# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1092 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1093 --- ## [Authentication Options for Scroll API Call](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:58am UTC](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543 "2022-01-17T07:58:22Z")
Hi Elastic Experts, I am hoping you can help me. I am building Power BI templates for my clients using the Scroll API method where they want to retrieve results in excess of 10,000 records. I have built the templates u… --- ## [NOT ABLE TO PARSE SPECIFIC CHUNK OF LOG USING GROK](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541 "2022-01-17T07:49:21Z")
Hi, I have a sample log from a switch. I am trying to parse it in to fields but some how I dont know why it is not allowing me to parse capital letters like let me show you Now this is when I worte PROG then it takes… --- ## [How to create filed / how can i find distribute field](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530)
**Author:** [@JWKim1](https://discuss.elastic.co/u/JWKim1)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 7:40am UTC](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530 "2022-01-17T07:40:07Z")
my field with im & serial is not distributed it have to distributed with "&" but it is not working in "im" field how can i find distribute setting? --- ## [Elasticsearch Kibana "Discover" returns no results, but exact same query in "Dev Tools" returns results](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479)
**Author:** [@wishfulwatermelon](https://discuss.elastic.co/u/wishfulwatermelon)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479 "2022-01-17T07:28:18Z")
I was trying to look for data on my index pattern in "Discover". However, it returns no results. I then looked for data on the same index pattern in "Dev Tools" and copied/pasted over the same Request, which returned to… --- ## [Filebeat docker input type labels are not shown](https://discuss.elastic.co/t/filebeat-docker-input-type-labels-are-not-shown/294534)
**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 6:40am UTC](https://discuss.elastic.co/t/filebeat-docker-input-type-labels-are-not-shown/294534 "2022-01-17T06:40:10Z")
Hi all, I use filebeat and logstash for store my all datas. My docker setup and log files are in /home/docker/containers folder. (not in /var/lib/docker path) The problem is when i was colleting my logs, the docker fie… --- ## [Kibana lens grouping data by string pattern](https://discuss.elastic.co/t/kibana-lens-grouping-data-by-string-pattern/294125)
**Author:** [@Realsnack](https://discuss.elastic.co/u/Realsnack)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 6:02am UTC](https://discuss.elastic.co/t/kibana-lens-grouping-data-by-string-pattern/294125 "2022-01-17T06:02:59Z")
Hello, we have some finance transactions saved in Elasticsearch and I would like to create a visualization on the data. All of the records have field "messageType" with a string value and I would need to group the reco… --- ## [How to keep an ES cluster happy during a K8s(!) node update](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736)
**Author:** [@jugosag](https://discuss.elastic.co/u/jugosag)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 5:17am UTC](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736 "2022-01-17T05:17:43Z")
Hi all, I am looking for general guidance on how to keep an Elasticsearch cluster on K8s happy while doing a K8s node update. Motivation We are running an HA microservice-based SaaS application on Kubernetes, we have i… --- ## [Elasticsearch password set error in both auto and interactive](https://discuss.elastic.co/t/elasticsearch-password-set-error-in-both-auto-and-interactive/294524)
**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 5:13am UTC](https://discuss.elastic.co/t/elasticsearch-password-set-error-in-both-auto-and-interactive/294524 "2022-01-17T05:13:53Z")
when i execute ./bin/Elasticsearch-setup-passwords auto or interactive then it's shows me an error Exception in thread "main" SettingsException\[Failed to load settings from \[elasticsearch.yml\]\]; nested: MarkedYAMLExcept… --- ## [Increasing queue size](https://discuss.elastic.co/t/increasing-queue-size/294520)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 3:25am UTC](https://discuss.elastic.co/t/increasing-queue-size/294520 "2022-01-17T03:25:34Z")
Hi, I'm ingesting Netflow data using Filebeat 7.14.0 and writing the output into Elasticsearch. I'm trying to tweak the various configuration settings in order to improve the performance (currently, it seems like filebe… --- ## [Need to map ip address from logs to map with corresponding hostname](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499)
**Author:** [@ArchitG358](https://discuss.elastic.co/u/ArchitG358)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 1:52am UTC](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499 "2022-01-17T01:52:33Z")
I have logs that includes IP address I want to map IP address to its hostname (eg, AWS ec2) or its organisation. Just like whatsmyipaddress does. Need suggestions or plugins that can help do this. I am open to get any … --- ## [Metricbeat Rollover Error](https://discuss.elastic.co/t/metricbeat-rollover-error/294508)
**Author:** [@idlerm](https://discuss.elastic.co/u/idlerm)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 8:31pm UTC](https://discuss.elastic.co/t/metricbeat-rollover-error/294508 "2022-01-16T20:31:18Z")
Hello all! I'm new to building EL and I can't seem to find the solution to an error I've been troubleshooting for days. I'm using version 7.13.4 for elastic and I've recently installed metricbeat into my server Everyt… --- ## [Date filter in logstash](https://discuss.elastic.co/t/date-filter-in-logstash/294431)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 6\ **Last updated:** [January 16, 2022, 7:16pm UTC](https://discuss.elastic.co/t/date-filter-in-logstash/294431 "2022-01-16T19:16:06Z")
Hi, I am trying to use Date filter of the logstash to create a timestamp on my data stored in Elasticsearch. The timestamp in my data is in Linux format and I want to change it to some standard format like as "dd MMM yy… --- ## [Cluster load while updating mappings of live production indexes](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718)
**Author:** [@ginopino](https://discuss.elastic.co/u/ginopino)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 6:14pm UTC](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718 "2022-01-16T18:14:38Z")
Hello! I need to add a couple of new keyword fields to a significant quantity of production indexes which are using a mapping with dynamic: strict I was hoping to be able to use a wildcard with the update mapping API, … --- ## [Getting log graph using python](https://discuss.elastic.co/t/getting-log-graph-using-python/294505)
**Author:** [@Raz\_Maabari](https://discuss.elastic.co/u/Raz_Maabari)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 3:55pm UTC](https://discuss.elastic.co/t/getting-log-graph-using-python/294505 "2022-01-16T15:55:22Z")
Hi, I would like to embed a kibana graph in a web application (react). what would be the best way to do so? --- ## [I want to get the same results if the words have empty space or no space](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:46pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492 "2022-01-16T12:46:18Z")
Hi everyone I want to get the same results if the words have empty space or no space. For example, we have a product called "washing mach ine" and I want the washing machine to return if the user searches for the word … --- ## [Is there a query that makes the word searched closer to the beginning of the text get more points?](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483 "2022-01-16T12:44:44Z")
hello Is there a query that makes the word searched closer to the beginning of the text get more points ?? For example, if we have two texts as follows Samsung mobile phone cover TypeC charger with fast charging capa… --- ## [Elasticsearch With Node.js throwing an Error: connect EADDRNOTAVAIL](https://discuss.elastic.co/t/elasticsearch-with-node-js-throwing-an-error-connect-eaddrnotavail/294495)
**Author:** [@qadeer.sipra](https://discuss.elastic.co/u/qadeer.sipra)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-with-node-js-throwing-an-error-connect-eaddrnotavail/294495 "2022-01-16T10:00:58Z")
I am using Elasticsearch6.8.3 docker on an AWS ec2 machine for the production environment. For this purpose, I have installed the Elasticsearch via docker compose. In a microservice architecture many of the other service… --- ## [Canvas date function time zone support](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 2\ **Last updated:** [January 16, 2022, 9:04am UTC](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485 "2022-01-16T09:04:37Z")
Hello I have some Canvas pages on which I want to show the last time the Canvas was reloaded. Using the date function with a date formatted as shown below, the time zone is in UTC. The timezone setting in Kibana (7.16.… --- ## [How to denormalize array with huge number of values Elasticsearch?](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870)
**Author:** [@aldm](https://discuss.elastic.co/u/aldm)\ **Replies:** 2\ **Last updated:** [January 16, 2022, 9:03am UTC](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870 "2022-01-16T09:03:26Z")
Hi, We're building an app which is using Elasticsearch. For each user there will be followers (array of longs - ids of user who follow this user). With time, number of followers might increase to hundreds of thousands, … --- ## [Analyze two-words phrase as one token](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305)
**Author:** [@Talya](https://discuss.elastic.co/u/Talya)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 8:59am UTC](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305 "2022-01-16T08:59:04Z")
When dealing with phrases consisting with two words, I want to index them as one token and not retrieve them when the search matching one of those words. For ex. I have document with "French Toast", when someone is searc… --- ## [Kibana canvas "compare" function (expression language)](https://discuss.elastic.co/t/kibana-canvas-compare-function-expression-language/294484)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [January 16, 2022, 7:08am UTC](https://discuss.elastic.co/t/kibana-canvas-compare-function-expression-language/294484 "2022-01-16T07:08:10Z")
Hi Guys, So I am trying to use the "compare" expression to change field values. The problem I am currently facing is that only the first case value works, all the others goes to "other" (default). In this example, onl… --- ## [Partial matching against dates](https://discuss.elastic.co/t/partial-matching-against-dates/294190)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 7:45pm UTC](https://discuss.elastic.co/t/partial-matching-against-dates/294190 "2022-01-15T19:45:03Z")
I'm sure this is is easy but couldn't find a simple answer. If I have 'XXXX2000' in an index and I search '01022000' how can I accept that as a partial match, whereby the more of the word that matches the higher the sco… --- ## [Kibana Does Not Load from mobile network](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 6\ **Last updated:** [January 15, 2022, 7:06pm UTC](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968 "2022-01-15T19:06:47Z")
Kibana version 7.14 Elastic version 7.14 Kibana loads properly and fully using WIFI networks. However, when using mobile networks, Kibana does not load. The loading appears to stop at the log-in screen. The log-in scre… --- ## [How to check if a field has any subfields](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482)
**Author:** [@dantamsdb](https://discuss.elastic.co/u/dantamsdb)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482 "2022-01-15T17:03:08Z")
I get input that sometimes looks like this: { "baz": { "foo": "bar", "data": {} } } sometimes it looks like this: { "baz": { "foo": "bar", "data": { "fizz": "buzz", "fizzy": "buzzy" … --- ## [org.elasticsearch.action.get.MultiGetShardResponse extremly high "\[took\]" value](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434)
**Author:** [@trocade](https://discuss.elastic.co/u/trocade)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 4:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434 "2022-01-15T16:45:44Z")
So we have some problems that something in our environment is causing our nodes to run out of HEAP memory (30GB per node) While looking at this I found these messages: server es\_server\[1635\]: {"type": "server", "timest… --- ## [How i can make a status panel in Kibana?](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 3:56pm UTC](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765 "2022-01-15T15:56:15Z")
Most of the dashboard development may use the "status panel" to represent the on/off for service/server/machine. In Grafana , it have two libs: Status Panel plugin for Grafana | Grafana Labs Stat | Grafana Labs which … --- ## [Scripted fields in kibana canvas](https://discuss.elastic.co/t/scripted-fields-in-kibana-canvas/294475)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 1:11pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-canvas/294475 "2022-01-15T13:11:42Z")
Hi Guys, I am trying to use scripted fields inside a table elements in kibana canvas app. I'm guessing this is not supported (error - unknown column). Is there any alternative for that? My use case is the splunk "eva… --- ## [Lens visualization for opendistro - kibana](https://discuss.elastic.co/t/lens-visualization-for-opendistro-kibana/294472)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 3:38pm UTC](https://discuss.elastic.co/t/lens-visualization-for-opendistro-kibana/294472 "2022-01-15T15:38:19Z")
Hi all, When i try to create new visualization in Kibana, Lens option not showing. Is it only available in Elasticsearch? Is it not available in Opendistro for Elasticsearch (7.10.2)? Any way to import as plugin? --- ## [How to transform data through ruby code](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 12\ **Last updated:** [January 15, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913 "2022-01-15T13:10:07Z")
Hi I need a help for extract data from one of filed from CSV. the header for these data presents like below: EPS\_BEARER\_ID-BEARER\_QCI-ARP\_PL-ARP\_PCI-ARP\_PVI-GBR\_UL-GBR\_DL-BEARER\_CAUSE-DEFAULT\_BEARER\_ID 5-7-undefin… --- ## [Service wont run with "Environment Variable"](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 11:49am UTC](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124 "2022-01-15T11:49:26Z")
Hi dears, I have a secure cluster with some services such as Kibana, Metricbeat, APM-server, Elastic Agent and... In their config.yml I have user/pass for Elasticsearch: output: elasticsearch hosts: "\[my\_hosts\]" usern… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1091) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1093)