# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1708

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1709

---

## [JVM heap spikes on data node](https://discuss.elastic.co/t/jvm-heap-spikes-on-data-node/270870)

<div class="topic-metadata">

**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\
**Replies:** 10\
**Last updated:** [April 28, 2021, 7:39am UTC](https://discuss.elastic.co/t/jvm-heap-spikes-on-data-node/270870 "2021-04-28T07:39:56Z")

</div>

Hello, I'm not really educated in this topic, but when I first saw this log in our logstash: \[2021-04-15T14:11:47,605\]\[INFO \]\[logstash.outputs.elasticsearch\]\[beats-monitoring-crypto\]\[3228c43cca49b666651ceb4c7945f188f5…

---

## [Anonymous Kibana Users](https://discuss.elastic.co/t/anonymous-kibana-users/270071)

<div class="topic-metadata">

**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\
**Replies:** 27\
**Last updated:** [April 28, 2021, 7:35am UTC](https://discuss.elastic.co/t/anonymous-kibana-users/270071 "2021-04-28T07:35:10Z")

</div>

I am attempting to add anonymous users to view my Kibana dashboards but it is giving me this error when I attempt to edit the elasticsearch.yml file. Additionally, will adding this feature allow the dashboard to comp…

---

## [Packetbeat on high volume production Windows-AD-DNS-Servers](https://discuss.elastic.co/t/packetbeat-on-high-volume-production-windows-ad-dns-servers/270652)

<div class="topic-metadata">

**Author:** [@Mischa\_Diehm](https://discuss.elastic.co/u/Mischa_Diehm)\
**Replies:** 3\
**Last updated:** [April 28, 2021, 6:07am UTC](https://discuss.elastic.co/t/packetbeat-on-high-volume-production-windows-ad-dns-servers/270652 "2021-04-28T06:07:08Z")

</div>

Hi, we are trying to visualize and permanently record our DNS traffic. The DNS Server is run on Windows 10 and the logs it writes are ok but extending it with packetbeat would increase the visibility a lot. The concerns…

---

## [Alert kibana error](https://discuss.elastic.co/t/alert-kibana-error/271324)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 2\
**Last updated:** [April 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/alert-kibana-error/271324 "2021-04-28T06:05:24Z")

</div>

i try to activate my alert. but when i start my kibana failure to start. here's my configuration # Kibana is served by a back end server. This setting specifies the port to use. # server.port: 5601 server.port: 5601 # …

---

## [Most optimal ElasticSearch](https://discuss.elastic.co/t/most-optimal-elasticsearch/271445)

<div class="topic-metadata">

**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\
**Replies:** 6\
**Last updated:** [April 28, 2021, 5:16am UTC](https://discuss.elastic.co/t/most-optimal-elasticsearch/271445 "2021-04-28T05:16:12Z")

</div>

This is a very ambiguous question since I don't know exactly where to start. We require the most optimized ES performance for a mission critical system. Currently our ES queries are taking somewhere around 100-200 ms to …

---

## [How to remove special character on JSON file in logstash](https://discuss.elastic.co/t/how-to-remove-special-character-on-json-file-in-logstash/271462)

<div class="topic-metadata">

**Author:** [@mario\_kazela](https://discuss.elastic.co/u/mario_kazela)\
**Replies:** 1\
**Last updated:** [April 28, 2021, 5:06am UTC](https://discuss.elastic.co/t/how-to-remove-special-character-on-json-file-in-logstash/271462 "2021-04-28T05:06:16Z")

</div>

Hi, I'm new with ELK. Just want to ask, how to remove "\[" on the logstash? \[{"uuid": "8153990955613214174559836954673410970", "label": \["Phone", "Laptop", "Pc", "Computer", "Iphone", "Mobile Phone", "Electronics", "Cel…

---

## [Unable to create very simple runtime mapping](https://discuss.elastic.co/t/unable-to-create-very-simple-runtime-mapping/271307)

<div class="topic-metadata">

**Author:** [@Sam\_Critchley](https://discuss.elastic.co/u/Sam_Critchley)\
**Replies:** 1\
**Last updated:** [April 28, 2021, 4:48am UTC](https://discuss.elastic.co/t/unable-to-create-very-simple-runtime-mapping/271307 "2021-04-28T04:48:04Z")

</div>

Hi. I'm trying to define a mapping for a transform. But any attempt to read the field I want to examine results in "Bad Request: \[script\_exception\] runtime error". { "target\_id": { "type": "keywo…

---

## [Custom font canvas](https://discuss.elastic.co/t/custom-font-canvas/271265)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 6\
**Last updated:** [April 28, 2021, 4:02am UTC](https://discuss.elastic.co/t/custom-font-canvas/271265 "2021-04-28T04:02:07Z")

</div>

hi, how can I add custom font in Canvas? Thanks

---

## [Moving From ES 5.x to 7.x and OS Upgrade](https://discuss.elastic.co/t/moving-from-es-5-x-to-7-x-and-os-upgrade/270979)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 6\
**Last updated:** [April 28, 2021, 3:32am UTC](https://discuss.elastic.co/t/moving-from-es-5-x-to-7-x-and-os-upgrade/270979 "2021-04-28T03:32:39Z")

</div>

Good Morning, I have a clustered ES 5.x environment that I need to do a few things. 1.) Upgrade the Server OS from Ubuntu 16.04 to 18.04 possibly 20.04. When we attempted this last week, we tried to upgrade by using..…

---

## [Capturing Inner Exceptions in CurrentTransaction.CaptureException](https://discuss.elastic.co/t/capturing-inner-exceptions-in-currenttransaction-captureexception/270386)

<div class="topic-metadata">

**Author:** [@kbalys](https://discuss.elastic.co/u/kbalys)\
**Replies:** 1\
**Last updated:** [April 28, 2021, 3:31am UTC](https://discuss.elastic.co/t/capturing-inner-exceptions-in-currenttransaction-captureexception/270386 "2021-04-28T03:31:39Z")

</div>

Hi, I am manually capturing exceptions during requests using the CaptureException method from ITransaction. I've noticed that it sores data only from the current exception but not the InnerException property. I extended…

---

## [Marking index location in read only mode](https://discuss.elastic.co/t/marking-index-location-in-read-only-mode/271416)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 5\
**Last updated:** [April 28, 2021, 3:29am UTC](https://discuss.elastic.co/t/marking-index-location-in-read-only-mode/271416 "2021-04-28T03:29:38Z")

</div>

I wanted to know, how to close existing index location (ready-only mode) and open new index location for writing the index data? Consider a use case that, I want to chage my storage type in which old data will remain on …

---

## [TCP connection limit of Elasticsearch](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454)

<div class="topic-metadata">

**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\
**Replies:** 0\
**Last updated:** [April 28, 2021, 3:28am UTC](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454 "2021-04-28T03:28:26Z")

</div>

We harvest logs on aws machines by filebeat. Filebeat on each machine push those log to local logstash nodes and then logstash nodes push the data to local Elasticsearch nodes. It seems to me that both logstash node and…

---

## [Convert File, Group, Record and Unit Separator](https://discuss.elastic.co/t/convert-file-group-record-and-unit-separator/271452)

<div class="topic-metadata">

**Author:** [@bibhuWork](https://discuss.elastic.co/u/bibhuWork)\
**Replies:** 0\
**Last updated:** [April 28, 2021, 3:01am UTC](https://discuss.elastic.co/t/convert-file-group-record-and-unit-separator/271452 "2021-04-28T03:01:20Z")

</div>

Hi Friends I am trying to convert my message containing ^\\ , ^\] , ^^ and ^\_ into comma using mutate-\>gsub but its not working I am trying out \\u005E, \\u001E , \\u001F etc but no luck. Can you please help me out here. S…

---

## [Convert app search settings into elasticsearch settings](https://discuss.elastic.co/t/convert-app-search-settings-into-elasticsearch-settings/270777)

<div class="topic-metadata">

**Author:** [@pakwai122](https://discuss.elastic.co/u/pakwai122)\
**Replies:** 4\
**Last updated:** [April 28, 2021, 2:18am UTC](https://discuss.elastic.co/t/convert-app-search-settings-into-elasticsearch-settings/270777 "2021-04-28T02:18:07Z")

</div>

is it possible to convert App search logic into elasticsearch? for example, app search might using multi search query with field boosting, then I can use the same settings back into elasticsearch dev tool?

---

## [Switch dashboard between last value (single value) and time range (aggregrated values)?](https://discuss.elastic.co/t/switch-dashboard-between-last-value-single-value-and-time-range-aggregrated-values/271314)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [April 28, 2021, 1:45am UTC](https://discuss.elastic.co/t/switch-dashboard-between-last-value-single-value-and-time-range-aggregrated-values/271314 "2021-04-28T01:45:29Z")

</div>

I'm creating visualizations in Kibana based on existing visualizations in a proprietary app. (I won't mention that app by name.) That app offers the user several choices for the time span of a viz—at display time, witho…

---

## [Missing Authentication Credentials for REST Request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271158)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 1\
**Last updated:** [April 28, 2021, 1:40am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271158 "2021-04-28T01:40:25Z")

</div>

Hello Elastic Users, I am trying to check if my Elasticsearch is working fine or not by running the following command in WindowsPowershell. Invoke-RestMethod http://localhost:9200 But it threw an 401-Authentication er…

---

## [X-pack monitoring failed to display CPU utilization](https://discuss.elastic.co/t/x-pack-monitoring-failed-to-display-cpu-utilization/271236)

<div class="topic-metadata">

**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\
**Replies:** 3\
**Last updated:** [April 28, 2021, 1:37am UTC](https://discuss.elastic.co/t/x-pack-monitoring-failed-to-display-cpu-utilization/271236 "2021-04-28T01:37:28Z")

</div>

I turned on stack monitoring for x-pack. However, the CPU utilization of ES can not be obtained. I installed elk7.8.1 in RPM mode In the overview interface, CPU utilization is shown as follows： In the overview inte…

---

## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/271435)

<div class="topic-metadata">

**Author:** [@spartin07](https://discuss.elastic.co/u/spartin07)\
**Replies:** 1\
**Last updated:** [April 28, 2021, 1:22am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/271435 "2021-04-28T01:22:48Z")

</div>

I am trying to enable SSL/TLS for my elasticsearch cluster using docker and docker-compose. My setup is 3 seperate machines all with a single elasticsearch node running on them. For the certificates I created them on a s…

---

## [Elastic Search 7.12 Java CPU useage](https://discuss.elastic.co/t/elastic-search-7-12-java-cpu-useage/270996)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 4\
**Last updated:** [April 28, 2021, 12:29am UTC](https://discuss.elastic.co/t/elastic-search-7-12-java-cpu-useage/270996 "2021-04-28T00:29:16Z")

</div>

1 x3 node cluster 2 stand alone nodes all showing the same signs. Elastic+ Java process is running at 100% CPU. CentOS 8. Anyone else running into the issue. The same machines have been fine with the CPU and memory sin…

---

## [Questions on creating user and password?](https://discuss.elastic.co/t/questions-on-creating-user-and-password/269277)

<div class="topic-metadata">

**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Replies:** 8\
**Last updated:** [April 27, 2021, 11:47pm UTC](https://discuss.elastic.co/t/questions-on-creating-user-and-password/269277 "2021-04-27T23:47:56Z")

</div>

HI, I was wondering if someone could shed some light, Currently trying to configure x-pack to create username and password for the elastic stack, but i see that there is a few documentation but not sure which i should u…

---

## [Documentation or help to autodiscover kubernetes](https://discuss.elastic.co/t/documentation-or-help-to-autodiscover-kubernetes/271443)

<div class="topic-metadata">

**Author:** [@flaco0](https://discuss.elastic.co/u/flaco0)\
**Replies:** 0\
**Last updated:** [April 27, 2021, 9:33pm UTC](https://discuss.elastic.co/t/documentation-or-help-to-autodiscover-kubernetes/271443 "2021-04-27T21:33:43Z")

</div>

Hi team, I want config some filebeats to kubernetes. I have problems to understand somethings about like setting my need it. I think that need more documentation, have some guide or similar out of elasticsearch web ref…

---

## [Minimum nodes for elasticsearch 7.11.2 cluster?](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023)

<div class="topic-metadata">

**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\
**Replies:** 15\
**Last updated:** [April 27, 2021, 9:31pm UTC](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023 "2021-04-27T21:31:33Z")

</div>

Hello, I'm using standalone ES node at the moment. I would like to add another node in another datacenter to increase data resilience and use cluster functions. Is it possible with just another node? Any documentation …

---

## [Free Trainning AWS labs credentials ? How to get AWS labs credentials?](https://discuss.elastic.co/t/free-trainning-aws-labs-credentials-how-to-get-aws-labs-credentials/271442)

<div class="topic-metadata">

**Author:** [@kjack](https://discuss.elastic.co/u/kjack)\
**Replies:** 0\
**Last updated:** [April 27, 2021, 8:53pm UTC](https://discuss.elastic.co/t/free-trainning-aws-labs-credentials-how-to-get-aws-labs-credentials/271442 "2021-04-27T20:53:16Z")

</div>

Hello, I'm registered for the free training of Elasticsearch Observability When I try to access the AWS web interface using the Public DNS, I get asked some credentials I don't know. How can I find those ? For instanc…

---

## [In house testing for cloud vs self hosted before self hosted release](https://discuss.elastic.co/t/in-house-testing-for-cloud-vs-self-hosted-before-self-hosted-release/271429)

<div class="topic-metadata">

**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\
**Replies:** 1\
**Last updated:** [April 27, 2021, 8:15pm UTC](https://discuss.elastic.co/t/in-house-testing-for-cloud-vs-self-hosted-before-self-hosted-release/271429 "2021-04-27T20:15:48Z")

</div>

I am looking to test integration with keycloak, and other features that require a higher tier license. Cloud licenses are cheaper. Can I get away with testing/developing on a cloud server and applying my findings to th…

---

## [Date Histogram Aggregation with Empty Days](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [April 27, 2021, 8:10pm UTC](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436 "2021-04-27T20:10:12Z")

</div>

With the Date Histogram Aggregation is it possible to return a complete list of days, even if none of them have found results? I am using a query to look for sales that occurred in a range of days, but in some cases the…

---

## [ECE 2.9.1 released](https://discuss.elastic.co/t/ece-2-9-1-released/271434)

<div class="topic-metadata">

**Author:** [@Przemyslaw\_H](https://discuss.elastic.co/u/Przemyslaw_H)\
**Replies:** 0\
**Last updated:** [April 27, 2021, 7:34pm UTC](https://discuss.elastic.co/t/ece-2-9-1-released/271434 "2021-04-27T19:34:11Z")

</div>

We are pleased to announce that ECE 2.9.1 has been released today. This is a bug fix release. Release notes can be found here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-2.9.1.html

---

## [7.12.1 Security Update](https://discuss.elastic.co/t/7-12-1-security-update/271433)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [April 27, 2021, 7:28pm UTC](https://discuss.elastic.co/t/7-12-1-security-update/271433 "2021-04-27T19:28:03Z")

</div>

Kibana denial of service issue (ESA-2021-10) A denial of service vulnerability was found in the Kibana webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webh…

---

## [Filter by count of inner\_hits?](https://discuss.elastic.co/t/filter-by-count-of-inner-hits/271298)

<div class="topic-metadata">

**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\
**Replies:** 1\
**Last updated:** [April 27, 2021, 7:16pm UTC](https://discuss.elastic.co/t/filter-by-count-of-inner-hits/271298 "2021-04-27T19:16:36Z")

</div>

I'm using ES to search movements of baroque music, so someone can find e.g. music for flute, violin, and soprano or for 2 violins and soprano. The following works: Multilingual instrument names flûte à bec should find…

---

## [Juniper log ingestion](https://discuss.elastic.co/t/juniper-log-ingestion/270964)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [April 27, 2021, 7:15pm UTC](https://discuss.elastic.co/t/juniper-log-ingestion/270964 "2021-04-27T19:15:24Z")

</div>

I am trying to ingest juniper log via filebeat using juniper module but it does not give me systemname and RT\_FLOW anywhere in my ELK data. how do I get that? source = dc-fw1 Can I modify this module and add my own p…

---

## [Need help aggregating strings from logs](https://discuss.elastic.co/t/need-help-aggregating-strings-from-logs/271428)

<div class="topic-metadata">

**Author:** [@nitishj](https://discuss.elastic.co/u/nitishj)\
**Replies:** 0\
**Last updated:** [April 27, 2021, 6:12pm UTC](https://discuss.elastic.co/t/need-help-aggregating-strings-from-logs/271428 "2021-04-27T18:12:03Z")

</div>

I wish to create a dashboard with a dataset consisting of 3 variables out of which I want to see average values of 2 (after theyr're grouped the third variable). For example, I would like to see the solverObjVal and Solv…

[Previous page](https://discuss.elastic.co/latest.md?page=1707)

[Next page](https://discuss.elastic.co/latest.md?page=1709)
