# Latest **URL:** https://discuss.elastic.co/latest.md?page=796 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 797 --- ## [FATAL Error: \[config validation of \[elasticsearch\].username\]](https://discuss.elastic.co/t/fatal-error-config-validation-of-elasticsearch-username/324714)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 0\ **Last updated:** [February 4, 2023, 3:06pm UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-elasticsearch-username/324714 "2023-02-04T15:06:44Z")
Hello Team, I had Elasticsearch, Logstash and Kibana v7.16.2 with xpack security based login enabled, So today i had upgraded my ELK versions to 8.6.1 using my docker-compose file, but when i start the kibana container … --- ## [ILM: empty indices didn't age-out](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980)
**Author:** [@Adam\_Lin](https://discuss.elastic.co/u/Adam_Lin)\ **Replies:** 7\ **Last updated:** [February 4, 2023, 2:40pm UTC](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980 "2023-02-04T14:40:29Z")
Hi, I create an ILM policy and apply it to my index template, everything works fine at first until after a day, there will be an empty index left Here is my ILM policy { "test-policy" : { "version" : 4, "mod… --- ## [Winlogbeat to kafka](https://discuss.elastic.co/t/winlogbeat-to-kafka/324710)
**Author:** [@hasan.idriss](https://discuss.elastic.co/u/hasan.idriss)\ **Replies:** 0\ **Last updated:** [February 4, 2023, 1:00pm UTC](https://discuss.elastic.co/t/winlogbeat-to-kafka/324710 "2023-02-04T13:00:53Z")
hi everyone, I am trying to send data using wingbeat to Kafka to Logstash to elastic. but the winlogbeat is not shipping any data to kafka topic. when I started the winlogbeat service it created the topic but no data … --- ## [Failed to load SSL configuration](https://discuss.elastic.co/t/failed-to-load-ssl-configuration/324704)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 1\ **Last updated:** [February 4, 2023, 9:59am UTC](https://discuss.elastic.co/t/failed-to-load-ssl-configuration/324704 "2023-02-04T09:59:50Z")
Hello Team, I had elasticsearch:7.16.2 version with xpack security based login enabled, So today i had changed elasticsearch and kibna versions to 8.6.1 in my docker-compose file, but it fails with below errors when i s… --- ## [JDBC Plugin - Missing Converter handling for full class name=com.ibm.db2.jcc.am.dc when parsing xml datatype in DB2](https://discuss.elastic.co/t/jdbc-plugin-missing-converter-handling-for-full-class-name-com-ibm-db2-jcc-am-dc-when-parsing-xml-datatype-in-db2/324631)
**Author:** [@khannaja](https://discuss.elastic.co/u/khannaja)\ **Replies:** 2\ **Last updated:** [February 4, 2023, 6:09am UTC](https://discuss.elastic.co/t/jdbc-plugin-missing-converter-handling-for-full-class-name-com-ibm-db2-jcc-am-dc-when-parsing-xml-datatype-in-db2/324631 "2023-02-04T06:09:12Z")
New to Logstash(ver 8.6.0), need to parse xml data type from db2 database. Keep getting "Missing Converter handling for full class" error. Read through most discussion post on this subject and tried a few things withou… --- ## [SIGSEGV JVM Crash](https://discuss.elastic.co/t/sigsegv-jvm-crash/322812)
**Author:** [@mafaul](https://discuss.elastic.co/u/mafaul)\ **Replies:** 18\ **Last updated:** [February 4, 2023, 5:01am UTC](https://discuss.elastic.co/t/sigsegv-jvm-crash/322812 "2023-02-04T05:01:37Z")
When using Elastic APM java agent, the JVM crashes unexpectedly. Tried using different AWS EC2 instances, happens on AMD and Graviton CPUs. Happens with JVMs with small (4GB) and large (60GB) heaps. Kibana version: 7.… --- ## [How to set maximum degree scale in x-axis](https://discuss.elastic.co/t/how-to-set-maximum-degree-scale-in-x-axis/324390)
**Author:** [@justseeyouagain](https://discuss.elastic.co/u/justseeyouagain)\ **Replies:** 10\ **Last updated:** [February 4, 2023, 3:22am UTC](https://discuss.elastic.co/t/how-to-set-maximum-degree-scale-in-x-axis/324390 "2023-02-04T03:22:00Z")
Hello, I am using vega-lite to finish my graph, but meet something confusion that how to set maximum degree scale in x-axis, just look at my pic { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "… --- ## [Can eland (python) filter on datetime64 fields?](https://discuss.elastic.co/t/can-eland-python-filter-on-datetime64-fields/324698)
**Author:** [@mike\_haberman](https://discuss.elastic.co/u/mike_haberman)\ **Replies:** 0\ **Last updated:** [February 4, 2023, 2:07am UTC](https://discuss.elastic.co/t/can-eland-python-filter-on-datetime64-fields/324698 "2023-02-04T02:07:32Z")
I get a NotImplementedError error for when I try to mask a field that's a datetime field: s\_t = pd.to\_datetime("2023-02-03T23:28:00", utc=True) # UTC t\_m = (df\['start'\] \>= s\_t) File /opt/conda/lib/python3.9/site-packag… --- ## [Create generic BoolQueryDescriptor with a generic type](https://discuss.elastic.co/t/create-generic-boolquerydescriptor-with-a-generic-type/324696)
**Author:** [@chachew](https://discuss.elastic.co/u/chachew)\ **Replies:** 0\ **Last updated:** [February 4, 2023, 12:43am UTC](https://discuss.elastic.co/t/create-generic-boolquerydescriptor-with-a-generic-type/324696 "2023-02-04T00:43:31Z")
Forgive me im new to Elasticsearch, NEST and dont really code in C# much. Im looking to create a helper class that i can store all my NEST descriptor helper functions in but im getting some errors in the code format. Its… --- ## [Write base64 decoded field from JSON message to a file](https://discuss.elastic.co/t/write-base64-decoded-field-from-json-message-to-a-file/324505)
**Author:** [@Arinjay\_Jain](https://discuss.elastic.co/u/Arinjay_Jain)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 10:28pm UTC](https://discuss.elastic.co/t/write-base64-decoded-field-from-json-message-to-a-file/324505 "2023-02-03T22:28:19Z")
Hi Team, I have the following logstash pipeline configuration. input { tcp { port =\> 5102 codec =\> json } } filter { json { source =\> "message" remove\_field =\> \[ "message" \] } … --- ## [Invalid credentials](https://discuss.elastic.co/t/invalid-credentials/324482)
**Author:** [@Jorge\_Nunes](https://discuss.elastic.co/u/Jorge_Nunes)\ **Replies:** 2\ **Last updated:** [February 2, 2023, 10:43pm UTC](https://discuss.elastic.co/t/invalid-credentials/324482 "2023-02-02T22:43:54Z")
I am using the right credentials. My instance is deployed in "https://cloud.elastic.co/deployments/" I just need to access the information I installed to enterprise-search from elastic on my machine, from localhost. Do… --- ## [Elastic 7.17.9, 8.5.0 and 8.6.1 Security Update](https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 2:30pm UTC](https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661 "2023-02-03T14:30:50Z")
Kibana authenticated Denial of Service issue (ESA-2023-02) A flaw(CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to to perform a request that crashes th… --- ## [Beats output to logstash using SSL and Cert Errors](https://discuss.elastic.co/t/beats-output-to-logstash-using-ssl-and-cert-errors/324689)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 8:28pm UTC](https://discuss.elastic.co/t/beats-output-to-logstash-using-ssl-and-cert-errors/324689 "2023-02-03T20:28:53Z")
I am testing SSL from 7.x Beats clients to logstash. Logstash is configured for a wildcard cert to my domain, call it \*.acme.com. Connection works fine if Beats is configured to use a FQDN entry in the output, like log… --- ## [Grokparsefailure in processing a log file](https://discuss.elastic.co/t/grokparsefailure-in-processing-a-log-file/324682)
**Author:** [@Indrajit](https://discuss.elastic.co/u/Indrajit)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 7:54pm UTC](https://discuss.elastic.co/t/grokparsefailure-in-processing-a-log-file/324682 "2023-02-03T19:54:15Z")
While processing a large log file with logstash, we are getting grokparsefailure & dateparsefailure. We would like to know which line in the log file is causing the failure so that we can look into more details with gro… --- ## [JSON format Decode error](https://discuss.elastic.co/t/json-format-decode-error/324652)
**Author:** [@djrshn2346](https://discuss.elastic.co/u/djrshn2346)\ **Replies:** 3\ **Last updated:** [February 3, 2023, 7:51pm UTC](https://discuss.elastic.co/t/json-format-decode-error/324652 "2023-02-03T19:51:49Z")
I am using : input { file { id =\> "my\_lt\_log" path =\> "/logs/logtransformer.log" type =\> "log" start\_position =\> "beginning" } } filter { if \[type\] == "log" { mutate { … --- ## [One index by dataset?](https://discuss.elastic.co/t/one-index-by-dataset/324684)
**Author:** [@m4rk](https://discuss.elastic.co/u/m4rk)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 7:31pm UTC](https://discuss.elastic.co/t/one-index-by-dataset/324684 "2023-02-03T19:31:22Z")
I need to store multiple datasets in Elasticsearch, each containing a high number of documents (something between 100,000 and 1,000,000). They have essentially the same structure. Since I use /analyze only one dataset at… --- ## [How make a master node in a 3 node cluster?](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656)
**Author:** [@H\_K7](https://discuss.elastic.co/u/H_K7)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 7:26pm UTC](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656 "2023-02-03T19:26:52Z")
Current 3 node cluster setup I have setup 3 node cluster { "cluster\_name" : "DEMOCLUSTER", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 3, "active\_primary\_shards"… --- ## [Python Search on Data Stream](https://discuss.elastic.co/t/python-search-on-data-stream/324680)
**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 5:33pm UTC](https://discuss.elastic.co/t/python-search-on-data-stream/324680 "2023-02-03T17:33:49Z")
Hello, we migrate from an Elasticsearch 7.17 with indeces to Elasticsearch 8.6.0 with data stream. In the past we had develop a python script to search inside indices with pattern "myname-\*". Because now beats use dat… --- ## [Processing a TAXII feed?](https://discuss.elastic.co/t/processing-a-taxii-feed/324678)
**Author:** [@yak990](https://discuss.elastic.co/u/yak990)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 5:02pm UTC](https://discuss.elastic.co/t/processing-a-taxii-feed/324678 "2023-02-03T17:02:48Z")
I have a data feed that needs to support TAXII 2.1 but also needs to handle certificate based authentication. Does elastic have support for this? Thanks! --- ## [Extract part of a log using regex in KQL](https://discuss.elastic.co/t/extract-part-of-a-log-using-regex-in-kql/324677)
**Author:** [@dzlabs](https://discuss.elastic.co/u/dzlabs)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 4:45pm UTC](https://discuss.elastic.co/t/extract-part-of-a-log-using-regex-in-kql/324677 "2023-02-03T16:45:15Z")
I've log messages that looks like this 07:17:58.211 \[Thread.3;\] INFO Dispatcher - Message from XXX.XXX.XXX.XXX/PORT not dispatched, reason: blah blah, status=xyz I'm trying to query then visualize the different IP add… --- ## [Time shift Kibana vs. Elasticsearch](https://discuss.elastic.co/t/time-shift-kibana-vs-elasticsearch/324653)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 2\ **Last updated:** [February 3, 2023, 4:22pm UTC](https://discuss.elastic.co/t/time-shift-kibana-vs-elasticsearch/324653 "2023-02-03T16:22:47Z")
Hi, I have an index in Elasticsearch. When I check - using the search API - the oldest timestamp of my data is 2023-01-13 00:00:00 (I previously applied a filter). However, when generating a Data View in Kibana the olde… --- ## [Elastic Version Moves very fast](https://discuss.elastic.co/t/elastic-version-moves-very-fast/323338)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 12\ **Last updated:** [February 3, 2023, 4:22pm UTC](https://discuss.elastic.co/t/elastic-version-moves-very-fast/323338 "2023-02-03T16:22:19Z")
What is the reason Elastic introduce and release different version at fast pace? it is very hard to keep up with it. And if you fall too much behind version then upgrade process gets harder and harder. for example I w… --- ## [Using Dell ECS s3 for snapshots](https://discuss.elastic.co/t/using-dell-ecs-s3-for-snapshots/324658)
**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 4:16pm UTC](https://discuss.elastic.co/t/using-dell-ecs-s3-for-snapshots/324658 "2023-02-03T16:16:18Z")
I am trying to configure a snapshot repository to use an on-premise s3 compatible solution - Dell ECS. When I issue the command to add the repository with our internal endpoint, ES still is attempting to connect to AWS … --- ## [Quick question about ILM](https://discuss.elastic.co/t/quick-question-about-ilm/324574)
**Author:** [@Monica\_majua](https://discuss.elastic.co/u/Monica_majua)\ **Replies:** 2\ **Last updated:** [February 3, 2023, 3:53pm UTC](https://discuss.elastic.co/t/quick-question-about-ilm/324574 "2023-02-03T15:53:53Z")
I would like to ask what is an ILM? and is it related to Legacy templates? Is possible to assign an ILM to a Legacy template? --- ## [It is possible to change the bulk\_max\_size and workers on a fleet managed agent?](https://discuss.elastic.co/t/it-is-possible-to-change-the-bulk-max-size-and-workers-on-a-fleet-managed-agent/324380)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 3:50pm UTC](https://discuss.elastic.co/t/it-is-possible-to-change-the-bulk-max-size-and-workers-on-a-fleet-managed-agent/324380 "2023-02-03T15:50:33Z")
Hello, I'm using Elastic Agent with the AWS Cloudwatch integration to consume some logs, the volume of logs are pretty high and I'm trying to improve the performance of the Elastic Agent. Filebeat per default uses just… --- ## [Autosize Canvas Webpage](https://discuss.elastic.co/t/autosize-canvas-webpage/323741)
**Author:** [@infraendboss](https://discuss.elastic.co/u/infraendboss)\ **Replies:** 1\ **Last updated:** [February 3, 2023, 3:47pm UTC](https://discuss.elastic.co/t/autosize-canvas-webpage/323741 "2023-02-03T15:47:45Z")
Hello amazing people! I want to share my Canvas page on a website, but the workpad isn't autoscaling when I use a bigger or smaller screen. I want the Canvas page to resize. I've tried tweaking the HTML code, but it has… --- ## [Apm-server on FreeBSD](https://discuss.elastic.co/t/apm-server-on-freebsd/324532)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 2\ **Last updated:** [February 3, 2023, 3:30pm UTC](https://discuss.elastic.co/t/apm-server-on-freebsd/324532 "2023-02-03T15:30:02Z")
Is there a way to get apm-server running on FreeBSD? thanks --- ## [Logstash jdbc input mantain sql row order](https://discuss.elastic.co/t/logstash-jdbc-input-mantain-sql-row-order/324470)
**Author:** [@Ricardo\_Canuto](https://discuss.elastic.co/u/Ricardo_Canuto)\ **Replies:** 8\ **Last updated:** [February 3, 2023, 2:51pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-mantain-sql-row-order/324470 "2023-02-03T14:51:27Z")
Hi, I'm new to logstash and I'm trying to check if an sql job (and its steps) runs successfully. The query gets the step 0 (job output) and all the steps that have errors or warnings. I want to gather all the steps… --- ## [Compare data from two different Elasticsearch documents](https://discuss.elastic.co/t/compare-data-from-two-different-elasticsearch-documents/324660)
**Author:** [@slaterar](https://discuss.elastic.co/u/slaterar)\ **Replies:** 0\ **Last updated:** [February 3, 2023, 2:16pm UTC](https://discuss.elastic.co/t/compare-data-from-two-different-elasticsearch-documents/324660 "2023-02-03T14:16:36Z")
I have two namespaces that I want to compare data from. The first is ab\*:cd.blah1 and second is ab\*:cd.blah2 and each contain a reference ID for a transaction in the same field name. I want to return values in ab\*:cd.bl… --- ## [How to create mapping for special characters and autocomplete search](https://discuss.elastic.co/t/how-to-create-mapping-for-special-characters-and-autocomplete-search/324115)
**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\ **Replies:** 5\ **Last updated:** [February 3, 2023, 2:14pm UTC](https://discuss.elastic.co/t/how-to-create-mapping-for-special-characters-and-autocomplete-search/324115 "2023-02-03T14:14:06Z")
Hi, In my project, I need to search data with special characters like č,ć,ž,đ, ?, !. What is the best practice for searching special characters in version 8.5? Also, how to create a mapping for autocomplete search? Ho… [Previous page](https://discuss.elastic.co/latest.md?page=795) [Next page](https://discuss.elastic.co/latest.md?page=797)