# Latest **URL:** https://discuss.elastic.co/latest.md?page=824 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 825 --- ## [Heapdump without timeouts](https://discuss.elastic.co/t/heapdump-without-timeouts/322850)
**Author:** [@frens](https://discuss.elastic.co/u/frens)\ **Replies:** 8\ **Last updated:** [January 12, 2023, 1:12pm UTC](https://discuss.elastic.co/t/heapdump-without-timeouts/322850 "2023-01-12T13:12:32Z")
Hi! We're running nodes with a substantial amount of heap (150+Gb). I know how to take a dump the heap with jmap. However, dumping a heap this size on our machines will probably take several minutes (if I extrapolate li… --- ## [How to get ML Categorization results break down by users](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283)
**Author:** [@CamillePapillon](https://discuss.elastic.co/u/CamillePapillon)\ **Replies:** 8\ **Last updated:** [January 12, 2023, 12:45pm UTC](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283 "2023-01-12T12:45:33Z")
Hi! I have an input index with tons of different logs messages coming from many different devices (same product type = similar logs, different users). My source index is break down with : timestamp, serial\_number, messa… --- ## [Drop\_event when no value in both TargetUserName and Workstation fields (event id 4776)](https://discuss.elastic.co/t/drop-event-when-no-value-in-both-targetusername-and-workstation-fields-event-id-4776/322715)
**Author:** [@yankaiqian](https://discuss.elastic.co/u/yankaiqian)\ **Replies:** 2\ **Last updated:** [January 12, 2023, 12:18pm UTC](https://discuss.elastic.co/t/drop-event-when-no-value-in-both-targetusername-and-workstation-fields-event-id-4776/322715 "2023-01-12T12:18:28Z")
winlogbeat-7.17.0 I tried to drop the events that id is 4776 and no value in both TargetUsername and Workstation, but it doesn't work, may I know how to write the condition part and get it work? Here is the part of the… --- ## [Logstash is not ingesting data from all nodes](https://discuss.elastic.co/t/logstash-is-not-ingesting-data-from-all-nodes/322981)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 5\ **Last updated:** [January 12, 2023, 11:58am UTC](https://discuss.elastic.co/t/logstash-is-not-ingesting-data-from-all-nodes/322981 "2023-01-12T11:58:46Z")
I am using filebeat to ship logs to logstash and using it to ingest data to Index. From 2 days i am seeing multiple issues. from Kibana dashboard i am not seeing logs on regular basis of the particular index. // for t… --- ## [Elasticsearch, kibana server not up due to version dependency erros](https://discuss.elastic.co/t/elasticsearch-kibana-server-not-up-due-to-version-dependency-erros/317065)
**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\ **Replies:** 9\ **Last updated:** [November 17, 2022, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-server-not-up-due-to-version-dependency-erros/317065 "2022-11-17T15:15:02Z")
Hello, Team. We have an ELK server in our digital environment, as well as production servers in AWS. We have recently encountered version dependency issues in ELK. As a result, I intend to restore ELK server from an ol… --- ## [Fixing late logs into elastic](https://discuss.elastic.co/t/fixing-late-logs-into-elastic/322888)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 6\ **Last updated:** [January 12, 2023, 10:54am UTC](https://discuss.elastic.co/t/fixing-late-logs-into-elastic/322888 "2023-01-12T10:54:18Z")
Hello there, i would like to ask about my problem here. so here is the situation. my elastic, receive log from OCP. the problem is when the log is viewed from elastic, it doesn't appear to have updated. as in the image … --- ## [Docker and System Logs/Metrics from container-based Agent](https://discuss.elastic.co/t/docker-and-system-logs-metrics-from-container-based-agent/322679)
**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\ **Replies:** 13\ **Last updated:** [January 12, 2023, 10:27am UTC](https://discuss.elastic.co/t/docker-and-system-logs-metrics-from-container-based-agent/322679 "2023-01-12T10:27:52Z")
Hi, I am pretty new to the ELK Stack and have some trouble getting detailed metrics from a docker based agent. The Stack is running on also as docker container and after days playing around with TLS certificates I have… --- ## [Valores en blanco desde el modulo Netflow](https://discuss.elastic.co/t/valores-en-blanco-desde-el-modulo-netflow/323012)
**Author:** [@ZekeJ](https://discuss.elastic.co/u/ZekeJ)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 10:27am UTC](https://discuss.elastic.co/t/valores-en-blanco-desde-el-modulo-netflow/323012 "2023-01-12T10:27:37Z")
Hola, aquí un novato de elastic stack. Estoy intentando monitorizar los interfaces de mi palo alto a través del modulo NetFlow. En principio parece que llegan logs, pero todos los campos relativos a NetFlow ( por ejempl… --- ## [Netflow Module sends null fields](https://discuss.elastic.co/t/netflow-module-sends-null-fields/323011)
**Author:** [@ZekeJ](https://discuss.elastic.co/u/ZekeJ)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 10:25am UTC](https://discuss.elastic.co/t/netflow-module-sends-null-fields/323011 "2023-01-12T10:25:32Z")
Hello, this is an elastic stack newbie. I am trying to monitor the interfaces of my Palo Alto through the NetFlow module. At first it seems that logs arrive, but all the fields related to NetFlow (for example the netflo… --- ## [Integration for IBM App Connect Enterprise or IIB](https://discuss.elastic.co/t/integration-for-ibm-app-connect-enterprise-or-iib/323004)
**Author:** [@PetervH](https://discuss.elastic.co/u/PetervH)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 9:43am UTC](https://discuss.elastic.co/t/integration-for-ibm-app-connect-enterprise-or-iib/323004 "2023-01-12T09:43:59Z")
Is there an integration available for displaying event data emitted from IBM App Connect Enterprise or IIB? --- ## [Max\_docs\_per\_index exceeded](https://discuss.elastic.co/t/max-docs-per-index-exceeded/322994)
**Author:** [@Dimitri\_F](https://discuss.elastic.co/u/Dimitri_F)\ **Replies:** 7\ **Last updated:** [January 12, 2023, 9:25am UTC](https://discuss.elastic.co/t/max-docs-per-index-exceeded/322994 "2023-01-12T09:25:07Z")
Hello. I use Elasticsearch with Graylog. During this week I noticed that my Elasticsearch server is running out of disk space. It’s configured to store 240 indices. Max\_docs\_per\_index is 20 million documents. Having che… --- ## [The Plan to support SNMP Traps version 3 as input plugin?](https://discuss.elastic.co/t/the-plan-to-support-snmp-traps-version-3-as-input-plugin/322907)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [January 12, 2023, 8:50am UTC](https://discuss.elastic.co/t/the-plan-to-support-snmp-traps-version-3-as-input-plugin/322907 "2023-01-12T08:50:00Z")
Plant to support SNMP Traps version 3 as input plugin? So far V3 not supported if there is plan and info you can everyone to add me, please don't hesitate. thank you --- ## [Kibana Webhook to Ansible Tower Doesn't work](https://discuss.elastic.co/t/kibana-webhook-to-ansible-tower-doesnt-work/322998)
**Author:** [@dxcr](https://discuss.elastic.co/u/dxcr)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 8:08am UTC](https://discuss.elastic.co/t/kibana-webhook-to-ansible-tower-doesnt-work/322998 "2023-01-12T08:08:27Z")
I am trying to run an Ansible tower with Kibana webhook connector but it's not working. This playbook works fine by using "curl -X POST -u username:password https://mytower.company.com/api/v2/job\_templates/99/launch/ an… --- ## [ELasticsearch 7.3.2 on ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-3-2-on-ubuntu-20-04/322984)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 3\ **Last updated:** [January 12, 2023, 6:47am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-on-ubuntu-20-04/322984 "2023-01-12T06:47:40Z")
Hi Team, Can we install elasticsearch 7.3.2 in ubunutu 20.04. In the support matrix elasticsearch team no supported in to install on ubunut 20.04 But for our need shall we install 7.3.2 in ubuntu 20.0.4. is this cause… --- ## [Unable to access elasticsearch on a particular network](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-a-particular-network/322878)
**Author:** [@Jay\_Ostwal](https://discuss.elastic.co/u/Jay_Ostwal)\ **Replies:** 8\ **Last updated:** [January 12, 2023, 6:40am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-a-particular-network/322878 "2023-01-12T06:40:48Z")
I am using elasticsearch since more than one year on a particular wifi network. Suddenly since 2 days I am unable to access the data from elasticsearch on this particular network and I am getting error as ConnectionError… --- ## [Elasticsearch not starting after RHEL kernel upgrade](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076)
**Author:** [@hasith-adl](https://discuss.elastic.co/u/hasith-adl)\ **Replies:** 7\ **Last updated:** [January 12, 2023, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076 "2023-01-12T06:22:42Z")
Hi, Elasticsearch (v7.5.2) does not start after performing a kernel upgrade from 3.10.0-957.el7 to 3.10.0-1160.80.1.el7. \[2022-12-28T12:30:27,741\]\[INFO \]\[o.e.b.BootstrapChecks \] \[igw-edb3\] bound or publishing to a n… --- ## [Controls - Option List - "Dynamic Options" not working/understood?](https://discuss.elastic.co/t/controls-option-list-dynamic-options-not-working-understood/321138)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 3\ **Last updated:** [December 15, 2022, 7:29am UTC](https://discuss.elastic.co/t/controls-option-list-dynamic-options-not-working-understood/321138 "2022-12-15T07:29:27Z")
Hi! I'm working with a few Option Lists in the same visualization, and either I don't understand what "Dynamic Options" does or I'm doing something wrong. Let's say I have a dataset like: { "person": "A", "house": "ho… --- ## [Error: Could not find or load main class org.elasticsearch.launcher.CliToolLauncher](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572)
**Author:** [@dziugitaz](https://discuss.elastic.co/u/dziugitaz)\ **Replies:** 3\ **Last updated:** [January 12, 2023, 3:26am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572 "2023-01-12T03:26:27Z")
I'm using windows and when I'm trying to run any other command than bin/elasticsearch.bat I get this strange error, maybe do you know why? I've checked the logs but I didn't found anything other than this dziugas@DESKTO… --- ## [Configure multiple logs location on filebeat](https://discuss.elastic.co/t/configure-multiple-logs-location-on-filebeat/322971)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 10\ **Last updated:** [January 12, 2023, 1:36am UTC](https://discuss.elastic.co/t/configure-multiple-logs-location-on-filebeat/322971 "2023-01-12T01:36:53Z")
Hi! let's say I need to send logs from a few directories to elasticsearch, like this: /var/log/logfolder1/server.log /var/log/logfolder2/server.log /var/log/logfolder3/server.log /var/log/logfolder4/server.log wha… --- ## [How to hide toolbar in dashboard?](https://discuss.elastic.co/t/how-to-hide-toolbar-in-dashboard/317000)
**Author:** [@papilocheg1992](https://discuss.elastic.co/u/papilocheg1992)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 9:08am UTC](https://discuss.elastic.co/t/how-to-hide-toolbar-in-dashboard/317000 "2022-10-20T09:08:24Z")
Hello! Can I completely hide this area for a specific userspace? If yes, how can I do it? Thanks for the answer --- ## [Patch management](https://discuss.elastic.co/t/patch-management/322887)
**Author:** [@calm\_silence](https://discuss.elastic.co/u/calm_silence)\ **Replies:** 1\ **Last updated:** [January 11, 2023, 11:30pm UTC](https://discuss.elastic.co/t/patch-management/322887 "2023-01-11T23:30:44Z")
Can we do patch management of multiple servers running in any cloud Using ELK stack? if yes then how? --- ## [No results found](https://discuss.elastic.co/t/no-results-found/322957)
**Author:** [@Ellisson](https://discuss.elastic.co/u/Ellisson)\ **Replies:** 2\ **Last updated:** [January 11, 2023, 10:50pm UTC](https://discuss.elastic.co/t/no-results-found/322957 "2023-01-11T22:50:34Z")
It receives the flow only to assemble the dashboards --- ## [Snapshot multiple indexes on cold tier only](https://discuss.elastic.co/t/snapshot-multiple-indexes-on-cold-tier-only/322923)
**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\ **Replies:** 1\ **Last updated:** [January 11, 2023, 10:28pm UTC](https://discuss.elastic.co/t/snapshot-multiple-indexes-on-cold-tier-only/322923 "2023-01-11T22:28:08Z")
Hello guys, we have couple of our end users requesting to store their data in Elasticsearch for auditing purpose for 3 years. As data grows we have the bottleneck in our resources, so we have decided snapshot the data … --- ## [Cannot form cluster of Elasticsearch on EKS](https://discuss.elastic.co/t/cannot-form-cluster-of-elasticsearch-on-eks/322186)
**Author:** [@Zeynal\_Hajili](https://discuss.elastic.co/u/Zeynal_Hajili)\ **Replies:** 2\ **Last updated:** [January 11, 2023, 9:58pm UTC](https://discuss.elastic.co/t/cannot-form-cluster-of-elasticsearch-on-eks/322186 "2023-01-11T21:58:43Z")
Hello, dear community, I am very new to Elasticsearch. I have been asked to deploy the ELK stack on AWS EKS and unfortunately, I am facing some issues. I am deploying the ELK stack in the following order via Helm chart… --- ## [How to Mask Card Number](https://discuss.elastic.co/t/how-to-mask-card-number/322914)
**Author:** [@Anil0110](https://discuss.elastic.co/u/Anil0110)\ **Replies:** 2\ **Last updated:** [January 11, 2023, 9:55pm UTC](https://discuss.elastic.co/t/how-to-mask-card-number/322914 "2023-01-11T21:55:35Z")
How to Mask Card Number OF XML MESSAGE --- ## [Kibana http to elasticsearch](https://discuss.elastic.co/t/kibana-http-to-elasticsearch/322896)
**Author:** [@Vojtech\_Vavra](https://discuss.elastic.co/u/Vojtech_Vavra)\ **Replies:** 0\ **Last updated:** [January 11, 2023, 9:26am UTC](https://discuss.elastic.co/t/kibana-http-to-elasticsearch/322896 "2023-01-11T09:26:19Z")
Hello I would like to ask how to configure kibana for connect to the elasticsearch on HTTP not HTTPS. i have installed ECK on kubernetes and turn off SSL on elasticsearch because I have treafik before ECK and don't nee… --- ## [Checksum failed (hardware problem?)](https://discuss.elastic.co/t/checksum-failed-hardware-problem/322500)
**Author:** [@yang\_peng](https://discuss.elastic.co/u/yang_peng)\ **Replies:** 2\ **Last updated:** [January 11, 2023, 9:11pm UTC](https://discuss.elastic.co/t/checksum-failed-hardware-problem/322500 "2023-01-11T21:11:03Z")
A two-node cluster was restarted. The shard of one index failed to merge. The error is as follows： failed shard on node \[VosGChW1QTudYo9Tcl5sqg\]: shard failure, reason \[merge failed\], failure NotSerializableExceptionWra… --- ## [Watcher Action Webhook (Google Meet space) errored](https://discuss.elastic.co/t/watcher-action-webhook-google-meet-space-errored/322956)
**Author:** [@diegomarting](https://discuss.elastic.co/u/diegomarting)\ **Replies:** 0\ **Last updated:** [January 11, 2023, 4:22pm UTC](https://discuss.elastic.co/t/watcher-action-webhook-google-meet-space-errored/322956 "2023-01-11T16:22:11Z")
I am trying to create a Watcher monitor to check the number of documents of a query and send a message to a Google Webhook when the condition is met. The query and the condition work right. However when the condition is … --- ## [\_dateparseerror for timestamp in this format: 2023-01-11T05:07:30.648881Z,](https://discuss.elastic.co/t/dateparseerror-for-timestamp-in-this-format-2023-01-11t0530-648881z/322959)
**Author:** [@rickfish](https://discuss.elastic.co/u/rickfish)\ **Replies:** 10\ **Last updated:** [January 11, 2023, 8:54pm UTC](https://discuss.elastic.co/t/dateparseerror-for-timestamp-in-this-format-2023-01-11t0530-648881z/322959 "2023-01-11T20:54:45Z")
I am trying to parse a field called create\_ts with a value of 2023-01-11T05:07:30.648881Z and then add fields for year, month and day. I have scoured everything to figure out the correct timestamp pattern and cannot see… --- ## [TEXT FIELDS NOT GETTING IMPORTED](https://discuss.elastic.co/t/text-fields-not-getting-imported/314052)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 4\ **Last updated:** [October 20, 2022, 9:06am UTC](https://discuss.elastic.co/t/text-fields-not-getting-imported/314052 "2022-10-20T09:06:20Z")
Text fields are not optimized for operations that require per-document field data like aggregations and sorting, so these operations are disabled by default. Please use a keyword field instead. Alternatively, set fieldda… [Previous page](https://discuss.elastic.co/latest.md?page=823) [Next page](https://discuss.elastic.co/latest.md?page=825)