# Latest **URL:** https://discuss.elastic.co/latest.md?page=1918 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1919 --- ## [Источник DEBUG сообщений](https://discuss.elastic.co/t/debug/259243)
**Author:** [@nessero](https://discuss.elastic.co/u/nessero)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 5:09am UTC](https://discuss.elastic.co/t/debug/259243 "2020-12-29T05:09:08Z")
Всем доброго времени ! Настроен уровень логирования debug для поисковых запросов. Только не могу понять как найти источник который дает такое сообщение. Пример: \[2020-12-21T17:08:06,606\]\[DEBUG\]\[o.e.a.b.TransportShardBu… --- ## [How to fetch multiple return values by performing queries on multiple indices](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716)
**Author:** [@sharpshooter](https://discuss.elastic.co/u/sharpshooter)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 4:31am UTC](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716 "2020-12-29T04:31:43Z")
Hii i am searching on multiple indices at a time on objects like Mail , Calender , Attachment and want return values of multiple types e.g :- (Mail , Calender , Attachment) but i am not able to get it please help. Thank … --- ## [High load, but lower cpu,lower IO](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047)
**Author:** [@111421](https://discuss.elastic.co/u/111421)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 3:49am UTC](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047 "2020-12-29T03:49:33Z")
Hello, eyeryone I checked the es single node load through cerebor and found that the load is very high, but the cpu utilization rate is very low. Why? ES is deployed through docker, version: 6.8 cerebro: kibana: … --- ## [Data too large, data for \[\\]](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676)
**Author:** [@myamor163](https://discuss.elastic.co/u/myamor163)\ **Replies:** 16\ **Last updated:** [December 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676 "2020-12-28T09:14:05Z")
Do not open replicas, index write normal, open replicas, write the following error: type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\\] would be \[30770989726/28.6gb\], whi… --- ## [Insert Custom Field Name into Index Name after going through Solace Pubsub](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 1:31am UTC](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639 "2020-12-29T01:31:39Z")
Hi there I'm using ELK 7.10. My test setup is as follows: filebeat (running in kibana) -\> logstash01 -\> solace pubsub+ -\> logstash02 -\> Elasticsearch -\> kibana What I'm trying to accomplish: Insert custom fields cre… --- ## [Search\_phase\_execution\_exception filebeat all shards failed](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755)
**Author:** [@whosecode](https://discuss.elastic.co/u/whosecode)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 1:11am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755 "2020-12-29T01:11:42Z")
Hi! My ealstic cluster overview panel shows health yellow as shards are missing, and I get below reponses whenever I try to produce some visualization, or dashboard search\_phase\_execution\_exception all shards failed E… --- ## [Json upload using Data visualizer issue](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763)
**Author:** [@Savita\_Chauhan](https://discuss.elastic.co/u/Savita_Chauhan)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 12:22am UTC](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763 "2020-12-29T00:22:56Z")
I am trying to upload/index a simple json file using Kibana's Data Visualizer (under ML). I have 3 node elastic cluster and one kibana running on docker. It lets me upload the json, but when I look at the index it had pu… --- ## [Dec 19th, 2020: \[EN\] OpenTelemetry in Go Applications using Elastic APM](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279)
**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\ **Replies:** 0\ **Last updated:** [December 19, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279 "2020-12-19T08:00:24Z")
Distributed tracing technologies allow developers to virtually glue together disparate services to build a cohesive transaction that can be observed by folks in the operations team. This is super important because the di… --- ## [Elasticsearch Engineer I Home Labs Setup](https://discuss.elastic.co/t/elasticsearch-engineer-i-home-labs-setup/259544)
**Author:** [@NigelM](https://discuss.elastic.co/u/NigelM)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 10:28pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-i-home-labs-setup/259544 "2020-12-28T22:28:45Z")
Hi, I am working through my Elasticsearch training material for the Elasticsearch Engineer 1 course and I have built my home environment - however it makes reference to accessing the blogs search page which was just an … --- ## [Simple Observability of Metrics from Apache Spark](https://discuss.elastic.co/t/simple-observability-of-metrics-from-apache-spark/259760)
**Author:** [@bplies](https://discuss.elastic.co/u/bplies)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 9:31pm UTC](https://discuss.elastic.co/t/simple-observability-of-metrics-from-apache-spark/259760 "2020-12-28T21:31:48Z")
We're trying to collect basic metrics from Apache Spark. We realize there are Hadoop Metrics provided by ES-Hadoop but it seems just so heavy-handed for what we want. We are not trying to tie in full featured interacti… --- ## [SIEM detection rule emails body customization](https://discuss.elastic.co/t/siem-detection-rule-emails-body-customization/258416)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 4\ **Last updated:** [December 28, 2020, 9:19pm UTC](https://discuss.elastic.co/t/siem-detection-rule-emails-body-customization/258416 "2020-12-28T21:19:47Z")
Hi Team, Can you please let me know how i can add additional details to detection rules message body For example , for root login attempt failure , i need the email message body with host.hostname, @timestamp, event.o… --- ## [App allowed through elastic endpoint due to message processing error](https://discuss.elastic.co/t/app-allowed-through-elastic-endpoint-due-to-message-processing-error/259556)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [December 28, 2020, 9:11pm UTC](https://discuss.elastic.co/t/app-allowed-through-elastic-endpoint-due-to-message-processing-error/259556 "2020-12-28T21:11:37Z")
Hi all. I have been trying to use elastic endpoint sec since yesterday and the agent on windows having some problems that i dont really know how to fix. It constantly say that some app or dll lib is allowed due to mess… --- ## [Missing geo\_point field](https://discuss.elastic.co/t/missing-geo-point-field/257577)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 13\ **Last updated:** [December 28, 2020, 9:00pm UTC](https://discuss.elastic.co/t/missing-geo-point-field/257577 "2020-12-28T21:00:49Z")
Hi, I'm experiencing this issue on a fresh ELK 7.10 installation. I just deployed the Elastic-Agent with the only integration Endpoint , not even system . Is there a solution or workaround available or this is still und… --- ## [Getting the error when using EuiDataGrid inside Kibana plugin](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613)
**Author:** [@zixon89](https://discuss.elastic.co/u/zixon89)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 7:37pm UTC](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613 "2020-12-28T19:37:37Z")
Hi there, I hope it's the right place to ask the following question... I'm new with Kibana plugin development, and I figure out most of the back-end part. However, now comes the tricky part for me - the EUI framework. … --- ## [Filebeat multiline config doesn't work with S3 input](https://discuss.elastic.co/t/filebeat-multiline-config-doesnt-work-with-s3-input/259756)
**Author:** [@bplies](https://discuss.elastic.co/u/bplies)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 7:03pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-doesnt-work-with-s3-input/259756 "2020-12-28T19:03:47Z")
Elastic Cloud hosting Elasticsearch 7.10.0 Filebeat 7.10.1 We've been unable to get files from S3 input to successfully apply the configured multiline options on that input. Despite our best efforts, lines that shoul… --- ## [Apply condition on value (count) greater than some value in aggregation](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 6:54pm UTC](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750 "2020-12-28T18:54:05Z")
I am looking a way where I can apply condition on value return in result. Here is my query. { "size": 0, "aggs": { "by\_brand": { "terms": { "field": "brand\_name.keyword", "size": 10… --- ## [\[Error\]tried to parse field \[TLSv1\] as object, but found a concrete value](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 6:43pm UTC](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753 "2020-12-28T18:43:20Z")
I am trying to ingest json data into Elasticsearch vai http\_poller and facing following error. elasticsearch - Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"cloudflare",… --- ## [Can't get filebeat Netflow Module to work](https://discuss.elastic.co/t/cant-get-filebeat-netflow-module-to-work/258459)
**Author:** [@Gambit22](https://discuss.elastic.co/u/Gambit22)\ **Replies:** 4\ **Last updated:** [December 28, 2020, 6:36pm UTC](https://discuss.elastic.co/t/cant-get-filebeat-netflow-module-to-work/258459 "2020-12-28T18:36:14Z")
Hello Everyone, I've been pulling my hair out trying to understand why Filebeat's net flow module keeps causing filebeats to end. Heres the error it keeps outputting: 2020-12-11T17:42:22.025-0700 ERROR instance/be… --- ## [Elasticsearch-exporter connection failure](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128)
**Author:** [@Patrick\_Lieberg1](https://discuss.elastic.co/u/Patrick_Lieberg1)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128 "2020-12-28T18:31:47Z")
Any idea why an elasticsearch-exporter pod's logs report an error connecting to the coordinating pod, but if I exec into the pod and curl the same address, it works? Exporter version: 1.1.0-debian-10-r303 Error from lo… --- ## [Filebeat code=exited, status=1/FAILURE](https://discuss.elastic.co/t/filebeat-code-exited-status-1-failure/258926)
**Author:** [@dave.mc](https://discuss.elastic.co/u/dave.mc)\ **Replies:** 23\ **Last updated:** [December 28, 2020, 6:11pm UTC](https://discuss.elastic.co/t/filebeat-code-exited-status-1-failure/258926 "2020-12-28T18:11:57Z")
Newbie here, so think basic. :slightly\_smiling\_face: Filebeat service won't start (on Debian), fails with code=exited, status=1/FAILURE. If I run filebeat -v -e -d "\*", I get: Exiting: error loading config file: yaml… --- ## [Don't drop event postgresql.activity.query](https://discuss.elastic.co/t/dont-drop-event-postgresql-activity-query/259749)
**Author:** [@Guto\_Ribeiro](https://discuss.elastic.co/u/Guto_Ribeiro)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 5:25pm UTC](https://discuss.elastic.co/t/dont-drop-event-postgresql-activity-query/259749 "2020-12-28T17:25:50Z")
Hello guys, I'm using metricbeat to collect metrics from postgresql, via the postgresql module. I need to drop events with: postgresql.activity.query: "COMMIT" postgresql.activity.query: "" In the metrcibeat configu… --- ## [7.10.1 upgrade and GrokProcessor Error](https://discuss.elastic.co/t/7-10-1-upgrade-and-grokprocessor-error/259647)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 5:26pm UTC](https://discuss.elastic.co/t/7-10-1-upgrade-and-grokprocessor-error/259647 "2020-12-28T17:26:23Z")
After I upgraded to 7.10.1 I am started getting following error. more investigation turn up following links to fix it. https://github.com/elastic/beats/issues/15840 https://discuss.elastic.co/t/es-7-6-regular-express… --- ## [I want to disable optons in visualization](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545)
**Author:** [@sujayjay](https://discuss.elastic.co/u/sujayjay)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 5:04pm UTC](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545 "2020-12-28T17:04:10Z")
hi, im new to elasticsearch, i created dashbord in kibana and displayed in website by sharing through iframe. Problem is that i dont want user to see and go through the options in visualization in dashboard i want to … --- ## [Kibana Markdown local image](https://discuss.elastic.co/t/kibana-markdown-local-image/259740)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-markdown-local-image/259740 "2020-12-28T16:56:57Z")
Hello! I want to display in my kibana visualization my local image. I put cat.png to /usr/share/kibana/src/legacy/ui/public/assets/favicons. Owner of /usr/share/kibana/src/legacy/ui/public/assets/favicons is root, owner… --- ## [Unable to create a new index pattern / indexes not loading](https://discuss.elastic.co/t/unable-to-create-a-new-index-pattern-indexes-not-loading/259527)
**Author:** [@elk\_guy\_1234](https://discuss.elastic.co/u/elk_guy_1234)\ **Replies:** 19\ **Last updated:** [December 28, 2020, 4:50pm UTC](https://discuss.elastic.co/t/unable-to-create-a-new-index-pattern-indexes-not-loading/259527 "2020-12-28T16:50:57Z")
Problem: When trying to create a new index pattern the error "The index pattern you've entered does not match any indices". Really the problem is my index's will not load from a config / schema. Index Details: This inde… --- ## [How to keep logstash date type?](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742)
**Author:** [@pamiers](https://discuss.elastic.co/u/pamiers)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 4:39pm UTC](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742 "2020-12-28T16:39:36Z")
I am reading data from oracle and putting data into elasticsearch through logstash. However, when reading data from oracle, the value of the field corresponding to the Date type is automatically changed to UTC type, dif… --- ## [ELK Kibana table grouping count](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422)
**Author:** [@Atif\_EL\_KHACHINE](https://discuss.elastic.co/u/Atif_EL_KHACHINE)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 4:28pm UTC](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422 "2020-12-28T16:28:42Z")
Hi, I have some data : {"groupname":"ZAAH", "dname":"DEVICE1", "status":"OK"} {"groupname":"ZAAH","dname":"DEVICE2", "status":"ERROR"} {"groupname":"ZAAH","dname":"DEVICE3", "status":"OK"} {"groupname":"ZAAH","dname… --- ## [Logstash enrichement: URLHaus](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 4:14pm UTC](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720 "2020-12-28T16:14:18Z")
Hello , I would like to enrich my SIEM with information from URLhaus, I configured my logstash pipline like this: input { exec { command =\> 'curl https://urlhaus.abuse.ch/downloads/csv/' interval =\> 86400 … --- ## [What's the proper way to set the op\_type metadata field?](https://discuss.elastic.co/t/whats-the-proper-way-to-set-the-op-type-metadata-field/258323)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/whats-the-proper-way-to-set-the-op-type-metadata-field/258323 "2020-12-28T14:36:55Z")
I am trying to have filebeat use the index operation rather than create, and after digging through the beats source code, I came to this pull request where support was added to set the @metadata.op\_type field to index, c… --- ## [Configure HTTP-server elasticsearch](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723)
**Author:** [@wmr84](https://discuss.elastic.co/u/wmr84)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723 "2020-12-28T13:02:03Z")
Hi everybody! I have configured the following parameters on my elasticsearch server http.host: elasticsearch.company.com http.publish\_host: elasticsearch.company.com http.bind\_host: elasticsearch.company.com I thoug… [Previous page](https://discuss.elastic.co/latest.md?page=1917) [Next page](https://discuss.elastic.co/latest.md?page=1919)