# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1030

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1031

---

## [Check license for production environment](https://discuss.elastic.co/t/check-license-for-production-environment/298597)

<div class="topic-metadata">

**Author:** [@Rohit\_Keshari](https://discuss.elastic.co/u/Rohit_Keshari)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:15am UTC](https://discuss.elastic.co/t/check-license-for-production-environment/298597 "2022-03-02T11:15:29Z")

</div>

Is it use open source Elasticsearch 7.10.2 in production environment?

---

## [Error when trying to index to data streamd](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603)

<div class="topic-metadata">

**Author:** [@notgurev](https://discuss.elastic.co/u/notgurev)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 9:55am UTC](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603 "2022-03-02T09:55:34Z")

</div>

I've created an index template + a data stream and tried to bulk create from Go library. Request is: {"create":{}} {"@timestamp":"2022-03-02T12:48:23+03:00","domain\_name":"adlook-rev.me","domain\_type":"","webmaster\_pin…

---

## [Elastic search clustering](https://discuss.elastic.co/t/elastic-search-clustering/298491)

<div class="topic-metadata">

**Author:** [@Bhagya\_09](https://discuss.elastic.co/u/Bhagya_09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elastic-search-clustering/298491 "2022-03-02T10:23:53Z")

</div>

I tried to set up Elasticsearch on docker. but i can't volume mount on /usr/share/Elasticsearch/config. /usr/share/elasticsearch/data, /usr/share/elasticsearch/plugins is okay. but only i can't volume mount path is /us…

---

## [Calculate cosine similarity for nested object in elasticsearch using Python](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601)

<div class="topic-metadata">

**Author:** [@RiyaP](https://discuss.elastic.co/u/RiyaP)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 9:42am UTC](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601 "2022-03-02T09:42:15Z")

</div>

I am working on an use case which has documents in following format:- \[{'Fruits': \['Mango', 'Apple'\]}, {'Fruits': \['Banana', 'Guava', 'Mango'\]}, {'Fruits': \['Grapes', 'Apple'\]}\] I am storing the data into Elasticsear…

---

## [Continuous transformation averaging](https://discuss.elastic.co/t/continuous-transformation-averaging/298494)

<div class="topic-metadata">

**Author:** [@sg09](https://discuss.elastic.co/u/sg09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:17am UTC](https://discuss.elastic.co/t/continuous-transformation-averaging/298494 "2022-03-02T10:17:00Z")

</div>

Hi, We collect device behavior/events during the day in a timeline index. Devices are turn on and off by customers and events are sent as they happen and each event provides event name and time consumed for each event. …

---

## [Injest Pipeline for conditional statement used in Scripts](https://discuss.elastic.co/t/injest-pipeline-for-conditional-statement-used-in-scripts/298178)

<div class="topic-metadata">

**Author:** [@shivani\_singh](https://discuss.elastic.co/u/shivani_singh)\
**Replies:** 25\
**Last updated:** [March 2, 2022, 5:25am UTC](https://discuss.elastic.co/t/injest-pipeline-for-conditional-statement-used-in-scripts/298178 "2022-03-02T05:25:12Z")

</div>

Hii, My goals - Find the existing field if present (responseBody.results\[i\].statusCode) and copy it's value into a new field (embedded\_error\_code ) at runtime My original field is a list of array. Below is the struct…

---

## [Why percentiles are based on iterations instead of number of requests](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181)

<div class="topic-metadata">

**Author:** [@Thanin\_Srithai](https://discuss.elastic.co/u/Thanin_Srithai)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 9:09am UTC](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181 "2022-03-02T09:09:23Z")

</div>

I noticed that the document says it need 1000 iterations or more in order to calculate 99.9th percentile. here I wonder that why it has to base on number of iterations but not the actual amount of requests. In many tra…

---

## [Metricbeat produces CPU usage spikes every 10 seconds across different releases](https://discuss.elastic.co/t/metricbeat-produces-cpu-usage-spikes-every-10-seconds-across-different-releases/298592)

<div class="topic-metadata">

**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 8:35am UTC](https://discuss.elastic.co/t/metricbeat-produces-cpu-usage-spikes-every-10-seconds-across-different-releases/298592 "2022-03-02T08:35:18Z")

</div>

Hello Elastic, I've seen different types of topics in this board that certain releases of metricbeat had memory leaks and other issues. Currently, I'm preparing some evaluations for a research project that also involve…

---

## [Event.set does not work](https://discuss.elastic.co/t/event-set-does-not-work/298317)

<div class="topic-metadata">

**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:33am UTC](https://discuss.elastic.co/t/event-set-does-not-work/298317 "2022-03-02T08:33:45Z")

</div>

Hello, I'm trying to create new field in my filter, but seems that event.set does not work properly. I can't see neither errors nor the new fields in elastic. I had to add the if condition since the field is not contain…

---

## [Visualize infrastructure performance](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:26am UTC](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776 "2022-03-02T08:26:33Z")

</div>

Hi, i want to create an infrastructure dashboards which shows the health of all systems in one visualization, say i have 100 servers, i want to monitor them all with a single metric. What i would like is a visualization…

---

## [Any alternative method of Searchsearch(SearchRequest request, Class\<TDocument\> tDocumentClass)](https://discuss.elastic.co/t/any-alternative-method-of-searchsearch-searchrequest-request-class-tdocument-tdocumentclass/298591)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Yadav](https://discuss.elastic.co/u/Vaibhav_Yadav)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 8:16am UTC](https://discuss.elastic.co/t/any-alternative-method-of-searchsearch-searchrequest-request-class-tdocument-tdocumentclass/298591 "2022-03-02T08:16:15Z")

</div>

Hello, Is there any alternative method for Searchsearch(SearchRequest request, Class\<TDocument\> tDocumentClass) that does not take Class\<TDocument\> tDocumentClass as an argument, because I do not have such type of mode…

---

## [Docker Volume driver choice](https://discuss.elastic.co/t/docker-volume-driver-choice/298586)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 7:45am UTC](https://discuss.elastic.co/t/docker-volume-driver-choice/298586 "2022-03-02T07:45:25Z")

</div>

Hi Under creating docker compose file I have come across two vaguely described cases: when I need to use an external disk for example \[ I have a 3 hosts with multiply ssd(/opt/ssd/ds1/hot\_data/) and hdd (/opt/hdd/ds1/…

---

## [Is snapshot restore incremental？](https://discuss.elastic.co/t/is-snapshot-restore-incremental/298474)

<div class="topic-metadata">

**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\
**Replies:** 14\
**Last updated:** [March 2, 2022, 7:17am UTC](https://discuss.elastic.co/t/is-snapshot-restore-incremental/298474 "2022-03-02T07:17:50Z")

</div>

As we know, the snapshot process is incremental, so we can take snapshots frequently and It will be very fast after the first time。 My question is how restore work, When I restore snapshots in other clusters, is it incr…

---

## [Shrinked index should have same security settings than original index](https://discuss.elastic.co/t/shrinked-index-should-have-same-security-settings-than-original-index/298512)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 1:27pm UTC](https://discuss.elastic.co/t/shrinked-index-should-have-same-security-settings-than-original-index/298512 "2022-03-01T13:27:54Z")

</div>

When using ILM to reduce index, the new index change its name: "shrink-zda-original". When using security, we configure some permissions to "original" index. ILM will break permissions, this is really annoying using el…

---

## [Hello elastic - Multiple Pipelines](https://discuss.elastic.co/t/hello-elastic-multiple-pipelines/298484)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 9\
**Last updated:** [March 2, 2022, 6:45am UTC](https://discuss.elastic.co/t/hello-elastic-multiple-pipelines/298484 "2022-03-02T06:45:45Z")

</div>

DELETE index PUT index/\_doc/1 { "foo": "bar" } GET index/\_search { "query": { "match": { "foo": "bar" } } }

---

## [Mapping Problem](https://discuss.elastic.co/t/mapping-problem/298521)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/mapping-problem/298521 "2022-03-02T06:20:20Z")

</div>

Hello dear friends, I have a big problem. The problem is ; I have an index that I created by reindexing from another index. The mapping of this index was fine before, but now there are corruptions, I have no idea why. Fi…

---

## [How do synchronization data in es](https://discuss.elastic.co/t/how-do-synchronization-data-in-es/298581)

<div class="topic-metadata">

**Author:** [@YaY](https://discuss.elastic.co/u/YaY)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 5:13am UTC](https://discuss.elastic.co/t/how-do-synchronization-data-in-es/298581 "2022-03-02T05:13:18Z")

</div>

i know i can use 'reindex' to do the synchronization, but it's full synchronization rigth?! even add 'op\_type=create' only will find the missing index in the full index, my requirement is only handle and create increm…

---

## [Dynamically adding runtime fields](https://discuss.elastic.co/t/dynamically-adding-runtime-fields/298427)

<div class="topic-metadata">

**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 4:55am UTC](https://discuss.elastic.co/t/dynamically-adding-runtime-fields/298427 "2022-03-02T04:55:53Z")

</div>

Dear all, I have a few runtime fields with painless scripts in my mappings that work pretty well. So far I have a list of all the date fields to index. However, things are changing and now I have the problem that there …

---

## [Turn off label for split fields in Timelion](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177)

<div class="topic-metadata">

**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 4:07am UTC](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177 "2022-03-02T04:07:46Z")

</div>

Is it possible to turn off the label in Timelion chart? When I created my Timelion chart, I have many points on the chart that is obvious what they are. So I don't need to have labels for all of them showing up. However,…

---

## [Is there a way to include external node module in my Kibana distributable?](https://discuss.elastic.co/t/is-there-a-way-to-include-external-node-module-in-my-kibana-distributable/298249)

<div class="topic-metadata">

**Author:** [@kyh119](https://discuss.elastic.co/u/kyh119)\
**Replies:** 5\
**Last updated:** [March 2, 2022, 12:38am UTC](https://discuss.elastic.co/t/is-there-a-way-to-include-external-node-module-in-my-kibana-distributable/298249 "2022-03-02T00:38:54Z")

</div>

Hi, I created my plugin, and it requires a module that I've installed using 'yarn add node-ssh'. I did: ' yarn add @types/ssh2 ' in kibana directory. ' yarn add node-ssh' also. in 'server/routes.ts', wrote import { N…

---

## [Fleet Server - Certificate Challenges!](https://discuss.elastic.co/t/fleet-server-certificate-challenges/297896)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 12:33am UTC](https://discuss.elastic.co/t/fleet-server-certificate-challenges/297896 "2022-03-02T00:33:01Z")

</div>

Hello When i try to register Fleet Server using a certificate, it is getting successfully registered. But the problem is, it is throwing "Generating self-signed certificate for Fleet Server" after executing the command …

---

## [Filebeat Index Name Pattern - timestamp](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255)

<div class="topic-metadata">

**Author:** [@danielc](https://discuss.elastic.co/u/danielc)\
**Replies:** 7\
**Last updated:** [March 2, 2022, 12:11am UTC](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255 "2022-03-02T00:11:29Z")

</div>

Is %{+yyyy.MM.dd} the system time or log file timestamp? Configure the Elasticsearch output | Filebeat Reference \[7.10\] | Elastic output.elasticsearch: hosts: \["http://localhost:9200"\] index: "%{\[fields.log\_type\]}…

---

## [Running Elastic Standalong](https://discuss.elastic.co/t/running-elastic-standalong/298567)

<div class="topic-metadata">

**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\
**Replies:** 2\
**Last updated:** [March 1, 2022, 11:48pm UTC](https://discuss.elastic.co/t/running-elastic-standalong/298567 "2022-03-01T23:48:32Z")

</div>

Hello, In the process of getting our production cluster configured with a Fleet manager instance but not quite there yet. I am curious what the best approach is if I were to run the elastic agent in stand alone? I am s…

---

## [Standalone to Cluster Migration - any tips](https://discuss.elastic.co/t/standalone-to-cluster-migration-any-tips/298211)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 5\
**Last updated:** [March 1, 2022, 10:53pm UTC](https://discuss.elastic.co/t/standalone-to-cluster-migration-any-tips/298211 "2022-03-01T22:53:45Z")

</div>

Hi All, So I've got a nice elk instance working. My first in a very long time ( thanks to the security pack) that I don't want to blow away and rebuild when I want to reconfigure it. But what I had always planned to d…

---

## [Optimal node roles for 100-node cluster](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511)

<div class="topic-metadata">

**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 10:27pm UTC](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511 "2022-03-01T22:27:38Z")

</div>

A cluster of 100 nodes was installed. We want it to serve as a search engine like Google. Servers are located in a data center. Raid-0 structure was preferred for the high-speed requirement. Query traffic will be more…

---

## [Please check if ES service is running properly:ElasticsearchStatusException](https://discuss.elastic.co/t/please-check-if-es-service-is-running-properly-elasticsearchstatusexception/298501)

<div class="topic-metadata">

**Author:** [@navin\_boddu](https://discuss.elastic.co/u/navin_boddu)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 10:24pm UTC](https://discuss.elastic.co/t/please-check-if-es-service-is-running-properly-elasticsearchstatusexception/298501 "2022-03-01T22:24:34Z")

</div>

ERROR Error occured while creating mapping of document into ES. Please check if ES service is running properly:ElasticsearchStatusException\[Elasticsearch exception \[type=validation\_exception, reason=Validation Failed: 1:…

---

## [Apply same settings on all fields that start with the same name in the index template in the Elasticsearch](https://discuss.elastic.co/t/apply-same-settings-on-all-fields-that-start-with-the-same-name-in-the-index-template-in-the-elasticsearch/298528)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 10:22pm UTC](https://discuss.elastic.co/t/apply-same-settings-on-all-fields-that-start-with-the-same-name-in-the-index-template-in-the-elasticsearch/298528 "2022-03-01T22:22:41Z")

</div>

n my Elasticsearch index, there is a field for example field\_abc that is an object. The problem is that multiple fields with name field\_abc can exist with different suffix. Like in our index in the same document field\_ab…

---

## [Error elastic search wont find java.dll and java SE](https://discuss.elastic.co/t/error-elastic-search-wont-find-java-dll-and-java-se/298540)

<div class="topic-metadata">

**Author:** [@tom\_Shabtay](https://discuss.elastic.co/u/tom_Shabtay)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 10:19pm UTC](https://discuss.elastic.co/t/error-elastic-search-wont-find-java-dll-and-java-se/298540 "2022-03-01T22:19:49Z")

</div>

When I start Elasticsearch won't work and will not find java.dll and java SE and you can see I have both installed (I reinstalled a couple of times and I reinstalled Elasticsearch as well) see command prompt below C:\\Us…

---

## [Logstash csv file](https://discuss.elastic.co/t/logstash-csv-file/298565)

<div class="topic-metadata">

**Author:** [@Hana\_Ne](https://discuss.elastic.co/u/Hana_Ne)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 9:39pm UTC](https://discuss.elastic.co/t/logstash-csv-file/298565 "2022-03-01T21:39:32Z")

</div>

I have question, How can we tell logstash to import only the first 10 lines from a csv file Thank you

---

## [Elastic Agent Standalone Configuration Validation](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 8:49pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562 "2022-03-01T20:49:26Z")

</div>

Hi All, I was wondering if there is a way with the Elastic Agent in standalone mode to validate a configuration? Looking at the output of the Elastic Agent process: elastic-agent help Usage: elastic-agent \[subcomm…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1029)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1031)
