# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1009

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1010

---

## [What is the string id under the ApiKeyAuthenticationCredential .Net API referring to](https://discuss.elastic.co/t/what-is-the-string-id-under-the-apikeyauthenticationcredential-net-api-referring-to/298207)

<div class="topic-metadata">

**Author:** [@Raymond\_Lei](https://discuss.elastic.co/u/Raymond_Lei)\
**Replies:** 3\
**Last updated:** [March 18, 2022, 10:28am UTC](https://discuss.elastic.co/t/what-is-the-string-id-under-the-apikeyauthenticationcredential-net-api-referring-to/298207 "2022-03-18T10:28:28Z")

</div>

Hello, within the .Net API, one of the constructor for new ApiKeyAuthenticationCredentials wants me to supply string id and the string apikey for the authentication. I am wondering what is it looking for? I tried the d…

---

## [Elastic search with proximity search and score](https://discuss.elastic.co/t/elastic-search-with-proximity-search-and-score/299937)

<div class="topic-metadata">

**Author:** [@fizhhh1997](https://discuss.elastic.co/u/fizhhh1997)\
**Replies:** 1\
**Last updated:** [March 18, 2022, 9:01am UTC](https://discuss.elastic.co/t/elastic-search-with-proximity-search-and-score/299937 "2022-03-18T09:01:00Z")

</div>

Hello all, how can i use proximity search and relevant score to get data with high accurate, and difference between Elasticsearch and Solr

---

## [Elastic Cloud - Upgrade button not available](https://discuss.elastic.co/t/elastic-cloud-upgrade-button-not-available/299956)

<div class="topic-metadata">

**Author:** [@axi](https://discuss.elastic.co/u/axi)\
**Replies:** 3\
**Last updated:** [March 18, 2022, 8:40am UTC](https://discuss.elastic.co/t/elastic-cloud-upgrade-button-not-available/299956 "2022-03-18T08:40:51Z")

</div>

My deployment is version 6.6 and I want to upgrade to 6.8 first (before going to 7.x) but there is no upgrade button available. Support keep telling me I just have to upgrade to 6.8...

---

## [New JAVA API Documentation](https://discuss.elastic.co/t/new-java-api-documentation/299559)

<div class="topic-metadata">

**Author:** [@willypol](https://discuss.elastic.co/u/willypol)\
**Replies:** 2\
**Last updated:** [March 18, 2022, 8:33am UTC](https://discuss.elastic.co/t/new-java-api-documentation/299559 "2022-03-18T08:33:54Z")

</div>

Hello, first of all congratulations on the new version of Elastic. A month ago we were translating a java software that uses Elasticsearch. We switched to the new Java API (with very poor documentation) and it took a lot…

---

## [Index from restore larger than source index?](https://discuss.elastic.co/t/index-from-restore-larger-than-source-index/300012)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 0\
**Last updated:** [March 18, 2022, 8:18am UTC](https://discuss.elastic.co/t/index-from-restore-larger-than-source-index/300012 "2022-03-18T08:18:00Z")

</div>

Hi, so I have 2 Elasticsearch cluster (A and B). I create snapshot from cluster A and then restore it to cluster B. I use 1 index replica on cluster A and in cluster B I change my index replica to 2. The result is like b…

---

## [Restore elasticsearch snapshot to existing index](https://discuss.elastic.co/t/restore-elasticsearch-snapshot-to-existing-index/299185)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 3\
**Last updated:** [March 18, 2022, 8:11am UTC](https://discuss.elastic.co/t/restore-elasticsearch-snapshot-to-existing-index/299185 "2022-03-18T08:11:31Z")

</div>

So I want to migrate Elasticsearch data to new cluster and n my old cluster I create daily snapshot. I restore the snapshot to new cluster once, and the next day when I try to restore again I get an error because the ind…

---

## [Pagination within a terms aggregation](https://discuss.elastic.co/t/pagination-within-a-terms-aggregation/299996)

<div class="topic-metadata">

**Author:** [@qcoumes](https://discuss.elastic.co/u/qcoumes)\
**Replies:** 1\
**Last updated:** [March 18, 2022, 7:27am UTC](https://discuss.elastic.co/t/pagination-within-a-terms-aggregation/299996 "2022-03-18T07:27:53Z")

</div>

I have a nested field datas which is inside the also nested field documents. I'd like to retrieve the paginated list of concepts buckets (built using a terms aggregation). I managed to retrieve the list without any p…

---

## [Unable to update node\_modules in kibana(version 7.15.1) source code](https://discuss.elastic.co/t/unable-to-update-node-modules-in-kibana-version-7-15-1-source-code/297146)

<div class="topic-metadata">

**Author:** [@mridul.chandel](https://discuss.elastic.co/u/mridul.chandel)\
**Replies:** 8\
**Last updated:** [March 18, 2022, 7:02am UTC](https://discuss.elastic.co/t/unable-to-update-node-modules-in-kibana-version-7-15-1-source-code/297146 "2022-03-18T07:02:26Z")

</div>

I made some changes in the date picker provided by Elasticsearch EUI library inside kibana node\_modules folder. Specifically to these path :- node\_modules@elastic\\eui\\es\\components\\date\_picker\\super\_date\_picker\\relativ…

---

## [Create new co.elastic.clients.elasticsearch.ElasticsearchClient from RestClientBuilder in Java with elastic version 8.1.0](https://discuss.elastic.co/t/create-new-co-elastic-clients-elasticsearch-elasticsearchclient-from-restclientbuilder-in-java-with-elastic-version-8-1-0/300005)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 1\
**Last updated:** [March 18, 2022, 6:52am UTC](https://discuss.elastic.co/t/create-new-co-elastic-clients-elasticsearch-elasticsearchclient-from-restclientbuilder-in-java-with-elastic-version-8-1-0/300005 "2022-03-18T06:52:07Z")

</div>

Hi, I'm migrating from HLRC to \[Elasticsearch Java API Client \[8.0\]\] with Java. Unable to create instance of ElasticsearchClient.

---

## [Logstash not monitored by metricbeat](https://discuss.elastic.co/t/logstash-not-monitored-by-metricbeat/299914)

<div class="topic-metadata">

**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\
**Replies:** 2\
**Last updated:** [March 18, 2022, 6:36am UTC](https://discuss.elastic.co/t/logstash-not-monitored-by-metricbeat/299914 "2022-03-18T06:36:48Z")

</div>

Hello, Still learning the set up of elastic stack, I am now stuck with metricbeat failing to register my logstash node on Kibana. However I could successfully register and monitor Elasticsearch and Kibana using metricbe…

---

## [Logs appear in multi indexes](https://discuss.elastic.co/t/logs-appear-in-multi-indexes/300006)

<div class="topic-metadata">

**Author:** [@Mi\_Kmi](https://discuss.elastic.co/u/Mi_Kmi)\
**Replies:** 0\
**Last updated:** [March 18, 2022, 6:26am UTC](https://discuss.elastic.co/t/logs-appear-in-multi-indexes/300006 "2022-03-18T06:26:31Z")

</div>

Hi I am using two pipelines on different port to handle multi type logs port 5044 \> log A / index name "aaa" port 5045 \> log B / index name "bbb" And Filebeat on servers is sending log B to Logstash port 5045 on the …

---

## [Fuzziness in span query losing 1 edit distance](https://discuss.elastic.co/t/fuzziness-in-span-query-losing-1-edit-distance/299921)

<div class="topic-metadata">

**Author:** [@GoaKoala](https://discuss.elastic.co/u/GoaKoala)\
**Replies:** 1\
**Last updated:** [March 18, 2022, 4:14am UTC](https://discuss.elastic.co/t/fuzziness-in-span-query-losing-1-edit-distance/299921 "2022-03-18T04:14:25Z")

</div>

Hi, I am trying to do a fuzzy matching with phrase search. (This is already mentioned here : Combine Phrases search AND fuzzy matching and here : Elasticsearch Fuzzy Phrases - Stack Overflow) I managed to solve the iss…

---

## [Errors installing logstash-mixin-ecs\_compatibility\_support plugin](https://discuss.elastic.co/t/errors-installing-logstash-mixin-ecs-compatibility-support-plugin/299374)

<div class="topic-metadata">

**Author:** [@mikespharss](https://discuss.elastic.co/u/mikespharss)\
**Replies:** 4\
**Last updated:** [March 17, 2022, 7:28pm UTC](https://discuss.elastic.co/t/errors-installing-logstash-mixin-ecs-compatibility-support-plugin/299374 "2022-03-17T19:28:50Z")

</div>

I started having a weird problem where using logstash-plugin to install logstash-output-opensearch was leaving my plugin environment in a broken state. Logstash version: logstash 7.16.1 using bundled JDK version I sta…

---

## [Unable to connet to localhost:9200](https://discuss.elastic.co/t/unable-to-connet-to-localhost-9200/299945)

<div class="topic-metadata">

**Author:** [@shamir](https://discuss.elastic.co/u/shamir)\
**Replies:** 6\
**Last updated:** [March 17, 2022, 7:13pm UTC](https://discuss.elastic.co/t/unable-to-connet-to-localhost-9200/299945 "2022-03-17T19:13:33Z")

</div>

in terminal it shows Elasticsearch status as active and running when i try to run this command it returning empty

---

## [Kibana Vega-Lite plots do not resize as expected](https://discuss.elastic.co/t/kibana-vega-lite-plots-do-not-resize-as-expected/299940)

<div class="topic-metadata">

**Author:** [@M\_Chiorboli](https://discuss.elastic.co/u/M_Chiorboli)\
**Replies:** 4\
**Last updated:** [March 17, 2022, 6:58pm UTC](https://discuss.elastic.co/t/kibana-vega-lite-plots-do-not-resize-as-expected/299940 "2022-03-17T18:58:21Z")

</div>

Hello, I had to rewrite some visualisations in Kibana with Veg-Lite because they are based on nested fields. I set the automated resize in the script: "autosize": { "type": "fit", "contains": "padding", …

---

## [Logstash blocked when using Regex filter](https://discuss.elastic.co/t/logstash-blocked-when-using-regex-filter/299313)

<div class="topic-metadata">

**Author:** [@valm-dili13](https://discuss.elastic.co/u/valm-dili13)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 5:55pm UTC](https://discuss.elastic.co/t/logstash-blocked-when-using-regex-filter/299313 "2022-03-17T17:55:45Z")

</div>

Dear community, When I add a specific filter in my pipeline, few Kb of data are processed then everything is blocked. (No more output when debugging logstash). When I check my beats logs, it says that the remote port i…

---

## [Remove field after parsing json](https://discuss.elastic.co/t/remove-field-after-parsing-json/299973)

<div class="topic-metadata">

**Author:** [@raspi](https://discuss.elastic.co/u/raspi)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 5:27pm UTC](https://discuss.elastic.co/t/remove-field-after-parsing-json/299973 "2022-03-17T17:27:35Z")

</div>

Hello i need help please this is my logstash.conf \< filter { if "jaeger" in \[message\] { drop { } } mutate { gsub =\> \["message", '"message":', '"containerlogs":'\] remove\_tag =\> \[ "pfd", "middle", "fluentd", "bea…

---

## [Issue transforming data for Vega visualization](https://discuss.elastic.co/t/issue-transforming-data-for-vega-visualization/299669)

<div class="topic-metadata">

**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 5:22pm UTC](https://discuss.elastic.co/t/issue-transforming-data-for-vega-visualization/299669 "2022-03-17T17:22:46Z")

</div>

I have the following response: aggregations" : { "a" : {...}, "b" : {...}, "c" : {...}, "d" : { "value" : 5 }, "e" : { "value" : 6 }, "f" : { "value" : 7 } } d, e and f are sum\_bucket aggr…

---

## [Index data getting deleted automatically after some time,parsing oracle data from logstash to elastic](https://discuss.elastic.co/t/index-data-getting-deleted-automatically-after-some-time-parsing-oracle-data-from-logstash-to-elastic/299979)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 0\
**Last updated:** [March 17, 2022, 5:13pm UTC](https://discuss.elastic.co/t/index-data-getting-deleted-automatically-after-some-time-parsing-oracle-data-from-logstash-to-elastic/299979 "2022-03-17T17:13:50Z")

</div>

Hello All, I'm trying to get data from oracle db and parsing it through logstash pipeline and finally to elastic. while checking the data in discover in kibana ,observed that the data gets automaticaly deleted after fe…

---

## [Running a Match across Array and treating each row exclusively](https://discuss.elastic.co/t/running-a-match-across-array-and-treating-each-row-exclusively/299096)

<div class="topic-metadata">

**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\
**Replies:** 4\
**Last updated:** [March 17, 2022, 4:59pm UTC](https://discuss.elastic.co/t/running-a-match-across-array-and-treating-each-row-exclusively/299096 "2022-03-17T16:59:07Z")

</div>

Hi, I had several keys on an object (such as .name1, .name2) and was using dis\_max along with match to run independent and identical queries and return the one with the highest score. Now the data has changed to an Arra…

---

## [I do not receive the logs in Logstash (Heroku)](https://discuss.elastic.co/t/i-do-not-receive-the-logs-in-logstash-heroku/299895)

<div class="topic-metadata">

**Author:** [@Diego\_T](https://discuss.elastic.co/u/Diego_T)\
**Replies:** 5\
**Last updated:** [March 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/i-do-not-receive-the-logs-in-logstash-heroku/299895 "2022-03-17T16:21:27Z")

</div>

i have open the port 1514 (tcp) in my windows (localhost) i wanna see the logs of Heroku in the Elasticsearch remote (gcp) but I do not receive any log file .conf input { tcp { port =\> "1514" tags =\> \["h…

---

## [Filebeat : How to get multiline logs together (with pattern) in one block](https://discuss.elastic.co/t/filebeat-how-to-get-multiline-logs-together-with-pattern-in-one-block/299971)

<div class="topic-metadata">

**Author:** [@MLAYEH\_Ismail](https://discuss.elastic.co/u/MLAYEH_Ismail)\
**Replies:** 4\
**Last updated:** [March 17, 2022, 4:14pm UTC](https://discuss.elastic.co/t/filebeat-how-to-get-multiline-logs-together-with-pattern-in-one-block/299971 "2022-03-17T16:14:46Z")

</div>

Hi everyone, im working on extracting log by filebeat and processing it by ELK stack. every thing works exept that the logs are readed line per line and not by block with the specified pattern . thank you in advance. t…

---

## [Can't connect filebeat to elastic search](https://discuss.elastic.co/t/cant-connect-filebeat-to-elastic-search/299966)

<div class="topic-metadata">

**Author:** [@Mariem](https://discuss.elastic.co/u/Mariem)\
**Replies:** 1\
**Last updated:** [March 17, 2022, 3:51pm UTC](https://discuss.elastic.co/t/cant-connect-filebeat-to-elastic-search/299966 "2022-03-17T15:51:46Z")

</div>

this is my filebeat configuration file : when i execute filebeat setup -e : Can someone help me???

---

## [Network 3D maps](https://discuss.elastic.co/t/network-3d-maps/299965)

<div class="topic-metadata">

**Author:** [@labate](https://discuss.elastic.co/u/labate)\
**Replies:** 0\
**Last updated:** [March 17, 2022, 3:24pm UTC](https://discuss.elastic.co/t/network-3d-maps/299965 "2022-03-17T15:24:31Z")

</div>

Hello to all, I would like to know if it is possible or not to create a map of my network and interact with my data (and not with the world map already present). For example I will create my network map automatically o…

---

## [New tenant created with saved objects](https://discuss.elastic.co/t/new-tenant-created-with-saved-objects/299963)

<div class="topic-metadata">

**Author:** [@NadyLeez123](https://discuss.elastic.co/u/NadyLeez123)\
**Replies:** 1\
**Last updated:** [March 17, 2022, 3:24pm UTC](https://discuss.elastic.co/t/new-tenant-created-with-saved-objects/299963 "2022-03-17T15:24:18Z")

</div>

Hi everyone I'm experiencing something weird with elastic 7.6 I have a tenant in which I created a dasboard. That dashboard named "iis-board" bears many visualizations and an index pattern named log-iis\*. It is not the…

---

## [Understand async and wait\_for mode](https://discuss.elastic.co/t/understand-async-and-wait-for-mode/299939)

<div class="topic-metadata">

**Author:** [@Remy\_Letient](https://discuss.elastic.co/u/Remy_Letient)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 3:14pm UTC](https://discuss.elastic.co/t/understand-async-and-wait-for-mode/299939 "2022-03-17T15:14:33Z")

</div>

Hi, A question about the async mode (when I don't specify the option 'refresh=wait\_for') and when I specify. Qeustion: in the same index I have 2 documents: 'A' and 'B'. If I update the document 'A' with no refresh op…

---

## [Adding a field to \[ctx.payload\]](https://discuss.elastic.co/t/adding-a-field-to-ctx-payload/299943)

<div class="topic-metadata">

**Author:** [@stobbe99](https://discuss.elastic.co/u/stobbe99)\
**Replies:** 0\
**Last updated:** [March 17, 2022, 11:41am UTC](https://discuss.elastic.co/t/adding-a-field-to-ctx-payload/299943 "2022-03-17T11:41:42Z")

</div>

Hello, I have create a watcher that grab's data from a REST interface removes Headers and Status\_code. My question : can I add a additional field to the payload? As I understand the payload is one complete field so bas…

---

## [Cannot disable security in 8.1](https://discuss.elastic.co/t/cannot-disable-security-in-8-1/299857)

<div class="topic-metadata">

**Author:** [@fulkon](https://discuss.elastic.co/u/fulkon)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 2:37pm UTC](https://discuss.elastic.co/t/cannot-disable-security-in-8-1/299857 "2022-03-17T14:37:47Z")

</div>

I need elasticsearch without any security. In 7.17 it was enough to set xpack.security.enabled: false, but in 8.1.0 got error on startup: org.elasticsearch.ElasticsearchSecurityException: invalid configuration for xpack…

---

## [A few questions around the can\_match feature](https://discuss.elastic.co/t/a-few-questions-around-the-can-match-feature/297713)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 2:13pm UTC](https://discuss.elastic.co/t/a-few-questions-around-the-can-match-feature/297713 "2022-03-17T14:13:32Z")

</div>

Hi, @jpountz and @ruflin. I working on a migration path to migrate our on-prem environment from xxxbeat-\* type indices to datastreams based on the elastic Agent. This will require updating/recreating all sorts of objects…

---

## [How to enable security on an existing 8.1 multi nodes docker cluster](https://discuss.elastic.co/t/how-to-enable-security-on-an-existing-8-1-multi-nodes-docker-cluster/299268)

<div class="topic-metadata">

**Author:** [@jean.bissonnette](https://discuss.elastic.co/u/jean.bissonnette)\
**Replies:** 5\
**Last updated:** [March 17, 2022, 2:07pm UTC](https://discuss.elastic.co/t/how-to-enable-security-on-an-existing-8-1-multi-nodes-docker-cluster/299268 "2022-03-17T14:07:33Z")

</div>

I have an existing 5 nodes podman cluster. 4 nodes are on one VM, another node is on another VM. Security is not enabled (xpack.security.enabled: false). I tried to setup security by calling: bin/Elasticsearch-setup-p…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1008)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1010)
