# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1991

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1992

---

## [Повышение скорости индексирования](https://discuss.elastic.co/t/topic/255818)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 10:24am UTC](https://discuss.elastic.co/t/topic/255818 "2020-11-18T10:24:55Z")

</div>

Добрый день! Имею кластер - 5 bare-metal серверов с 40 ядрами CPU и 256 гб ОЗУ. Диски - NVMe. Мне нужно индексировать примерно 350000 документов в секунду (логи). Сейчас я сталкиваюсь на 150000 документов в секунду уже …

---

## [ES 7.10 shows an error when using aws module in filebeat](https://discuss.elastic.co/t/es-7-10-shows-an-error-when-using-aws-module-in-filebeat/255647)

<div class="topic-metadata">

**Author:** [@Edwin.v](https://discuss.elastic.co/u/Edwin.v)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 3:36pm UTC](https://discuss.elastic.co/t/es-7-10-shows-an-error-when-using-aws-module-in-filebeat/255647 "2020-11-18T15:36:48Z")

</div>

Elasticsearch 7.9.3 was working fine when I updated to version 7.10 . It is showing an error cfgfile/list.go:99 Error creating runner from config: Error getting config for fileset aws/s3access: Error interpreting…

---

## [Could you please delete my account?](https://discuss.elastic.co/t/could-you-please-delete-my-account/255859)

<div class="topic-metadata">

**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 3:35pm UTC](https://discuss.elastic.co/t/could-you-please-delete-my-account/255859 "2020-11-18T15:35:00Z")

</div>

Dear Elastic team, I don't need this account anymore and I would like to delete it. Could you please do that? Thanks in advance.

---

## [ElasticSearch: RestHighLevelClient is getting timeout exception if client API is idle for some time](https://discuss.elastic.co/t/elasticsearch-resthighlevelclient-is-getting-timeout-exception-if-client-api-is-idle-for-some-time/255442)

<div class="topic-metadata">

**Author:** [@john\_jayaraj](https://discuss.elastic.co/u/john_jayaraj)\
**Replies:** 7\
**Last updated:** [November 18, 2020, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-resthighlevelclient-is-getting-timeout-exception-if-client-api-is-idle-for-some-time/255442 "2020-11-18T15:32:45Z")

</div>

I have an REST API with spring boot and RestHighLevelClient to retrieve data from ELasticSearch(AWS-ElasticSearch) and this client API is deployed in OpenShift Container. normally this client API will respond back with…

---

## [Best ways to get into the code of elasticsearch?](https://discuss.elastic.co/t/best-ways-to-get-into-the-code-of-elasticsearch/255844)

<div class="topic-metadata">

**Author:** [@qohelet](https://discuss.elastic.co/u/qohelet)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 3:31pm UTC](https://discuss.elastic.co/t/best-ways-to-get-into-the-code-of-elasticsearch/255844 "2020-11-18T15:31:55Z")

</div>

I'm a FOSS-enthusiast and started to fiddle around with elasticsearch. I like the implementation and the possibilities on how to set up the queries. Despite developing Java for quite a while I haven't worked with Gradl…

---

## [Error 1053: “The service did not respond in a timely fashion” when attempting to start winlogbeat service with MSI package](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802)

<div class="topic-metadata">

**Author:** [@mackov83](https://discuss.elastic.co/u/mackov83)\
**Replies:** 4\
**Last updated:** [November 18, 2020, 3:08pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service-with-msi-package/255802 "2020-11-18T15:08:05Z")

</div>

I have just started working with Winlogbeat as a forwarder to Graylog (Logstash). I was able to get this working perfectly fine with the .zip file. In order to simplify the deployment, I wanted to use the .msi file, and…

---

## [Unable to implement ssl\_enable in Logstash](https://discuss.elastic.co/t/unable-to-implement-ssl-enable-in-logstash/255838)

<div class="topic-metadata">

**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 3:00pm UTC](https://discuss.elastic.co/t/unable-to-implement-ssl-enable-in-logstash/255838 "2020-11-18T15:00:00Z")

</div>

I have a Nxlog agent sending windows event with om\_tcp module to a Logstash without errors. Now I am trying to implement more secure forwarding with SSL, there was no issues with the Nxlog agent, just configured with th…

---

## [ELasticsearch - ILM Policy](https://discuss.elastic.co/t/elasticsearch-ilm-policy/255856)

<div class="topic-metadata">

**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 2:58pm UTC](https://discuss.elastic.co/t/elasticsearch-ilm-policy/255856 "2020-11-18T14:58:47Z")

</div>

Hi There, I have a scenario to implement in Elastic cluster. I have 12 node elastic cluster 2 - coordinating Nodes 4 - Hot Data Nodes 3 - Warm data Nodes 3 - Master Nodes Im trying to implement ILM policy based on …

---

## [Kibana plugin search elastic](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504)

<div class="topic-metadata">

**Author:** [@omerf](https://discuss.elastic.co/u/omerf)\
**Replies:** 5\
**Last updated:** [November 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-plugin-search-elastic/255504 "2020-11-18T14:55:10Z")

</div>

I am creating a plugin in Kibana 7.0.1, to search through api, with an http request through server.route. In the new kibana plugins I can see: \<navigation.ui.TopNavMenu appName={PLUGIN\_ID} showSearchBar={true} useDe…

---

## [HTTP output failure](https://discuss.elastic.co/t/http-output-failure/255858)

<div class="topic-metadata">

**Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 2:53pm UTC](https://discuss.elastic.co/t/http-output-failure/255858 "2020-11-18T14:53:18Z")

</div>

Hi all, I'm using logstash 7.10.0, I made the config file as input { stdin{} } output{ http { url =\> "{URL\_SET\_CLOG}" format =\> "json" http\_method =\> "post" headers =\> \["Authorization", "Bearer {CLOG\_TOKEN}…

---

## [Need Robust Grok filter for nginx error log format](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 4\
**Last updated:** [November 18, 2020, 2:40pm UTC](https://discuss.elastic.co/t/need-robust-grok-filter-for-nginx-error-log-format/255630 "2020-11-18T14:40:04Z")

</div>

We are facing an issue while filtering nginx error log format ... suppose below are two log snippet from the error log 2020/11/17 13:04:05 \[error\] 32237#32237: \*4185303 open() "/etc/nginx/html/favicon.ico" failed (2: …

---

## [\[kbn/optimizer\] running optimizer for typescript plugin result in \<exports is not defined\> error on Kibana 7.9](https://discuss.elastic.co/t/kbn-optimizer-running-optimizer-for-typescript-plugin-result-in-exports-is-not-defined-error-on-kibana-7-9/255612)

<div class="topic-metadata">

**Author:** [@8wlgns](https://discuss.elastic.co/u/8wlgns)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 2:22pm UTC](https://discuss.elastic.co/t/kbn-optimizer-running-optimizer-for-typescript-plugin-result-in-exports-is-not-defined-error-on-kibana-7-9/255612 "2020-11-18T14:22:41Z")

</div>

Hello? I'm kind of a newbie in developing external kibana typescript plugin. I try to modify typescripts code and then running optimizer api. (https://github.com/elastic/kibana/tree/master/packages/kbn-optimizer) It se…

---

## [Read multiple sqlite .db files in logstash](https://discuss.elastic.co/t/read-multiple-sqlite-db-files-in-logstash/255854)

<div class="topic-metadata">

**Author:** [@Deepak\_Kumar3](https://discuss.elastic.co/u/Deepak_Kumar3)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 2:20pm UTC](https://discuss.elastic.co/t/read-multiple-sqlite-db-files-in-logstash/255854 "2020-11-18T14:20:01Z")

</div>

hi, trying to read sqlite .db files using jdbc plugin and here is the configuration file for logstash below. input { jdbc { jdbc\_driver\_library =\> "D:/etc/driver/sqlite-jdbc-3.32.3.2.jar" jdbc\_driver\_class…

---

## [Machine Learning - Index migration in progress](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837)

<div class="topic-metadata">

**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 2:09pm UTC](https://discuss.elastic.co/t/machine-learning-index-migration-in-progress/255837 "2020-11-18T14:09:16Z")

</div>

Hi all, I upgraded my elk license to Trial in order to work with the Machine Learning feature. But since 2 days ago, it only appears this message: "Index migration in progress Indices related to Machine Learning are c…

---

## [Logstash-output-syslog plugin sends incorrect facility](https://discuss.elastic.co/t/logstash-output-syslog-plugin-sends-incorrect-facility/255734)

<div class="topic-metadata">

**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-sends-incorrect-facility/255734 "2020-11-18T13:18:57Z")

</div>

Linux Debian 10.6 Logstash 7.10.0 OpenJDK 11.0.8+10 rsyslogd 8.1901.0 plugin logstash-output-syslog example.conf: input { stdin {} } output { stdout {} syslog { id =\> "syslog\_output" appname =\> "logsta…

---

## [How to increase the Heartbeat I/O Timeout value](https://discuss.elastic.co/t/how-to-increase-the-heartbeat-i-o-timeout-value/255719)

<div class="topic-metadata">

**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 7:12pm UTC](https://discuss.elastic.co/t/how-to-increase-the-heartbeat-i-o-timeout-value/255719 "2020-11-17T19:12:30Z")

</div>

Team, we are getting below DOwn alert for one of the uptime monitor we configured, actually the site is not down ,however we got these Get http://xxxxxxxx:5006/aaaaaa\_bbbbb\_ccccc: http: request timed out while waiting …

---

## [Unable to login to kibana dashboard](https://discuss.elastic.co/t/unable-to-login-to-kibana-dashboard/255786)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 5\
**Last updated:** [November 18, 2020, 12:26pm UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana-dashboard/255786 "2020-11-18T12:26:46Z")

</div>

I was deploying elasticsearch and kibana by using the following document: I am not able to login to kibana dashboard even after the port forwarding also. Using the below yaml for kibana. apiVersion: kibana.k8s.elasti…

---

## [Logstash S3 input plugin - prefix usage](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-usage/255819)

<div class="topic-metadata">

**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-prefix-usage/255819 "2020-11-18T10:44:59Z")

</div>

Hi - I'm using the logstash S3 input plugin - and need to implement "backup\_add\_prefix" - so that I can skip processed files - to improve performance. I assumed the first step to implementing this, was to get the prefix…

---

## [Elastic search Kubernetes cluster\_uuid \_na\_](https://discuss.elastic.co/t/elastic-search-kubernetes-cluster-uuid-na/255756)

<div class="topic-metadata">

**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 12:04pm UTC](https://discuss.elastic.co/t/elastic-search-kubernetes-cluster-uuid-na/255756 "2020-11-18T12:04:17Z")

</div>

I have deployed the elastic search in GKE. I have scaled the elastic search manually and faced a 503 error when accessing the index count. I need to get the data stored in the persistence disk. I am unable to find the …

---

## [Logstash-output-syslog sends invalid json message from winlogbeat agent](https://discuss.elastic.co/t/logstash-output-syslog-sends-invalid-json-message-from-winlogbeat-agent/255754)

<div class="topic-metadata">

**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\
**Replies:** 0\
**Last updated:** [November 17, 2020, 7:05pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-sends-invalid-json-message-from-winlogbeat-agent/255754 "2020-11-17T19:05:01Z")

</div>

Linux Debian 10.6 Logstash 7.10.0 OpenJDK 11.0.8+10 rsyslogd 8.1901.0 plugin logstash-output-syslog winlogbeat 7.10.0 logstash output.conf: output { elasticsearch { .... } syslog { id =\> "syslog\_output"…

---

## [Gauge percentage mode shows 1% after upgrade](https://discuss.elastic.co/t/gauge-percentage-mode-shows-1-after-upgrade/253434)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 3\
**Last updated:** [November 18, 2020, 11:58am UTC](https://discuss.elastic.co/t/gauge-percentage-mode-shows-1-after-upgrade/253434 "2020-11-18T11:58:44Z")

</div>

Hi, I just upgraded my stack (7.2.1 --\> 7.9.2) and one of my visualizations changed from showing 100% to 1%. The value is either 0 or 1 (range is set to that), nothing changed besides upgrading. Any suggestion on how ca…

---

## [Creating watch for kibana to get only warning](https://discuss.elastic.co/t/creating-watch-for-kibana-to-get-only-warning/255675)

<div class="topic-metadata">

**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 11:10am UTC](https://discuss.elastic.co/t/creating-watch-for-kibana-to-get-only-warning/255675 "2020-11-18T11:10:06Z")

</div>

I am creating a script in watch to get an alert if my warning count increases more than five. in the image you can see that i get the count alert of all the data in the field (event \_type) has been exceeded more than …

---

## [Use Cisco MIB to fetch CPU and Memory using Logstash](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445)

<div class="topic-metadata">

**Author:** [@Ajay\_Singh2](https://discuss.elastic.co/u/Ajay_Singh2)\
**Replies:** 4\
**Last updated:** [November 18, 2020, 11:09am UTC](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445 "2020-11-18T11:09:38Z")

</div>

I have Cisco Switches and Routers. I have download their CPU and memory MIB's which are in .my format. How can i use logstash to utilize these MIB to fetch CPU and Memory status of cisco switches and routers ?

---

## [What is the username and password to be entered](https://discuss.elastic.co/t/what-is-the-username-and-password-to-be-entered/255825)

<div class="topic-metadata">

**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 11:09am UTC](https://discuss.elastic.co/t/what-is-the-username-and-password-to-be-entered/255825 "2020-11-18T11:09:00Z")

</div>

xpack.notification.email.account: gmail\_account: profile: gmail smtp: host: smtp.gmail.com port: 587 user: \*\*\*\*\* password: \*\*\*\*\* auth: true #starttls.required: true in the above , what is the username and passw…

---

## [Kibana.yml file in managed Elastic Stack](https://discuss.elastic.co/t/kibana-yml-file-in-managed-elastic-stack/255814)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 11:02am UTC](https://discuss.elastic.co/t/kibana-yml-file-in-managed-elastic-stack/255814 "2020-11-18T11:02:44Z")

</div>

Hello, where can I find the Kibana.yml file in a managed Elastic Stack? I'd like to change the configuration for 'xpack.security.sessionTimeout' in order to prevent session logouts. Thanks!

---

## [Logstash S3 output plugin with AWS emulation with Localstack](https://discuss.elastic.co/t/logstash-s3-output-plugin-with-aws-emulation-with-localstack/255822)

<div class="topic-metadata">

**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\
**Replies:** 0\
**Last updated:** [November 18, 2020, 10:54am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-with-aws-emulation-with-localstack/255822 "2020-11-18T10:54:58Z")

</div>

Hi All, after I spent a lot of time configuring and connecting Logstash to Localstack, I had many errors and no guide to follow . In my case I have 2 dockers , one is logstash docker with S3 output pluging , second dock…

---

## [Change format json file to metrics with Logstash and save it in Victoria Metrics](https://discuss.elastic.co/t/change-format-json-file-to-metrics-with-logstash-and-save-it-in-victoria-metrics/255732)

<div class="topic-metadata">

**Author:** [@recepbalibey](https://discuss.elastic.co/u/recepbalibey)\
**Replies:** 0\
**Last updated:** [November 17, 2020, 3:56pm UTC](https://discuss.elastic.co/t/change-format-json-file-to-metrics-with-logstash-and-save-it-in-victoria-metrics/255732 "2020-11-17T15:56:07Z")

</div>

Here is only one example from my JSON file \>\> {"host":"ABCDEFASD","groups":\["ABVD","TEST"\],"applications": \["NETWORK"\],"itemid":143172,"name":"Operational status of interface Se0/1/0:17","clock":1604283792,"ns":926563…

---

## [Unable to setup elastic cluster](https://discuss.elastic.co/t/unable-to-setup-elastic-cluster/255794)

<div class="topic-metadata">

**Author:** [@praveencdcx](https://discuss.elastic.co/u/praveencdcx)\
**Replies:** 1\
**Last updated:** [November 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/unable-to-setup-elastic-cluster/255794 "2020-11-18T10:44:58Z")

</div>

Hello, Need help !! I am trying to setup a 3 Master,Data nodes and 1 ingest node. I have done the below configuration. elasticsearch service is starting but i dont see any logs in elasticsearch.log file. \[INFO \]\[o.e.…

---

## [Metricbeat service metricset doesn't work on Centos/RedHat 8.x](https://discuss.elastic.co/t/metricbeat-service-metricset-doesnt-work-on-centos-redhat-8-x/255346)

<div class="topic-metadata">

**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 9:46am UTC](https://discuss.elastic.co/t/metricbeat-service-metricset-doesnt-work-on-centos-redhat-8-x/255346 "2020-11-18T09:46:03Z")

</div>

I deployed a metricbeat 7.10.0 on a Centos 8.0 VM and on RedHat 8.2 VM. I defined a metricbeat system module as follows: #module system, metriceset service - module: system metricsets: - service period: 30s s…

---

## [Mapping](https://discuss.elastic.co/t/mapping/255689)

<div class="topic-metadata">

**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 9:36am UTC](https://discuss.elastic.co/t/mapping/255689 "2020-11-18T09:36:58Z")

</div>

Logstash creates datestamped indexes, syslog-2020.11.17 etc, so I have an index for each day. I use kv filter to parse data. The syslog source sends different parameters depending on event type, so the index pattern Fi…

[Previous page](https://discuss.elastic.co/latest.md?page=1990)

[Next page](https://discuss.elastic.co/latest.md?page=1992)
