# Latest

**URL:** https://discuss.elastic.co/latest.md?page=815

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 816

---

## [No such file kbn\_canvas.js](https://discuss.elastic.co/t/no-such-file-kbn-canvas-js/323455)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 11:25am UTC](https://discuss.elastic.co/t/no-such-file-kbn-canvas-js/323455 "2023-01-19T11:25:50Z")

</div>

I clicked on the link Download runtime as shown in this image: This brought me to a page: When I look in my /var/log/kibana/kibana.log, I see this error: "ENOENT: no such file or directory, open '/usr/share/kiban…

---

## [org.elasticsearch.action.UnavailableShardsException: \[ . async—searchl \[01 primary shard is not active Timeout: \[1m](https://discuss.elastic.co/t/org-elasticsearch-action-unavailableshardsexception-async-searchl-01-primary-shard-is-not-active-timeout-1m/323466)

<div class="topic-metadata">

**Author:** [@forabraham1](https://discuss.elastic.co/u/forabraham1)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 11:17am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-unavailableshardsexception-async-searchl-01-primary-shard-is-not-active-timeout-1m/323466 "2023-01-19T11:17:19Z")

</div>

After upgrading ES from 7.9 to 7.17 ES is throwing this exception "org.elasticsearch.action.UnavailableShardsException: \[ . async—searchl \[01 primary shard is not active Timeout: \[1m". Due to which Kibana isn't returnin…

---

## [Error occurrences per 1000 requests - Multiple queries on a single graph](https://discuss.elastic.co/t/error-occurrences-per-1000-requests-multiple-queries-on-a-single-graph/323421)

<div class="topic-metadata">

**Author:** [@Nefeli\_Tavoulari](https://discuss.elastic.co/u/Nefeli_Tavoulari)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 11:05am UTC](https://discuss.elastic.co/t/error-occurrences-per-1000-requests-multiple-queries-on-a-single-graph/323421 "2023-01-19T11:05:20Z")

</div>

Is it possible displaying the frequency of a specific error per 1000 operations on a visualization on Kibana, without Kibana Lens? Using filters I can get the count of errors and the count of operations and display them …

---

## [TreeMap Vega trouble create nested date for index](https://discuss.elastic.co/t/treemap-vega-trouble-create-nested-date-for-index/323490)

<div class="topic-metadata">

**Author:** [@EugenHo](https://discuss.elastic.co/u/EugenHo)\
**Replies:** 0\
**Last updated:** [January 19, 2023, 8:58am UTC](https://discuss.elastic.co/t/treemap-vega-trouble-create-nested-date-for-index/323490 "2023-01-19T08:58:37Z")

</div>

HI all, we have som trouble to transform data for a Treemap in vega visualization. I create data from Elastic like { "\_index": "eu-metricbeat-2023.01.18-000021", "\_type": "\_doc", "\_id": "H6YsyYUBmEzuaZBQ…

---

## [Would turning off swap require extra configuration](https://discuss.elastic.co/t/would-turning-off-swap-require-extra-configuration/323342)

<div class="topic-metadata">

**Author:** [@hasancansaral](https://discuss.elastic.co/u/hasancansaral)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 10:46am UTC](https://discuss.elastic.co/t/would-turning-off-swap-require-extra-configuration/323342 "2023-01-19T10:46:43Z")

</div>

I have a 3 node cluster, all master eligible and all having 4 cores, 16gb memory. I have 2 read/write indexes with none of them above 1 GB/1 million documents. Each index is 1 primary shard and 2 replicas. I've recently…

---

## [No data is generated Observability](https://discuss.elastic.co/t/no-data-is-generated-observability/323288)

<div class="topic-metadata">

**Author:** [@den2](https://discuss.elastic.co/u/den2)\
**Replies:** 6\
**Last updated:** [January 19, 2023, 10:24am UTC](https://discuss.elastic.co/t/no-data-is-generated-observability/323288 "2023-01-19T10:24:23Z")

</div>

Hello! I can’t create data, it constantly throws me to the start page, I need help

---

## [Failed to save to index due to maximum shard overlimit](https://discuss.elastic.co/t/failed-to-save-to-index-due-to-maximum-shard-overlimit/323424)

<div class="topic-metadata">

**Author:** [@aagirre92](https://discuss.elastic.co/u/aagirre92)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 10:13am UTC](https://discuss.elastic.co/t/failed-to-save-to-index-due-to-maximum-shard-overlimit/323424 "2023-01-19T10:13:29Z")

</div>

Hello, I am running a web application (in my own windows server machine) called Automation Anywhere A360. This web application uses a local Elasticsearch instance to handle its Audit Logs. Cluster health endpoint shows…

---

## [Custom log integration with Text & json file](https://discuss.elastic.co/t/custom-log-integration-with-text-json-file/323492)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 0\
**Last updated:** [January 19, 2023, 9:39am UTC](https://discuss.elastic.co/t/custom-log-integration-with-text-json-file/323492 "2023-01-19T09:39:51Z")

</div>

Hi, We have text files which are getting created on Windows VM's and Linux VM's in certain location. Here is the sample text file which is getting created. So, we i would like to get the log and parse into different fie…

---

## [Unassigned Shards when New Index was created: Cluster Yellow](https://discuss.elastic.co/t/unassigned-shards-when-new-index-was-created-cluster-yellow/323483)

<div class="topic-metadata">

**Author:** [@rpraveenverma](https://discuss.elastic.co/u/rpraveenverma)\
**Replies:** 3\
**Last updated:** [January 19, 2023, 9:32am UTC](https://discuss.elastic.co/t/unassigned-shards-when-new-index-was-created-cluster-yellow/323483 "2023-01-19T09:32:54Z")

</div>

New Index Creation led to Unassigned Shards and Yellow Cluster State. Context : It happened when relocation for one node was already in progress. Checked explanation for its state. It says : Relocation Throttled , rea…

---

## [Migrate to datastreams withou aliases + datastreams filter](https://discuss.elastic.co/t/migrate-to-datastreams-withou-aliases-datastreams-filter/323401)

<div class="topic-metadata">

**Author:** [@bilak](https://discuss.elastic.co/u/bilak)\
**Replies:** 3\
**Last updated:** [January 19, 2023, 9:28am UTC](https://discuss.elastic.co/t/migrate-to-datastreams-withou-aliases-datastreams-filter/323401 "2023-01-19T09:28:49Z")

</div>

Hello, I'd like to use data streams and migrate our indices to it. However currently we don't use aliases. Do I have to create an alias for given indices pattern (technical-logs\*) at first and only after that I'm able t…

---

## [Kibana bar chart legend set constant color](https://discuss.elastic.co/t/kibana-bar-chart-legend-set-constant-color/322288)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 7\
**Last updated:** [January 19, 2023, 8:34am UTC](https://discuss.elastic.co/t/kibana-bar-chart-legend-set-constant-color/322288 "2023-01-19T08:34:13Z")

</div>

Hello, I've a simple requirement where in I need to set constant color for bar and legends. ex: Error:Always red, Success:Always greeen,Initialize:Always yellow...etc The current behaviour of kibana dosen't fullfill …

---

## [Using premade dashboard with Logstash](https://discuss.elastic.co/t/using-premade-dashboard-with-logstash/323315)

<div class="topic-metadata">

**Author:** [@TonisSaarjoe](https://discuss.elastic.co/u/TonisSaarjoe)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 7:48am UTC](https://discuss.elastic.co/t/using-premade-dashboard-with-logstash/323315 "2023-01-19T07:48:23Z")

</div>

Hello there, Some what new to ELK. So I have 3 different machines Monitoring, Logstash and Beats Monitoring - hosts Kibana and Elasticsearch. secure machine allows only Logstash Logstash - hosts only Logstash. Beats…

---

## [I can't connect my Logstash to ES Stack Monitoring please help](https://discuss.elastic.co/t/i-cant-connect-my-logstash-to-es-stack-monitoring-please-help/323465)

<div class="topic-metadata">

**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\
**Replies:** 6\
**Last updated:** [January 19, 2023, 7:43am UTC](https://discuss.elastic.co/t/i-cant-connect-my-logstash-to-es-stack-monitoring-please-help/323465 "2023-01-19T07:43:22Z")

</div>

I check the status of metricbeat, it says node\_stats/node\_stats.go:73 json: cannot unmarshal object into Go struct field .version of type string and could not fetch node pipelines: HTTP error 405 in : 405 Method…

---

## [Scaling of cardinality sub-aggregation](https://discuss.elastic.co/t/scaling-of-cardinality-sub-aggregation/320264)

<div class="topic-metadata">

**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\
**Replies:** 16\
**Last updated:** [January 19, 2023, 7:20am UTC](https://discuss.elastic.co/t/scaling-of-cardinality-sub-aggregation/320264 "2023-01-19T07:20:55Z")

</div>

Hello there, as continuation of this discussion thread, what other options are there in Elasticsearch to scale aggregation? I have experimented with: adding client nodes (didn't help for big result-set) playing wit…

---

## [Logstash stops elasticsearch](https://discuss.elastic.co/t/logstash-stops-elasticsearch/323017)

<div class="topic-metadata">

**Author:** [@bas\_kos](https://discuss.elastic.co/u/bas_kos)\
**Replies:** 27\
**Last updated:** [January 19, 2023, 7:17am UTC](https://discuss.elastic.co/t/logstash-stops-elasticsearch/323017 "2023-01-19T07:17:45Z")

</div>

After starting logstash, elasticsearch stops. If logstash is not running, then elasticsearch and kibana work and I go to the kibana web interface. I tried to cleanly remove logstash and install with default settings, I…

---

## [Logstash JSON parser error](https://discuss.elastic.co/t/logstash-json-parser-error/323356)

<div class="topic-metadata">

**Author:** [@Ramesh\_Perumal](https://discuss.elastic.co/u/Ramesh_Perumal)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 7:01am UTC](https://discuss.elastic.co/t/logstash-json-parser-error/323356 "2023-01-19T07:01:29Z")

</div>

Hi, We are getting json parser warning message as below: \[2023-01-08T13:21:12,936\]\[WARN \]\[logstash.filters.json \] Error parsing json {:source=\>"slmPart", :raw=\>"{"action":UPDATE,"information":"Signing CSR for root …

---

## [Why are 3 zones less expensive than 2 zones?](https://discuss.elastic.co/t/why-are-3-zones-less-expensive-than-2-zones/323453)

<div class="topic-metadata">

**Author:** [@michielswaanen](https://discuss.elastic.co/u/michielswaanen)\
**Replies:** 3\
**Last updated:** [January 19, 2023, 6:53am UTC](https://discuss.elastic.co/t/why-are-3-zones-less-expensive-than-2-zones/323453 "2023-01-19T06:53:11Z")

</div>

Why is tiebreaker only needed in a 2 zone setup? Pricing for 2 zones: Pricing for 3 zones:

---

## [Data flows through nodes](https://discuss.elastic.co/t/data-flows-through-nodes/323078)

<div class="topic-metadata">

**Author:** [@yinbucheng](https://discuss.elastic.co/u/yinbucheng)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 6:19am UTC](https://discuss.elastic.co/t/data-flows-through-nodes/323078 "2023-01-19T06:19:14Z")

</div>

The elastic cluster node I built has a separate data role master role coordinate role ingest role. I also configured the ingest pipeline, which nodes I will pass through when I insert data. The exposed cluster link is …

---

## [Elastic search and kibana configuration](https://discuss.elastic.co/t/elastic-search-and-kibana-configuration/323091)

<div class="topic-metadata">

**Author:** [@keerthana7](https://discuss.elastic.co/u/keerthana7)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 5:58am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-configuration/323091 "2023-01-19T05:58:48Z")

</div>

I couldn't configure elastic. Can anyone tell me what is the problem here and how to solve it?

---

## [Is there a limit on the number of ILM Policies that can be created in a Cluster?](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-ilm-policies-that-can-be-created-in-a-cluster/323398)

<div class="topic-metadata">

**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 5:40am UTC](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-ilm-policies-that-can-be-created-in-a-cluster/323398 "2023-01-19T05:40:57Z")

</div>

I have a situation where I need to create 120 indices , wherein each index has the data for a particular month. The data is stored for past 10 years (12 month\*10 year = 120 indices). Each index hold 1 month Data. I ha…

---

## [Copy users and roles created in kibana to new cluster](https://discuss.elastic.co/t/copy-users-and-roles-created-in-kibana-to-new-cluster/323392)

<div class="topic-metadata">

**Author:** [@dadiasish](https://discuss.elastic.co/u/dadiasish)\
**Replies:** 4\
**Last updated:** [January 19, 2023, 5:34am UTC](https://discuss.elastic.co/t/copy-users-and-roles-created-in-kibana-to-new-cluster/323392 "2023-01-19T05:34:43Z")

</div>

Hi, I've multiple users which are created to access Kibana in my current cluster. Now, we have planned to have a new cluster and I would like to have all these existing users copied from my previous cluster to the new …

---

## [Bulk indexing of signals failed: no such index \[.alerts-security.alerts-default\] and \[require\_alias\] request flag is \[true\]](https://discuss.elastic.co/t/bulk-indexing-of-signals-failed-no-such-index-alerts-security-alerts-default-and-require-alias-request-flag-is-true/323437)

<div class="topic-metadata">

**Author:** [@raghiboon](https://discuss.elastic.co/u/raghiboon)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 4:48am UTC](https://discuss.elastic.co/t/bulk-indexing-of-signals-failed-no-such-index-alerts-security-alerts-default-and-require-alias-request-flag-is-true/323437 "2023-01-19T04:48:35Z")

</div>

Hi everybody. i just removed .alerts-security.alerts-default-0000 suddenly after i was working with rules and made my dashboards. is there a way to recreate it? because it gives me this error: Bulk indexing of signals…

---

## [How to build QueryBuilder to search for the map of entry's in ElasticSearch index](https://discuss.elastic.co/t/how-to-build-querybuilder-to-search-for-the-map-of-entrys-in-elasticsearch-index/323469)

<div class="topic-metadata">

**Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\
**Replies:** 0\
**Last updated:** [January 19, 2023, 4:40am UTC](https://discuss.elastic.co/t/how-to-build-querybuilder-to-search-for-the-map-of-entrys-in-elasticsearch-index/323469 "2023-01-19T04:40:10Z")

</div>

I would need queryBuilder to search the index with entire map of values and return documents only if all map values matched in ES index. I could do for set of values like below val sampleSet = setOf("foo", "bar") val …

---

## [Problem with element BY.ID for autologin to kibana using python selenium webdriver](https://discuss.elastic.co/t/problem-with-element-by-id-for-autologin-to-kibana-using-python-selenium-webdriver/322355)

<div class="topic-metadata">

**Author:** [@Reka\_Novana](https://discuss.elastic.co/u/Reka_Novana)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 3:43am UTC](https://discuss.elastic.co/t/problem-with-element-by-id-for-autologin-to-kibana-using-python-selenium-webdriver/322355 "2023-01-19T03:43:14Z")

</div>

I want to make an auto screenshot script using selenium python but I can't find element id of the username and password that I found is only random element id for username and password. Could you please inform me if I ca…

---

## [Advanced JSON input](https://discuss.elastic.co/t/advanced-json-input/322366)

<div class="topic-metadata">

**Author:** [@imsudo](https://discuss.elastic.co/u/imsudo)\
**Replies:** 5\
**Last updated:** [January 19, 2023, 2:08am UTC](https://discuss.elastic.co/t/advanced-json-input/322366 "2023-01-19T02:08:05Z")

</div>

I have a data table with data, Metrics, aggregation as count. ( as it shows all the log count) see attached image(if avl) i wish to get only the count of 5xx errors (500-599) in downstreamStatus data field using advanc…

---

## [K8S GKE Deployment - Connect to Internal DNS](https://discuss.elastic.co/t/k8s-gke-deployment-connect-to-internal-dns/323463)

<div class="topic-metadata">

**Author:** [@Jennifer\_Klemisch](https://discuss.elastic.co/u/Jennifer_Klemisch)\
**Replies:** 0\
**Last updated:** [January 19, 2023, 1:41am UTC](https://discuss.elastic.co/t/k8s-gke-deployment-connect-to-internal-dns/323463 "2023-01-19T01:41:25Z")

</div>

I have a Terraform created GKE. Then I use Yaml files to install ES (8.6.0) and Kibana. As part of my terraform IAAS I reserve 2 IPs, and 2 "google\_dns\_record\_set" (es\_dns and kb\_dns) which sit on our company shared VP…

---

## [Pb with format during a CSV import](https://discuss.elastic.co/t/pb-with-format-during-a-csv-import/323267)

<div class="topic-metadata">

**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\
**Replies:** 2\
**Last updated:** [January 19, 2023, 1:33am UTC](https://discuss.elastic.co/t/pb-with-format-during-a-csv-import/323267 "2023-01-19T01:33:58Z")

</div>

Hi all, Sorry in advance for my bad english and my poor knowledge on ELK. I need to import regularly a csv file like this : data\_id iso event\_id\_cnty event\_id\_no\_cnty event\_date year time\_precision event\_type sub\_…

---

## [Elasticsearch high cpu usage](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [January 18, 2023, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079 "2023-01-18T23:29:07Z")

</div>

Hi everyone. My Es cluster had high cpu usage at 3:30 am today, below is grafana monitoring: And the kibana monitoring: I don't have a clue, because in my nginx log files, I didn't see any request rise signif…

---

## [Snapshot error](https://discuss.elastic.co/t/snapshot-error/323104)

<div class="topic-metadata">

**Author:** [@Sam\_LE](https://discuss.elastic.co/u/Sam_LE)\
**Replies:** 1\
**Last updated:** [January 18, 2023, 11:28pm UTC](https://discuss.elastic.co/t/snapshot-error/323104 "2023-01-18T23:28:33Z")

</div>

Hello, We have an ES cluster v7.8.1 and we try to create a first snapshot. We used kibana and created a policy. However we got errors on several index. Errors are : """ElasticsearchException\[failed to create blob conta…

---

## [Are there any cron jobs I can perform daily to keep my cluster healthy?](https://discuss.elastic.co/t/are-there-any-cron-jobs-i-can-perform-daily-to-keep-my-cluster-healthy/323150)

<div class="topic-metadata">

**Author:** [@SemperFi](https://discuss.elastic.co/u/SemperFi)\
**Replies:** 3\
**Last updated:** [January 18, 2023, 11:16pm UTC](https://discuss.elastic.co/t/are-there-any-cron-jobs-i-can-perform-daily-to-keep-my-cluster-healthy/323150 "2023-01-18T23:16:18Z")

</div>

I've got a very basic Elasticsearch cluster set up on my server to support search for a Xenforo forum. My technical knowledge is good enough to be dangerous. Lately Elasticsearch is crashing about once a week and I'm w…

[Previous page](https://discuss.elastic.co/latest.md?page=814)

[Next page](https://discuss.elastic.co/latest.md?page=816)
