# Latest **URL:** https://discuss.elastic.co/latest.md?page=1842 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1843 --- ## [Mysql schema logs push to logstash](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016)
**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 7:59pm UTC](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016 "2021-02-11T19:59:19Z")
Logstash config file '' input { jdbc { clean\_run =\> true jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> 'C:\\Program Files (x86)\\MySQL\\Connector J 8 0\\mysql-connector-java-8.0.22.jar' jdbc\_driver\_class =\> … --- ## [URGENT.. PLEASE HELP : Not able to execute a procedure from logstash jdbc\_filter](https://discuss.elastic.co/t/urgent-please-help-not-able-to-execute-a-procedure-from-logstash-jdbc-filter/263858)
**Author:** [@Melvin\_Shaju](https://discuss.elastic.co/u/Melvin_Shaju)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 7:56pm UTC](https://discuss.elastic.co/t/urgent-please-help-not-able-to-execute-a-procedure-from-logstash-jdbc-filter/263858 "2021-02-11T19:56:42Z")
I'm getting this following error when trying to execute a mysql procedure call from logstash. This procedure is getting successfully executed through mysql command line. The error is jdbcstreaming - Exception when exec… --- ## [Error when using template generated by ECS Tooling (1.7 and master) for datastream](https://discuss.elastic.co/t/error-when-using-template-generated-by-ecs-tooling-1-7-and-master-for-datastream/263016)
**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 7:38pm UTC](https://discuss.elastic.co/t/error-when-using-template-generated-by-ecs-tooling-1-7-and-master-for-datastream/263016 "2021-02-11T19:38:21Z")
ECS Tooling (1.7.0 and master) generates template as following with my template-settings input: { "index\_patterns":\[ "my-data-stream\*" \], "data\_stream":{ }, "mappings":{ "properties":{ … --- ## [Does elastic eck operators support open distro for Elasticsearch](https://discuss.elastic.co/t/does-elastic-eck-operators-support-open-distro-for-elasticsearch/258215)
**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\ **Replies:** 4\ **Last updated:** [January 6, 2021, 2:55pm UTC](https://discuss.elastic.co/t/does-elastic-eck-operators-support-open-distro-for-elasticsearch/258215 "2021-01-06T14:55:09Z")
Hi, We use the eck operator docker.elastic.co/eck/eck-operator:1.0.0-beta1 to deploy the ES cluster in kubernetes. Now we are trying to use the open distro for Elasticsearch docker image to create the ES cluster but ope… --- ## [Unable to send data to AWS MSK, getting error message: Kafka publish failed with: circuit breaker is open](https://discuss.elastic.co/t/unable-to-send-data-to-aws-msk-getting-error-message-kafka-publish-failed-with-circuit-breaker-is-open/264045)
**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 6:44pm UTC](https://discuss.elastic.co/t/unable-to-send-data-to-aws-msk-getting-error-message-kafka-publish-failed-with-circuit-breaker-is-open/264045 "2021-02-11T18:44:51Z")
Dear Team, I am using filebeat agent 7.10.0 and AWS msk in my pipeline. I am getting error : Kafka publish failed with: circuit breaker is open and retryer: send unwait signal to consumer. Please suggest if anyone f… --- ## [Anamoly Initialize issues/ Create Trigger give authorization error](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796)
**Author:** [@Vimal\_Bagmar](https://discuss.elastic.co/u/Vimal_Bagmar)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 7:13pm UTC](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796 "2021-02-11T19:13:59Z")
Am using Kibana endpoint from ElasticSearch cluster. Was able to create Visuals. But when I create Anamoly , I have 2 issues Anamoly is still in initialize phase since 24hr. Creating Trigger (Alerting-\>Monitors-\>N… --- ## [Lowercase analyzer filter with nested field and queries](https://discuss.elastic.co/t/lowercase-analyzer-filter-with-nested-field-and-queries/264043)
**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 6:31pm UTC](https://discuss.elastic.co/t/lowercase-analyzer-filter-with-nested-field-and-queries/264043 "2021-02-11T18:31:55Z")
In v6.6 I can't get a nested query to ignore case on a search of a property in the nested object, whether I specify a custom analyzer or not. Case is ignored on non-nested fields as expected. Is this expected? Do I have… --- ## [Tooltip in Vega](https://discuss.elastic.co/t/tooltip-in-vega/263886)
**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 5:27pm UTC](https://discuss.elastic.co/t/tooltip-in-vega/263886 "2021-02-11T17:27:38Z")
Here I wanted to show distinct 'd' field values for each 'a' field in tooltip. For text it's giving correct but A and B are overlapping and in tooltip it's giving only B. { "$schema": "https://vega.github.io/schema/ve… --- ## [Newly added Field Not available for aggregations](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 5:21pm UTC](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050 "2021-02-11T17:21:29Z")
Elasticsearch 7.9.1 Kibana 7.9.1 - 4 docker containers Updated the index mapping to add new field of type keyword. Waited for new index to be created. Refreshed the index pattern in Kibana. Searched for that field i… --- ## [Filebeat low throughput and many old files under harvesting](https://discuss.elastic.co/t/filebeat-low-throughput-and-many-old-files-under-harvesting/263093)
**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 5:09pm UTC](https://discuss.elastic.co/t/filebeat-low-throughput-and-many-old-files-under-harvesting/263093 "2021-02-11T17:09:25Z")
Hi, I am noticing this weird problem on filebeat side. Using filebeat version=7.1 I follow this setup , Filebeat -\> Logstash -\> ES. Logstash servers have been setup with persisted queue of 20GB. filebeat is reading… --- ## [Logstash config for parsing ASA logs](https://discuss.elastic.co/t/logstash-config-for-parsing-asa-logs/262563)
**Author:** [@psycadelicgecko](https://discuss.elastic.co/u/psycadelicgecko)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 5:00pm UTC](https://discuss.elastic.co/t/logstash-config-for-parsing-asa-logs/262563 "2021-02-11T17:00:27Z")
So I am brand new to ELK/Elastic so I'm sure I'm doing at least a few things wrong. I was able to find a couple examples of Logstash config files for parsing ASA logs. They are similar to what I've seen on this forum. S… --- ## [Scripted field not available in Rest API](https://discuss.elastic.co/t/scripted-field-not-available-in-rest-api/264031)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 4:54pm UTC](https://discuss.elastic.co/t/scripted-field-not-available-in-rest-api/264031 "2021-02-11T16:54:26Z")
Hi All, I'm trying to fetch data from elasticsaerch using rest api, i'm able to get all the documents by running the below query GET perfchk/\_search?size=1000 I have created few scripted fields in this index, those sc… --- ## [Metricbeat AWS Module - billing metricset](https://discuss.elastic.co/t/metricbeat-aws-module-billing-metricset/263223)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 10\ **Last updated:** [February 11, 2021, 12:27pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module-billing-metricset/263223 "2021-02-11T12:27:42Z")
Good day, I'm currently trying to collect billing information from AWS by using the billing metricset of the Metricbeat AWS module, but the received data does not contain any billing information. my metricbeat.yml: me… --- ## [Kibana throwing error "{"statusCode":503,"error":"Service Unavailable","message":"Service Unavailable"}"](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 9\ **Last updated:** [February 11, 2021, 4:22pm UTC](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844 "2021-02-11T16:22:35Z")
Hi Team, Im using kibana version 6.4.0 and when ever i try to save or create new index im getting 503 error. All the elasticsearch service are up and running. My setup is 3 Master and 3 Data and 1 coordinate Node. My… --- ## [Unique Count by Bucket](https://discuss.elastic.co/t/unique-count-by-bucket/263978)
**Author:** [@Razvan\_Todea](https://discuss.elastic.co/u/Razvan_Todea)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 4:13pm UTC](https://discuss.elastic.co/t/unique-count-by-bucket/263978 "2021-02-11T16:13:54Z")
How could we visualize an unique count grouped by bucket? We understand that the counting will only check the uniqueness inside the bucket, but is it another way to achieve this? Example: We want to visualize all the u… --- ## [Issue with ILM](https://discuss.elastic.co/t/issue-with-ilm/264035)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 4:13pm UTC](https://discuss.elastic.co/t/issue-with-ilm/264035 "2021-02-11T16:13:33Z")
Hi i am having an issue with iLM there error is - \`\> illegal\_argument\_exception: index.lifecycle.rollover\_alias \[filebeat\] does not point to index \[filebeat-test-2021.02.11-000001\]\` Logstash settings - elasticsearc… --- ## [Beats monitoring](https://discuss.elastic.co/t/beats-monitoring/264034)
**Author:** [@bolemebrige](https://discuss.elastic.co/u/bolemebrige)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/beats-monitoring/264034 "2021-02-11T16:02:38Z")
Is there a way to send beats monitoring data (over interanal montiroing or metricbeat) to logstash and than to elasticsearch, so not with direct connection to elasticsearch? --- ## [Elasticsearch or Kibana servers / APIs as Vector tile server](https://discuss.elastic.co/t/elasticsearch-or-kibana-servers-apis-as-vector-tile-server/264017)
**Author:** [@Florin\_Virdol](https://discuss.elastic.co/u/Florin_Virdol)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-or-kibana-servers-apis-as-vector-tile-server/264017 "2021-02-11T15:58:52Z")
Hello, As a bit of context, for my web app, on the Angular frontend, on top of Google Maps APIs, i'm using Uber's deck.gl library for better rendering geo-spatial data (GeoJson layers and MVT layers). For the deck.gl M… --- ## [ES7.9.1 : match\_phrase\_prefix irregular behaviour](https://discuss.elastic.co/t/es7-9-1-match-phrase-prefix-irregular-behaviour/264022)
**Author:** [@gap736uk](https://discuss.elastic.co/u/gap736uk)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 3:48pm UTC](https://discuss.elastic.co/t/es7-9-1-match-phrase-prefix-irregular-behaviour/264022 "2021-02-11T15:48:34Z")
We have an ES index of the 230 million + files in our archive - each file gets indexed with details such as filename, directory path and file size I've been attempting to construct queries to aggregate information for a… --- ## [Tracking user activity in Appsearch UI through logs](https://discuss.elastic.co/t/tracking-user-activity-in-appsearch-ui-through-logs/263373)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 8\ **Last updated:** [February 11, 2021, 3:48pm UTC](https://discuss.elastic.co/t/tracking-user-activity-in-appsearch-ui-through-logs/263373 "2021-02-11T15:48:04Z")
Is there any way we can track user activities like what they searched what document they accessed after logging in to appsearch UI through logs or some other ways for audit. Please let me know if any solution. --- ## [Running tasks on a node get terminated when node is shutdown](https://discuss.elastic.co/t/running-tasks-on-a-node-get-terminated-when-node-is-shutdown/263863)
**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 3:36pm UTC](https://discuss.elastic.co/t/running-tasks-on-a-node-get-terminated-when-node-is-shutdown/263863 "2021-02-11T15:36:37Z")
I have a cluster with 3 nodes and trying to upgrade it from 6.6.2 to 7.10.2 using rolling upgrade. The documentation says that we shutdown the node and upgrade it to target version and performing this for all the nodes o… --- ## [Kibana Fleet error after upgrading Elastic Cloud to 7.11](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 8\ **Last updated:** [February 11, 2021, 3:23pm UTC](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969 "2021-02-11T15:23:50Z")
Hi, We get the following error when opening fleet page after upgrading from 7.10.2 to 7.11: Unable to initialize Fleet \[illegal\_argument\_exception\] updating component template \[logs-endpoint.events.file-mappings\] resu… --- ## [Can't get the Enterprise Search service up with Docker](https://discuss.elastic.co/t/cant-get-the-enterprise-search-service-up-with-docker/263917)
**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\ **Replies:** 4\ **Last updated:** [February 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/cant-get-the-enterprise-search-service-up-with-docker/263917 "2021-02-11T14:40:38Z")
I am trying to deploy Elastic Enterprise but when I add the secret key... I mean, I think this needs to be an array because this is what it says here, but I a get this error message: root@localhost:~# docker-compose -f … --- ## [App Search is redirecting to Localhost](https://discuss.elastic.co/t/app-search-is-redirecting-to-localhost/263822)
**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\ **Replies:** 6\ **Last updated:** [February 11, 2021, 3:19pm UTC](https://discuss.elastic.co/t/app-search-is-redirecting-to-localhost/263822 "2021-02-11T15:19:50Z")
I am trying to install Elasticsearch, Kibana and AppSeach with Docker Compose. I can make Elasticsearch and Kibana work, but App Search redirect to localhost (literaly). When I visit http://xxx.xxx.xxx.xxx:3002 (my serv… --- ## [X-axis is not visible in vega visualization](https://discuss.elastic.co/t/x-axis-is-not-visible-in-vega-visualization/263981)
**Author:** [@saumya1](https://discuss.elastic.co/u/saumya1)\ **Replies:** 6\ **Last updated:** [February 11, 2021, 3:19pm UTC](https://discuss.elastic.co/t/x-axis-is-not-visible-in-vega-visualization/263981 "2021-02-11T15:19:46Z")
{ "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "A basic bar chart example, with value labels shown upon mouse hover.", "signals": \[{ "name": "timeunit", "value": \["day"\], … --- ## [Enterprise search](https://discuss.elastic.co/t/enterprise-search/263960)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 2:59pm UTC](https://discuss.elastic.co/t/enterprise-search/263960 "2021-02-11T14:59:55Z")
Is enterprise search not available for windows? --- ## [Issues with Fleet after upgrade to 7.11](https://discuss.elastic.co/t/issues-with-fleet-after-upgrade-to-7-11/264021)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 2:48pm UTC](https://discuss.elastic.co/t/issues-with-fleet-after-upgrade-to-7-11/264021 "2021-02-11T14:48:29Z")
After an Upgrade to 7.11, i receive Errors about composable templates that back data streams. Because of this, I can't open the Fleet view. The errors occur for seemingly all data streams. The indices have no aliases con… --- ## [Managing SIEM rules is harder then it should](https://discuss.elastic.co/t/managing-siem-rules-is-harder-then-it-should/263864)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/managing-siem-rules-is-harder-then-it-should/263864 "2021-02-11T14:40:44Z")
Hello, I'd like to make some suggestions about the Elastic SIEM rule management. Monday we had a major hardware failure of a network card of on of our hot data nodes. The node in particular was not completely offline a… --- ## [Unable to setup Elasticsearch cluster mode](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-cluster-mode/263987)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-cluster-mode/263987 "2021-02-11T14:30:17Z")
Hello there, I am trying to deploy Elasticsearch 7.10.2 in HA with three nodes, all of which play the roles: master, ingest and data. In order to do so, I am using the following configuration in each of the nodes: NOD… --- ## [Filebeat Auditd module: Failed to Parse field \[error\] of type \[keyword\]](https://discuss.elastic.co/t/filebeat-auditd-module-failed-to-parse-field-error-of-type-keyword/263579)
**Author:** [@ven67](https://discuss.elastic.co/u/ven67)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 2:25pm UTC](https://discuss.elastic.co/t/filebeat-auditd-module-failed-to-parse-field-error-of-type-keyword/263579 "2021-02-11T14:25:33Z")
Hello! I have filebeat running in kubernetes with audtid module as such: Loading and configuring auditd module filebeat.modules: - module: auditd log: enabled: true var.paths: \["/var/lo… [Previous page](https://discuss.elastic.co/latest.md?page=1841) [Next page](https://discuss.elastic.co/latest.md?page=1843)