**Author:** [@marcgise](https://discuss.elastic.co/u/marcgise)\
**Replies:** 20\
**Last updated:** [February 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351 "2021-02-17T08:23:12Z")
I have 3 Java applications (using RestHighLevelClient 7.11.0 client API) connected to the same ElasticSearch server version 7.11.0, and periodically I check the connection to ElasticSearch with ping operation, using clie…
---
## [Get the filtered response in Elasticsearch cat APIs](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\
**Replies:** 0\
**Last updated:** [February 17, 2021, 7:36am UTC](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522 "2021-02-17T07:36:05Z")
I am planning to get the information of all the primary shards in my ES cluster using \_cat/shards API, but I don't see any option to get only the primary shards in the API response, I tried using prirep:p in the h=index,…
---
## [Logstash can´t index event to Elasticsearch](https://discuss.elastic.co/t/logstash-can-t-index-event-to-elasticsearch/264398)
**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\
**Replies:** 6\
**Last updated:** [February 17, 2021, 7:28am UTC](https://discuss.elastic.co/t/logstash-can-t-index-event-to-elasticsearch/264398 "2021-02-17T07:28:17Z")
Hello everyone, First of all, I want to introduce you to my problem, what I want to do, and how I have it installed. I have ELK Stack installed this docker, and this docker, at the same time, on a virtualized ubuntu wi…
---
## [Metricbeat zookeeper module](https://discuss.elastic.co/t/metricbeat-zookeeper-module/264453)
**Author:** [@VictorG](https://discuss.elastic.co/u/VictorG)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 7:26am UTC](https://discuss.elastic.co/t/metricbeat-zookeeper-module/264453 "2021-02-17T07:26:38Z")
Hello, I have two questions regarding the zookeeper module from metricbeat. Does metricbeat reads from a file or connects directly to zookeeper to query for mntr events? Does the zookeeper dashboard comes with panels …
---
## [Java apm agent and custom index](https://discuss.elastic.co/t/java-apm-agent-and-custom-index/264519)
**Author:** [@GershonA](https://discuss.elastic.co/u/GershonA)\
**Replies:** 0\
**Last updated:** [February 17, 2021, 7:25am UTC](https://discuss.elastic.co/t/java-apm-agent-and-custom-index/264519 "2021-02-17T07:25:26Z")
Hello, We using elastic-apm-agent-1.21.0 and cloud elastic service. From my research, currently the agent can only write to default apm-\* index. We want to write to some custom/different index. That is possible? Tha…
---
## [Elasticsearch multi-tenancy encryption](https://discuss.elastic.co/t/elasticsearch-multi-tenancy-encryption/264518)
**Author:** [@orenwin](https://discuss.elastic.co/u/orenwin)\
**Replies:** 1\
**Last updated:** [February 17, 2021, 7:25am UTC](https://discuss.elastic.co/t/elasticsearch-multi-tenancy-encryption/264518 "2021-02-17T07:25:19Z")
Hi, I am trying to figure out a way to encrypt Elasticsearch data files per tenant. I came across this plugin: elasticsearch/IndexStorePlugin.java at 985ae9a1ae9abbe110a1fb7333da013b25413edf · elastic/elasticsearch · …
---
## [Transform and get previous row value](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881)
**Author:** [@wicka](https://discuss.elastic.co/u/wicka)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 7:23am UTC](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881 "2021-02-17T07:23:21Z")
I've got elasticsearch setup to collect log from Jenkins. I want to visualize the duration on each build stage. However Jenkins logs is really unstructured, I find many difference way in elasticsearch and still not able …
---
## [Dissect Parsing Error with Sonicwall Module \[Filebeat 7.9.2\]](https://discuss.elastic.co/t/dissect-parsing-error-with-sonicwall-module-filebeat-7-9-2/264011)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 6:54am UTC](https://discuss.elastic.co/t/dissect-parsing-error-with-sonicwall-module-filebeat-7-9-2/264011 "2021-02-17T06:54:58Z")
Hi, everyone I have found some dissect parsing errors by using Sonicwall module module of Filebeat 7.9.2. Here you are some examples: Feb 11 07:31:35 \_gateway id=firewall sn=\ time="2021-02-11 06:31:35 …
---
## [Filebeat invalid CRI log format error](https://discuss.elastic.co/t/filebeat-invalid-cri-log-format-error/263324)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 6:45am UTC](https://discuss.elastic.co/t/filebeat-invalid-cri-log-format-error/263324 "2021-02-17T06:45:27Z")
Hi, I am frequently seeing invalid CRI log format ERROR with filebeat. We are running filebeat as deamonset on kubernetes nodes to collect container logs. This Error is causing filebeat to stop sending logs to logstash …
---
## [Incorrect type of field in index from Logstash, why?](https://discuss.elastic.co/t/incorrect-type-of-field-in-index-from-logstash-why/264335)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 8\
**Last updated:** [February 17, 2021, 6:10am UTC](https://discuss.elastic.co/t/incorrect-type-of-field-in-index-from-logstash-why/264335 "2021-02-17T06:10:37Z")
Dears, I loading tomcat logs to Elastic. My logstash config include such grok pattern: if "tomcat" in \[tags\] { grok { match =\> \["message", "%{IPV4} (?:-|%{USER:ident}) (?:-|%{USER:auth}) \\\[%{HTTPDATE:timesta…
---
## [X-pack for Logstash](https://discuss.elastic.co/t/x-pack-for-logstash/264466)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 5:50am UTC](https://discuss.elastic.co/t/x-pack-for-logstash/264466 "2021-02-17T05:50:19Z")
I have enabled the x-pack in my cluster. Now I want to install Logstash on ingest node. Enabling x-pack for Logstash is optional or compulsory?
---
## [Add a node to an existing cluster](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 5:07am UTC](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432 "2021-02-17T05:07:33Z")
Hello! Can someone please help me with adding a new node to an existing cluster? I get the "Master\_not\_discovered\_exception" and I have tried different solutions such as removing path.data (on node 2) , setting up discov…
---
## [Logstash self restart without error](https://discuss.elastic.co/t/logstash-self-restart-without-error/264501)
**Author:** [@cling1988](https://discuss.elastic.co/u/cling1988)\
**Replies:** 0\
**Last updated:** [February 17, 2021, 4:42am UTC](https://discuss.elastic.co/t/logstash-self-restart-without-error/264501 "2021-02-17T04:42:52Z")
After a few days I upgrade the Logstash from 7.4 to Logstash 7.10.1, the Logstash kill itself and restart. I only can found the log in journalctl -u logstash.service Feb 16 03:44:23 xxx systemd\[1\]: logstash.service: ma…
---
## [& / = / ? in blacklist exclusions](https://discuss.elastic.co/t/in-blacklist-exclusions/263888)
**Author:** [@shoveland](https://discuss.elastic.co/u/shoveland)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 4:31am UTC](https://discuss.elastic.co/t/in-blacklist-exclusions/263888 "2021-02-17T04:31:52Z")
In our search instance we have quite a few pages that contain some parameters for returning to a product page. As an example a category page might exist of /category with an identical page that contained a link for "retu…
---
## [More detail about app search elastic](https://discuss.elastic.co/t/more-detail-about-app-search-elastic/263063)
**Author:** [@loint](https://discuss.elastic.co/u/loint)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 3:48am UTC](https://discuss.elastic.co/t/more-detail-about-app-search-elastic/263063 "2021-02-17T03:48:57Z")
Hi everyone, I'm having a plan switch to Algolia to Elastic App Search for my projects ( Enterprise ). Recently I'm researching some basic of usage to Elastic App Search with deploy to cloud a trial version app search e…
---
## [Can Elastic work with Windows certificates?](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964)
**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 2:32am UTC](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964 "2021-02-17T02:32:22Z")
Hello everyone. I created elastic stack of 3 nodes and it was working pretty fine until I have to replace the elastic generated certificate with one from windows server CA. I do not seem to find information of rather it…
---
## [Unable to find source.geo.location in index pattern logstash-\*](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496)
**Author:** [@Ronnie\_Raraihuru](https://discuss.elastic.co/u/Ronnie_Raraihuru)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 1:53am UTC](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496 "2021-02-17T01:53:42Z")
Got the above error when trying to view map under Security\>Network in Elastic. Index mapping "mappings" : { "geoip" : { "dynamic" : "true", "properties" : { "city\_name" : { …
---
## [ILM Shrink - All primary on same node fails](https://discuss.elastic.co/t/ilm-shrink-all-primary-on-same-node-fails/264309)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\
**Replies:** 1\
**Last updated:** [February 17, 2021, 12:38am UTC](https://discuss.elastic.co/t/ilm-shrink-all-primary-on-same-node-fails/264309 "2021-02-17T00:38:17Z")
Hi All, I'm using ILM-Policies in order to automate the Index-Lifecycle. As part of the Warm-Phase indices should be shrinked. I'm currently running into the following problem reported by: GET /\_cluster/allocation/expl…
---
## [Match multiple 4 digit numbers in field](https://discuss.elastic.co/t/match-multiple-4-digit-numbers-in-field/264494)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 1\
**Last updated:** [February 17, 2021, 12:28am UTC](https://discuss.elastic.co/t/match-multiple-4-digit-numbers-in-field/264494 "2021-02-17T00:28:35Z")
I need to match only 4 digit number from field "created:". If there are multiple 4 digit numbers I need to take the biggest and save it back to the field. The problem is that the field can contain strings, dashes, dots, …
---
## [How can I do a full backup?](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486)
**Author:** [@Solknaar](https://discuss.elastic.co/u/Solknaar)\
**Replies:** 6\
**Last updated:** [February 16, 2021, 11:31pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486 "2021-02-16T23:31:00Z")
Hi everyone !!! I use Elasticsearch 7.9.2, with Kibana and Beats, (lucene\_version = 8.6.2) in a Linux server (Red Hat Enterprise Linux Server 7.4), with a single node. I got help to make a full backup, but, if possible…
---
## [Python3 + elasticsearch\_dsl good resources/examples simple query problem](https://discuss.elastic.co/t/python3-elasticsearch-dsl-good-resources-examples-simple-query-problem/264199)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 3\
**Last updated:** [February 16, 2021, 10:57pm UTC](https://discuss.elastic.co/t/python3-elasticsearch-dsl-good-resources-examples-simple-query-problem/264199 "2021-02-16T22:57:21Z")
i'm fighting to get over the hump of gaining competence with elasticsearch\_dsl for python. i'm trying to do my end of the year (2020) reports.. and i have a set of indexes that total about 3/4 of a billion records. i ne…
---
## [Unable to see any data in Consumer Partition Reassignments visualization for \[Metricbeat Kafka\] dashboard in kibana](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 0\
**Last updated:** [February 16, 2021, 10:30pm UTC](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489 "2021-02-16T22:30:02Z")
I am unable to see any data in the Consumer Partition Reassignments visualization in \[Metricbeat Kafka\] dashboard in kibana. My configuration for the kafka module that I have written in metricbeat.yml is given below: - …
---
## [Elasticsearch Alerting Watcher count mismatch](https://discuss.elastic.co/t/elasticsearch-alerting-watcher-count-mismatch/264417)
**Author:** [@srajus](https://discuss.elastic.co/u/srajus)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 10:00pm UTC](https://discuss.elastic.co/t/elasticsearch-alerting-watcher-count-mismatch/264417 "2021-02-16T22:00:26Z")
Hi I am setting up watcher alerts with multi match criteria .I am getting more than 2400+ count but when use the same multi filter criteria in the discover log section i am getting 113 count. not sure where exactly i a…
---
## [Post incorrectly closed](https://discuss.elastic.co/t/post-incorrectly-closed/264465)
**Author:** [@strophy](https://discuss.elastic.co/u/strophy)\
**Replies:** 0\
**Last updated:** [February 16, 2021, 6:38pm UTC](https://discuss.elastic.co/t/post-incorrectly-closed/264465 "2021-02-16T18:38:37Z")
@Mario\_Castro closed my post regarding an unmerged PR to release Elastic Beats 7.11.0 on Ansible Galaxy, since the general release was on February 10, 2021. From his comment, he seems to think this is my PR. It's not my …
---
## [Security scans report version of Jackson-dataformat-cobr 2.10.4](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439)
**Author:** [@avifmontier](https://discuss.elastic.co/u/avifmontier)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 9:46pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439 "2021-02-16T21:46:02Z")
Jackson-dataformat-cobr 2.10.4 used by elasticsearch-x-content 7.9.x seems to have security issues: CVE-2020-28491 CVE-2020-25649 Those issue seems to be fixed in later version of Jackson. Is there an intention to up…
---
## [A JSON array consists of objects - how to deal with?](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\
**Replies:** 5\
**Last updated:** [February 16, 2021, 9:33pm UTC](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464 "2021-02-16T21:33:42Z")
Hi ! I strongly apologize for a possibly stupid, kinda "it-has-been-asked-a-lot-of-time", question. Nevertheless I have to ask for help because I have completely stuck with . So that I have a JSON array consist of ob…
---
## [Update Aliases API](https://discuss.elastic.co/t/update-aliases-api/264369)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\
**Replies:** 5\
**Last updated:** [February 16, 2021, 9:19pm UTC](https://discuss.elastic.co/t/update-aliases-api/264369 "2021-02-16T21:19:56Z")
I have an index\_pattern called metricbeat- \* which I create an alias called alias\_metricbeat. Through the elasticsearch API I want to condition so that certain users do not perform filters of more than three months in th…
---
## [Enterprise ECE vs ECK](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484)
**Author:** [@jhegarty](https://discuss.elastic.co/u/jhegarty)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 8:47pm UTC](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484 "2021-02-16T20:47:43Z")
I'm part of a team investigating the possibility of moving our Elasticsearch instances onto ECK, but there are a couple questions we haven't been able to answer after reading the documentation. We're currently using ECE …
---
## [Threads stuck waiting for response](https://discuss.elastic.co/t/threads-stuck-waiting-for-response/264189)
**Author:** [@aouji](https://discuss.elastic.co/u/aouji)\
**Replies:** 5\
**Last updated:** [February 16, 2021, 8:19pm UTC](https://discuss.elastic.co/t/threads-stuck-waiting-for-response/264189 "2021-02-16T20:19:58Z")
Hi, We are running a ES cluster 7.7 and have a service accessing it through the Java rest client (7.7.0). The service is a high traffic springboot application deployed in our organization's kubernetes clusters. From ti…
---
## [Elastic stores string in numeric (long) field](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102)
**Author:** [@Yaniv\_Bogdanov](https://discuss.elastic.co/u/Yaniv_Bogdanov)\
**Replies:** 6\
**Last updated:** [February 16, 2021, 7:31pm UTC](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102 "2021-02-16T19:31:02Z")
Hello, I noticed that elastic allows to store a string value in a numeric field that was mapped as long (as the string can be parsed as a number). I'm not sure if this is a bug or a feature (and if it has a setting to …
[Previous page](https://discuss.elastic.co/latest.md?page=1833)
[Next page](https://discuss.elastic.co/latest.md?page=1835)