# Latest **URL:** https://discuss.elastic.co/latest.md?page=1698 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1699 --- ## [Kibana crashes](https://discuss.elastic.co/t/kibana-crashes/271900)
**Author:** [@jordan\_sumitomo](https://discuss.elastic.co/u/jordan_sumitomo)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 2:41pm UTC](https://discuss.elastic.co/t/kibana-crashes/271900 "2021-05-03T14:41:05Z")
I've recently started trying out elasticsearch and kibana but kibana crashes Here's my kibana log log \[17:39:57.905\] \[info\]\[plugins-service\] Plugin "osquery" is disabled. log \[17:39:58.029\] \[warning\]\[config\]\[d… --- ## [Vuegen scripts and Salenium scripts need to replace with Playwright for Synthetic](https://discuss.elastic.co/t/vuegen-scripts-and-salenium-scripts-need-to-replace-with-playwright-for-synthetic/271970)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 2:40pm UTC](https://discuss.elastic.co/t/vuegen-scripts-and-salenium-scripts-need-to-replace-with-playwright-for-synthetic/271970 "2021-05-03T14:40:03Z")
Hi Team, Do we have any info on how we can convert our Vuegen scripts and Selenium scripts to Playwright supported by Elastic Synthetic? Any lead will be appreciated as we are planning to move 10,000 synthetic monitori… --- ## [Filebeat setup without Kibana?](https://discuss.elastic.co/t/filebeat-setup-without-kibana/271958)
**Author:** [@davidwhthomas](https://discuss.elastic.co/u/davidwhthomas)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-setup-without-kibana/271958 "2021-05-03T14:31:31Z")
Working on a setup where log data is stored in elasticsearch using filebeat. However, we don't need Kibana (lovely although it is) for this application. The data is queried separately via an API. I read: Configure Kiba… --- ## [Disable Saved Search's Result Expand](https://discuss.elastic.co/t/disable-saved-searchs-result-expand/271887)
**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 2:26pm UTC](https://discuss.elastic.co/t/disable-saved-searchs-result-expand/271887 "2021-05-03T14:26:37Z")
Don't want to have to rely on data tables due to performance, but don't want users to be able to see every single field by expanding the row in the saved search on their dashboard. Any way around this? --- ## [What is the pricing as well as disadvantages for ElasticCloud on Linux](https://discuss.elastic.co/t/what-is-the-pricing-as-well-as-disadvantages-for-elasticcloud-on-linux/271926)
**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 1:59pm UTC](https://discuss.elastic.co/t/what-is-the-pricing-as-well-as-disadvantages-for-elasticcloud-on-linux/271926 "2021-05-03T13:59:55Z")
what is the pricing as well as disadvantages for ElasticCloud on Linux --- ## [Geo point for new ECS mapped Geo fields using JDBC](https://discuss.elastic.co/t/geo-point-for-new-ecs-mapped-geo-fields-using-jdbc/271846)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 2:07pm UTC](https://discuss.elastic.co/t/geo-point-for-new-ecs-mapped-geo-fields-using-jdbc/271846 "2021-05-03T14:07:33Z")
Hello, I am trying to map Geo Lat and Long for internal IPs to ECS geo fields such as \[source\]\[geo\]\[location\] using logstash. The standard geoip filter works well for external ips and i see it nicely mapped to the ecs … --- ## [Logstash / Protobuf plugin, removing oneOf fields that aren't set (are null)](https://discuss.elastic.co/t/logstash-protobuf-plugin-removing-oneof-fields-that-arent-set-are-null/271994)
**Author:** [@SCollins](https://discuss.elastic.co/u/SCollins)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 1:48pm UTC](https://discuss.elastic.co/t/logstash-protobuf-plugin-removing-oneof-fields-that-arent-set-are-null/271994 "2021-05-03T13:48:43Z")
I'm using the logstash protobuf plugin as a mechanism to read protobuf from kafka, convert it from protobuf and write it to elasticsearch. The problem we are having is, the oneOf fields, despite being null/not set in the… --- ## [Implications of using ECK Beats to write to logs-\* metrics-\*](https://discuss.elastic.co/t/implications-of-using-eck-beats-to-write-to-logs-metrics/271833)
**Author:** [@jam01](https://discuss.elastic.co/u/jam01)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 1:44pm UTC](https://discuss.elastic.co/t/implications-of-using-eck-beats-to-write-to-logs-metrics/271833 "2021-05-03T13:44:32Z")
Hey guys! We've been building up our Kubernetes platform using ECK and its custom Beat resources. We recently ran into an issue where we needed to apply different ILM policies to different types of data and we found dat… --- ## [Unable to paginate a PIT search without a sort clause](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 1:34pm UTC](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793 "2021-05-03T13:34:01Z")
Hello, I am trying to paginate a search but I am unable to do so because results don't include the sort field to search after. However, from what I understand reading the search\_after documentation Paginate search resul… --- ## [Filebeat Azure module not compatible with Maps visualisation](https://discuss.elastic.co/t/filebeat-azure-module-not-compatible-with-maps-visualisation/271910)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 1:18pm UTC](https://discuss.elastic.co/t/filebeat-azure-module-not-compatible-with-maps-visualisation/271910 "2021-05-03T13:18:28Z")
I am using Filebeat Azure module to fetch activity logs and sign-in logs. Logstash is running between Filebeat and Elasticsearch and pushing data to a custom index cloud-audit-azure. Using a custom index to store data p… --- ## [How to a emit a value for a runtime field of type geo\_point?](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 8\ **Last updated:** [May 3, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889 "2021-05-03T12:50:00Z")
I am trying to execute a query for a geo\_point value with a runtime mapping, which according to the docs should work, but it is failing. keywords and long values work fine. For example... Where src.city.name is a keywor… --- ## ["Pipeline does not exist" issue with sonicwall filebeat module](https://discuss.elastic.co/t/pipeline-does-not-exist-issue-with-sonicwall-filebeat-module/271067)
**Author:** [@Tony51](https://discuss.elastic.co/u/Tony51)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 12:41pm UTC](https://discuss.elastic.co/t/pipeline-does-not-exist-issue-with-sonicwall-filebeat-module/271067 "2021-05-03T12:41:21Z")
Hi, I'm sending logs from filebeat to logstash but it I'm getting this error from logstash connecting to elastisearch: \[2021-04-20T10:50:47,200\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] 673b0cb9e015302058e251f502b8… --- ## [기본 analyzer 확장 방법?](https://discuss.elastic.co/t/analyzer/271969)
**Author:** [@jongpyo.lee](https://discuss.elastic.co/u/jongpyo.lee)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 11:18am UTC](https://discuss.elastic.co/t/analyzer/271969 "2021-05-03T11:18:28Z")
예제 데이터 입니다. POST coding/\_bulk {"index":{"\_id":"1"}} {"language":"xyz\_foo@abc"} 기본 analyzer는 @은 구분하지만 \_기호는 구분하지 않는 것을 \_termvectors을 통해 확인하였습니다. GET coding/\_termvectors/1?fields=language { "\_index" : "coding", ... … --- ## [Webhook action with https fails](https://discuss.elastic.co/t/webhook-action-with-https-fails/270699)
**Author:** [@mtoivo](https://discuss.elastic.co/u/mtoivo)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 10:49am UTC](https://discuss.elastic.co/t/webhook-action-with-https-fails/270699 "2021-05-03T10:49:50Z")
Hi. I'm trying to https-enable a webhook-action, which works fine over plain http. The endpoint is nginx server, where ssl-setup is verified and working. Watcher webhook to the same server works fine over https. I under… --- ## [The JSON filter can extract empty field names, which are then unusable by Logstash](https://discuss.elastic.co/t/the-json-filter-can-extract-empty-field-names-which-are-then-unusable-by-logstash/271963)
**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 10:45am UTC](https://discuss.elastic.co/t/the-json-filter-can-extract-empty-field-names-which-are-then-unusable-by-logstash/271963 "2021-05-03T10:45:00Z")
Hi, I've found a situation where the JSON filter and valid JSON can cause unusable Logstash events. It comes from 2 facts: An empty string is a valid JSON key, as explained for example in this stackoverflow answer. It … --- ## [Kibana Observability Metrics - Issue](https://discuss.elastic.co/t/kibana-observability-metrics-issue/271901)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 10:18am UTC](https://discuss.elastic.co/t/kibana-observability-metrics-issue/271901 "2021-05-03T10:18:30Z")
Hello Elastic Community Members, Currently, I'm facing issue in loading the metrics (auto populated graphs) over the metricbeat data. I tried 2 scenarios here to figure out this issue, let me brief that in detail. Sce… --- ## [Sharepoint OnPremise](https://discuss.elastic.co/t/sharepoint-onpremise/271956)
**Author:** [@Nassera](https://discuss.elastic.co/u/Nassera)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 10:17am UTC](https://discuss.elastic.co/t/sharepoint-onpremise/271956 "2021-05-03T10:17:23Z")
Bonjour Je suis actuellement en train d'étudier l'éventualité d'utiliser la suite ELK pour la recherche sur notre infra sharepoint onPremise 2013 et sur le NAS. Mais avant de réaliser un POC, nous souhaiterions obtenir … --- ## [Workplace data](https://discuss.elastic.co/t/workplace-data/271952)
**Author:** [@stefanof](https://discuss.elastic.co/u/stefanof)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 9:41am UTC](https://discuss.elastic.co/t/workplace-data/271952 "2021-05-03T09:41:24Z")
Hello! I would love to understand where is Workplace crawled data stored. I'm assuming that's stored inside my Elasticsearch indexes, but where? I'm asking because I'm interested in knowing: Where is my data going? I… --- ## [Ship Kubernenetes events logs to kibana](https://discuss.elastic.co/t/ship-kubernenetes-events-logs-to-kibana/271388)
**Author:** [@frozen\_walker](https://discuss.elastic.co/u/frozen_walker)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 1:50pm UTC](https://discuss.elastic.co/t/ship-kubernenetes-events-logs-to-kibana/271388 "2021-04-27T13:50:13Z")
How can we ship Kubernetes events logs to kibana. ie: That we can get from kubectl get events command. example output: LAST SEEN TYPE REASON OBJECT MESSAGE 47s Warning Failed p… --- ## [Ship Kubernenetes events logs to kibana](https://discuss.elastic.co/t/ship-kubernenetes-events-logs-to-kibana/271390)
**Author:** [@frozen\_walker](https://discuss.elastic.co/u/frozen_walker)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 1:55pm UTC](https://discuss.elastic.co/t/ship-kubernenetes-events-logs-to-kibana/271390 "2021-04-27T13:55:37Z")
How can we ship Kubernetes events logs to kibana. ie: That we can get from kubectl get events command. example output: LAST SEEN TYPE REASON OBJECT MESSAGE 47s Warning Failed p… --- ## [Metricbeat: failed to publish events -\> security\_exception](https://discuss.elastic.co/t/metricbeat-failed-to-publish-events-security-exception/271505)
**Author:** [@sderungs](https://discuss.elastic.co/u/sderungs)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 12:14pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-publish-events-security-exception/271505 "2021-04-28T12:14:32Z")
Hi, While upgrading our environment (self-hosted) from 7.8 to 7.12 I'm trying to setup Metricbeat to monitor my Elasticsearch cluster as described in the deprecation log shown on startup and in the Stack Monitoring in K… --- ## [Index data on disk between versions](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857)
**Author:** [@zissop](https://discuss.elastic.co/u/zissop)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 9:12am UTC](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857 "2021-05-03T09:12:40Z")
Hello I have setup 2 different elasticsearch instances on 2 different servers. The first is elasticsearch v 7.10 and the other v 7.12 I create the same exact index and use the same exact data for indexing, both are 100… --- ## [What is the recommend memory size to run logstash?](https://discuss.elastic.co/t/what-is-the-recommend-memory-size-to-run-logstash/271083)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 13\ **Last updated:** [May 3, 2021, 8:47am UTC](https://discuss.elastic.co/t/what-is-the-recommend-memory-size-to-run-logstash/271083 "2021-05-03T08:47:46Z")
Hi all, Please explain What is the recommend memory size to run logstash. Thanks --- ## [Missing results using query\_string wildcard query with rewrite top\_terms\_n](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680)
**Author:** [@carantunes](https://discuss.elastic.co/u/carantunes)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 8:40am UTC](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680 "2021-05-03T08:40:25Z")
I'm using Elasticsearch version 7.1.1. I'm experiencing a weird behaviour. When using top\_terms\_n in order to obtain a score in wildcard query\_string queries almost all results are missing. Without top\_terms\_n I obtain… --- ## [A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/271946)
**Author:** [@Safir](https://discuss.elastic.co/u/Safir)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 8:37am UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/271946 "2021-05-03T08:37:09Z")
/Users/lab/Desktop/logstash/logstash-core/lib/logstash/java\_pipeline.rb:396:in block in start\_input' \[2021-05-03T11:31:51,605\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[6a3d8ecc5c72c85e305635d46ccbd177399eb255a591231ec278b… --- ## [Stopping Elasticsearch causes Windows Server to crash/restart](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608)
**Author:** [@mbalzary](https://discuss.elastic.co/u/mbalzary)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 8:35am UTC](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608 "2021-05-03T08:35:00Z")
Hi, we installed Elasticsearch 7.10 on a Windows Server 2016. Only configuration changes made are regarding cluster.name and node.name. Elasticsearch can be started without a problem and runs, but when it is stopped it … --- ## [Kibana dashboard dynamic labeling](https://discuss.elastic.co/t/kibana-dashboard-dynamic-labeling/271852)
**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 8:14am UTC](https://discuss.elastic.co/t/kibana-dashboard-dynamic-labeling/271852 "2021-05-03T08:14:09Z")
We can just add the single data column and the contents be visible in the drop down of Control Visualization. Is there any way so that we get the all the data column as the dropdown list? --- ## [Authentication to realm default native failed - Password authentication failed for xyz](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed-for-xyz/271759)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 8:09am UTC](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed-for-xyz/271759 "2021-05-03T08:09:15Z")
Hi All, Elasticsearch-version-7.6.2 I have created xyz admin user for only monitoring the url. For that I have created one custom role and add that role into the user. Below is my role code with the name my\_admin\_role … --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/271929)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 7:15am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/271929 "2021-05-03T07:15:44Z")
Hi, I am trying to index my data into Elasticsearch from logstash but I keep getting this type of errors for all indices. Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"… --- ## [Setup X-pack](https://discuss.elastic.co/t/setup-x-pack/271497)
**Author:** [@Stefan\_Stopka](https://discuss.elastic.co/u/Stefan_Stopka)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 6:48am UTC](https://discuss.elastic.co/t/setup-x-pack/271497 "2021-05-03T06:48:15Z")
Have a nice day, I want to ask someone who would be able to help me at how to run the X-pack set so that I used it exclusively within the scope of the free license does not exceed the limit of the free license and also … [Previous page](https://discuss.elastic.co/latest.md?page=1697) [Next page](https://discuss.elastic.co/latest.md?page=1699)