# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1019 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1020 --- ## [Best way to setup latest version of ES & Kibana using Docker?](https://discuss.elastic.co/t/best-way-to-setup-latest-version-of-es-kibana-using-docker/299334)
**Author:** [@Hazem\_Alabiad](https://discuss.elastic.co/u/Hazem_Alabiad)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 12:41pm UTC](https://discuss.elastic.co/t/best-way-to-setup-latest-version-of-es-kibana-using-docker/299334 "2022-03-10T12:41:26Z")
What is the best way to install ES & Kibana v8.1.0 using Docker? I tried many tutorials but, seems that there are many security constraints that make the process trickier e.g. password, enrollment\_token .... etc. And f… --- ## [Note in kafka output](https://discuss.elastic.co/t/note-in-kafka-output/299336)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 1:03pm UTC](https://discuss.elastic.co/t/note-in-kafka-output/299336 "2022-03-10T13:03:01Z")
Hello. The doc notes record in kafka topic will be deleted immediately . it’s going to be immediately discarded since the timestamp value is before the last 7 days. However, kafka is deleting the segment according… --- ## [Elastic Anomaly Detection not showing some partition fields in single metric viewer](https://discuss.elastic.co/t/elastic-anomaly-detection-not-showing-some-partition-fields-in-single-metric-viewer/299329)
**Author:** [@Arpit\_Karwasara](https://discuss.elastic.co/u/Arpit_Karwasara)\ **Replies:** 1\ **Last updated:** [March 10, 2022, 1:00pm UTC](https://discuss.elastic.co/t/elastic-anomaly-detection-not-showing-some-partition-fields-in-single-metric-viewer/299329 "2022-03-10T13:00:45Z")
We have created an anomaly detection job using elastic machine learning. We created the job using detector on count (partition\_field) and we have around 3000 partitions. however some partition fields are not visible in … --- ## [How to do wildcard query search for "scenario-d3". I get no hits when '-' is added in my query. Any help is appreciated](https://discuss.elastic.co/t/how-to-do-wildcard-query-search-for-scenario-d3-i-get-no-hits-when-is-added-in-my-query-any-help-is-appreciated/299218)
**Author:** [@soumyas](https://discuss.elastic.co/u/soumyas)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 12:59pm UTC](https://discuss.elastic.co/t/how-to-do-wildcard-query-search-for-scenario-d3-i-get-no-hits-when-is-added-in-my-query-any-help-is-appreciated/299218 "2022-03-09T12:59:45Z")
{ "bool": { "filter": \[ { "wildcard": { "test.value": { "wildcard": "scenario-", "boost": 1 } } } \], Can you please help dadoonet --- ## [How to rename field name in Elasticsearch with Time efficient?](https://discuss.elastic.co/t/how-to-rename-field-name-in-elasticsearch-with-time-efficient/299179)
**Author:** [@Haridoss\_M](https://discuss.elastic.co/u/Haridoss_M)\ **Replies:** 7\ **Last updated:** [March 10, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-rename-field-name-in-elasticsearch-with-time-efficient/299179 "2022-03-10T12:31:21Z")
I have been using the following query to rename fieldName. POST http://localhost:9200/INDEX\_NAME/\_update\_by\_query { "query": { "exists": { "field": "NEW\_FIELD\_NAME" } }, "script" : { "inline"… --- ## [Variable-value is displaying as an array for nested field in kibana](https://discuss.elastic.co/t/variable-value-is-displaying-as-an-array-for-nested-field-in-kibana/298256)
**Author:** [@Onkel\_Bob](https://discuss.elastic.co/u/Onkel_Bob)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 12:28pm UTC](https://discuss.elastic.co/t/variable-value-is-displaying-as-an-array-for-nested-field-in-kibana/298256 "2022-03-10T12:28:04Z")
kibana 7.17.0 Ubuntu 20.04 The json looks like "attempt": \[ { "responsecode": 250, "responsendr": "2.0.0", "transportid": "relay", "duration": 0.50850701, "jobid": ""… --- ## [From Elasticsearch aggregations to Kibana dashboard](https://discuss.elastic.co/t/from-elasticsearch-aggregations-to-kibana-dashboard/299241)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 1\ **Last updated:** [March 10, 2022, 12:25pm UTC](https://discuss.elastic.co/t/from-elasticsearch-aggregations-to-kibana-dashboard/299241 "2022-03-10T12:25:38Z")
Hi, IN A FEW WORDS: I would like to display on a Kibana dashboard some duration calculated from my logs with the help of Elasticsearch aggregation. PRECISELY: I have some logs like this (simplified): timestamp = 10,… --- ## [Heartbeat mappings missing](https://discuss.elastic.co/t/heartbeat-mappings-missing/299220)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 12:16pm UTC](https://discuss.elastic.co/t/heartbeat-mappings-missing/299220 "2022-03-10T12:16:57Z")
Hello, I'm using ELK 7.17.0 with Heartbeat 7.17 on Linux. Before starting Heartbeat, I ran the setup command to load index template for Heartbeat and tested the configuration successfully. After starting the Heartbeat … --- ## [Synthetic monitor data to specific indices](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 6\ **Last updated:** [March 10, 2022, 11:37am UTC](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055 "2022-03-10T11:37:38Z")
Hi, Is it possible to redirect data of synthetic monitoring agent to a specific index? elk 8 thanks --- ## [Alert results are showing incorrect](https://discuss.elastic.co/t/alert-results-are-showing-incorrect/298647)
**Author:** [@vishal\_bisa](https://discuss.elastic.co/u/vishal_bisa)\ **Replies:** 5\ **Last updated:** [March 10, 2022, 11:03am UTC](https://discuss.elastic.co/t/alert-results-are-showing-incorrect/298647 "2022-03-10T11:03:38Z")
Hi Team, I have created a watcher to detect for failed status in a particular index, attached the screenshot for reference. the watcher seems to be working fine, but when i have observed care fully the results are quit… --- ## [Buckler plugin - TLS connection](https://discuss.elastic.co/t/buckler-plugin-tls-connection/299325)
**Author:** [@MicroB](https://discuss.elastic.co/u/MicroB)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 10:53am UTC](https://discuss.elastic.co/t/buckler-plugin-tls-connection/299325 "2022-03-10T10:53:50Z")
Hi, I would like install Buckler plugin to have TLS connection between Elasticsearch and Bitbucket server. On Atlassian website (Install and configure a remote Elasticsearch server | Bitbucket Data Center and Server 7.… --- ## [Update \_id field](https://discuss.elastic.co/t/update-id-field/299320)
**Author:** [@gunjankum](https://discuss.elastic.co/u/gunjankum)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 10:45am UTC](https://discuss.elastic.co/t/update-id-field/299320 "2022-03-10T10:45:11Z")
Can we update \_id field of a doc. POST /test\_region/\_doc/01 { "id":"222", "userName":"Kumar", "region":"DelhiNew" } Doc value :slight\_smile: { "\_index" : "test\_region", "\_type" : "\_doc", "\_id" : "01", "\_score… --- ## [Date histogram aggregation over duration from startDate to endDate](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 12\ **Last updated:** [March 10, 2022, 10:29am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944 "2022-03-10T10:29:34Z")
Hi, I m trying to create an elastic query that should return all fields in each bucket using date histogram builder. I have an index that has thresholdValue with a start date and end date of 2/3 months period. Now I wan… --- ## [Using port 443 to access kibanan (solution)](https://discuss.elastic.co/t/using-port-443-to-access-kibanan-solution/299317)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 10:11am UTC](https://discuss.elastic.co/t/using-port-443-to-access-kibanan-solution/299317 "2022-03-10T10:11:53Z")
Continuing the discussion from How to use port 443 to access Kibana. legacy-multitenancy error: sorry for the delay in my answer. solution setcap 'CAP\_NET\_BIND\_SERVICE=+eip' /usr/share/kibana/node/bin/node then ch… --- ## [Kibana error after upgrade to version 8.0 from 7.17.0 \[No validation schema has been defined for \[xpack.canvas\]](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-from-7-17-0-no-validation-schema-has-been-defined-for-xpack-canvas/298352)
**Author:** [@sumitpramanik](https://discuss.elastic.co/u/sumitpramanik)\ **Replies:** 5\ **Last updated:** [March 10, 2022, 9:37am UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-from-7-17-0-no-validation-schema-has-been-defined-for-xpack-canvas/298352 "2022-03-10T09:37:07Z")
Hi, I have updated my elasticstack from version 7.17 to 8.0 recenly. All of my 3 Elasticsearch nodes and 2 logstash nodes are working fine. But whenever I am trying to upgrade to Kibana version 8.0 it is thowing below e… --- ## [Elasticsearch cluster issue](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 8\ **Last updated:** [March 10, 2022, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882 "2022-03-10T09:20:31Z")
I had one node. I didnt delete data in first node. Then I deleted data from second and third nodes, try to add to first node cluster. But it created two clusters. One with first node alone Another with second and third… --- ## [Unable to filter on data\_stream.namespace via Log Stream in Dashboard](https://discuss.elastic.co/t/unable-to-filter-on-data-stream-namespace-via-log-stream-in-dashboard/298736)
**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 9:11am UTC](https://discuss.elastic.co/t/unable-to-filter-on-data-stream-namespace-via-log-stream-in-dashboard/298736 "2022-03-10T09:11:49Z")
When selecting Log Stream when creating a Dashboard there are no available data stream or namespace fields to filter on only event.dataset and we'd rather not have to use unique datasets (due to the additional indicies t… --- ## [Default IndicesOptions in SearchRequest and disable specific deprecation warnings](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242)
**Author:** [@joschi](https://discuss.elastic.co/u/joschi)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 8:23am UTC](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242 "2022-03-10T08:23:45Z")
Hi folks, this is a follow-up to the automatically closed topic at Disable specific deprecation warnings. We've updated to Elasticsearch 7.16.3 on the servers and for our clients now but still get this deprecation mess… --- ## [Ruby vs translate plugin performance](https://discuss.elastic.co/t/ruby-vs-translate-plugin-performance/299305)
**Author:** [@skhadraoui](https://discuss.elastic.co/u/skhadraoui)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 8:21am UTC](https://discuss.elastic.co/t/ruby-vs-translate-plugin-performance/299305 "2022-03-10T08:21:22Z")
Hi folks, does anyone have experience regarding the performance of translate/plugins vs. Ruby scripts (https://www.elastic.co/guide/en/logstash/current/plugins-filters-ruby.html ) and can share some insights on that. I … --- ## [Curl ssl error from Logstash Docker](https://discuss.elastic.co/t/curl-ssl-error-from-logstash-docker/299301)
**Author:** [@paspao](https://discuss.elastic.co/u/paspao)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 7:59am UTC](https://discuss.elastic.co/t/curl-ssl-error-from-logstash-docker/299301 "2022-03-10T07:59:26Z")
Hello, I am doing test with official ELK Docker images. I have a cluster setup with Docker compose working I start a Logstash Docker then enter in it's shell to test if it can connect to cluster so I run a : curl -k … --- ## ["\[ignore\_throttled\] parameter is deprecated because frozen indices have been deprecated](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144)
**Author:** [@Archana\_Punia](https://discuss.elastic.co/u/Archana_Punia)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 7:53am UTC](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144 "2022-03-10T07:53:55Z")
Continuing the discussion from Ignore\_throttled parameter is deprecated: Hi, I upgrade my ES and Kibana version to 7.16.3 from 7.15.0 and post upgrading, this warning is showing on my kibana continuously. Can you let m… --- ## [ILM action failed "check-rollover-ready,Moving to ERROR step"?](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 7:50am UTC](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288 "2022-03-10T07:50:33Z")
I found that my es cluster is always reporting an error, he said that the ILM work failed, according to the prompt "check-rollover-ready", I didn't understand what it needs to identify, and the target index is the system… --- ## [Issue with allocation filtering on snapshot restore](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 10\ **Last updated:** [March 10, 2022, 7:27am UTC](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032 "2022-03-10T07:27:59Z")
Hi, I have just encountered a strange issue when attempting a test restore of my production Elasticsearch cluster to a test server. It appears I have several indices that have somehow ended up with a node level routing … --- ## [ElasticSearch : Failure Sink always running](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293)
**Author:** [@Adesh\_Agarwal](https://discuss.elastic.co/u/Adesh_Agarwal)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293 "2022-03-10T07:22:17Z")
The logs are always being written to both Elastic Search and Local Log Files (when used as a Failure Sink) . This should not be the case. Local Log Files should be created only when the application fails to write logs to… --- ## [Es readtimeout occurs](https://discuss.elastic.co/t/es-readtimeout-occurs/299085)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 12\ **Last updated:** [March 10, 2022, 3:18am UTC](https://discuss.elastic.co/t/es-readtimeout-occurs/299085 "2022-03-10T03:18:00Z")
At 5:11, search readtimeout occurred a lot. When we execute batch execution, if the primary shard is indexed, we are increasing the replica shard at that time, But at that time, the search engine creates replica … --- ## [Bitnami Logstash Image 7.16.3 Reported by Azure Defender Still Affected by CVE-2021-44832](https://discuss.elastic.co/t/bitnami-logstash-image-7-16-3-reported-by-azure-defender-still-affected-by-cve-2021-44832/299295)
**Author:** [@chferng](https://discuss.elastic.co/u/chferng)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 5:51am UTC](https://discuss.elastic.co/t/bitnami-logstash-image-7-16-3-reported-by-azure-defender-still-affected-by-cve-2021-44832/299295 "2022-03-10T05:51:16Z")
We have deployed the Bitnami Logstash image based on Logstash 7.16.3 in our environment on Azure AKS, as a remediation to the CVE-2021-44832 log4j vulnerability. After redeploying Logstash, we noticed the Azure Defender … --- ## [Kibana - Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159)
**Author:** [@elasticScrub](https://discuss.elastic.co/u/elasticScrub)\ **Replies:** 6\ **Last updated:** [March 10, 2022, 5:01am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159 "2022-03-10T05:01:55Z")
When starting Kibana, I'm getting the following message: \[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain root@ubuntu:~# syste… --- ## [Where does logstash plugins get installed inside the logstash?](https://discuss.elastic.co/t/where-does-logstash-plugins-get-installed-inside-the-logstash/299290)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 4:49am UTC](https://discuss.elastic.co/t/where-does-logstash-plugins-get-installed-inside-the-logstash/299290 "2022-03-10T04:49:35Z")
Currently since TLS 1.3 is not supporting for logstash input beats plugin, I am trying to modify the beats plugin source code. In this regard , to replace the original installed beats plugin tar file, I would like to rep… --- ## [How to increase score for documents matching multiple words in elasticsearch](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281)
**Author:** [@Ashu\_kumar](https://discuss.elastic.co/u/Ashu_kumar)\ **Replies:** 3\ **Last updated:** [March 10, 2022, 3:33am UTC](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281 "2022-03-10T03:33:20Z")
When I am searching for dubai tour , I am getting these results: Dubai iVenture Dubai Select Pass Big Bus Dubai: Night Tour Big Bus Dubai: Hop-On, Hop-Off Bus Tour City Sightseeing Dubai: Hop-On, Hop-Off Bus Tour At-Th… --- ## [Which will cause the LocalCheckpoint less than GlobalCheckpoint?](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197)
**Author:** [@armsword](https://discuss.elastic.co/u/armsword)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 3:00am UTC](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197 "2022-03-10T03:00:49Z")
https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/index/seqno/ReplicationTracker.java#L1250 Hi, I have a question about the Local CheckPoint and Global CheckPoint. The Code in l… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1018) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1020)