# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1345 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1346 --- ## [Logstash7.6 - data loss when input file logrotation happens](https://discuss.elastic.co/t/logstash7-6-data-loss-when-input-file-logrotation-happens/239719)
**Author:** [@manu1](https://discuss.elastic.co/u/manu1)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 10:09pm UTC](https://discuss.elastic.co/t/logstash7-6-data-loss-when-input-file-logrotation-happens/239719 "2020-07-07T22:09:28Z")
Hello, We have observed data loss when input file's logrotation happens every day. input { file { path =\> "/weblogs/biweb.log" sincedb\_path =\> "/opt/logshipper/ls7\_bi/sincedbs/biweb.db" … --- ## [\[warning\]Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 10:08pm UTC](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199 "2020-07-07T22:08:37Z")
Hi, Can Someone help me with this issue, I have been trying to fix it from the last 24hours. Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms ➜ bin kibana log \[16:52:47.938\] \[wa… --- ## [Elastic Search/Kibana Alias basics/roll over/delete after 90 days](https://discuss.elastic.co/t/elastic-search-kibana-alias-basics-roll-over-delete-after-90-days/240032)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 9:59pm UTC](https://discuss.elastic.co/t/elastic-search-kibana-alias-basics-roll-over-delete-after-90-days/240032 "2020-07-07T21:59:29Z")
i've been using ES for about 2 yrs, never need to really store anything long term, so alias's and rollovers were never needed. I understand the concept, but cant seem to find any good resources in a walk-through or best … --- ## [MetricBeat sample dashboards/visualizations, and cross cluster search](https://discuss.elastic.co/t/metricbeat-sample-dashboards-visualizations-and-cross-cluster-search/240222)
**Author:** [@Alex\_Howle](https://discuss.elastic.co/u/Alex_Howle)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 9:12pm UTC](https://discuss.elastic.co/t/metricbeat-sample-dashboards-visualizations-and-cross-cluster-search/240222 "2020-07-07T21:12:03Z")
I have 2 ELK clusters. They have been setup correctly as Remote Clusters to each other, and I have the correct Cross Cluster Search Index Pattern of \*:metricbeat-\* I can successfully query the data against this Index Pa… --- ## [Send Logstash logs to Kibana remote server](https://discuss.elastic.co/t/send-logstash-logs-to-kibana-remote-server/240060)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 8:19pm UTC](https://discuss.elastic.co/t/send-logstash-logs-to-kibana-remote-server/240060 "2020-07-07T20:19:01Z")
I am new to ELK Stack and trying to view logs on kibana which is hosted on different server. Following are my configurations for Filebeat and logstash in my localhost pc and logstash is succesfully recieving logs … --- ## [Getting error when trying to add or install repository-s3 plugin](https://discuss.elastic.co/t/getting-error-when-trying-to-add-or-install-repository-s3-plugin/240219)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 8:18pm UTC](https://discuss.elastic.co/t/getting-error-when-trying-to-add-or-install-repository-s3-plugin/240219 "2020-07-07T20:18:54Z")
Hello, Trying to add a plugin called repository-s3 to my image or manually trying to install on pods and both fail with same error: Exception in thread “main” javax.net.ssl.SSLException: Connection reset at java.base/… --- ## [Grock Parse Date and time](https://discuss.elastic.co/t/grock-parse-date-and-time/240216)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 8:05pm UTC](https://discuss.elastic.co/t/grock-parse-date-and-time/240216 "2020-07-07T20:05:58Z")
Hi, Im currently parsing the date an time on this log: \<187\>Jul 07 2020 11:29:55: with this Grok \<%{POSINT:syslog\_pri}\>%{MONTH:mes} %{MONTHDAY:dia} %{YEAR:año} %{TIME:hora}: Is there a better way to do this? because… --- ## [Search with multiple conditions](https://discuss.elastic.co/t/search-with-multiple-conditions/240144)
**Author:** [@mdiakhate](https://discuss.elastic.co/u/mdiakhate)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 7:15pm UTC](https://discuss.elastic.co/t/search-with-multiple-conditions/240144 "2020-07-07T19:15:34Z")
Hello, I have a very simple problem that I would like to translate into an ES search. I have different items with 2 fields : registration\_label which is a string and is\_optam is a bool. My query in SQL would be someth… --- ## [Setup Stack Monitoring with Metricbeat and Docker-compose](https://discuss.elastic.co/t/setup-stack-monitoring-with-metricbeat-and-docker-compose/240193)
**Author:** [@damasu](https://discuss.elastic.co/u/damasu)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 4:17pm UTC](https://discuss.elastic.co/t/setup-stack-monitoring-with-metricbeat-and-docker-compose/240193 "2020-07-07T16:17:13Z")
I am wondering how to correctly configure stack monitoring in kibana when used with an elastic stack based on docker-compose. For instance, on the same host machine as docker-compose i have installed metricbeat to monit… --- ## [Elasticsearch exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630)
**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\ **Replies:** 7\ **Last updated:** [July 7, 2020, 5:50pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630 "2020-07-07T17:50:27Z")
When I used curl to create my template, it works fine. But when I used High Level REST it gave me the exception: org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=mapper\_parsing\_exception, reason=… --- ## [Elasticsearch aggregation performance](https://discuss.elastic.co/t/elasticsearch-aggregation-performance/240044)
**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-performance/240044 "2020-07-07T17:17:33Z")
Hi, I am trying to test aggregation performance across different ES topologies. The first time running it takes about 26 seconds, and all subsequent runs takes less than a second. I would like to compare performance for… --- ## [Distribute primary shards among newly added data nodes](https://discuss.elastic.co/t/distribute-primary-shards-among-newly-added-data-nodes/240187)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 4:30pm UTC](https://discuss.elastic.co/t/distribute-primary-shards-among-newly-added-data-nodes/240187 "2020-07-07T16:30:35Z")
I am looking for a way to automatically distribute Elasticsearch's primary shards among the newly added data nodes. I know a way to achieve this is by re-indexing after the new nodes are added. Is there any internal con… --- ## [Kibana 7.8.0. Empty csv report](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 4:16pm UTC](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500 "2020-07-07T16:16:08Z")
After upgrading to 7.8.0 about 90 % of cvs reports empty (the corresponding saved search is not!). Can't find any corresponding error messages in the kibana log. The only one suspect is absence of .reporting-%date% ind… --- ## [After upgrade to 7.8 kibana is suddenly showing a lot of non-existing fields in the table view](https://discuss.elastic.co/t/after-upgrade-to-7-8-kibana-is-suddenly-showing-a-lot-of-non-existing-fields-in-the-table-view/240066)
**Author:** [@corbosman](https://discuss.elastic.co/u/corbosman)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 3:49pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-8-kibana-is-suddenly-showing-a-lot-of-non-existing-fields-in-the-table-view/240066 "2020-07-07T15:49:05Z")
We upgraded elasticsearch/kibana to 7.8 from 7.7. All went well, except for one weird thing. If I go into discover and look at documents (all server logs) in one of our indices (using the table view), kibana is not only … --- ## [Plugin install error:"This plugin is using \`link:\` dependencies for non-Kibana packages"](https://discuss.elastic.co/t/plugin-install-error-this-plugin-is-using-link-dependencies-for-non-kibana-packages/240074)
**Author:** [@Fent](https://discuss.elastic.co/u/Fent)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 3:43pm UTC](https://discuss.elastic.co/t/plugin-install-error-this-plugin-is-using-link-dependencies-for-non-kibana-packages/240074 "2020-07-07T15:43:50Z")
HI ,I create my plugin,and run "yarn build" to package this plugin to a zip file, and install to kibana ,it show error info like this my demo plugin create like this , and i don't modify any file ,it work well in w… --- ## [elasticsearch.requestTimeout value is not reflecting in kibana UI](https://discuss.elastic.co/t/elasticsearch-requesttimeout-value-is-not-reflecting-in-kibana-ui/240079)
**Author:** [@GopiV](https://discuss.elastic.co/u/GopiV)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-requesttimeout-value-is-not-reflecting-in-kibana-ui/240079 "2020-07-07T15:40:38Z")
Kabana: v 7.2.1 I've change the value of elasticsearch.requestTimeout from 30secs (30000) to 60secs (60000) in /etc/kibana/kibana.yml and restart Kibana due to the timeout I'm getting for few searches in UI after 30secs… --- ## [Include custom Elasticsearch index in SIEM default dashboards](https://discuss.elastic.co/t/include-custom-elasticsearch-index-in-siem-default-dashboards/238878)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 14\ **Last updated:** [July 7, 2020, 3:33pm UTC](https://discuss.elastic.co/t/include-custom-elasticsearch-index-in-siem-default-dashboards/238878 "2020-07-07T15:33:00Z")
Hi people. I have an ELK server 7.8.0 running OK in testing mode. I've configured Logstash to listen on UDP/514 for incoming syslog remote events, Logstash doesn't apply ani filter, just pass the input to Elasticsearch.… --- ## [Error to Push CQV files from Logstash to Elastic](https://discuss.elastic.co/t/error-to-push-cqv-files-from-logstash-to-elastic/239887)
**Author:** [@zizou90](https://discuss.elastic.co/u/zizou90)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 10:36am UTC](https://discuss.elastic.co/t/error-to-push-cqv-files-from-logstash-to-elastic/239887 "2020-07-07T10:36:39Z")
Helllo, I have 5 CSV files (separator : , ) with the same structures but the last one haven't the same order of columns : example : the columns of the Files number 1 2 3 4 like this : Price |Date | Quantity | The f… --- ## [Unable to grok ingest pipeline for Caddy log (even after running in grok debugger)](https://discuss.elastic.co/t/unable-to-grok-ingest-pipeline-for-caddy-log-even-after-running-in-grok-debugger/240168)
**Author:** [@OliPicard](https://discuss.elastic.co/u/OliPicard)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 3:22pm UTC](https://discuss.elastic.co/t/unable-to-grok-ingest-pipeline-for-caddy-log-even-after-running-in-grok-debugger/240168 "2020-07-07T15:22:06Z")
Dear Elastic, I am having problems processing this grok into the ingest pipeline. PUT \_ingest/pipeline/parse\_caddy { "description": "parsing fields from Caddy", "processors": \[ { "grok" : { "field… --- ## [Bar and Lines Visualization](https://discuss.elastic.co/t/bar-and-lines-visualization/240184)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 3:19pm UTC](https://discuss.elastic.co/t/bar-and-lines-visualization/240184 "2020-07-07T15:19:24Z")
Hello There, I'm trying to build a chart with a bar and a line. The bar must show the actual year and the line must show last year. The x-axis must be the months. Something like that: I've built a chart with two coun… --- ## [Rollup vs Continuous Transform for historical data](https://discuss.elastic.co/t/rollup-vs-continuous-transform-for-historical-data/240178)
**Author:** [@Vlad\_K](https://discuss.elastic.co/u/Vlad_K)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 3:09pm UTC](https://discuss.elastic.co/t/rollup-vs-continuous-transform-for-historical-data/240178 "2020-07-07T15:09:48Z")
Are there any reasons to pick one over another to store historical data? As far as i can see rollups have limited ability for searching and aggregations (no filtered aggregations, etc.) while transformed index doesn't h… --- ## [Fail to elect a master following a failover due to GC](https://discuss.elastic.co/t/fail-to-elect-a-master-following-a-failover-due-to-gc/240181)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 3:05pm UTC](https://discuss.elastic.co/t/fail-to-elect-a-master-following-a-failover-due-to-gc/240181 "2020-07-07T15:05:27Z")
We are using elastic 7.2.1 We have a 3 nodes cluster with all nodes being master eligible. Our configuration is: transport.connect\_timeout: 1s cluster.publish.timeout: 15s cluster.fault\_detection.leader\_check.timeout:… --- ## [Kibana graph now showing on a selected Index](https://discuss.elastic.co/t/kibana-graph-now-showing-on-a-selected-index/240155)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 12\ **Last updated:** [July 7, 2020, 2:49pm UTC](https://discuss.elastic.co/t/kibana-graph-now-showing-on-a-selected-index/240155 "2020-07-07T14:49:37Z")
Hi All, I have got an issue where a particular index is not showing the graph like other indexes do within discovery. This index I am referring to is for the ingestion of Cloudtrail logs not showing the bar graph as it … --- ## [APM span min duration in Kibana](https://discuss.elastic.co/t/apm-span-min-duration-in-kibana/239693)
**Author:** [@Vladimiro](https://discuss.elastic.co/u/Vladimiro)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 2:42pm UTC](https://discuss.elastic.co/t/apm-span-min-duration-in-kibana/239693 "2020-07-07T14:42:03Z")
Hi, I run Kibana 7.7.0 and in the APM central configuration (https://www.elastic.co/guide/en/kibana/7.7/agent-configuration.html) I do not have the span\_min\_duration property (https://www.elastic.co/guide/en/apm/agent/j… --- ## [Minimum interval on "Date Histogram" aggregation](https://discuss.elastic.co/t/minimum-interval-on-date-histogram-aggregation/238973)
**Author:** [@laurentml](https://discuss.elastic.co/u/laurentml)\ **Replies:** 14\ **Last updated:** [July 7, 2020, 2:40pm UTC](https://discuss.elastic.co/t/minimum-interval-on-date-histogram-aggregation/238973 "2020-07-07T14:40:25Z")
Hi folks, I'm using ELK stack (v7.8.0, same on v7.7.1) for an application used by historians, where each entry is an archive which can be like from year 1687 for example. Rendering options of Kibana are generally very … --- ## [Shard reallocation and disk space](https://discuss.elastic.co/t/shard-reallocation-and-disk-space/240174)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 2:25pm UTC](https://discuss.elastic.co/t/shard-reallocation-and-disk-space/240174 "2020-07-07T14:25:19Z")
Hello, I'm using ElasticStack 7.6.1 on CentOS 8. I recently upgraded the kernels on all three of our nodes so I then rebooted them all; after they were rebooted the cluster decided to reallocate some shards but for some… --- ## [Memory Utilization in ELK](https://discuss.elastic.co/t/memory-utilization-in-elk/240169)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 2:09pm UTC](https://discuss.elastic.co/t/memory-utilization-in-elk/240169 "2020-07-07T14:09:36Z")
Hi All, Memory utilization on my all the data\_nodes is reaching around 70-80 percent. Can someone suggest, how to reduce it. As we are afraid that after adding all the instances it might reach even 100%. Thanks for you… --- ## [BulkProcessor.awaitClose() is returning false and documents are getting indexed](https://discuss.elastic.co/t/bulkprocessor-awaitclose-is-returning-false-and-documents-are-getting-indexed/240176)
**Author:** [@Sanyukta\_Sinha](https://discuss.elastic.co/u/Sanyukta_Sinha)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 2:00pm UTC](https://discuss.elastic.co/t/bulkprocessor-awaitclose-is-returning-false-and-documents-are-getting-indexed/240176 "2020-07-07T14:00:48Z")
I am using bulkProcessor to index multiple UpdateRequests. The awaitClose() is returning false and hence the logs of the listener are not printing. The documents are still getting indexed but in the absence of the BulkRe… --- ## [IP2Proxy - Pipeline](https://discuss.elastic.co/t/ip2proxy-pipeline/239901)
**Author:** [@pablo1816](https://discuss.elastic.co/u/pablo1816)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 1:56pm UTC](https://discuss.elastic.co/t/ip2proxy-pipeline/239901 "2020-07-07T13:56:16Z")
I am using Elasticsearch and Kibana, entering data with filebeats direct to Elastic parsing the information with apache2 pipeline and they work perfectly but for the analysis that I should do I would like to change or ad… --- ## [LAB UI is not available on strigo](https://discuss.elastic.co/t/lab-ui-is-not-available-on-strigo/239522)
**Author:** [@GDang](https://discuss.elastic.co/u/GDang)\ **Replies:** 7\ **Last updated:** [July 7, 2020, 1:32pm UTC](https://discuss.elastic.co/t/lab-ui-is-not-available-on-strigo/239522 "2020-07-07T13:32:53Z")
I can able to log into strigo but can not navigate to anywhere as Lab UI is not available to me or would say not showing. It's always the terminal window. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1344) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1346)