# Latest

**URL:** https://discuss.elastic.co/latest.md?page=859

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 860

---

## [Error when opening kibana](https://discuss.elastic.co/t/error-when-opening-kibana/321164)

<div class="topic-metadata">

**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 8:06pm UTC](https://discuss.elastic.co/t/error-when-opening-kibana/321164 "2022-12-13T20:06:41Z")

</div>

Hi, In ECE, I have created new cluster but when I want to start kibana, I receive the error: {"ok":false,"message":"There was an internal server error."} 500 Internal Server Error Any idea what could cause this? br …

---

## [Logstash.conf error](https://discuss.elastic.co/t/logstash-conf-error/321157)

<div class="topic-metadata">

**Author:** [@limitless](https://discuss.elastic.co/u/limitless)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 6:57pm UTC](https://discuss.elastic.co/t/logstash-conf-error/321157 "2022-12-13T18:57:04Z")

</div>

.\\bin\\logstash.bat -f logstash.conf "Using bundled JDK: A:\\logstash-8.5.3\\jdk\\bin\\java.exe" Sending Logstash logs to A:/logstash-8.5.3/logs which is now configured via log4j2.properties \[2022-12-13T22:19:36,586\]\[INFO …

---

## [Conflict occur with rollup job](https://discuss.elastic.co/t/conflict-occur-with-rollup-job/319817)

<div class="topic-metadata">

**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 6:50pm UTC](https://discuss.elastic.co/t/conflict-occur-with-rollup-job/319817 "2022-12-13T18:50:39Z")

</div>

Hi Team, I am using elasticsearch and kibana 7.16.2 and I'm facing conflicts on index pattern while creating process wise Visualization dashboard. Below I have describe two scenario, In which I faced conflict on scenar…

---

## [Logstash Agent error Failed to execute action](https://discuss.elastic.co/t/logstash-agent-error-failed-to-execute-action/321147)

<div class="topic-metadata">

**Author:** [@suresh.vemu](https://discuss.elastic.co/u/suresh.vemu)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 6:45pm UTC](https://discuss.elastic.co/t/logstash-agent-error-failed-to-execute-action/321147 "2022-12-13T18:45:42Z")

</div>

I am new to logstash, and just installed it. When i try to run its giving me the below error. i am using logstash 8.5.3 version. appreciate any help. \[2022-12-13T11:29:39,728\]\[ERROR\]\[logstash.agent \] Failed to…

---

## [Visualize a utilize of bot execution during a day\\](https://discuss.elastic.co/t/visualize-a-utilize-of-bot-execution-during-a-day/318986)

<div class="topic-metadata">

**Author:** [@yonaten08](https://discuss.elastic.co/u/yonaten08)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 7:51pm UTC](https://discuss.elastic.co/t/visualize-a-utilize-of-bot-execution-during-a-day/318986 "2022-11-15T19:51:42Z")

</div>

hi all, quite new in Kibana and need some help, I'm trying to visualize a utilization of bots during a day\\days (depended on filter @timestemp) , when a bot ended his run he log is total execution time in second, and …

---

## [Elastic agent on EKS unhealthy](https://discuss.elastic.co/t/elastic-agent-on-eks-unhealthy/321155)

<div class="topic-metadata">

**Author:** [@wh1sss](https://discuss.elastic.co/u/wh1sss)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 5:34pm UTC](https://discuss.elastic.co/t/elastic-agent-on-eks-unhealthy/321155 "2022-12-13T17:34:14Z")

</div>

Hi everyone, I created a cluster on the elastic cloud and I'm using the "Kubernetes Security", "Kubernetes" and "Elastic APM" integrations. The agents are being installed directly on the EKS cluster on AWS with the m…

---

## [Explain feature is not working in a search template](https://discuss.elastic.co/t/explain-feature-is-not-working-in-a-search-template/321060)

<div class="topic-metadata">

**Author:** [@Randall-McRee](https://discuss.elastic.co/u/Randall-McRee)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 4:26pm UTC](https://discuss.elastic.co/t/explain-feature-is-not-working-in-a-search-template/321060 "2022-12-13T16:26:39Z")

</div>

When I put "explain=true" into a search template (as a parameter, so we can turn it on and off) it does not work. I see a similar problem long ago in .net...this is version 8.14. Following is simple kibana demonstrating…

---

## [APM shared field name between RUM and Java agent](https://discuss.elastic.co/t/apm-shared-field-name-between-rum-and-java-agent/320820)

<div class="topic-metadata">

**Author:** [@gigaset](https://discuss.elastic.co/u/gigaset)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 4:18pm UTC](https://discuss.elastic.co/t/apm-shared-field-name-between-rum-and-java-agent/320820 "2022-12-13T16:18:48Z")

</div>

Hi, We have implemented RUM in our React-based frontend and Java APM agents in the backend. We can see that the APM server in the "Service Map" makes correlations between the calls. However, during the investigations, …

---

## [Request Body is Required](https://discuss.elastic.co/t/request-body-is-required/321139)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 6\
**Last updated:** [December 13, 2022, 3:24pm UTC](https://discuss.elastic.co/t/request-body-is-required/321139 "2022-12-13T15:24:23Z")

</div>

Hello, every time i try to use the Kibana Dev Tools, if the request has a body it fails with this: Yes, there are no newlines and also the request body is there: I saw many similar threads, but all without soluti…

---

## [GET Kibana API output in table format to send health and nodes details](https://discuss.elastic.co/t/get-kibana-api-output-in-table-format-to-send-health-and-nodes-details/321039)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 4:10pm UTC](https://discuss.elastic.co/t/get-kibana-api-output-in-table-format-to-send-health-and-nodes-details/321039 "2022-12-13T16:10:45Z")

</div>

Hi team, I need to send kibana report which contains all values from below API. We need to send this in one email. Is this possible to create table and send this report in table format. GET \_cluster/health GET /\_cat/…

---

## [ML problem](https://discuss.elastic.co/t/ml-problem/321144)

<div class="topic-metadata">

**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 4:04pm UTC](https://discuss.elastic.co/t/ml-problem/321144 "2022-12-13T16:04:05Z")

</div>

When I try to run an anomaly detection job in elastic I get an error and it does not execute me. The error I get in the elastic console is this: \[2022-12-13T16:30:18,711\]\[WARN \]\[o.e.p.PersistentTasksClusterService\] \[alv…

---

## [During terms aggregation with partition we get sum\_other\_doc\_count \> 0 in between partitions](https://discuss.elastic.co/t/during-terms-aggregation-with-partition-we-get-sum-other-doc-count-0-in-between-partitions/321140)

<div class="topic-metadata">

**Author:** [@akleiber](https://discuss.elastic.co/u/akleiber)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 3:29pm UTC](https://discuss.elastic.co/t/during-terms-aggregation-with-partition-we-get-sum-other-doc-count-0-in-between-partitions/321140 "2022-12-13T15:29:10Z")

</div>

We are running ES 6.8 and move some documents to another ES Cluster with a more recent version. We also transform the documents during that process. We need to group documents by a field, so we do this via a terms aggre…

---

## [Inconsistency in the number of documents](https://discuss.elastic.co/t/inconsistency-in-the-number-of-documents/321129)

<div class="topic-metadata">

**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 3:25pm UTC](https://discuss.elastic.co/t/inconsistency-in-the-number-of-documents/321129 "2022-12-13T15:25:38Z")

</div>

I have an index with 2 shards which have 1600M documents each (~3200M total), but when I calculate a histogram, the sum does not give me the total number of documents, the result is much less, what is the reason?

---

## [Store query in cache](https://discuss.elastic.co/t/store-query-in-cache/318994)

<div class="topic-metadata">

**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 2:22pm UTC](https://discuss.elastic.co/t/store-query-in-cache/318994 "2022-12-13T14:22:53Z")

</div>

Hi, how to put query with aggregation in ram cache? I can't find an example. Version: 7.9 There is my query: GET product/\_search { "size": 0, "query": { "bool": { "must\_not": { "match": { …

---

## [Elastic search cluster showing unhealthy, Cluster "red"](https://discuss.elastic.co/t/elastic-search-cluster-showing-unhealthy-cluster-red/321070)

<div class="topic-metadata">

**Author:** [@Harsh3](https://discuss.elastic.co/u/Harsh3)\
**Replies:** 5\
**Last updated:** [December 13, 2022, 1:51pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-showing-unhealthy-cluster-red/321070 "2022-12-13T13:51:35Z")

</div>

Hello ! I am new to Elasticsearch! This is the first time i am doing installation, if someone can pls help, have spent days searching for the issue but no luck .. We have kibana running inside EKS cluster and Elastic-s…

---

## [Another Cloudflare integration issue](https://discuss.elastic.co/t/another-cloudflare-integration-issue/320085)

<div class="topic-metadata">

**Author:** [@ethhack](https://discuss.elastic.co/u/ethhack)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 1:41pm UTC](https://discuss.elastic.co/t/another-cloudflare-integration-issue/320085 "2022-12-13T13:41:03Z")

</div>

Similar to this post for which I see no resolution anywhere, I have an issue with the Cloudflare logpull integration erroring out about the 168h maximum: "message":"Error while processing http request: failed to execute…

---

## [ElasticSearch Azure storage](https://discuss.elastic.co/t/elasticsearch-azure-storage/321124)

<div class="topic-metadata">

**Author:** [@OlLap](https://discuss.elastic.co/u/OlLap)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 1:30pm UTC](https://discuss.elastic.co/t/elasticsearch-azure-storage/321124 "2022-12-13T13:30:54Z")

</div>

Hello everyone, is it possible to use Azure Storage account (Files share or Blob container) for Elasticsearch data nodes?

---

## [Unable to access elastic console](https://discuss.elastic.co/t/unable-to-access-elastic-console/318887)

<div class="topic-metadata">

**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\
**Replies:** 2\
**Last updated:** [November 15, 2022, 1:57pm UTC](https://discuss.elastic.co/t/unable-to-access-elastic-console/318887 "2022-11-15T13:57:55Z")

</div>

Hi, we have already created space on Elasticsearch server but still facing issue. we also checked for cluster allocation and found below output. \`\`{ "note" : "No shard was specified in the explain API request, so thi…

---

## [Nginx module on k8s - access and error from the same path?](https://discuss.elastic.co/t/nginx-module-on-k8s-access-and-error-from-the-same-path/321126)

<div class="topic-metadata">

**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 12:57pm UTC](https://discuss.elastic.co/t/nginx-module-on-k8s-access-and-error-from-the-same-path/321126 "2022-12-13T12:57:27Z")

</div>

Hey, So I have a micro service with nginx, I am using filebeat nginx module to read the logs: filebeat.autodiscover: providers: - type: kubernetes hints.enabled: true tem…

---

## [ECK managed elasticsearch (with TLS enabled) getting flooded with "received plaintext http traffic on an https channel" logs](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117)

<div class="topic-metadata">

**Author:** [@Daithi\_O\_Conchobhair](https://discuss.elastic.co/u/Daithi_O_Conchobhair)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 12:36pm UTC](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117 "2022-12-13T12:36:33Z")

</div>

Hi there, This is such a strange issue I am not sure if it is a defect or something that I am doing wrong. I will say in my defence that I see it when I just use the quickstart guide also. Versions: IBM Kubernetes Se…

---

## [Elastic.Clients.Elasticsearch 8.0.1](https://discuss.elastic.co/t/elastic-clients-elasticsearch-8-0-1/320388)

<div class="topic-metadata">

**Author:** [@bobwiller](https://discuss.elastic.co/u/bobwiller)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 12:36pm UTC](https://discuss.elastic.co/t/elastic-clients-elasticsearch-8-0-1/320388 "2022-12-13T12:36:30Z")

</div>

Does anyone know if the \[Text(Ignore = true)\] attribute is available in the new 8.x .Net Client yet? Or is there a new/different way of doing this? Thanks, Bob

---

## [ECS category & type vs Grok](https://discuss.elastic.co/t/ecs-category-type-vs-grok/321063)

<div class="topic-metadata">

**Author:** [@tricia](https://discuss.elastic.co/u/tricia)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 12:19pm UTC](https://discuss.elastic.co/t/ecs-category-type-vs-grok/321063 "2022-12-13T12:19:39Z")

</div>

Hi! This seems like it should be a simple question but I'm having trouble finding relevant documentation, so I appreciate any advice y'all might have. I'm trying to write filters to handle OpenSSH log data, and I'd like…

---

## [Table displaying sum of latest values](https://discuss.elastic.co/t/table-displaying-sum-of-latest-values/321109)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 12:11pm UTC](https://discuss.elastic.co/t/table-displaying-sum-of-latest-values/321109 "2022-12-13T12:11:39Z")

</div>

Hi! Given the following example dataset showing the number of warnings in C++ files for a given date, and also containing information about which project each C++ file belongs to: { "file": "a.cpp", "project": "foo", "…

---

## [Kibana dashboard search view "aborted"](https://discuss.elastic.co/t/kibana-dashboard-search-view-aborted/320448)

<div class="topic-metadata">

**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 12:08pm UTC](https://discuss.elastic.co/t/kibana-dashboard-search-view-aborted/320448 "2022-12-13T12:08:04Z")

</div>

Hello, That topic is similar to : Kibana dashboard table view results in "Aborted" I have few a dashboard with every contains few visualisation, and they works fine, but one of them (search view) often shows me a messa…

---

## [Child Documents performance](https://discuss.elastic.co/t/child-documents-performance/321120)

<div class="topic-metadata">

**Author:** [@Emanuel\_Zienecker](https://discuss.elastic.co/u/Emanuel_Zienecker)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 11:43am UTC](https://discuss.elastic.co/t/child-documents-performance/321120 "2022-12-13T11:43:26Z")

</div>

Hello, I am planning to change the model from nested of parent-child. The following model: Questions -\> Answer. Currently these were all stored nested, now just as parent-child. My question now is this: What makes more…

---

## [Filebeat internal logs are getting repeated](https://discuss.elastic.co/t/filebeat-internal-logs-are-getting-repeated/321115)

<div class="topic-metadata">

**Author:** [@Nikhitha\_Karennagari](https://discuss.elastic.co/u/Nikhitha_Karennagari)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 11:25am UTC](https://discuss.elastic.co/t/filebeat-internal-logs-are-getting-repeated/321115 "2022-12-13T11:25:48Z")

</div>

Filebeat internal logs are repeating which is unwanted. 2022-12-13T11:03:51.516Z INFO log/input.go:157 Configured paths: \[/var/log/pods/7d447f4fea175a79a4bdac6296034497a897f2b94391cc73f7dadc4b5b806624/\*-json.log /var/lo…

---

## [Source.geo.country\_name field is missing](https://discuss.elastic.co/t/source-geo-country-name-field-is-missing/321113)

<div class="topic-metadata">

**Author:** [@udaypatel07](https://discuss.elastic.co/u/udaypatel07)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 11:18am UTC](https://discuss.elastic.co/t/source-geo-country-name-field-is-missing/321113 "2022-12-13T11:18:20Z")

</div>

Hi, I have integrated Sonicwall Firewall with ELK for the last 6 months, and I'm receiving logs correctly but suddenly I'm facing a problem in one of the Sonicwall module fields which are the source.geo.country\_name & de…

---

## [Filebeat sends no logs to Kafka](https://discuss.elastic.co/t/filebeat-sends-no-logs-to-kafka/320968)

<div class="topic-metadata">

**Author:** [@nota](https://discuss.elastic.co/u/nota)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:41am UTC](https://discuss.elastic.co/t/filebeat-sends-no-logs-to-kafka/320968 "2022-12-13T10:41:44Z")

</div>

Running Filebeat 8.5.3 on Ubuntu 20.04. I am trying to send some logs to Kafka using FIlebeat. This is my filebeat.yml filebeat.inputs: - type: filestream id: jenkinsfilestream enabled: true paths: - "/var/log…

---

## [How to update the maapings of a certain index in Elastic Search 8.4.1. using Python?](https://discuss.elastic.co/t/how-to-update-the-maapings-of-a-certain-index-in-elastic-search-8-4-1-using-python/321107)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 10:13am UTC](https://discuss.elastic.co/t/how-to-update-the-maapings-of-a-certain-index-in-elastic-search-8-4-1-using-python/321107 "2022-12-13T10:13:13Z")

</div>

So, I'm pushing CSV Data into Elastic Search using python. I'm able to push the data and an index is getting created but the mappings of the index contain only text and keyword. Even if there is a field with the type "lo…

---

## [Analytics stops after upgrade from 7.17.1 to 8.5.2](https://discuss.elastic.co/t/analytics-stops-after-upgrade-from-7-17-1-to-8-5-2/320505)

<div class="topic-metadata">

**Author:** [@Florent\_Andre](https://discuss.elastic.co/u/Florent_Andre)\
**Replies:** 7\
**Last updated:** [December 13, 2022, 10:06am UTC](https://discuss.elastic.co/t/analytics-stops-after-upgrade-from-7-17-1-to-8-5-2/320505 "2022-12-13T10:06:58Z")

</div>

Dears Elasticians, After an upgrade from 7.17 to 8.5, no more queries or clicks are available in the "Analytics" tab. Older events are still available, but the new ones do not appears. I try to force restart the clust…

[Previous page](https://discuss.elastic.co/latest.md?page=858)

[Next page](https://discuss.elastic.co/latest.md?page=860)
