9:21pm UTC](https://discuss.elastic.co/t/elasticsearch-alert/275112 "2021-06-23T21:21:28Z")

</div>

Hello Expert, I would like to create an alert when field(number) increase or decrease 30% from the last day or last inserted value. How can I create that.. pls guide me. Thanks in advance

---

## [Notwithin operator](https://discuss.elastic.co/t/notwithin-operator/276849)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:14pm UTC](https://discuss.elastic.co/t/notwithin-operator/276849 "2021-06-23T21:14:50Z")

</div>

I’m trying to achieve with searches Notwithin operators but no luck with intervals query, • a?e NOTWITHIN (How are yo?): find all the documents not having “a?e” (? can be any character) inside the phrase “How are yo?”…

---

## [Wildcard search](https://discuss.elastic.co/t/wildcard-search/276848)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:08pm UTC](https://discuss.elastic.co/t/wildcard-search/276848 "2021-06-23T21:08:10Z")

</div>

I’m trying to achieve searches with wildcard characters but no luck with match and intervals query, Alice \* \* \* Bob: find all the documents that have a 5-word phrase starting with “Alice” followed by 3 words and then …

---

## [Logstash error on new install](https://discuss.elastic.co/t/logstash-error-on-new-install/276819)

<div class="topic-metadata">

**Author:** [@scott2](https://discuss.elastic.co/u/scott2)\
**Replies:** 4\
**Last updated:** [June 23, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-error-on-new-install/276819 "2021-06-23T19:47:02Z")

</div>

I installed logstash 7.13.2 and i'm getting a couple configuration errors that I cannot seem to find the cause. \</\> Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"Log…

---

## [Solved: Logstash Is Receiving Data From Winlogbeat But Isn't Showing In Kibana](https://discuss.elastic.co/t/solved-logstash-is-receiving-data-from-winlogbeat-but-isnt-showing-in-kibana/276827)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 5:18pm UTC](https://discuss.elastic.co/t/solved-logstash-is-receiving-data-from-winlogbeat-but-isnt-showing-in-kibana/276827 "2021-06-23T17:18:01Z")

</div>

EDIT: I have found a solution to the problem so I am going to post it here just in case anyone else runs into the same issue. The thing that was missing from my config file was a way to specify the index. I don't underst…

[Previous page](https://discuss.elastic.co/latest.md?page=1604)

[Next page](https://discuss.elastic.co/latest.md?page=1606)
