# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=891 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 892 --- ## [Up time is not showing monitors](https://discuss.elastic.co/t/up-time-is-not-showing-monitors/277312)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 3\ **Last updated:** [July 7, 2021, 1:09pm UTC](https://discuss.elastic.co/t/up-time-is-not-showing-monitors/277312 "2021-07-07T13:09:56Z")
hi after adding tcp in heartbeat i cant find heartbeat in uptime. it shows only when i click particular time range. when i click on particular time rangei can see, if not its shows no result --- ## [Elasticsearch-keystore list command could not find java](https://discuss.elastic.co/t/elasticsearch-keystore-list-command-could-not-find-java/278069)
**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-list-command-could-not-find-java/278069 "2021-07-07T12:27:02Z")
Hi Team we are migrating ES 6.8.5 Java environment from Java8 to Java11. we are using oraclejdk11 as our Java vendor. we set Java\_home in bin/elasticsearch file like below usr/java/jdk11 In ansbile below task is fa… --- ## [What is considered a "large arbitrary set of keys", for the nested mapping?](https://discuss.elastic.co/t/what-is-considered-a-large-arbitrary-set-of-keys-for-the-nested-mapping/278064)
**Author:** [@Lockhead](https://discuss.elastic.co/u/Lockhead)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 12:42pm UTC](https://discuss.elastic.co/t/what-is-considered-a-large-arbitrary-set-of-keys-for-the-nested-mapping/278064 "2021-07-07T12:42:46Z")
On Nested field type | Elasticsearch Guide \[7.13\] | Elastic you can find this statement: "When ingesting key-value pairs with a large, arbitrary set of keys, you might consider modeling each key-value pair as its own nes… --- ## [Get rid of message: ... waiting for elected master node... to setup local exporter... (does it have x-pack installed?)](https://discuss.elastic.co/t/get-rid-of-message-waiting-for-elected-master-node-to-setup-local-exporter-does-it-have-x-pack-installed/277999)
**Author:** [@Dyanne\_Ostlind](https://discuss.elastic.co/u/Dyanne_Ostlind)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 12:28pm UTC](https://discuss.elastic.co/t/get-rid-of-message-waiting-for-elected-master-node-to-setup-local-exporter-does-it-have-x-pack-installed/277999 "2021-07-07T12:28:36Z")
How do I shut off this message? I'm using the fully open-source version of ES 7.5.2: \[2020-02-20T00:22:18,086\]\[INFO \]\[o.e.x.m.e.l.LocalExporter\] \[coordinator6\] waiting for elected master node \[{master1}{68sPQmYrRdW60YXS… --- ## [Logstash elastic HostUnreachableError while elastic is available](https://discuss.elastic.co/t/logstash-elastic-hostunreachableerror-while-elastic-is-available/278067)
**Author:** [@JoranDox](https://discuss.elastic.co/u/JoranDox)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 12:13pm UTC](https://discuss.elastic.co/t/logstash-elastic-hostunreachableerror-while-elastic-is-available/278067 "2021-07-07T12:13:04Z")
logstash (7.13.1) doesn't work without clear reason why: we get "LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError" but we can curl from the same pod with the same url & credentials it works in … --- ## [Activate Xpack + Watcher for existing Elasticsearch installation](https://discuss.elastic.co/t/activate-xpack-watcher-for-existing-elasticsearch-installation/278057)
**Author:** [@jdbcplusnet](https://discuss.elastic.co/u/jdbcplusnet)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 11:22am UTC](https://discuss.elastic.co/t/activate-xpack-watcher-for-existing-elasticsearch-installation/278057 "2021-07-07T11:22:12Z")
Hi all My company has already installed Elasticsearch + Kibana 6.8.7 with Basic License. We need to use Watcher API from Xpack plugin, so I guess we should buy a License for it. Can someone describe the process in case… --- ## [Yet another logstash and json issue, unable to ingest a "basic" json](https://discuss.elastic.co/t/yet-another-logstash-and-json-issue-unable-to-ingest-a-basic-json/277991)
**Author:** [@cibernicola](https://discuss.elastic.co/u/cibernicola)\ **Replies:** 4\ **Last updated:** [July 7, 2021, 10:09am UTC](https://discuss.elastic.co/t/yet-another-logstash-and-json-issue-unable-to-ingest-a-basic-json/277991 "2021-07-07T10:09:56Z")
I have a dir with tons of subdirs with a json file like this: { "id": "2234", "name": "Text", "url": "https://url.com", "param": "string", "last": "2021-07-06 20:05:49.458724", "url2": "url.com… --- ## [Any-way-to-show-different-dashboards-for-different-users for same org in same space](https://discuss.elastic.co/t/any-way-to-show-different-dashboards-for-different-users-for-same-org-in-same-space/277957)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 9:35am UTC](https://discuss.elastic.co/t/any-way-to-show-different-dashboards-for-different-users-for-same-org-in-same-space/277957 "2021-07-07T09:35:53Z")
Hi Experts! Is there any possible way for me to show different Kibana dashboards for different users? For example, I have 4 users in the same org, as the org is the same the data/dashboards are stored in the same space. … --- ## [Logstashを使用したlambdaのログのパースについて](https://discuss.elastic.co/t/logstash-lambda/278017)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 9:39am UTC](https://discuss.elastic.co/t/logstash-lambda/278017 "2021-07-07T09:39:25Z")
logstashで、AWSのlambdaのログをパースしたいです。 サンプル START RequestId: cce511d2-861d-4b2c-8813-e6f09b6567bb Version: $LATEST END RequestId: c… --- ## [Jdbc input not writing index](https://discuss.elastic.co/t/jdbc-input-not-writing-index/277815)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 10:53am UTC](https://discuss.elastic.co/t/jdbc-input-not-writing-index/277815 "2021-07-05T10:53:33Z")
Hello, here is my sample input.conf: input { jdbc { jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_connection\_string =\> "jdbc:sqlserver://x.x.x.x;databa… --- ## [Unable to ceate new index pattern in kibana](https://discuss.elastic.co/t/unable-to-ceate-new-index-pattern-in-kibana/277929)
**Author:** [@brand.u](https://discuss.elastic.co/u/brand.u)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 8:39am UTC](https://discuss.elastic.co/t/unable-to-ceate-new-index-pattern-in-kibana/277929 "2021-07-07T08:39:27Z")
Hi, i'm using elastic stack fpr several years. I've been watching the problem since version 5.xx and up to 7.13.2 After some time of usage your're unable to crate new index patterns in kibana. The "create index patte… --- ## [Incorrect timestamp used during query or while seeing messages in Discover](https://discuss.elastic.co/t/incorrect-timestamp-used-during-query-or-while-seeing-messages-in-discover/277868)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 3\ **Last updated:** [July 7, 2021, 8:24am UTC](https://discuss.elastic.co/t/incorrect-timestamp-used-during-query-or-while-seeing-messages-in-discover/277868 "2021-07-07T08:24:58Z")
Hi All, I have some 30 logs files (each file of individual day) of June month. I am collecting data through filebeat and then passing it to logstash. There is one index got created (yesterday, 4th July) which has indexe… --- ## [Can the split “query” and “aggregations” achieve higher performance？](https://discuss.elastic.co/t/can-the-split-query-and-aggregations-achieve-higher-performance/278034)
**Author:** [@Ryze](https://discuss.elastic.co/u/Ryze)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 7:32am UTC](https://discuss.elastic.co/t/can-the-split-query-and-aggregations-achieve-higher-performance/278034 "2021-07-07T07:32:48Z")
Imagine I have an index "article" with 100 million pieces of data. Its template data and mapping file are as follows. What I want to ask is, does splitting query and aggs (The following query1) and then using \_bulk api … --- ## [How to create logstash-\* index pattern to see syslog messages](https://discuss.elastic.co/t/how-to-create-logstash-index-pattern-to-see-syslog-messages/277705)
**Author:** [@ankan1979](https://discuss.elastic.co/u/ankan1979)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 5:56am UTC](https://discuss.elastic.co/t/how-to-create-logstash-index-pattern-to-see-syslog-messages/277705 "2021-07-07T05:56:07Z")
Hi, I am very new to ILK stack. I am forwarding syslog messages from my routers and switches to Logstash and want to see those in Kibana. When I am trying to add index pattern named logstash-\* from Kibana portal it's no… --- ## [Why is only one node processing the query?](https://discuss.elastic.co/t/why-is-only-one-node-processing-the-query/275070)
**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\ **Replies:** 11\ **Last updated:** [July 6, 2021, 11:23pm UTC](https://discuss.elastic.co/t/why-is-only-one-node-processing-the-query/275070 "2021-07-06T23:23:35Z")
Hi everyone. I had an index that had 5 primary shards and around 250GB of data in total (primaries only). I decided to reindex it with more primary shards (30) to see if I would have performance improvements. The index … --- ## [Im stuck at formatting data while trying to send xml file to Elasticsearch](https://discuss.elastic.co/t/im-stuck-at-formatting-data-while-trying-to-send-xml-file-to-elasticsearch/278002)
**Author:** [@Sourtoast](https://discuss.elastic.co/u/Sourtoast)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 11:23pm UTC](https://discuss.elastic.co/t/im-stuck-at-formatting-data-while-trying-to-send-xml-file-to-elasticsearch/278002 "2021-07-06T23:23:30Z")
I'm trying to add data from xml to Elasticsearch but I want only specific fields with its names changed. I'm using mutate filter to map xml fields to my own fields. My problem is with photos input { http\_poller { ur… --- ## [Mysql-slow multiline](https://discuss.elastic.co/t/mysql-slow-multiline/277757)
**Author:** [@bz\_Os](https://discuss.elastic.co/u/bz_Os)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 9:40pm UTC](https://discuss.elastic.co/t/mysql-slow-multiline/277757 "2021-07-06T21:40:34Z")
Hello, I am parsing the mysql-slow logs using the parser: input{ pipeline { address =\> input } file{ path =\> "/etc/logstash/logsamples/all.log" start\_position =\> "beginnin… --- ## [Elasticsearch HDFS Snapshot](https://discuss.elastic.co/t/elasticsearch-hdfs-snapshot/277990)
**Author:** [@john\_99](https://discuss.elastic.co/u/john_99)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-hdfs-snapshot/277990 "2021-07-06T20:59:33Z")
Hi, We are using ElasticSearch version 6.8 basic license. I am making a copy of all indices and some monitoring indices and write and copy of the snapshot into hdfs files. Is there a way to automate the snapshot to ru… --- ## [Query randomly fail](https://discuss.elastic.co/t/query-randomly-fail/277880)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 8:58pm UTC](https://discuss.elastic.co/t/query-randomly-fail/277880 "2021-07-06T20:58:51Z")
Hi, I have a website installed since month now, working perfectly. Nothing has changed, no deploy etc... But now, I test a specific query, sometime it work and sometimes it failed! It is completely random. So, I have … --- ## [Elasticsearch is unable to authenticate the credentials](https://discuss.elastic.co/t/elasticsearch-is-unable-to-authenticate-the-credentials/277981)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-is-unable-to-authenticate-the-credentials/277981 "2021-07-06T15:44:36Z")
I had enabled authentication on my ELK stack (single node) , every thing works as expected (role,users etc). however my elasticsearch logs have logged some errors such as \[2021-07-06T15:33:59,086\]\[INFO \]\[o.e.x.s.a.Authe… --- ## [Change the index from winglogbeat to metricbeat](https://discuss.elastic.co/t/change-the-index-from-winglogbeat-to-metricbeat/277988)
**Author:** [@Angelo\_Bryan](https://discuss.elastic.co/u/Angelo_Bryan)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 6:03pm UTC](https://discuss.elastic.co/t/change-the-index-from-winglogbeat-to-metricbeat/277988 "2021-07-06T18:03:47Z")
Hello elastic group, I have a question, I am trying to change the index from winglogbeat to metricbeat making the following configuration in the logstash (conf.d), but it has not worked for me, I would like to have your … --- ## [Data Validation in Logstash](https://discuss.elastic.co/t/data-validation-in-logstash/277922)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 4:43pm UTC](https://discuss.elastic.co/t/data-validation-in-logstash/277922 "2021-07-06T16:43:58Z")
Hi, I am trying data validation in logstash. Example : column 1 in CSV should only allow number (double data type). No other text should be allowed if any other string found then trigger mail. Similarly, need date va… --- ## [Bucket selector null pointer exception](https://discuss.elastic.co/t/bucket-selector-null-pointer-exception/277543)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 4:01pm UTC](https://discuss.elastic.co/t/bucket-selector-null-pointer-exception/277543 "2021-07-06T16:01:27Z")
Hey, I'm trying to get an overall avg vs grouped avg aggregation in DevTools: GET index1/\_search { "query": { "bool": { "filter": \[ { "exists": { "field": "my\_measurement" … --- ## [Capturing servername and appending/propogating it to all other lines of logfile](https://discuss.elastic.co/t/capturing-servername-and-appending-propogating-it-to-all-other-lines-of-logfile/277876)
**Author:** [@Nanelastic](https://discuss.elastic.co/u/Nanelastic)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 3:39pm UTC](https://discuss.elastic.co/t/capturing-servername-and-appending-propogating-it-to-all-other-lines-of-logfile/277876 "2021-07-06T15:39:18Z")
Hello Guys, I am very new to ELK stack. I am trying to parse below mentioned log using logstash config. I figured out the grok pattern for last 3 lines. I need help in capturing the server name mentioned in either line… --- ## [Ingest pipeline processors what constitutes a failure?](https://discuss.elastic.co/t/ingest-pipeline-processors-what-constitutes-a-failure/277980)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 3:30pm UTC](https://discuss.elastic.co/t/ingest-pipeline-processors-what-constitutes-a-failure/277980 "2021-07-06T15:30:50Z")
If i use an ingest pipeline with a processor of some kind say an enrich processor and i provide a valid enrich policy with valid fields to match and enrich. If no match is found i assume this would not constitute a failu… --- ## [Bucket sorting dates](https://discuss.elastic.co/t/bucket-sorting-dates/277971)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 2:41pm UTC](https://discuss.elastic.co/t/bucket-sorting-dates/277971 "2021-07-06T14:41:12Z")
I am using Elastic 7.11 and I was trying to implement bucket\_sort in a field type date and I couldn't, so I kind of workarrounded it haha, but I'm sure there is a more efficient way of doing it. This is the kind of docum… --- ## [Disk usage difference between data nodes](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798)
**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 2:40pm UTC](https://discuss.elastic.co/t/disk-usage-difference-between-data-nodes/275798 "2021-07-06T14:40:33Z")
Hello, we have a pretty big cluster (26 data nodes, almost 100TB), and I have a question about the disk usage distribution across data nodes. I know that Elasticsearch takes to consideration the equality between number… --- ## [Kibana pie chart show unique to non-unique](https://discuss.elastic.co/t/kibana-pie-chart-show-unique-to-non-unique/277825)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-show-unique-to-non-unique/277825 "2021-07-06T14:33:41Z")
Im doing something wrong, i want a pie chart to show for all the docs in the index the number of unique docs (based on a string) and non-unique(based on the same string) So if i had doc1 field: test doc2 field: test … --- ## [\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968)
**Author:** [@Phoybe](https://discuss.elastic.co/u/Phoybe)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 2:22pm UTC](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968 "2021-07-06T14:22:50Z")
Hi, I'm stuck in "Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..." My kibana.yml server.host: 0.0.0.0 server.name: "elk1" elasticsearch.hosts: \["https://loc… --- ## [Monitoring Logstash with Metricbeat](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat/277635)
**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 1:42pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat/277635 "2021-07-06T13:42:22Z")
Hello, I'm trying to monitor Logstash with Metricbeat. I already enabled Elasticsearch X-Pack with metricbeat. I followed instructions regarding Logstash monitoring with metricbeat. In "Stack monitoring", i can see m… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=890) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=892)