# Latest **URL:** https://discuss.elastic.co/latest.md?page=1659 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1660 --- ## [Possible goroutine leak in sql module when database is not available](https://discuss.elastic.co/t/possible-goroutine-leak-in-sql-module-when-database-is-not-available/273850)
**Author:** [@simioa](https://discuss.elastic.co/u/simioa)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 9:22am UTC](https://discuss.elastic.co/t/possible-goroutine-leak-in-sql-module-when-database-is-not-available/273850 "2021-05-26T09:22:05Z")
Used metricbeat Version: 7.12.1 Hello, we're using the metricbeat sql module to gather some metrics. During Downtime of our Database, I observed slowly increasing memory consumption from metricbeat. I tried to reprodu… --- ## [Increasing number of pending tasks despite small number of shards](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562)
**Author:** [@crl](https://discuss.elastic.co/u/crl)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 9:16am UTC](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562 "2021-05-26T09:16:46Z")
Hi I'm fairly new to Elasticsearch and I'm trying to maintain a small cluster. Currently I'm having trouble with a growing number of pending tasks. In all other threads that I have looked at the issue have been caused … --- ## [Kafka 2.4.1 compatiblity with Logstash and Filebeat 7.10.2](https://discuss.elastic.co/t/kafka-2-4-1-compatiblity-with-logstash-and-filebeat-7-10-2/274029)
**Author:** [@Thilak1](https://discuss.elastic.co/u/Thilak1)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 8:51am UTC](https://discuss.elastic.co/t/kafka-2-4-1-compatiblity-with-logstash-and-filebeat-7-10-2/274029 "2021-05-26T08:51:44Z")
Hi , I am planning to use ELK 7.10.2 with Kafka 2.4.1. Are filebeat-7.10.2 and logstash-7.10.2 input/output plugins are compatible with Kafka-2.4.1. --- ## [Is it ok to use Kibana's saved\_objects optionJSON for custom attributes?](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435)
**Author:** [@shuber](https://discuss.elastic.co/u/shuber)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 8:44am UTC](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435 "2021-05-26T08:44:35Z")
Hello, I'm working with Kibana dashboards that I'm embedding in pages. I'd like to add metadata to the dashboards and I noticed there is a structure called optionJSON in the saved\_objects structure for dashboards. Is it… --- ## [Clarification of Elastic Synthetic Monitoring Submit button up and down monitors actual scenarios](https://discuss.elastic.co/t/clarification-of-elastic-synthetic-monitoring-submit-button-up-and-down-monitors-actual-scenarios/273417)
**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 8:33am UTC](https://discuss.elastic.co/t/clarification-of-elastic-synthetic-monitoring-submit-button-up-and-down-monitors-actual-scenarios/273417 "2021-05-26T08:33:08Z")
Hi Team, Please view the below of our questions/queries: What are we trying to do? We are trying to validate if the page is working or not based on action of submit button in the heartbeat.yml file inline script. wha… --- ## [Auditbeat auditd module vs. elastic agent auditd integration](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983)
**Author:** [@lepepa9493](https://discuss.elastic.co/u/lepepa9493)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 8:07am UTC](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983 "2021-05-26T08:07:47Z")
What is the difference between using the auditbeat auditd module and using the elastic agent auditd integration? How can I use the elastic agent auditd integration with a custom auditd rules file or any other configurat… --- ## [Synthetic test script 'examples/inline/short' hover action fails](https://discuss.elastic.co/t/synthetic-test-script-examples-inline-short-hover-action-fails/273667)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 7:53am UTC](https://discuss.elastic.co/t/synthetic-test-script-examples-inline-short-hover-action-fails/273667 "2021-05-26T07:53:14Z")
Hi all, I'm willing to explore the new syntethic features. I downloaed the repo, and launched the command: cat examples/inline/short.js | npx @elastic/synthetics --inline However, the script failed to complete the ho… --- ## [Watcher Error](https://discuss.elastic.co/t/watcher-error/273951)
**Author:** [@Simon\_Arbel](https://discuss.elastic.co/u/Simon_Arbel)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 7:27am UTC](https://discuss.elastic.co/t/watcher-error/273951 "2021-05-26T07:27:31Z")
Hi I'm using the new Kibana ver 7.12. Im trying to setup a new API watcher for sending alerts to BMC trusight manager. I've configured the parameters depicted in the attached screenshot, however I'm getting this error… --- ## [Version 7.12 does not work on Windows](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203)
**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 7:24am UTC](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203 "2021-05-26T07:24:52Z")
Can't install version 7.12 on Windows 10 Pro, getting this error: Error: Could not find or load main class org.elasticsearch.tools.java\_version\_checker.JavaVersionChecker Caused by: java.lang.ClassNotFoundException: o… --- ## [Different time field instead of @timestamp and filters](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:48am UTC](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924 "2021-05-26T06:48:26Z")
Hi, I've recently inherited an ELK instance where all indexes are mapped with @timestamp as time field. Users are complaining a lot because the meaningful timestamp is not @timestamp, but some @event\_time field instead.… --- ## [APM RUM Client IP not correct](https://discuss.elastic.co/t/apm-rum-client-ip-not-correct/272251)
**Author:** [@binschlag](https://discuss.elastic.co/u/binschlag)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 6:39am UTC](https://discuss.elastic.co/t/apm-rum-client-ip-not-correct/272251 "2021-05-26T06:39:30Z")
Kibana version: 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: Java agent (elastic-apm-rum.umd-5.6.1.js) Browser version: different browsers Original install method (… --- ## [Send logs to multiples spaces](https://discuss.elastic.co/t/send-logs-to-multiples-spaces/273912)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 6:15am UTC](https://discuss.elastic.co/t/send-logs-to-multiples-spaces/273912 "2021-05-26T06:15:25Z")
Good morning. I would like to know if it's possible to send logs from a logstash server to multiples spaces in a same elastic cloud (kibana). If this is possible, what have I to add in logstash.yml file to send the info… --- ## [Change value of a datum field using signal](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:03am UTC](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158 "2021-05-26T06:03:51Z")
Hi, I'm trying to have data that are relative to each one of my data. I've tried to use signal's data but i didn't managed to make them relative to one and only one value of my data. i decided to add a field in my data… --- ## [Unable to read logs files](https://discuss.elastic.co/t/unable-to-read-logs-files/273891)
**Author:** [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 5:48am UTC](https://discuss.elastic.co/t/unable-to-read-logs-files/273891 "2021-05-26T05:48:37Z")
Good morning, I'm trying to read log files from a concrete path. My configuration is the following input { file { path =\> "/path/proxy/access2.log" start\_position =\> "beginning" … --- ## [Cannot search new documents after reindexing](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911)
**Author:** [@Andrey2](https://discuss.elastic.co/u/Andrey2)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 3:10am UTC](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911 "2021-05-26T03:10:11Z")
Hi all, I'm having a problem with reindexing. I have an index called emails, after reindexing, I can get/post documents to this index normally. But for new documents, I cannot get these when search by property or show… --- ## [Nest - Search path](https://discuss.elastic.co/t/nest-search-path/273946)
**Author:** [@silentw](https://discuss.elastic.co/u/silentw)\ **Replies:** 10\ **Last updated:** [May 26, 2021, 1:18am UTC](https://discuss.elastic.co/t/nest-search-path/273946 "2021-05-26T01:18:28Z")
I am trying to use the Nest client to consume an Elasticsearch instance. However, the /\_search endpoint is in fact /search . Is there any possible way to change the behavior of the client to reflect this change? I hav… --- ## [{PayloadSenderV2} Failed sending events. Following events were not transferred successfully to the server](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/269363)
**Author:** [@Rolfen](https://discuss.elastic.co/u/Rolfen)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 1:11am UTC](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/269363 "2021-05-26T01:11:31Z")
Kibana version: None Elasticsearch version: None APM Server version: 7.10.1 (amd64), libbeat 7.10.1 \[b7c209e80c4674603447458e62963ed5246b5297 built 2020-12-04 22:07:34 +0000 UTC\] APM Agent language and version: .Net C… --- ## [Single node, large database index performance](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865)
**Author:** [@twbarr](https://discuss.elastic.co/u/twbarr)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 12:34am UTC](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865 "2021-05-26T00:34:12Z")
I have a set of documents that I'm trying to load into a single large index on a single node. About seven million documents, about 400gb of text. The fields are in different files, so I'm just using a script that loads e… --- ## [Prebuilt Rule Reference](https://discuss.elastic.co/t/prebuilt-rule-reference/273991)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:55pm UTC](https://discuss.elastic.co/t/prebuilt-rule-reference/273991 "2021-05-25T23:55:08Z")
Hi, I finally have setup my lab environment and fully working now. I'm ready to use prebuilt rules, my question is how, how do I start? I was able to use one rule because it clearly stated in the documentation copy xxxx… --- ## [Cannot restore index](https://discuss.elastic.co/t/cannot-restore-index/273910)
**Author:** [@Tuyen](https://discuss.elastic.co/u/Tuyen)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:08pm UTC](https://discuss.elastic.co/t/cannot-restore-index/273910 "2021-05-25T23:08:04Z")
Backup and index to a gzip using stdout: elasticdump --input=http://production.es.com:9200/my\_index --output=$ | gzip \> /data/my\_index.json.gz After dump index to my\_index.json.gz success I cannot restore them. So… --- ## [Security Vulnerability in ELK stack during docker scan by twistlock](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:02pm UTC](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927 "2021-05-25T23:02:52Z")
Hello, Below vulnerabilities are flagged during docker image scan. Is there any official response/statement on the docker scan vulnerabilities check from elastic? CVE-2020-25649 CVE-2020-28491 CVE-2017-18640 CVE-202… --- ## [Python module - use master nodes or data nodes?](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 10:58pm UTC](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848 "2021-05-25T22:58:28Z")
When using python bulk load should I open connection with master node or data node? elastic\_output = Elasticsearch(\[master1,master2\], http\_auth=(elastic\_admin\_user, elastic\_admin\_passwd),port=9200) and then write data … --- ## [Elasticsearch cluster kibana randomly slow on some requests](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 10\ **Last updated:** [May 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174 "2021-05-25T22:57:36Z")
Elasticsearch cluster kibana randomly slow on some requests Hi everyone, I have a perfomance issue when navigating on kibana admin interface. It takes a lot of time to display the contents: genearlly on items in SECURT… --- ## [Failed to parse the date format](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 5\ **Last updated:** [May 25, 2021, 10:55pm UTC](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400 "2021-05-25T22:55:55Z")
Hi, I am not able to parse 06-MAY-21 03.00.01.491228 AM date format into elasticsearch. Please help me out for this Thank you. --- ## [Messages are not al same, how to grok?](https://discuss.elastic.co/t/messages-are-not-al-same-how-to-grok/273993)
**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 10:26pm UTC](https://discuss.elastic.co/t/messages-are-not-al-same-how-to-grok/273993 "2021-05-25T22:26:47Z")
Logs sent by my gateway are not exactly same, how to handle missing fields in the logs with grok. Below Works TDM,50c9676c6d24,udm-1.9.3.3438 kernel: \[1393127.673482\] IN=br20 \*\*\*OUT=eth4\*\*\* MAC=74:ac:b9:1e:f3:00:e8:b1:… --- ## [LogStash seems to mask jdbc sql exception and exits with code 0](https://discuss.elastic.co/t/logstash-seems-to-mask-jdbc-sql-exception-and-exits-with-code-0/273992)
**Author:** [@trickett\_space](https://discuss.elastic.co/u/trickett_space)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 9:48pm UTC](https://discuss.elastic.co/t/logstash-seems-to-mask-jdbc-sql-exception-and-exits-with-code-0/273992 "2021-05-25T21:48:07Z")
/usr/share/logstash/bin/logstash --path.data /usr/share/logstash/data\_supplier -f ./supplier.conf ... Starting Logstash {"logstash.version"=\>"7.10.2", "jruby.version"=\>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc Open… --- ## [Kibana 7.10 OSS homebrew install is not available](https://discuss.elastic.co/t/kibana-7-10-oss-homebrew-install-is-not-available/273878)
**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\ **Replies:** 4\ **Last updated:** [May 25, 2021, 8:54pm UTC](https://discuss.elastic.co/t/kibana-7-10-oss-homebrew-install-is-not-available/273878 "2021-05-25T20:54:47Z")
The docs on Kibana 7.10 say: To install the OSS distribution, specify elastic/tap/kibana-oss But trying this fires the error Error: Invalid tap name 'elastic/tap/kibana-oss' Please note that the commit 230b860 on h… --- ## [Configuring filebeat.yml](https://discuss.elastic.co/t/configuring-filebeat-yml/273775)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 5\ **Last updated:** [May 24, 2021, 7:49am UTC](https://discuss.elastic.co/t/configuring-filebeat-yml/273775 "2021-05-24T07:49:59Z")
Hi, I'm following instructions on the documentation provided on this site to configure filebeat.yml file. filebeat.inputs: - type: log paths: - /path/to/file/logstash-tutorial.log output.logstash: hosts: \["loc… --- ## [Apply Grok to a log file](https://discuss.elastic.co/t/apply-grok-to-a-log-file/273979)
**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 8:49pm UTC](https://discuss.elastic.co/t/apply-grok-to-a-log-file/273979 "2021-05-25T20:49:51Z")
I have thease following logs: {"type":"audit\_entry","created":"5/20/2021, 11:12:42 PM","colaborador\_id":"cf7dc62b-dde9-4980-89d8-96eb5707876e","ip":"192.168.112.6","request\_method":"PUT","ajax":false,"route":"/stock/art… --- ## [SIEM timeline cant be saved](https://discuss.elastic.co/t/siem-timeline-cant-be-saved/273963)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 8:31pm UTC](https://discuss.elastic.co/t/siem-timeline-cant-be-saved/273963 "2021-05-25T20:31:38Z")
I'm using ELK v7.8 How to save SIEM timelines? The autosave feature mentioned in the blogs/doc can not be seen for me. DO I need to enable something? I'm super user with all the access [Previous page](https://discuss.elastic.co/latest.md?page=1658) [Next page](https://discuss.elastic.co/latest.md?page=1660)