# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1036 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1037 --- ## [Count all products with True values and show % of total](https://discuss.elastic.co/t/count-all-products-with-true-values-and-show-of-total/298163)
**Author:** [@Utkarsh\_Khodke](https://discuss.elastic.co/u/Utkarsh_Khodke)\ **Replies:** 4\ **Last updated:** [February 25, 2022, 3:44pm UTC](https://discuss.elastic.co/t/count-all-products-with-true-values-and-show-of-total/298163 "2022-02-25T15:44:05Z")
Hello, I'm new to Elasticsearch and Kibana and have a fairly basic question. In the data loaded in Kibana, I have store\_id and the number of products sold in each store. I also have a field call payment\_status which is … --- ## [Increase score for single word matches (plural / singular) versus multiple words matches?](https://discuss.elastic.co/t/increase-score-for-single-word-matches-plural-singular-versus-multiple-words-matches/298297)
**Author:** [@Davide\_Scalzo](https://discuss.elastic.co/u/Davide_Scalzo)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 3:38pm UTC](https://discuss.elastic.co/t/increase-score-for-single-word-matches-plural-singular-versus-multiple-words-matches/298297 "2022-02-25T15:38:12Z")
So I am trying to build an e-commerce like engine and I'd like to improve my queries / indexing to cater for the following scenario. Sample index using english\_minimal to match stuff like dress with dresses but not dres… --- ## [Cross Cluster Search Issue - index\_not\_found\_exception](https://discuss.elastic.co/t/cross-cluster-search-issue-index-not-found-exception/298296)
**Author:** [@lmariselvam](https://discuss.elastic.co/u/lmariselvam)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 3:25pm UTC](https://discuss.elastic.co/t/cross-cluster-search-issue-index-not-found-exception/298296 "2022-02-25T15:25:45Z")
To perform a cross cluster search, I've added the remote cluster using cluster settings API and also confirmed the transport port(9300) of remote cluster seeds are reachable from the search request origin cluster. Below … --- ## [Splitting message log](https://discuss.elastic.co/t/splitting-message-log/296805)
**Author:** [@wizard](https://discuss.elastic.co/u/wizard)\ **Replies:** 3\ **Last updated:** [February 25, 2022, 3:04pm UTC](https://discuss.elastic.co/t/splitting-message-log/296805 "2022-02-25T15:04:17Z")
Hello, When I am collecting logs from Syslog and transferring those logs to kibana using filebeat, I am getting a tab named by message in row format as below mention: I want this to be in a separate field like below… --- ## [Filter JSON Array Using Logstash](https://discuss.elastic.co/t/filter-json-array-using-logstash/298253)
**Author:** [@AJEE123](https://discuss.elastic.co/u/AJEE123)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 2:59pm UTC](https://discuss.elastic.co/t/filter-json-array-using-logstash/298253 "2022-02-25T14:59:16Z")
Hi guys, can anybody help me? I have JSON Array as an input like this: "reported\_devices": \[ { "id": "636e6930-6361-3a65-393a-36393a31643a", "ips": \[ … --- ## [ECK Elasticsearch node state "Invalid" after install node using yaml file](https://discuss.elastic.co/t/eck-elasticsearch-node-state-invalid-after-install-node-using-yaml-file/298288)
**Author:** [@wahyu\_saputro](https://discuss.elastic.co/u/wahyu_saputro)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 2:01pm UTC](https://discuss.elastic.co/t/eck-elasticsearch-node-state-invalid-after-install-node-using-yaml-file/298288 "2022-02-25T14:01:22Z")
if follow the guide from Quickstart | Elastic Cloud on Kubernetes \[1.0\] | Elastic, but after install node using following yaml code, apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: qu… --- ## [How to install ECK on GKE, with 2 environment (production and development)](https://discuss.elastic.co/t/how-to-install-eck-on-gke-with-2-environment-production-and-development/298290)
**Author:** [@wahyu\_saputro](https://discuss.elastic.co/u/wahyu_saputro)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 2:14pm UTC](https://discuss.elastic.co/t/how-to-install-eck-on-gke-with-2-environment-production-and-development/298290 "2022-02-25T14:14:15Z")
i follow instructions from : Quickstart | Elastic Cloud on Kubernetes \[1.0\] | Elastic. but i am wondering how to differentiate the installation between ECK for production and ECK for development. should i install Elast… --- ## [Timestamp timezone](https://discuss.elastic.co/t/timestamp-timezone/297893)
**Author:** [@ziv1](https://discuss.elastic.co/u/ziv1)\ **Replies:** 9\ **Last updated:** [February 25, 2022, 2:09pm UTC](https://discuss.elastic.co/t/timestamp-timezone/297893 "2022-02-25T14:09:48Z")
That there is problem. Maybe if you only work on one timezone, or on each timezone separately, it's not a problem, but, for us that work in various timezones and pull data form them to a central location, this means w… --- ## [Filebeat keep getting error : ERROR pipeline/output.go:121 Failed to publish events: temporary bulk send failure and needed restart](https://discuss.elastic.co/t/filebeat-keep-getting-error-error-pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure-and-needed-restart/296823)
**Author:** [@roy3861](https://discuss.elastic.co/u/roy3861)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-keep-getting-error-error-pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure-and-needed-restart/296823 "2022-02-25T13:51:50Z")
Hi, We are sending cassandra logs to ES via filebeat and after each few days it stop sending entries to ES with following Error is visible in filebeat logs: 2022-02-09T16:04:08.762Z INFO pipeline/output.go:10… --- ## [ES6.8 cluster vs Stack monitoring interval change](https://discuss.elastic.co/t/es6-8-cluster-vs-stack-monitoring-interval-change/298278)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 1:48pm UTC](https://discuss.elastic.co/t/es6-8-cluster-vs-stack-monitoring-interval-change/298278 "2022-02-25T13:48:30Z")
I know v.6.8 is EoL :slight\_smile: but still... Attempting to increase stack monitoring interval from 10s to 1m and wondering why it seems to make data disappear from the Overview dash, when sampling seems to have chan… --- ## [Filebeat threat intel not showing in Kibana](https://discuss.elastic.co/t/filebeat-threat-intel-not-showing-in-kibana/298284)
**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-threat-intel-not-showing-in-kibana/298284 "2022-02-25T13:31:35Z")
Hello, I am trying to give CTI capabilities to my elastic SIEM using the filebeat threat intel module. I activated the threat intel module and configured it to retrieve data from differents sources. But in the Elastic… --- ## [Not understading how Integrations mappings work](https://discuss.elastic.co/t/not-understading-how-integrations-mappings-work/296878)
**Author:** [@Crash30920](https://discuss.elastic.co/u/Crash30920)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 1:31pm UTC](https://discuss.elastic.co/t/not-understading-how-integrations-mappings-work/296878 "2022-02-25T13:31:08Z")
Hello, I am extremely new to ELK and I think there is something fundamental that I am not understanding. All software packages are installed and I have data flowing to my self managed instance using a Logstash.conf fil… --- ## [Fleet agent - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-agent-x509-certificate-signed-by-unknown-authority/298157)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 12:35pm UTC](https://discuss.elastic.co/t/fleet-agent-x509-certificate-signed-by-unknown-authority/298157 "2022-02-25T12:35:39Z")
I have one fleet server, and 3 elastic agents in a K8S cluster. server: --env FLEET\_ENROLL=1\\ --env FLEET\_SERVER\_ENABLE=1\\ --env FLEET\_SERVER\_ELASTICSEARCH\_HOST=$(ELASTICSEARCHHOST)\\ --env FLEET\_SERVER\_SERVICE\_TOKEN=$(… --- ## [Lazy load dashboard or load the widgets in dashboard on demand](https://discuss.elastic.co/t/lazy-load-dashboard-or-load-the-widgets-in-dashboard-on-demand/297511)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 4\ **Last updated:** [February 25, 2022, 12:00pm UTC](https://discuss.elastic.co/t/lazy-load-dashboard-or-load-the-widgets-in-dashboard-on-demand/297511 "2022-02-25T12:00:15Z")
I have a dashboard with 20+ visualizations and it takes some time to load all the widgets. So is there a way to avoid loading all the widgets upfront but rather load the widgets on demand from a pool of available widget… --- ## [Rolling back ES database from 7.16 to 7.10](https://discuss.elastic.co/t/rolling-back-es-database-from-7-16-to-7-10/298263)
**Author:** [@tullhe](https://discuss.elastic.co/u/tullhe)\ **Replies:** 5\ **Last updated:** [February 25, 2022, 11:54am UTC](https://discuss.elastic.co/t/rolling-back-es-database-from-7-16-to-7-10/298263 "2022-02-25T11:54:33Z")
Hello fellow Elasticos I've got an ES database that I accidentally upgraded to 7.16 following a stupid apt-get update For it to remain compatible with my applications, I need to roll it back to 7.10 There doesn't seem… --- ## [Configure SSL with organization provided certificates](https://discuss.elastic.co/t/configure-ssl-with-organization-provided-certificates/298160)
**Author:** [@discuss\_lipak](https://discuss.elastic.co/u/discuss_lipak)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 11:37am UTC](https://discuss.elastic.co/t/configure-ssl-with-organization-provided-certificates/298160 "2022-02-25T11:37:08Z")
We are trying to configure security in Elasticsearch cluster with the instructions provided in the official documentation for 7,16,3 version. Our organization provides us with the certificates in .p12 format and truststo… --- ## [Unable to generate client certificate for fluentd from elasticsearch cluster 8.0.0](https://discuss.elastic.co/t/unable-to-generate-client-certificate-for-fluentd-from-elasticsearch-cluster-8-0-0/298129)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 11:12am UTC](https://discuss.elastic.co/t/unable-to-generate-client-certificate-for-fluentd-from-elasticsearch-cluster-8-0-0/298129 "2022-02-25T11:12:41Z")
hi Team , this is in continuation from the question raised for v8 elastic and kibana installation i was successfully able to create 5 node cluster and kibana, but since we have fluentd aggregator , i was unable to sen… --- ## [How does elastic-serverless-forwarder resolve dns?](https://discuss.elastic.co/t/how-does-elastic-serverless-forwarder-resolve-dns/298270)
**Author:** [@TheKristoffer](https://discuss.elastic.co/u/TheKristoffer)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 11:05am UTC](https://discuss.elastic.co/t/how-does-elastic-serverless-forwarder-resolve-dns/298270 "2022-02-25T11:05:39Z")
Hello, I'm trying to make the elastic-serverless-forwarder lambda function use AWS Private Link as output - but I'm not sure if the lambda function will use the VPC forwarder (the default one on .2) so the dns will reso… --- ## [Error kibana 8.0 start windows](https://discuss.elastic.co/t/error-kibana-8-0-start-windows/298264)
**Author:** [@jdim](https://discuss.elastic.co/u/jdim)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 10:34am UTC](https://discuss.elastic.co/t/error-kibana-8-0-start-windows/298264 "2022-02-25T10:34:47Z")
Hi, I'm new in Elasticsearch, and i can't start kibana on my windows 10. I'm using the 8.0 version for Elasticsearch and kibana. I have start Elasticsearch and i have created 1 super user and kibana system user. Here… --- ## [FileBeat doesn't understand FQDN](https://discuss.elastic.co/t/filebeat-doesnt-understand-fqdn/298261)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 10:03am UTC](https://discuss.elastic.co/t/filebeat-doesnt-understand-fqdn/298261 "2022-02-25T10:03:25Z")
There seems to be a bug in FileBeat under Windows where Filebeat ignores the domain and assumes it can try contact Kafka with just a hostname. This fails when the filebeat is running in a different domain and the host is… --- ## [Multiline usage](https://discuss.elastic.co/t/multiline-usage/297991)
**Author:** [@Panplumousse](https://discuss.elastic.co/u/Panplumousse)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 9:28am UTC](https://discuss.elastic.co/t/multiline-usage/297991 "2022-02-25T09:28:58Z")
Hello, I'm new here so first off, hello everyone. Here is my problem. I am using filebeat multiline with java logs Here is my config config: - type: container paths: … --- ## [Hyperlink in TSVB Markdown](https://discuss.elastic.co/t/hyperlink-in-tsvb-markdown/295692)
**Author:** [@Susendiran](https://discuss.elastic.co/u/Susendiran)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 8:40am UTC](https://discuss.elastic.co/t/hyperlink-in-tsvb-markdown/295692 "2022-02-25T08:40:32Z")
Hi Team, We are trying to add hyperlink in TSVB Markdown visualization, but there is no option to add direct link in Markdown. But we could see one option named - open link in new tab - yes/no in Panel options tab. If … --- ## [Kibana failed to query logs. Procedure](https://discuss.elastic.co/t/kibana-failed-to-query-logs-procedure/298254)
**Author:** [@linuxxin](https://discuss.elastic.co/u/linuxxin)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 8:39am UTC](https://discuss.elastic.co/t/kibana-failed-to-query-logs-procedure/298254 "2022-02-25T08:39:46Z")
Search Error Bad Request appears when Kibana queries the index I built my own index --- ## [Kibana Dashboard Error](https://discuss.elastic.co/t/kibana-dashboard-error/298121)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 8:13am UTC](https://discuss.elastic.co/t/kibana-dashboard-error/298121 "2022-02-25T08:13:12Z")
Hi all, I'm getting the below error in dashboard . Error: So when I load dashboard for a period of 7 days,I'm not having any issues. It loads dashboard perfectly. However when I want to see data for 30 days or 90 d… --- ## [Metric Beat - Best Practices](https://discuss.elastic.co/t/metric-beat-best-practices/298247)
**Author:** [@iamnaveenkumart](https://discuss.elastic.co/u/iamnaveenkumart)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 7:18am UTC](https://discuss.elastic.co/t/metric-beat-best-practices/298247 "2022-02-25T07:18:09Z")
HI All, We are in progress of setting up Beat for all our service and server. Can you please share some link or documentation for Best Practices which need follow will configure an beat like period, refresh\_list\_interva… --- ## [Duplicate results](https://discuss.elastic.co/t/duplicate-results/295808)
**Author:** [@motoki](https://discuss.elastic.co/u/motoki)\ **Replies:** 10\ **Last updated:** [February 25, 2022, 7:12am UTC](https://discuss.elastic.co/t/duplicate-results/295808 "2022-02-25T07:12:20Z")
Elasticsearch.... . 7.4 Status... Duplicate results were seen in pagination search results when there were multiple data nodes, regardless of whether there was a dedicated master or not (the same was true when specifyin… --- ## [Filebeat ingest](https://discuss.elastic.co/t/filebeat-ingest/298242)
**Author:** [@Anwar](https://discuss.elastic.co/u/Anwar)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 5:02am UTC](https://discuss.elastic.co/t/filebeat-ingest/298242 "2022-02-25T05:02:32Z")
Hi Team, I want to use the below ingest directly in the Filebeat.yml file. I have made changes for few processor. need to know -\> how to use grok, Geoip, user-agent and scripts. Please help me on the same. Because,… --- ## [How to write log into ElasticSearch (provide by k8s) from logstash?](https://discuss.elastic.co/t/how-to-write-log-into-elasticsearch-provide-by-k8s-from-logstash/298240)
**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 4:45am UTC](https://discuss.elastic.co/t/how-to-write-log-into-elasticsearch-provide-by-k8s-from-logstash/298240 "2022-02-25T04:45:18Z")
Hi Team: The current architecture is like this, Logstash writes to the remote (ignore the intranet ip in the error log below) Elasticsearch cluster, but the default Elasticsearch Output Plugin does not take effect. The… --- ## [Query Recall Vs Precision](https://discuss.elastic.co/t/query-recall-vs-precision/298235)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 3:34am UTC](https://discuss.elastic.co/t/query-recall-vs-precision/298235 "2022-02-25T03:34:17Z")
Hello everybody. I would like some help to maintain the accuracy of my query and still have a minimal recall of results. Today I have some documents that have generic terms, and these terms retrieve products that outs… --- ## [ES 8.0 RPM Install - libjli.so cannot be located launching scripts/binaries from the bin directory - RHEL 8](https://discuss.elastic.co/t/es-8-0-rpm-install-libjli-so-cannot-be-located-launching-scripts-binaries-from-the-bin-directory-rhel-8/298105)
**Author:** [@qadv](https://discuss.elastic.co/u/qadv)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 1:17am UTC](https://discuss.elastic.co/t/es-8-0-rpm-install-libjli-so-cannot-be-located-launching-scripts-binaries-from-the-bin-directory-rhel-8/298105 "2022-02-25T01:17:41Z")
I am deploying a new ES cluster running 8.0 using RHEL 8.5. Fairly vanilla deployment and Elasticsearch is running on the first node with auto-security used, no JVM installed (using built-in). SELINUX is permissive. Ela… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1035) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1037)