# Latest **URL:** https://discuss.elastic.co/latest.md?page=904 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 905 --- ## [FATAL Error: Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/fatal-error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/318383)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 3:13pm UTC](https://discuss.elastic.co/t/fatal-error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/318383 "2022-11-08T15:13:28Z")
Hello Team I installed Kibana in docker, while the first set up it showed \[2022-11-07T09:58:18.929+00:00\]\[INFO \]\[node\] Kibana process configured with roles: \[background\_tasks, ui\] \[2022-11-07T09:58:40.484+00:00\]\[INFO \]… --- ## [Elasticsearch 7.17.7 does not start - "java.security.AccessControlException: access denied"](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013)
**Author:** [@jacotec](https://discuss.elastic.co/u/jacotec)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013 "2022-11-08T14:51:45Z")
Hi, I'm despairing with Elasticsearch on one of my Ubuntu 20.04 LTS VM's. I've just installed ES 7.17.7 from the official repo, did no config changes or something else, just did apt install elasticsearch systemctl daem… --- ## [Metricbeat - Limit of total fields \[1000\] has been exceeded](https://discuss.elastic.co/t/metricbeat-limit-of-total-fields-1000-has-been-exceeded/317660)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 2:44pm UTC](https://discuss.elastic.co/t/metricbeat-limit-of-total-fields-1000-has-been-exceeded/317660 "2022-11-08T14:44:30Z")
Hello, I hope my question finds you and your loved ones safe and healthy. I am having errors trying to ingest system metrics (system module) from a single Ubuntu system running 22.04.1 using Metricbeat (version 7.17.7 … --- ## [Create an API key in SSL curl](https://discuss.elastic.co/t/create-an-api-key-in-ssl-curl/318424)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 1:55pm UTC](https://discuss.elastic.co/t/create-an-api-key-in-ssl-curl/318424 "2022-11-08T13:55:23Z")
Hello, I can't create an api key with the curl command in SSL. I have tried different command without success. Could you tell me the right command? And if I should authenticate with the node certificate or with the CA… --- ## [Unable to install Fleet Server](https://discuss.elastic.co/t/unable-to-install-fleet-server/318255)
**Author:** [@themetman](https://discuss.elastic.co/u/themetman)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 1:31pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server/318255 "2022-11-08T13:31:01Z")
I am new to Elastic Stack, but well over 20 years as a Linux (Gentoo) User. I have set up Elasticsearch, Kibana and Logstash using https on a Virtualbox system with 2 Linux Servers. I now have Elasticsearch and Kibana on… --- ## [Elastic Cloud: exceeds the automatic field expansion limit of \[1024\]](https://discuss.elastic.co/t/elastic-cloud-exceeds-the-automatic-field-expansion-limit-of-1024/318411)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/elastic-cloud-exceeds-the-automatic-field-expansion-limit-of-1024/318411 "2022-11-08T12:33:25Z")
Is there a new limitation in Elastic Cloud 8.x instances that prevents the use of index.mapping.total\_fields.limit greater than 1024 in an index template? Seeing a deprecation issue “exceeds the automatic field expansion… --- ## [Use Elastic for Kubernetes monitoring](https://discuss.elastic.co/t/use-elastic-for-kubernetes-monitoring/318353)
**Author:** [@EDzhelyov](https://discuss.elastic.co/u/EDzhelyov)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 12:35pm UTC](https://discuss.elastic.co/t/use-elastic-for-kubernetes-monitoring/318353 "2022-11-08T12:35:57Z")
We are trying to replace our Prometheus metrics and alarms with the Elastic stack and run into some issues. For example, with Prometheus, we use the up metric to create an alarm that will tell us if a given service, lik… --- ## [Threshold rule can't group by with source.ip but only with source.ip.keyword](https://discuss.elastic.co/t/threshold-rule-cant-group-by-with-source-ip-but-only-with-source-ip-keyword/317761)
**Author:** [@Simone\_Calo](https://discuss.elastic.co/u/Simone_Calo)\ **Replies:** 10\ **Last updated:** [November 8, 2022, 11:35am UTC](https://discuss.elastic.co/t/threshold-rule-cant-group-by-with-source-ip-but-only-with-source-ip-keyword/317761 "2022-11-08T11:35:36Z")
My problem consists in defining a threshold rule in the group by field. I can only enter source.ip.keyword and not source.ip. The consequence of this is that the rule fails every time with the following error: Bu… --- ## [KQL query for fields with a value which is not \`-\`](https://discuss.elastic.co/t/kql-query-for-fields-with-a-value-which-is-not/318098)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 7\ **Last updated:** [November 8, 2022, 11:12am UTC](https://discuss.elastic.co/t/kql-query-for-fields-with-a-value-which-is-not/318098 "2022-11-08T11:12:08Z")
Kibana 7.17. I've got some indices where documents contain a field called username . Sometimes the value is a username, like bob or alice and often the value is -. What's a KQL query that will return documents where … --- ## [Logstash 7.17 update OpenJDK to 11.0.17](https://discuss.elastic.co/t/logstash-7-17-update-openjdk-to-11-0-17/317350)
**Author:** [@brilong](https://discuss.elastic.co/u/brilong)\ **Replies:** 2\ **Last updated:** [November 8, 2022, 10:56am UTC](https://discuss.elastic.co/t/logstash-7-17-update-openjdk-to-11-0-17/317350 "2022-11-08T10:56:29Z")
Is Logstash 7.17 still maintained and is there a plan to upgrade the built-in JDK to 11.0.17? This fixes various CVEs for those of us unable to upgrade to logstash 8.4 at this time. https://openjdk.org/groups/vulnerabi… --- ## [Elastic Certified Analyst Exam](https://discuss.elastic.co/t/elastic-certified-analyst-exam/318360)
**Author:** [@linhz](https://discuss.elastic.co/u/linhz)\ **Replies:** 4\ **Last updated:** [November 8, 2022, 10:47am UTC](https://discuss.elastic.co/t/elastic-certified-analyst-exam/318360 "2022-11-08T10:47:20Z")
Hi, Im super disappointed that this is the 2nd time i failed the Elastic Certified Analyst Exam. Understand the concept by go through all exam objectives, attended all the training materials and make lots of practice ye… --- ## [Autodiscover with custom pipeline](https://discuss.elastic.co/t/autodiscover-with-custom-pipeline/318377)
**Author:** [@zeitler](https://discuss.elastic.co/u/zeitler)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 2:00am UTC](https://discuss.elastic.co/t/autodiscover-with-custom-pipeline/318377 "2022-11-08T02:00:32Z")
Hi I'm sorry if this has been already asked and explained, but I'm missing it... My goal is to have a custom grok configuration. My configuration: filebeat.autodiscover: providers: - type: kubernetes node… --- ## [Cloudflare Integration problem with delayed ingestion](https://discuss.elastic.co/t/cloudflare-integration-problem-with-delayed-ingestion/317381)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 10:01am UTC](https://discuss.elastic.co/t/cloudflare-integration-problem-with-delayed-ingestion/317381 "2022-11-08T10:01:32Z")
Hi everybody, using Cloduflare integration I noticed that if the machine where the elastic agent is installed falls for a certain period, Elastic is not able to recover the accumulated ingestion delay. I'm talking abou… --- ## [How can fields received by Filebeat http\_endpoint be add to the document root](https://discuss.elastic.co/t/how-can-fields-received-by-filebeat-http-endpoint-be-add-to-the-document-root/317847)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 0\ **Last updated:** [October 31, 2022, 8:25pm UTC](https://discuss.elastic.co/t/how-can-fields-received-by-filebeat-http-endpoint-be-add-to-the-document-root/317847 "2022-10-31T20:25:27Z")
(post deleted by author) --- ## [Hide/Disable runtime fields from Kibana available fields](https://discuss.elastic.co/t/hide-disable-runtime-fields-from-kibana-available-fields/301848)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 11\ **Last updated:** [November 8, 2022, 9:34am UTC](https://discuss.elastic.co/t/hide-disable-runtime-fields-from-kibana-available-fields/301848 "2022-11-08T09:34:09Z")
Hi, Is there a way to hide/disable/pick certain runtime fields from available fields in Discover? When applying many runtime fields, Discover page takes forever to load due to the number of available fields, While Elast… --- ## [8.4.2: "incompatible encodings: CP850 and UTF-8" - Issue sending DB records to Elastic after upgrade to Elastic 8.4.2 from 8.3.2](https://discuss.elastic.co/t/8-4-2-incompatible-encodings-cp850-and-utf-8-issue-sending-db-records-to-elastic-after-upgrade-to-elastic-8-4-2-from-8-3-2/315697)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 4\ **Last updated:** [November 8, 2022, 8:59am UTC](https://discuss.elastic.co/t/8-4-2-incompatible-encodings-cp850-and-utf-8-issue-sending-db-records-to-elastic-after-upgrade-to-elastic-8-4-2-from-8-3-2/315697 "2022-11-08T08:59:40Z")
Hi All, I've been running the 8.3.2 Elastic products for some months (ELK), using logstash to poll an MSSQL DB regularly and pull the data into Elasticsearch. This has been working without any significant problems. I … --- ## [What's the correct ILM setup for .monitoring-\*-7 indices?](https://discuss.elastic.co/t/whats-the-correct-ilm-setup-for-monitoring-7-indices/318398)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 8:38am UTC](https://discuss.elastic.co/t/whats-the-correct-ilm-setup-for-monitoring-7-indices/318398 "2022-11-08T08:38:15Z")
As per title, what's the correct ILM setup for the .monitoring-\*-7 indices? By default, they rollover every day and delete after 7 days. However, I need them to delete much faster, because in my small ELK setup, these in… --- ## [ES cannot search for special characters when using wildcard search](https://discuss.elastic.co/t/es-cannot-search-for-special-characters-when-using-wildcard-search/318332)
**Author:** [@surkovoleg2010](https://discuss.elastic.co/u/surkovoleg2010)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 8:15am UTC](https://discuss.elastic.co/t/es-cannot-search-for-special-characters-when-using-wildcard-search/318332 "2022-11-08T08:15:51Z")
Hello, We are using query\_string for a quick search but looks like does not correctly work. For instance I can find results using: { "query": { "query\_string": { "query": "oleg$qwerty.com", … --- ## [Banging my head on this application logs with APM](https://discuss.elastic.co/t/banging-my-head-on-this-application-logs-with-apm/318347)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 7:31am UTC](https://discuss.elastic.co/t/banging-my-head-on-this-application-logs-with-apm/318347 "2022-11-08T07:31:15Z")
Hi, I am setting up a Docker based test environment with Elasticsearch, Kibana, Fleet and spring-boot with APM. I can see transactions with a lot of information about requests. I can monitor exceptions. But I just canno… --- ## [Elasticsearch curl error](https://discuss.elastic.co/t/elasticsearch-curl-error/318391)
**Author:** [@thepawankumar](https://discuss.elastic.co/u/thepawankumar)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-curl-error/318391 "2022-11-08T07:14:04Z")
curl -X GET -u something:PASSWD https://20.197.3.229:5500 curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: curl - SSL CA Certificates curl failed to verify the legiti… --- ## [Unrecognized character escape ':'](https://discuss.elastic.co/t/unrecognized-character-escape/318393)
**Author:** [@MStrauch](https://discuss.elastic.co/u/MStrauch)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 7:10am UTC](https://discuss.elastic.co/t/unrecognized-character-escape/318393 "2022-11-08T07:10:29Z")
Hi, I'm executing follow fulltext query string: "query": { "bool": { "filter": \[ { "nested": { "path": "@payload.identifier", "query": { "query\_string":… --- ## [Monitoring AIX metrics to ELK](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 6:54am UTC](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390 "2022-11-08T06:54:14Z")
Hi Community, We want infra metrics data to ELK. The problem is that elastic beats does not support IBM AIX servers. Is there any other way we can ship metric data to ELK. --- ## [Node Uptime Bar Graph](https://discuss.elastic.co/t/node-uptime-bar-graph/318385)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 6:52am UTC](https://discuss.elastic.co/t/node-uptime-bar-graph/318385 "2022-11-08T06:52:20Z")
Hi Community, ELK version 7.17.5. We want to monitor Node/System availability using metricbeat. We want to create a bar graph of this. I created a dashboard for this The issue i am facing here is for one node i am… --- ## [Elastic Search cannot login after disk full (\>90%)](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511)
**Author:** [@zahir](https://discuss.elastic.co/u/zahir)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 6:42am UTC](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511 "2022-11-08T06:42:01Z")
I suddenly unable to login Elastic Search after my snapshot backup is failed. I perform the snapshot backup after disk usage is more than 90%. Now my snapshot failed and my disk is 100% usage. Appreciate if anyone f… --- ## [High Availability of Kibana running on k8s](https://discuss.elastic.co/t/high-availability-of-kibana-running-on-k8s/317147)
**Author:** [@Nikita\_Ivankov](https://discuss.elastic.co/u/Nikita_Ivankov)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 6:40am UTC](https://discuss.elastic.co/t/high-availability-of-kibana-running-on-k8s/317147 "2022-11-08T06:40:10Z")
Hi, we are running an EFK stack on top of k8s clusters in AWS. To deploy both elastic and kibana we use Kubernetes operator The installation contains several elasticsearch pods, but one kibana pod. The kibana is expos… --- ## [AUTO Cross Cluster Replication (CCR)](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298)
**Author:** [@pankaj\_sharma1](https://discuss.elastic.co/u/pankaj_sharma1)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 8:25am UTC](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298 "2022-11-07T08:25:16Z")
Can we do auto CCR for index on the bases of Alias or be auto ccr for this index(this is the part f roll over index ). index pattern is : alias index filter routing.index routing.search is\_write\_i… --- ## [Elastic Search安装完成后无法启动](https://discuss.elastic.co/t/elastic-search/317941)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 10\ **Last updated:** [November 8, 2022, 5:47am UTC](https://discuss.elastic.co/t/elastic-search/317941 "2022-11-08T05:47:13Z")
在CentOS7.8上安装配置完成后初次启动会在输出以下日志后卡住，请问有什么解决办法吗？ \[2022-11-01T22:48:44,788\]\[INFO \]\[o.e.n.Node \] \[node-1\] started {node-1}{G9dqjNsoRKKiW16C2kJYRQ}{09N\_x9F9Tjuqd3OeeYchEg}{node-1}{10.11.0.2}{10.11.0.2:9300}{cdfh… --- ## [Data Indices are recovery](https://discuss.elastic.co/t/data-indices-are-recovery/316887)
**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 5:19am UTC](https://discuss.elastic.co/t/data-indices-are-recovery/316887 "2022-11-08T05:19:52Z")
I would like to check with community on recovery state of indices... after upgrading the ELK stack to 8.4.1, i could see that data indices are recovering very often.. Is there any reason for this behavior. GET \_cat/reco… --- ## [No results in Kibana search](https://discuss.elastic.co/t/no-results-in-kibana-search/318378)
**Author:** [@azamf](https://discuss.elastic.co/u/azamf)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 3:09am UTC](https://discuss.elastic.co/t/no-results-in-kibana-search/318378 "2022-11-08T03:09:24Z")
I'm trying to search against an existing index but the request yields no results. I know there is data since other users can see the index and view data in the same time frame. I am able to view data in most indices in … --- ## [KNN search things in ES V8.4.0](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748)
**Author:** [@CGM397](https://discuss.elastic.co/u/CGM397)\ **Replies:** 5\ **Last updated:** [November 7, 2022, 11:54pm UTC](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748 "2022-11-07T23:54:00Z")
Hi there, I am facing some issues with knn search in es v8, hope someone can help: env: five es v8.4.0 nodes in a cluster each node in a linux server(Ubuntu 16.04, 48 Logic Cores, 180GB Memory) index mapping:(five sh… [Previous page](https://discuss.elastic.co/latest.md?page=903) [Next page](https://discuss.elastic.co/latest.md?page=905)