# Latest **URL:** https://discuss.elastic.co/latest.md?page=1639 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1640 --- ## [Azure service bus](https://discuss.elastic.co/t/azure-service-bus/275085)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:59am UTC](https://discuss.elastic.co/t/azure-service-bus/275085 "2021-06-07T04:59:21Z")
Hi Elastic Team, I am just wondering if I want to import Azure Service Bus metrics and logs, what is the best approach for doing it. Most of the docs online I am coming across is getting activity logs (they are differe… --- ## [Need to write DSL to check if these 4 events occur within 1 second](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096 "2021-06-07T04:40:02Z")
1. 31628 2021-02-13T00:20:49.325893Z - xyz svn/repos open 2. 31628 2021-02-13T00:20:49.607437Z - xyz svn/repos get-latest 3. 31628 2021-02-13T00:20:49.888794Z - xyz svn/repos reparent 4. 31628 2021-02-13T00:20:50.170101… --- ## [The code does not exist in the custom logokibana guide](https://discuss.elastic.co/t/the-code-does-not-exist-in-the-custom-logokibana-guide/274968)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:34am UTC](https://discuss.elastic.co/t/the-code-does-not-exist-in-the-custom-logokibana-guide/274968 "2021-06-07T04:34:33Z")
The code does not exist in the custom logokibana guide. First of all, my Kibana version is 7.13.0. The code does not exist while trying to replace the loading logo image. How should I change it? -\> The part marke… --- ## [How do I change the elastic logo from Kibana 7.13.0 to the company logo?](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045 "2021-06-07T04:33:51Z")
How do I change the elastic logo from Kibana 7.13.0 to the company logo? How do I change the elastic logo from Kibana 7.13.0 to the company logo? my elk version : 7.13.0 Changes made in kibana 7.13.0 Change logo and… --- ## [ElasticAPMSpanId does not show up](https://discuss.elastic.co/t/elasticapmspanid-does-not-show-up/274879)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:30am UTC](https://discuss.elastic.co/t/elasticapmspanid-does-not-show-up/274879 "2021-06-07T04:30:53Z")
I have installed the NuGet package Elastic.Apm.SerilogEnricher to my asp.net core web app (mvc) project. My application is using Serilog to write logs directly to elasticsearch. When I added this NuGet package it tells m… --- ## [Is it possible to recover the data if we delete the segment file for the index?](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941)
**Author:** [@Josephyan](https://discuss.elastic.co/u/Josephyan)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941 "2021-06-07T04:29:13Z")
Hi Everyone, If the segment files were deleted for the index, is it possible to recover the index's data? Thanks a lot for your great help! Elasticsearch version: 2.1 Regards, Joe --- ## [SAML Authentication version](https://discuss.elastic.co/t/saml-authentication-version/274953)
**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:28am UTC](https://discuss.elastic.co/t/saml-authentication-version/274953 "2021-06-07T04:28:13Z")
HI Team, we are trying to configure SAML authentication for Kibana but in subscription plans it mentioned like SAML SSO but can I know it is SAML 1.0 or SAML 1.1 version and which is best suitable for Kibana , can you p… --- ## [Error authentication](https://discuss.elastic.co/t/error-authentication/275005)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:17am UTC](https://discuss.elastic.co/t/error-authentication/275005 "2021-06-07T04:17:18Z")
\[2021-06-04T22:36:16,657\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or command line options are specified \[2021-06-04T22:36:16,704\]\[INFO \]\[logstash.runner \] Star… --- ## [Building elasticsearch on windows 10](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021)
**Author:** [@manishbansal8843](https://discuss.elastic.co/u/manishbansal8843)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 9:50am UTC](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021 "2021-06-05T09:50:51Z")
Hey All! I am trying to build elastic search on my local windows 10 box using jdk 15. As per ReadMe, i have executed gradlew localDistro. But i am getting following error. D:\\OpenSource\\elasticsearch\>gradlew localDi… --- ## [My Kibana is not showing logs from created indexes](https://discuss.elastic.co/t/my-kibana-is-not-showing-logs-from-created-indexes/275051)
**Author:** [@uxair996](https://discuss.elastic.co/u/uxair996)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:13am UTC](https://discuss.elastic.co/t/my-kibana-is-not-showing-logs-from-created-indexes/275051 "2021-06-07T04:13:58Z")
Hi everyone i am facing issue. My kibana is not displaying logs from the indices. Whenever I tried to request using devtools. There hits and logs are showing but I am unable to see in discover tab. --- ## [Kibana not working with HPA](https://discuss.elastic.co/t/kibana-not-working-with-hpa/275067)
**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:12am UTC](https://discuss.elastic.co/t/kibana-not-working-with-hpa/275067 "2021-06-07T04:12:49Z")
I am trying to deploy the KIBANA on Kubernetes. With a single pod, it is working fine, but when I try to increase the number of pods of kibana. I got stuck on an infinite loop on the kibana login screen. I am just using… --- ## [CSRF Protection in kibana 7.10.2](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [June 6, 2021, 2:23pm UTC](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629 "2021-06-06T14:23:15Z")
Report tools report that dashboard URLs don't have csrf protection. When looked at the request and response, don't see a csrf token in the get/post request. Please help me to enable CSRF in Kibana UI so that the request… --- ## [Elasticsearch all shards failed](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088)
**Author:** [@jake\_JJ](https://discuss.elastic.co/u/jake_JJ)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 2:41am UTC](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088 "2021-06-07T02:41:43Z")
\[2021-06-04T10:27:19,423\]\[WARN \]\[o.e.m.f.FsHealthService \] \[node-9800\] health check of \[/data/elasticsearch-7.12.0-9800/data/nodes/0\] took \[2144291ms\] which is above the warn threshold of \[5s\] \[2021-06-04T10:33:24,887\]\[… --- ## [Log akamai to elastic](https://discuss.elastic.co/t/log-akamai-to-elastic/274960)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [June 4, 2021, 8:29am UTC](https://discuss.elastic.co/t/log-akamai-to-elastic/274960 "2021-06-04T08:29:22Z")
i have an akamai, and i want to all log from akamai can detect and analysis with my elastic. what should i do to pull log akamai to elastic? --- ## [Is it necessary to copy synonym.txt to all nodes?](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 1:04am UTC](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746 "2021-06-07T01:04:38Z")
I have a cluster of 3 nodes. My index is located on node-2 (primary shard) and node-3 (replica shard) and node-1 is currently master...Anyway, I have my own synonym.txt and I need to know that, should I have to copy my … --- ## [Processing large log files in logstash failing with \_jsonparsefailure error](https://discuss.elastic.co/t/processing-large-log-files-in-logstash-failing-with-jsonparsefailure-error/275077)
**Author:** [@tejpatil](https://discuss.elastic.co/u/tejpatil)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 12:54am UTC](https://discuss.elastic.co/t/processing-large-log-files-in-logstash-failing-with-jsonparsefailure-error/275077 "2021-06-07T00:54:06Z")
The setup is like this. We send the files from mainframe to logstash server through CFI(Tibco MFT) basically a file transfer. The log file have around 700k lines in it and it is in JSON format. This is what I think is ha… --- ## [Metricbeat CPU percent on Hyper-V Server](https://discuss.elastic.co/t/metricbeat-cpu-percent-on-hyper-v-server/275083)
**Author:** [@notrix](https://discuss.elastic.co/u/notrix)\ **Replies:** 0\ **Last updated:** [June 6, 2021, 8:50pm UTC](https://discuss.elastic.co/t/metricbeat-cpu-percent-on-hyper-v-server/275083 "2021-06-06T20:50:37Z")
hey all, currently facing a problem with mericbeat on a Windows Server 2019 with Hyper-V role installed. This server is a pure virtualization server, hosting a lot of VMs. Using metricbeat 7.13.1 and have the following… --- ## [Logstash unable to Access AWS elasticsearch getting 403 role permissions seems fine](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059)
**Author:** [@Akhil\_Beeravalli05](https://discuss.elastic.co/u/Akhil_Beeravalli05)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 11:43am UTC](https://discuss.elastic.co/t/logstash-unable-to-access-aws-elasticsearch-getting-403-role-permissions-seems-fine/275059 "2021-06-06T11:43:34Z")
\[2021-06-06T08:38:50,640\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://search-xxxxxx-elasticsearch-n2wtsxzzf23iyifadn4mi2fmfy.us-ea… --- ## [How to determine how much volume is needed in an Elasticsearch cluster?](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054)
**Author:** [@Barani\_A](https://discuss.elastic.co/u/Barani_A)\ **Replies:** 3\ **Last updated:** [June 6, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054 "2021-06-06T14:43:36Z")
Hi All, I have to procure an elasticsearch cluster, part of it is to specify how much volume we would require in GB and how much the size can grow everyday. Is there any way I can calculate the volume needed? My use ca… --- ## [APM Consuming lot of reatined Heap and Blocked APM Threads in Thread Dump](https://discuss.elastic.co/t/apm-consuming-lot-of-reatined-heap-and-blocked-apm-threads-in-thread-dump/273778)
**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\ **Replies:** 6\ **Last updated:** [June 6, 2021, 12:42pm UTC](https://discuss.elastic.co/t/apm-consuming-lot-of-reatined-heap-and-blocked-apm-threads-in-thread-dump/273778 "2021-06-06T12:42:14Z")
Hello, We have deployed one java service into Kubernetes with a Heap Size of around 8GB. We also run APM along with it using the below command. java -javaagent:/home/user/elastic-apm-agent-1.23.0.jar -jar -Delastic.apm… --- ## [Master takes another cluster UUID when recovers](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026)
**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\ **Replies:** 6\ **Last updated:** [June 6, 2021, 11:30am UTC](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026 "2021-06-06T11:30:12Z")
Hello, I am running an Elasticsearch cluster on the Kubernetes cluster. My cluster has the following nodes. Master nodes : 3 Data nodes : 3 Client nodes : minimum 2(they can vary on autoscaling) My Data nodes have … --- ## [CLA signing issue](https://discuss.elastic.co/t/cla-signing-issue/275031)
**Author:** [@hmilkovi](https://discuss.elastic.co/u/hmilkovi)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 9:30am UTC](https://discuss.elastic.co/t/cla-signing-issue/275031 "2021-06-06T09:30:06Z")
Hi all, can please someone from Elastic team help to check CLA signing? First I noticed that I had different email in commits that I fixed in last commit of PR. PR: Handle RecursionError exception in perform\_request (… --- ## [How to use 'Terms' query to return value in my search order?](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052)
**Author:** [@sathiez](https://discuss.elastic.co/u/sathiez)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 7:22am UTC](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052 "2021-06-06T07:22:12Z")
My doc: {"local\_id" : 1654, "universal\_id" : 5412896 } { "local\_id" : 1657, "universal\_id" : 9658742 } { "local\_id" : 1658, "universal\_id" : 6325412 } My query : {"from": 0, "size": 10,"query": { "bool": { "must" : \[… --- ## [Elastic Search architecture](https://discuss.elastic.co/t/elastic-search-architecture/275046)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 5:28am UTC](https://discuss.elastic.co/t/elastic-search-architecture/275046 "2021-06-06T05:28:43Z")
Hi , can someone please share the architecture diagram of es and ELK stack. am interested to know, how the cluster is managed, how do we know when the node went down, data replication etc. it would be really helpful i… --- ## [Kibanaでスペースにvisualizationを追加するときの権限](https://discuss.elastic.co/t/kibana-visualization/272878)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 3\ **Last updated:** [June 6, 2021, 4:55am UTC](https://discuss.elastic.co/t/kibana-visualization/272878 "2021-06-06T04:55:52Z")
Kibana7.8.1 でシステム構築をしています。 Kibanaで、新たに スペース:spc\_a を作成し、そのスペースのみを編集できるユーザ：user\_a を作りたいと思っています。 user\_a には、spc\_a の権限として\[all\] を与えていますが、スペースを選択してVisualizeを選択すると、下記のようなポップアップエラーが出ます。 --------------------------------------… --- ## [Max emits for creating runtime field](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042)
**Author:** [@robert-n-stewart](https://discuss.elastic.co/u/robert-n-stewart)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 9:04pm UTC](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042 "2021-06-05T21:04:41Z")
Hello, I'm trying to create a runtime field which takes a multi-value long field and converts it to a multi-value string field. This way I can perform a regex search on it. The following search works, but only for field… --- ## [Metricbeat "System Overview" dashboards in Kibana are blank](https://discuss.elastic.co/t/metricbeat-system-overview-dashboards-in-kibana-are-blank/274812)
**Author:** [@jclemons7](https://discuss.elastic.co/u/jclemons7)\ **Replies:** 7\ **Last updated:** [June 5, 2021, 7:38pm UTC](https://discuss.elastic.co/t/metricbeat-system-overview-dashboards-in-kibana-are-blank/274812 "2021-06-05T19:38:13Z")
Hello, I've been trying to figure this out for a while now.. and initially I thought it had to do with my beats agent no matching my ELK version, but I updated everything today and the problem persists. On the Kibana da… --- ## [Elasticsearch + Xpack + Kibana + Docker + Nginx](https://discuss.elastic.co/t/elasticsearch-xpack-kibana-docker-nginx/274368)
**Author:** [@feelan](https://discuss.elastic.co/u/feelan)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-xpack-kibana-docker-nginx/274368 "2021-06-05T18:48:00Z")
Hello. I am having a problem with kibana working. I have an elastic cluster of 3 nodes. For fault tolerance, I decided to install kibana in swarm-cluster with Nginx Reverse Proxy. When trying to log in, I am catching a 3… --- ## [Filebeat Filtering - Drop Event when NOT contain field that equals a value](https://discuss.elastic.co/t/filebeat-filtering-drop-event-when-not-contain-field-that-equals-a-value/274463)
**Author:** [@valhalla](https://discuss.elastic.co/u/valhalla)\ **Replies:** 8\ **Last updated:** [June 5, 2021, 6:20pm UTC](https://discuss.elastic.co/t/filebeat-filtering-drop-event-when-not-contain-field-that-equals-a-value/274463 "2021-06-05T18:20:44Z")
Hi all, I need your help in order to filter some logs. What I need to do is to drop the events of all my logs that don't have an alert object in them with a severity of 3. I want to save in Elasticsearch only those that… --- ## [java.lang.NullPointerException: Cannot invoke "java.util.List.stream()"](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [June 5, 2021, 4:08pm UTC](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937 "2021-06-05T16:08:39Z")
I don't know what's going on. Can the elastic team explain this error report? \[2021-06-04T09:00:01,713\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[es-node01\] collector \[cluster\_stats\] failed to collect data java.lang.N… [Previous page](https://discuss.elastic.co/latest.md?page=1638) [Next page](https://discuss.elastic.co/latest.md?page=1640)