# Latest **URL:** https://discuss.elastic.co/latest.md?page=903 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 904 --- ## [Cloning using DotNet Client](https://discuss.elastic.co/t/cloning-using-dotnet-client/318503)
**Author:** [@abby\_d](https://discuss.elastic.co/u/abby_d)\ **Replies:** 2\ **Last updated:** [November 9, 2022, 7:00am UTC](https://discuss.elastic.co/t/cloning-using-dotnet-client/318503 "2022-11-09T07:00:32Z")
Hi All. We can clone an index with one of the following commands in Console POST /\/\_clone/\ PUT /\/\_clone/\ Can someone point me in the direction how we can achieve the same usin… --- ## [Netflow Poor Performance with filebeat 7.13](https://discuss.elastic.co/t/netflow-poor-performance-with-filebeat-7-13/318512)
**Author:** [@vinit0711](https://discuss.elastic.co/u/vinit0711)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 6:54am UTC](https://discuss.elastic.co/t/netflow-poor-performance-with-filebeat-7-13/318512 "2022-11-09T06:54:32Z")
I am capturing netflow packets and displaying the information on kibana dashboard .I am able to do so but around 30-40 % packets are being dropped . I am verfiying the packets in tcp dump and the some packets not able to… --- ## [I was logging my log from .net application using seilog before enabling Xpack security in stack the logs stopped comming](https://discuss.elastic.co/t/i-was-logging-my-log-from-net-application-using-seilog-before-enabling-xpack-security-in-stack-the-logs-stopped-comming/318499)
**Author:** [@DIVYANSH\_SINGH](https://discuss.elastic.co/u/DIVYANSH_SINGH)\ **Replies:** 4\ **Last updated:** [November 9, 2022, 6:47am UTC](https://discuss.elastic.co/t/i-was-logging-my-log-from-net-application-using-seilog-before-enabling-xpack-security-in-stack-the-logs-stopped-comming/318499 "2022-11-09T06:47:28Z")
I was logging my log from .net application using serilog before enabling Xpack security in stack the logs stopped comming How will i solve this --- ## [Import kibana dashboard using ansible playbook](https://discuss.elastic.co/t/import-kibana-dashboard-using-ansible-playbook/317965)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 4\ **Last updated:** [November 9, 2022, 6:03am UTC](https://discuss.elastic.co/t/import-kibana-dashboard-using-ansible-playbook/317965 "2022-11-09T06:03:55Z")
Hi, I have created a kibana dashboard and exported it. This have a .ndjson file with me. Now I want to import this dashboard to kibana (other severs) using ansible playbook using the .ndjson file i already have. How can… --- ## [INDEX CLOSED EXCEPTION](https://discuss.elastic.co/t/index-closed-exception/318507)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 6:03am UTC](https://discuss.elastic.co/t/index-closed-exception/318507 "2022-11-09T06:03:36Z")
Continuing the discussion from Index\_closed\_exception: so how can i resolve this ? --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/318400)
**Author:** [@bta16](https://discuss.elastic.co/u/bta16)\ **Replies:** 12\ **Last updated:** [November 9, 2022, 5:43am UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/318400 "2022-11-09T05:43:09Z")
Hi there, i configure suricata-\>filebeat-\>kibana but when i Check that data is received from the Filebeat suricata module. There is no data. I think i get an error in filebeat. any information in my situation: i install… --- ## [INDEX IN CLOSED STATE NOT ABLE TO OPEN](https://discuss.elastic.co/t/index-in-closed-state-not-able-to-open/318396)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 10\ **Last updated:** [November 9, 2022, 5:00am UTC](https://discuss.elastic.co/t/index-in-closed-state-not-able-to-open/318396 "2022-11-09T05:00:44Z")
hi all , we did rollback to our server after that suddenly all indices went to closed state --- ## [Can somebody interpret the data if the shard is unbalanced?](https://discuss.elastic.co/t/can-somebody-interpret-the-data-if-the-shard-is-unbalanced/318491)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 4:19am UTC](https://discuss.elastic.co/t/can-somebody-interpret-the-data-if-the-shard-is-unbalanced/318491 "2022-11-09T04:19:48Z")
Based on the following data, may I know if the shard is unbalanced or is it evenly distributed for people index? We have 2 primary shards and 1 replica health status index uuid pri rep docs.… --- ## [Reference Set](https://discuss.elastic.co/t/reference-set/318375)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 3\ **Last updated:** [November 9, 2022, 2:57am UTC](https://discuss.elastic.co/t/reference-set/318375 "2022-11-09T02:57:11Z")
Hi, We are using elasticsearch for alerting. Hosts are created and destroyed all the time for development purposes, but we have a core of devices which are tightly controlled. This list of devices is 100+ and are spre… --- ## [Filebeat PubSub module throughput issue](https://discuss.elastic.co/t/filebeat-pubsub-module-throughput-issue/318488)
**Author:** [@wendel](https://discuss.elastic.co/u/wendel)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 1:51am UTC](https://discuss.elastic.co/t/filebeat-pubsub-module-throughput-issue/318488 "2022-11-09T01:51:06Z")
I have a single Filebeat 8.4.3 instance running in AWS pulling GCP audit events from a GCP PubSub topic and output to Kafka Topic. Tried various configuration/settings without any success going above 650 messages/s in Fi… --- ## [What is bucket\_influencers?](https://discuss.elastic.co/t/what-is-bucket-influencers/318486)
**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 1:38am UTC](https://discuss.elastic.co/t/what-is-bucket-influencers/318486 "2022-11-09T01:38:35Z")
What I search "result\_type : bucket" in ml index, I could see bucket\_influencers info. Would you please explain exactly what bucket\_influencers is?? And Is there any document for where I can check the properties? I wo… --- ## [How to remove elasticsearch and reinstall to reset cluster](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904)
**Author:** [@tmdgk490255](https://discuss.elastic.co/u/tmdgk490255)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 1:03am UTC](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904 "2022-11-09T01:03:58Z")
I want to remove es on ec2 instance and reinstall it to initialize cluster and node info How can I? I tried but it always had same cluster uuid even I uninstalled it First I installed es following these steps sudo rpm… --- ## [Pagination beyond 100 pages](https://discuss.elastic.co/t/pagination-beyond-100-pages/318260)
**Author:** [@Jure\_potocnik](https://discuss.elastic.co/u/Jure_potocnik)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 12:26am UTC](https://discuss.elastic.co/t/pagination-beyond-100-pages/318260 "2022-11-09T00:26:29Z")
Hi everyone. I am having some questions about pagination, increasing the number or results etc. I have couple of milions of items (products) in the engine. I would like to be able to paginate to all the results. Right … --- ## [Sorting collapsed results based on nested documents](https://discuss.elastic.co/t/sorting-collapsed-results-based-on-nested-documents/318480)
**Author:** [@tombrisland](https://discuss.elastic.co/u/tombrisland)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 10:20pm UTC](https://discuss.elastic.co/t/sorting-collapsed-results-based-on-nested-documents/318480 "2022-11-08T22:20:10Z")
I have a query which makes use of collapse to de-duplicate results. I'm expecting some collapsed results to have multiple duplicates, and some to be unique. I would like to sort the entries in such a way that the results… --- ## [Send syslogs in batches/an array of events records?](https://discuss.elastic.co/t/send-syslogs-in-batches-an-array-of-events-records/318477)
**Author:** [@ianbv](https://discuss.elastic.co/u/ianbv)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 9:41pm UTC](https://discuss.elastic.co/t/send-syslogs-in-batches-an-array-of-events-records/318477 "2022-11-08T21:41:03Z")
Is there a way to group linux syslogs events together in to an array with a logstash filter or output plugin? Here is the example schema I need to get the logs into for sending to ADX: \[ { "records": \[ { r1 … --- ## [Send Ubuntu Syslogs to Azure Event Hub with Logstash - json issue](https://discuss.elastic.co/t/send-ubuntu-syslogs-to-azure-event-hub-with-logstash-json-issue/317990)
**Author:** [@ianbv](https://discuss.elastic.co/u/ianbv)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 9:11pm UTC](https://discuss.elastic.co/t/send-ubuntu-syslogs-to-azure-event-hub-with-logstash-json-issue/317990 "2022-11-08T21:11:23Z")
Situation: Using Logstash to forward ubuntu (azure vm) syslogs to an azure event hub. Problem: Using "json" or "json\_batch" results in adding the \_jsonparseerror tag to events because the syslog isn't in json format. Is… --- ## [Elasticsearch OCI bucket](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006)
**Author:** [@Walter\_Hiranpat1](https://discuss.elastic.co/u/Walter_Hiranpat1)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 9:02pm UTC](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006 "2022-11-08T21:02:22Z")
Has there been any support for using the oci (oracle cloud infrastructure) bucket to perform snapshot and restore? I thought oci bucket uses similar s3 configuration and would be compatible to use with the aws s3 plugin … --- ## [Split HTTP Poller Responses to Multiple Documents using Split Filter](https://discuss.elastic.co/t/split-http-poller-responses-to-multiple-documents-using-split-filter/318418)
**Author:** [@sajid](https://discuss.elastic.co/u/sajid)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 8:33pm UTC](https://discuss.elastic.co/t/split-http-poller-responses-to-multiple-documents-using-split-filter/318418 "2022-11-08T20:33:14Z")
We have multiple healthcheck endpoint of different applications which give response in json about the health status of that application and its dependencies. Below are the response of two of the hc URLs: URL 1 Response… --- ## [Logstash failed to start (org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:790) ~\[jruby.jar:?\])](https://discuss.elastic.co/t/logstash-failed-to-start-org-jruby-rubykernel-exit-org-jruby-rubykernel-java-790-jruby-jar/318457)
**Author:** [@Rootlente](https://discuss.elastic.co/u/Rootlente)\ **Replies:** 12\ **Last updated:** [November 8, 2022, 8:18pm UTC](https://discuss.elastic.co/t/logstash-failed-to-start-org-jruby-rubykernel-exit-org-jruby-rubykernel-java-790-jruby-jar/318457 "2022-11-08T20:18:04Z")
Hello, I am building home lab environment to collect winevent logs using filebat and send them on my Ubuntu machine where i installed everything and configured them by documentation but every time i get this error i d… --- ## [Can someone see the dashboard without the need for sign in](https://discuss.elastic.co/t/can-someone-see-the-dashboard-without-the-need-for-sign-in/318388)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 9\ **Last updated:** [November 8, 2022, 5:29pm UTC](https://discuss.elastic.co/t/can-someone-see-the-dashboard-without-the-need-for-sign-in/318388 "2022-11-08T17:29:49Z")
So, I've been building a website, where I want to show the dashboards of Kibana. So, on the website whenever the user clicks the link they will be redirected to the dashboard page in Kibana. but, the only thing I want to… --- ## [S3 Curator delete process slow - Is this a bad idea?](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430)
**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\ **Replies:** 7\ **Last updated:** [November 8, 2022, 7:52pm UTC](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430 "2022-11-08T19:52:51Z")
We have a backup process using curator that is backup to S3, unfortunately, the delete job for the snapshots has not been processed. Deleting from curator is very slow for s3 and reading on the forums this is caused by t… --- ## [How to work with es enrollment token and kibana verification code when working in kubernetes](https://discuss.elastic.co/t/how-to-work-with-es-enrollment-token-and-kibana-verification-code-when-working-in-kubernetes/316394)
**Author:** [@Kracozebr](https://discuss.elastic.co/u/Kracozebr)\ **Replies:** 0\ **Last updated:** [October 12, 2022, 3:24am UTC](https://discuss.elastic.co/t/how-to-work-with-es-enrollment-token-and-kibana-verification-code-when-working-in-kubernetes/316394 "2022-10-12T03:24:29Z")
I need to have opportunity to collect logs from my embedded device and has chosen elasticsearch and kibana for that. I can connect to my embedded device through Ethernet from my PC. I installed elasticsearch and kibana … --- ## [How to stop refresh activity while using scroll](https://discuss.elastic.co/t/how-to-stop-refresh-activity-while-using-scroll/318382)
**Author:** [@ykonathala](https://discuss.elastic.co/u/ykonathala)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 5:08pm UTC](https://discuss.elastic.co/t/how-to-stop-refresh-activity-while-using-scroll/318382 "2022-11-08T17:08:55Z")
Team Can someone help or suggest the way to pause or disable refresh while I update all the docs within scroll request ?? I do see there is a http curl request that we can do against single or multiple indexes but I am… --- ## [How to plot a line chart pointing to zero instead of smoothing out till end](https://discuss.elastic.co/t/how-to-plot-a-line-chart-pointing-to-zero-instead-of-smoothing-out-till-end/317979)
**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\ **Replies:** 7\ **Last updated:** [November 8, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-plot-a-line-chart-pointing-to-zero-instead-of-smoothing-out-till-end/317979 "2022-11-08T17:03:06Z")
As per attached graph, I am expecting that line graph should show some round circle if values after 5 on x axis are missing or just drop to zero on x axis. --- ## [How to create API Key for user with \`viewer\` role?](https://discuss.elastic.co/t/how-to-create-api-key-for-user-with-viewer-role/318359)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 7\ **Last updated:** [November 8, 2022, 4:57pm UTC](https://discuss.elastic.co/t/how-to-create-api-key-for-user-with-viewer-role/318359 "2022-11-08T16:57:16Z")
I've been able to successfully create api keys for super user accounts. But I don't seem to have the option to create api keys for users that only have the role viewer. So for example, I made this user: But when I … --- ## [Troubleshooting APM Agent to Fleet Server](https://discuss.elastic.co/t/troubleshooting-apm-agent-to-fleet-server/318136)
**Author:** [@sb-devora](https://discuss.elastic.co/u/sb-devora)\ **Replies:** 8\ **Last updated:** [November 8, 2022, 4:54pm UTC](https://discuss.elastic.co/t/troubleshooting-apm-agent-to-fleet-server/318136 "2022-11-08T16:54:21Z")
Hi, I'm trying to set up Elastic APM on a dotnet mvc app. Testing with a dotnet core console app but my intended setup is for a regular dotnet framework project in mvc. I have Elasticsearch and Kibana set up. I have m… --- ## [Stop auto-placement of visualisations within a dashboard](https://discuss.elastic.co/t/stop-auto-placement-of-visualisations-within-a-dashboard/318442)
**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\ **Replies:** 2\ **Last updated:** [November 8, 2022, 3:53pm UTC](https://discuss.elastic.co/t/stop-auto-placement-of-visualisations-within-a-dashboard/318442 "2022-11-08T15:53:12Z")
Continuing the discussion from Stop Graphs Auto-Filling Blank Space in Dashboard: Hi, could you provide the steps to creating an empty markdown visualisation? Sorry, I don't understand how this is done. I am editing … --- ## [Elastic agent healthy but no logs sent](https://discuss.elastic.co/t/elastic-agent-healthy-but-no-logs-sent/318447)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 3:49pm UTC](https://discuss.elastic.co/t/elastic-agent-healthy-but-no-logs-sent/318447 "2022-11-08T15:49:11Z")
Hi, I am trying to install Elastic Agents, they are labelled as healthy but I do not receive any log. I am pretty sure it has to do with certificates, as always. sorry for the image, but why I cannot choose a differ… --- ## [Sending report (csv or pdf) or rollup indices to third party apps (e.g. kafka)](https://discuss.elastic.co/t/sending-report-csv-or-pdf-or-rollup-indices-to-third-party-apps-e-g-kafka/315931)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 3:30pm UTC](https://discuss.elastic.co/t/sending-report-csv-or-pdf-or-rollup-indices-to-third-party-apps-e-g-kafka/315931 "2022-11-08T15:30:59Z")
Hello, I'm thinking of sending data of kibana reports to third party service. So far, i can generate report automatically (csv) using the API and create rollup jobs but it does not download or sent automatically. Is ther… --- ## [Kibana logs when in developer mode](https://discuss.elastic.co/t/kibana-logs-when-in-developer-mode/316329)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 2\ **Last updated:** [November 8, 2022, 3:20pm UTC](https://discuss.elastic.co/t/kibana-logs-when-in-developer-mode/316329 "2022-11-08T15:20:43Z")
Hi, How can I see kibana logs when in developer mode? The log is not getting written to the file I mention in the kibana.yml file I am using Kibana 7.17 in developer mode Thanks [Previous page](https://discuss.elastic.co/latest.md?page=902) [Next page](https://discuss.elastic.co/latest.md?page=904)