# Latest **URL:** https://discuss.elastic.co/latest.md?page=1777 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1778 --- ## [Limint the threads by Shards and CPU](https://discuss.elastic.co/t/limint-the-threads-by-shards-and-cpu/267030)
**Author:** [@ecarmona](https://discuss.elastic.co/u/ecarmona)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 8:57pm UTC](https://discuss.elastic.co/t/limint-the-threads-by-shards-and-cpu/267030 "2021-03-18T20:57:24Z")
Hi Team, I am working in a small environment with just 4 core server for each node. Is there a way I can configure Kibana to serialize the requests between Kibana and elasticsearch? I have noticed that if my dashboards … --- ## [ElasticSearch V0.90 Faster Than V7.10.1](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495)
**Author:** [@ercinakcay](https://discuss.elastic.co/u/ercinakcay)\ **Replies:** 6\ **Last updated:** [March 18, 2021, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495 "2021-03-18T20:10:25Z")
Hi everyone, We are doing migration for ElasticSearch version 0.90 to version 7.10.1. I know this is really big upgrade for a component. While this migration we realized, V7 queries are slower than V0 ones. This slow … --- ## [Kibana \\ Elasticsearch - Search\_phase\_execution\_exception, all shards failed](https://discuss.elastic.co/t/kibana-elasticsearch-search-phase-execution-exception-all-shards-failed/267704)
**Author:** [@21908](https://discuss.elastic.co/u/21908)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 7:48pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-search-phase-execution-exception-all-shards-failed/267704 "2021-03-18T19:48:10Z")
I'm using Kibana for querying a 3 node Elasticsearch cluster, both version 7.9.2. My Elasticsearch cluster and all of its indexes are healthy and in a green state as reported by \_cat/health and \_cat/indices?v. I query … --- ## [Filebeat output to secured HA Elasticsearch](https://discuss.elastic.co/t/filebeat-output-to-secured-ha-elasticsearch/267702)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-output-to-secured-ha-elasticsearch/267702 "2021-03-18T19:47:39Z")
Hello there, I have successfully deployed an HA Elasticsearch cluster which is has xpack security features enabled. My problem is that I do not really know how to configure filebeat elasticsearch.output, so it can do pe… --- ## [Pipelines stop with Java::OrgJrubyExceptions::SystemCallError](https://discuss.elastic.co/t/pipelines-stop-with-java-systemcallerror/267716)
**Author:** [@manuel.ferreira](https://discuss.elastic.co/u/manuel.ferreira)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 7:40pm UTC](https://discuss.elastic.co/t/pipelines-stop-with-java-systemcallerror/267716 "2021-03-18T19:40:39Z")
Hi. Some light on this issue would be very much appreciated. The scenario is the following. Logstash pipelines fail after docker restart. Logstash : 7.9.3 When logstash exits with an error, the docker configuration … --- ## [Symantec Message Gateway Multiline Logs Parsing](https://discuss.elastic.co/t/symantec-message-gateway-multiline-logs-parsing/267455)
**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 7:02pm UTC](https://discuss.elastic.co/t/symantec-message-gateway-multiline-logs-parsing/267455 "2021-03-18T19:02:43Z")
Hi Community, I've multiline logs of Symantec message gateway (email server). {"port":49542,"host":"10.10.x.x","type":"smg","message":"\<158\>Mar 2 16:21:59 smtp01 bmserver: 1614684119|0a0a5199-534c370000006c49-29-603e… --- ## [Question on logstash removing field from json string and saving back to same field](https://discuss.elastic.co/t/question-on-logstash-removing-field-from-json-string-and-saving-back-to-same-field/267677)
**Author:** [@rgreen](https://discuss.elastic.co/u/rgreen)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 6:57pm UTC](https://discuss.elastic.co/t/question-on-logstash-removing-field-from-json-string-and-saving-back-to-same-field/267677 "2021-03-18T18:57:39Z")
Is it possible to read a json string, remove specified fields then have that json string saved back into a single field with-ought parsing the json data into separate fields. So i would be reading a field from a databas… --- ## [Troubleshooting resources?](https://discuss.elastic.co/t/troubleshooting-resources/265626)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 6\ **Last updated:** [March 18, 2021, 6:34pm UTC](https://discuss.elastic.co/t/troubleshooting-resources/265626 "2021-03-18T18:34:56Z")
Hi folks, I have a 8 node cluster with 1 logstash server collecting winlogbeats data. It has been running fine until recently. I added more endpoints and I noticed in Kibana that all the events stopped at the same time. … --- ## [Canvas SQL and other examples wanted](https://discuss.elastic.co/t/canvas-sql-and-other-examples-wanted/121913)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 6:26pm UTC](https://discuss.elastic.co/t/canvas-sql-and-other-examples-wanted/121913 "2021-03-18T18:26:03Z")
Hello, I am looking online and failing to find more than a very small set of examples for Canvas SQL queries. Probably my lacking search skills, but I would appreciate a few links and SQL examples that will show me wha… --- ## [Swiftype Clickthrough Tracking for Analytics](https://discuss.elastic.co/t/swiftype-clickthrough-tracking-for-analytics/267580)
**Author:** [@sleblang](https://discuss.elastic.co/u/sleblang)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:24pm UTC](https://discuss.elastic.co/t/swiftype-clickthrough-tracking-for-analytics/267580 "2021-03-18T18:24:17Z")
We are using the crawler based option and am trying to determine how to track clicks on individual search results. I found the following two options: Analytics | Swiftype Documentation Clickthrough | Swiftype Documenta… --- ## [Reporting email action failure from watcher - ELK7.8](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 6:16pm UTC](https://discuss.elastic.co/t/reporting-email-action-failure-from-watcher-elk7-8/267322 "2021-03-18T18:16:36Z")
Hi Team, Please help me to resolve the email action failure error mentioned below from watcher. I am using ELK version 7.8. "id": "email\_action", "type": "email", "status": "failure", "error": { "root\_cause": \[ { … --- ## [Logstash and Split](https://discuss.elastic.co/t/logstash-and-split/267358)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [March 18, 2021, 5:56pm UTC](https://discuss.elastic.co/t/logstash-and-split/267358 "2021-03-18T17:56:11Z")
Hello I have the following fields (data is example): ForwardedIpAddress 1.2.3.4,4.3.2.1 IpAddress 1.2.3.4,4.3.2.1 Would I would like to end up with is: ForwardedIpAddress1 1.2.3.4 ForwardedIpAddress2 4.3.2.1 IpAdd… --- ## [Status code 403 unauthorized for user \[\_anonymous\] is returned for anonymous user with a custom role which is Stack Management plugin not displayed](https://discuss.elastic.co/t/status-code-403-unauthorized-for-user-anonymous-is-returned-for-anonymous-user-with-a-custom-role-which-is-stack-management-plugin-not-displayed/267586)
**Author:** [@thiton](https://discuss.elastic.co/u/thiton)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 5:51pm UTC](https://discuss.elastic.co/t/status-code-403-unauthorized-for-user-anonymous-is-returned-for-anonymous-user-with-a-custom-role-which-is-stack-management-plugin-not-displayed/267586 "2021-03-18T17:51:53Z")
Is that possible to configure Elasticsearch and Kibana for anonymous user with a custom role which is Stack Management plugin in NOT displayed when security is turned off? Many thanks in advance. Below are my steps: … --- ## [Can't use example plugin in painless script](https://discuss.elastic.co/t/cant-use-example-plugin-in-painless-script/267705)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 5:19pm UTC](https://discuss.elastic.co/t/cant-use-example-plugin-in-painless-script/267705 "2021-03-18T17:19:16Z")
Hello everyone ! I am using a ES 7.7.0 cluster and I am trying to create a plugin to add some advanced things in my painless scripts. To do so, I compiled this : https://github.com/elastic/elasticsearch/tree/6.2/plugins… --- ## [Custom kibana plugins will not update due to client side resource caching](https://discuss.elastic.co/t/custom-kibana-plugins-will-not-update-due-to-client-side-resource-caching/267207)
**Author:** [@Tobias\_H](https://discuss.elastic.co/u/Tobias_H)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 5:02pm UTC](https://discuss.elastic.co/t/custom-kibana-plugins-will-not-update-due-to-client-side-resource-caching/267207 "2021-03-18T17:02:01Z")
I'm using kibana 7.10.2, which includes the latest improvements to the packaging scripts @kbn/plugin-helpers: to build production 3rd kibana plugins using the new architecture: We noticed that when launching the plug… --- ## [How to read Excel File with multiple Worksheet in logstash?](https://discuss.elastic.co/t/how-to-read-excel-file-with-multiple-worksheet-in-logstash/267636)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 4:58pm UTC](https://discuss.elastic.co/t/how-to-read-excel-file-with-multiple-worksheet-in-logstash/267636 "2021-03-18T16:58:58Z")
I have a dataset Excel file that have 10 worksheet so I want to access particular worksheet? How I can read worksheet? --- ## [Worker loop initialization error](https://discuss.elastic.co/t/worker-loop-initialization-error/267609)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 4:56pm UTC](https://discuss.elastic.co/t/worker-loop-initialization-error/267609 "2021-03-18T16:56:22Z")
I want to use multiple pipelines for logstash for example for input section i want to have pipeline.id: source\_input and for output and filter section i want to have pipeline.id: destination\_output But i am facing this… --- ## [Part of the indices are created with this name "%{\[kubernetes\]\[namespace\]}"](https://discuss.elastic.co/t/part-of-the-indices-are-created-with-this-name-kubernetes-namespace/267426)
**Author:** [@doronshai](https://discuss.elastic.co/u/doronshai)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 4:52pm UTC](https://discuss.elastic.co/t/part-of-the-indices-are-created-with-this-name-kubernetes-namespace/267426 "2021-03-18T16:52:29Z")
Hi Team, I am using this configuration for logstash: input { beats {port =\> 6600 type =\> "K4" codec =\> "json" } } filter { if \[type\] == "K4" { json {source =\> "message"} } } output { if \[type\] =… --- ## [How can I get more fields from vcenter using vsphere module?](https://discuss.elastic.co/t/how-can-i-get-more-fields-from-vcenter-using-vsphere-module/267561)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 4:15pm UTC](https://discuss.elastic.co/t/how-can-i-get-more-fields-from-vcenter-using-vsphere-module/267561 "2021-03-18T16:15:14Z")
Is there a way to get more metrics/fields from vcenter using vsphere module? How can I check that what's happening behind the vsphere module? --- ## [How to show filesystem metrics](https://discuss.elastic.co/t/how-to-show-filesystem-metrics/267515)
**Author:** [@CJ\_Chang](https://discuss.elastic.co/u/CJ_Chang)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 4:09pm UTC](https://discuss.elastic.co/t/how-to-show-filesystem-metrics/267515 "2021-03-18T16:09:47Z")
Hi, I am using metricbeat 7.6. The following is my system.yaml - module: system period: 10s metricsets: - cpu - load - memory - network - process - process\_summary - socket\_summary pr… --- ## [Metricbeat kafka module kerberos authentication](https://discuss.elastic.co/t/metricbeat-kafka-module-kerberos-authentication/265167)
**Author:** [@drewkrrb](https://discuss.elastic.co/u/drewkrrb)\ **Replies:** 4\ **Last updated:** [March 18, 2021, 4:04pm UTC](https://discuss.elastic.co/t/metricbeat-kafka-module-kerberos-authentication/265167 "2021-03-18T16:04:12Z")
Hi Am trying to enable metricbeat kafka module in my kafka cluster. My kafka cluster uses kerberos auth to access all the topics. Here is my current config: # Module: kafka # Docs: https://www.elastic.co/guide/en/beat… --- ## [Odd behaviour with search\_as\_you\_type](https://discuss.elastic.co/t/odd-behaviour-with-search-as-you-type/267695)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 4:00pm UTC](https://discuss.elastic.co/t/odd-behaviour-with-search-as-you-type/267695 "2021-03-18T16:00:01Z")
I am using the search\_as\_you\_type field to provide suggestions to users for addresses from a large index of around 30m addresses. I am using this with the default settings for the most part and it generally works great … --- ## [Elastic Agent stops working](https://discuss.elastic.co/t/elastic-agent-stops-working/266219)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 7\ **Last updated:** [March 18, 2021, 3:52pm UTC](https://discuss.elastic.co/t/elastic-agent-stops-working/266219 "2021-03-18T15:52:18Z")
I've installed elastic agent and it connects to my Kibana, but after some seconds I get this error: "Application: metricbeat--7.11.1\[e9e46cd0-792e-11eb-8062-9be23ea21776\]: State changed to FAILED: 1 error: 1 error: Error… --- ## [Cookie issue with Kibana behind a load balancer](https://discuss.elastic.co/t/cookie-issue-with-kibana-behind-a-load-balancer/267639)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 3:41pm UTC](https://discuss.elastic.co/t/cookie-issue-with-kibana-behind-a-load-balancer/267639 "2021-03-18T15:41:30Z")
Hey folks, As stated in the title, I was having issues with cookies of kibana instances behind a load balancer and even after taking into consideration what's written on the page concerning Kibana in production, it didn… --- ## [How to connect to Elastic App Cloud with API endpoint?](https://discuss.elastic.co/t/how-to-connect-to-elastic-app-cloud-with-api-endpoint/267537)
**Author:** [@Ryan\_Lane](https://discuss.elastic.co/u/Ryan_Lane)\ **Replies:** 5\ **Last updated:** [March 18, 2021, 3:40pm UTC](https://discuss.elastic.co/t/how-to-connect-to-elastic-app-cloud-with-api-endpoint/267537 "2021-03-18T15:40:05Z")
The documentation and demos use hostIdentifier to connect, but Elastic App only has an API Endpoint under Credentials. There is no Host Identifier. When I take one of the demos, such as the Vue demo (using Hearthstone c… --- ## [Collapse Search](https://discuss.elastic.co/t/collapse-search/267688)
**Author:** [@ToonB](https://discuss.elastic.co/u/ToonB)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 3:19pm UTC](https://discuss.elastic.co/t/collapse-search/267688 "2021-03-18T15:19:01Z")
Hi. I am using Collapse Search to retrieve my search results collapsed to a certain field, in addition I use the inner\_hits option to return the top hits for each collapse key. Because of the way Collapse Search works, i… --- ## [Kibana visualisation from remote clusters](https://discuss.elastic.co/t/kibana-visualisation-from-remote-clusters/267621)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 3:20pm UTC](https://discuss.elastic.co/t/kibana-visualisation-from-remote-clusters/267621 "2021-03-18T15:20:27Z")
Is it possible to setup Kibana to display data from remote Elasticsearch clusters? --- ## [No Data from Vega Percentiles Histogram](https://discuss.elastic.co/t/no-data-from-vega-percentiles-histogram/267670)
**Author:** [@nickr](https://discuss.elastic.co/u/nickr)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 2:56pm UTC](https://discuss.elastic.co/t/no-data-from-vega-percentiles-histogram/267670 "2021-03-18T14:56:50Z")
1st Post from a newbie, I'm trying to replicate something like the below graph using Vega. All I currently get is a labelled frame with no data. The data is returned by Elasticsearch "aggregations" : { … --- ## [Kibana ingress not working after upgrading to eck 1.1.0](https://discuss.elastic.co/t/kibana-ingress-not-working-after-upgrading-to-eck-1-1-0/232316)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 5\ **Last updated:** [March 18, 2021, 2:06pm UTC](https://discuss.elastic.co/t/kibana-ingress-not-working-after-upgrading-to-eck-1-1-0/232316 "2021-03-18T14:06:30Z")
Hi Team, My kibana ingress is not working after i upgraded to eck 1.1.0 from eck 1.0.1, below are the files for reference kibana\_cr.yaml apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana-confi… --- ## [Join various WinLogBeat Windows Event Log events into one?](https://discuss.elastic.co/t/join-various-winlogbeat-windows-event-log-events-into-one/267095)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 2:41pm UTC](https://discuss.elastic.co/t/join-various-winlogbeat-windows-event-log-events-into-one/267095 "2021-03-18T14:41:52Z")
Hello Using WinLogBeat, Im collecting logs from Windows Event Logs and sending it to Logstash which then sends it to Elasticsearch. For all, working. Issue is that I want to do something a bit more complex... Lets say… [Previous page](https://discuss.elastic.co/latest.md?page=1776) [Next page](https://discuss.elastic.co/latest.md?page=1778)