# Latest **URL:** https://discuss.elastic.co/latest.md?page=1934 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1935 --- ## [Kibana Plugin Development Issue on AWS ec2](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 12\ **Last updated:** [December 17, 2020, 12:22am UTC](https://discuss.elastic.co/t/kibana-plugin-development-issue-on-aws-ec2/258511 "2020-12-17T00:22:42Z")
Hello, I am running the development environment on an AWS ec2 instance with 8GB of RAM, 25GB disk space and on AWS Linux 2. I have read somewhere that it this environment has issues running on the web. I was following… --- ## [Watcher upgrade API run required (7.10)](https://discuss.elastic.co/t/watcher-upgrade-api-run-required-7-10/256751)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 5\ **Last updated:** [December 16, 2020, 8:30pm UTC](https://discuss.elastic.co/t/watcher-upgrade-api-run-required-7-10/256751 "2020-12-16T20:30:45Z")
Hi I have not starting watcher, upgrade API run required: .watches\[false\] in my logs on 7.10 This Implies that the issue occurs between 5x and 6x but this cluster was built this year and has never been 5x or 6x ho… --- ## [How to have an attribute value to really make a difference in score? (help with rank\_feature needed)](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 11:33pm UTC](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927 "2020-12-16T23:33:29Z")
Hello we have an attribute in our documents called "popularity", which is a number between 0 and 100. Our goal is to boost the relevance of the results in such a way that the results will look ordered by popularity and … --- ## [Get field name in Query Suggest response](https://discuss.elastic.co/t/get-field-name-in-query-suggest-response/258908)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 11:17pm UTC](https://discuss.elastic.co/t/get-field-name-in-query-suggest-response/258908 "2020-12-16T23:17:28Z")
I have configured SearchProvider to show suggestions for 3 fields in SearchBox, but it can be quit difficult for user to understand meaning of these suggestions without some sort of "label". It would be very nice if I co… --- ## [Time filter is not working](https://discuss.elastic.co/t/time-filter-is-not-working/258000)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 6\ **Last updated:** [December 16, 2020, 10:58pm UTC](https://discuss.elastic.co/t/time-filter-is-not-working/258000 "2020-12-16T22:58:09Z")
Hello, this is our Canvas workpad: As you can see time filter on top of the page does not work correctly regarding the elements presented in the data table. This is the expression of the time filter: This is the… --- ## [Elasticsearch 7.7.1 Increasing index.mapping.total\_fields.limit](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871 "2020-12-16T22:34:16Z")
I have read the below discussions https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217 https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mappin… --- ## [Logstash error: Java::JavaLang::NoClassDefFoundError: javax/xml/bind/DatatypeConverter](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920)
**Author:** [@streible](https://discuss.elastic.co/u/streible)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:24pm UTC](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920 "2020-12-16T22:24:50Z")
Hi everyone, I'm hoping someone can lend a hand or give some guidance. I have recently installed Elasticsearch on Ubuntu 20.04 and have most everything up and running. I am working with SQL Server 2019 on a remote mac… --- ## [Can i get via API info about indicies but like pattern(index1\*,index2\*)?](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:07pm UTC](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877 "2020-12-16T22:07:10Z")
Hi all! Can i get via API info about indicies but like pattern (index1\*,index2\*)? I get info by API "GET /\_cat/indices?h=index,store.size&bytes=kb&format=json" and result like: \[ { "index" : "index1-2020.12.16", "s… --- ## [Elasticsearch Windows Manager GUI](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887 "2020-12-16T22:05:17Z")
Hello, I am looking more details about the Manager GUI feature, which can be triggered through elasticsearch-service.bat manager For example, From "Java" tab, where all the details related to Java options are b… --- ## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/258909)
**Author:** [@velu](https://discuss.elastic.co/u/velu)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/258909 "2020-12-16T22:01:49Z")
Hi , Please help me how to resolve the below issue. 2020-12-16 18:47:47 ERROR agent:123 - Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action:… --- ## [As of 7.x log4j2 no longer supports "IfLastModified"](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918)
**Author:** [@Eric\_Bates](https://discuss.elastic.co/u/Eric_Bates)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918 "2020-12-16T22:01:39Z")
There is an example given on Logging to rotate logs every 7 days instead of waiting for 2G of logs to accumulate. This example worked well for ELK 6.x, but as of upgrading to 7.x, it now produces the error: Dec 16 16:42… --- ## [Elasticsearch 7.10 : How to safely remove a node and free up space?](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624)
**Author:** [@Soumya\_Ranjan\_Sahoo](https://discuss.elastic.co/u/Soumya_Ranjan_Sahoo)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624 "2020-12-16T21:24:28Z")
As I am running out of my disk space, I want to remove all the indices from the node. Note that I have just one node, and I am running the elastic server on my local machine. Basically, when I start the elastic server, … --- ## [Upgrade issue from 5.6.8 to 6.0](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784)
**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:20pm UTC](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784 "2020-12-16T21:20:39Z")
Similar to this issue, I cannot set the suggested script.allowed\_types setting. I am using Elastic Cloud and have tried disabling Disable inline/file/stored script and Enabling sandboxed inline/file/stored scripts. None … --- ## [Can you have multiple actions in one single mutate block?](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 9:10pm UTC](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913 "2020-12-16T21:10:15Z")
Can you have multiple actions in one single mutate block or do you need a mutate block for each: mutate { copy =\> { "server\_name" =\> "syslog\_hostname" } replace =\> { "syslog\_program" =\> "\_geoip\_lookup\_failure" } } o… --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/258914)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 8:51pm UTC](https://discuss.elastic.co/t/logstash-configuration/258914 "2020-12-16T20:51:00Z")
Hi! I've installed Logstash on my Kali platform and, as it says on official site, path.settings value should be "/etc/logstash/", but when I want to use keystores I receive an error which says that I need to put my file… --- ## [Error installing Elastic-Agent v7.10.0](https://discuss.elastic.co/t/error-installing-elastic-agent-v7-10-0/258140)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 8:46pm UTC](https://discuss.elastic.co/t/error-installing-elastic-agent-v7-10-0/258140 "2020-12-16T20:46:32Z")
Hi, I am trying ELK 7.10.0 and it's beats. I have successfully installed the Elastic-Agent 7.10.0 in two machines, running Win 10 and Win 10 Pro, but I am unable to install the same agent on a machine running Windows Se… --- ## [Filebeat: Unexpected file opening error: file info is not identical with opened file. Aborting harvesting and retrying file later again](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315)
**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\ **Replies:** 8\ **Last updated:** [December 16, 2020, 8:43pm UTC](https://discuss.elastic.co/t/filebeat-unexpected-file-opening-error-file-info-is-not-identical-with-opened-file-aborting-harvesting-and-retrying-file-later-again/258315 "2020-12-16T20:43:51Z")
Hello, We have ELK 7.8.1 stack running in K8 cluster. Filebeat on one of the node is not able to keep up with the logs generated by one MS. This was working fine until couple of days. Missing logs are from a container … --- ## [Logstash - configuring pipeline.workers for input stage](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 7:47pm UTC](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900 "2020-12-16T19:47:47Z")
It seems that pipeline.workers allows to configure worker threads for filter and output stage. -w, --pipeline.workers COUNT Sets the number of pipeline workers to run. This option sets the number of workers that will,… --- ## [String field in Discover is not sortable, and .keyword field and alias field are both empty](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 7:31pm UTC](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892 "2020-12-16T19:31:58Z")
We noticed that only keyword and date field are sort-able in "Discover" , not string and numeric field. I found a post that mentioned we need to use .keyword field in order to make it sortable, to enable it, we need to d… --- ## [Dynamic\_templates are not working as expected](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193)
**Author:** [@Liat](https://discuss.elastic.co/u/Liat)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193 "2020-12-16T18:54:01Z")
I am trying ot have dynamic mapping for these objects: { participant\_1{ "role" : "role1" }, participant\_2{ "role" : "role2" }. participant\_3{ "role" : "role3" } } My mapping looks like that: "mappings": { … --- ## [Elastic Cluster restart with one master node](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 9\ **Last updated:** [December 16, 2020, 6:47pm UTC](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278 "2020-12-16T18:47:46Z")
I have 6 nodes elastic cluster. node1 - master node2 - master node3 - data node4 - data node5 - data node6 - master, data node1,2,3,4 and node5 are primary nodes node6 is DR node I want to all primary nodes and … --- ## [Date/Timestamp showing wrong in Discover](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 6:05pm UTC](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897 "2020-12-16T18:05:26Z")
New to Elasticsearch and trying to learn how things work. When I input the following in Dev Tools PUT /ptest-1/\_doc/1 { "timestamp": "2020-12-16T10:53:01.358062", "computer\_name": "HP-8740W", "UserName": "Eric", "Active… --- ## [Metricbeat Process information](https://discuss.elastic.co/t/metricbeat-process-information/258778)
**Author:** [@jchaves506](https://discuss.elastic.co/u/jchaves506)\ **Replies:** 5\ **Last updated:** [December 16, 2020, 5:52pm UTC](https://discuss.elastic.co/t/metricbeat-process-information/258778 "2020-12-16T17:52:58Z")
is there a way to get the version of the processes that metricbeat gathers with the system's module? or do I need to use a different module?, I'm trying to get all the information about the executable file running at an … --- ## [Three-node Elasticsearch Cluster with docker-compose failing with stacktrace--\["org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[failed to bind service\]; nested: AccessDeniedException\[/usr/share/elasticsearch/data/nodes](https://discuss.elastic.co/t/three-node-elasticsearch-cluster-with-docker-compose-failing-with-stacktrace-org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-bind-service-nested-accessdeniedexception-usr-share-elasticsearch-data-nodes/258619)
**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\ **Replies:** 6\ **Last updated:** [December 16, 2020, 5:34pm UTC](https://discuss.elastic.co/t/three-node-elasticsearch-cluster-with-docker-compose-failing-with-stacktrace-org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-bind-service-nested-accessdeniedexception-usr-share-elasticsearch-data-nodes/258619 "2020-12-16T17:34:35Z")
Hi, I am trying to spin up a three node Elasticsearch cluster with a docker-compose file. While spinning up the cluster only one Elasticsearch container is coming up whereas other two containers on different nodes are f… --- ## [Longer search queue when we have low search thread utilization](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857)
**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 5:22pm UTC](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857 "2020-12-16T17:22:03Z")
We are seeing slow query performance on elastic-search. This coincide with increase in search queue size but at the same time active search threads as a percentage of search thread pool size is pretty low. This indicate … --- ## [Kibana - APM UI - Service Health Indicator](https://discuss.elastic.co/t/kibana-apm-ui-service-health-indicator/258895)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-apm-ui-service-health-indicator/258895 "2020-12-16T17:07:52Z")
Hi, Elasticsearch - v7.10.1 Kibana - V7.10.1 Recently upgraded to Elastic stack to 7.10.1. And enabled Anomaly detection on services, which is a cool feature. After enabling this, able to see the health indicators fo… --- ## [Logstash is periodically hanging (unresponsive) and not sending anything to ES. How to recognize and fix?](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-and-not-sending-anything-to-es-how-to-recognize-and-fix/258896)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 5:10pm UTC](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-and-not-sending-anything-to-es-how-to-recognize-and-fix/258896 "2020-12-16T17:10:06Z")
We are running logstash on Kubernetes. And some logstash Pods stops inserting data into ES for some unknown reason periodically (once in 2-7 days) And logstash does not indicate there's something wrong with it. I mean t… --- ## [Canvas workpads white screen](https://discuss.elastic.co/t/canvas-workpads-white-screen/258880)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 5\ **Last updated:** [December 16, 2020, 5:07pm UTC](https://discuss.elastic.co/t/canvas-workpads-white-screen/258880 "2020-12-16T17:07:15Z")
Hi, I have not used the canvas workpads for some time but trying to open them now the workpad opens briefly then disappears, no errors. I am on 7.10.1 I migrated them from on prem to the cloud, believe we were on 7.9 w… --- ## [Not able to connect to DB2 using JDBC\_Static Pluginwith securityMechanism=13](https://discuss.elastic.co/t/not-able-to-connect-to-db2-using-jdbc-static-pluginwith-securitymechanism-13/258807)
**Author:** [@tgkumarmca](https://discuss.elastic.co/u/tgkumarmca)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 4:27pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-db2-using-jdbc-static-pluginwith-securitymechanism-13/258807 "2020-12-16T16:27:11Z")
Hi All, I'm trying to connect to the DB2 database where the security mechanism was configured as 13 using the JDBC\_Static plugin. I have tried passing the JDBC Connection as following ways. However, I don't have any luc… --- ## [Positive lookahead not working](https://discuss.elastic.co/t/positive-lookahead-not-working/258752)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 4:10pm UTC](https://discuss.elastic.co/t/positive-lookahead-not-working/258752 "2020-12-16T16:10:15Z")
hi guys, i want to return or get output 40:123 , whereas input is 40$:123 ---- want to use lookahead , but it always return in output if i use below...any idea, need to used lookahead $ is must in named capture. inpu… [Previous page](https://discuss.elastic.co/latest.md?page=1933) [Next page](https://discuss.elastic.co/latest.md?page=1935)