# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=753

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 754

---

## [Native memory leak with frequent index delete/create](https://discuss.elastic.co/t/native-memory-leak-with-frequent-index-delete-create/290070)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 5:36am UTC](https://discuss.elastic.co/t/native-memory-leak-with-frequent-index-delete-create/290070 "2021-12-15T05:36:54Z")

</div>

As part of some flow, we used to create and delete an index just to do smoke test kind of regularly. Over months, we saw native memory is growing very badly. And finally, it touches max limits of OS memory and crashes. …

---

## [Metric beat error](https://discuss.elastic.co/t/metric-beat-error/291899)

<div class="topic-metadata">

**Author:** [@Deepanshu\_Saini](https://discuss.elastic.co/u/Deepanshu_Saini)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 5:17am UTC](https://discuss.elastic.co/t/metric-beat-error/291899 "2021-12-15T05:17:39Z")

</div>

Hi Whenever , I am running cmd metricbeat -e -c /etc/metricbeat/metricbeat.yml. I am getting following 2021-12-15T05:07:59.529Z ERROR mongodb/mongodb.go:98 Error establishing direct connection to mongo node at \[x.x.x.x:…

---

## [Map unable to show result when filters are applied](https://discuss.elastic.co/t/map-unable-to-show-result-when-filters-are-applied/290625)

<div class="topic-metadata">

**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\
**Replies:** 6\
**Last updated:** [December 15, 2021, 4:25am UTC](https://discuss.elastic.co/t/map-unable-to-show-result-when-filters-are-applied/290625 "2021-12-15T04:25:13Z")

</div>

Hello, I just started using Kibana not long ago and encounter some problems. For my current dataset, I do not have any map geo data but only country names. So I had to do a terms join method with an external map geo data…

---

## [Kibana Uptime Monitor](https://discuss.elastic.co/t/kibana-uptime-monitor/289151)

<div class="topic-metadata">

**Author:** [@mst3r25](https://discuss.elastic.co/u/mst3r25)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 12:49am UTC](https://discuss.elastic.co/t/kibana-uptime-monitor/289151 "2021-12-15T00:49:24Z")

</div>

I'm using the Kibana Uptime app to ping all my servers. I have more than 10 locations, but Kibana seems to default to 10 locations. Is there a way to make this dynamic or increase the locations from 10?

---

## [Searching for patterns?](https://discuss.elastic.co/t/searching-for-patterns/291881)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 12:12am UTC](https://discuss.elastic.co/t/searching-for-patterns/291881 "2021-12-15T00:12:24Z")

</div>

After a little tinkering with Enterprise search I can see using it far more then I expected. While it needs a considerable about of user interface work still it's come a long way in a short time. Just to not leave that c…

---

## [Export Raw CSV (for Kibana read only user)](https://discuss.elastic.co/t/export-raw-csv-for-kibana-read-only-user/291864)

<div class="topic-metadata">

**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 10:45pm UTC](https://discuss.elastic.co/t/export-raw-csv-for-kibana-read-only-user/291864 "2021-12-14T22:45:54Z")

</div>

Hi our customers are accessing the kibana dashboard in read only mode and they are trying to download the Raw CSV but they get only 1 number (same as the formatted CSV) It seems like they cannot download the entire raw …

---

## [DeprecationWarning: The 'body' parameter is deprecated for the 'index' API and will be removed in a future version](https://discuss.elastic.co/t/deprecationwarning-the-body-parameter-is-deprecated-for-the-index-api-and-will-be-removed-in-a-future-version/291876)

<div class="topic-metadata">

**Author:** [@ingmar](https://discuss.elastic.co/u/ingmar)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 10:15pm UTC](https://discuss.elastic.co/t/deprecationwarning-the-body-parameter-is-deprecated-for-the-index-api-and-will-be-removed-in-a-future-version/291876 "2021-12-14T22:15:06Z")

</div>

Describe the feature: Elasticsearch version 7.15 elasticsearch-py version (elasticsearch.\_\_versionstr\_\_): 7.15.2 Please make sure the major version matches the Elasticsearch server you are running. Description of th…

---

## [Id size check](https://discuss.elastic.co/t/id-size-check/291870)

<div class="topic-metadata">

**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 8:39pm UTC](https://discuss.elastic.co/t/id-size-check/291870 "2021-12-14T20:39:09Z")

</div>

\_id is limited to 512 bytes in size and larger values will be rejected How can I check the bytes size in Java? Is this UTF 8 encoding? I can't find any info

---

## [Multiple Pipelines throwing errors when enabled](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 9\
**Last updated:** [December 14, 2021, 8:28pm UTC](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858 "2021-12-14T20:28:15Z")

</div>

Good Afternoon Elastic Peeps; I have been working with configuring and employing multiple pipelines in my ELK stack. I have implemented ELK 7.13.4 and when I use a simple syslog pipeline I am able to gather the informa…

---

## [Logstash Date filter plugin doesn't work with Java 8 after 7.16.1 upgrade](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811)

<div class="topic-metadata">

**Author:** [@YuryShupletsov](https://discuss.elastic.co/u/YuryShupletsov)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 7:40pm UTC](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811 "2021-12-14T19:40:15Z")

</div>

Hello, We have updated Logstash from 7.10.1 to 7.16.1 and cannot start it with the error: \[2021-12-14T15:35:05,385\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/…

---

## [Multiline pattern not matching in fluentbit](https://discuss.elastic.co/t/multiline-pattern-not-matching-in-fluentbit/291853)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 3\
**Last updated:** [December 14, 2021, 6:55pm UTC](https://discuss.elastic.co/t/multiline-pattern-not-matching-in-fluentbit/291853 "2021-12-14T18:55:32Z")

</div>

Hello team, I am ingesting data through fluent bit. we are facing some multiline pattern issu. can any one help me on this. In the message field it is displaying only 1 line. Pattern: (?m-ix)^(?\<time\>\\d{4}\\-\\d{2}\\…

---

## [ElasticSearch autocomplete/suggest by token](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854)

<div class="topic-metadata">

**Author:** [@abhinav-nath](https://discuss.elastic.co/u/abhinav-nath)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854 "2021-12-14T18:15:12Z")

</div>

I want to create search suggestions based on the tokens (and not full documents) that are present in my index. For example: I have a simple index for movies in which I have these two documents: {"name":"Captain Ameri…

---

## [Search UI sorting by date: No mapping found error](https://discuss.elastic.co/t/search-ui-sorting-by-date-no-mapping-found-error/291857)

<div class="topic-metadata">

**Author:** [@asorondo](https://discuss.elastic.co/u/asorondo)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 6:36pm UTC](https://discuss.elastic.co/t/search-ui-sorting-by-date-no-mapping-found-error/291857 "2021-12-14T18:36:41Z")

</div>

Hi! I'm using Elasticsearch and search UI and wish to sort by different fields. I'm using the search UI component "Sorting" as follows: \<Sorting label={"Sort by"} sortOptio…

---

## [How to re-name field names in logstash](https://discuss.elastic.co/t/how-to-re-name-field-names-in-logstash/291803)

<div class="topic-metadata">

**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\
**Replies:** 3\
**Last updated:** [December 14, 2021, 6:19pm UTC](https://discuss.elastic.co/t/how-to-re-name-field-names-in-logstash/291803 "2021-12-14T18:19:06Z")

</div>

Hi all, We have field names like client.geo.name and event.category , how can we re-name the names to this client geo name and event category. "\[event\]\[category\]" =\> "Event category" "\[client\]\[geo\]\[name\]" =\> "client g…

---

## [Logstash sending data to kafka topic at same time which disturbs ordering of log transactions](https://discuss.elastic.co/t/logstash-sending-data-to-kafka-topic-at-same-time-which-disturbs-ordering-of-log-transactions/291848)

<div class="topic-metadata">

**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 5:58pm UTC](https://discuss.elastic.co/t/logstash-sending-data-to-kafka-topic-at-same-time-which-disturbs-ordering-of-log-transactions/291848 "2021-12-14T17:58:02Z")

</div>

Hello Everyone, My log file transactions look like this as shown below My log file looks like this: start time: 2021-10-11T13:54:34Z category: commercial status: started end time: start time: 2021-10-11T13:54:34Z c…

---

## [Problem with "\\n" character with tcp output plugin](https://discuss.elastic.co/t/problem-with-n-character-with-tcp-output-plugin/291822)

<div class="topic-metadata">

**Author:** [@lemahdois](https://discuss.elastic.co/u/lemahdois)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 5:55pm UTC](https://discuss.elastic.co/t/problem-with-n-character-with-tcp-output-plugin/291822 "2021-12-14T17:55:59Z")

</div>

Hello, on my logstash pipeline I receive logs that contain "\\n" character as follows "message" : "aaaa\\nbbbbb" When sending this log using tcp output plugin, the destination receives the log on two lines aaaa bb…

---

## [How to update log4j jar in logstash installed in ubuntu VM](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830)

<div class="topic-metadata">

**Author:** [@Rughma\_Sussan\_Renji](https://discuss.elastic.co/u/Rughma_Sussan_Renji)\
**Replies:** 2\
**Last updated:** [December 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830 "2021-12-14T17:47:38Z")

</div>

how will I upgrade my logstash version in ubuntu to 2.15.0, currently it is 2.14.0, but due to the vulnerability issue I need to update it to 2.15.0. can anyone tell me the command to update it to the latest version

---

## [Create tab delimited string for output](https://discuss.elastic.co/t/create-tab-delimited-string-for-output/291840)

<div class="topic-metadata">

**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 5:40pm UTC](https://discuss.elastic.co/t/create-tab-delimited-string-for-output/291840 "2021-12-14T17:40:52Z")

</div>

I need to construct a string with tab as delimiters for downstream consumption. I don't want to create a csv file because I am sending it over the network somewhere else. example input: field1: timestamp field2: host…

---

## [Can't delete the reports file on kibana server](https://discuss.elastic.co/t/cant-delete-the-reports-file-on-kibana-server/291385)

<div class="topic-metadata">

**Author:** [@Hello-Linux](https://discuss.elastic.co/u/Hello-Linux)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 5:25pm UTC](https://discuss.elastic.co/t/cant-delete-the-reports-file-on-kibana-server/291385 "2021-12-14T17:25:43Z")

</div>

The report document generated by kibana is always kept on the server, how to delete it? and ook at can't delete the reports on kibana · Issue #119420 · elastic/kibana · GitHub

---

## [Missing Field Value For Nested Field - Function Score Query | v7.10.2](https://discuss.elastic.co/t/missing-field-value-for-nested-field-function-score-query-v7-10-2/291365)

<div class="topic-metadata">

**Author:** [@gursahibsahni](https://discuss.elastic.co/u/gursahibsahni)\
**Replies:** 3\
**Last updated:** [December 14, 2021, 4:51pm UTC](https://discuss.elastic.co/t/missing-field-value-for-nested-field-function-score-query-v7-10-2/291365 "2021-12-14T16:51:22Z")

</div>

I have been trying for a long time now but the nested field value is always saying missing field value while calculating the score. Mapping: { "main\_idx" : { "mappings" : { "properties" : { "\_class"…

---

## [Aggregation buckets custom order](https://discuss.elastic.co/t/aggregation-buckets-custom-order/291838)

<div class="topic-metadata">

**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 4:24pm UTC](https://discuss.elastic.co/t/aggregation-buckets-custom-order/291838 "2021-12-14T16:24:09Z")

</div>

I'd like to define by hand the order of a term aggregation. Of course, these values should appear only when they are part of the result. Is there a way this can be done? Custom agg1 (x) Custom agg2 (x) Other1 (x) Oth…

---

## [Elasticsearch 5.6.6 security vulnerability log4j](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821)

<div class="topic-metadata">

**Author:** [@William1](https://discuss.elastic.co/u/William1)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821 "2021-12-14T15:01:08Z")

</div>

Hello all, I would like to ask if we can keep our current version 5.6.6 and setting the JVM option, in order to mitigate this vulnerability? This since upgrading is not possible. Thanks for your help!

---

## [How to visualise nested time series data](https://discuss.elastic.co/t/how-to-visualise-nested-time-series-data/291445)

<div class="topic-metadata">

**Author:** [@wfhartford](https://discuss.elastic.co/u/wfhartford)\
**Replies:** 2\
**Last updated:** [December 14, 2021, 3:17pm UTC](https://discuss.elastic.co/t/how-to-visualise-nested-time-series-data/291445 "2021-12-14T15:17:33Z")

</div>

I have an interesting data structure and I'm looking for advice on how to store it in Elasticsearch and visualise in kibana. The data is statistics related to queries to a separate time series database. Each document sum…

---

## [7.16.1: Interacting with a cell on a 'Discovery' pane in a dashboard results in a blank page being displayed](https://discuss.elastic.co/t/7-16-1-interacting-with-a-cell-on-a-discovery-pane-in-a-dashboard-results-in-a-blank-page-being-displayed/291780)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 2\
**Last updated:** [December 14, 2021, 2:26pm UTC](https://discuss.elastic.co/t/7-16-1-interacting-with-a-cell-on-a-discovery-pane-in-a-dashboard-results-in-a-blank-page-being-displayed/291780 "2021-12-14T14:26:01Z")

</div>

Hi All, After upgrading to from 7.15.2 to 7.16.1 yesterday I've noticed that when I try to view the contents of any cell within a 'discovery' view on a dashboard it now results in a blank page being displayed, rather th…

---

## [Logstash starts but doesn’t do anything](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 4\
**Last updated:** [December 14, 2021, 2:06pm UTC](https://discuss.elastic.co/t/logstash-starts-but-doesn-t-do-anything/291637 "2021-12-14T14:06:51Z")

</div>

Im trying to get some data in my logstash but my service doesn't seem to work properly. When I check my logstash status I get the following: ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.se…

---

## [Log4j 2 delete action error](https://discuss.elastic.co/t/log4j-2-delete-action-error/291807)

<div class="topic-metadata">

**Author:** [@Jeffy](https://discuss.elastic.co/u/Jeffy)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 1:38pm UTC](https://discuss.elastic.co/t/log4j-2-delete-action-error/291807 "2021-12-14T13:38:32Z")

</div>

when I configured action delete policy for rolling over log, logger alerts error said: access denied(UserInformation related) and the rolling log shows file permission as rwx---r-- can further advise?

---

## [Does 7.16.1 work for anyone?](https://discuss.elastic.co/t/does-7-16-1-work-for-anyone/291767)

<div class="topic-metadata">

**Author:** [@richard.penarroya](https://discuss.elastic.co/u/richard.penarroya)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 1:05pm UTC](https://discuss.elastic.co/t/does-7-16-1-work-for-anyone/291767 "2021-12-14T13:05:29Z")

</div>

Following the latest announcements regarding log4j vulnerabilities, we have updated our Elastic platform from 7.16.0 to 7.16.1. Just after this update, Elasticsearch failed to index anything.... be it data coming from …

---

## [Help with Grok pattern with space in field?](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 5\
**Last updated:** [December 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695 "2021-12-14T13:03:56Z")

</div>

I have the following logs looks like: query: s03.amazon.com IN A + (21.12.21.21) query: s2.tabtest.com IN AAAA +++ (213.12.21.21) query: t4.asaptest.com OUT TD OP- (21.124.21.21) I need output to look like this: hos…

---

## [Elastic data nodes are randomly getting unresponsive](https://discuss.elastic.co/t/elastic-data-nodes-are-randomly-getting-unresponsive/291793)

<div class="topic-metadata">

**Author:** [@fschoell](https://discuss.elastic.co/u/fschoell)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 12:21pm UTC](https://discuss.elastic.co/t/elastic-data-nodes-are-randomly-getting-unresponsive/291793 "2021-12-14T12:21:21Z")

</div>

Hello, we run an Elasticsearch cluster with 12 data nodes of which groups of 4 share a larger dom server and are run in linux containers (dom servers are currently 48 core CPUs with 1.5 TB of memory and large SSD arrays)…

---

## [Kibana not connecting to Elasticsearch when providing external Certificate](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-when-providing-external-certificate/290511)

<div class="topic-metadata">

**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\
**Replies:** 12\
**Last updated:** [December 14, 2021, 12:01pm UTC](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-when-providing-external-certificate/290511 "2021-12-14T12:01:15Z")

</div>

Hi Team, I was Using Elastic Cloud On Kubernetes . So for my Elasticsearch and Kibana I want to use my own Certificates, But when provided the certificates I was getting issues like the Kibana not able to connect to Ela…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=752)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=754)
