# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1917

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1918

---

## [Toggle](https://discuss.elastic.co/t/toggle/258497)

<div class="topic-metadata">

**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 3:27pm UTC](https://discuss.elastic.co/t/toggle/258497 "2020-12-29T15:27:53Z")

</div>

Is there a way to put a toggle button on the kibana canvas? Is there any alternative solution?

---

## [Hello, Help for Error : An unexpected error occurred! {:error=\>#\<LogStash::Error: Don't know how to handle](https://discuss.elastic.co/t/hello-help-for-error-an-unexpected-error-occurred-error-logstash-dont-know-how-to-handle/259787)

<div class="topic-metadata">

**Author:** [@Muhammad\_Firdaus](https://discuss.elastic.co/u/Muhammad_Firdaus)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 3:11pm UTC](https://discuss.elastic.co/t/hello-help-for-error-an-unexpected-error-occurred-error-logstash-dont-know-how-to-handle/259787 "2020-12-29T15:11:51Z")

</div>

Get Error when starting up Logstash \[2020-12-29T16:08:40,925\]\[ERROR\]\[logstash.agent \] An exception happened when converging configuration {:exception=\>LogStash::Error, :message=\>"Don't know how to handle Java:…

---

## [Can we point to elasticsearch Masternodes as input to Logstash?](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806)

<div class="topic-metadata">

**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 3:08pm UTC](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806 "2020-12-29T15:08:38Z")

</div>

Can we point to elasticsearch Masternodes as input to Logstash? We see delay(2-3days) in data extraction from elsaticsearch while using Co-ordinating nodes as input in logstash to send data to Qradar.

---

## [Dynamic urls for Logstash http\_poller plugin](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785)

<div class="topic-metadata">

**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\
**Replies:** 7\
**Last updated:** [December 29, 2020, 2:57pm UTC](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785 "2020-12-29T14:57:05Z")

</div>

Hi, I have an implementation of some script that calls an api to start some job, I can follow up the job status another api (jobs-api). I want to use Logstash and Elasticsearch to monitor the status of the jobs I start, …

---

## [Canvas data show is different](https://discuss.elastic.co/t/canvas-data-show-is-different/259627)

<div class="topic-metadata">

**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 2:12pm UTC](https://discuss.elastic.co/t/canvas-data-show-is-different/259627 "2020-12-29T14:12:19Z")

</div>

Hi All, I want to show data STAMP/day And this is my ES Query SELECT count(labels.status::varchar) as Stamp FROM "apm-\*" WHERE labels.status = 'STAMP' AND labels.tanggal = 'DATE(NOW())' But why the result is 0, even …

---

## [Metricbeat AWS module](https://discuss.elastic.co/t/metricbeat-aws-module/259696)

<div class="topic-metadata">

**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 12:42pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module/259696 "2020-12-29T12:42:23Z")

</div>

Kibana version : 7.10.0 Elasticsearch version : 7.10.0 Metricbeat version : 7.10.1 Good day, I'm trying to collect monitoring metrics from AWS with metricbeat. In particular, I am interested in the metrics of the 5 E…

---

## [Elasticsearch and Magento 2.4.1 "No mapping found for position category"](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891)

<div class="topic-metadata">

**Author:** [@dani1](https://discuss.elastic.co/u/dani1)\
**Replies:** 5\
**Last updated:** [December 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891 "2020-12-29T11:59:01Z")

</div>

Hello there, I'm facing this issue with Elasticsearch 7.6.2 with Magento 2.4. Anyone have an idea? \[2020-10-31 07:34:29\] main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found…

---

## [Index documents with autogenerated ID and custom routing](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287)

<div class="topic-metadata">

**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 11:14am UTC](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287 "2020-12-29T11:14:29Z")

</div>

I want to index documents with an autogenerated ID and a Routing. The ID field is autogenerated, so I want to link a parent to a child by ExternalId. I use NEST client for .NET and have such a piece of code: await \_e…

---

## [Elasticsearch cluster fails to start](https://discuss.elastic.co/t/elasticsearch-cluster-fails-to-start/259270)

<div class="topic-metadata">

**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\
**Replies:** 5\
**Last updated:** [December 29, 2020, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-fails-to-start/259270 "2020-12-29T10:25:53Z")

</div>

Hi, We use the eck operators to create the Elasticsearch and we create the cluster dynamically when there is a request to create the same. we are using 7.5.0 version and trying to upgrade to 7.9.2 version. So when we t…

---

## [Elasticsearch Wildcard fieldtype has slow performance for wildcard queries](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662)

<div class="topic-metadata">

**Author:** [@Chris\_Doman](https://discuss.elastic.co/u/Chris_Doman)\
**Replies:** 4\
**Last updated:** [December 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662 "2020-12-29T09:31:42Z")

</div>

I'm testing the new ElasticSearch WildCard field type (https://www.elastic.co/blog/find-strings-within-strings-faster-with-the-new-elasticsearch-wildcard-field) that is supposed to offer better wildcard queries. Strange…

---

## [How does Winlogbeat parsing happen?](https://discuss.elastic.co/t/how-does-winlogbeat-parsing-happen/259727)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 9:25am UTC](https://discuss.elastic.co/t/how-does-winlogbeat-parsing-happen/259727 "2020-12-29T09:25:01Z")

</div>

Hello there ! Probably dumb question, but : I'm asking how Winlogbeat parsing happen as I didn't use any logstash processing (grok,kv...) and didn't explicitely specify any pipeline to use How does it works ? My setu…

---

## [Search\_after throws an exception using sort on nested filtered field containing date typed data](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783)

<div class="topic-metadata">

**Author:** [@kaore](https://discuss.elastic.co/u/kaore)\
**Replies:** 0\
**Last updated:** [December 29, 2020, 8:50am UTC](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783 "2020-12-29T08:50:38Z")

</div>

Given a mapping describing an event which contains the following nested field: ... "timings": { "type": "nested", "properties": { "begin": { "type": "date" }, "end": { "type": "date" } …

---

## [Error in visualisation; \[esaggs\] \> when trying to load a dashboard](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081)

<div class="topic-metadata">

**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 8:45am UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081 "2020-12-29T08:45:35Z")

</div>

Hello, We are using 4 dashboards in Kibana, of which 3 are working just fine. The 4th one however always crashes when loading more than the last 7 days. When loading the last 30 days, we get 1 or 2 'Error in visualizati…

---

## [Syntax to use max\_snapshot\_bytes\_per\_sec in snapshot api](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778)

<div class="topic-metadata">

**Author:** [@dhina](https://discuss.elastic.co/u/dhina)\
**Replies:** 0\
**Last updated:** [December 29, 2020, 8:11am UTC](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778 "2020-12-29T08:11:42Z")

</div>

I want to use the max\_snapshot\_bytes\_per\_sec to throttle the speed of the Elastic search snapshot. Checked the documentation, could not find an example on how to specify the limit. Which one of the below value is correc…

---

## [Multitenancy](https://discuss.elastic.co/t/multitenancy/259737)

<div class="topic-metadata">

**Author:** [@ArifAlili](https://discuss.elastic.co/u/ArifAlili)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 7:13am UTC](https://discuss.elastic.co/t/multitenancy/259737 "2020-12-29T07:13:33Z")

</div>

Hi all, We are using Elasticsearch for our e-commerce platform, we are indexing products only. We have multiple shops under our platform, each shop is using different catalogue (produtcs). Currently we are investigatin…

---

## [Increase shard count in elastic search kubernetes](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269)

<div class="topic-metadata">

**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\
**Replies:** 4\
**Last updated:** [December 29, 2020, 6:17am UTC](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269 "2020-12-29T06:17:34Z")

</div>

I have deployed an Elastic search in GKE. ECK has 3 master and 2 data nodes. When creating an index with 1 shard and 1 replica getting 400 error response when the shard count reached 1000. Is it possible to increase the…

---

## [Unable to install logtrail plugin](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 6:13am UTC](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630 "2020-12-29T06:13:37Z")

</div>

Hello Team, We just upgrade our ELK stack version from 6.8 to 7.10.1. We are using 3 node elasticsaerch cluster and cluster is up and running. We upgraded our kibana also from 6.8 to 7.10.1 and its also running we are a…

---

## [Is it possible to install ccr on a older version of elasticsearch, eg:5.x？](https://discuss.elastic.co/t/is-it-possible-to-install-ccr-on-a-older-version-of-elasticsearch-eg-5-x/259446)

<div class="topic-metadata">

**Author:** [@Jia\_Liu](https://discuss.elastic.co/u/Jia_Liu)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 6:09am UTC](https://discuss.elastic.co/t/is-it-possible-to-install-ccr-on-a-older-version-of-elasticsearch-eg-5-x/259446 "2020-12-29T06:09:26Z")

</div>

I have two elasticsearch cluster with verison 5.6.8. I want to copy index data across them, but as far as I know, cross-cluster-replication is enabled after 6.5. Is it possible to install ccr on an older version of ela…

---

## [Accessing Elasticsearch System indices via API](https://discuss.elastic.co/t/accessing-elasticsearch-system-indices-via-api/259581)

<div class="topic-metadata">

**Author:** [@bjur](https://discuss.elastic.co/u/bjur)\
**Replies:** 0\
**Last updated:** [December 24, 2020, 10:35am UTC](https://discuss.elastic.co/t/accessing-elasticsearch-system-indices-via-api/259581 "2020-12-24T10:35:00Z")

</div>

We have a custom setup in place, where Kibana dashboard is accessed via Elasticsearch API, by querying the .kibana index. From the results the Dashboard queries are extracted and used onward. While testing the upgrade t…

---

## [Error running kibana for first time after install](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604)

<div class="topic-metadata">

**Author:** [@Sama\_M](https://discuss.elastic.co/u/Sama_M)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 6:05am UTC](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604 "2020-12-29T06:05:13Z")

</div>

Hello, I have just fresh installed Ubuntu on my laptop so i can follow along a book on python data engineering. All i have installed so far is elasticsearch and kibana. When attempting to run kibana for the first time i…

---

## [Watch-history-ilm-policy - out of the box ILM incorrectly set up?](https://discuss.elastic.co/t/watch-history-ilm-policy-out-of-the-box-ilm-incorrectly-set-up/259606)

<div class="topic-metadata">

**Author:** [@mgevans](https://discuss.elastic.co/u/mgevans)\
**Replies:** 0\
**Last updated:** [December 24, 2020, 8:00pm UTC](https://discuss.elastic.co/t/watch-history-ilm-policy-out-of-the-box-ilm-incorrectly-set-up/259606 "2020-12-24T20:00:37Z")

</div>

Hi there we're going through our own ILM components and noticed there are a number of built-in ILMs. One of these is for the watcher history indexes such as ".watcher-history-12-2020.12.23". I'm thinking these are mis…

---

## [In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772)

<div class="topic-metadata">

**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 6:03am UTC](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772 "2020-12-29T06:03:41Z")

</div>

In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline

---

## [Why cluster UUID is different](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660)

<div class="topic-metadata">

**Author:** [@sagittar](https://discuss.elastic.co/u/sagittar)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 5:58am UTC](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660 "2020-12-29T05:58:38Z")

</div>

node1 \[node\_2409:8086:8110:3f0::2d\] node2 \[node\_2409:8086:8110:3f0::2e\] node3 \[node\_2409:8086:8110:3f0::2f\] here is node1 log \[2020-12-23T02:38:57,563\]\[INFO \]\[o.e.c.c.JoinHelper \] \[node\_2409:8086:8110:3f0::2…

---

## [Grok an Elasticsearch problem](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671)

<div class="topic-metadata">

**Author:** [@mesutalf](https://discuss.elastic.co/u/mesutalf)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671 "2020-12-29T05:57:41Z")

</div>

Hi eveyone; I have ELK locally. I trying to send my mini log to Elasticsearch. My pattern is: 2020-11-30 05:52:33,018 \[9344\] INFO Dile.ServiceProvider.ServiceThread \[\] - Thread \[Core\[3u43s3-c403-4fe4-ab87-9bea0c0ab44…

---

## [Elasticsearch storage optimisation](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641)

<div class="topic-metadata">

**Author:** [@a.oiskhine](https://discuss.elastic.co/u/a.oiskhine)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641 "2020-12-29T05:57:04Z")

</div>

Hello Guys, Is there any way to reduce the size of elasticsearch indexes, Thanks in advance

---

## [How can I halt the process of movement of indices from hot nodes to warm nodes in elastic?](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 5:56am UTC](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717 "2020-12-29T05:56:31Z")

</div>

I have initiated the process of movement of week 49 indices from our designated hot nodes to warm nodes using the API: PUT \*2020.49/\_settings { "index.routing.allocation.require.data": "warm" } Now how can I halt…

---

## [Elastic-agent install speling error](https://discuss.elastic.co/t/elastic-agent-install-speling-error/259539)

<div class="topic-metadata">

**Author:** [@ml4](https://discuss.elastic.co/u/ml4)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 5:54am UTC](https://discuss.elastic.co/t/elastic-agent-install-speling-error/259539 "2020-12-29T05:54:41Z")

</div>

I used sudo elastic-agent-7.10.1-linux-x86\_64/elastic-agent install -f --kibana-url=${KIBANA\_URL} --enrollment-token=${ENROLMENT\_TOKEN} to install my linux VM. Note the flag enrollment is misspelt. As youre in beta, y…

---

## [Is there a way to show shard data path on a node?](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 5:52am UTC](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759 "2020-12-29T05:52:00Z")

</div>

I am in the process of validating using nodes with multiple disks. I need an easy way to have a high level idea where the shards are located. I typically use "GET /\_cat/allocation?v" to show the overall disk usage. Th…

---

## [FileBeat - awscloudwatch input config](https://discuss.elastic.co/t/filebeat-awscloudwatch-input-config/259761)

<div class="topic-metadata">

**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\
**Replies:** 0\
**Last updated:** [December 28, 2020, 10:07pm UTC](https://discuss.elastic.co/t/filebeat-awscloudwatch-input-config/259761 "2020-12-28T22:07:04Z")

</div>

Hello Everyone, I have attempted to use the awscloudwatch input type in my FileBeat setup as follows but the appropriate ARN for the account I'm dealing with. The AWS credentials file has the correct ID keys and these …

---

## [Python index CSV into ES date issue](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 5:49am UTC](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764 "2020-12-29T05:49:41Z")

</div>

Hi, I use Python csv.DictReader to bulk insert CSV data into ES, i found that the date column was read as string. I tried two methods to deal with the date column data type: pre-define the index template to set the c…

[Previous page](https://discuss.elastic.co/latest.md?page=1916)

[Next page](https://discuss.elastic.co/latest.md?page=1918)
