# Latest **URL:** https://discuss.elastic.co/latest.md?page=1898 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1899 --- ## [Elasticsearch fails to start on VM Boot](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 4:37pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645 "2021-01-12T16:37:34Z")
I am running Ubuntu 20. Upon starting my machine, kibana fails, saying it can't connect to localhost:9200. I check on Elasticsearch, and I see this: ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/sy… --- ## [Logstash stops writing to output file](https://discuss.elastic.co/t/logstash-stops-writing-to-output-file/260860)
**Author:** [@jorism](https://discuss.elastic.co/u/jorism)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 4:17pm UTC](https://discuss.elastic.co/t/logstash-stops-writing-to-output-file/260860 "2021-01-12T16:17:36Z")
We have configured beats to collect access logs on different servers, and write those to logstash. After a while, logstash (latest version stops writing to the output file. The process keeps running but it stops writin… --- ## [Translate searchSourceJSON to Query DQL](https://discuss.elastic.co/t/translate-searchsourcejson-to-query-dql/260847)
**Author:** [@hyxelt](https://discuss.elastic.co/u/hyxelt)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 4:00pm UTC](https://discuss.elastic.co/t/translate-searchsourcejson-to-query-dql/260847 "2021-01-12T16:00:01Z")
I am trying to convert searchSourceJSON attribute of savedObject in DQL. But I haven't found a way to do it. The idea is to be able to execute the query that is stored in the object and execute it directly in ElasticSea… --- ## [Filtering timeseries by highlighting graph](https://discuss.elastic.co/t/filtering-timeseries-by-highlighting-graph/260769)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 3:58pm UTC](https://discuss.elastic.co/t/filtering-timeseries-by-highlighting-graph/260769 "2021-01-12T15:58:27Z")
I have data flowing into an index that I use to populate multiple timeseries bar charts. My dashboard is set to view from 3 months ago until now. This looks great however say I want to zoom in on the latest data. If I cl… --- ## [Access to elastic.co cluster Kibana error](https://discuss.elastic.co/t/access-to-elastic-co-cluster-kibana-error/260856)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 3:48pm UTC](https://discuss.elastic.co/t/access-to-elastic-co-cluster-kibana-error/260856 "2021-01-12T15:48:44Z")
Hello, We have a cluster hosted on elastic.co, every time i access the Kiban dashboard I get the following error \[instance-\*\*\*\*\] failed to execute \[script\] transform for \[disVcG\_pRUaBuOK\_EkrBpw\_elasticsearch\_cluster\_st… --- ## [Issue with max\_determinized\_states while selecting 1500+ columns](https://discuss.elastic.co/t/issue-with-max-determinized-states-while-selecting-1500-columns/260853)
**Author:** [@kavipadm](https://discuss.elastic.co/u/kavipadm)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 3:33pm UTC](https://discuss.elastic.co/t/issue-with-max-determinized-states-while-selecting-1500-columns/260853 "2021-01-12T15:33:55Z")
Hi Team, I am trying to query elasticsearch from spark - However, running into the below error while selecting 1500+ columns: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: org.elasticsearch.hadoop.rest.EsHadoop… --- ## [Is there any way to aggregate an average without outliers?](https://discuss.elastic.co/t/is-there-any-way-to-aggregate-an-average-without-outliers/259940)
**Author:** [@ofir\_y](https://discuss.elastic.co/u/ofir_y)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 2:33pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-aggregate-an-average-without-outliers/259940 "2021-01-12T14:33:01Z")
I need a way to create a transform that will aggregate the average of a field but without the outliers (let's say all values that falls between 10%-90% percentiles). for example if I have the following values: \[1,2,3,4,… --- ## [How to make stats visible(turned on) always in a Kibana visualization](https://discuss.elastic.co/t/how-to-make-stats-visible-turned-on-always-in-a-kibana-visualization/260760)
**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 1:55pm UTC](https://discuss.elastic.co/t/how-to-make-stats-visible-turned-on-always-in-a-kibana-visualization/260760 "2021-01-12T13:55:38Z")
When I hover mouse over a visualization(in a bar/pie chart) I get to see stats like percentage etc. Is it possible to make this visible(turned on) always? without needing to hover the mouse on it. See attached screen s… --- ## [Logstash multi pipeline optimal configuration](https://discuss.elastic.co/t/logstash-multi-pipeline-optimal-configuration/260832)
**Author:** [@Dimitrios\_Dellios](https://discuss.elastic.co/u/Dimitrios_Dellios)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 1:27pm UTC](https://discuss.elastic.co/t/logstash-multi-pipeline-optimal-configuration/260832 "2021-01-12T13:27:57Z")
Greetings! I am currently running Logstash 7.9.2, on a production node, with Logstash being the only one of the stack installed there. My node has 8 cores. I am running a multiple pipeline configuration, with some pipel… --- ## [Logstash grok filter not working](https://discuss.elastic.co/t/logstash-grok-filter-not-working/260270)
**Author:** [@vinodhini](https://discuss.elastic.co/u/vinodhini)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 1:12pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-not-working/260270 "2021-01-12T13:12:17Z")
I am trying to get my grok filter working. "\[20/Oct/2020:16:37:57.750 -0500\] BIND RESULT instanceName="abc.com" threadID=9 conn=2312717 op=0 msgID=1 request erIP="123.12.12.1" version="3" dn="uid=xyz,ou=appids,ou=admin… --- ## [\[parsing date error\]: date\_time\_parse\_exception: Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 11:13am UTC](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804 "2021-01-12T11:13:51Z")
Hello, I am using elasticsearch, Kibana and Logstash all version 7.10.1 I would like to ingest data from URLhaus, so I have created a template like that: PUT \_template/urlhaus { "index\_patterns": \["urlhaus-\*"\], "… --- ## [Line chart with two date count lines for use with ServiceNow incident data](https://discuss.elastic.co/t/line-chart-with-two-date-count-lines-for-use-with-servicenow-incident-data/260735)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 11:06am UTC](https://discuss.elastic.co/t/line-chart-with-two-date-count-lines-for-use-with-servicenow-incident-data/260735 "2021-01-12T11:06:00Z")
Hi, I have ServiceNow incident data in an index and I would like to visualise the the trend of opened and resolved tickets on a per day basis. I can do it in separate visualisations but I cant figure out how to combine i… --- ## [Understanding Unusual Logstash Traffic Flow Rates](https://discuss.elastic.co/t/understanding-unusual-logstash-traffic-flow-rates/260821)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 10:59am UTC](https://discuss.elastic.co/t/understanding-unusual-logstash-traffic-flow-rates/260821 "2021-01-12T10:59:28Z")
Hi, I'd like to understand some apparently odd behaviour we're seeing with traffic hitting our logstashes vs what is being ingested into elasticsearch and s3. Note that we're using the output isolator pattern to decoupl… --- ## [How configure logstash in Kubernetes to point to a specific directory that is mapped as emptydir or local](https://discuss.elastic.co/t/how-configure-logstash-in-kubernetes-to-point-to-a-specific-directory-that-is-mapped-as-emptydir-or-local/260814)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 10:16am UTC](https://discuss.elastic.co/t/how-configure-logstash-in-kubernetes-to-point-to-a-specific-directory-that-is-mapped-as-emptydir-or-local/260814 "2021-01-12T10:16:14Z")
hello all i need to configure logstash to listen to incoming logs in a directory. (which will be manually uploaded logs to ) And to process them and show them in kibana . i already have filebeat monitoring running the… --- ## [Error loading kibana on a web browser - 503 service unavailable](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520)
**Author:** [@prajwal93](https://discuss.elastic.co/u/prajwal93)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 10:03am UTC](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520 "2021-01-12T10:03:34Z")
I have an ELK cluster running and I have trouble loading Kibana in my web browser. It was working fine until 3 days before I made a change to logstash configuration. I installed Logstash-amazon\_es plugin, used to load da… --- ## [Repository\_verification\_exception](https://discuss.elastic.co/t/repository-verification-exception/260805)
**Author:** [@Luca\_P](https://discuss.elastic.co/u/Luca_P)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 9:43am UTC](https://discuss.elastic.co/t/repository-verification-exception/260805 "2021-01-12T09:43:34Z")
Hi All. I manage few ES clusters that perform snapshots on S3 bucket without issues, they are all configured with master nodes and hot-data nodes. Now, I have 1 cluster where we configured also warm nodes, and it seems… --- ## [Detection Rules Column Data Missing](https://discuss.elastic.co/t/detection-rules-column-data-missing/260434)
**Author:** [@Psyhil](https://discuss.elastic.co/u/Psyhil)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 9:47am UTC](https://discuss.elastic.co/t/detection-rules-column-data-missing/260434 "2021-01-12T09:47:31Z")
Good Day! I have added some custom rules in elastic and running into a problem where fields like host.name, Source IP address and destination IP address are missing in detections UI. I tried to fiddle with the columns … --- ## [Amount of replica's](https://discuss.elastic.co/t/amount-of-replicas/260801)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 9:22am UTC](https://discuss.elastic.co/t/amount-of-replicas/260801 "2021-01-12T09:22:55Z")
we have redundant elastic stack setup in 2 datacenters with CCR and redundant storage in each DC. as a lot of TB of data we want to set replica from 1 to 0 to save storage. is their any othe reason to keep the replica … --- ## [Elasticsearch : circuit\_breaking\_exception Data too large, data for \[\\] would be \[419575260/400.1mb\], which is larger than the limit of \[408420352/389.5mb\], real usage](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685)
**Author:** [@Sathish\_Shanmugam](https://discuss.elastic.co/u/Sathish_Shanmugam)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685 "2021-01-12T09:18:18Z")
We are experiencing an issue while running elastic search bulk API on to elastic cloud 7.8.1 below is the exception when we get when we increase the batch size \> 100, The stack trace from NodeJS library @elastic/elasti… --- ## [Installing Elasticsearch plugins when ES is running as Kubernetes pod](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799)
**Author:** [@sun24](https://discuss.elastic.co/u/sun24)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 8:47am UTC](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799 "2021-01-12T08:47:33Z")
I understand that one method is to use the containers: command: Required command But this data is not retained once the pod restarts and the command is run again and again resulting in a crashloopbackoff. How to res… --- ## [Metricbeat AWS module not sending data](https://discuss.elastic.co/t/metricbeat-aws-module-not-sending-data/260200)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 17\ **Last updated:** [January 11, 2021, 11:45am UTC](https://discuss.elastic.co/t/metricbeat-aws-module-not-sending-data/260200 "2021-01-11T11:45:46Z")
Good day, I'm currently trying to collect AWS metrics with the Metricbeat AWS module. And although the status of metricbeat looks fine, elasticsearch doesn't seem to receive any data. my metricbeat.yml: metricbeat.con… --- ## [Ingest pipe line grok pattern with field name having spaces](https://discuss.elastic.co/t/ingest-pipe-line-grok-pattern-with-field-name-having-spaces/259840)
**Author:** [@Bo\_Koralage](https://discuss.elastic.co/u/Bo_Koralage)\ **Replies:** 10\ **Last updated:** [January 12, 2021, 9:00am UTC](https://discuss.elastic.co/t/ingest-pipe-line-grok-pattern-with-field-name-having-spaces/259840 "2021-01-12T09:00:09Z")
I am using a ingest pipeline to parse a tab separated log message coming from filebeat. One of the fields can have spaces. In the example below "Gui Process" should be parsed to the SourceName field. However, what happen… --- ## [Parsing Json from couchDb to ElasticSearch via Logstash](https://discuss.elastic.co/t/parsing-json-from-couchdb-to-elasticsearch-via-logstash/260797)
**Author:** [@skr007](https://discuss.elastic.co/u/skr007)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 8:35am UTC](https://discuss.elastic.co/t/parsing-json-from-couchdb-to-elasticsearch-via-logstash/260797 "2021-01-12T08:35:42Z")
Can anyone please help me with this issue? --- ## [High CPU usage 100%](https://discuss.elastic.co/t/high-cpu-usage-100/260750)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [January 12, 2021, 8:12am UTC](https://discuss.elastic.co/t/high-cpu-usage-100/260750 "2021-01-12T08:12:22Z")
Hello, I am using ELasticsearch and Kibana version 7.10.1 Since 3 days, I am noticing that my data nodes are using high CPU, 100% in my cluster I have: 3 master nodes ( 2 CPU, 4 Go RAM, 100 Go HDD) node.roles: \[ mas… --- ## [Index mapping at startup](https://discuss.elastic.co/t/index-mapping-at-startup/260741)
**Author:** [@hyunsoo](https://discuss.elastic.co/u/hyunsoo)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:22am UTC](https://discuss.elastic.co/t/index-mapping-at-startup/260741 "2021-01-12T07:22:25Z")
Hi all, This question is about launching elasticsearch with kubernetes. If I run k8s like below, ... containers: - name: elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:7.10.1 … --- ## [Can't get my host to talk to the kibana server](https://discuss.elastic.co/t/cant-get-my-host-to-talk-to-the-kibana-server/260660)
**Author:** [@Minx](https://discuss.elastic.co/u/Minx)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:21am UTC](https://discuss.elastic.co/t/cant-get-my-host-to-talk-to-the-kibana-server/260660 "2021-01-12T07:21:20Z")
I'm not sure why but all I seem to get it this error message, I'm using a server 2016 with Elastic search, kibana, file beat and winlog beat, it can see the windows log from itself but this message is from a Win 10 ho… --- ## [Elastic APM PHP Tracer - Sending events to APM Server failed](https://discuss.elastic.co/t/elastic-apm-php-tracer-sending-events-to-apm-server-failed/260445)
**Author:** [@bimanarajesh](https://discuss.elastic.co/u/bimanarajesh)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 7:19am UTC](https://discuss.elastic.co/t/elastic-apm-php-tracer-sending-events-to-apm-server-failed/260445 "2021-01-12T07:19:53Z")
Elasticsearch version: 6.8.4 APM Server version: 7.6.0 APM Agent language and version: apm-agent-php 1.0.0-beta1 PHP version: 7.2.34 Original install method (e.g. download page, yum, deb, from source, etc.) and v… --- ## [No SSL verification for Logstash filter: Elasticsearch](https://discuss.elastic.co/t/no-ssl-verification-for-logstash-filter-elasticsearch/260489)
**Author:** [@tinhn](https://discuss.elastic.co/u/tinhn)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:17am UTC](https://discuss.elastic.co/t/no-ssl-verification-for-logstash-filter-elasticsearch/260489 "2021-01-12T07:17:21Z")
Hello, I am fairly new to setting up security, so I'm sorry if there are holes in my logic. I'm running Elasticsearch (7.9.1 OSS with opendistro) + Kibana on one machine and Logstash (7.8.0) on another machine. Within … --- ## [How to reset my mail ID used in trial and start using in paid account](https://discuss.elastic.co/t/how-to-reset-my-mail-id-used-in-trial-and-start-using-in-paid-account/258863)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 7:13am UTC](https://discuss.elastic.co/t/how-to-reset-my-mail-id-used-in-trial-and-start-using-in-paid-account/258863 "2021-01-12T07:13:01Z")
Hi, I used my business email in a trial account for POC purposes. But with the paid account (set up using Azure Marketplace), I am not able to use my same business email. Am I following wrong approach? --- ## [Will the official apm php agent support 5.6 and 7.1?](https://discuss.elastic.co/t/will-the-official-apm-php-agent-support-5-6-and-7-1/260777)
**Author:** [@htf021401](https://discuss.elastic.co/u/htf021401)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:05am UTC](https://discuss.elastic.co/t/will-the-official-apm-php-agent-support-5-6-and-7-1/260777 "2021-01-12T07:05:15Z")
Hi everyone, The official apm php agent will support 5.6 and 7.1? Best regards, [Previous page](https://discuss.elastic.co/latest.md?page=1897) [Next page](https://discuss.elastic.co/latest.md?page=1899)