# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=647

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 648

---

## [Metricbeat not collecting kubernetes.namespace field](https://discuss.elastic.co/t/metricbeat-not-collecting-kubernetes-namespace-field/303231)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 8:13am UTC](https://discuss.elastic.co/t/metricbeat-not-collecting-kubernetes-namespace-field/303231 "2022-04-26T08:13:16Z")

</div>

Hello, I'm using Elastic 7.15 for observability, I'm trying to collect metrics from each namespace but the field kubernetes.namespace is not collected. I added the processor add\_kubernetes\_metadata but still not collecti…

---

## [Rebalance primary shards, 2022](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 8:12am UTC](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911 "2022-04-26T08:12:58Z")

</div>

Hello, I, too, would like my primary shards to be balanced across the cluster. I often reduce the number of replicas on older indices to optimize disk space. When the cluster is reasonably idle, shards will recover fr…

---

## [Kbn webpack compile error and optimization failure](https://discuss.elastic.co/t/kbn-webpack-compile-error-and-optimization-failure/303226)

<div class="topic-metadata">

**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 7:49am UTC](https://discuss.elastic.co/t/kbn-webpack-compile-error-and-optimization-failure/303226 "2022-04-26T07:49:27Z")

</div>

I'm on kibana 7.14.2 with wazuh plugin, I got these 2 errors when I started the server. I'm new to this platform please help me with these problems, thank you!!! Here is the log. np bld log \[15:25:12.105\] \[info\]\[@…

---

## [Server crashed with status code 1](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206)

<div class="topic-metadata">

**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\
**Replies:** 11\
**Last updated:** [April 26, 2022, 7:34am UTC](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206 "2022-04-26T07:34:14Z")

</div>

I'm running kibana 7.14.2 on Linux from my localhost and with wazuh installed, however the server keep crashing after some time functioning properly. I have tried different approaches including limit the memory use from …

---

## [Can't use average agg on number lower than 1](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091)

<div class="topic-metadata">

**Author:** [@xxk](https://discuss.elastic.co/u/xxk)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 7:07am UTC](https://discuss.elastic.co/t/cant-use-average-agg-on-number-lower-than-1/303091 "2022-04-26T07:07:48Z")

</div>

I have a field pctr which values are all between (0,1). But i can't use average agg on pctr in visualize

---

## [Jdbc streaming no records returned even when there are records](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222)

<div class="topic-metadata">

**Author:** [@James\_Valan](https://discuss.elastic.co/u/James_Valan)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 6:41am UTC](https://discuss.elastic.co/t/jdbc-streaming-no-records-returned-even-when-there-are-records/303222 "2022-04-26T06:41:39Z")

</div>

I am getting no records sometimes but the db has records. (using JDBC Streaming) is there a timeout issue?

---

## [Elasticsearch 6.8 crear vista de dos indices](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953)

<div class="topic-metadata">

**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\
**Replies:** 3\
**Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953 "2022-04-26T06:15:28Z")

</div>

Hola, necesitaría crear una vista o índice que una mediante un field dos índices diferentes. Es posible? como puedo hacerlo? Gracias, un saludo Javier.

---

## [I tried to upgrade the Elasticsearch to 7.16.2 and it’s working fine but Logstash upgrade to 7.16.2 still not working with upgraded elastic. I am getting below error with it, I tried to troubleshoot the issue but it’s still the same](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216)

<div class="topic-metadata">

**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\
**Replies:** 0\
**Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/i-tried-to-upgrade-the-elasticsearch-to-7-16-2-and-it-s-working-fine-but-logstash-upgrade-to-7-16-2-still-not-working-with-upgraded-elastic-i-am-getting-below-error-with-it-i-tried-to-troubleshoot-the-issue-but-it-s-still-the-same/303216 "2022-04-26T06:15:08Z")

</div>

\[2022-04-22T04:24:45,425\]\[WARN \]\[deprecation.logstash.filters.json\] Relying on default value of pipeline.ecs\_compatibility, which may change in a future major release of Logstash. To avoid unexpected changes when upgradi…

---

## [How to pull AZURE APP SERVICE logs to ELK](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115)

<div class="topic-metadata">

**Author:** [@vinayborra](https://discuss.elastic.co/u/vinayborra)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 5:18am UTC](https://discuss.elastic.co/t/how-to-pull-azure-app-service-logs-to-elk/303115 "2022-04-26T05:18:40Z")

</div>

Hi, From last two days, I am facing to find out how to pull azure app service logs to local server ELK. I didn't find any supported links. Can you please help on this. Thanks in advance.

---

## [This website does not work in Firefox](https://discuss.elastic.co/t/this-website-does-not-work-in-firefox/303182)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 4\
**Last updated:** [April 26, 2022, 3:43am UTC](https://discuss.elastic.co/t/this-website-does-not-work-in-firefox/303182 "2022-04-26T03:43:45Z")

</div>

For instance, this message looks like this.

---

## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/302698)

<div class="topic-metadata">

**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 3:51am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/302698 "2022-04-26T03:51:31Z")

</div>

ES:7.10.2 this is my error log： \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\] would be \[30380624822/28.2gb\], which is larger than the limit of \[28975929753/26.9gb\], real usage: \[30380571432/28.2gb\],…

---

## [What is the impact if we increase max buckets value](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 2:55am UTC](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189 "2022-04-26T02:55:06Z")

</div>

Hi, i just wanna know what is the impact on elastic if i increase max buckets value to a higher number. our grafana getting an error "unkown elastic error" and what we found is grafana require buckets more than the defa…

---

## [Field Collisions](https://discuss.elastic.co/t/field-collisions/302798)

<div class="topic-metadata">

**Author:** [@Hummellt](https://discuss.elastic.co/u/Hummellt)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:57am UTC](https://discuss.elastic.co/t/field-collisions/302798 "2022-04-26T01:57:06Z")

</div>

Hi, this is my first time working with elastic so i think im missing something. Im trying to setup the Elastic Stack to analyze Cowrie Logs. Problem is there are different sources for the Input field. In the Cowrie Lo…

---

## [What is the maximum number of indices allowed in elasticsearch?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793)

<div class="topic-metadata">

**Author:** [@raqeeb](https://discuss.elastic.co/u/raqeeb)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793 "2022-04-26T01:39:32Z")

</div>

I am using MySQL for storing data in my software. We have to generate hundreds of reports using the data and it is taking more time when the size of data in increasing. For some reports it is taking 1 or 2 minutes. So we…

---

## [Custom path for elasticsearch.yml, kibana.yml and logstash.yml](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895)

<div class="topic-metadata">

**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:24am UTC](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895 "2022-04-26T01:24:53Z")

</div>

Hello, I have installed ELK stack on my test server using the default installation options and have been able to set up an end to end test system working. However now, I have a new requirement to change the default ins…

---

## [Logstash configuration from elk cloud](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961)

<div class="topic-metadata">

**Author:** [@Jesus\_Leguizamon](https://discuss.elastic.co/u/Jesus_Leguizamon)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:15am UTC](https://discuss.elastic.co/t/logstash-configuration-from-elk-cloud/302961 "2022-04-26T01:15:29Z")

</div>

How can download agent logstash from my elk cloud, like Elasticsearch for easy setup, regards

---

## [I got received plaintext http traffic on an https channel, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973)

<div class="topic-metadata">

**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:13am UTC](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973 "2022-04-26T01:13:41Z")

</div>

i got this error on Elasticsearch 8.1.3 , how can i solve it i see many solutions but it doesn't work here is the output of the terminal when i go ot "http://localhost:9200/" it shows no data come and on the terminal i …

---

## [Logstash / Elastic CVE-2022-21449](https://discuss.elastic.co/t/logstash-elastic-cve-2022-21449/302962)

<div class="topic-metadata">

**Author:** [@saberph](https://discuss.elastic.co/u/saberph)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 7:52pm UTC](https://discuss.elastic.co/t/logstash-elastic-cve-2022-21449/302962 "2022-04-21T19:52:14Z")

</div>

Hi, Are Elasticsearch or Logstash affected by CVE-2022-21449 ? The bundle jdk v16 seems vulnerable. /usr/share/Elasticsearch/jdk/bin/java is not yet updated to fix the CVE. Thanks.

---

## [Some question about soft\_deletes and Reindex API](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765)

<div class="topic-metadata">

**Author:** [@zhangzongdong](https://discuss.elastic.co/u/zhangzongdong)\
**Replies:** 5\
**Last updated:** [April 26, 2022, 1:12am UTC](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765 "2022-04-26T01:12:31Z")

</div>

Two questions How to use reindex API with zero downtime. Could the index setting of index.soft\_deletes\_enabled be non-dynamic and replace reindex API with setting index.soft\_deletes\_enabled to true for a exist index wit…

---

## [Could not connect to SQL DB using JDBC in Logstash](https://discuss.elastic.co/t/could-not-connect-to-sql-db-using-jdbc-in-logstash/302990)

<div class="topic-metadata">

**Author:** [@Sakshi.Clover](https://discuss.elastic.co/u/Sakshi.Clover)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 7:33am UTC](https://discuss.elastic.co/t/could-not-connect-to-sql-db-using-jdbc-in-logstash/302990 "2022-04-22T07:33:12Z")

</div>

Hi All, I am trying to connect SQL DB with Logstash. Getting exception please refer attachment Below is the Logstash code input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://server;databaseName=…

---

## [Elasticsearch Cluster Configuration when upgrading ES to 7.16.2](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042)

<div class="topic-metadata">

**Author:** [@PAVK\_PRASAD](https://discuss.elastic.co/u/PAVK_PRASAD)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:08am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042 "2022-04-26T01:08:13Z")

</div>

Hi Team, Required "Elasticsearch.yml" configuration for cluster (i.e 2 nodes) when upgrading ES to 7.16.2 from 7.3.2. Is below two properties are enough for cluster xpack.security.enabled: true xpack.security.transpo…

---

## [Scale down cluster recommendations](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123)

<div class="topic-metadata">

**Author:** [@elementcz](https://discuss.elastic.co/u/elementcz)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:02am UTC](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123 "2022-04-26T01:02:50Z")

</div>

Hello, we made a demo setup of Elasticsearch cluster on k8s consisting of 2 ingest nodes, 3 data nodes and 3 master nodes. As we bought the platinum license valid for only 3 nodes now we will need to scale cluster down …

---

## [Elasticsearch index shard size expanding/contracting by more than 75% of size](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149)

<div class="topic-metadata">

**Author:** [@Vamsi\_Htc](https://discuss.elastic.co/u/Vamsi_Htc)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:01am UTC](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149 "2022-04-26T01:01:13Z")

</div>

We run cluster on 5.6.3 , a 45 node cluster with single replica and shard size is around 70 GB . On some occasions shard size is expanding more than 75% of usual size and reaching to 120GB . This is causing diskspace hi…

---

## [7.9.3 Elasticsearch Installation Error](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175)

<div class="topic-metadata">

**Author:** [@Parvi](https://discuss.elastic.co/u/Parvi)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 12:57am UTC](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175 "2022-04-26T00:57:17Z")

</div>

I am getting this error tryin to install Elasticsearch 7.9.3 on my Windows system. Please suggest. Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/logging/log4j/core/config/properties/PropertiesCon…

---

## [Elasticsearch RAM remains busy. Elasticsearch version 6.3.0](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985)

<div class="topic-metadata">

**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\
**Replies:** 2\
**Last updated:** [April 26, 2022, 12:49am UTC](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985 "2022-04-26T00:49:47Z")

</div>

Elasticsearch consumes a lot of memory during load testing. But the main problem is that after the termination of the load testing, the RAM remains busy. Elasticsearch version 6.3.0. What could be the problem? What clari…

---

## [Unable to access elastic search without SSL](https://discuss.elastic.co/t/unable-to-access-elastic-search-without-ssl/303201)

<div class="topic-metadata">

**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 12:12am UTC](https://discuss.elastic.co/t/unable-to-access-elastic-search-without-ssl/303201 "2022-04-26T00:12:20Z")

</div>

Hello, I'm trying to pull data from Elasticsearch using logstash pipeline and seeing some issues. I'm able to connect to ES using username and pwd through API (No certificate is provided in the request). However, when t…

---

## [Slow log threshold question](https://discuss.elastic.co/t/slow-log-threshold-question/302159)

<div class="topic-metadata">

**Author:** [@knightsg1](https://discuss.elastic.co/u/knightsg1)\
**Replies:** 3\
**Last updated:** [April 25, 2022, 9:35pm UTC](https://discuss.elastic.co/t/slow-log-threshold-question/302159 "2022-04-25T21:35:12Z")

</div>

I'm looking through the documentation regarding the slow log as I'd like to use it troubleshoot some performance issues we've run into. I'm a bit confused about the thresholds that are suggested in the documentation as i…

---

## [Error when exporting saved objects](https://discuss.elastic.co/t/error-when-exporting-saved-objects/303079)

<div class="topic-metadata">

**Author:** [@jeremyross](https://discuss.elastic.co/u/jeremyross)\
**Replies:** 2\
**Last updated:** [April 25, 2022, 6:45pm UTC](https://discuss.elastic.co/t/error-when-exporting-saved-objects/303079 "2022-04-25T18:45:24Z")

</div>

I'm getting the following error when attempting to export saved objects: { "statusCode": 400, "error": "Bad Request", "message": "\[request body.attributes\]: expected value of type \[object\] but got \[undefined\]" } I…

---

## [Making a grok filed optional in grok pattern](https://discuss.elastic.co/t/making-a-grok-filed-optional-in-grok-pattern/303159)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 2\
**Last updated:** [April 25, 2022, 5:29pm UTC](https://discuss.elastic.co/t/making-a-grok-filed-optional-in-grok-pattern/303159 "2022-04-25T17:29:38Z")

</div>

Hi, I am trying to make my field optional. Let me give you the scenario below: let suppose my log patterns are: pattern 1: \[2022-04-25T12:51:27.967+02:00\] \[d03-c02-s02\] \[NOTIFICATION\] \[oracle.wsm.msg.logging\] \[tid: …

---

## [Setting the number of replicas in Index Creation](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 1\
**Last updated:** [April 25, 2022, 5:22pm UTC](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166 "2022-04-25T17:22:34Z")

</div>

Hello everyone, when I create a new Index via Logstash they always go with 1 replica and that turns the Index yellow. So I edit it in Index Management to set replicas to 0 the Index turns green; It might be silly but I …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=646)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=648)
