# Latest **URL:** https://discuss.elastic.co/latest.md?page=805 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 806 --- ## [C# Elasticsearch 8.0.3+ 400 Bad Request media\_type\_header\_exception](https://discuss.elastic.co/t/c-elasticsearch-8-0-3-400-bad-request-media-type-header-exception/322816)
**Author:** [@KoalaBear](https://discuss.elastic.co/u/KoalaBear)\ **Replies:** 11\ **Last updated:** [January 27, 2023, 12:08pm UTC](https://discuss.elastic.co/t/c-elasticsearch-8-0-3-400-bad-request-media-type-header-exception/322816 "2023-01-27T12:08:39Z")
Just started with a new small project with Elasticsearch, while developing Elasticsearch it is currently running in Docker (docker-elk), with the added "http.cors" things: http.cors.enabled: true http.cors.allow-origin:… --- ## [Wrong transaction names APM Kibana](https://discuss.elastic.co/t/wrong-transaction-names-apm-kibana/324038)
**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\ **Replies:** 3\ **Last updated:** [January 27, 2023, 12:05pm UTC](https://discuss.elastic.co/t/wrong-transaction-names-apm-kibana/324038 "2023-01-27T12:05:09Z")
Kibana version : 8.5.2 Elasticsearch version : 8.5.2 APM Server version : 8.6 APM Agent language and version : APM Real User Monitoring JavaScript Agent. Angular Integration. 5.x I can't see the transaction names… --- ## [Logstash Value too large to output](https://discuss.elastic.co/t/logstash-value-too-large-to-output/323495)
**Author:** [@Doremanilka](https://discuss.elastic.co/u/Doremanilka)\ **Replies:** 10\ **Last updated:** [January 27, 2023, 11:43am UTC](https://discuss.elastic.co/t/logstash-value-too-large-to-output/323495 "2023-01-27T11:43:09Z")
Hello, I have new core app that I need to parse. This app has strange big message output field and I need somehow add it to ELK. Log pattern: grok { match =\> \[ "message", "%{DATA:\[event\]\[ti… --- ## [Start-Service heartbeat fails](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600)
**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\ **Replies:** 27\ **Last updated:** [January 27, 2023, 11:01am UTC](https://discuss.elastic.co/t/start-service-heartbeat-fails/323600 "2023-01-27T11:01:43Z")
Hello, I have installed heartbeat on a Windows server. When I start the service, it stops immediately. with the command : "Start-Service heartbeat" it says nothing, but I can see with the command "sc.exe query… --- ## [Index changes notifications (document creation, update, deletion within the index / doc and more)](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069)
**Author:** [@RAVI\_GOPALANI](https://discuss.elastic.co/u/RAVI_GOPALANI)\ **Replies:** 1\ **Last updated:** [January 27, 2023, 10:11am UTC](https://discuss.elastic.co/t/index-changes-notifications-document-creation-update-deletion-within-the-index-doc-and-more/324069 "2023-01-27T10:11:09Z")
Hi, I am looking for alerting / notification for document creation, update, deletion within the index / doc. Does there any api available within the Elasticsearch / logstash for alerting the changes done at Index / Doc… --- ## [Single Server Single Node vs Single Server Multiple Node](https://discuss.elastic.co/t/single-server-single-node-vs-single-server-multiple-node/324081)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 4\ **Last updated:** [January 27, 2023, 10:06am UTC](https://discuss.elastic.co/t/single-server-single-node-vs-single-server-multiple-node/324081 "2023-01-27T10:06:16Z")
As the title suggests, I wonder if it is better to configure a single node or multiple nodes when configuring a node on a single server. I understood that the reason for configuring multiple nodes can have the advantage… --- ## [Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/324074)
**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\ **Replies:** 3\ **Last updated:** [January 27, 2023, 10:01am UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/324074 "2023-01-27T10:01:14Z")
Is it normal for this to appear as a warning in the elasticsearch logs? The first time I installed elasticsearch, this is what I saw in the elasticsearch logs. \[2023-01-27T06:18:35,815\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty… --- ## [Elastic Agent - Import only the latest data using Journald integration](https://discuss.elastic.co/t/elastic-agent-import-only-the-latest-data-using-journald-integration/324097)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 0\ **Last updated:** [January 27, 2023, 9:53am UTC](https://discuss.elastic.co/t/elastic-agent-import-only-the-latest-data-using-journald-integration/324097 "2023-01-27T09:53:16Z")
Hello everybody, I'm using the Journald integration for the Elastic Agent. Is it possible to import only the last 7 days of the Journald instead of all the data? If it is possible how can I do? Thanks Daniele --- ## [Query a field that has a colon](https://discuss.elastic.co/t/query-a-field-that-has-a-colon/323966)
**Author:** [@ilias\_ioannou](https://discuss.elastic.co/u/ilias_ioannou)\ **Replies:** 2\ **Last updated:** [January 27, 2023, 9:34am UTC](https://discuss.elastic.co/t/query-a-field-that-has-a-colon/323966 "2023-01-27T09:34:21Z")
Hello, Is it possible to use elasticsearch dsl python client to implement a query that will run against a filed with colon? For example if a field is this properties.grid:code then a successfull query would be the foll… --- ## [Kibana Dev Tool Autocomplete](https://discuss.elastic.co/t/kibana-dev-tool-autocomplete/320916)
**Author:** [@M.Arbaz\_Ali](https://discuss.elastic.co/u/M.Arbaz_Ali)\ **Replies:** 1\ **Last updated:** [January 27, 2023, 9:33am UTC](https://discuss.elastic.co/t/kibana-dev-tool-autocomplete/320916 "2023-01-27T09:33:53Z")
autocomplete in dev tools console not working after GET there is no option of list of \_cluster or \_cat just showing a limited list when have (\_processor,\_search/template etc etc) but not showing \_cat or \_cluster --- ## [MetricBeat 8.6.0 - error getting connection to system bus: dial unix /var/run/dbus/system\_bus\_socket: connect: no such file or directory](https://discuss.elastic.co/t/metricbeat-8-6-0-error-getting-connection-to-system-bus-dial-unix-var-run-dbus-system-bus-socket-connect-no-such-file-or-directory/323618)
**Author:** [@Ednei\_Rodrigues](https://discuss.elastic.co/u/Ednei_Rodrigues)\ **Replies:** 3\ **Last updated:** [January 27, 2023, 9:23am UTC](https://discuss.elastic.co/t/metricbeat-8-6-0-error-getting-connection-to-system-bus-dial-unix-var-run-dbus-system-bus-socket-connect-no-such-file-or-directory/323618 "2023-01-27T09:23:24Z")
Hello, how are you doing ? So, I've installed metricbeat in my ubuntu server ( Ubuntu 20.04.5 LTS ) and I enabled three modules: root@SBG5PC4:~# metricbeat modules list Enabled: mysql nginx system I have been working… --- ## [Elastic cluster running out of space, can't get cluster health to green](https://discuss.elastic.co/t/elastic-cluster-running-out-of-space-cant-get-cluster-health-to-green/323906)
**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\ **Replies:** 6\ **Last updated:** [January 27, 2023, 9:22am UTC](https://discuss.elastic.co/t/elastic-cluster-running-out-of-space-cant-get-cluster-health-to-green/323906 "2023-01-27T09:22:35Z")
I have a 2 node elastic cluster. I noticed that I was not able to add more data to it, and it turned out the filesystem space is over at the flood limit on both machines. So to try and recover from this I shut down the … --- ## [Java class ElasticsearchClient v. 7.17.8](https://discuss.elastic.co/t/java-class-elasticsearchclient-v-7-17-8/324041)
**Author:** [@habdank](https://discuss.elastic.co/u/habdank)\ **Replies:** 2\ **Last updated:** [January 27, 2023, 7:43am UTC](https://discuss.elastic.co/t/java-class-elasticsearchclient-v-7-17-8/324041 "2023-01-27T07:43:26Z")
Hi, Java doc for ElasticsearchClient v. 7.17.8 ElasticsearchClient (java-client 7.17.8 API) states that ElasticsearchClient is java class. However using \ \org.elasticsearch.clie… --- ## [FilestreamWhen updating log files, updated logs and old logs display in graylog](https://discuss.elastic.co/t/filestreamwhen-updating-log-files-updated-logs-and-old-logs-display-in-graylog/324089)
**Author:** [@leesy9610](https://discuss.elastic.co/u/leesy9610)\ **Replies:** 0\ **Last updated:** [January 27, 2023, 7:31am UTC](https://discuss.elastic.co/t/filestreamwhen-updating-log-files-updated-logs-and-old-logs-display-in-graylog/324089 "2023-01-27T07:31:00Z")
Hi, I used graylog, logtash, filebeat When updating log files, updated logs and old logs display in graylog. I only want the updated log to come out. help me please... --- ## [Elasticsearch, Kibana does not work](https://discuss.elastic.co/t/elasticsearch-kibana-does-not-work/323472)
**Author:** [@Mursel](https://discuss.elastic.co/u/Mursel)\ **Replies:** 16\ **Last updated:** [January 27, 2023, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-does-not-work/323472 "2023-01-27T06:45:39Z")
I have an issue with Elasticsearch. After restarting ubuntu, Kibana does not show any logs. --- ## [Inconsistency in data stream rollover](https://discuss.elastic.co/t/inconsistency-in-data-stream-rollover/323883)
**Author:** [@sagarkhatri0605](https://discuss.elastic.co/u/sagarkhatri0605)\ **Replies:** 1\ **Last updated:** [January 27, 2023, 6:32am UTC](https://discuss.elastic.co/t/inconsistency-in-data-stream-rollover/323883 "2023-01-27T06:32:33Z")
We want hourly rollover of the index and then index should get deleted after 12 hour. To achieve this we have created data stream with a ILM policy which rollover index every 1hr and then the index goes into the warm ph… --- ## [Time based indexes](https://discuss.elastic.co/t/time-based-indexes/324067)
**Author:** [@mardo](https://discuss.elastic.co/u/mardo)\ **Replies:** 2\ **Last updated:** [January 27, 2023, 6:31am UTC](https://discuss.elastic.co/t/time-based-indexes/324067 "2023-01-27T06:31:04Z")
Its my understanding to remove data if it is 15 days old time based indexes is the way to go. I can't find any documentation or how-to article to accomplish this easily. I am using Kibana. Any help would be appreciate… --- ## [Can't install logstash-output-influxdb plugin](https://discuss.elastic.co/t/cant-install-logstash-output-influxdb-plugin/323890)
**Author:** [@AlanChan](https://discuss.elastic.co/u/AlanChan)\ **Replies:** 19\ **Last updated:** [January 27, 2023, 6:23am UTC](https://discuss.elastic.co/t/cant-install-logstash-output-influxdb-plugin/323890 "2023-01-27T06:23:37Z")
Hi, I'm using Logstash (8.6.0) and want to send data to influxdb2 (2.6.1). But I find that logstash-output-infludb isn't installed by default, so I'm trying to install it. Some errors happen but no details are shown. C… --- ## [Restricting Kibana access](https://discuss.elastic.co/t/restricting-kibana-access/324080)
**Author:** [@aneeshks1982](https://discuss.elastic.co/u/aneeshks1982)\ **Replies:** 0\ **Last updated:** [January 27, 2023, 2:23am UTC](https://discuss.elastic.co/t/restricting-kibana-access/324080 "2023-01-27T02:23:53Z")
Hi, I'm using Elastic cloud and Elasticsearch version-8.6.0. Elastic cloud and Kibana are now accessible from anywhere. Can I restrict the access to Elastic/Kibana only from a specific IP source? because I like to restr… --- ## [Docker logstash 8.6.0 + logstash-input-cloudwatch\_logs does not build](https://discuss.elastic.co/t/docker-logstash-8-6-0-logstash-input-cloudwatch-logs-does-not-build/324077)
**Author:** [@francisco\_eguiguren](https://discuss.elastic.co/u/francisco_eguiguren)\ **Replies:** 0\ **Last updated:** [January 27, 2023, 12:18am UTC](https://discuss.elastic.co/t/docker-logstash-8-6-0-logstash-input-cloudwatch-logs-does-not-build/324077 "2023-01-27T00:18:44Z")
Hi Folks, I'm trying to build a Docker image that includes logstash-input-cloudwatch\_logs plugin as I need to insert logs from Cloudwatch into my pipeline. I've tried multiple combinations of commands and JAVA\_OPTS, on… --- ## [Confluent cloud from prometheus to elastic search](https://discuss.elastic.co/t/confluent-cloud-from-prometheus-to-elastic-search/324045)
**Author:** [@ch7247](https://discuss.elastic.co/u/ch7247)\ **Replies:** 1\ **Last updated:** [January 27, 2023, 12:07am UTC](https://discuss.elastic.co/t/confluent-cloud-from-prometheus-to-elastic-search/324045 "2023-01-27T00:07:27Z")
Hello everyone, I'm completely new to elk, planning to have a dashboard in kibana to visualize confluent cloud metric. Currently, i'm successful in getting the metrics to prometheus, i'm having some issue with getting t… --- ## [Logstash plugins still displaying ECS v8 warnings](https://discuss.elastic.co/t/logstash-plugins-still-displaying-ecs-v8-warnings/324030)
**Author:** [@Oddly](https://discuss.elastic.co/u/Oddly)\ **Replies:** 4\ **Last updated:** [January 26, 2023, 10:18pm UTC](https://discuss.elastic.co/t/logstash-plugins-still-displaying-ecs-v8-warnings/324030 "2023-01-26T22:18:20Z")
I noticed that several plugins (grok and outputs.elasticsearchmonitoring to name a few) are still displaying warning messages like the following: \[WARN\]\[logstash.filters.grok\]\[\ **Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\ **Replies:** 1\ **Last updated:** [January 26, 2023, 10:15pm UTC](https://discuss.elastic.co/t/failed-to-perform-request/324071 "2023-01-26T22:15:18Z") \[2023-01-26T19:51:43,271\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Failed to perform request {:message=\>"192.168.0.108:9200 failed to respond", :exception=\>Manticore::ClientProtocolException, :cause=\>#\ **Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 3\ **Last updated:** [January 26, 2023, 9:54pm UTC](https://discuss.elastic.co/t/two-types-under-one-filter/323978 "2023-01-26T21:54:30Z") Can I have two types (plain txt log & json )under one filter in the logstash.yml file? input { beats { port =\> "5044" } } filter { if \[fields=='access'\] { grok { remove\_field =\> "message" } … --- ## [Forecasting holidays](https://discuss.elastic.co/t/forecasting-holidays/323854)
**Author:** [@Patrick\_P](https://discuss.elastic.co/u/Patrick_P)\ **Replies:** 3\ **Last updated:** [January 26, 2023, 8:05pm UTC](https://discuss.elastic.co/t/forecasting-holidays/323854 "2023-01-26T20:05:53Z")
I'm trying to create a forecast from an anomaly detection job in Kibana. It tracks the number of events in certain intervals, and we always have lower volume on certain holidays. I have applied a Calendar that I created … --- ## [How to disable the traceparent and tracestate headers](https://discuss.elastic.co/t/how-to-disable-the-traceparent-and-tracestate-headers/324058)
**Author:** [@e03c5fccb551b6833a65](https://discuss.elastic.co/u/e03c5fccb551b6833a65)\ **Replies:** 0\ **Last updated:** [January 26, 2023, 6:23pm UTC](https://discuss.elastic.co/t/how-to-disable-the-traceparent-and-tracestate-headers/324058 "2023-01-26T18:23:08Z")
One of our services connects with a bank, and it's not allowing any requests with the tracepearent, tracestate header. I tried using the property use\_elastic\_traceparent\_header as false, but still I see the headers in t… --- ## [How many of you are using Otel for your K8S apps on Elastic vs docker?](https://discuss.elastic.co/t/how-many-of-you-are-using-otel-for-your-k8s-apps-on-elastic-vs-docker/324056)
**Author:** [@Bahubali\_Shetti](https://discuss.elastic.co/u/Bahubali_Shetti)\ **Replies:** 0\ **Last updated:** [January 26, 2023, 6:02pm UTC](https://discuss.elastic.co/t/how-many-of-you-are-using-otel-for-your-k8s-apps-on-elastic-vs-docker/324056 "2023-01-26T18:02:33Z")
OpenTelemetry and Elastic: An unbeatable combination for observability | Elastic Blog covers the baseline of what's being supported. Curious what people's experiences are on Otel with Elastic. Any interesting examples, e… --- ## [How to create a GeoShape intersect query with elastic java client v8.6.0](https://discuss.elastic.co/t/how-to-create-a-geoshape-intersect-query-with-elastic-java-client-v8-6-0/324025)
**Author:** [@yusufozcan](https://discuss.elastic.co/u/yusufozcan)\ **Replies:** 1\ **Last updated:** [January 26, 2023, 5:53pm UTC](https://discuss.elastic.co/t/how-to-create-a-geoshape-intersect-query-with-elastic-java-client-v8-6-0/324025 "2023-01-26T17:53:30Z")
Hi! We have a geo shape field which we store multi polygons and we want to filter it with a coordinate. Desired search request is: "geo\_shape": { "area": { "shape": { "type": "point", "coordinates": … --- ## [JVM options file vs. ES\_JAVA\_OPTS on ECK for setting heap size](https://discuss.elastic.co/t/jvm-options-file-vs-es-java-opts-on-eck-for-setting-heap-size/324051)
**Author:** [@Thomas\_Antonio](https://discuss.elastic.co/u/Thomas_Antonio)\ **Replies:** 0\ **Last updated:** [January 26, 2023, 5:25pm UTC](https://discuss.elastic.co/t/jvm-options-file-vs-es-java-opts-on-eck-for-setting-heap-size/324051 "2023-01-26T17:25:51Z")
ECK documentation says to configure heap size using ES\_JAVA\_OPTS environment variable. But Elasticsearch docs say to not use ES\_JAVA\_OPTS in production and instead use an options file. Is this a gap in ECK documentation… --- ## [Completion-Suggester that respects the number of word occurences](https://discuss.elastic.co/t/completion-suggester-that-respects-the-number-of-word-occurences/324031)
**Author:** [@Andromeda](https://discuss.elastic.co/u/Andromeda)\ **Replies:** 0\ **Last updated:** [January 26, 2023, 2:59pm UTC](https://discuss.elastic.co/t/completion-suggester-that-respects-the-number-of-word-occurences/324031 "2023-01-26T14:59:21Z")
Hello there, is there a way that Completion-Suggesters deliver suggests depending on how often matching words appear in the completion fields of all documents? For example, imagine "thinks" appears in completion fields… [Previous page](https://discuss.elastic.co/latest.md?page=804) [Next page](https://discuss.elastic.co/latest.md?page=806)