# Latest **URL:** https://discuss.elastic.co/latest.md?page=1675 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1676 --- ## [Unable to connect to ibm\_mq from metricbeat](https://discuss.elastic.co/t/unable-to-connect-to-ibm-mq-from-metricbeat/273188)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 2:57pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-ibm-mq-from-metricbeat/273188 "2021-05-17T14:57:36Z")
Hi All, I am trying to connect to IBM MQ from metricbeat, in logstash, I have provided all the values required to connect to a queue manager like below :factory: com.ibm.mq.jms.MQQueueConnectionFactory :queue\_manager… --- ## [Sub Query without Xpack or Nested mappings](https://discuss.elastic.co/t/sub-query-without-xpack-or-nested-mappings/273187)
**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 2:49pm UTC](https://discuss.elastic.co/t/sub-query-without-xpack-or-nested-mappings/273187 "2021-05-17T14:49:51Z")
Trying to mimic the following SQL with the intent of using the results for Vega. SQL gets a count of employees who were active at the start date as well as the end date. I have a feeling this can't be done without neste… --- ## [ElasticSearch - Refresh issue ? Too many Requests ? Can't find documents randomly](https://discuss.elastic.co/t/elasticsearch-refresh-issue-too-many-requests-cant-find-documents-randomly/268197)
**Author:** [@Rayzbam](https://discuss.elastic.co/u/Rayzbam)\ **Replies:** 16\ **Last updated:** [May 17, 2021, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch-refresh-issue-too-many-requests-cant-find-documents-randomly/268197 "2021-05-17T13:34:30Z")
Hi, It's been some week i encounter some issues on ElasticSearch "Search" API. Sometimes, the search doesn't return a result which has been indexed before (sometimes while before, like 30min or 1hour). I made some res… --- ## [Kibana plugin development environment](https://discuss.elastic.co/t/kibana-plugin-development-environment/273053)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-environment/273053 "2021-05-17T14:25:39Z")
Hello, I've just download the latest kibana from Github and running on Ubuntu 18.04. I am following the setup process (Getting started | Kibana Guide \[7.12\] | Elastic), but I have an error when I run yarn kbn bootstrap … --- ## [Metricbeat stuck on "net/http: request canceled (Client.Timeout exceeded while awaiting headers)"](https://discuss.elastic.co/t/metricbeat-stuck-on-net-http-request-canceled-client-timeout-exceeded-while-awaiting-headers/273177)
**Author:** [@just-a-devops-mby](https://discuss.elastic.co/u/just-a-devops-mby)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 2:23pm UTC](https://discuss.elastic.co/t/metricbeat-stuck-on-net-http-request-canceled-client-timeout-exceeded-while-awaiting-headers/273177 "2021-05-17T14:23:05Z")
Hi! I'm having trouble with loading template into Elasticsearch. My cluster currently contains only one VM. Since i finished it's set up i moved into shipping data from the external VM via Metricbeat... and it didn't … --- ## [Visualize a value that is calculated by the period of time with next value](https://discuss.elastic.co/t/visualize-a-value-that-is-calculated-by-the-period-of-time-with-next-value/273056)
**Author:** [@Juanfri](https://discuss.elastic.co/u/Juanfri)\ **Replies:** 3\ **Last updated:** [May 17, 2021, 2:21pm UTC](https://discuss.elastic.co/t/visualize-a-value-that-is-calculated-by-the-period-of-time-with-next-value/273056 "2021-05-17T14:21:07Z")
Hi, i want to obtain a visualization with a calculated value. In order to calculate that value, i have to know the time of the next value, but I have no idea how to get some sort of array in order to make this kind of vi… --- ## [Kibana role with time based Index privileges](https://discuss.elastic.co/t/kibana-role-with-time-based-index-privileges/273108)
**Author:** [@remrem](https://discuss.elastic.co/u/remrem)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 2:03pm UTC](https://discuss.elastic.co/t/kibana-role-with-time-based-index-privileges/273108 "2021-05-17T14:03:54Z")
Hi Is there a way to limit a user when he/she can run a query using date math? For example user a can only see query result from now-1d to now? --- ## [Metricbeat 7.12.1 mapping error (cannot be changed from type)](https://discuss.elastic.co/t/metricbeat-7-12-1-mapping-error-cannot-be-changed-from-type/272559)
**Author:** [@Flavio\_Pompermaier](https://discuss.elastic.co/u/Flavio_Pompermaier)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 1:49pm UTC](https://discuss.elastic.co/t/metricbeat-7-12-1-mapping-error-cannot-be-changed-from-type/272559 "2021-05-17T13:49:14Z")
Hi to all, similarly to Metricbeat mapper error in 7.9.2 I have a problem when sending data from metricbeat to Logstash/Elasticsearch (7.12.1). I have enabled 3 modules: system, elasticsearch-xpack and logstash-xpack. … --- ## [Kibana Stack Monitoring Default Index?](https://discuss.elastic.co/t/kibana-stack-monitoring-default-index/273072)
**Author:** [@kodka](https://discuss.elastic.co/u/kodka)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 1:41pm UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-default-index/273072 "2021-05-17T13:41:18Z")
I'm trying to replace legacy collector with Metricbeat elasticsearch-xpack module. I want to give the index, where data will be stored, a specific name, because it will be used with lifecycle management, but now Kibana … --- ## [Make timeline table embeddable](https://discuss.elastic.co/t/make-timeline-table-embeddable/273130)
**Author:** [@mzm1370](https://discuss.elastic.co/u/mzm1370)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 1:34pm UTC](https://discuss.elastic.co/t/make-timeline-table-embeddable/273130 "2021-05-17T13:34:20Z")
Hi, we wanna use timeline table in security solution plugin in another scratched developed plugin that we coded before can anyone help us in this approach? Thanks --- ## [Starting error caused by content of config file that it doesn't actually include](https://discuss.elastic.co/t/starting-error-caused-by-content-of-config-file-that-it-doesnt-actually-include/273133)
**Author:** [@111475](https://discuss.elastic.co/u/111475)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 6:54am UTC](https://discuss.elastic.co/t/starting-error-caused-by-content-of-config-file-that-it-doesnt-actually-include/273133 "2021-05-17T06:54:53Z")
I have this config file (/etc/logstash/conf.g/my.config). ... output { elasticsearch { hosts =\> \["XXXX"\] index =\> "search\_log-%{+YYYY.MM.dd}" user =\> "XXXX" password =\> "XXXX" ssl =\> true cacert =\> "/etc/logstas… --- ## [Too many buckets exception error in dashboards](https://discuss.elastic.co/t/too-many-buckets-exception-error-in-dashboards/273077)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 1:13pm UTC](https://discuss.elastic.co/t/too-many-buckets-exception-error-in-dashboards/273077 "2021-05-17T13:13:58Z")
Hi all , I'm trying to fix the below too many buckets exception error {"error":{"root\_cause":\[{"type":"too\_many\_buckets\_exception","reason":"Trying to create too many buckets. Must be less than or equal to: \[10000\] but… --- ## [2 containers created but there is only one such spec in Elasticsearch.yaml](https://discuss.elastic.co/t/2-containers-created-but-there-is-only-one-such-spec-in-elasticsearch-yaml/273171)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 12:13pm UTC](https://discuss.elastic.co/t/2-containers-created-but-there-is-only-one-such-spec-in-elasticsearch-yaml/273171 "2021-05-17T12:13:02Z")
I am using the following manifest to create my Elasticsearch resource. I would expect that since for each set of nodes (master / data) I only have one container specification, only one of them would be created in each p… --- ## [Necessity of MANUALLY restarting (deleting) pods after volume expansion](https://discuss.elastic.co/t/necessity-of-manually-restarting-deleting-pods-after-volume-expansion/273160)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 11:47am UTC](https://discuss.elastic.co/t/necessity-of-manually-restarting-deleting-pods-after-volume-expansion/273160 "2021-05-17T11:47:26Z")
Perhaps its me but the docs seems a bit contradicting in terms of whether a manual restart is required after increasing the PVC size: On one hand: ECK will update the existing PersistentVolumeClaims accordingly, and r… --- ## [Log Collected Metrics instead of posting to APM server](https://discuss.elastic.co/t/log-collected-metrics-instead-of-posting-to-apm-server/272908)
**Author:** [@Anusha\_sunkadh](https://discuss.elastic.co/u/Anusha_sunkadh)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 11:29am UTC](https://discuss.elastic.co/t/log-collected-metrics-instead-of-posting-to-apm-server/272908 "2021-05-17T11:29:21Z")
Hi Team, Happy to use APM agent, thank you for the great documentation. Is this possible today ? We want to run standalone java application offline, with metrics getting collected in background and whenever the applica… --- ## [Direct Value](https://discuss.elastic.co/t/direct-value/273022)
**Author:** [@Dinesh\_Sharma1](https://discuss.elastic.co/u/Dinesh_Sharma1)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 11:26am UTC](https://discuss.elastic.co/t/direct-value/273022 "2021-05-17T11:26:38Z")
Hi, I have a CSV which is as follow: Name Age A 35 B 25 I want to make a visualization which will have Name on X-axis and Age on Y-axis. Now someone should be able to see the the corresponding a… --- ## [Elastic application is down because of unknown node.remote\_cluster\_client](https://discuss.elastic.co/t/elastic-application-is-down-because-of-unknown-node-remote-cluster-client/272484)
**Author:** [@Dawood](https://discuss.elastic.co/u/Dawood)\ **Replies:** 11\ **Last updated:** [May 17, 2021, 11:04am UTC](https://discuss.elastic.co/t/elastic-application-is-down-because-of-unknown-node-remote-cluster-client/272484 "2021-05-17T11:04:48Z")
--- ## [Create nested mappings there is still an error](https://discuss.elastic.co/t/create-nested-mappings-there-is-still-an-error/273138)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 10:35am UTC](https://discuss.elastic.co/t/create-nested-mappings-there-is-still-an-error/273138 "2021-05-17T10:35:33Z")
hallo, can you help me with this problem PUT office { "mappings": { "departments" : \[{ "properties":{ "id":{ "type":"integer" }, "deptName":{ "type":"string" }, "employee\_details":{ "type":"nested", "prope… --- ## [Elasticsearch Create a snapshot repository error](https://discuss.elastic.co/t/elasticsearch-create-a-snapshot-repository-error/60830)
**Author:** [@Canon88](https://discuss.elastic.co/u/Canon88)\ **Replies:** 13\ **Last updated:** [May 17, 2021, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-create-a-snapshot-repository-error/60830 "2021-05-17T10:16:46Z")
When I use curl -XPUT 'http://192.168.184.33:9200/\_snapshot/elkbak' -d '{"type": "fs","settings": {"location": "/data/elk\_bak","compress": true}}'. Shows the following error: {"error":{"root\_cause":\[{"type":"repository… --- ## [Logstash Secret Password ERROR](https://discuss.elastic.co/t/logstash-secret-password-error/273156)
**Author:** [@JAACNTT](https://discuss.elastic.co/u/JAACNTT)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 10:05am UTC](https://discuss.elastic.co/t/logstash-secret-password-error/273156 "2021-05-17T10:05:19Z")
Hello, I am trying to implement secret keystore from logstash, but I always get the same error: sudo /usr/share/logstash/bin/logstash-keystore create Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM … --- ## [How Alerts & Actions handles query delay in ML jobs alerts? v7.12](https://discuss.elastic.co/t/how-alerts-actions-handles-query-delay-in-ml-jobs-alerts-v7-12/273067)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 9:50am UTC](https://discuss.elastic.co/t/how-alerts-actions-handles-query-delay-in-ml-jobs-alerts-v7-12/273067 "2021-05-17T09:50:45Z")
Im having some problems with Alerts & Actions, usually when I create an alert it works the first time it found an anomlay but then I stop getting alerts, so I was wondering how Alerts & Actions handles query delay in ML … --- ## [Ruby pipeline permission denied sending to logstash](https://discuss.elastic.co/t/ruby-pipeline-permission-denied-sending-to-logstash/272584)
**Author:** [@Stan3005](https://discuss.elastic.co/u/Stan3005)\ **Replies:** 3\ **Last updated:** [May 17, 2021, 9:49am UTC](https://discuss.elastic.co/t/ruby-pipeline-permission-denied-sending-to-logstash/272584 "2021-05-17T09:49:27Z")
Hi, So I've set up an ELK stack. First time setting one up but installed elastic, kibana and logstash. When I go to localhost:5601 it takes me to the elastic dashboard. The problem I'm having is when I'm trying to sen… --- ## [Requirement for volume expansion by the operator](https://discuss.elastic.co/t/requirement-for-volume-expansion-by-the-operator/273149)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 9:45am UTC](https://discuss.elastic.co/t/requirement-for-volume-expansion-by-the-operator/273149 "2021-05-17T09:45:27Z")
Does the feature of volume auto expansion requires a csi-compliant driver? --- ## [\[ES v7.9.1\] What is the largest useful size setting for terms aggregations](https://discuss.elastic.co/t/es-v7-9-1-what-is-the-largest-useful-size-setting-for-terms-aggregations/273153)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 9:28am UTC](https://discuss.elastic.co/t/es-v7-9-1-what-is-the-largest-useful-size-setting-for-terms-aggregations/273153 "2021-05-17T09:28:38Z")
In order to get all the existing data we set the size parameter for each terms aggregation to 2147483647 (Integer.MAX) Depending on the number of documents, these queries run forever and consume massive memory. Actually… --- ## [How to connect sets of data in Kibana?](https://discuss.elastic.co/t/how-to-connect-sets-of-data-in-kibana/273150)
**Author:** [@Timo\_Warken](https://discuss.elastic.co/u/Timo_Warken)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 9:26am UTC](https://discuss.elastic.co/t/how-to-connect-sets-of-data-in-kibana/273150 "2021-05-17T09:26:58Z")
Hi there, I am not too deep in the matter, so please have forbearance. Here is my question: Is ist possible in Kibana to have two different datasets connected on one Point? For example if I have a set of data related to … --- ## [Output - support of keydb](https://discuss.elastic.co/t/output-support-of-keydb/273145)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 0\ **Last updated:** [May 17, 2021, 8:57am UTC](https://discuss.elastic.co/t/output-support-of-keydb/273145 "2021-05-17T08:57:55Z")
Hello, do you plan to support KEYDB (fork of Redis) as a output of Beats? --- ## [Connecting documents from different kibana indexes](https://discuss.elastic.co/t/connecting-documents-from-different-kibana-indexes/271983)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 8\ **Last updated:** [May 17, 2021, 7:36am UTC](https://discuss.elastic.co/t/connecting-documents-from-different-kibana-indexes/271983 "2021-05-17T07:36:16Z")
Hello Elastic-Community, I am wondering if there is a way to connect two datasets from two different indexes with each other to create a visualization. For example: From Index\_1 I receive general informations of a dev… --- ## [Filebeat dropping events](https://discuss.elastic.co/t/filebeat-dropping-events/271653)
**Author:** [@smanoranjan005](https://discuss.elastic.co/u/smanoranjan005)\ **Replies:** 6\ **Last updated:** [May 17, 2021, 7:50am UTC](https://discuss.elastic.co/t/filebeat-dropping-events/271653 "2021-05-17T07:50:38Z")
Hi, I am using filebeat as daemonset in Kubernetes to transfer application logs to Logstash to Elasticsearch. But the issue here is there is some data drop during this transfer to ES. There is only one filter in filebe… --- ## [ECK 1.5 cluster failed after restart nodes by "this node has not previously joined a bootstrapped (v7+) cluster, and \[cluster.initial\_master\_nodes\] is empty on this node"](https://discuss.elastic.co/t/eck-1-5-cluster-failed-after-restart-nodes-by-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-cluster-initial-master-nodes-is-empty-on-this-node/272359)
**Author:** [@rueian](https://discuss.elastic.co/u/rueian)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 7:46am UTC](https://discuss.elastic.co/t/eck-1-5-cluster-failed-after-restart-nodes-by-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-cluster-initial-master-nodes-is-empty-on-this-node/272359 "2021-05-17T07:46:11Z")
Hi, I am testing Elasticsearch cluster 7.12.1 with 3 nodes managed by ECK 1.5. Every thing works fine until I restart all GKE nodes. Steps: create GKE cluster apply eck\_all\_in\_one\_1.5.0.yaml apply my elasticsearch cr… --- ## [Coordinating node vs service Lod balancing different backends](https://discuss.elastic.co/t/coordinating-node-vs-service-lod-balancing-different-backends/272377)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 1\ **Last updated:** [May 17, 2021, 7:42am UTC](https://discuss.elastic.co/t/coordinating-node-vs-service-lod-balancing-different-backends/272377 "2021-05-17T07:42:59Z")
Hi All, I am setting up elasticsearch cluster on k8s using eck operator. we all know that service gets created ( clustername-es-http ) with all the backend endpoints as nodes(master,node etc etc). this behavior is defau… [Previous page](https://discuss.elastic.co/latest.md?page=1674) [Next page](https://discuss.elastic.co/latest.md?page=1676)