# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1906

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1907

---

## [Logstash: Resource consumption of multiple Logstash servers are not even](https://discuss.elastic.co/t/logstash-resource-consumption-of-multiple-logstash-servers-are-not-even/260406)

<div class="topic-metadata">

**Author:** [@Hung\_Phan\_Huy](https://discuss.elastic.co/u/Hung_Phan_Huy)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 6:55am UTC](https://discuss.elastic.co/t/logstash-resource-consumption-of-multiple-logstash-servers-are-not-even/260406 "2021-01-07T06:55:19Z")

</div>

Hi, I'm running my Logstash services on Docker Swarm with 4 replicas. They subscribe to the same Kafka topic and output the data to Elasticsearch. When I inspect the resource consumption of those 4 containers, I found …

---

## [Accessing API Without User Credentials](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 6\
**Last updated:** [January 7, 2021, 6:30am UTC](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528 "2021-01-07T06:30:56Z")

</div>

I am trying to build a service monitor and am at the point where I would be making a call to change an index setting in Elasticsearch. Elasticsearch 7.10.0 running and secured with HTTPS. I have the following running: …

---

## [How to send logs to logstash via filebeat](https://discuss.elastic.co/t/how-to-send-logs-to-logstash-via-filebeat/260289)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 5:26am UTC](https://discuss.elastic.co/t/how-to-send-logs-to-logstash-via-filebeat/260289 "2021-01-07T05:26:17Z")

</div>

I am using the below code for deploying file beat in GCP: I can see 3 or 4 restarts . After then , it was getting stable. Can anyone know why it is getting 3 or 4 restarts and also by default it is sending logs to …

---

## [How to know the ES configuration details for benchmark testing?](https://discuss.elastic.co/t/how-to-know-the-es-configuration-details-for-benchmark-testing/260094)

<div class="topic-metadata">

**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 5:25am UTC](https://discuss.elastic.co/t/how-to-know-the-es-configuration-details-for-benchmark-testing/260094 "2021-01-07T05:25:22Z")

</div>

Hello, I'm really interested in the benchmark data here: https://elasticsearch-benchmarks.elastic.co/# Just curious where could I find more details about the ES configuration and index configuration? Or is there all use…

---

## [Disable automatic index creation in elasticsearch](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 4:42am UTC](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276 "2021-01-07T04:42:09Z")

</div>

Hi, I have a setup of ELK 7.10v . I want to know is there a way to configure elasticsearch not to automatically create indexes. I tried adding this to my "elasticsearch.yml" action.auto\_create\_index: 0 also tried …

---

## [Kibana granted document for where condition](https://discuss.elastic.co/t/kibana-granted-document-for-where-condition/260282)

<div class="topic-metadata">

**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 4:33am UTC](https://discuss.elastic.co/t/kibana-granted-document-for-where-condition/260282 "2021-01-07T04:33:35Z")

</div>

I have requirment for the granted document query level in kibana roles tab. For Example: User1 should be restricted to customer id: 1 and installation id: 1 and Stage id: {1,2,3} n granted document query. Applied with…

---

## [Can't opne kibana 7.10.1 on firfox](https://discuss.elastic.co/t/cant-opne-kibana-7-10-1-on-firfox/260399)

<div class="topic-metadata">

**Author:** [@YunZhe](https://discuss.elastic.co/u/YunZhe)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 4:03am UTC](https://discuss.elastic.co/t/cant-opne-kibana-7-10-1-on-firfox/260399 "2021-01-07T04:03:15Z")

</div>

I installed elasticsearch with version 7.10.1 and kibana 7.10.1 on my local ubuntu machine. { "name" : "validation-es", "cluster\_name" : "validation-es-cluster", "cluster\_uuid" : "QhjLeuvZQVGA9Str2lc8Wg", "version" …

---

## [Kibana Alert Webhook behind proxy](https://discuss.elastic.co/t/kibana-alert-webhook-behind-proxy/260324)

<div class="topic-metadata">

**Author:** [@aoi1](https://discuss.elastic.co/u/aoi1)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 3:55am UTC](https://discuss.elastic.co/t/kibana-alert-webhook-behind-proxy/260324 "2021-01-07T03:55:15Z")

</div>

Hi! I would like to use the Kibana Alert Webhook behind proxy (such as using slack). Is there a way to set proxy using WebUI or yaml? Thanks.

---

## [Where is the password stored?](https://discuss.elastic.co/t/where-is-the-password-stored/260402)

<div class="topic-metadata">

**Author:** [@suntopo](https://discuss.elastic.co/u/suntopo)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 3:49am UTC](https://discuss.elastic.co/t/where-is-the-password-stored/260402 "2021-01-07T03:49:17Z")

</div>

as a root user, i could get all elasticsearch data files, but origin elasticsearch had password auth settings. Could i process the data file, remove the password relatived files and get the elasticsearch data without aut…

---

## [Combining ILM and snapshoot](https://discuss.elastic.co/t/combining-ilm-and-snapshoot/260398)

<div class="topic-metadata">

**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 3:24am UTC](https://discuss.elastic.co/t/combining-ilm-and-snapshoot/260398 "2021-01-07T03:24:43Z")

</div>

Hi, is it possible to combine ILM and automatic snapshoot? for example, I have an ILM which store the index for 14 days in hot node, then the index goes to warm node for day 15 until day 90. after day 90, can I set up …

---

## [Index name does not match pattern](https://discuss.elastic.co/t/index-name-does-not-match-pattern/260351)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 3\
**Last updated:** [January 7, 2021, 3:19am UTC](https://discuss.elastic.co/t/index-name-does-not-match-pattern/260351 "2021-01-07T03:19:54Z")

</div>

we have an index named drivers-history, by default this index doesn't have an alias so i created one as drivers\_history using update index alias api. later i created an ILM policy and attached it to this index but i am g…

---

## [How to compare the response of elasticsearch query with a list and show final data](https://discuss.elastic.co/t/how-to-compare-the-response-of-elasticsearch-query-with-a-list-and-show-final-data/260353)

<div class="topic-metadata">

**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\
**Replies:** 3\
**Last updated:** [January 7, 2021, 2:46am UTC](https://discuss.elastic.co/t/how-to-compare-the-response-of-elasticsearch-query-with-a-list-and-show-final-data/260353 "2021-01-07T02:46:07Z")

</div>

I some Json data in elasticsearch. This json data has customer and device in it. I have 2 customer which have multiple devices. I have below query which gives the data for the devices and their customer name: { "aggs"…

---

## [Elasticsearch copy\_to field type](https://discuss.elastic.co/t/elasticsearch-copy-to-field-type/260333)

<div class="topic-metadata">

**Author:** [@Ryze](https://discuss.elastic.co/u/Ryze)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 2:29am UTC](https://discuss.elastic.co/t/elasticsearch-copy-to-field-type/260333 "2021-01-07T02:29:17Z")

</div>

I wonder that if the type of destination field of copy\_to must be text type. I have not find the description in the official document. https://www.elastic.co/guide/en/elasticsearch/reference/current/copy-to.html In othe…

---

## [使用logstash7.4.2通过http方式接收数据发到es出现中文乱码](https://discuss.elastic.co/t/logstash7-4-2-http-es/260395)

<div class="topic-metadata">

**Author:** [@111351](https://discuss.elastic.co/u/111351)\
**Replies:** 0\
**Last updated:** [January 7, 2021, 1:34am UTC](https://discuss.elastic.co/t/logstash7-4-2-http-es/260395 "2021-01-07T01:34:35Z")

</div>

您好，我使用得配置文件如下，测试中通过浏览器地址栏直接发送请求会出现中文乱码，但是通过postman发送却可以正常显示。 input{ http{ } } output{ stdout{} }

---

## [Logstash open http server received message grabled code](https://discuss.elastic.co/t/logstash-open-http-server-received-message-grabled-code/260297)

<div class="topic-metadata">

**Author:** [@111351](https://discuss.elastic.co/u/111351)\
**Replies:** 3\
**Last updated:** [January 7, 2021, 1:15am UTC](https://discuss.elastic.co/t/logstash-open-http-server-received-message-grabled-code/260297 "2021-01-07T01:15:10Z")

</div>

I use logstash 7.4.2 start pipeline input{ http{ } } output{ stdout{} } by browser send http request have grabled code but by postman send message can normal display. thanks you give me help.

---

## [HSTS configuration for ElasticSearch](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304)

<div class="topic-metadata">

**Author:** [@Ravi\_GH](https://discuss.elastic.co/u/Ravi_GH)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 12:13am UTC](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304 "2021-01-07T00:13:20Z")

</div>

We have HSTS vulnerability for Elasticsearch server (v7.5.2 & v6.8.6) as mentioned @ https://www.tenable.com/plugins/nessus/142960 How to enable HSTS for the elasticsearch server.

---

## [Solving aggregating/sorting on numerical fields](https://discuss.elastic.co/t/solving-aggregating-sorting-on-numerical-fields/259099)

<div class="topic-metadata">

**Author:** [@remydela](https://discuss.elastic.co/u/remydela)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 11:29pm UTC](https://discuss.elastic.co/t/solving-aggregating-sorting-on-numerical-fields/259099 "2021-01-06T23:29:24Z")

</div>

Hi there, It's my first post here and I'm still a beginner regarding ES, so please feel free to help with guidelines I might have forgotten when posting this :slight\_smile: I took over a rather old project (late 2017) …

---

## [Test coverage for Java API](https://discuss.elastic.co/t/test-coverage-for-java-api/260392)

<div class="topic-metadata">

**Author:** [@chenqi0805](https://discuss.elastic.co/u/chenqi0805)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 11:13pm UTC](https://discuss.elastic.co/t/test-coverage-for-java-api/260392 "2021-01-06T23:13:28Z")

</div>

I noticed that test coverage analysis by jacoco is no longer supported for ES test framework through Is there any plan to restore coverage analysis tool applicability as it will be helpful for plugin development? …

---

## [How can I get filtered unique values?](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 10:12pm UTC](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024 "2021-01-06T22:12:11Z")

</div>

Hi I've been trying to get unique values of node whose utilization is greater than 1, but I cant get it working, below is one of the ways I have tried without success. GET metrics\*/\_search { "size": "0", "aggs": { …

---

## [ML job error : Failed to launch autodetect for job](https://discuss.elastic.co/t/ml-job-error-failed-to-launch-autodetect-for-job/260243)

<div class="topic-metadata">

**Author:** [@kimi89](https://discuss.elastic.co/u/kimi89)\
**Replies:** 6\
**Last updated:** [January 6, 2021, 9:30pm UTC](https://discuss.elastic.co/t/ml-job-error-failed-to-launch-autodetect-for-job/260243 "2021-01-06T21:30:00Z")

</div>

Unexpected job state \[failed\] while waiting for job to be opened Error Log: " Failed to launch autodetect for job jobname"

---

## [What is missing to include field values in search?](https://discuss.elastic.co/t/what-is-missing-to-include-field-values-in-search/260300)

<div class="topic-metadata">

**Author:** [@ksuess](https://discuss.elastic.co/u/ksuess)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:58pm UTC](https://discuss.elastic.co/t/what-is-missing-to-include-field-values-in-search/260300 "2021-01-06T20:58:45Z")

</div>

Kibana screenshot I get the test manual when I search for "Nullam", but do not get any result when I search for "Zeilen" which is in manualfile\_\_extracted.content. Why is this?

---

## [Data node and master node spec](https://discuss.elastic.co/t/data-node-and-master-node-spec/260318)

<div class="topic-metadata">

**Author:** [@mohammad\_hanifah\_nur](https://discuss.elastic.co/u/mohammad_hanifah_nur)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:39pm UTC](https://discuss.elastic.co/t/data-node-and-master-node-spec/260318 "2021-01-06T20:39:32Z")

</div>

i have 2 node server with different spec . is it possible to make them as data node and master node ? can i make data node is higher spec than master node ?

---

## [CORS headers missing 'Access-Control-Allow-Origin'](https://discuss.elastic.co/t/cors-headers-missing-access-control-allow-origin/260320)

<div class="topic-metadata">

**Author:** [@elastic\_study](https://discuss.elastic.co/u/elastic_study)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:37pm UTC](https://discuss.elastic.co/t/cors-headers-missing-access-control-allow-origin/260320 "2021-01-06T20:37:34Z")

</div>

how can i CORS Kibana？ cors headers miss 'Access-Control-Allow-Origin'

---

## [Reindexing in elasticsearch](https://discuss.elastic.co/t/reindexing-in-elasticsearch/260323)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:36pm UTC](https://discuss.elastic.co/t/reindexing-in-elasticsearch/260323 "2021-01-06T20:36:37Z")

</div>

Hi, I have a setup of ELK7.10v. I want to reindex my data with multiple indices on monthly basis. example: My existing index should create new\_index with monthly basis. I have index1 which contains 1 year of records,…

---

## [Error importing Kibana dashboards](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382)

<div class="topic-metadata">

**Author:** [@KelvUK](https://discuss.elastic.co/u/KelvUK)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 8:34pm UTC](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382 "2021-01-06T20:34:27Z")

</div>

Hi, I'm new to Elastic & Kibana so this I expect is very much bad config but I can't figure out what I've gotten wrong with this. Everything is in docker, I've a single-node deployment with transport security configured…

---

## [Issue with creating new Beat](https://discuss.elastic.co/t/issue-with-creating-new-beat/260339)

<div class="topic-metadata">

**Author:** [@yuv](https://discuss.elastic.co/u/yuv)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 12:30pm UTC](https://discuss.elastic.co/t/issue-with-creating-new-beat/260339 "2021-01-06T12:30:25Z")

</div>

Hi, i've followed the following documentation https://www.elastic.co/guide/en/beats/devguide/7.11/new-beat.html for creating new beat. While i'm trying to build it i got the below issues. What i'm i doing wrong ? how …

---

## [How HighLevelRestClient use complex-DSL?](https://discuss.elastic.co/t/how-highlevelrestclient-use-complex-dsl/260366)

<div class="topic-metadata">

**Author:** [@DaiDaDao](https://discuss.elastic.co/u/DaiDaDao)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 4:08pm UTC](https://discuss.elastic.co/t/how-highlevelrestclient-use-complex-dsl/260366 "2021-01-06T16:08:02Z")

</div>

When I am trying to use DSL in HighLevelRestClient, I found there is no way to build a SearhSourceBuilder. Then I tried DyWrapperQueryBuilder wqb = new DyWrapperQueryBuilder(dsl); I found that only simple DSL like {"…

---

## [Solarwinds alternative](https://discuss.elastic.co/t/solarwinds-alternative/260280)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 8:25pm UTC](https://discuss.elastic.co/t/solarwinds-alternative/260280 "2021-01-06T20:25:25Z")

</div>

Hi, We are looking to replace our current Solar Winds monitoring system using ELK stack. In this regard i' am looking out for any reference articles on architecture All out network infrastructure , Virtual machines are…

---

## [Snapshot to minio S3 error](https://discuss.elastic.co/t/snapshot-to-minio-s3-error/260365)

<div class="topic-metadata">

**Author:** [@gregorys](https://discuss.elastic.co/u/gregorys)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 8:04pm UTC](https://discuss.elastic.co/t/snapshot-to-minio-s3-error/260365 "2021-01-06T20:04:37Z")

</div>

Hi, Elasticsearch 7.10. I'm trying to add an S3 snapshot repository, the endpoint is Minio. The repository-s3 plugin is installed on all nodes, and restarted. I've set the keys in the keystore: elasticsearch-keystor…

---

## [Getting total sum of all buckets in Kibana](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380)

<div class="topic-metadata">

**Author:** [@schwalbe](https://discuss.elastic.co/u/schwalbe)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 8:03pm UTC](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380 "2021-01-06T20:03:55Z")

</div>

Hi there, I am very new and unexperienced in ELK. What I am searching for is a way to get the total sum of values (rows) in a table. With the result of this I want to calculate e.g. the ratio of the total average and a s…

[Previous page](https://discuss.elastic.co/latest.md?page=1905)

[Next page](https://discuss.elastic.co/latest.md?page=1907)
