# Latest **URL:** https://discuss.elastic.co/latest.md?page=1636 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1637 --- ## [Cannot get failed shard back online](https://discuss.elastic.co/t/cannot-get-failed-shard-back-online/275003)
**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 6:33am UTC](https://discuss.elastic.co/t/cannot-get-failed-shard-back-online/275003 "2021-06-08T06:33:17Z")
Hi, I'm trying to get failed shard in a single node cluster back online. The cluster is a single docker container running the docker.elastic.co/elasticsearch/elasticsearch:7.9.2 image. It has 10 indices and somewhere thi… --- ## [In RHEL OS Kibana stop results in core dump generation](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009)
**Author:** [@gora](https://discuss.elastic.co/u/gora)\ **Replies:** 6\ **Last updated:** [June 8, 2021, 6:30am UTC](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009 "2021-06-08T06:30:46Z")
In RHEL OS, when we try to stop kibana it results in core dump generation. OS Version: RHEL 7.8 While checking the log it shows the node process which is running received SIG QUIT signal. This is happening particularl… --- ## [Logstash is not listening on the port from .conf file](https://discuss.elastic.co/t/logstash-is-not-listening-on-the-port-from-conf-file/275023)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 6:29am UTC](https://discuss.elastic.co/t/logstash-is-not-listening-on-the-port-from-conf-file/275023 "2021-06-08T06:29:50Z")
I am trying to get TCP 6514 for SSL enabled logs to Logstash. I created a simple .conf file with no filters and then restarted Logstash. Still the localhost doesn't seems to listen on 6514. In addition to this, when I … --- ## [Access to filter values in script kibana](https://discuss.elastic.co/t/access-to-filter-values-in-script-kibana/273753)
**Author:** [@AR\_2021](https://discuss.elastic.co/u/AR_2021)\ **Replies:** 8\ **Last updated:** [June 8, 2021, 6:28am UTC](https://discuss.elastic.co/t/access-to-filter-values-in-script-kibana/273753 "2021-06-08T06:28:13Z")
In kibana want to use filter bar value in my script (Advance section). Is there a way or a function to access the filter value in script? or any solution ? --- ## [Dropdown Filters clear each other](https://discuss.elastic.co/t/dropdown-filters-clear-each-other/275234)
**Author:** [@Nico\_Weisenauer](https://discuss.elastic.co/u/Nico_Weisenauer)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 6:20am UTC](https://discuss.elastic.co/t/dropdown-filters-clear-each-other/275234 "2021-06-08T06:20:42Z")
Hi, I have multiple dropdown filters as can be seen in the following screenshot. As soon as I select a second filter from a dropdown, the first dropdown is reset and cleared. How can I achieve filtering by multiple … --- ## [APM RUM GPDR](https://discuss.elastic.co/t/apm-rum-gpdr/274732)
**Author:** [@ibexit](https://discuss.elastic.co/u/ibexit)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 6:19am UTC](https://discuss.elastic.co/t/apm-rum-gpdr/274732 "2021-06-08T06:19:51Z")
Is there any way to configure the APM agent in compliance with the GPDR? Something like this: Configure Real User Monitoring according to GDPR | Dynatrace Documentation --- ## [Get not running a cluster with 1 node on 3 hosts](https://discuss.elastic.co/t/get-not-running-a-cluster-with-1-node-on-3-hosts/275069)
**Author:** [@andreas.bader](https://discuss.elastic.co/u/andreas.bader)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 6:18am UTC](https://discuss.elastic.co/t/get-not-running-a-cluster-with-1-node-on-3-hosts/275069 "2021-06-08T06:18:45Z")
I spent a lot of time to get a cluster running with one node on 3 different hosts, but all the configuration tips I found didn't fix the problem. I'm using Version 7.9. This is what I have configured: cluster.name: elk… --- ## [Filter and ouput is skipped when apply a tag conditional statement](https://discuss.elastic.co/t/filter-and-ouput-is-skipped-when-apply-a-tag-conditional-statement/275228)
**Author:** [@ivanhoe-dev](https://discuss.elastic.co/u/ivanhoe-dev)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 6:16am UTC](https://discuss.elastic.co/t/filter-and-ouput-is-skipped-when-apply-a-tag-conditional-statement/275228 "2021-06-08T06:16:05Z")
In my use case, I have around 20 csv to upload, so I prepare 20 logstash config files and add an unique tag for each of them to filter and output conditionally. However, when I run logstash in the directory, only one of … --- ## [Logstash Elasticsearch input plugin mTLS](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-mtls/275098)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 6:14am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-mtls/275098 "2021-06-08T06:14:14Z")
I have question related to mutual TLS authentication in case of using logstash Elasticsearch input plugin. I have Elasticsearch cluster installed and configured to work over tls using mutual authentication. Now I want t… --- ## [Kibana already restart](https://discuss.elastic.co/t/kibana-already-restart/275156)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 12\ **Last updated:** [June 8, 2021, 5:18am UTC](https://discuss.elastic.co/t/kibana-already-restart/275156 "2021-06-08T05:18:34Z")
Kibana restarts for an unknown reason, LOG: C:\\\\ELK\\\\kibana-7.1.1-windows-x86\_64\\\\node\_modules\\\\x-pack"} {"type":"log","@timestamp":"2021-06-07T13:22:29Z","tags":\["debug","legacy-proxy"\],"pid":16240,"message":"\\"getCo… --- ## [Create visualization like inventory in metrics tab](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 4\ **Last updated:** [June 8, 2021, 4:53am UTC](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140 "2021-06-08T04:53:40Z")
Hi, I have created infrastructure monitoring dashboards without using metricbeat as currently there is no support for power machines. I haven't used ECS mapping. I want to create a similar visualization below in dashbo… --- ## [What’s the sort score difference between elasticsearch7.9.3 and elasticsearch6.8.0?](https://discuss.elastic.co/t/what-s-the-sort-score-difference-between-elasticsearch7-9-3-and-elasticsearch6-8-0/275225)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 3:40am UTC](https://discuss.elastic.co/t/what-s-the-sort-score-difference-between-elasticsearch7-9-3-and-elasticsearch6-8-0/275225 "2021-06-08T03:40:44Z")
i test in the elasticsearch7.9.3 using below query clause: URL: https://elastic:password@MACHINENAME:9500/indexname/\_search query post body: { "explain": true, "from": 0, "size": 130, "query": { "bool": { "… --- ## [Logstash DLQ not starting up (Dockerized LS)](https://discuss.elastic.co/t/logstash-dlq-not-starting-up-dockerized-ls/275220)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 3:28am UTC](https://discuss.elastic.co/t/logstash-dlq-not-starting-up-dockerized-ls/275220 "2021-06-08T03:28:34Z")
Hi, I have a Dockerized LS setup working on a pipeline (Logstash Docker 7.13) I added the DLQ settings via environment variables to the LS container and run another pipeline in the same container (named as "dlq-mypipel… --- ## [Can we use rest or API calls in steps in a journey for synthetic monitoring?](https://discuss.elastic.co/t/can-we-use-rest-or-api-calls-in-steps-in-a-journey-for-synthetic-monitoring/274122)
**Author:** [@AKP](https://discuss.elastic.co/u/AKP)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 2:46am UTC](https://discuss.elastic.co/t/can-we-use-rest-or-api-calls-in-steps-in-a-journey-for-synthetic-monitoring/274122 "2021-06-08T02:46:07Z")
I am on 7.12 version and want to know if we can use api calls as steps in a journey. My goal is to monitor one service call which is a set of multiple calls. For example, getting a key/auth is step 1 and calling the real… --- ## [Please tell me how to change the logo in Kibana 7.13.0](https://discuss.elastic.co/t/please-tell-me-how-to-change-the-logo-in-kibana-7-13-0/275219)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 2:29am UTC](https://discuss.elastic.co/t/please-tell-me-how-to-change-the-logo-in-kibana-7-13-0/275219 "2021-06-08T02:29:19Z")
How do I change the elastic logo from Kibana 7.13.0 to the company logo? my elk version : 7.13.0 Changes made in kibana 7.13.0 Change logo and title in web browser tags Change the text that comes out when loading My… --- ## [Extending Platinum trial license](https://discuss.elastic.co/t/extending-platinum-trial-license/275150)
**Author:** [@dani\_pulido](https://discuss.elastic.co/u/dani_pulido)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 1:04am UTC](https://discuss.elastic.co/t/extending-platinum-trial-license/275150 "2021-06-08T01:04:29Z")
Hi, I am trying to extend my platinum trial license for 30 additional days. I've filled the form but I haven't received the license by mail. I've already put two different emails, the personal one and the company one but… --- ## [ELK to Qradar API](https://discuss.elastic.co/t/elk-to-qradar-api/275180)
**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 1:03am UTC](https://discuss.elastic.co/t/elk-to-qradar-api/275180 "2021-06-08T01:03:30Z")
How i can tied ELK with Qradar API --- ## [How backup delete indices](https://discuss.elastic.co/t/how-backup-delete-indices/275080)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 17\ **Last updated:** [June 8, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-backup-delete-indices/275080 "2021-06-08T00:59:06Z")
Hi! System indexes were accidentally deleted, name: .kibana, .kibana\_1, .kibana\_task\_manager, .security, .security-7 Log text on Elasticsearch: \[2021-06-02T17:44:32,369\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[AGILEVLG… --- ## [Connect to Eleasticsearch with Vscode](https://discuss.elastic.co/t/connect-to-eleasticsearch-with-vscode/275215)
**Author:** [@s-ho](https://discuss.elastic.co/u/s-ho)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 12:30am UTC](https://discuss.elastic.co/t/connect-to-eleasticsearch-with-vscode/275215 "2021-06-08T00:30:28Z")
Does anyone try to connect to the elastic cloud using the "elastic search for VScode" plugin? or Do you use other IDEs connect to the elastic cloud? Just wish to do all the coding on my preferable interface. Thx --- ## [Fanotify vs inotify](https://discuss.elastic.co/t/fanotify-vs-inotify/275213)
**Author:** [@nwed](https://discuss.elastic.co/u/nwed)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 12:15am UTC](https://discuss.elastic.co/t/fanotify-vs-inotify/275213 "2021-06-08T00:15:56Z")
Hello, on kube we currently leverage two iterations of the file\_integrity module. First, we monitor paths under /hostfs, this has been stable for us. Second, we use the auditbeat.autodiscover with containerd to monitor c… --- ## [Scripted fields values not getting populated on visualize but are populated during discover](https://discuss.elastic.co/t/scripted-fields-values-not-getting-populated-on-visualize-but-are-populated-during-discover/274931)
**Author:** [@nitish012](https://discuss.elastic.co/u/nitish012)\ **Replies:** 10\ **Last updated:** [June 7, 2021, 11:48pm UTC](https://discuss.elastic.co/t/scripted-fields-values-not-getting-populated-on-visualize-but-are-populated-during-discover/274931 "2021-06-07T23:48:00Z")
Hi Kibana Experts, I am using Kibana scripted fields using painless to populate a URL like this: Url Template : https://dummy\_url?branch={{value}}&id=abc Script: if (!doc\['branch\_name'\].empty) { return (doc\['branc… --- ## [Updating index with new field, based on the values of existing fields](https://discuss.elastic.co/t/updating-index-with-new-field-based-on-the-values-of-existing-fields/275144)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:44pm UTC](https://discuss.elastic.co/t/updating-index-with-new-field-based-on-the-values-of-existing-fields/275144 "2021-06-07T23:44:50Z")
Hello, I have an index with two fields: City\_1 and City\_2. I would like to create a new field and update all existing documents based on the outcome of the following logical test: If City\_1 = City\_2 Then Match Else No … --- ## [Index lifecycle error - index.lifecycle.rollover\_alias syntax](https://discuss.elastic.co/t/index-lifecycle-error-index-lifecycle-rollover-alias-syntax/274933)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 11:30pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-index-lifecycle-rollover-alias-syntax/274933 "2021-06-07T23:30:19Z")
Hey All, Can someone help me with the syntax required? Or maybe I am missing something else? I got this error on the indices. This is my ILM policy below. How should I add the alias part? PUT \_ilm/policy/ilm-36-h… --- ## [Unable to view the monitor up/down details in Kibana dashboard through docker run in multiple .js/.ts files](https://discuss.elastic.co/t/unable-to-view-the-monitor-up-down-details-in-kibana-dashboard-through-docker-run-in-multiple-js-ts-files/274093)
**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:15pm UTC](https://discuss.elastic.co/t/unable-to-view-the-monitor-up-down-details-in-kibana-dashboard-through-docker-run-in-multiple-js-ts-files/274093 "2021-06-07T23:15:15Z")
Title:-Unable to view the monitor up/down details in Kibana dashboard through docker run in multiple .js/.ts files Description: Hi Team, we are currently run the "heartbeat.yml" file with the config of multiple .js fil… --- ## [Heartbeat Maximum No. of Monitors](https://discuss.elastic.co/t/heartbeat-maximum-no-of-monitors/274206)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:09pm UTC](https://discuss.elastic.co/t/heartbeat-maximum-no-of-monitors/274206 "2021-06-07T23:09:21Z")
Saw this thread way back 4 years ago but it seems like there's no update or similar thread regarding this. We wanted to monitor millions of websites/services atleast once a day. We can run a job that can configure the … --- ## [Python bulk insert error](https://discuss.elastic.co/t/python-bulk-insert-error/275044)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 9:33pm UTC](https://discuss.elastic.co/t/python-bulk-insert-error/275044 "2021-06-07T21:33:28Z")
Using python code I am getting this error. if I use same code same data and just change index name it works. Is something wrong with existing index? how do I find this out? raise BulkIndexError("%i document(s) failed… --- ## [Recurring errors when backing up to GCS - FileAlreadyExistsException](https://discuss.elastic.co/t/recurring-errors-when-backing-up-to-gcs-filealreadyexistsexception/275205)
**Author:** [@hub](https://discuss.elastic.co/u/hub)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 9:07pm UTC](https://discuss.elastic.co/t/recurring-errors-when-backing-up-to-gcs-filealreadyexistsexception/275205 "2021-06-07T21:07:18Z")
Hello, I have a recurring errors when Im doing snapshot to GCS bucket: {\\"type\\":\\"index\_shard\_snapshot\_failed\_exception\\",\\"reason\\":\\"IndexShardSnapshotFailedException\[Failed to perform snapshot (index files)\]; nested… --- ## [Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggregation \[3\] must have min\_doc\_count of 0;](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033)
**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:54pm UTC](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033 "2021-06-07T20:54:24Z")
Greetings everyone Yesterday we updated elastic from 7.4.x to 7.10.1 and some of our grafana dashboards broke with the following error: Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggrega… --- ## [ELK Agent - Parse Custom NGINX Log](https://discuss.elastic.co/t/elk-agent-parse-custom-nginx-log/275203)
**Author:** [@peganet](https://discuss.elastic.co/u/peganet)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 8:50pm UTC](https://discuss.elastic.co/t/elk-agent-parse-custom-nginx-log/275203 "2021-06-07T20:50:19Z")
Hello there, I am using "Custom Log Format" on my NGINX Reverse Proxy server. I want to make a Dashboard for myself, but the logs appear as messages. When I use the common log format instead of Custom, the data appears … --- ## [Total number of file descriptors in system](https://discuss.elastic.co/t/total-number-of-file-descriptors-in-system/275199)
**Author:** [@crash0er](https://discuss.elastic.co/u/crash0er)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 8:27pm UTC](https://discuss.elastic.co/t/total-number-of-file-descriptors-in-system/275199 "2021-06-07T20:27:35Z")
Hello, How can I get total number of file descriptors in elastic metricbeat? I referred to this commit but this is only per process. Reference: System fields | Metricbeat Reference \[7.13\] | Elastic Is there a system.… [Previous page](https://discuss.elastic.co/latest.md?page=1635) [Next page](https://discuss.elastic.co/latest.md?page=1637)