# Latest **URL:** https://discuss.elastic.co/latest.md?page=1981 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1982 --- ## [KIbana Index always reset suddenly](https://discuss.elastic.co/t/kibana-index-always-reset-suddenly/256298)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 10\ **Last updated:** [November 24, 2020, 4:28am UTC](https://discuss.elastic.co/t/kibana-index-always-reset-suddenly/256298 "2020-11-24T04:28:42Z")
Hello, i want to ask why my data in kibana always reset with randomly time. ( i noticed this when i open discover, the data date always reset) i've been searching for long time and yet i still don't get the solution. … --- ## ["Caused by: org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\]](https://discuss.elastic.co/t/caused-by-org-elasticsearch-common-breaker-circuitbreakingexception-parent/256370)
**Author:** [@uttam.anand](https://discuss.elastic.co/u/uttam.anand)\ **Replies:** 3\ **Last updated:** [November 24, 2020, 4:24am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-common-breaker-circuitbreakingexception-parent/256370 "2020-11-24T04:24:39Z")
Hi Guys, I am facing the below issue since few days now -: "Caused by: org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\\] would be \[24876638648/23.1gb\], w… --- ## [After adding the filter, executing the query will cause the kibana container to restart](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430)
**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\ **Replies:** 7\ **Last updated:** [November 24, 2020, 3:06am UTC](https://discuss.elastic.co/t/after-adding-the-filter-executing-the-query-will-cause-the-kibana-container-to-restart/256430 "2020-11-24T03:06:21Z")
I hide the unnecessary domain name display kibana completes the error: Error: Request to Elasticsearch failed: {"error":{}} at http://kibana.platform.abc.cn/bundles/commons.bundle.js:3:4900279 at Function.\_mo… --- ## [Configure Packetbeat prior to building MacOS pkg](https://discuss.elastic.co/t/configure-packetbeat-prior-to-building-macos-pkg/256204)
**Author:** [@AaronWF](https://discuss.elastic.co/u/AaronWF)\ **Replies:** 5\ **Last updated:** [November 24, 2020, 2:57am UTC](https://discuss.elastic.co/t/configure-packetbeat-prior-to-building-macos-pkg/256204 "2020-11-24T02:57:39Z")
I am building beats on MacOS for the native integration feature, I have successfully built & deployed auditbeat, and during the build process I was able to find the file which the build was using in the template. File l… --- ## [Logstash s3 input plugin: not indexing files under individual folder of bucket using prefix option](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-indexing-files-under-individual-folder-of-bucket-using-prefix-option/256313)
**Author:** [@Ravi\_Kumar\_Reddy](https://discuss.elastic.co/u/Ravi_Kumar_Reddy)\ **Replies:** 0\ **Last updated:** [November 23, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-indexing-files-under-individual-folder-of-bucket-using-prefix-option/256313 "2020-11-23T07:34:11Z")
s3 bucket : elk folders: syslog, errorlog etc.. filepattern: syslog- input { s3 { access\_key\_id =\> "" secret\_access\_key =\> "" bucket =\> "elk" region =\> "eu-central-1" prefix =\> "syslog/syslog-" additional\_settin… --- ## [Logstashの「LEAK: ByteBuf」に関するエラーについて](https://discuss.elastic.co/t/logstash-leak-bytebuf/256045)
**Author:** [@ueba-dev-i](https://discuss.elastic.co/u/ueba-dev-i)\ **Replies:** 1\ **Last updated:** [November 24, 2020, 2:26am UTC](https://discuss.elastic.co/t/logstash-leak-bytebuf/256045 "2020-11-24T02:26:47Z")
Logstashにおいて、高負荷な状態が継続し、以下アラートが発出致しました。 \[ERROR\]\[io.netty.util.ResourceLeakDetector\] LEAK: ByteBuf.release() was not called before it's garbage-collected. See http://netty.io/wiki/reference-counted-objects.html for more… --- ## [Kibana training - looking for advanced users materials](https://discuss.elastic.co/t/kibana-training-looking-for-advanced-users-materials/256418)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 12:01am UTC](https://discuss.elastic.co/t/kibana-training-looking-for-advanced-users-materials/256418 "2020-11-24T00:01:11Z")
Hey All, Looking for Kibana training materials for advanced users. What can you recommend? Thank you! --- ## [Able to attach more than one ILM policy to an index](https://discuss.elastic.co/t/able-to-attach-more-than-one-ilm-policy-to-an-index/256419)
**Author:** [@sknayar](https://discuss.elastic.co/u/sknayar)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 12:00am UTC](https://discuss.elastic.co/t/able-to-attach-more-than-one-ilm-policy-to-an-index/256419 "2020-11-24T00:00:02Z")
Once an index started moving through the phases of an ILM policy I can attach a second policy to the same index. Once this happens I cannot remove ILM policy from the index. I was able to attach the original policy back… --- ## [Help understanding a gap in my trace](https://discuss.elastic.co/t/help-understanding-a-gap-in-my-trace/255889)
**Author:** [@bcollins](https://discuss.elastic.co/u/bcollins)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 11:50pm UTC](https://discuss.elastic.co/t/help-understanding-a-gap-in-my-trace/255889 "2020-11-23T23:50:18Z")
I have attached a picture of a trace between two microservices. I am wonder why there is such a big gap between when the request is fired and the other service processes it. The second service is processing a result extr… --- ## [Setup Elastic Apm .Net Agent with .Net Core 3 Console Application](https://discuss.elastic.co/t/setup-elastic-apm-net-agent-with-net-core-3-console-application/255435)
**Author:** [@rainbowkid11](https://discuss.elastic.co/u/rainbowkid11)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 11:50pm UTC](https://discuss.elastic.co/t/setup-elastic-apm-net-agent-with-net-core-3-console-application/255435 "2020-11-23T23:50:01Z")
Kibana version: 7.10 Elasticsearch version: 7.10 APM Server version: 7.10 APM Agent language and version: .Net 1.7.0 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and… --- ## [Master Vs Data Node selection](https://discuss.elastic.co/t/master-vs-data-node-selection/256414)
**Author:** [@AChopra](https://discuss.elastic.co/u/AChopra)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 11:06pm UTC](https://discuss.elastic.co/t/master-vs-data-node-selection/256414 "2020-11-23T23:06:03Z")
I have an oracle 11g instance which roughly has around 5TB of data on it. I plan to use the ELK stack .. use logstash to pump data onto elasticsearch and then use my java application to connect to the elasticsearch and … --- ## [Boost only if multiple criteria are met](https://discuss.elastic.co/t/boost-only-if-multiple-criteria-are-met/256412)
**Author:** [@felipeecst](https://discuss.elastic.co/u/felipeecst)\ **Replies:** 0\ **Last updated:** [November 23, 2020, 9:59pm UTC](https://discuss.elastic.co/t/boost-only-if-multiple-criteria-are-met/256412 "2020-11-23T21:59:07Z")
I have the following ElasticSearch query: query: { bool: { must: \[ { match\_all: {} } \], should: \[ { term: { company: { value: 'company', … --- ## [Snapshot automation - ES Version 5.2](https://discuss.elastic.co/t/snapshot-automation-es-version-5-2/256386)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 9:58pm UTC](https://discuss.elastic.co/t/snapshot-automation-es-version-5-2/256386 "2020-11-23T21:58:29Z")
Hi Team, I'm trying to automate snapshots creation and deletion using "snapshot life cycle management", how ever when I tried to run create slm policy using API POST \_slm/policy, I'm getting error as below {"error":{"r… --- ## [Migrating Elasticsearch cluster (elastic.co) to another region](https://discuss.elastic.co/t/migrating-elasticsearch-cluster-elastic-co-to-another-region/256328)
**Author:** [@Chen\_Levi](https://discuss.elastic.co/u/Chen_Levi)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 9:51pm UTC](https://discuss.elastic.co/t/migrating-elasticsearch-cluster-elastic-co-to-another-region/256328 "2020-11-23T21:51:35Z")
Hi We have an ElasticSearch cluster on ElastiCloud on one region and we want to migrate it to another region. we saw there are few options of doing so, and one of them which seems to be the easiest was do it using Snap… --- ## [Elasticsearch 7.10.0 not start Ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-10-0-not-start-ubuntu-20-04/256329)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 9:50pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-0-not-start-ubuntu-20-04/256329 "2020-11-23T21:50:58Z")
My elasticsearch 7.8.1 on my laptop was automatically updated to 7.10.0. I wanted to roll back to the previous version and now I have messed up. Elasticsearch does not even start successfully. Anybody knows how to compl… --- ## [Query about lifecycle management](https://discuss.elastic.co/t/query-about-lifecycle-management/256292)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 9:48pm UTC](https://discuss.elastic.co/t/query-about-lifecycle-management/256292 "2020-11-23T21:48:41Z")
I have a years worth of daily indexes that I am cleaning up by reindexing. Reading the "FM" I find that there appears to be a much better way to manage indexes other then blindly creating a new index each day (I was won… --- ## [Multi-layer query + limiting results of a leaf query](https://discuss.elastic.co/t/multi-layer-query-limiting-results-of-a-leaf-query/256378)
**Author:** [@felipeecst](https://discuss.elastic.co/u/felipeecst)\ **Replies:** 0\ **Last updated:** [November 23, 2020, 3:54pm UTC](https://discuss.elastic.co/t/multi-layer-query-limiting-results-of-a-leaf-query/256378 "2020-11-23T15:54:25Z")
Hi there, I am new to ElasticSearch and still not much familiar with the capabilities of the query language. Am I trying to perform a specific query and would appreciate some help on how to build it, even the answer is … --- ## [How to manually delete indexes with elasticsearch running](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392)
**Author:** [@bshaw](https://discuss.elastic.co/u/bshaw)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 8:38pm UTC](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392 "2020-11-23T20:38:23Z")
Hello, I ran into an issue this morning after leaving a test running over the weekend. The test generated more data then available space in my elasticsearch data partition. I am running 7.7.1 on a single node in a doc… --- ## [Chart: Put multiple metrix on differenet axis](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305)
**Author:** [@Emiliani](https://discuss.elastic.co/u/Emiliani)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 8:31pm UTC](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305 "2020-11-23T20:31:54Z")
I have added multiple metrics to my chart. And mutiple axis. How can I assign different metric to different axis Seems I was able to do it few mothns ago, but now I can't This is Kibana 6.8.12 --- ## [Set Master node ID for discovery](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193)
**Author:** [@albbapm](https://discuss.elastic.co/u/albbapm)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 8:17pm UTC](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193 "2020-11-23T20:17:30Z")
Long story short, I screwed up in the process of migrating to a new datastore and removed the original one from the config file before I was ready causing some issues. Luckily, this is a new cluster build and not yet pr… --- ## [While reindexing can I add geoip info to a record](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 7:57pm UTC](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396 "2020-11-23T19:57:12Z")
I am using a script to tidy up old indexes and get all the data consistent. Later indexes have geoip information for ip addresses but older ones don't. I can't figure out how to explicitly invoke a geoip lookup in a sc… --- ## [Add an image to kibana header](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271)
**Author:** [@namakdoon](https://discuss.elastic.co/u/namakdoon)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 7:29pm UTC](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271 "2020-11-23T19:29:33Z")
hi,how and where can i add an image to the top of kibana and can i also change the top menu of it? --- ## [Vega tree graph in Kibana: how to reference the fields from different indices?](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114)
**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 7:01pm UTC](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114 "2020-11-23T19:01:32Z")
Hi I am following this example and I am having an issue linking the fields of the indices. I have two indices one for nodes, and one for the links between them. My indices as follows: nodes: { "\_index" … --- ## [Visualising Nested Objects in Kibana](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643)
**Author:** [@weiyentan](https://discuss.elastic.co/u/weiyentan)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 6:59pm UTC](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643 "2020-11-23T18:59:44Z")
Hi, I am exploring using ELK and imported in this json document: { "\_index": "system-inventory-\[version\]}-2020.11.07", "\_type": "\_doc", "\_id": "O0X1o3UBD7PZ5Lh--gIu", "\_version": 1, "\_score": null, "\_source… --- ## [Lens filling](https://discuss.elastic.co/t/lens-filling/256383)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 6:58pm UTC](https://discuss.elastic.co/t/lens-filling/256383 "2020-11-23T18:58:36Z")
What does this peak mean at current settings? --- ## [Add a condition on ML](https://discuss.elastic.co/t/add-a-condition-on-ml/255358)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 6:54pm UTC](https://discuss.elastic.co/t/add-a-condition-on-ml/255358 "2020-11-23T18:54:35Z")
Hello , I m using ML plugin Kibana 7.4. I have a question about the following Case: We have a list of Event. We are reassuring the number of occurrence of these event. All the event are important But the events are … --- ## [Kibana Index patter issue with alias](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086)
**Author:** [@ananta05](https://discuss.elastic.co/u/ananta05)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 6:29pm UTC](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086 "2020-11-23T18:29:19Z")
I am working on existing index pattern where field alias does not work when used as a part of filter. I have tried below things so far Index pattern refresh try to fetch the query sent from Kibana and it has \[object o… --- ## [One of three pods stop but Elasticsearch thinks it's still running](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158)
**Author:** [@lahpman](https://discuss.elastic.co/u/lahpman)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 5:44pm UTC](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158 "2020-11-23T17:44:29Z")
Hey y'all, We are running Elasticsearch 7.9.3 with the help of helm-charts/elasticsearch and lately we have been having a pod go down out of the blue. When I check on the health of Elasticsearch via CURL \_cluster/health… --- ## [Index Template Data Stream](https://discuss.elastic.co/t/index-template-data-stream/255086)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 5:33pm UTC](https://discuss.elastic.co/t/index-template-data-stream/255086 "2020-11-23T17:33:55Z")
Hi I have an index template that is assigned to a couple of index patterns, however, appears to of accidentally been set up to use data streams. How can I convert this back to use indices as it is failing to process log… --- ## [Can saved objects be read-only?](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206)
**Author:** [@south](https://discuss.elastic.co/u/south)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 5:14pm UTC](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206 "2020-11-23T17:14:00Z")
Hi, I am looking for a way to make some of the saved objects(dashboard, visualization, etc) in a space to be read-only so those saved objects can not be edited by the user. The user has multiple dashbards and visualizat… [Previous page](https://discuss.elastic.co/latest.md?page=1980) [Next page](https://discuss.elastic.co/latest.md?page=1982)