# Latest **URL:** https://discuss.elastic.co/latest.md?page=1955 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1956 --- ## [Elasticsearch can not be started by service](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773)
**Author:** [@mkkang66](https://discuss.elastic.co/u/mkkang66)\ **Replies:** 4\ **Last updated:** [December 7, 2020, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773 "2020-12-07T09:52:07Z")
I installed an elasticsearch 7.10.0 by tar.gz archives because my network is a closed network. I can run it as a deamon with ' ../bin/elasticsearch -d -p es.pid' but systemctl command can not be run. The followings are … --- ## [Multiline log in elastic agent](https://discuss.elastic.co/t/multiline-log-in-elastic-agent/257698)
**Author:** [@FenixSec](https://discuss.elastic.co/u/FenixSec)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 9:44am UTC](https://discuss.elastic.co/t/multiline-log-in-elastic-agent/257698 "2020-12-07T09:44:45Z")
Hi, i have a filebeat that picks up a file in the log directory and parses it with the multiline options in the filebeath.yml file: Multiline options multiline.type: pattern multiline.pattern: '\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{… --- ## [Dec 7th, 2020: \[FR\] Utilisez Rally comme outil d'import/export de données](https://discuss.elastic.co/t/dec-7th-2020-fr-utilisez-rally-comme-outil-dimport-export-de-donnees/256863)
**Author:** [@Laurent\_Huet](https://discuss.elastic.co/u/Laurent_Huet)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2020-fr-utilisez-rally-comme-outil-dimport-export-de-donnees/256863 "2020-12-07T08:00:01Z")
English version L'objet de ce post est de montrer comment utiliser l'outil Rally pour exporter des données d'un cluster et les importer dans un autre. L'idée est de pouvoir extraire la totalité des données d'un ou plus… --- ## [Enable Observability in Spring Boot Application](https://discuss.elastic.co/t/enable-observability-in-spring-boot-application/257683)
**Author:** [@Raghuk](https://discuss.elastic.co/u/Raghuk)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 9:24am UTC](https://discuss.elastic.co/t/enable-observability-in-spring-boot-application/257683 "2020-12-07T09:24:16Z")
I am trying to enable observability in Spring Boot application using ELK stack. I have done the following things so far and wondering what I do I need to corelate APM data with application logs. I have installed Elasti… --- ## [Reverse Proxy](https://discuss.elastic.co/t/reverse-proxy/257238)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 4\ **Last updated:** [December 7, 2020, 8:33am UTC](https://discuss.elastic.co/t/reverse-proxy/257238 "2020-12-07T08:33:37Z")
Try to explain the best I can. I have an Apache reverse proxy configure as such and it works and is in production. \ SSLEngine on SSLCertificateFile computer.cer SSLCertifi… --- ## [TSVB Visualization font inconsistent](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805)
**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 8:23am UTC](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805 "2020-12-07T08:23:13Z")
Hi, As per below example, you can see the font sizing is different between visualizations. Is there anyway to make the font sizes the same for all? My guess it is dynamically changing based on the text to be displayed… --- ## [Duplicate data in Pie chart](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 8:19am UTC](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816 "2020-12-07T08:19:00Z")
Here is my data set stored in elastic; index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: … --- ## [Adding two nodes not displaying the number of nodes as 2](https://discuss.elastic.co/t/adding-two-nodes-not-displaying-the-number-of-nodes-as-2/257738)
**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 8:02am UTC](https://discuss.elastic.co/t/adding-two-nodes-not-displaying-the-number-of-nodes-as-2/257738 "2020-12-07T08:02:38Z")
Hi Team, Here is my task wherein add new node to exisiting es cluster. Followed below steps ;; Add instance where in es\_java\_heap\_size\_gb: 20 Added es and restarted .PFA text file for elasticsearch.yml When I run ch… --- ## [How to search for values from JSON formatted content?](https://discuss.elastic.co/t/how-to-search-for-values-from-json-formatted-content/257809)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 7:33am UTC](https://discuss.elastic.co/t/how-to-search-for-values-from-json-formatted-content/257809 "2020-12-07T07:33:26Z")
There is such a field in my data. I want to search for a string, such as '1612011230036'. How can I search ? { "\_source": { "http": { "request": { "body": { "original": "{\\"productSN\\":\\"1612011230036\\",… --- ## [Kibana freezes in "Kibana server is not ready yet" after activating xpack.security](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699)
**Author:** [@jh0mil](https://discuss.elastic.co/u/jh0mil)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 7:58am UTC](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699 "2020-12-07T07:58:36Z")
When i set true the opcion xpack.security.enabled the service stay frozen in "Kibana server is not ready yet". This is the logs of Kibana log \[19:22:35.884\] \[info\]\[plugins-service\] Plugin "visTypeXy" is disabled. log… --- ## [How to enable the suricata moudle in the filebeat](https://discuss.elastic.co/t/how-to-enable-the-suricata-moudle-in-the-filebeat/257810)
**Author:** [@zero2](https://discuss.elastic.co/u/zero2)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 7:35am UTC](https://discuss.elastic.co/t/how-to-enable-the-suricata-moudle-in-the-filebeat/257810 "2020-12-07T07:35:38Z")
when i use the command :./filebeat enable modules suricata, there's a error message: \[root@localhost filebeat\]# ./filebeat modules enable suricata Error in modules manager: modules management requires 'filebeat.config.… --- ## [Metricbeat don't show "\[Metricbeat Windows\] Services"](https://discuss.elastic.co/t/metricbeat-dont-show-metricbeat-windows-services/257807)
**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 7:12am UTC](https://discuss.elastic.co/t/metricbeat-dont-show-metricbeat-windows-services/257807 "2020-12-07T07:12:31Z")
Hi, I installed Metricbeat and enable Window module but the template Dashboard ( \[Metricbeat Windows\] Services ECS ) do not show any infomation (No results found). When I run this cmd with powershell: .\\metricbeat.exe -… --- ## [How to monitor %free disk space via metricbeat on windows server](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062)
**Author:** [@hunter\_puu](https://discuss.elastic.co/u/hunter_puu)\ **Replies:** 5\ **Last updated:** [December 7, 2020, 7:03am UTC](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062 "2020-12-07T07:03:56Z")
I am newbie on ELK. i want to monitor %free disk space on windows server via metric beat. Anybody can show parameter on windows.yml for solve this issue. Thank you. --- ## [Monitor Java 11 apps with metricbeat?](https://discuss.elastic.co/t/monitor-java-11-apps-with-metricbeat/257750)
**Author:** [@stevedwray](https://discuss.elastic.co/u/stevedwray)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 6:08am UTC](https://discuss.elastic.co/t/monitor-java-11-apps-with-metricbeat/257750 "2020-12-07T06:08:21Z")
The Metricbeat java monitoring seems to require Jolokia. Jolokia does not support Java 11. We have an application that requires Java 11 and which we'd like to monitor for performance and behavior. Can anyone please su… --- ## [Error in logs of master and data-ingest nodes](https://discuss.elastic.co/t/error-in-logs-of-master-and-data-ingest-nodes/257777)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 5\ **Last updated:** [December 7, 2020, 6:06am UTC](https://discuss.elastic.co/t/error-in-logs-of-master-and-data-ingest-nodes/257777 "2020-12-07T06:06:17Z")
I deployed Elasticsearch cluster in GCP. Using ECK: 1.3.0 and elasticsearch and kibana as 7.9.0. All pods are running fine. But when I checked the logs of data-ingest and master nodes. I can see below error. {"type": … --- ## [Unable to flow kuberbenetes logs to elasticsearch](https://discuss.elastic.co/t/unable-to-flow-kuberbenetes-logs-to-elasticsearch/253459)
**Author:** [@arunreddy00](https://discuss.elastic.co/u/arunreddy00)\ **Replies:** 13\ **Last updated:** [December 7, 2020, 5:51am UTC](https://discuss.elastic.co/t/unable-to-flow-kuberbenetes-logs-to-elasticsearch/253459 "2020-12-07T05:51:56Z")
Hello Elastic, Really need your help struggling to get logs to ElasticSearch Created EKS cluster in AWS with two nodes Later integrated VPN (site to site connection) from EKS cluster's VPC to connect to Office network… --- ## [Elastic Search Load Testing with Java Client](https://discuss.elastic.co/t/elastic-search-load-testing-with-java-client/257796)
**Author:** [@vasimsaiyad2000](https://discuss.elastic.co/u/vasimsaiyad2000)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 5:45am UTC](https://discuss.elastic.co/t/elastic-search-load-testing-with-java-client/257796 "2020-12-07T05:45:40Z")
Hi, I have used elastic search 7.X to index my database data. I have writtend geo spatial query using Java High Rest client to search from elastic search. The Java client works fine with fewer request but When I perfor… --- ## [Elasticsearch Basic Authentication](https://discuss.elastic.co/t/elasticsearch-basic-authentication/257792)
**Author:** [@ravi\_ch](https://discuss.elastic.co/u/ravi_ch)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 4:47am UTC](https://discuss.elastic.co/t/elasticsearch-basic-authentication/257792 "2020-12-07T04:47:09Z")
I have installed Elasticsearch via helm chart unable to enable basic authentication. Need help with that. --- ## [ES Thread pool how to update](https://discuss.elastic.co/t/es-thread-pool-how-to-update/257779)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 4:33am UTC](https://discuss.elastic.co/t/es-thread-pool-how-to-update/257779 "2020-12-07T04:33:54Z")
How to udpate the thread pool size for elasticsearch in elastic cloud4 { "persistent" : { "thread\_pool.write.queue\_size" : 1000 } } Above Put call is resulting in a failure { "error": { "ro… --- ## [JVM corrupted with java agent 1.19.0 - CentOS](https://discuss.elastic.co/t/jvm-corrupted-with-java-agent-1-19-0-centos/257599)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 6\ **Last updated:** [December 7, 2020, 3:15am UTC](https://discuss.elastic.co/t/jvm-corrupted-with-java-agent-1-19-0-centos/257599 "2020-12-07T03:15:59Z")
Hi everyone! We had the APM java agent with Tomcat successfully running in test environments for a week but after I modified some configurations of the agent(see below), JVM was occasionally corrupted and left the web a… --- ## [Heartbeat-Elastic 7.10 unable to display details \[search\_phase\_execution\_exception\]](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 10\ **Last updated:** [December 7, 2020, 3:12am UTC](https://discuss.elastic.co/t/heartbeat-elastic-7-10-unable-to-display-details-search-phase-execution-exception/257481 "2020-12-07T03:12:15Z")
Versions Kibana: 7.7.0 APM Server: (if relevant) Elasticsearch: 7.10.0 Heartbeat: 7.10 After I have upgraded to version 7.10 (Heartbeat-Elastic) the table below is not showing up. Below is my heartbeat.yml, please… --- ## [Update partial fields leads to other fields missing that are excluded in the \_source](https://discuss.elastic.co/t/update-partial-fields-leads-to-other-fields-missing-that-are-excluded-in-the-source/257790)
**Author:** [@chemboking](https://discuss.elastic.co/u/chemboking)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 3:10am UTC](https://discuss.elastic.co/t/update-partial-fields-leads-to-other-fields-missing-that-are-excluded-in-the-source/257790 "2020-12-07T03:10:55Z")
For example, i have a mapping as followed: { "mappings": { "\_source": { "includes": \[ "gender" \] }, "properties": { "… --- ## [Able to list system indices in elasticsearch 7.9.0](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 8\ **Last updated:** [December 7, 2020, 2:45am UTC](https://discuss.elastic.co/t/able-to-list-system-indices-in-elasticsearch-7-9-0/257479 "2020-12-07T02:45:49Z")
I deployed elasticsearch cluster with operator 1.3.0 and es version: 7.9.0. When I am trying to list the indices, not able to see any system indices. Attaching the screenshot Able to see only created indices. Is that… --- ## [ES 1.4 google cloud storage plugin](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627)
**Author:** [@Adithya\_S](https://discuss.elastic.co/u/Adithya_S)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 2:31am UTC](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627 "2020-12-07T02:31:16Z")
Hi, We have a few ES v1.4 clusters for which we need to setup snapshots to Google's cloud storage. Could anyone please point me to the plugin which would allow me to do this on ES v1 clusters? TIA --- ## [Auto response (Auto remediation) SIEM](https://discuss.elastic.co/t/auto-response-auto-remediation-siem/257665)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:30pm UTC](https://discuss.elastic.co/t/auto-response-auto-remediation-siem/257665 "2020-12-04T14:30:54Z")
Hello everybody, I never used a webhook before, so I wanna know if it's possible for example to add automatic rules to my firewall when I detect an attack (brute force, port scanner ...). I have searched webinar for th… --- ## [Error after upgrading to 7.10](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 2:18am UTC](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741 "2020-12-07T02:18:17Z")
I recently upgraded my Elastic infrastructure from 7.9 - 7.10. My nodes will not start and are failing with the following message: monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException… --- ## [Create custom API Key for Enterprise Search/App Search in ECK through Kubernetes resource](https://discuss.elastic.co/t/create-custom-api-key-for-enterprise-search-app-search-in-eck-through-kubernetes-resource/257771)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 2:12am UTC](https://discuss.elastic.co/t/create-custom-api-key-for-enterprise-search-app-search-in-eck-through-kubernetes-resource/257771 "2020-12-07T02:12:17Z")
I have been following official documentation for Elastic Cloud on Kubernetes and have successfully setup Operator, Elasticsearch and Enterprise Search (v7.10.0) on premise Kubernetes cluster. I´m now ready to start cons… --- ## [How to add basic user/pass authentication to elastic.yaml](https://discuss.elastic.co/t/how-to-add-basic-user-pass-authentication-to-elastic-yaml/257662)
**Author:** [@yattaes](https://discuss.elastic.co/u/yattaes)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 1:07am UTC](https://discuss.elastic.co/t/how-to-add-basic-user-pass-authentication-to-elastic-yaml/257662 "2020-12-07T01:07:03Z")
Hi, I am using the yaml file below to deploy ElasticSearch to Azure Kubernetes. I can reach the Elasticsearch with port forwarding "localhost:9200" without authentication. How can I add a basic user/pass authenticatio… --- ## [Finding size of total documents in an index](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776)
**Author:** [@usamaahmadkhan](https://discuss.elastic.co/u/usamaahmadkhan)\ **Replies:** 3\ **Last updated:** [December 6, 2020, 9:29pm UTC](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776 "2020-12-06T21:29:15Z")
Hi, I want to find the sum of the sizes of all the documents containing a specific field. e.g. for an index .index-dec-6-2020 I want to get the sum of the size of all the documents containing the filed delay: 5 Can s… --- ## [Multi-word search](https://discuss.elastic.co/t/multi-word-search/256871)
**Author:** [@Kacper](https://discuss.elastic.co/u/Kacper)\ **Replies:** 2\ **Last updated:** [December 6, 2020, 7:10pm UTC](https://discuss.elastic.co/t/multi-word-search/256871 "2020-12-06T19:10:16Z")
Hi, I've started experimenting with App Search and I have to admit that the concept and easiness of use is top-notch - congrats! There's a thing that bothers me quite significantly and I cannot get an idea how to solve… [Previous page](https://discuss.elastic.co/latest.md?page=1954) [Next page](https://discuss.elastic.co/latest.md?page=1956)