# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=748

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 749

---

## [Native controller process has stopped - no new native processes can be started and then elasticsearch node stoped](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started-and-then-elasticsearch-node-stoped/292527)

<div class="topic-metadata">

**Author:** [@qinkkai](https://discuss.elastic.co/u/qinkkai)\
**Replies:** 0\
**Last updated:** [December 21, 2021, 6:43am UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started-and-then-elasticsearch-node-stoped/292527 "2021-12-21T06:43:50Z")

</div>

I have two nodes in my Elasticsearch cluster and have same configurations and environment. cat /etc/centos-release CentOS Linux release 7.8.2003 (Core) uname -r 3.10.0-1127.8.2.el7.x86\_64 sysctl vm.max\_map\_count vm…

---

## [CVE-2021-44228 - Logstahs - ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath](https://discuss.elastic.co/t/cve-2021-44228-logstahs-error-statuslogger-log4j2-could-not-find-a-logging-implementation-please-add-log4j-core-to-the-classpath/291798)

<div class="topic-metadata">

**Author:** [@prajyodh](https://discuss.elastic.co/u/prajyodh)\
**Replies:** 3\
**Last updated:** [December 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/cve-2021-44228-logstahs-error-statuslogger-log4j2-could-not-find-a-logging-implementation-please-add-log4j-core-to-the-classpath/291798 "2021-12-21T06:41:37Z")

</div>

Hi I was checking on impact of CVE-2021-44228 on ELK stack and came across the link When i tried the solution mentioned for logstash to remove the JNDI Class zip -q -d \<LOGSTASH\_HOME\>/logstash-core/lib/jars/log4j-c…

---

## [Elasticsearch MUST query with nestedQuery() ScoreMode.NONE vs FILTER with nested Query SCOREMODE.NONE performance](https://discuss.elastic.co/t/elasticsearch-must-query-with-nestedquery-scoremode-none-vs-filter-with-nested-query-scoremode-none-performance/292524)

<div class="topic-metadata">

**Author:** [@Akshayyha\_Krishnamur](https://discuss.elastic.co/u/Akshayyha_Krishnamur)\
**Replies:** 0\
**Last updated:** [December 21, 2021, 5:56am UTC](https://discuss.elastic.co/t/elasticsearch-must-query-with-nestedquery-scoremode-none-vs-filter-with-nested-query-scoremode-none-performance/292524 "2021-12-21T05:56:56Z")

</div>

I am developing an Elasticsearch logic for searching certain fields and we are not concerned about relevance scoring. I already implemented the logic with MUST queries having nestedQuery ScoreMode.NONE. However, I came a…

---

## [Elasticsearch Re-indexing Issue](https://discuss.elastic.co/t/elasticsearch-re-indexing-issue/289529)

<div class="topic-metadata">

**Author:** [@Akshayyha\_Krishnamur](https://discuss.elastic.co/u/Akshayyha_Krishnamur)\
**Replies:** 7\
**Last updated:** [December 21, 2021, 5:42am UTC](https://discuss.elastic.co/t/elasticsearch-re-indexing-issue/289529 "2021-12-21T05:42:27Z")

</div>

We use a single node environment since we have adopted Elasticsearch recently. We are facing Elasticsearch indexing issues when 4 subsequent indexing requests were made at approximately 50 - 100ms interval each. Elastics…

---

## [How to calculate elapsed time between two events in different documents](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-two-events-in-different-documents/292522)

<div class="topic-metadata">

**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 0\
**Last updated:** [December 21, 2021, 5:42am UTC](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-two-events-in-different-documents/292522 "2021-12-21T05:42:08Z")

</div>

Hi all, If I have a log with: @timestamp EVENTNO (Event number) and DEVICEID (Device ID) and this happen: always when a specific event occurs, it does have a start (EVENTNO="300095") and an end (EVENTNO="300096"). I …

---

## [Caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292521)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 1\
**Last updated:** [December 21, 2021, 5:35am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292521 "2021-12-21T05:35:53Z")

</div>

{"type": "server", "timestamp": "2021-12-17T19:45:21,865Z", "level": "WARN", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "dev", "node.name": "dev-es-data-node-hot-0", "message": "caught exception wh…

---

## [Caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292440)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 2\
**Last updated:** [December 21, 2021, 5:34am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292440 "2021-12-21T05:34:38Z")

</div>

My hot node is already outputting this log. What is the problem? {"type": "server", "timestamp": "2021-12-17T19:45:21,865Z", "level": "WARN", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "dev", "nod…

---

## [FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index: Unable to complete the OUTDATED\_DOCUMENTS\_SEARCH\_OPEN\_PIT step after 15 attempts, terminating](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-unable-to-complete-the-outdated-documents-search-open-pit-step-after-15-attempts-terminating/292210)

<div class="topic-metadata">

**Author:** [@user23](https://discuss.elastic.co/u/user23)\
**Replies:** 4\
**Last updated:** [December 21, 2021, 5:17am UTC](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-index-unable-to-complete-the-outdated-documents-search-open-pit-step-after-15-attempts-terminating/292210 "2021-12-21T05:17:39Z")

</div>

HI!HOW CAN I SOLVE THIS PROBLEM? WHEN I OPEN KIBANA 7.15 VERSION FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index: Unable to complete the OUTDATED\_DOCUMENTS\_SEARCH\_OPEN\_PIT step after 15 …

---

## [Wireshark json file cannot display in separate fields in Elasticsearch](https://discuss.elastic.co/t/wireshark-json-file-cannot-display-in-separate-fields-in-elasticsearch/291381)

<div class="topic-metadata">

**Author:** [@lauyatkin](https://discuss.elastic.co/u/lauyatkin)\
**Replies:** 30\
**Last updated:** [December 21, 2021, 2:38am UTC](https://discuss.elastic.co/t/wireshark-json-file-cannot-display-in-separate-fields-in-elasticsearch/291381 "2021-12-21T02:38:42Z")

</div>

I have investigated for a month and still cannot find a solution to structure the json data captured by Wireshark. I am using FileBeat in Elastic to import json data. However, all the json data are packed to the "message…

---

## [What is "score" in elasticsearch](https://discuss.elastic.co/t/what-is-score-in-elasticsearch/292498)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [December 21, 2021, 1:32am UTC](https://discuss.elastic.co/t/what-is-score-in-elasticsearch/292498 "2021-12-21T01:32:55Z")

</div>

I want to understand the concept of score in Elasticsearch with an example and how it is work search engine.

---

## [Elasticsearch OSS](https://discuss.elastic.co/t/elasticsearch-oss/292501)

<div class="topic-metadata">

**Author:** [@kfull6\_nike](https://discuss.elastic.co/u/kfull6_nike)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-oss/292501 "2021-12-20T22:03:42Z")

</div>

I noticed that for the latest log4j2 vulnerabilities ES was updated. Any idea if and when Elasticsearch-oss will be updated?

---

## [Standard training Subscription](https://discuss.elastic.co/t/standard-training-subscription/292472)

<div class="topic-metadata">

**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 9:43pm UTC](https://discuss.elastic.co/t/standard-training-subscription/292472 "2021-12-20T21:43:54Z")

</div>

Hi, I am interested in the Subscription plan. Could you please help me with prices? Also, If I purchase a on demand course how many days, I have access to the course? Thanks in advance

---

## [Logstash unable to connect to Elasticsearch over https](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362)

<div class="topic-metadata">

**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\
**Replies:** 6\
**Last updated:** [December 20, 2021, 8:38pm UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362 "2021-12-20T20:38:59Z")

</div>

Hello, I am facing connection issues from logstash to my elastic stack. The very strange this is, that it worked until yesterday. Today (without any modification from my side) I get: Dec 17 22:00:55 ubuntu logstash-app…

---

## [No Certificates found. Note: Certificates are only visible for Heartbeat 7.8+](https://discuss.elastic.co/t/no-certificates-found-note-certificates-are-only-visible-for-heartbeat-7-8/292474)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 3\
**Last updated:** [December 20, 2021, 8:36pm UTC](https://discuss.elastic.co/t/no-certificates-found-note-certificates-are-only-visible-for-heartbeat-7-8/292474 "2021-12-20T20:36:50Z")

</div>

Hi The Elastic Stack is version 7.16.2 and the heartbeats at the hosts are version 7.15.0. On the Kibana Observablity -\> Uptime -\> TLS Certificates no certificates are shown and a text is shown: No Certificates found. …

---

## [What exactly does sincedb\_path do?](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 8:09pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504 "2021-12-20T20:09:50Z")

</div>

I'm having little trouble understanding Logstash a bit. I've already imported a file using Logstash and I've tried to update the index but it updates it only if I set sincedb\_path to NUL. Can someone explain? Thanks.

---

## [Kibana does not display Graphs](https://discuss.elastic.co/t/kibana-does-not-display-graphs/292397)

<div class="topic-metadata">

**Author:** [@albertogarf91](https://discuss.elastic.co/u/albertogarf91)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 8:02pm UTC](https://discuss.elastic.co/t/kibana-does-not-display-graphs/292397 "2021-12-20T20:02:49Z")

</div>

Hello, I have a problem with Wazuh and kibana interface. I can not see any graph in several places like wazuh -\> overview -\> security events: Or wazuh -\> agents -\> security events: Or in general in any visualizati…

---

## [Kibana UI issue after upgrade to kibana 7.10.2](https://discuss.elastic.co/t/kibana-ui-issue-after-upgrade-to-kibana-7-10-2/291331)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:12pm UTC](https://discuss.elastic.co/t/kibana-ui-issue-after-upgrade-to-kibana-7-10-2/291331 "2021-12-20T18:12:56Z")

</div>

After I upgrade Elasticsearch and kibana to v7.10.2 from 7.8.0, I have observed an issue in kibana UI. When I reload the kibana UI after upgrade it gives "ERR\_TO\_MANY\_REDIRECTS" error. Please refer below screenshot for …

---

## [Kibana 7.16.1 short url](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476)

<div class="topic-metadata">

**Author:** [@Marko\_Brkusanin](https://discuss.elastic.co/u/Marko_Brkusanin)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-16-1-short-url/292476 "2021-12-20T18:08:38Z")

</div>

Hi, after I upgrade ELK to version 7.16.1 i noticed that API "shorten\_url" is not working anymore. I found Create short URL API | Kibana Guide \[7.16\] | Elastic, but is not clear to me what is: "locatorId" and how to conv…

---

## [Kibana - Error - Can't start - Unable to read Kibana UUID file](https://discuss.elastic.co/t/kibana-error-cant-start-unable-to-read-kibana-uuid-file/291370)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 6:05pm UTC](https://discuss.elastic.co/t/kibana-error-cant-start-unable-to-read-kibana-uuid-file/291370 "2021-12-20T18:05:32Z")

</div>

\[ubuntu 20.04\] Howdy, I've inherited an Elastic installation, which was running. I can't seem to get it restarted.. can anyone help to get me out of the weeds? I tried to bounce it with the following command, as user u…

---

## [Failure with sorts and new co.elastic.clients:elasticsearch-java client](https://discuss.elastic.co/t/failure-with-sorts-and-new-co-elastic-clients-elasticsearch-java-client/291511)

<div class="topic-metadata">

**Author:** [@ilgrosso](https://discuss.elastic.co/u/ilgrosso)\
**Replies:** 13\
**Last updated:** [December 20, 2021, 4:53pm UTC](https://discuss.elastic.co/t/failure-with-sorts-and-new-co-elastic-clients-elasticsearch-java-client/291511 "2021-12-20T16:53:14Z")

</div>

I am upgrading from Java High-level REST client 7.15 to the new Java client. I am almost done, it seems only one issue is left. I am currently using bare Map\<String, Object\> for documents, hence my index requests look …

---

## [Elastic Search Child Object filter](https://discuss.elastic.co/t/elastic-search-child-object-filter/292483)

<div class="topic-metadata">

**Author:** [@Tom\_Johnson](https://discuss.elastic.co/u/Tom_Johnson)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 4:00pm UTC](https://discuss.elastic.co/t/elastic-search-child-object-filter/292483 "2021-12-20T16:00:43Z")

</div>

Hi All, I'm a beginner of Elasticsearch, My Elasticsearch response as below: { "took": 30, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed…

---

## [Coordinating nodeの冗長構成について](https://discuss.elastic.co/t/coordinating-node/292426)

<div class="topic-metadata">

**Author:** [@kapibara824](https://discuss.elastic.co/u/kapibara824)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 3:51pm UTC](https://discuss.elastic.co/t/coordinating-node/292426 "2021-12-20T15:51:18Z")

</div>

私の環境ではmaster3,data3,coordinating\*2の8ノードのElasticsearchクラスタを構築しています。 この場合logstashからcoordinatingノードに対してoutputを書くと思うのですがどちらを指定するべきですか？もしくは複数にoutputする方法がありますか？

---

## [KQL bar limitation](https://discuss.elastic.co/t/kql-bar-limitation/292184)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kql-bar-limitation/292184 "2021-12-20T15:33:00Z")

</div>

Hi, what is the maximum number of values I can use to match in KQL query? I have index which contains milions of rows of names and many columns related to them and I want to filter out lets say 50 names, but to click a…

---

## [Date not visible while creating small interval buckets using Date Histogram](https://discuss.elastic.co/t/date-not-visible-while-creating-small-interval-buckets-using-date-histogram/291428)

<div class="topic-metadata">

**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 3:08pm UTC](https://discuss.elastic.co/t/date-not-visible-while-creating-small-interval-buckets-using-date-histogram/291428 "2021-12-20T15:08:49Z")

</div>

Hi, I'm using Kibana 7.15.0 and while using Date Histogram in bucket aggregations, I can't see the date on the bars created when the interval is smaller than 1 hour: For interval = 15 mins, the date is not shown on …

---

## [Logstash error](https://discuss.elastic.co/t/logstash-error/291738)

<div class="topic-metadata">

**Author:** [@Jasmina\_Desai](https://discuss.elastic.co/u/Jasmina_Desai)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 2:40pm UTC](https://discuss.elastic.co/t/logstash-error/291738 "2021-12-20T14:40:23Z")

</div>

We are currently using logstash OSS version 7.12.0 downloaded from Past Releases of Elastic Stack Software | Elastic. However, the version 7.16.1 that has the log4j2 vulnerability fix throws a 404 error. How do I get t…

---

## [Deploying E+K onto K8s cluster, multiple subnets and nodegroups](https://discuss.elastic.co/t/deploying-e-k-onto-k8s-cluster-multiple-subnets-and-nodegroups/291501)

<div class="topic-metadata">

**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\
**Replies:** 18\
**Last updated:** [December 20, 2021, 2:39pm UTC](https://discuss.elastic.co/t/deploying-e-k-onto-k8s-cluster-multiple-subnets-and-nodegroups/291501 "2021-12-20T14:39:55Z")

</div>

this is a 2nd chance to get some assistance re: Deploying E+K onto AWD EKS cluster, multiple subnets and nodegroups across 2 az's - #2 by George\_Leonard The thread ask for assistance in deploying the Elastic+Kibana stac…

---

## [Self-induced error -deleted indeces](https://discuss.elastic.co/t/self-induced-error-deleted-indeces/292024)

<div class="topic-metadata">

**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 2:19pm UTC](https://discuss.elastic.co/t/self-induced-error-deleted-indeces/292024 "2021-12-20T14:19:54Z")

</div>

Hi all, rookie here again. Looking for some advice on this situation: I just installed ELK with Filebeats about 3 weeks ago. Had a few modules running ok. however, in three weeks I filled up the entire 700GB drive wit…

---

## [New Stack new problems - illegal\_argument\_exeption](https://discuss.elastic.co/t/new-stack-new-problems-illegal-argument-exeption/292341)

<div class="topic-metadata">

**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\
**Replies:** 2\
**Last updated:** [December 20, 2021, 2:17pm UTC](https://discuss.elastic.co/t/new-stack-new-problems-illegal-argument-exeption/292341 "2021-12-20T14:17:37Z")

</div>

Hi, so due to a previous post's issues, I created a new ELK stack on a new machine. Completely re-installed the OS and recreated ELK with filebeats. After the installation and configurations, I get a new error saying "1…

---

## [Bag of wordsとして解析](https://discuss.elastic.co/t/bag-of-words/290112)

<div class="topic-metadata">

**Author:** [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 2:08pm UTC](https://discuss.elastic.co/t/bag-of-words/290112 "2021-12-20T14:08:38Z")

</div>

Bag of wordsとして解析できるように、Analyzerによって作成されたTokenをkeywordとして登録するような方法はありますか？

---

## [Is there any way to display base64 image data on dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461)

<div class="topic-metadata">

**Author:** [@elastik](https://discuss.elastic.co/u/elastik)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 1:20pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461 "2021-12-20T13:20:17Z")

</div>

I found the way to display image url using markdown card !\[image\](https://www.google.com/logos/doodles/2021/seasonal-holidays-2021-6753651837109324-6752733080595603-cst.gif) but i don't know how to display base64 image…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=747)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=749)
