# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1899

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1900

---

## [Elasticsearch Cluster version 7.7 is not stable](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565)

<div class="topic-metadata">

**Author:** [@dat\_le](https://discuss.elastic.co/u/dat_le)\
**Replies:** 8\
**Last updated:** [January 12, 2021, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565 "2021-01-12T06:54:28Z")

</div>

Hello guys, Can anyone help me on this problem? My Cluster: I have a ES cluster with 3 nodes version 7.7. Every node have 2 vCPU and 16GB Ram. I have 2 index: Index 1: 121 MB (1.9M Doc, 2 Primary Shards, 1 Replica Sh…

---

## [Elasticsearch bulk index request failing with error “if \_id is specified it must not be empty”](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778)

<div class="topic-metadata">

**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\
**Replies:** 3\
**Last updated:** [January 12, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778 "2021-01-12T06:29:47Z")

</div>

I am trying to bulk insert records to index asset\_inventory\_dev index. Elastic search is returning error saying “if \_id is specified it must not be empty”. Following is the request i tried from Kibana dev tools. I can…

---

## [Opensource version support https?](https://discuss.elastic.co/t/opensource-version-support-https/260784)

<div class="topic-metadata">

**Author:** [@tonytsangln](https://discuss.elastic.co/u/tonytsangln)\
**Replies:** 4\
**Last updated:** [January 12, 2021, 5:39am UTC](https://discuss.elastic.co/t/opensource-version-support-https/260784 "2021-01-12T05:39:07Z")

</div>

Hi all, Currently I am setting up a app search for a small project with the elastic enterprise search free version, I am wondering if I also can enable the https in the opensource version? Thank you Tony

---

## [Google pubsub plugin not working as expected](https://discuss.elastic.co/t/google-pubsub-plugin-not-working-as-expected/260786)

<div class="topic-metadata">

**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\
**Replies:** 0\
**Last updated:** [January 12, 2021, 5:34am UTC](https://discuss.elastic.co/t/google-pubsub-plugin-not-working-as-expected/260786 "2021-01-12T05:34:18Z")

</div>

I am using the google pub-sub input plugin. the following is my input configuration google\_pubsub { project\_id =\> "krail-proj-kgov-rai-doc-92zx4" topic =\> "rail\_logs" subscription =\> "rail…

---

## [How to connect two different confluence(server) to workplace search?](https://discuss.elastic.co/t/how-to-connect-two-different-confluence-server-to-workplace-search/260532)

<div class="topic-metadata">

**Author:** [@chen.lu](https://discuss.elastic.co/u/chen.lu)\
**Replies:** 2\
**Last updated:** [January 12, 2021, 5:15am UTC](https://discuss.elastic.co/t/how-to-connect-two-different-confluence-server-to-workplace-search/260532 "2021-01-12T05:15:43Z")

</div>

I have two different confluence(server) with different IP address. After I configured confluence(server) in workplace search, the base URL of source setting is fixed. How can I add a different confluence server to the so…

---

## [Ms teams watcher](https://discuss.elastic.co/t/ms-teams-watcher/260230)

<div class="topic-metadata">

**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\
**Replies:** 1\
**Last updated:** [January 12, 2021, 4:26am UTC](https://discuss.elastic.co/t/ms-teams-watcher/260230 "2021-01-12T04:26:06Z")

</div>

"aggs": { "cluster\_wise": { "terms": { "field": "fields.cluster" }, "aggs": { "namespace\_wise": { "terms": { "field": "kubernetes.namespace" }, "aggs": { "pod\_wise": { "terms": { "field": "kubernetes.pod.nam…

---

## [Migrate from 6.8 to 7.10](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498)

<div class="topic-metadata">

**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\
**Replies:** 6\
**Last updated:** [January 12, 2021, 3:19am UTC](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498 "2021-01-12T03:19:19Z")

</div>

Hi folks... Need to know whats the proper way to migrate & upgrade from our current ELK 6.8 cluster to our new ELK 7.10 cluster. Should I first do rolling upgrade in our current cluster then rsync to 7.10 cluster? Or …

---

## [Can you query for elements between multiple children in a parent-child join?](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775)

<div class="topic-metadata">

**Author:** [@Aidan\_Tan](https://discuss.elastic.co/u/Aidan_Tan)\
**Replies:** 0\
**Last updated:** [January 12, 2021, 2:44am UTC](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775 "2021-01-12T02:44:28Z")

</div>

Is it possible to query among the elements of children and return the parent. So if one child has a gender of male and age of 17 and another has a gender of female and age of 21. Is it possible to return the parents if a…

---

## [How do we find the number unique dates that a field appears?](https://discuss.elastic.co/t/how-do-we-find-the-number-unique-dates-that-a-field-appears/260616)

<div class="topic-metadata">

**Author:** [@kenneth\_wang](https://discuss.elastic.co/u/kenneth_wang)\
**Replies:** 4\
**Last updated:** [January 12, 2021, 2:14am UTC](https://discuss.elastic.co/t/how-do-we-find-the-number-unique-dates-that-a-field-appears/260616 "2021-01-12T02:14:20Z")

</div>

Hello, For each log entry, I have "user identifier" and "date" fields. I would like to find out the number of unique dates that a "user identifier" appears in. Eg. For a given user identifier "1234567", if it appeared …

---

## [Canvasで指定した値をもつフィールドのみをリスト化したい](https://discuss.elastic.co/t/canvas/259541)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [January 12, 2021, 12:31am UTC](https://discuss.elastic.co/t/canvas/259541 "2021-01-12T00:31:53Z")

</div>

お世話になります。 ある1つのドキュメントにおいて、Canvasで指定した値をもつフィールドのみをリスト化したいのですが、今一つアイデアが浮かびません。 何か良い方法があればご教示いただけませんでしょうか。 やりたいこと たとえば下記のデータにおいて、checkX における値が”OK”のフィールドのみを取り出したいです。 POST test\_index/\_bulk {"index":{"\_id":"1"}} {"title":"…

---

## [Stop Logstash with a Filter or Ruby-Code](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000)

<div class="topic-metadata">

**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\
**Replies:** 3\
**Last updated:** [January 11, 2021, 10:59pm UTC](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000 "2021-01-11T22:59:09Z")

</div>

Hi All, I'm using Logstash to prepare/enrich documents before they are send to Elasticsearch. The enrichment is not really optional and will have an impact later, when the data is queried. Therefore, I need to make sure…

---

## [Signed certificates for transport SSL](https://discuss.elastic.co/t/signed-certificates-for-transport-ssl/260772)

<div class="topic-metadata">

**Author:** [@surphix](https://discuss.elastic.co/u/surphix)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 10:31pm UTC](https://discuss.elastic.co/t/signed-certificates-for-transport-ssl/260772 "2021-01-11T22:31:25Z")

</div>

Hey everyone. I'm trying to understand how I go from once my CSR is sign by a CA to using it for remote clustering via transport SSL settings. I've gotten my certificate signed and received a .cer file. I'm a little con…

---

## [Elastic APM Custom Transactions using Python](https://discuss.elastic.co/t/elastic-apm-custom-transactions-using-python/260262)

<div class="topic-metadata">

**Author:** [@jquintero](https://discuss.elastic.co/u/jquintero)\
**Replies:** 3\
**Last updated:** [January 11, 2021, 10:11pm UTC](https://discuss.elastic.co/t/elastic-apm-custom-transactions-using-python/260262 "2021-01-11T22:11:56Z")

</div>

I have not been able to find any documentation for custom transactions in Python. For those of you who were able to find success could you document how this is done in Python?

---

## [Logstash and Ingest Nodes](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350)

<div class="topic-metadata">

**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\
**Replies:** 8\
**Last updated:** [January 11, 2021, 9:43pm UTC](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350 "2021-01-11T21:43:23Z")

</div>

Good Morning, My team and I are trying to improve a cluster that we inherited. I apologize for the following vagueness, but due to the location of the cluster I will give as much detail as possible. We currently are wor…

---

## [Memory usage for a particular directory](https://discuss.elastic.co/t/memory-usage-for-a-particular-directory/260553)

<div class="topic-metadata">

**Author:** [@akhileshtapdiya](https://discuss.elastic.co/u/akhileshtapdiya)\
**Replies:** 3\
**Last updated:** [January 11, 2021, 9:10pm UTC](https://discuss.elastic.co/t/memory-usage-for-a-particular-directory/260553 "2021-01-11T21:10:23Z")

</div>

Hi I am tyring to get memory usage information for a particular directory on my server. Is there any way to get this in kibana? Current system.memory.act.pct give me overall memory at os level and I am interested in me…

---

## [Client write error, trying connect {:e=\>#\<IOError: Connection reset by peer](https://discuss.elastic.co/t/client-write-error-trying-connect-e-ioerror-connection-reset-by-peer/260571)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 3\
**Last updated:** [January 11, 2021, 9:08pm UTC](https://discuss.elastic.co/t/client-write-error-trying-connect-e-ioerror-connection-reset-by-peer/260571 "2021-01-11T21:08:47Z")

</div>

After restarting logstash, after few hours, beats data is not sending to elasticsearch. Beats ---\> Logstash ----\> logstash ---\> Elasticsearch. I have 2 logstash servers in the site, I am getting below error on one logst…

---

## [Query to return only doc with max value of one field, grouped by another field](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764)

<div class="topic-metadata">

**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 8:25pm UTC](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764 "2021-01-11T20:25:10Z")

</div>

So to be specific with what we are trying to accomplish, we are using Elastic Security's detections and have a few rules set up. We then have a logstash pipeline that queries the index our detections go into every minute…

---

## [Unable to start ElasticSearch after install on CENTOS 8](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650)

<div class="topic-metadata">

**Author:** [@Shariq\_Tejar](https://discuss.elastic.co/u/Shariq_Tejar)\
**Replies:** 4\
**Last updated:** [January 11, 2021, 8:23pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650 "2021-01-11T20:23:36Z")

</div>

elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sat 2020-12-26 01:45:20 PKT; 10s ago …

---

## [Millions of closed indices?](https://discuss.elastic.co/t/millions-of-closed-indices/260758)

<div class="topic-metadata">

**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\
**Replies:** 1\
**Last updated:** [January 11, 2021, 8:02pm UTC](https://discuss.elastic.co/t/millions-of-closed-indices/260758 "2021-01-11T20:02:26Z")

</div>

Hello. We're toying with the idea of using Es for some type of "cold storage". Basically archival of our clients' data. The data grows indefinitely over time. The idea is to have an index for each piece of archived data…

---

## [Launch Logstash Pipeline through API](https://discuss.elastic.co/t/launch-logstash-pipeline-through-api/260761)

<div class="topic-metadata">

**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 8:00pm UTC](https://discuss.elastic.co/t/launch-logstash-pipeline-through-api/260761 "2021-01-11T20:00:36Z")

</div>

I would like to find a way to launch a Logstash pipeline through the API. The use case is that an application is going to write directly to Elasticsearch, and when it is done we want Logstash to kick-off and do it's thin…

---

## [Mixed storage within a cluster question](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 7:05pm UTC](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757 "2021-01-11T19:05:55Z")

</div>

I have a cluster of ES nodes on AWS. Let's say 20 nodes using EBS and 3 using i3en (local disks). I am testing with i3en nodes to improve IO. But I am still seeing slow indexing and search logs showing up (up to tens …

---

## [Beats Denial of Service issue (ESA-2020-16)](https://discuss.elastic.co/t/beats-denial-of-service-issue-esa-2020-16/260759)

<div class="topic-metadata">

**Author:** [@Anandh\_Kumar](https://discuss.elastic.co/u/Anandh_Kumar)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 7:35pm UTC](https://discuss.elastic.co/t/beats-denial-of-service-issue-esa-2020-16/260759 "2021-01-11T19:35:53Z")

</div>

Does the denial of service issue apply to filebeat connections made to logstash over ssl? We have filebeat running in one linux machine streaming via SSL TCP to a logstash output setup in another linux machine.

---

## [Logstash connection to Azure mssql](https://discuss.elastic.co/t/logstash-connection-to-azure-mssql/260722)

<div class="topic-metadata">

**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 12:56pm UTC](https://discuss.elastic.co/t/logstash-connection-to-azure-mssql/260722 "2021-01-11T12:56:58Z")

</div>

Hi, I am trying to connect logstash to azure mssql db. But is is showing Error: unable to load /tmp/mssql-jdbc-8.4.1.jre8.jar from :jdbc\_driver\_library, file not readable (please check user and group permissions for t…

---

## [Logstash, jdbc and .logstash\_jdbc\_last\_run](https://discuss.elastic.co/t/logstash-jdbc-and-logstash-jdbc-last-run/260654)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [January 11, 2021, 6:56pm UTC](https://discuss.elastic.co/t/logstash-jdbc-and-logstash-jdbc-last-run/260654 "2021-01-11T18:56:04Z")

</div>

In all my cases I do not want to use .logstash\_jdbc\_last\_run how do I avoid using it. I uses following option but it still try to use .logstash\_jdbc\_last\_run and fails sometime when two or more jdbc trying to use that. …

---

## [Index patterns health status yellow](https://discuss.elastic.co/t/index-patterns-health-status-yellow/260749)

<div class="topic-metadata">

**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\
**Replies:** 1\
**Last updated:** [January 11, 2021, 6:16pm UTC](https://discuss.elastic.co/t/index-patterns-health-status-yellow/260749 "2021-01-11T18:16:06Z")

</div>

Any idea what it means about health status being yellow?

---

## [Vega: Cannot get dynamic data into strokeDash field](https://discuss.elastic.co/t/vega-cannot-get-dynamic-data-into-strokedash-field/260551)

<div class="topic-metadata">

**Author:** [@ege](https://discuss.elastic.co/u/ege)\
**Replies:** 5\
**Last updated:** [January 11, 2021, 5:32pm UTC](https://discuss.elastic.co/t/vega-cannot-get-dynamic-data-into-strokedash-field/260551 "2021-01-11T17:32:43Z")

</div>

I am in the process of creating a sequence diagram using Vega viz. The following code is the approach I'm using. { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "Sequence Diagram", "paddi…

---

## [Master not discovered or elected yet, an election requires two nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755)

<div class="topic-metadata">

**Author:** [@Sean\_Tisdale](https://discuss.elastic.co/u/Sean_Tisdale)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 5:43pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755 "2021-01-11T17:43:02Z")

</div>

I'm am currently trying to set up a cluster with 3 nodes in total. 1 master node and 2 data nodes. I am currently just trying to get the the first two nodes to connect. My master node runs fine when I start it but my dat…

---

## [Kibana with basePath login redirect loop on GCP](https://discuss.elastic.co/t/kibana-with-basepath-login-redirect-loop-on-gcp/260115)

<div class="topic-metadata">

**Author:** [@uncl3mar1k](https://discuss.elastic.co/u/uncl3mar1k)\
**Replies:** 2\
**Last updated:** [January 11, 2021, 5:30pm UTC](https://discuss.elastic.co/t/kibana-with-basepath-login-redirect-loop-on-gcp/260115 "2021-01-11T17:30:41Z")

</div>

On a regular GKE private cluster I Installed ECK (kubectl apply -f https://download.elastic.co/downloads/eck/1.3.1/all-in-one.yaml) Installed Elasticsearch and Kibana: apiVersion: v1 kind: Namespace meta…

---

## [Installing plugin in Kibana 7.8](https://discuss.elastic.co/t/installing-plugin-in-kibana-7-8/260155)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 6\
**Last updated:** [January 11, 2021, 5:08pm UTC](https://discuss.elastic.co/t/installing-plugin-in-kibana-7-8/260155 "2021-01-11T17:08:20Z")

</div>

I've been working on creating a custom plugin in Kibana 7.8. I've got it working but I'm having problems doing a yarn build so I can install the plugin on our dev server. Following the steps lined out here: https://githu…

---

## [Chrome Deceptive content](https://discuss.elastic.co/t/chrome-deceptive-content/260751)

<div class="topic-metadata">

**Author:** [@baronson](https://discuss.elastic.co/u/baronson)\
**Replies:** 0\
**Last updated:** [January 11, 2021, 5:07pm UTC](https://discuss.elastic.co/t/chrome-deceptive-content/260751 "2021-01-11T17:07:15Z")

</div>

APM Agent language and version: elastic-apm-rum 5.6.1 Browser version: Chrome 87.0.4280.88 Our team recently added the Elastic RUM agent to the front end of our web application to gather client-side error logs. Since t…

[Previous page](https://discuss.elastic.co/latest.md?page=1898)

[Next page](https://discuss.elastic.co/latest.md?page=1900)
