# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=656 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 657 --- ## [ElasticSearch pods are in intializing dstate after configuring xpack security and tls](https://discuss.elastic.co/t/elasticsearch-pods-are-in-intializing-dstate-after-configuring-xpack-security-and-tls/302310)
**Author:** [@s19k15](https://discuss.elastic.co/u/s19k15)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-pods-are-in-intializing-dstate-after-configuring-xpack-security-and-tls/302310 "2022-04-13T09:19:55Z")
I am having an Elasticsearch deployment on a kubernetes cluster that was deployed with a 7.x chart and i changed the image to 8.x. This worked but now i need to enable new security feature, I have the following values: -… --- ## [Rest API: load the color details with mapping](https://discuss.elastic.co/t/rest-api-load-the-color-details-with-mapping/302081)
**Author:** [@octagon.mobile](https://discuss.elastic.co/u/octagon.mobile)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 8:06am UTC](https://discuss.elastic.co/t/rest-api-load-the-color-details-with-mapping/302081 "2022-04-13T08:06:11Z")
The Rest API Bulk Get (api/saved\_objects/\_bulk\_get) doesn't return the colors used in a pie chart, unless user updates the color of pie chart slice. With default colors the response "uiStateJSON" is empty {} But when I… --- ## [Running Elasticsearch with expired license](https://discuss.elastic.co/t/running-elasticsearch-with-expired-license/302282)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:27am UTC](https://discuss.elastic.co/t/running-elasticsearch-with-expired-license/302282 "2022-04-13T05:27:25Z")
Hi, My team is running Elasticsearch 7.16.3 with an enterprise license that is about to expire. We use X-Pack but as far as I know that became open-source since we started using it and we don't actively use any of the … --- ## [Using dynamic value in google\_pubsub filter plugin attributes field](https://discuss.elastic.co/t/using-dynamic-value-in-google-pubsub-filter-plugin-attributes-field/302184)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 3:30am UTC](https://discuss.elastic.co/t/using-dynamic-value-in-google-pubsub-filter-plugin-attributes-field/302184 "2022-04-13T03:30:56Z")
Hi all, I don't know how to give a dynamic value to this attributes field in google\_pubsub output plugin. Currently this is what I do, which is not DRY output { if \[name\] == "userRegistered" { google\_pubsub { … --- ## [Why does not es use FileChannel2SocketChannel to recover shard？](https://discuss.elastic.co/t/why-does-not-es-use-filechannel2socketchannel-to-recover-shard/302224)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 2:43am UTC](https://discuss.elastic.co/t/why-does-not-es-use-filechannel2socketchannel-to-recover-shard/302224 "2022-04-13T02:43:23Z")
Why does not es use FileChannel2SocketChannel to recover shard? which can eliminate the copy between user and kernel. The only benefit that sending file though heap, i can think is to control sending rate. Is there an… --- ## [Conditional dynamic templates](https://discuss.elastic.co/t/conditional-dynamic-templates/302243)
**Author:** [@channing\_froom](https://discuss.elastic.co/u/channing_froom)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 1:59am UTC](https://discuss.elastic.co/t/conditional-dynamic-templates/302243 "2022-04-13T01:59:26Z")
Is it possible to set up dynamic templates through conditions, for example i have an attributes object in my index which holds only dynamic data, there are hundreds of possible combinations of data that is passed into th… --- ## [How to search on a graph using elastic search?](https://discuss.elastic.co/t/how-to-search-on-a-graph-using-elastic-search/302173)
**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 11:47pm UTC](https://discuss.elastic.co/t/how-to-search-on-a-graph-using-elastic-search/302173 "2022-04-12T23:47:20Z")
I'm thinking about building a search engine based on syntactic structure of a sentences. For example, an entry "Gus is learning piano" will be stored in a syntactically enriched form such as, {{"Gus", nsubj, "learning"… --- ## [Too many buckets](https://discuss.elastic.co/t/too-many-buckets/302275)
**Author:** [@mario-slowinski](https://discuss.elastic.co/u/mario-slowinski)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 9:34pm UTC](https://discuss.elastic.co/t/too-many-buckets/302275 "2022-04-12T21:34:20Z")
Hello In environment with almost 200 hosts, each sends metricbeat (i.e. network metrics every 30 seconds) to single Elasticsearch cluster. There is a business requirement to visualize incoming network traffic bandwidth … --- ## [How to change kibanas default port](https://discuss.elastic.co/t/how-to-change-kibanas-default-port/302104)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 9\ **Last updated:** [April 12, 2022, 8:28pm UTC](https://discuss.elastic.co/t/how-to-change-kibanas-default-port/302104 "2022-04-12T20:28:29Z")
Hi, whe i need to access my kibana from a browser, i need to put ip:5601, how i change the default kibanas port that to use 443 port and just use https://ip to access kibana? --- ## [This version of the ElasticsearchIO is only compatible with Elasticsearch v7.x, v6.x, v5.x and v2.x](https://discuss.elastic.co/t/this-version-of-the-elasticsearchio-is-only-compatible-with-elasticsearch-v7-x-v6-x-v5-x-and-v2-x/302253)
**Author:** [@Pavlo\_Kovalenko](https://discuss.elastic.co/u/Pavlo_Kovalenko)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 6:04pm UTC](https://discuss.elastic.co/t/this-version-of-the-elasticsearchio-is-only-compatible-with-elasticsearch-v7-x-v6-x-v5-x-and-v2-x/302253 "2022-04-12T18:04:29Z")
I need to integrate Google BigQuery into elasticsearch. I used Job template "BigQuery to elasticsearch" from DataFlow in Google console. But it is impossible because my elastic version is 8.1.2. And I got error java.lan… --- ## [Synthetic Monitoring](https://discuss.elastic.co/t/synthetic-monitoring/302002)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 4:56pm UTC](https://discuss.elastic.co/t/synthetic-monitoring/302002 "2022-04-12T16:56:17Z")
Hi, I have this error on my synthetics test on Uptime Module: page.click: Evaluation failed: DOMException: Failed to execute 'evaluate' on 'Document': The string '\[href=/observability\]' is not a valid XPath expression. … --- ## [How to show the pipeline conf source filename of error in logs](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201)
**Author:** [@Mahf](https://discuss.elastic.co/u/Mahf)\ **Replies:** 8\ **Last updated:** [April 12, 2022, 4:52pm UTC](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201 "2022-04-12T16:52:19Z")
Hello, We have multiple logstash conf files that we run simultaneously, the problem is that when we have many errors come from several pipelines, so we can't tell which one is the source of the error, sometimes it's eas… --- ## [Indicator Match - Rule Type: Correlation - Not Match Result Un Available](https://discuss.elastic.co/t/indicator-match-rule-type-correlation-not-match-result-un-available/301734)
**Author:** [@raghulannadurai](https://discuss.elastic.co/u/raghulannadurai)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 4:30pm UTC](https://discuss.elastic.co/t/indicator-match-rule-type-correlation-not-match-result-un-available/301734 "2022-04-12T16:30:39Z")
Good day to you all. Hope the below example can give you more context to the request, Let us consider the below, we have a three document doc1, doc2 and doc3. doc1 and doc2 were indexed into a index name A (firewall … --- ## [Logstash reading recursively directories](https://discuss.elastic.co/t/logstash-reading-recursively-directories/302213)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 3:30pm UTC](https://discuss.elastic.co/t/logstash-reading-recursively-directories/302213 "2022-04-12T15:30:46Z")
Hi everyone, in my environment I'm trying to read log files that are saved on the file system like this: /home/andrea/mylogs/\[subdir1....subdirN\]/\*.gz /home/andrea/mylogs/\[subdir1...subdirM\]/\*.gz /home/andrea/mylogs/\[s… --- ## [CVE-2022-22965 vulnerability on Elastic Search or Kibana](https://discuss.elastic.co/t/cve-2022-22965-vulnerability-on-elastic-search-or-kibana/302216)
**Author:** [@kavirajansakthivel](https://discuss.elastic.co/u/kavirajansakthivel)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 3:11pm UTC](https://discuss.elastic.co/t/cve-2022-22965-vulnerability-on-elastic-search-or-kibana/302216 "2022-04-12T15:11:46Z")
We are having Elasticsearch and Kibana (7.17.0) in our system. we do not have any spring framework integrated which are mentioned in this link (Integrations | Elasticsearch Plugins and Integrations \[7.17\] | Elastic). Des… --- ## [High CPU load](https://discuss.elastic.co/t/high-cpu-load/302102)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 9\ **Last updated:** [April 12, 2022, 2:58pm UTC](https://discuss.elastic.co/t/high-cpu-load/302102 "2022-04-12T14:58:25Z")
Hi Elastic community, I have a cloud cluster with 3 hot nodes. Stack monitoring data is showing me that 2 out of 3 are constantly under heavy load. CPU usage is nearly 100% all the time. I would like to know how can I t… --- ## [Percentile after aggregation](https://discuss.elastic.co/t/percentile-after-aggregation/302245)
**Author:** [@Robert\_Hornsby](https://discuss.elastic.co/u/Robert_Hornsby)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 2:06pm UTC](https://discuss.elastic.co/t/percentile-after-aggregation/302245 "2022-04-12T14:06:04Z")
My data is a series of document each with a time and a transaction id. I want to group the data by transaction id, from each group select the largest time and then use those times as input to a percentile function. I can… --- ## [Get the number of people who have bought twice](https://discuss.elastic.co/t/get-the-number-of-people-who-have-bought-twice/302211)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [April 12, 2022, 1:52pm UTC](https://discuss.elastic.co/t/get-the-number-of-people-who-have-bought-twice/302211 "2022-04-12T13:52:28Z")
Hello friends I have an index of orders as follows { "offer" : { "type" : "unsigned\_long" }, "order\_number" : { "type" : "keyword" }, "payable" : { … --- ## [Output to Azure Blob Storage](https://discuss.elastic.co/t/output-to-azure-blob-storage/302209)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 1:19pm UTC](https://discuss.elastic.co/t/output-to-azure-blob-storage/302209 "2022-04-12T13:19:51Z")
Hi, everyone I have been looking over Internet in order to find a plugin for Logstash or FIlebeat in order to send data to Azure Blob Storage. I have found a plugin on GitHub: Plugin However, it is an unofficial plug… --- ## [Need to create a grok pattern](https://discuss.elastic.co/t/need-to-create-a-grok-pattern/302123)
**Author:** [@amsmzn](https://discuss.elastic.co/u/amsmzn)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 1:18pm UTC](https://discuss.elastic.co/t/need-to-create-a-grok-pattern/302123 "2022-04-12T13:18:42Z")
Hi there, I am new to logstash. I am trying to create a grok pattern for the below line, which would create a field in the Elasticsearch mvn clean deploy -P build -gs ./sd\_tools/config/maven/settings.xml -s ./sd\_tools/… --- ## [How to add client.ip to Alarm "stack by"?](https://discuss.elastic.co/t/how-to-add-client-ip-to-alarm-stack-by/302171)
**Author:** [@VellayLoket](https://discuss.elastic.co/u/VellayLoket)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 1:12pm UTC](https://discuss.elastic.co/t/how-to-add-client-ip-to-alarm-stack-by/302171 "2022-04-12T13:12:43Z")
In the "Alerts" section, in the "Stack by" field, I see many fields other than the one I need (client.ip). How to add a field to this list? --- ## [Logstash skips first lines and start reading from second line](https://discuss.elastic.co/t/logstash-skips-first-lines-and-start-reading-from-second-line/302121)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 3\ **Last updated:** [April 12, 2022, 12:23pm UTC](https://discuss.elastic.co/t/logstash-skips-first-lines-and-start-reading-from-second-line/302121 "2022-04-12T12:23:49Z")
Hi All, This is below my sample logs. \[2022-03-09T22:38:03.296+01:00\] \[String\] \[NOTIFICATION:16\] \[ODL-52001\] \[FileLogWriter\] \[Oracle\] \[host: \*\] \[nwaddr: \*\] \[tid: \[ACTIVE\].ExecuteThread: '157' for queue: 'weblogic.kerne… --- ## [Can't get value from hash in XML document](https://discuss.elastic.co/t/cant-get-value-from-hash-in-xml-document/301897)
**Author:** [@duanra22](https://discuss.elastic.co/u/duanra22)\ **Replies:** 4\ **Last updated:** [April 12, 2022, 7:06am UTC](https://discuss.elastic.co/t/cant-get-value-from-hash-in-xml-document/301897 "2022-04-12T07:06:02Z")
Hello, I'm struggling with an XML document that I am processing The part that is annoying me is something like \ \ \ \code1\ \value1\ \ \ \c… --- ## [Assign clusters to another ece deployment](https://discuss.elastic.co/t/assign-clusters-to-another-ece-deployment/302150)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 7:02pm UTC](https://discuss.elastic.co/t/assign-clusters-to-another-ece-deployment/302150 "2022-04-11T19:02:47Z")
Hi We had different ECE deployments for production and non prod. We want to migrate new to 1 ECE zone with all the prod and non prod clusters. How can i migrate all the clusters from the non prod to prod? Br Soren --- ## [Execute enrich policy always blocks until complete. Improve documentation or bug?](https://discuss.elastic.co/t/execute-enrich-policy-always-blocks-until-complete-improve-documentation-or-bug/302196)
**Author:** [@Baard](https://discuss.elastic.co/u/Baard)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 9:01am UTC](https://discuss.elastic.co/t/execute-enrich-policy-always-blocks-until-complete-improve-documentation-or-bug/302196 "2022-04-12T09:01:25Z")
See execute-enrich-policy-api-query-params wait\_for\_completion I am running Elasticsearch version 7.17.2 and this part of the documentation is a bit confusing wait\_for\_completion (Required, Boolean) If true, the re… --- ## [Can logstash parsing port number with service name?](https://discuss.elastic.co/t/can-logstash-parsing-port-number-with-service-name/302080)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 8:39am UTC](https://discuss.elastic.co/t/can-logstash-parsing-port-number-with-service-name/302080 "2022-04-12T08:39:40Z")
Hi, I wonder that is there any plugin or tools to help logstash use the port field to parsing corresponding service name? Like 53/tcp it will parsing the service name "DNS". Or I need to create a list of port/service, … --- ## [Unable to create geo points](https://discuss.elastic.co/t/unable-to-create-geo-points/302130)
**Author:** [@Dhinesh\_Kumar\_N](https://discuss.elastic.co/u/Dhinesh_Kumar_N)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 7:56am UTC](https://discuss.elastic.co/t/unable-to-create-geo-points/302130 "2022-04-12T07:56:10Z")
Hi, Can any one help to configure geo points for the data which I have, I'm using live data streaming(filebeat), I the logstash configuration I have added location feed, config: geoip { database =\> "GeoIP2-City.mmdb… --- ## [Timeline Template not applied when Alert fires](https://discuss.elastic.co/t/timeline-template-not-applied-when-alert-fires/301950)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 8\ **Last updated:** [April 12, 2022, 7:41am UTC](https://discuss.elastic.co/t/timeline-template-not-applied-when-alert-fires/301950 "2022-04-12T07:41:56Z")
Hi I am having issues with timeline templates. I have built a custom template showing some specific fields I would be interested in for blocked sessions thorugh a firewall. The timeline is configured and in the timeli… --- ## [Normal for node to be RED after reboot; standalone environment](https://discuss.elastic.co/t/normal-for-node-to-be-red-after-reboot-standalone-environment/300630)
**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\ **Replies:** 9\ **Last updated:** [April 12, 2022, 7:18am UTC](https://discuss.elastic.co/t/normal-for-node-to-be-red-after-reboot-standalone-environment/300630 "2022-04-12T07:18:39Z")
Hello - first time poster here and new ES user. Been troubleshooting for a couple days now and after reading numerous posts and ES docs, I must say this is pretty amazing stuff and the ES team + community seem quite ama… --- ## [Kibana does not start on Debian10](https://discuss.elastic.co/t/kibana-does-not-start-on-debian10/302108)
**Author:** [@ukt05](https://discuss.elastic.co/u/ukt05)\ **Replies:** 10\ **Last updated:** [April 12, 2022, 7:10am UTC](https://discuss.elastic.co/t/kibana-does-not-start-on-debian10/302108 "2022-04-12T07:10:16Z")
Hi, I am running Elasticsearch and Kibana on one machine with Debian 10 in a cluster. Elastichsearch runs properly but Kibana doesn't start. When I execute the command "journalctl -f -u kibana the following result is s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=655) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=657)