# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1722

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1723

---

## [Exception : No alive nodes found in your cluster](https://discuss.elastic.co/t/exception-no-alive-nodes-found-in-your-cluster/270739)

<div class="topic-metadata">

**Author:** [@Erik\_Gevorgyan](https://discuss.elastic.co/u/Erik_Gevorgyan)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 3:20pm UTC](https://discuss.elastic.co/t/exception-no-alive-nodes-found-in-your-cluster/270739 "2021-04-20T15:20:30Z")

</div>

Hi everyone, i have an issue according to elasticsearch , i am running this code php artisan index:ambassadors and it gives me Exception : No alive nodes found in your cluster here is my output Exception : No ali…

---

## [Cluster doesn't respect routing.allocation.require.data\_type](https://discuss.elastic.co/t/cluster-doesnt-respect-routing-allocation-require-data-type/270700)

<div class="topic-metadata">

**Author:** [@gorek](https://discuss.elastic.co/u/gorek)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 3:11pm UTC](https://discuss.elastic.co/t/cluster-doesnt-respect-routing-allocation-require-data-type/270700 "2021-04-20T15:11:59Z")

</div>

Hi, we have cluster with 2 nodes. Every node has set data\_type attribute. One node has low disk watermark exceed. We prepared ILM policy to keep indices on one node for some time and after move it to another. Rarely …

---

## [Reverse proxy - Webseal](https://discuss.elastic.co/t/reverse-proxy-webseal/270737)

<div class="topic-metadata">

**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 3:11pm UTC](https://discuss.elastic.co/t/reverse-proxy-webseal/270737 "2021-04-20T15:11:45Z")

</div>

Hi there, Has anyone integrated webseal (IBM Tivoli Access Manager) as reverse proxy to log into Kibana ? Thanks Murali

---

## [Prometheus Federation Metricbeat - No index and document in ES](https://discuss.elastic.co/t/prometheus-federation-metricbeat-no-index-and-document-in-es/270726)

<div class="topic-metadata">

**Author:** [@dekim](https://discuss.elastic.co/u/dekim)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 2:11pm UTC](https://discuss.elastic.co/t/prometheus-federation-metricbeat-no-index-and-document-in-es/270726 "2021-04-20T14:11:14Z")

</div>

Hello, We currently have a Kubernetes cluster that has a Prometheus Installation. I'm looking to export the Prometheus gathered metrics to Elastic so we can create Kibana dashboard; using the Federation approach (so we…

---

## [Diagnosing slow dashboard/Viz performance in elastic cloud](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 8\
**Last updated:** [April 20, 2021, 2:41pm UTC](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158 "2021-04-20T14:41:43Z")

</div>

Hi - I am looking for some pointers or starting places to diagnose our slow dashboards. If I look at a visualization (they are all 'slow' to render in kibana) by going to inspect\>request\>statistics I see two timing numb…

---

## [Surprised by deprecation of common\_terms query. What about its relevance features?](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416 "2021-04-20T14:21:00Z")

</div>

Hi all, I was actually excited to dig into an experiment at work using the common terms query. I see however, it's been deprecated as the performance benefits are seen now in the match query, as mentioned in this issue. …

---

## [Secure access to data via NEST](https://discuss.elastic.co/t/secure-access-to-data-via-nest/270724)

<div class="topic-metadata">

**Author:** [@joaoantao](https://discuss.elastic.co/u/joaoantao)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 2:06pm UTC](https://discuss.elastic.co/t/secure-access-to-data-via-nest/270724 "2021-04-20T14:06:14Z")

</div>

Currently, I am working with large indexes that contain hierarchical documents. I am trying to restrict read access to some documents (document level security) and certain fields (field level security) of those documents…

---

## [Sorting in KQL](https://discuss.elastic.co/t/sorting-in-kql/270711)

<div class="topic-metadata">

**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\
**Replies:** 2\
**Last updated:** [April 20, 2021, 2:08pm UTC](https://discuss.elastic.co/t/sorting-in-kql/270711 "2021-04-20T14:08:00Z")

</div>

Hi, I know I can sort in Elastic api and in kibana, but now I have to use an api which only have KQL input which it encodes in base64 and send to elasticsearch. (external service) I've tried all instances of id: desc\`\`s…

---

## [Logstashで３階層のデータを生成したい](https://discuss.elastic.co/t/logstash/270717)

<div class="topic-metadata">

**Author:** [@atsuizo](https://discuss.elastic.co/u/atsuizo)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 1:49pm UTC](https://discuss.elastic.co/t/logstash/270717 "2021-04-20T13:49:07Z")

</div>

RDBMS上に３階層で構成されている表のデータを、 ３階層のドキュメント構造でElasticsearchに反映させたいと考えています。 ほぼ以下のURLで語られているとおりなのですが、 このトピックのやりとりで解決したのかまでが不明で、 参考にして設定しても期待した形を実現できなかったため 質問させて下さい。 【RDBMS（MySQL）上の構造、データ】 表A-\>表B-\>表Cの３階層 表A-\>表Bは、1:N 表B-\>表…

---

## [One elastic node fills up prior to the others?](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276)

<div class="topic-metadata">

**Author:** [@Jcroy](https://discuss.elastic.co/u/Jcroy)\
**Replies:** 13\
**Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276 "2021-04-20T13:48:39Z")

</div>

Am I missing a policy or something? I have a 8 node cluster. 3k Winlogbeat agents reporting in. I ran winlogbeat setup -e to get the template installed. I've reviewed logs and nothing related to allocation seems to be in…

---

## [Multiple sheets in Kibana Table](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702)

<div class="topic-metadata">

**Author:** [@Vivekks](https://discuss.elastic.co/u/Vivekks)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702 "2021-04-20T13:48:22Z")

</div>

Hi, I'm new to Kibana I want to create multiple sheets in Kibana table just like in excel sheet. Is it possible in Kibana ?

---

## [Keep active index while deleting old indices with ILM](https://discuss.elastic.co/t/keep-active-index-while-deleting-old-indices-with-ilm/270119)

<div class="topic-metadata">

**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\
**Replies:** 5\
**Last updated:** [April 20, 2021, 1:46pm UTC](https://discuss.elastic.co/t/keep-active-index-while-deleting-old-indices-with-ilm/270119 "2021-04-20T13:46:04Z")

</div>

We rebuild the same index regularly (multiple times per day) to keep our data up to date. This way we quickly generate a lot of old indices. So we thought about removing them with a policy (ILM) which deletes old indice…

---

## [Ignore a specific or drop a field when using another Grok Pattern](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 3\
**Last updated:** [April 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522 "2021-04-20T13:35:14Z")

</div>

HI, I have a filter that works except for when the log doesn't contains different data for a field that I am using an extra grok pattern on. I am extracting the username from DN (Distinguished Name) from the main log a…

---

## [App Search Bug with snippet highlighting and closing parenthesis](https://discuss.elastic.co/t/app-search-bug-with-snippet-highlighting-and-closing-parenthesis/270424)

<div class="topic-metadata">

**Author:** [@carlblake](https://discuss.elastic.co/u/carlblake)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 1:12pm UTC](https://discuss.elastic.co/t/app-search-bug-with-snippet-highlighting-and-closing-parenthesis/270424 "2021-04-20T13:12:35Z")

</div>

Hello! We are running into a small, but annoying bug with App Search. We have a number of document titles that end with a closing parenthesis. We display the highlighted snippet, but the ending parenthesis is getting cut…

---

## [Add new field in existing index and template](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 6\
**Last updated:** [April 20, 2021, 1:10pm UTC](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679 "2021-04-20T13:10:59Z")

</div>

Hi, I want to add an new field in exiting index and corresponding to it's template. Could you pls help me on this ? This is current template: curl -XPUT 'vl-dev01:9200/\_template/latesttmpl-farm-qusage-mon?pretty' -H …

---

## [What's the best practice for propagating cross cutting span attributes like a customer email?](https://discuss.elastic.co/t/whats-the-best-practice-for-propagating-cross-cutting-span-attributes-like-a-customer-email/269270)

<div class="topic-metadata">

**Author:** [@fuleow](https://discuss.elastic.co/u/fuleow)\
**Replies:** 5\
**Last updated:** [April 20, 2021, 12:36pm UTC](https://discuss.elastic.co/t/whats-the-best-practice-for-propagating-cross-cutting-span-attributes-like-a-customer-email/269270 "2021-04-20T12:36:24Z")

</div>

We have a small set of cross cutting span attributes such as the customer's email which would benefit from being propagated to the spans of all our upstream services. A gateway service early in the request path already …

---

## [Git repo stable tag](https://discuss.elastic.co/t/git-repo-stable-tag/270338)

<div class="topic-metadata">

**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\
**Replies:** 3\
**Last updated:** [April 20, 2021, 8:12am UTC](https://discuss.elastic.co/t/git-repo-stable-tag/270338 "2021-04-20T08:12:28Z")

</div>

The apm-agent-java repo has recently had a tag "stable" added. However, every time it is moved it is published as a new release on the RSS feeds. I assume that's not what is intended. If it's planned to be moved any fur…

---

## [Logstash jdbc\_streaming filter pipeline reload and database access](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-pipeline-reload-and-database-access/270619)

<div class="topic-metadata">

**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\
**Replies:** 2\
**Last updated:** [April 20, 2021, 11:56am UTC](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-pipeline-reload-and-database-access/270619 "2021-04-20T11:56:05Z")

</div>

Hello, I'm using logstash with the jdbc\_streaming filter, that connects to an external MariaDB database. When I stop and restart the database, the pipeline using the jdbc\_streaming filter fails, and there is no automat…

---

## [S3SNSSQS Plugin input](https://discuss.elastic.co/t/s3snssqs-plugin-input/270696)

<div class="topic-metadata">

**Author:** [@mjuras](https://discuss.elastic.co/u/mjuras)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/s3snssqs-plugin-input/270696 "2021-04-20T11:38:31Z")

</div>

Hi I've switched the input for my logs to use the logstash-input-s3-sns-sqs plugin instead of the S3 plugin, but seem to be having an issue with the input with one of the logs. Input: input { s3snssqs { reg…

---

## [Processor for windows logs](https://discuss.elastic.co/t/processor-for-windows-logs/270695)

<div class="topic-metadata">

**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 11:37am UTC](https://discuss.elastic.co/t/processor-for-windows-logs/270695 "2021-04-20T11:37:38Z")

</div>

hi there if somebody can help me to find a filter for windows logs with ECS 1.7.0 thanks

---

## [Pluggin securyti java](https://discuss.elastic.co/t/pluggin-securyti-java/269030)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 5\
**Last updated:** [April 20, 2021, 11:07am UTC](https://discuss.elastic.co/t/pluggin-securyti-java/269030 "2021-04-20T11:07:12Z")

</div>

Hello everyone from elastic I have difficulties in java security to connect to the MSSQLServer database I have already edited the plugin-security.policy \[1\] and performed the installation \[2\], but the error \[3\] occurs …

---

## [Metricbeat dashboard strange behaviour](https://discuss.elastic.co/t/metricbeat-dashboard-strange-behaviour/267401)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 8\
**Last updated:** [April 20, 2021, 11:01am UTC](https://discuss.elastic.co/t/metricbeat-dashboard-strange-behaviour/267401 "2021-04-20T11:01:11Z")

</div>

Hi all. I am using elastic.co cloud 7.11.1 and I have 2 different metricbeat sitting in 2 different k8s clusters sending all the metrics to ELK. The first one works fine and I can see all the metrics in kibana but when…

---

## [Problem with ElasticsearchRepository](https://discuss.elastic.co/t/problem-with-elasticsearchrepository/270690)

<div class="topic-metadata">

**Author:** [@Atiqur\_Rahman](https://discuss.elastic.co/u/Atiqur_Rahman)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 11:00am UTC](https://discuss.elastic.co/t/problem-with-elasticsearchrepository/270690 "2021-04-20T11:00:28Z")

</div>

Hi All I am not sure if this is the right place to ask this question. I am using Elasticsearch 7.11 and Spring-Boot 2.4.4 import org.springframework.data.elasticsearch.repository.ElasticsearchRepository; import org.sp…

---

## [How to split the JSON field in kibana?](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [April 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687 "2021-04-20T10:55:23Z")

</div>

I recently upgraded to version 7.12, and I found that kibana recombined all fields into JSON arrays, but this would cause me trouble. I need to copy the original JSON format. I checked the configuration on the kibana pag…

---

## [TSVB terms visualization](https://discuss.elastic.co/t/tsvb-terms-visualization/269843)

<div class="topic-metadata">

**Author:** [@oshtman](https://discuss.elastic.co/u/oshtman)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 10:25am UTC](https://discuss.elastic.co/t/tsvb-terms-visualization/269843 "2021-04-20T10:25:26Z")

</div>

Hi, I'm fairly new to Kibana and I'm attempting to setup a visualization where I have fields of the form ("my\_field\_name" + "custom\_part"): my\_field\_name\_custom\_part1=true my\_field\_name\_custom\_part1=false ... etc W…

---

## [Error - Failed to set password for user \[apm\_system\]](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system/270252)

<div class="topic-metadata">

**Author:** [@Abhishek\_Pratap\_Sin1](https://discuss.elastic.co/u/Abhishek_Pratap_Sin1)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 10:17am UTC](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system/270252 "2021-04-20T10:17:34Z")

</div>

I am running Elastic-Search 7.11.1 Basic license 3 master & data nodes. While I was trying set password for build-in user, not able to set password for apm\_system. I following steps to set password. Step 1- update …

---

## [Chnge Datetime format to MMMM yyyy](https://discuss.elastic.co/t/chnge-datetime-format-to-mmmm-yyyy/270376)

<div class="topic-metadata">

**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 10:16am UTC](https://discuss.elastic.co/t/chnge-datetime-format-to-mmmm-yyyy/270376 "2021-04-20T10:16:31Z")

</div>

Hi Team, We need to change the format of timestamp to MMMM yyyy . I have tried datetimeformater but it's not working. The result that I got is not aggregated . Kindly help me with this. my scripted field:- ZonedDateTi…

---

## [Force filebeat resend ONE particular file](https://discuss.elastic.co/t/force-filebeat-resend-one-particular-file/267115)

<div class="topic-metadata">

**Author:** [@notricky](https://discuss.elastic.co/u/notricky)\
**Replies:** 18\
**Last updated:** [April 20, 2021, 10:11am UTC](https://discuss.elastic.co/t/force-filebeat-resend-one-particular-file/267115 "2021-04-20T10:11:09Z")

</div>

How should I force a filebeat to resend just only one particular file. Or how may I drop for only one certain file its offset to force filebeat start processing this one file again? Again, I'm talknig only about one co…

---

## [Unable to restart elasticsearch](https://discuss.elastic.co/t/unable-to-restart-elasticsearch/270665)

<div class="topic-metadata">

**Author:** [@sarabande](https://discuss.elastic.co/u/sarabande)\
**Replies:** 3\
**Last updated:** [April 20, 2021, 10:09am UTC](https://discuss.elastic.co/t/unable-to-restart-elasticsearch/270665 "2021-04-20T10:09:56Z")

</div>

Hi, I'm using elasticsearch in a multi-node cluster. Here's the configuration file (elasticsearch.yml) from one of the two elasticsearch log master nodes (in the cluster I have also 6 elasticsearch log nodes): # Netwo…

---

## [Metricbeat 7.12.0: Empty modules list](https://discuss.elastic.co/t/metricbeat-7-12-0-empty-modules-list/270680)

<div class="topic-metadata">

**Author:** [@orfeas2021](https://discuss.elastic.co/u/orfeas2021)\
**Replies:** 0\
**Last updated:** [April 20, 2021, 9:35am UTC](https://discuss.elastic.co/t/metricbeat-7-12-0-empty-modules-list/270680 "2021-04-20T09:35:42Z")

</div>

Hi! I use beat agents to monitor applications deployed on Openstack VMs. I Installed and configured metricbeat (7.12.0) but when I run metricbeat modules list the list is empty. while in my elk-master node I have i…

[Previous page](https://discuss.elastic.co/latest.md?page=1721)

[Next page](https://discuss.elastic.co/latest.md?page=1723)
