# Latest **URL:** https://discuss.elastic.co/latest.md?page=1962 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1963 --- ## [Spans outside request scope (distributed tracing / forkJoinpool)](https://discuss.elastic.co/t/spans-outside-request-scope-distributed-tracing-forkjoinpool/256533)
**Author:** [@nicoo](https://discuss.elastic.co/u/nicoo)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 9:20am UTC](https://discuss.elastic.co/t/spans-outside-request-scope-distributed-tracing-forkjoinpool/256533 "2020-12-03T09:20:36Z")
logstash version: 7.9.2 APM server version: 7.9.2 APM java agent version: 1.18.1 / 1.19.0 Hi! I'm facing a strange case related to distributed tracing: There are two apps deployed on a k8s cluster, both using elastic… --- ## [Specify extra fields in modules (e.g Elasticsearch)](https://discuss.elastic.co/t/specify-extra-fields-in-modules-e-g-elasticsearch/255948)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 9:09am UTC](https://discuss.elastic.co/t/specify-extra-fields-in-modules-e-g-elasticsearch/255948 "2020-12-03T09:09:48Z")
I have several log type inputs in Filebeat, these specify one or more extra fields. E.g. a.yml for logs from app 'A', b.yml for logs from app 'B'. The extra field 'index' is set to 'index\_A' and index\_B' respectively. L… --- ## [java.lang.StackOverflowError: null](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 8:35am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295 "2020-12-03T08:35:37Z")
elasticsearch version : 6.7.1 \[search\]\[T#65\]\], exiting java.lang.StackOverflowError: null at java.util.stream.StreamOpFlag.fromCharacteristics(StreamOpFlag.java:733) ~\[?:1.8.0\_201\] at java.util.stream.StreamSupport.st… --- ## [Weights for synonyms](https://discuss.elastic.co/t/weights-for-synonyms/257467)
**Author:** [@TatianaParshina](https://discuss.elastic.co/u/TatianaParshina)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 8:31am UTC](https://discuss.elastic.co/t/weights-for-synonyms/257467 "2020-12-03T08:31:58Z")
Hi, Is there a way to provide weight/boost for synonyms? For example, I have synonyms: \["laptop", "notebook"\]. I want that score of "laptop" should be more then score of "notebook" and I want to specify this score. I h… --- ## [IP filtering and Security audit not working "Trial License"](https://discuss.elastic.co/t/ip-filtering-and-security-audit-not-working-trial-license/257185)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 8:07am UTC](https://discuss.elastic.co/t/ip-filtering-and-security-audit-not-working-trial-license/257185 "2020-12-03T08:07:55Z")
Hello, I am using trial License to try the IP filtering and Security audit (using version 8.0.0), but it's not working. I added this configuration to my elasticsearch.yml file: xpack.security.audit.enabled: true xpa… --- ## [Dec 3rd, 2020: \[EN\] Cross version Elasticsearch data migration with ESM](https://discuss.elastic.co/t/dec-3rd-2020-en-cross-version-elasticsearch-data-migration-with-esm/256516)
**Author:** [@medcl.net](https://discuss.elastic.co/u/medcl.net)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-3rd-2020-en-cross-version-elasticsearch-data-migration-with-esm/256516 "2020-12-03T08:00:01Z")
Why ESM Hey there, I heard that you are using Elasticsearch, that's great, as you know for search, it is the best choice, and it is evolving very fast. There are so many new and nice features coming up or already that i… --- ## [I want to see only outbound traffic of VPC Flow log in kibana](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458)
**Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 6:55am UTC](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458 "2020-12-03T06:55:43Z")
I want to see only outbound traffic of VPC FLow Log in kibana. Currently getting all inbound and outbound and I only want to see outbound traffic in kibana. this is a long pattern of VPC, I am not able to figure out how… --- ## [Find logs location](https://discuss.elastic.co/t/find-logs-location/257355)
**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\ **Replies:** 5\ **Last updated:** [December 3, 2020, 5:21am UTC](https://discuss.elastic.co/t/find-logs-location/257355 "2020-12-03T05:21:16Z")
Hi, Where can I find the file path of the filebeats logs. Please help me with this... Thanks! --- ## [Logstash got error message "no implicit conversion of nil into String"](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440)
**Author:** [@algo\_msh](https://discuss.elastic.co/u/algo_msh)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 3:11am UTC](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440 "2020-12-03T03:11:21Z")
\[2020-12-03T01:22:03,474\]\[ERROR\]\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request to Elasticsearch. We will retry indefinitely {:error\_message=\>"no implicit conversion of nil into String",… --- ## [Too many scroll error](https://discuss.elastic.co/t/too-many-scroll-error/255919)
**Author:** [@Amy\_Jonson](https://discuss.elastic.co/u/Amy_Jonson)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 2:48am UTC](https://discuss.elastic.co/t/too-many-scroll-error/255919 "2020-12-03T02:48:28Z")
Hi, We encountered an error "Trying to create too many scroll context". What is the possible trigger of this error and how should we avoid it. We only resolve this issue when we restarted the ES. Thanks --- ## [Elasticsearch Head - Find and Remove Duplicate Documents](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 2:39am UTC](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438 "2020-12-03T02:39:29Z")
Hi All, Background: Inside my application, users noticed duplicate transactions -\> investigating deeper, we noticed that we have duplicates in our elasticsearch database, likely because we did not restart our logstash/… --- ## [ILM: issue while trying to set replica:0](https://discuss.elastic.co/t/ilm-issue-while-trying-to-set-replica-0/257424)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 1:43am UTC](https://discuss.elastic.co/t/ilm-issue-while-trying-to-set-replica-0/257424 "2020-12-03T01:43:29Z")
We're using the following ILM-policy with success. PUT \_ilm/policy/technical { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { "priorit… --- ## [Security Solution Plugins & @timestamp](https://discuss.elastic.co/t/security-solution-plugins-timestamp/257217)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:31am UTC](https://discuss.elastic.co/t/security-solution-plugins-timestamp/257217 "2020-12-03T01:31:36Z")
Good Day, Just updated to 7.10 and while examining the kibana logs I find: {"type":"log","@timestamp":"2020-11-25T20:37:07Z","tags":\["error","plugins","securitySolution","plugins","securitySolution"\],"pid":22460,"messa… --- ## [SIEM - troubleshooting various error](https://discuss.elastic.co/t/siem-troubleshooting-various-error/257358)
**Author:** [@Colby99](https://discuss.elastic.co/u/Colby99)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:27am UTC](https://discuss.elastic.co/t/siem-troubleshooting-various-error/257358 "2020-12-03T01:27:25Z")
Hello i have various error in the "Security" section. Starting by: The tab Overview: In the tab Hosts i got this 3 errors I'm using winlogbeat 7.10 and stack ELK 7.10 thank you for the help ! --- ## [Logstash date format - Converting timestamp without timezone to timetamp with timezone](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426)
**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:32am UTC](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426 "2020-12-03T00:32:24Z")
I got an event timestamp field without timezone stored in Elasticsearch as follows; "open-date": "2016-05-28T00:00:00" This time is in Australia/Melbourne timezone (AEDT/AEST). I used the following filter to covert … --- ## [Setting hostname for specific log files being shipped with filebeat](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431)
**Author:** [@afc](https://discuss.elastic.co/u/afc)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 12:04am UTC](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431 "2020-12-03T00:04:24Z")
Greetings! I've been setting up a centralized log server to collect data from our servers, switches, access points etc. I have a folder on the log server that contains apache log files from a remote machine (/var/log/pr… --- ## [Logstash Java filter plugin example "./gradlew gem" error](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110)
**Author:** [@lakechat](https://discuss.elastic.co/u/lakechat)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 12:18am UTC](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110 "2020-12-03T00:18:57Z")
I was following Elasticsearch document (https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html) to write a Java filter plugin for Logtash. Somehow, I could not even get the provided example work. I stuc… --- ## [Penalize multiple fuzzy matches from one word](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430)
**Author:** [@Tianyi\_Mao](https://discuss.elastic.co/u/Tianyi_Mao)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:25pm UTC](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430 "2020-12-02T23:25:57Z")
Suppose I am doing a multi\_match query with "good brain", on the following documents: a good brain is so fun some rain on grain and brain drain brain brain brain brain By adjusting the k1 value of BM25 scoring, one can… --- ## [Error: Cannot allocate memory](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 11:06pm UTC](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423 "2020-12-02T23:06:23Z")
Hello, I am faced to an issue since a long time without finding the solution. I have a dedicated server with 12 Gb RAM but I can only allocate to Logstash 2Gb otherwise the process fall into an error. It seems linked t… --- ## [How To create a table in hive](https://discuss.elastic.co/t/how-to-create-a-table-in-hive/257310)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 6:59am UTC](https://discuss.elastic.co/t/how-to-create-a-table-in-hive/257310 "2020-12-02T06:59:42Z")
Hi, I am trying to create a ext. table in hive as mention is Elsatic doc. i need to know what are the below properties are STORED BY 'org.elasticsearch.hadoop.hive.EsStorageHandler' TBLPROPERTIES('es.resource' = 'radi… --- ## [NEST: Performing retries with a single node](https://discuss.elastic.co/t/nest-performing-retries-with-a-single-node/255373)
**Author:** [@knafve](https://discuss.elastic.co/u/knafve)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:15pm UTC](https://discuss.elastic.co/t/nest-performing-retries-with-a-single-node/255373 "2020-12-02T22:15:43Z")
I am using NEST to perform queries towards an Elasticsearch 6-cluster. The Elasticsearch cluster consists of a couple of nodes, but it's running behind a firewall/loadbalancer so from the client perspective it appears as… --- ## [Enable sub feature rules for user & rules](https://discuss.elastic.co/t/enable-sub-feature-rules-for-user-rules/257334)
**Author:** [@tacohen](https://discuss.elastic.co/u/tacohen)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:16am UTC](https://discuss.elastic.co/t/enable-sub-feature-rules-for-user-rules/257334 "2020-12-02T10:16:18Z")
Hi everyone, I need your help with user & rules. i have ELK 7.6 and I'm trying to understand how to define "sub feature rules" for Users. the idea is to enable "sub feature rules" like: "save queries" which required pri… --- ## [Access Elastic via .NET](https://discuss.elastic.co/t/access-elastic-via-net/257116)
**Author:** [@Amit5](https://discuss.elastic.co/u/Amit5)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:11pm UTC](https://discuss.elastic.co/t/access-elastic-via-net/257116 "2020-12-02T22:11:54Z")
Hi everyone I need to query our elastic search and pull some data from it. I read about about couple of ways to to it. What I tried so far is to Use NEST to query elastic: var response = client.Get(10, idx =\> idx.Inde… --- ## [Elasticsearch service suddenly stop after few minutes started](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 10\ **Last updated:** [December 2, 2020, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146 "2020-12-02T22:10:38Z")
HI, i built cluster elasticserach which is 1 master, 1 logstash, 1 elastic i found this error when i start elasticservice in logstash server. and actualy i have another problem, my index always reset every 2 days(some… --- ## [Specify strict\_date\_optional\_time\_nanos format for date data type](https://discuss.elastic.co/t/specify-strict-date-optional-time-nanos-format-for-date-data-type/256246)
**Author:** [@chris\_pacb](https://discuss.elastic.co/u/chris_pacb)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 9:18pm UTC](https://discuss.elastic.co/t/specify-strict-date-optional-time-nanos-format-for-date-data-type/256246 "2020-12-02T21:18:07Z")
Hi all! I'm using "setup.template.append\_fields" in filebeat to specify extra fields. I can specify a "type" where I'm using "date" as the data type. How would I specify the "strict\_date\_optional\_time\_nanos" format. Th… --- ## [Using dot notation in POCO used with NEST search](https://discuss.elastic.co/t/using-dot-notation-in-poco-used-with-nest-search/257417)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 9:05pm UTC](https://discuss.elastic.co/t/using-dot-notation-in-poco-used-with-nest-search/257417 "2020-12-02T21:05:07Z")
I have a type of entry in elastic that is made of some imbricated properties like { "\_source": { "pipeline\_version":1.7, "agent":{ "hostname":"MyServer", "id":"a1df2f4e-6d… --- ## [Confluence Connector for internal, behind VPN Server](https://discuss.elastic.co/t/confluence-connector-for-internal-behind-vpn-server/257261)
**Author:** [@WHoopes](https://discuss.elastic.co/u/WHoopes)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 8:43pm UTC](https://discuss.elastic.co/t/confluence-connector-for-internal-behind-vpn-server/257261 "2020-12-02T20:43:02Z")
We have a Confluence Server behind a VPN, and are using the cloud hosted Elastic Workplace Search. Is it possible to run the Confluence Connector separately from the Cloud hosted ES stack, and forward data to the cloud h… --- ## [SSL/TLS failed to load, java.io.IOException: extra data given to DerValue constructor](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711)
**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 8:21pm UTC](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711 "2020-12-02T20:21:28Z")
Hello! We are setting up our first Elasticsearch cluster and hit a problem with using our private CAs. I am able to get a cert and upload it, but every time I start elasticsearch I get errs around this: java.io.IOExcep… --- ## [Show top 100 most occured errors from log](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339)
**Author:** [@5JrA2ngS8Snub](https://discuss.elastic.co/u/5JrA2ngS8Snub)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 7:18pm UTC](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339 "2020-12-02T19:18:50Z")
FYI: I'm new to using the ELK stack. I want to have more (easier) insight into the apache error log data my servers are producing. My plan is to create dashboards that will show me the information I need. One of the mo… --- ## [Cannot connect locally run Logstash to influxdb in docker container](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 9:52pm UTC](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280 "2020-12-01T21:52:05Z")
Hello, I'm running Influxdb in docker container and trying to connect from logstash which is running locally. I've enabled the influxdb-logstash plugin to connect to influxdb output { stdout { codec =\> rubydebug … [Previous page](https://discuss.elastic.co/latest.md?page=1961) [Next page](https://discuss.elastic.co/latest.md?page=1963)