# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1850

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1851

---

## [DocumentExist Response on .NET low level client](https://discuss.elastic.co/t/documentexist-response-on-net-low-level-client/263604)

<div class="topic-metadata">

**Author:** [@awan.soekamto](https://discuss.elastic.co/u/awan.soekamto)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 3:20am UTC](https://discuss.elastic.co/t/documentexist-response-on-net-low-level-client/263604 "2021-02-09T03:20:48Z")

</div>

Hi, I am trying to check a document exist or not using the following code: Me.LowLevelClient.DocumentExists(Of Elasticsearch.Net.StringResponse)(index:=TargetIndexName, id:=DocumentID) But it returns with Body prop e…

---

## [Persist Kibana Session across browser restart](https://discuss.elastic.co/t/persist-kibana-session-across-browser-restart/261718)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 3:01am UTC](https://discuss.elastic.co/t/persist-kibana-session-across-browser-restart/261718 "2021-02-09T03:01:21Z")

</div>

My kibana session expires if I close the browser and restart it. I am wondering if there's a way for me to persist the Kibana session across a browser restart so that I don't have to re-login if I close and re-launch my …

---

## [Calculating indexing rate programmatically](https://discuss.elastic.co/t/calculating-indexing-rate-programmatically/261701)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 2:59am UTC](https://discuss.elastic.co/t/calculating-indexing-rate-programmatically/261701 "2021-02-09T02:59:59Z")

</div>

The indices tab in Kibana Monitoring UI shows the indexing rate: Can anyone guide me on how can I get that programatically using API? Based on this thread as well as this, it seems I can do the following: GET /.mon…

---

## [Elasticsearch CPU usage High](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 2:40am UTC](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846 "2021-02-09T02:40:24Z")

</div>

I am running a single node ELK stack which is ingesting logs from an Application Load Balancer on AWS. It is a decent sized instance with 8 VCPUs and 32GB RAM. I am seeing a consistently high CPU usage on the instance …

---

## [Show Country wise breakup in horizontal bar chart](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 2:28am UTC](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627 "2021-02-09T02:28:42Z")

</div>

I want to show the country-wise breakup bar chart for the data showing in the above image. One bar should show a sum of all value belongs to Singapore and so on for other countries. Is it possible to show in such visu…

---

## [Es es es](https://discuss.elastic.co/t/es-es-es/263667)

<div class="topic-metadata">

**Author:** [@ppttv](https://discuss.elastic.co/u/ppttv)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 2:09am UTC](https://discuss.elastic.co/t/es-es-es/263667 "2021-02-09T02:09:28Z")

</div>

hows entry for one node only. I tried a lot however it didn't work.

---

## [Kibana Login Not working](https://discuss.elastic.co/t/kibana-login-not-working/263271)

<div class="topic-metadata">

**Author:** [@paltapas3](https://discuss.elastic.co/u/paltapas3)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 2:05am UTC](https://discuss.elastic.co/t/kibana-login-not-working/263271 "2021-02-09T02:05:08Z")

</div>

I have created the following ELK self managed service & followed the instructions provided.. ELK ---\> https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview Instructions of In…

---

## [How to access Elasticsearch auto-generated password on windows](https://discuss.elastic.co/t/how-to-access-elasticsearch-auto-generated-password-on-windows/263544)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-access-elasticsearch-auto-generated-password-on-windows/263544 "2021-02-09T02:00:03Z")

</div>

Hi all, When i'm running elasticsearch on my UBUNTU system, i'm able to access auto generated passwords of my security enabled elasticsearch. How can i access auto generated passwords of my elastic instance such as apm…

---

## [Finding computer in hosts](https://discuss.elastic.co/t/finding-computer-in-hosts/263460)

<div class="topic-metadata">

**Author:** [@ukuleleplayer](https://discuss.elastic.co/u/ukuleleplayer)\
**Replies:** 5\
**Last updated:** [February 8, 2021, 11:48pm UTC](https://discuss.elastic.co/t/finding-computer-in-hosts/263460 "2021-02-08T23:48:35Z")

</div>

I got a computer hooked up to auditbeat, but am unable to find it in the hosts. So, I have two questions. 1.) Is there any setting that might prevent it from showing up? 2.) Is there anyway for me to confirm whether or…

---

## [VPN Tunnels, Multiple sites, Do I need to NAT (a second time)?](https://discuss.elastic.co/t/vpn-tunnels-multiple-sites-do-i-need-to-nat-a-second-time/263663)

<div class="topic-metadata">

**Author:** [@VPN-noob](https://discuss.elastic.co/u/VPN-noob)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 11:11pm UTC](https://discuss.elastic.co/t/vpn-tunnels-multiple-sites-do-i-need-to-nat-a-second-time/263663 "2021-02-08T23:11:04Z")

</div>

First time poster, please be gentle. As the username implies, I am a complete neophyte at site-to-site VPN tunnelling. Here's the setup: I have a central ELK Stack running, that is monitoring my DC servers and network…

---

## [Generate PDF Report Fails](https://discuss.elastic.co/t/generate-pdf-report-fails/263537)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 10:56pm UTC](https://discuss.elastic.co/t/generate-pdf-report-fails/263537 "2021-02-08T22:56:55Z")

</div>

Hello, I have checked previous posts but still cannot find a solution. Kibana/Elastic version - 7.9.1 5 Elastic nodes 2 Kibana nodes Platinum licenses When I try to generate a pdf report, it fails. I also have a s…

---

## [Aggregation search use highlevel client get incorrect result occasional](https://discuss.elastic.co/t/aggregation-search-use-highlevel-client-get-incorrect-result-occasional/263554)

<div class="topic-metadata">

**Author:** [@ZorroYue](https://discuss.elastic.co/u/ZorroYue)\
**Replies:** 0\
**Last updated:** [February 8, 2021, 7:24am UTC](https://discuss.elastic.co/t/aggregation-search-use-highlevel-client-get-incorrect-result-occasional/263554 "2021-02-08T07:24:22Z")

</div>

i execute aggregation search use highlevel client，and print searchbuilder as follow: { "size": 0, "query": {}, "aggregations": { "term0": { "filter": { "match\_all": { "boost": 1 …

---

## [Max\_docs not working in ES 6.5.4](https://discuss.elastic.co/t/max-docs-not-working-in-es-6-5-4/263445)

<div class="topic-metadata">

**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 10:44pm UTC](https://discuss.elastic.co/t/max-docs-not-working-in-es-6-5-4/263445 "2021-02-08T22:44:21Z")

</div>

\> max\_docs is not working in 6.5.4 but its working in 7.3.2 when we are using delete\_by\_query\`

---

## [Dynamic index name in DSL](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580)

<div class="topic-metadata">

**Author:** [@Ninja\_Ninja](https://discuss.elastic.co/u/Ninja_Ninja)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 10:42pm UTC](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580 "2021-02-08T22:42:17Z")

</div>

I have created indexes based on year and month. For ex: idx202001, idx202002,... In the dashboard, based on the time filter selected, I would like to query particular indices only. Like { "query": { "match": { "\_…

---

## [Custom rate limit per user](https://discuss.elastic.co/t/custom-rate-limit-per-user/263592)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 2\
**Last updated:** [February 8, 2021, 10:41pm UTC](https://discuss.elastic.co/t/custom-rate-limit-per-user/263592 "2021-02-08T22:41:06Z")

</div>

can we define custom rate limit for each user of elastic? for example kibana user rate limit: 10 request every minute! can do this?

---

## [Audit logs are not getting generated in elasticsearch 7.3](https://discuss.elastic.co/t/audit-logs-are-not-getting-generated-in-elasticsearch-7-3/263648)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 9:53pm UTC](https://discuss.elastic.co/t/audit-logs-are-not-getting-generated-in-elasticsearch-7-3/263648 "2021-02-08T21:53:47Z")

</div>

elasticversion- 7.3 I have 8 nodes of elasticsearch masternodes- 3 clientnode-2 datanode-3 I want to generate audit logs in the elasticsearch so I added this parameter in all the 8 nodes xpack.security.audit.enabled …

---

## [Filebeat modules via Logstash](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612)

<div class="topic-metadata">

**Author:** [@st1988](https://discuss.elastic.co/u/st1988)\
**Replies:** 6\
**Last updated:** [February 8, 2021, 9:19pm UTC](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612 "2021-02-08T21:19:01Z")

</div>

Hi everyone, I have an issue where when I try and integrate Filebeat PANOS module with Elasticsearch via Logstash it fails to bring across the pre-built dashboards that is does when integrating Filebeat directly with El…

---

## [ArubaOS](https://discuss.elastic.co/t/arubaos/263655)

<div class="topic-metadata">

**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\
**Replies:** 0\
**Last updated:** [February 8, 2021, 9:00pm UTC](https://discuss.elastic.co/t/arubaos/263655 "2021-02-08T21:00:32Z")

</div>

Hello community? Has anyone could ship logs to Logstash from Aruba Networks? any .conf file example? hope your comments. Regards

---

## [Swapping alias workflow](https://discuss.elastic.co/t/swapping-alias-workflow/263531)

<div class="topic-metadata">

**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\
**Replies:** 2\
**Last updated:** [February 8, 2021, 8:58pm UTC](https://discuss.elastic.co/t/swapping-alias-workflow/263531 "2021-02-08T20:58:33Z")

</div>

Hi, I'm looking for some advice about swapping what an alias is pointing at. We're using logstash to index events into ES, in the good ole format of logstash-metrics-YYYY-MM-dd. Now, we've discovered that we need to r…

---

## [Updated geoip](https://discuss.elastic.co/t/updated-geoip/263043)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 11\
**Last updated:** [February 8, 2021, 8:53pm UTC](https://discuss.elastic.co/t/updated-geoip/263043 "2021-02-08T20:53:24Z")

</div>

I configured the geoip in logstash. I have it updated. Can you help me with a sample configuration?

---

## [Persistent Kibana shard failure error for oldest shown data](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910)

<div class="topic-metadata">

**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910 "2021-02-08T20:41:32Z")

</div>

When opening any visualization, dashboard, or the discover tab, an error appears explaining that ~%80 of shards failed. Unless the time span is set to very small increments, e.g. 15 minutes, the oldest %80 of data never …

---

## [Indices not being deleted in ILM policy](https://discuss.elastic.co/t/indices-not-being-deleted-in-ilm-policy/263492)

<div class="topic-metadata">

**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 7:55pm UTC](https://discuss.elastic.co/t/indices-not-being-deleted-in-ilm-policy/263492 "2021-02-08T19:55:49Z")

</div>

For some reason, my indices are not being deleted after the delete phase is triggered. I have a policy as below: { "unifi" : { "version" : 1, "modified\_date" : "2021-01-28T14:21:47.860Z", "policy" : { …

---

## [React Axios Elasticsearch](https://discuss.elastic.co/t/react-axios-elasticsearch/263645)

<div class="topic-metadata">

**Author:** [@ahmedch](https://discuss.elastic.co/u/ahmedch)\
**Replies:** 0\
**Last updated:** [February 8, 2021, 6:25pm UTC](https://discuss.elastic.co/t/react-axios-elasticsearch/263645 "2021-02-08T18:25:05Z")

</div>

Hello, I am working on a react app using elasticsearch , I have a problem for making post request with axios , the app is mainly based on react and Elasticsearch . This is the code working on node.js const axios = re…

---

## [Best specification server](https://discuss.elastic.co/t/best-specification-server/262585)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 6\
**Last updated:** [February 8, 2021, 6:03pm UTC](https://discuss.elastic.co/t/best-specification-server/262585 "2021-02-08T18:03:33Z")

</div>

hi guys, i have a project to make a SIEM using ELK. and it will be separate 5 server. 3 server for Elasticsearch, 1 server for Kibana, and 1 server for Logstash can you guys help me with the most ideal spec for all the…

---

## [Need some help configuring an ACK handler for a custom beat](https://discuss.elastic.co/t/need-some-help-configuring-an-ack-handler-for-a-custom-beat/263639)

<div class="topic-metadata">

**Author:** [@luado](https://discuss.elastic.co/u/luado)\
**Replies:** 0\
**Last updated:** [February 8, 2021, 5:12pm UTC](https://discuss.elastic.co/t/need-some-help-configuring-an-ack-handler-for-a-custom-beat/263639 "2021-02-08T17:12:00Z")

</div>

First of, I tried finding on the tags options a "custom beat" tag, but there is not one there, could I suggest adding such a tag? I have created a custom beat based on libbeat v7. I have defined a struct that implement…

---

## [Kibana isn't being displayed in web browser](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553)

<div class="topic-metadata">

**Author:** [@ROPA8](https://discuss.elastic.co/u/ROPA8)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 5:06pm UTC](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553 "2021-02-08T17:06:22Z")

</div>

Hi all, I have a problem with my Kibana. Elastic Search and Kibana run well but kibana isn't loaded in web browser and it just shows white page at localhost:5602. kibana console last messages: before starting saved o…

---

## [Metricbeat|Failed to parse api response: invalid ch aracter '#' looking for beginning of value"](https://discuss.elastic.co/t/metricbeat-failed-to-parse-api-response-invalid-ch-aracter-looking-for-beginning-of-value/263436)

<div class="topic-metadata">

**Author:** [@sandeepsingh2103](https://discuss.elastic.co/u/sandeepsingh2103)\
**Replies:** 2\
**Last updated:** [February 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-parse-api-response-invalid-ch-aracter-looking-for-beginning-of-value/263436 "2021-02-08T17:04:18Z")

</div>

Metricbeat: "version": "7.10.0" I am trying to use query metricbeat of 'prometheus' module using following config: - module: prometheus period: 10s hosts: \["fluentd:24231"\] metricsets: \["query"\] queries: - n…

---

## [Logstash won't run, openJDK 64-bit Server](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072)

<div class="topic-metadata">

**Author:** [@Minx](https://discuss.elastic.co/u/Minx)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072 "2021-02-08T17:04:07Z")

</div>

I try to run log stash and this happens, does anyone know what is wrong please? PS C:\\logstash-7.10.1\\bin\> .\\logstash.bat -f .\\config\\logstash.conf "Using bundled JDK: "" OpenJDK 64-Bit Server VM warning: Option UseCo…

---

## [Using SearchType "count" alternatives](https://discuss.elastic.co/t/using-searchtype-count-alternatives/263530)

<div class="topic-metadata">

**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 4:28pm UTC](https://discuss.elastic.co/t/using-searchtype-count-alternatives/263530 "2021-02-08T16:28:54Z")

</div>

I have a use case where I need to use the "size" parameter in my query. I have seen the recommendation to perform two queries-- one to retrieve the count, and a second query using that count as the "size" parameter, to e…

---

## [Limiting fields created by Filebeat for Netflow](https://discuss.elastic.co/t/limiting-fields-created-by-filebeat-for-netflow/263371)

<div class="topic-metadata">

**Author:** [@Attila\_Kelenyi](https://discuss.elastic.co/u/Attila_Kelenyi)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 4:13pm UTC](https://discuss.elastic.co/t/limiting-fields-created-by-filebeat-for-netflow/263371 "2021-02-08T16:13:27Z")

</div>

Dear All, I hope you can give me some advice on the best way to reduce the number of fields created. Let me begin with the overview of the design: VMware ESXI hosts are sending Neflow v10 (IPFX) to Filebeat forwardin…

[Previous page](https://discuss.elastic.co/latest.md?page=1849)

[Next page](https://discuss.elastic.co/latest.md?page=1851)
