# Latest **URL:** https://discuss.elastic.co/latest.md?page=1667 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1668 --- ## [Bucket anomalies on interfaces that belong to a server](https://discuss.elastic.co/t/bucket-anomalies-on-interfaces-that-belong-to-a-server/273592)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 21, 2021, 12:07am UTC](https://discuss.elastic.co/t/bucket-anomalies-on-interfaces-that-belong-to-a-server/273592 "2021-05-21T00:07:14Z")
Hi, I have bandwidth utilization data from multiple interfaces that belong to multiple specifics server. and I was wondering if I can configure the job to create buckets anomalies only when interfaces that belong to a s… --- ## [Packetbeat hardware / software requirements](https://discuss.elastic.co/t/packetbeat-hardware-software-requirements/271729)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 11:20pm UTC](https://discuss.elastic.co/t/packetbeat-hardware-software-requirements/271729 "2021-05-20T23:20:01Z")
I have a sensor with a i5-4590, 8GB memory running packetbeat and am still getting "dropped\_because\_of\_gaps" I've followed all the directions about enabling af\_packet, etc yet even on a low traffic link (1-5mbps) I stil… --- ## [Ingest pipeline rename not working](https://discuss.elastic.co/t/ingest-pipeline-rename-not-working/273234)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 10:36pm UTC](https://discuss.elastic.co/t/ingest-pipeline-rename-not-working/273234 "2021-05-20T22:36:57Z")
Kibana version : 7.10.2 Elasticsearch version : 7.10.2 APM Server version : 7.10.2 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in… --- ## [Correlation Matrix](https://discuss.elastic.co/t/correlation-matrix/273583)
**Author:** [@dxenakis](https://discuss.elastic.co/u/dxenakis)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 9:36pm UTC](https://discuss.elastic.co/t/correlation-matrix/273583 "2021-05-20T21:36:38Z")
Hi, I have weather data into my elasticsearch from different weather forecast sites. In practice i use (scrapy) spiders in order to crawl the data from the sites and store them to elasticsearch. The index field struct… --- ## [Why stack\_trace field is not populated in discovery for filebeat-\* index pattern](https://discuss.elastic.co/t/why-stack-trace-field-is-not-populated-in-discovery-for-filebeat-index-pattern/273264)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 10:12am UTC](https://discuss.elastic.co/t/why-stack-trace-field-is-not-populated-in-discovery-for-filebeat-index-pattern/273264 "2021-05-18T10:12:35Z")
Hello, I am ingesting the java logs and when I have severe exceptions I am also having the error.stack\_trace.text field populated however I cannot see any of the error.stack\_trace nor the error.stack\_trace.textfields be… --- ## [Filebeat iptables module](https://discuss.elastic.co/t/filebeat-iptables-module/273319)
**Author:** [@bgreen](https://discuss.elastic.co/u/bgreen)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 9:22pm UTC](https://discuss.elastic.co/t/filebeat-iptables-module/273319 "2021-05-20T21:22:11Z")
Someone mentioned this in a post in October 2019 but it appears no one responded so I feel like I should ask again - is there a reason the iptables module is missing in the modules.d directory? --- ## [Range query for date in filter ratio - TSVB](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 8:25pm UTC](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900 "2021-05-20T20:25:53Z")
I want to calculate percentage of sales between offer period. I have multiple stores having offers running during multiple dates. I tried with TSVB, filter ratio as in below image. I'm getting 0% even having data for con… --- ## [Standalone apm agent is asking for a local user account password](https://discuss.elastic.co/t/standalone-apm-agent-is-asking-for-a-local-user-account-password/272184)
**Author:** [@molsza](https://discuss.elastic.co/u/molsza)\ **Replies:** 9\ **Last updated:** [May 20, 2021, 8:24pm UTC](https://discuss.elastic.co/t/standalone-apm-agent-is-asking-for-a-local-user-account-password/272184 "2021-05-20T20:24:46Z")
OS RedHat OpenJdk 11 Version 1.23.0 CLI agent, when run is asking for password. It is possible to just hit enter or provide wrong password and it will do the job. But for what it is asking, even if I am try to run it a… --- ## [Error fetching fields for index pattern metricbeat](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat/273427)
**Author:** [@thrak](https://discuss.elastic.co/u/thrak)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 8:11pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat/273427 "2021-05-20T20:11:51Z")
Hello, Whenever I try to look at a Metricbeat dashboard, could be for anything, I get multiple spurious errors that pop up off to the side, Error fetching fields for index pattern metricbeat.\*, see attached screenshot. … --- ## [Ipv6 at dashboard](https://discuss.elastic.co/t/ipv6-at-dashboard/273482)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/ipv6-at-dashboard/273482 "2021-05-20T19:55:04Z")
why in 1 hostname detect 2 ip. ipv4 and ipv6 --- ## [Kibana - calculate average bucket over multi layer data](https://discuss.elastic.co/t/kibana-calculate-average-bucket-over-multi-layer-data/273261)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 7:53pm UTC](https://discuss.elastic.co/t/kibana-calculate-average-bucket-over-multi-layer-data/273261 "2021-05-20T19:53:17Z")
Hi, I'm able to calculate average bucket score over one layer of data, but not on two lever hierarchy data. Example: A-parent-group m-group t-team 1 A-parent-group m-group t-team 4 A-parent-group n-group p-tea… --- ## [Logstash reads input files but does not write any output](https://discuss.elastic.co/t/logstash-reads-input-files-but-does-not-write-any-output/273575)
**Author:** [@fmanfredi](https://discuss.elastic.co/u/fmanfredi)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 7:14pm UTC](https://discuss.elastic.co/t/logstash-reads-input-files-but-does-not-write-any-output/273575 "2021-05-20T19:14:20Z")
Hi, I'm having problems with logstash. Looks like it is capable of reaching and reading the files I want it to read but there is no sign of processing and output. I'm trying to write both to elasticsearch and stdout bu… --- ## [Logstash: input file plugin and tcp plugins](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 31\ **Last updated:** [May 20, 2021, 7:13pm UTC](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058 "2021-05-20T19:13:40Z")
I have 4 pipelines. 3 using tcp plugin and 1 using file plugin. pipeline with input file plugin works fine independently, but when i add 3 other tcp plugin pipeline, the input file plugin pipeline stops running (after s… --- ## [Load more than 1 million row from SQL Server to ES with Logstash JDBC](https://discuss.elastic.co/t/load-more-than-1-million-row-from-sql-server-to-es-with-logstash-jdbc/273563)
**Author:** [@Dai\_Thai\_Hoa\_Vo](https://discuss.elastic.co/u/Dai_Thai_Hoa_Vo)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/load-more-than-1-million-row-from-sql-server-to-es-with-logstash-jdbc/273563 "2021-05-20T18:30:56Z")
Hi every one. I have one case that my table has more 1 million rows in SQL Server and I used logstash JDBC to load them to Elastic Search. It work fine but run very slow. This is my file config. input { jdbc { jdbc… --- ## [Running ELK Stack - Lab Environment - Ubuntu](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/running-elk-stack-lab-environment-ubuntu/272827 "2021-05-20T18:30:00Z")
a newbie trying to integrate zeek logs and import them to elk stack. Running a lab environment inside Ubuntu 20.04. Elk stack running using Google Cloud Platform Tried to config filebeats, but I might be getting the c… --- ## [Logstash input plugin](https://discuss.elastic.co/t/logstash-input-plugin/273574)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 6:29pm UTC](https://discuss.elastic.co/t/logstash-input-plugin/273574 "2021-05-20T18:29:56Z")
Has anyone experienced a behavior where logstash is not discovering new files and incorrectly marking new discovery as false? \[2021-05-20T18:20:02,794\]\[TRACE\]\[filewatch.discoverer \] discover\_files {"count"=\>2254} \[2… --- ## [Logstash mutate remove field name 'JSON'](https://discuss.elastic.co/t/logstash-mutate-remove-field-name-json/273572)
**Author:** [@raghav\_krishna\_agarw](https://discuss.elastic.co/u/raghav_krishna_agarw)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 6:19pm UTC](https://discuss.elastic.co/t/logstash-mutate-remove-field-name-json/273572 "2021-05-20T18:19:11Z")
I am trying to remove a field name "JSON" in my mongoDB record, while dumping in ELK. But it is not working, may be the case of reserve keyword. Below is the document structure: "date" : \, "name" : "xyz", "JSON" … --- ## [Custom Visualisation in Kibana 7.5.1](https://discuss.elastic.co/t/custom-visualisation-in-kibana-7-5-1/273550)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 5:49pm UTC](https://discuss.elastic.co/t/custom-visualisation-in-kibana-7-5-1/273550 "2021-05-20T17:49:24Z")
I found that we should place our custom viz inside kibana/plugins folder? But I couldn't find any such folder in the directory structure. Where should I place the folder and how should I start with my development. Could … --- ## [FTP logs - Filebeat](https://discuss.elastic.co/t/ftp-logs-filebeat/273430)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 7\ **Last updated:** [May 20, 2021, 4:52pm UTC](https://discuss.elastic.co/t/ftp-logs-filebeat/273430 "2021-05-20T16:52:10Z")
Hello there, Is there a way to set Filebeat to retrieve al the files from a folder located in a FTP server? if yes, can you please give me more information on how to configure filebeat for that? if no, what is the alte… --- ## [Saving a specific array element in Logstash](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 4:47pm UTC](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556 "2021-05-20T16:47:12Z")
Hi I am receiving a JSON object with an array property. I would like to search the array and save only the element that matches my criteria. My input looks like this: { "identifier": \[ { "system" : "Source1", "va… --- ## [Implementing Kibana map plugin into custom app](https://discuss.elastic.co/t/implementing-kibana-map-plugin-into-custom-app/273484)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 4:35pm UTC](https://discuss.elastic.co/t/implementing-kibana-map-plugin-into-custom-app/273484 "2021-05-20T16:35:42Z")
Hi team, i need to use map to display issues. Is it possible to implement map plugin from Kibana to my custom app? Kibana 7.10.0 --- ## [LogStash::ConvergeResult::FailedAction while tryting to use pipeline output](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 4:30pm UTC](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564 "2021-05-20T16:30:00Z")
Hi folks, this is my test.conf: input { beats { port =\> 6150 } } output { if \[agent\]\[type\] == "metricbeat" { elasticsearch { ... } } else if \[fields\]\[log\_type\] == "audit" { elasticsearch { … --- ## [SLM: Only one snapshot can be taken at a time. To avoid snapshot failures, edit or delete the policies](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [May 20, 2021, 4:02pm UTC](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500 "2021-05-20T16:02:29Z")
Hi, Does it mean that if you do schedule multiple snapshots on the same time they: Will be queued, meaning that they might start later than scheduled but eventually they will execute and take a snapshot. Or does i… --- ## [There is insufficient memory for the Java Runtime Environment to continue while using --config.test\_and\_exit](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 3:42pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561 "2021-05-20T15:42:59Z")
When I try to test the config of my logstash pipeline I run into this error: \[bash\]$ logstash --config.test\_and\_exit -f /path/to/config.conf OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in … --- ## [Introduce data with more lenght than 255 characters in Data Table](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545 "2021-05-20T15:07:56Z")
Hi! Is there any solution to watch data with more than 255 characters from MySQL in a Data Table placed inside a dashboard of Kibana? I have this response: Can someone help me with this? Thank you very much!! --- ## [Aggregation across multiple indices](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350)
**Author:** [@ice2021](https://discuss.elastic.co/u/ice2021)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350 "2021-05-20T15:07:36Z")
I have 2 indices and they store data of the same mappings on different dates - t1 and t2. I have a multi term aggregation below which works on a single index. How can I get elasticsearch to return the same aggregation a… --- ## [Is there a KQL API endpoint and/or a way to run KQL queries from CLI?](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557)
**Author:** [@el\_tedward](https://discuss.elastic.co/u/el_tedward)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 2:49pm UTC](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557 "2021-05-20T14:49:20Z")
In older versions of Kibana, you could get the full Kibana query syntax by just running query\_string queries with a few options that Kibana sets by default, though it doesn't appear you can do that any longer (in a fully… --- ## [Elasticsearch cluster data migration](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538 "2021-05-20T14:36:10Z")
I have 10 nodes in one cluster(in a server). I want to dump all documents from this cluster. After that, import these docs to new cluster. The new cluster will be have only one node. I have followed this tutorial After … --- ## [When will vega-lite version 5 be supported?](https://discuss.elastic.co/t/when-will-vega-lite-version-5-be-supported/273551)
**Author:** [@jlvrhee](https://discuss.elastic.co/u/jlvrhee)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:30pm UTC](https://discuss.elastic.co/t/when-will-vega-lite-version-5-be-supported/273551 "2021-05-20T14:30:17Z")
From beginning of this year vega-lite 5 has been released. https://github.com/vega/vega-lite/releases When will this new version be supported in Kibana? --- ## [Error initializing beat: error loading config file: stat filebeat.yml: no such file or directory](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415)
**Author:** [@Marc\_Aurnold](https://discuss.elastic.co/u/Marc_Aurnold)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 2:28pm UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415 "2021-05-20T14:28:31Z")
Hey Teams Elasticsearch, When I am running this command: ./filebeat -e -c filebeat.yml output: -bash: ./filebeat: cannot execute binary file: Exec format error I would like to know which advise can help me to solve … [Previous page](https://discuss.elastic.co/latest.md?page=1666) [Next page](https://discuss.elastic.co/latest.md?page=1668)