# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=646

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 647

---

## [Logstash cipher plugin w/ KMS](https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374)

<div class="topic-metadata">

**Author:** [@MrAtheist](https://discuss.elastic.co/u/MrAtheist)\
**Replies:** 0\
**Last updated:** [April 27, 2022, 9:33am UTC](https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374 "2022-04-27T09:33:19Z")

</div>

Hello, Not sure if anyone has got the cipher filter plugin to work with kms? would love some assistance on it if there is any hack for this...

---

## [Auto\_flush\_interval in multiline codec plugin errors out](https://discuss.elastic.co/t/auto-flush-interval-in-multiline-codec-plugin-errors-out/303376)

<div class="topic-metadata">

**Author:** [@ritesh811](https://discuss.elastic.co/u/ritesh811)\
**Replies:** 0\
**Last updated:** [April 27, 2022, 9:40am UTC](https://discuss.elastic.co/t/auto-flush-interval-in-multiline-codec-plugin-errors-out/303376 "2022-04-27T09:40:55Z")

</div>

Hi, I am using auto\_flush\_interval in the multiline codec plugin. It works fine for all the events but when it reaches the end of file, it is throwing grokparsefailure error. And when I remove auto\_flush\_interval, there…

---

## [ES Source code compilation](https://discuss.elastic.co/t/es-source-code-compilation/303137)

<div class="topic-metadata">

**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\
**Replies:** 3\
**Last updated:** [April 27, 2022, 8:26am UTC](https://discuss.elastic.co/t/es-source-code-compilation/303137 "2022-04-27T08:26:50Z")

</div>

Should the parameter be specified with - E or - D? When i used -D like this ：-Des.path.conf=/Users/caster/Desktop/elasticsearch-7.10.2-demo/config，i got: ERROR: D is not a recognized option When i used -E like this ：-E…

---

## [Getting error while creating template in kibana 5.3](https://discuss.elastic.co/t/getting-error-while-creating-template-in-kibana-5-3/303289)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 2\
**Last updated:** [April 27, 2022, 8:22am UTC](https://discuss.elastic.co/t/getting-error-while-creating-template-in-kibana-5-3/303289 "2022-04-27T08:22:16Z")

</div>

Hello team, I am using below query in kibana 5.3 to create template but getting below error: { "error": { "root\_cause": \[ { "type": "action\_request\_validation\_exception", "reason": "Validati…

---

## [ビジュアライゼーションのグラフクリック時の適用フィルターに関して](https://discuss.elastic.co/t/topic/301019)

<div class="topic-metadata">

**Author:** [@Koki](https://discuss.elastic.co/u/Koki)\
**Replies:** 2\
**Last updated:** [April 27, 2022, 6:22am UTC](https://discuss.elastic.co/t/topic/301019 "2022-04-27T06:22:43Z")

</div>

作成したビジュアライゼーションにて、0.885～0.89の範囲にある棒グラフをクリックした際に 下記のような適用フィルターのチェックボックスが出てきます。 こちらのチェックボックスが写真のように0～0.005という範囲になっております。 どうにかして0.885～0.89というようにクリックした箇所の範囲に指定したいのですが、解決策はありますでしょうか？

---

## [Wildcards with query\_string query and custom analyzer](https://discuss.elastic.co/t/wildcards-with-query-string-query-and-custom-analyzer/303330)

<div class="topic-metadata">

**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\
**Replies:** 1\
**Last updated:** [April 27, 2022, 5:15am UTC](https://discuss.elastic.co/t/wildcards-with-query-string-query-and-custom-analyzer/303330 "2022-04-27T05:15:16Z")

</div>

I have a query\_string query I'm using with wildcards and a custom analyzer. The query behaves as expected for some words and not for others. Here's the query: "query\_string": { "query": "Abdulla\*", "an…

---

## [I have an issue with the elastic 8.1.3 settings](https://discuss.elastic.co/t/i-have-an-issue-with-the-elastic-8-1-3-settings/303102)

<div class="topic-metadata">

**Author:** [@Mahmoud](https://discuss.elastic.co/u/Mahmoud)\
**Replies:** 3\
**Last updated:** [April 27, 2022, 1:17am UTC](https://discuss.elastic.co/t/i-have-an-issue-with-the-elastic-8-1-3-settings/303102 "2022-04-27T01:17:43Z")

</div>

I have a startup problem with elastic version 8.1.3 i trying to configure elastic cluster its have single node Apr 24 16:50:40 elastic systemd-entrypoint\[3419\]: ERROR: Elasticsearch did not exit normally - check the log…

---

## [Any relationship between refresh\_interval & bulk\_write task time?](https://discuss.elastic.co/t/any-relationship-between-refresh-interval-bulk-write-task-time/303112)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 4\
**Last updated:** [April 27, 2022, 1:13am UTC](https://discuss.elastic.co/t/any-relationship-between-refresh-interval-bulk-write-task-time/303112 "2022-04-27T01:13:31Z")

</div>

Is it normal to have longer bulk\_write time if I increase the refresh\_interval to say 300 seconds? I have noticed an index bulk\_write is taking more than 4 seconds. Not sure if this is normal or cause for concern. I g…

---

## [Logstash UDP input keeps losing data](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215)

<div class="topic-metadata">

**Author:** [@co88liwan](https://discuss.elastic.co/u/co88liwan)\
**Replies:** 2\
**Last updated:** [April 27, 2022, 12:24am UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215 "2022-04-27T00:24:41Z")

</div>

Hi there, We encountered an issue that Logstash input UDP plugin consistently losing data. From tcpdump analysis we know the data indeed reached the VM, I also tested with Logstash file output plugin and I saw the data…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303252)

<div class="topic-metadata">

**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 11:01pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303252 "2022-04-26T23:01:48Z")

</div>

Hello , i depoyed a multi node cluster with 3 azure vm, the cluster worked on ES and nodes are connected. but i can't work on them with kibana " Kibana server is not ready yet " \[2022-04-25T00:00:01,091\]\[WARN \]\[o.e.c.…

---

## [Java 8.1 bulk request](https://discuss.elastic.co/t/java-8-1-bulk-request/302423)

<div class="topic-metadata">

**Author:** [@3xil3](https://discuss.elastic.co/u/3xil3)\
**Replies:** 6\
**Last updated:** [April 26, 2022, 10:40pm UTC](https://discuss.elastic.co/t/java-8-1-bulk-request/302423 "2022-04-26T22:40:34Z")

</div>

Hi, I'm having trouble doing a bulk index request using the java 8.1.1 client. I get an unclear error message and I'm basically stuck. String test= "{ \\"test\\",\\"test\\"}"; final InputStream jsonInputStr…

---

## [SNMP 연동 관련 문의](https://discuss.elastic.co/t/snmp/302875)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 3\
**Last updated:** [April 26, 2022, 9:33pm UTC](https://discuss.elastic.co/t/snmp/302875 "2022-04-26T21:33:12Z")

</div>

안녕하세요 고수님들의 고견을 기다립니다. 로그스태시에서 SNMP를 수집하여 다시 키바나로 보내는 형태입니다. 보시다시피 저렇게 보기 어려운 Json 형태로 데이터를 받게 되는데, 저런 항목들을 discover에서 각각의 필드로 보여지게 하려면 어떻게 할 수 있을까요? syslog는 grok 패턴을 걸어서 그렇게 만들었는데, 이건 그렇게 하기도 어렵고 좋은 방법이 있을까요? …

---

## [Failing to index geo\_shape data into Elasticsearch from Logstash (nil values)](https://discuss.elastic.co/t/failing-to-index-geo-shape-data-into-elasticsearch-from-logstash-nil-values/303193)

<div class="topic-metadata">

**Author:** [@scottfred](https://discuss.elastic.co/u/scottfred)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 9:22pm UTC](https://discuss.elastic.co/t/failing-to-index-geo-shape-data-into-elasticsearch-from-logstash-nil-values/303193 "2022-04-26T21:22:50Z")

</div>

I have Ruby code in Logstash that parses a CSV file and reads the data. Some fields of the data can be empty (e.g. ,,,). When the data is empty, Ruby's CSV parse converts the data to an empty string, (e.g. ""). I also…

---

## [Permission denied when starting Elasticsearch 7.17.0 installed via RPM](https://discuss.elastic.co/t/permission-denied-when-starting-elasticsearch-7-17-0-installed-via-rpm/303192)

<div class="topic-metadata">

**Author:** [@ed\_vf](https://discuss.elastic.co/u/ed_vf)\
**Replies:** 11\
**Last updated:** [April 26, 2022, 8:10pm UTC](https://discuss.elastic.co/t/permission-denied-when-starting-elasticsearch-7-17-0-installed-via-rpm/303192 "2022-04-26T20:10:31Z")

</div>

We are trying to expand our cluster size from 3 nodes to 5 nodes. After installing Elasticsearch via RPM on the new nodes we receive the following 'Permission denied' error when starting the service. \[root@host user\]# s…

---

## [How to join values from 2 different fields to one and manage it further?](https://discuss.elastic.co/t/how-to-join-values-from-2-different-fields-to-one-and-manage-it-further/303050)

<div class="topic-metadata">

**Author:** [@Stek\_new](https://discuss.elastic.co/u/Stek_new)\
**Replies:** 3\
**Last updated:** [April 26, 2022, 7:09pm UTC](https://discuss.elastic.co/t/how-to-join-values-from-2-different-fields-to-one-and-manage-it-further/303050 "2022-04-26T19:09:37Z")

</div>

Hello, I am curious if anybody faced the issue I have I have 5 documents with the following fields and values in table view: +++++++++++++++++++++++++++++++++ | src\_ch | tgt\_ch | extra\_field | ++++++++++++++++++++++++…

---

## [How to break down a multiline entry with nested json - File input plugin](https://discuss.elastic.co/t/how-to-break-down-a-multiline-entry-with-nested-json-file-input-plugin/303245)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 4\
**Last updated:** [April 26, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-to-break-down-a-multiline-entry-with-nested-json-file-input-plugin/303245 "2022-04-26T18:28:03Z")

</div>

Hi All, I have the following multiline log in json. My setup is that I read from a file (where my events are in embedded json) and the events gets broken down (each row is a treated as a single entry) wrongly. How can…

---

## [Elasticsearch automatically closes connection as soon as I run my Java Springboot program](https://discuss.elastic.co/t/elasticsearch-automatically-closes-connection-as-soon-as-i-run-my-java-springboot-program/303069)

<div class="topic-metadata">

**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\
**Replies:** 7\
**Last updated:** [April 26, 2022, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-automatically-closes-connection-as-soon-as-i-run-my-java-springboot-program/303069 "2022-04-26T15:35:58Z")

</div>

\*\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[DESKTOP-ADQ0I0S\] received plaintext traffic on an encrypted channel, closing connection Netty4TcpChannel{localAddress=/127.0.0.1:9300, remoteAddress=/127.0.0.1:59255, prof…

---

## [27 default Elastic Security rules contain definitions to non-existant indices and are broken](https://discuss.elastic.co/t/27-default-elastic-security-rules-contain-definitions-to-non-existant-indices-and-are-broken/303043)

<div class="topic-metadata">

**Author:** [@finbarr996](https://discuss.elastic.co/u/finbarr996)\
**Replies:** 4\
**Last updated:** [April 26, 2022, 3:10pm UTC](https://discuss.elastic.co/t/27-default-elastic-security-rules-contain-definitions-to-non-existant-indices-and-are-broken/303043 "2022-04-26T15:10:30Z")

</div>

Hi there, As an example, the Elastic supplied default 'Endpoint Security' rule contains a hard coded definition to the index pattern 'logs-endpoint.alerts-\*' however, this index pattern does not exist and so this rule g…

---

## [How to use match and term in DSL Query?](https://discuss.elastic.co/t/how-to-use-match-and-term-in-dsl-query/303248)

<div class="topic-metadata">

**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 2:47pm UTC](https://discuss.elastic.co/t/how-to-use-match-and-term-in-dsl-query/303248 "2022-04-26T14:47:57Z")

</div>

Hi, bellow query runs fine in older version of kibana 7.10.1, however same query does not work in 8.1.3, can any one please tell me what i need to change to make it work ? Thanks for the help GET \_search { "query"…

---

## [Endpoint Security decraded/ Unhealthy status](https://discuss.elastic.co/t/endpoint-security-decraded-unhealthy-status/303031)

<div class="topic-metadata">

**Author:** [@fbijl](https://discuss.elastic.co/u/fbijl)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 2:40pm UTC](https://discuss.elastic.co/t/endpoint-security-decraded-unhealthy-status/303031 "2022-04-26T14:40:14Z")

</div>

I have the same issue as described in this topic: And in the enpoint logfile: {"@timestamp":"2022-04-22T09:31:25.117229549Z","agent":{"id":"3b2a53b3-f192-49eb-adcc-ea5b040d5986","type":"endpoint"},"ecs":{"version":…

---

## [Aggregations taking way too long?](https://discuss.elastic.co/t/aggregations-taking-way-too-long/303171)

<div class="topic-metadata">

**Author:** [@ChamMach](https://discuss.elastic.co/u/ChamMach)\
**Replies:** 6\
**Last updated:** [April 26, 2022, 12:57pm UTC](https://discuss.elastic.co/t/aggregations-taking-way-too-long/303171 "2022-04-26T12:57:22Z")

</div>

Hello, I would like to have your opinion on these aggregations. Currently, these can take up to 5 mins to run on my ES cluster (7.17.1) for ~ 2 years of data (~ 1 billion of documents / 100GB data spread over 2 data nod…

---

## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/303282)

<div class="topic-metadata">

**Author:** [@hank80](https://discuss.elastic.co/u/hank80)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 12:24pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/303282 "2022-04-26T12:24:52Z")

</div>

Hello, We are using Elasticsearch 7.6.1 Please let us know, whether Elasticsearch is impacted any way by the reported spring4shell vulnerability.

---

## [Index template](https://discuss.elastic.co/t/index-template/303280)

<div class="topic-metadata">

**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 12:22pm UTC](https://discuss.elastic.co/t/index-template/303280 "2022-04-26T12:22:15Z")

</div>

Hi Elastic community, I've enabled mapper size plugin to help me with the sizing of my cloud cluster. I tried to modify an existing Index template with this API by adding a component template to enable the new meta fiel…

---

## [Update index pattern fields via Kibana REST API fails](https://discuss.elastic.co/t/update-index-pattern-fields-via-kibana-rest-api-fails/303035)

<div class="topic-metadata">

**Author:** [@mpjjonker](https://discuss.elastic.co/u/mpjjonker)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 12:14pm UTC](https://discuss.elastic.co/t/update-index-pattern-fields-via-kibana-rest-api-fails/303035 "2022-04-26T12:14:30Z")

</div>

Hi We are using Kibana version 7.17. When I follow the instructions here (Update index pattern fields API | Kibana Guide \[7.17\] | Elastic) to update fields via the REST API , I get the error \[request.body.fields\]: de…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303178)

<div class="topic-metadata">

**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\
**Replies:** 9\
**Last updated:** [April 26, 2022, 9:33am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303178 "2022-04-26T09:33:25Z")

</div>

Hello , i depoyed a multi node cluster with 3 azure vm, the cluster worked on ES and nodes are connected. but i can't work on them with kibana " Kibana server is not ready yet "

---

## [Convert a search JSON into a DSL query](https://discuss.elastic.co/t/convert-a-search-json-into-a-dsl-query/303156)

<div class="topic-metadata">

**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 9:19am UTC](https://discuss.elastic.co/t/convert-a-search-json-into-a-dsl-query/303156 "2022-04-26T09:19:22Z")

</div>

I have created the following search query in Elastic. I am wanting to using it in a Discover query using the Elasticsearch Query DSL. However, I cannot seem to convert it. This is the query that I have using Kibana D…

---

## [We are setting up 3 node Elasticsearch cluster](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181)

<div class="topic-metadata">

**Author:** [@ak9234](https://discuss.elastic.co/u/ak9234)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 9:17am UTC](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181 "2022-04-26T09:17:53Z")

</div>

We are setting up 3 node Elasticsearch cluster using 7.17, while configuring the cluster we are getting this error message: master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, an…

---

## [Hi All I am Getting this error in the kibana log from yesterday 25 April,2022. Version 8.1.2](https://discuss.elastic.co/t/hi-all-i-am-getting-this-error-in-the-kibana-log-from-yesterday-25-april-2022-version-8-1-2/303233)

<div class="topic-metadata">

**Author:** [@srikanth.tekula](https://discuss.elastic.co/u/srikanth.tekula)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 8:15am UTC](https://discuss.elastic.co/t/hi-all-i-am-getting-this-error-in-the-kibana-log-from-yesterday-25-april-2022-version-8-1-2/303233 "2022-04-26T08:15:21Z")

</div>

Hi I have installed 8.1.2 version of Elasticsearch and kibana in centos-7 using this command in my AWS ec2 t2.medium instance : wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-$VERSION-x86\_64.rpm …

---

## [Microservices: Decouple sorting from filtering/aggregations](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232)

<div class="topic-metadata">

**Author:** [@philipschm1tt](https://discuss.elastic.co/u/philipschm1tt)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 9:14am UTC](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232 "2022-04-26T09:14:37Z")

</div>

Context: ecommerce category page We are using Elasticsearch for our product index. On a category page the users can filter products, we show the number of products in each category we sort the products using Elastics…

---

## [How to setup kibana 8.1 with Elastic Search 8.1under Windows](https://discuss.elastic.co/t/how-to-setup-kibana-8-1-with-elastic-search-8-1under-windows/301835)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-setup-kibana-8-1-with-elastic-search-8-1under-windows/301835 "2022-04-26T09:12:40Z")

</div>

Hi , we have installed Elasticsearch 8.1 windows version as a services , here localhost:9200 will be browse with user name and password . and we are not able to run Kibana , and its asking for to generate the Token, i…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=645)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=647)
