# Latest **URL:** https://discuss.elastic.co/latest.md?page=1901 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1902 --- ## [Elastic clound 100% memory on instances, snapshot is stuck in IN\_PROGRESS](https://discuss.elastic.co/t/elastic-clound-100-memory-on-instances-snapshot-is-stuck-in-in-progress/260439)
**Author:** [@birdy1980](https://discuss.elastic.co/u/birdy1980)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 12:00pm UTC](https://discuss.elastic.co/t/elastic-clound-100-memory-on-instances-snapshot-is-stuck-in-in-progress/260439 "2021-01-11T12:00:27Z")
Hello, On one of our cloud deployments we have a bit of a problem. The memory usage grew to 100%. It is a high availability cluster in 2 zones, with a third instance as tiebreaker. We want to upgrade the instance to ha… --- ## [No results displayed because all values equal 0](https://discuss.elastic.co/t/no-results-displayed-because-all-values-equal-0/260679)
**Author:** [@lephuhai270](https://discuss.elastic.co/u/lephuhai270)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 11:23am UTC](https://discuss.elastic.co/t/no-results-displayed-because-all-values-equal-0/260679 "2021-01-11T11:23:27Z")
I have installed Elastiflow 4.0.0 via https://github.com/robcowart/elastiflow but I got messages "No results displayed because all values equal 0" in all tabs of Elastiflow as attached file. So how could I fix this issue… --- ## [Suricata module with remote syslog input](https://discuss.elastic.co/t/suricata-module-with-remote-syslog-input/260707)
**Author:** [@kostiik](https://discuss.elastic.co/u/kostiik)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 11:16am UTC](https://discuss.elastic.co/t/suricata-module-with-remote-syslog-input/260707 "2021-01-11T11:16:58Z")
Hello, I am unable to configure suricata.yml in filebeat/modules.d to receive suricata logs remotely from syslog instead a local log file. This post: https://discuss.elastic.co/t/using-the-filebeat-suricata-module-for-… --- ## [No space left on device with large sql imports despite plenty available](https://discuss.elastic.co/t/no-space-left-on-device-with-large-sql-imports-despite-plenty-available/260706)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 10:46am UTC](https://discuss.elastic.co/t/no-space-left-on-device-with-large-sql-imports-despite-plenty-available/260706 "2021-01-11T10:46:43Z")
Hi, I created a brand new instance with a 50Gb SSD disk. 2 vCPU and 12Gb RAM. I'm using logstash to index one large table from a mysql db on another instance. df -h returns 32Gb disk available: root@el1:~# df -h Fil… --- ## [Disable x-pack on Auditbeat and Metricbeat clients 7.9 (AWS Elasticsearch service) using OSS version](https://discuss.elastic.co/t/disable-x-pack-on-auditbeat-and-metricbeat-clients-7-9-aws-elasticsearch-service-using-oss-version/258924)
**Author:** [@francisca.munhoz](https://discuss.elastic.co/u/francisca.munhoz)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 11:11am UTC](https://discuss.elastic.co/t/disable-x-pack-on-auditbeat-and-metricbeat-clients-7-9-aws-elasticsearch-service-using-oss-version/258924 "2021-01-11T11:11:10Z")
Hi all, I'm using AWS Elasticsearch service (7.9) and I have installed metricbeat and auditbeat clients (oss) 7.9.1 on a linux node: Beats client source: However somehow x-pack check is enabled, so I'm getting … --- ## [Elasticsearch returns different values from DSL and SQL query](https://discuss.elastic.co/t/elasticsearch-returns-different-values-from-dsl-and-sql-query/259984)
**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\ **Replies:** 9\ **Last updated:** [January 11, 2021, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-returns-different-values-from-dsl-and-sql-query/259984 "2021-01-11T10:53:18Z")
I am trying to query index using dsl and sql method, while comparing the results i found that the values are different.Below are the query and required details. DSL query and result SQL query and result Result f… --- ## [Output only s3 file create events to elastic search and not the contents of the files](https://discuss.elastic.co/t/output-only-s3-file-create-events-to-elastic-search-and-not-the-contents-of-the-files/260697)
**Author:** [@suhas\_1993](https://discuss.elastic.co/u/suhas_1993)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 10:48am UTC](https://discuss.elastic.co/t/output-only-s3-file-create-events-to-elastic-search-and-not-the-contents-of-the-files/260697 "2021-01-11T10:48:02Z")
Hello team, Is there a config that enables Logstash s3 input plugin to output only s3 filenames under the bucket where Logstash config is polling on? The current below config is outputting file contents with message fi… --- ## [Heartbeat in dotnet core 3.1 services](https://discuss.elastic.co/t/heartbeat-in-dotnet-core-3-1-services/260274)
**Author:** [@Bilal\_Malik](https://discuss.elastic.co/u/Bilal_Malik)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 10:43am UTC](https://discuss.elastic.co/t/heartbeat-in-dotnet-core-3-1-services/260274 "2021-01-11T10:43:12Z")
i have configured logging in Elasticsearch, it is working perfectly. Now I am looking for statuses of my microservices that are running or which one is down. How can i figure out using Elasticsearch? Every microservices … --- ## [Elasticearch cannot start](https://discuss.elastic.co/t/elasticearch-cannot-start/260701)
**Author:** [@Leonadius](https://discuss.elastic.co/u/Leonadius)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticearch-cannot-start/260701 "2021-01-11T10:39:27Z")
Hi, I have a problem where i cannot start the elasticsearch. This is what i get from the logs. \[2021-01-11T15:59:36,658\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[vm-elastic-mlearning\] fatal error in thread … --- ## [Endpoint Agent two host showing in logs-\* per host](https://discuss.elastic.co/t/endpoint-agent-two-host-showing-in-logs-per-host/260700)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 10:36am UTC](https://discuss.elastic.co/t/endpoint-agent-two-host-showing-in-logs-per-host/260700 "2021-01-11T10:36:01Z")
Hi, I have recently been rolling out the Endpoint agent to some host for testing. Within the fleet agents tab, there is a single entry for each host in the format "hostname". However within the logs-\* index there are … --- ## [Regex vs range filter](https://discuss.elastic.co/t/regex-vs-range-filter/260658)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 10:21am UTC](https://discuss.elastic.co/t/regex-vs-range-filter/260658 "2021-01-11T10:21:01Z")
Which filter is performance effective on a number field regex or range filter ? Also on a text field ... Using regex filter is performance effective ? --- ## [How to hide error message for graphs](https://discuss.elastic.co/t/how-to-hide-error-message-for-graphs/259554)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 10:08am UTC](https://discuss.elastic.co/t/how-to-hide-error-message-for-graphs/259554 "2021-01-11T10:08:14Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A simple bar chart with embedded data.", "data": { "values": \[ {"a": "A", "b": 28}, {"a": "B", "b": 55}, {"a": "C", "b": 43}… --- ## [Elasticsearch string query char to char](https://discuss.elastic.co/t/elasticsearch-string-query-char-to-char/258818)
**Author:** [@adrian-arapiles](https://discuss.elastic.co/u/adrian-arapiles)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-string-query-char-to-char/258818 "2021-01-11T09:29:39Z")
Hi, I need an index with phash indexed (64 length) and I have to query comparing char to char, for example: "d1b269d06ec8158d62333679ab6693e6bccd43761692e6c26527dcddd84c8196" "81b069d20e4154ed7b8371b3aa4596619c6d1ee45… --- ## [Logstash keystore Error](https://discuss.elastic.co/t/logstash-keystore-error/260689)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 9:26am UTC](https://discuss.elastic.co/t/logstash-keystore-error/260689 "2021-01-11T09:26:26Z")
Hello everyone, Can someone help me to solve this error please? adminsys@logstash:/etc/logstash # /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t Thread.exclusive is deprecated, use Thread::Mutex Send… --- ## [Elasticsearch data transfer and queries are very slow](https://discuss.elastic.co/t/elasticsearch-data-transfer-and-queries-are-very-slow/260420)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-data-transfer-and-queries-are-very-slow/260420 "2021-01-11T09:19:56Z")
Elasticsearch, queries and data transfer are very slow and I am getting timeout errors. I found this information in the log files of the data nodes. Elasticsearch and Kibana version 7.4.2 I have 13 nodes (3 master ,10 … --- ## [APM server : No module found in Kibana](https://discuss.elastic.co/t/apm-server-no-module-found-in-kibana/260465)
**Author:** [@azerty](https://discuss.elastic.co/u/azerty)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 9:00am UTC](https://discuss.elastic.co/t/apm-server-no-module-found-in-kibana/260465 "2021-01-11T09:00:34Z")
Hello, I have an issue with apm-server and Kibana. I initialized the stack with two agents (java and nodeJs) and I have indexed data from APM in my Elasticsearch database (apm-7.9.2-transaction, apm-7.9.2-span, apm-7.9.… --- ## [SQL data to Elasticsearch using logstash via Mysql connector JDBC plugin](https://discuss.elastic.co/t/sql-data-to-elasticsearch-using-logstash-via-mysql-connector-jdbc-plugin/260686)
**Author:** [@panfan](https://discuss.elastic.co/u/panfan)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 8:46am UTC](https://discuss.elastic.co/t/sql-data-to-elasticsearch-using-logstash-via-mysql-connector-jdbc-plugin/260686 "2021-01-11T08:46:19Z")
Hello, I am having trouble giving input to the elasticearch from data of MySQL via logstash. The following is my simple config file: input { jdbc { clean\_run =\> true jdbc\_driver\_library =\> "mysql-connector-java-5.1… --- ## [Filebeat not collection logs of elastic pods](https://discuss.elastic.co/t/filebeat-not-collection-logs-of-elastic-pods/259719)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 9\ **Last updated:** [January 11, 2021, 7:47am UTC](https://discuss.elastic.co/t/filebeat-not-collection-logs-of-elastic-pods/259719 "2021-01-11T07:47:12Z")
I am not sure since when this is happening, but my filebeat has stopped collecting the logs of elastic pods that I have deployed using eck. In total I do have these 3 pods: elastic-es-masterdata-100-0 elastic-es-master… --- ## [Unassigned shards: NODE\_LEFT (Cloud)](https://discuss.elastic.co/t/unassigned-shards-node-left-cloud/260444)
**Author:** [@bogdan\_copocean](https://discuss.elastic.co/u/bogdan_copocean)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 7:47am UTC](https://discuss.elastic.co/t/unassigned-shards-node-left-cloud/260444 "2021-01-11T07:47:10Z")
Hello guys, I encountered a few problems with my Elasticsearch cluster (on cloud) and exactly, i have around 25 unassigned shards with the reason NODE\_LEFT and one with REPLICA\_ADDED (after I tried to add a replica). I… --- ## [Troubles with heap, gc. Node fault](https://discuss.elastic.co/t/troubles-with-heap-gc-node-fault/259616)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 16\ **Last updated:** [January 11, 2021, 7:30am UTC](https://discuss.elastic.co/t/troubles-with-heap-gc-node-fault/259616 "2021-01-11T07:30:00Z")
Hello again, my new topic about our problem. We have ES cluster with 3 nodes. Each 128 Gb RAM, 31 GB Heap, there our jvm.options: -Xms31g -Xmx31g ## GC configuration #-XX:+UseConcMarkSweepGC #-XX:CMSInitiatingOccupanc… --- ## [How does document size affect ElasticSearch performance?](https://discuss.elastic.co/t/how-does-document-size-affect-elasticsearch-performance/260648)
**Author:** [@sanchita.jha](https://discuss.elastic.co/u/sanchita.jha)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 7:26am UTC](https://discuss.elastic.co/t/how-does-document-size-affect-elasticsearch-performance/260648 "2021-01-11T07:26:24Z")
Planning to increase document size in elastic, from 4KB to ~100KB each. What is the performance impact with document size increase? The new fields will have to be additonality used to calculate/modify final scores of do… --- ## [java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space/259773)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 8:18am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space/259773 "2021-01-09T08:18:36Z")
Hello everyone I've got this error. java.lang.OutOfMemoryError: Java heap space When I run my pipeline. I set jvm option the below. But still getting this jvm error. -Xms8M -Xmx8M How can i solve ? Can someone expl… --- ## [About the 7.x version of the search.max\_buckets parameter](https://discuss.elastic.co/t/about-the-7-x-version-of-the-search-max-buckets-parameter/260512)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 7:04am UTC](https://discuss.elastic.co/t/about-the-7-x-version-of-the-search-max-buckets-parameter/260512 "2021-01-11T07:04:58Z")
I would like to ask if the check\_buckets\_step\_size parameter is added in 7.7.0. Has the max\_bucketsparameter been repealed in subsequent releases (including the latest 7.10.0)? If not repealed, are there any defaults? --- ## [Field.keyword empty in Discover](https://discuss.elastic.co/t/field-keyword-empty-in-discover/260534)
**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 6:52am UTC](https://discuss.elastic.co/t/field-keyword-empty-in-discover/260534 "2021-01-11T06:52:56Z")
Hello All, In Discover, i see all my value do i need. sysvalval 2 When i add a filter like sysvalval.keyword the list of value is empty. I use Kibana version v7.10 Many thanks in advance --- ## [Logstash doesnt start after upgrade to 6.8.13 (from 6.2.3)](https://discuss.elastic.co/t/logstash-doesnt-start-after-upgrade-to-6-8-13-from-6-2-3/260599)
**Author:** [@cfu](https://discuss.elastic.co/u/cfu)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 6:39am UTC](https://discuss.elastic.co/t/logstash-doesnt-start-after-upgrade-to-6-8-13-from-6-2-3/260599 "2021-01-11T06:39:26Z")
After upgrading logstash 6.3.2 to 6.8.13 it doesn´t start. Looking into the log file shows: \[2021-01-09T11:24:12,770\]\[DEBUG\]\[logstash.modules.scaffold\] Found module {:module\_name=\>"fb\_apache", :directory=\>"/products/el… --- ## [Elasticsearch index error](https://discuss.elastic.co/t/elasticsearch-index-error/260634)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-index-error/260634 "2021-01-11T06:06:30Z")
elasticsearch.yml network.host: localhost http.port: 9200 transport.host: localhost transport.tcp.port: 9300 discovery.seed\_hosts: localhost:9300 cluster.initial\_master\_nodes: ${HOSTNAME} action.auto\_create\_inde… --- ## [Logs are no longer sent to elasticsearch](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 4:46am UTC](https://discuss.elastic.co/t/logs-are-no-longer-sent-to-elasticsearch/260378 "2021-01-11T04:46:20Z")
I receive the logs in logstash, but the logs are no longer sent to elasticsearch. Can you help me? Below are the logs in logstash: \[root@scs90104vu logstash\]# tail -f /var/log/logstash/logstash-plain.log \[2021-01-06T… --- ## [Ingest pipe line csv parser with multiline message failing](https://discuss.elastic.co/t/ingest-pipe-line-csv-parser-with-multiline-message-failing/260666)
**Author:** [@Bo\_Koralage](https://discuss.elastic.co/u/Bo_Koralage)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 4:18am UTC](https://discuss.elastic.co/t/ingest-pipe-line-csv-parser-with-multiline-message-failing/260666 "2021-01-11T04:18:00Z")
I am using a csv processor and \\t as the separator ingest pipeline to push logs from filebeat. This works great but fails when the message (logmessage) portion has a new line character. I added the following to the fileb… --- ## [Error when importing data from maraidb](https://discuss.elastic.co/t/error-when-importing-data-from-maraidb/260665)
**Author:** [@Tails](https://discuss.elastic.co/u/Tails)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 4:07am UTC](https://discuss.elastic.co/t/error-when-importing-data-from-maraidb/260665 "2021-01-11T04:07:08Z")
I installed the ik plugin to elasticsearch and I have the following errors when importing from mariadb. \[2021-01-11T11:49:38,392\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[6611aaa54ebe00de3255376c35e28d779a2b6f627197… --- ## [Vsphere metric in windows trying to connect on localhost address](https://discuss.elastic.co/t/vsphere-metric-in-windows-trying-to-connect-on-localhost-address/260277)
**Author:** [@rohan0018](https://discuss.elastic.co/u/rohan0018)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 3:34am UTC](https://discuss.elastic.co/t/vsphere-metric-in-windows-trying-to-connect-on-localhost-address/260277 "2021-01-11T03:34:49Z")
Hi!!! I have installed and enabled vsphere metricbeat module on my vcenter server. I have configured vsphere.yml as below. '''''metricbeat.modules: module: vsphere enabled: true metricsets: \["datastore", "host", … [Previous page](https://discuss.elastic.co/latest.md?page=1900) [Next page](https://discuss.elastic.co/latest.md?page=1902)