# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1249 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1250 --- ## [Logstash 7.9.1-1 installation errors - service not found](https://discuss.elastic.co/t/logstash-7-9-1-1-installation-errors-service-not-found/247644)
**Author:** [@finbarr996](https://discuss.elastic.co/u/finbarr996)\ **Replies:** 7\ **Last updated:** [September 6, 2020, 12:40pm UTC](https://discuss.elastic.co/t/logstash-7-9-1-1-installation-errors-service-not-found/247644 "2020-09-06T12:40:14Z")
Hi there, Just tried re-installing logstash having removed it on an ubuntu server and had the following errors: Get:1 https://artifacts.elastic.co/packages/7.x/apt stable/main amd64 logstash all 1:7.9.1-1 \[159 MB\] Fetc… --- ## [Separate index for every aggs bucket](https://discuss.elastic.co/t/separate-index-for-every-aggs-bucket/247661)
**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\ **Replies:** 4\ **Last updated:** [September 6, 2020, 10:45am UTC](https://discuss.elastic.co/t/separate-index-for-every-aggs-bucket/247661 "2020-09-06T10:45:47Z")
Hi, I want to create a separate index for every aggs buckets. here is my watcher. I know I have to use "foreach" for my problem but can't figure out what value should I give it. thanks. --- ## [DataType Changes after rollover of Index](https://discuss.elastic.co/t/datatype-changes-after-rollover-of-index/247619)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 9\ **Last updated:** [September 6, 2020, 9:19am UTC](https://discuss.elastic.co/t/datatype-changes-after-rollover-of-index/247619 "2020-09-06T09:19:56Z")
Hi Team I am using Elasticsearch Version 7.5.2. I have one index with grows in size and documents. Once it has reached 1000 documents , we are performing rollover. Command : curl -XPOST '10.10.10.1:9200/myevents/\_rol… --- ## [Cannot Enroll Elastic Agent to Fleet hosted on Elastic Cloud Enterprise](https://discuss.elastic.co/t/cannot-enroll-elastic-agent-to-fleet-hosted-on-elastic-cloud-enterprise/246962)
**Author:** [@hallaoui](https://discuss.elastic.co/u/hallaoui)\ **Replies:** 13\ **Last updated:** [September 6, 2020, 7:57am UTC](https://discuss.elastic.co/t/cannot-enroll-elastic-agent-to-fleet-hosted-on-elastic-cloud-enterprise/246962 "2020-09-06T07:57:56Z")
Hi All, I am trying to test Elastic Agent on my PC Windows laptop but when I run command to enroll it to Fleet I got below message error. .\\elastic-agent enroll https://ef13ea6b551540938cccfb4c482b50a0.10.30.30.204.ip.… --- ## [Faster to index raw data or load a static data dump](https://discuss.elastic.co/t/faster-to-index-raw-data-or-load-a-static-data-dump/247581)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 8\ **Last updated:** [September 6, 2020, 7:02am UTC](https://discuss.elastic.co/t/faster-to-index-raw-data-or-load-a-static-data-dump/247581 "2020-09-06T07:02:51Z")
I want to leverage ES for analysis of static data. I was using a subset and it worked as planned. I would be able to query, build graphs in kibana etc. It is quite useful. That being said, since the data is static, S… --- ## [How to add first row first column value as a field in to other rows' documents of a csv file in logstash filters?](https://discuss.elastic.co/t/how-to-add-first-row-first-column-value-as-a-field-in-to-other-rows-documents-of-a-csv-file-in-logstash-filters/243806)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 40\ **Last updated:** [September 6, 2020, 4:25am UTC](https://discuss.elastic.co/t/how-to-add-first-row-first-column-value-as-a-field-in-to-other-rows-documents-of-a-csv-file-in-logstash-filters/243806 "2020-09-06T04:25:00Z")
I was trying out logstash pipeline config file, in order to add the first row first column value to other documents as a new field. But I got no where! My csv file is, Suite/Test/Step Name,Browser,Description,Tag,Start… --- ## [Best way to manage daily index](https://discuss.elastic.co/t/best-way-to-manage-daily-index/247647)
**Author:** [@smalljimmy](https://discuss.elastic.co/u/smalljimmy)\ **Replies:** 1\ **Last updated:** [September 6, 2020, 4:05am UTC](https://discuss.elastic.co/t/best-way-to-manage-daily-index/247647 "2020-09-06T04:05:27Z")
Hi guys We have a requirement as following: Ingest safety item list into ES daily. The source data is written to S3 to folder with path bucket/{date}/part\*.json from a batch job and are the continuously ingested to ES… --- ## [Kibana 7.6 is failing with http 413 when importing saved object file 50MB](https://discuss.elastic.co/t/kibana-7-6-is-failing-with-http-413-when-importing-saved-object-file-50mb/247278)
**Author:** [@Rhonda\_Gregory](https://discuss.elastic.co/u/Rhonda_Gregory)\ **Replies:** 3\ **Last updated:** [September 6, 2020, 1:13am UTC](https://discuss.elastic.co/t/kibana-7-6-is-failing-with-http-413-when-importing-saved-object-file-50mb/247278 "2020-09-06T01:13:11Z")
We have elastic 7.6 and kibana 7.6 both on an EC2 instance and accessed via localhost. No components in between. I'm trying to import 50MB saved object file exported from another kibana instance . The import fails with… --- ## [System requirements for Elasticsearch?](https://discuss.elastic.co/t/system-requirements-for-elasticsearch/247608)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 3\ **Last updated:** [September 5, 2020, 6:49pm UTC](https://discuss.elastic.co/t/system-requirements-for-elasticsearch/247608 "2020-09-05T18:49:53Z")
We are planning to use ELK stack for logging. If we are installing Elasticsearch in a server, then how do I decide how much RAM and disk space will be required as Elasticsearch stores and indexes the logs. Answers and … --- ## [Problem with Mapping Templates](https://discuss.elastic.co/t/problem-with-mapping-templates/247370)
**Author:** [@ashu1](https://discuss.elastic.co/u/ashu1)\ **Replies:** 2\ **Last updated:** [September 5, 2020, 4:08pm UTC](https://discuss.elastic.co/t/problem-with-mapping-templates/247370 "2020-09-05T16:08:37Z")
I created a field mapping for keyword only field and ingested the data to ES,but I could still see field.keyword in my index. In my case field name is AB.Field1 Is it due to .(dot) in my field Name or any other issue? … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 6\ **Last updated:** [September 5, 2020, 3:48pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/247526 "2020-09-05T15:48:27Z")
Hey, I just install elasticsearch and kibana version 7.8.1. I am able to access elasticsearch through IP but when I try to access kibana through IP it says kibana server not ready yet. can someone help here below is el… --- ## [Not able to retrieve nested document in native java expert\_scripts for nested function\_score query](https://discuss.elastic.co/t/not-able-to-retrieve-nested-document-in-native-java-expert-scripts-for-nested-function-score-query/247621)
**Author:** [@Amity79](https://discuss.elastic.co/u/Amity79)\ **Replies:** 0\ **Last updated:** [September 5, 2020, 8:37am UTC](https://discuss.elastic.co/t/not-able-to-retrieve-nested-document-in-native-java-expert-scripts-for-nested-function-score-query/247621 "2020-09-05T08:37:54Z")
Hey! I am using 7.8.1 version of elasticsearch and using script-engine to score the document. When i use function\_score query, i am able to read the documet in ScriptEngine. Once I do nested function\_score query then i … --- ## [Java Rest client builder method throwing error for using HttpClientConfigCallback() method](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558)
**Author:** [@soumrock123](https://discuss.elastic.co/u/soumrock123)\ **Replies:** 9\ **Last updated:** [September 5, 2020, 1:11pm UTC](https://discuss.elastic.co/t/java-rest-client-builder-method-throwing-error-for-using-httpclientconfigcallback-method/247558 "2020-09-05T13:11:14Z")
I am trying to set up an Elasticsearch high level rest client to connect with an already set up ES cluster via Http Host setup and regular credential authentication. I am setting this up to ingest data from my local syst… --- ## [Jdbc, for getting mssql to Logstash not working :-(](https://discuss.elastic.co/t/jdbc-for-getting-mssql-to-logstash-not-working/247627)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 4\ **Last updated:** [September 5, 2020, 12:45pm UTC](https://discuss.elastic.co/t/jdbc-for-getting-mssql-to-logstash-not-working/247627 "2020-09-05T12:45:07Z")
Hello Unfortunately, I can not able to input mssql data base to logstash... This is my configuration file: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/jdbc\_driver/sqljdbc\_8.4/enu/mssql-jdbc-8.4.1.jr… --- ## [Dashboards for zookeeper, elasticsearch](https://discuss.elastic.co/t/dashboards-for-zookeeper-elasticsearch/247565)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 5\ **Last updated:** [September 5, 2020, 10:57am UTC](https://discuss.elastic.co/t/dashboards-for-zookeeper-elasticsearch/247565 "2020-09-05T10:57:26Z")
Hi, I am monitoring elasticsearch and zookeeper using metricbeat. But I didnt find the dashboards are coming along with metricbeat. May I know if I can populate/import the dashboards from somewhere? --- ## [Events Emitted more then Events Received](https://discuss.elastic.co/t/events-emitted-more-then-events-received/247479)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 1\ **Last updated:** [September 5, 2020, 9:02am UTC](https://discuss.elastic.co/t/events-emitted-more-then-events-received/247479 "2020-09-05T09:02:15Z")
HI , suddenly I started to see backlog behavior and noticed that Events Emitted is 76M but Events Received are 61M , the average rates are different also , ## Events Emitted Rate (/s) --\> 1000 ## Events Received Rat… --- ## [Pipeline/output.go:121 Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/246321)
**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\ **Replies:** 1\ **Last updated:** [September 5, 2020, 5:46am UTC](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/246321 "2020-09-05T05:46:00Z")
hi, I have my filebeat agent (7.4) is still running but it stop to fill index. In my log, I see the message : pipeline/output.go:121 Failed to publish events: temporary bulk send failure I try to change the bulk\_max… --- ## [How to disable "Open in new tab" "open in new window" in Kibana](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 4\ **Last updated:** [September 5, 2020, 1:57am UTC](https://discuss.elastic.co/t/how-to-disable-open-in-new-tab-open-in-new-window-in-kibana/244186 "2020-09-05T01:57:32Z")
How do I disable open in new tab or new window from a Kibana Dashboard report that has "URL TEMPLATE" links. --- ## [How do I decide or evaluate the system/memory requirements for Logstash](https://discuss.elastic.co/t/how-do-i-decide-or-evaluate-the-system-memory-requirements-for-logstash/247607)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 11:34pm UTC](https://discuss.elastic.co/t/how-do-i-decide-or-evaluate-the-system-memory-requirements-for-logstash/247607 "2020-09-04T23:34:32Z")
If I want to use logstash to collect logs in from server how to decide how much memory and disk space will be required for it? If you have any helpful links that are also welcome. --- ## [Is it necessary to use filebeat or logstash forwarder in ELK stack?](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606)
**Author:** [@Ashish1101](https://discuss.elastic.co/u/Ashish1101)\ **Replies:** 4\ **Last updated:** [September 4, 2020, 11:22pm UTC](https://discuss.elastic.co/t/is-it-necessary-to-use-filebeat-or-logstash-forwarder-in-elk-stack/247606 "2020-09-04T23:22:28Z")
Is it necessary to use filebeat in ELK stack for collecting logs like installing filebeat on all the servers from where we need to collect logs and installing Logstash, ES and Kibana in a single separate server. Or can … --- ## [Json Logstash](https://discuss.elastic.co/t/json-logstash/247602)
**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 10:23pm UTC](https://discuss.elastic.co/t/json-logstash/247602 "2020-09-04T22:23:56Z")
Hi guys, I'm trying to add a json file to my ELK and I can't get it in any way, they could help me, I'm posting my confs. Thank you! input { file { path =\> "/tmp/teste/teste.json" start\_position =\> "beginning" sinc… --- ## [Parsing Nested JSON inside JSON getting NilClass](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593)
**Author:** [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)\ **Replies:** 3\ **Last updated:** [September 4, 2020, 10:20pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593 "2020-09-04T22:20:09Z")
\[ERROR\] 2020-09-04 21:58:24.155 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined method 'each' for nil:NilClass \[ERROR\] 2020-09-04 21:58:24.155 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined method… --- ## [How to update Lucene version of an huge indices?](https://discuss.elastic.co/t/how-to-update-lucene-version-of-an-huge-indices/247460)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 5\ **Last updated:** [September 4, 2020, 8:44pm UTC](https://discuss.elastic.co/t/how-to-update-lucene-version-of-an-huge-indices/247460 "2020-09-04T20:44:19Z")
Hello Geeks, I have 10 indices of 2 TB size each on ES 7.7 version. Lucene version of those indices is around 7.x. I want to update Lucene version of these indices to latest version that is 8.5? I am aware of following… --- ## [Logstash 7.8.1 Beats Input Plugin does not reload TLS certificate on change](https://discuss.elastic.co/t/logstash-7-8-1-beats-input-plugin-does-not-reload-tls-certificate-on-change/247578)
**Author:** [@Sunil\_Chadha](https://discuss.elastic.co/u/Sunil_Chadha)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 5:15pm UTC](https://discuss.elastic.co/t/logstash-7-8-1-beats-input-plugin-does-not-reload-tls-certificate-on-change/247578 "2020-09-04T17:15:38Z")
Hi Elastic Experts, I recently upgraded from Logstash 6.8.7 to Logstash 7.8.1, and notice the TLS Certificate on change is not reloaded by Beats Input. I need Logstash Beats Input to reload the renewed certificate, whe… --- ## [Elasticsearch not able to see all the indices](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-all-the-indices/247590)
**Author:** [@anantvir](https://discuss.elastic.co/u/anantvir)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-all-the-indices/247590 "2020-09-04T19:39:30Z")
I am using an index file which looks like '9L9\_imsWTYO3-1p9y0MtKg' from some one else's elastic index and trying to put the file in 'elasticsearch\\data\\nodes\\0\\indices'. But my elasticsearch cannot read that particular i… --- ## [Elasticsearch cluster in Yellow state and 1 Unassigned Shard](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 26\ **Last updated:** [September 4, 2020, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-in-yellow-state-and-1-unassigned-shard/247290 "2020-09-04T19:00:13Z")
Hi All, I am running ELK 7.6.2 stack. Recently the cluster state went "Yellow" and it started showing one Unassigned Shard. Please see below: { "cluster\_name" : "elkcluster-prod", "status" : "yellow", "timed\_ou… --- ## [Memory issues and Query Limitations](https://discuss.elastic.co/t/memory-issues-and-query-limitations/247451)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 6:15pm UTC](https://discuss.elastic.co/t/memory-issues-and-query-limitations/247451 "2020-09-04T18:15:00Z")
Optimizing my system Step by Step, starting from 1 master-slave node. I noticed 2 problems I was having. 1) Queries would start to time out due to the size of my cluster and 2) With Ingestion, it seems that shards woul… --- ## [Kibana -\> Stack Management -\> Index Patterns -\> filebeat-\* does not load](https://discuss.elastic.co/t/kibana-stack-management-index-patterns-filebeat-does-not-load/247427)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-stack-management-index-patterns-filebeat-does-not-load/247427 "2020-09-04T17:01:13Z")
I have a weird one. When I try to load the settings page for the filebeat-\* index pattern, no settings appear. All I see is the Kibana lefthand menu and header. If I load the metricbeat-\* index pattern settings, I see… --- ## [Logstash intermittently fails to start using jdbc-static filter](https://discuss.elastic.co/t/logstash-intermittently-fails-to-start-using-jdbc-static-filter/247575)
**Author:** [@Paal\_Aaserud](https://discuss.elastic.co/u/Paal_Aaserud)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 4:08pm UTC](https://discuss.elastic.co/t/logstash-intermittently-fails-to-start-using-jdbc-static-filter/247575 "2020-09-04T16:08:11Z")
Environment: Red Hat Enterprise Linux release 8.2 (Ootpa) Logstash 7.9.0 I have configured logstash 7.9 with a multiple pipeline using the jdbc\_static filter to fill two local db's for enrichment. Some times starting … --- ## [Parser exception when use "include\_upper":true in date range query](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428)
**Author:** [@silvina](https://discuss.elastic.co/u/silvina)\ **Replies:** 4\ **Last updated:** [September 4, 2020, 3:39pm UTC](https://discuss.elastic.co/t/parser-exception-when-use-include-upper-true-in-date-range-query/247428 "2020-09-04T15:39:14Z")
Hi, I get parse\_exception when I try to do this query: { "from":0, "size":999, "query":{ "bool":{ "filter":\[ { "r… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1248) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1250)