# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1105 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1106 --- ## [Elasticsearch incorrect licensing](https://discuss.elastic.co/t/elasticsearch-incorrect-licensing/293557)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 4\ **Last updated:** [January 5, 2022, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-incorrect-licensing/293557 "2022-01-05T19:00:18Z")
I have just pulled 7.16.1 rpms for Elasticsearch to do a fresh install, in my environment i have a platinum license but for some reason Elasticsearch is loading a random incorrect license that is basic which is causing i… --- ## [Elasticsearch: Custom Index pattern issue](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570)
**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570 "2022-01-05T17:35:56Z")
Hello, I am unable to create kibana index (@timestamp) when a custom Elasticsearch index is being used. logs are being sent through filebeat, but they are not visible in discover page of kibana, Br, E --- ## [Metricbeat host not showing on kibana as well as not creating index](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-kibana-as-well-as-not-creating-index/292567)
**Author:** [@jonoyo](https://discuss.elastic.co/u/jonoyo)\ **Replies:** 13\ **Last updated:** [January 5, 2022, 6:52pm UTC](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-kibana-as-well-as-not-creating-index/292567 "2022-01-05T18:52:01Z")
After install the metricbeat on localhost elk server its showing on kibana dashboard but when metricbeat installing on another machine metricbeat host are not showing except elk localhost metricbeat host. metricbeat ver… --- ## [Importing the index profiles from one environment to another(Index name are different)](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 5:56pm UTC](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769 "2022-01-05T17:56:23Z")
If we want to promote the Dashboards created in dev to upper environments what is the best practice? The index names will be different in upper environments and also possibility of sharing the same Elasticsearch cluster,… --- ## [Registry blows up after filebeat container restarts](https://discuss.elastic.co/t/registry-blows-up-after-filebeat-container-restarts/293572)
**Author:** [@ivankovnikita1992](https://discuss.elastic.co/u/ivankovnikita1992)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 5:51pm UTC](https://discuss.elastic.co/t/registry-blows-up-after-filebeat-container-restarts/293572 "2022-01-05T17:51:58Z")
Hello there, I've already read a lot of docs and issues but haven't found any solution for my problem, so hopefully someone can help... Our implementation is pretty simple - filebeat is set as daemonset for kubernetes … --- ## [Regarding log4j vulnerability](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 4\ **Last updated:** [January 5, 2022, 5:30pm UTC](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749 "2022-01-05T17:30:12Z")
Hello Team, I am using/running ELK 7.13 version on my environment using docker compose along with Filebeat 7.14 and have enabled xpack security option. I have restarted all three containers using docker compose and com… --- ## [Filebeat with multiple input - log sources](https://discuss.elastic.co/t/filebeat-with-multiple-input-log-sources/293567)
**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 5:19pm UTC](https://discuss.elastic.co/t/filebeat-with-multiple-input-log-sources/293567 "2022-01-05T17:19:35Z")
Hello, I am using filebeat 7.16 and I am trying to import multiple logs from different directories (.log and .csv). Also, I am trying to creat different index for each one of them. All of this must be done using one fil… --- ## [Can't move large ES snapshots to different server](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024)
**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\ **Replies:** 3\ **Last updated:** [January 5, 2022, 5:07pm UTC](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024 "2022-01-05T17:07:41Z")
I'm having an issue with moving a Elasticsearch index to a different machine. I'm running Elasticsearch on a single machine inside a docker container (single node cluster). I have 2 indexes that are 28.6gb and 15gb larg… --- ## [CCR request circuit breakers error](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809)
**Author:** [@dgarcia](https://discuss.elastic.co/u/dgarcia)\ **Replies:** 5\ **Last updated:** [January 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809 "2022-01-05T16:58:12Z")
Hi, We are using the CCR feature as part of ours process to migrate our data between two cluster, but we are experimenting some unexpected behaviour in the remote cluster. Once begin to follow an index in the remote cl… --- ## [Question about nested pipeline](https://discuss.elastic.co/t/question-about-nested-pipeline/291400)
**Author:** [@fengjian1993](https://discuss.elastic.co/u/fengjian1993)\ **Replies:** 4\ **Last updated:** [January 5, 2022, 4:39pm UTC](https://discuss.elastic.co/t/question-about-nested-pipeline/291400 "2022-01-05T16:39:02Z")
I have question with using nested pipeline :wink: distribution pipeline processor: PUT \_ingest/pipeline/pipeline\_for\_distribution { "description": "a pipeline for distribution", "processors": \[ { "pipeline": { "… --- ## [Java Api Client MatchQuery$Builder missing query method with the string as an argument](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560)
**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 4:23pm UTC](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560 "2022-01-05T16:23:16Z")
Shouldn't it have public final Builder query(String value) method? Or should I use MatchQuery$Builder#query(FieldValue.of(.... ? I am using Elasticsearch-java-7.16.2 version --- ## [Java Api Client BoolQuery$Builder missing minimumShouldMatch method with Number as an argument](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559)
**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 3:49pm UTC](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559 "2022-01-05T15:49:45Z")
Hello. BoolQuery$Builder has only public final Builder minimumShouldMatch(@Nullable String value) method. Im my opinion it should have the same method with a number as an argument. I am using Elasticsearch-java-7.16.… --- ## [Watcher Condition: Bucket Size](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635)
**Author:** [@appleyin1](https://discuss.elastic.co/u/appleyin1)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 3:44pm UTC](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635 "2022-01-05T15:44:09Z")
Hello, does anyone knows how do I get the buckets size from the sub-aggregation buckets "obs1" under the Watcher condition ? Please advise, thanks. "aggregations" : { "system" : { "doc\_count\_error\_upper\_boun… --- ## [Could not connect to SMTP host](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 3:42pm UTC](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207 "2022-01-05T15:42:50Z")
Hi, I have configured watcher related alerts. Sending the watcher alert emails from a "support.test@domain.com". Below is the action template I have used in watcher "actions": { "send\_email": { "email": { … --- ## [Force\_excute option excuting my alert every 5min](https://discuss.elastic.co/t/force-excute-option-excuting-my-alert-every-5min/293358)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 3:34pm UTC](https://discuss.elastic.co/t/force-excute-option-excuting-my-alert-every-5min/293358 "2022-01-05T15:34:11Z")
Hello team, I have creates one alert and I used below API to forcefully excute it. Also state is not changing from state" : "awaits\_successful\_execution" to "ack" POST \_watcher/watch/07342ab5-b6ee-4086-97b6-8a9eb17f39… --- ## [Java api client structuring aggregation](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981)
**Author:** [@Arun\_Nath](https://discuss.elastic.co/u/Arun_Nath)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 3:14pm UTC](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981 "2022-01-05T15:14:44Z")
Hi , Can anyone please share how to structure subAggregations using java api client . I have a code in java rest high level client using AggregationBuilders and was looking forward to upgrade to java api client . Code … --- ## [Reloads search analyzers are unsupported for tokenizer user\_dictionary](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 1:26pm UTC](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546 "2022-01-05T13:26:56Z")
Thesaurus is dynamically loaded but the tokenizer doesn't seem to have a related user\_dictionary, so is there a way to do it? --- ## [Elasticsearch 7.16.2 on M1 Max under Docker (ARM) aggressive throttling while indexing](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468 "2022-01-05T14:56:39Z")
Hey folks, I've been struggling a bit with Elasticsearch 7.16.2 running under Docker on my MacBook Pro M1 Max (64 GB RAM, 8 TB SSD). I have a job running under Ruby on Rails 6.1 with the most recent Elasticsearch Ruby … --- ## [Filebeat could not send to the kafka](https://discuss.elastic.co/t/filebeat-could-not-send-to-the-kafka/293528)
**Author:** [@flover97](https://discuss.elastic.co/u/flover97)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-could-not-send-to-the-kafka/293528 "2022-01-05T14:41:29Z")
Hello everyone, I ran into a problem that filebeat does not send data to kafka. Filebeat connects exactly to the kafka as it creates an empty topic, but the data does not come, I see no errors in the debug. Could there b… --- ## [Log4j2 issue](https://discuss.elastic.co/t/log4j2-issue/291776)
**Author:** [@umangpatel](https://discuss.elastic.co/u/umangpatel)\ **Replies:** 2\ **Last updated:** [January 5, 2022, 2:33pm UTC](https://discuss.elastic.co/t/log4j2-issue/291776 "2022-01-05T14:33:31Z")
I have this mentioned 2 jar file... 1.)log4j-1.2.17.jar 2.)apache-log4j-extras-1.2.17.jar does this 2 jar affect any vulnerability? and yes so what changes required from our end please suggest. --- ## [Replace document vs update document](https://discuss.elastic.co/t/replace-document-vs-update-document/293549)
**Author:** [@AhmadHamouda](https://discuss.elastic.co/u/AhmadHamouda)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/replace-document-vs-update-document/293549 "2022-01-05T14:28:14Z")
Ill have documents which contain json ex: {id:100, usersIds: \[1,2,54\]} Ill need to update userIds adding some new ids and removing some exist ids My question is it better to replace the whole document or do update oper… --- ## [Copy values from one field to another within a nested object](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478)
**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478 "2022-01-05T14:18:45Z")
I have a document that has the structure with an field object with a nested field internally. The nested field is responsible for storing all interactions that occurred in an internal communication. It happens that I ne… --- ## [Python library for Kibana API?](https://discuss.elastic.co/t/python-library-for-kibana-api/293534)
**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 1:53pm UTC](https://discuss.elastic.co/t/python-library-for-kibana-api/293534 "2022-01-05T13:53:48Z")
Hi i would like to create MaaC, so need features like importing/exporting/deleting objects( visualizations, dashboards, index-patterns, watchers). I know that there is experimental kibana API but is there any library to … --- ## [How to filter out values in tabel](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535)
**Author:** [@ge3k](https://discuss.elastic.co/u/ge3k)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535 "2022-01-05T13:24:56Z")
Hello, I'm trying to create a table, where there would be @timestamp of event, source IP and count of occurrences when someone tried/succeeded to connect to a specific network port. But I only manage to create a tab… --- ## [Fetch .kibana indices that end with integer](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544 "2022-01-05T13:21:46Z")
Hi everyone I want to only fetch those kibana indices that end with integer like this .kibana\_1, .kibana\_2 etc I know how to fetch all indices that start with .kibana text using following curl command that I have typed… --- ## [Java Api Client TermsQueryBuilder how to add terms from collection of strings](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464)
**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\ **Replies:** 3\ **Last updated:** [January 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464 "2022-01-05T13:17:13Z")
Hello. The only available method is by ObjectBuilder value(List v) method. Why there is no option to add just a list of Strings? I am using Elasticsearch-java-7.16.2 version --- ## [Collecting JMX statistics from every single pod](https://discuss.elastic.co/t/collecting-jmx-statistics-from-every-single-pod/293540)
**Author:** [@ezopek3](https://discuss.elastic.co/u/ezopek3)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 12:57pm UTC](https://discuss.elastic.co/t/collecting-jmx-statistics-from-every-single-pod/293540 "2022-01-05T12:57:33Z")
Hello, As my goal, I want to use Jolokia JVM agent with Metricbeat Kubernetes autodiscovery (with Jolokia module) to monitor my Java application statistics. Usually, we use Deployments to deploy our applications with s… --- ## [How to interpret filebeat logs?](https://discuss.elastic.co/t/how-to-interpret-filebeat-logs/293524)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 10:47am UTC](https://discuss.elastic.co/t/how-to-interpret-filebeat-logs/293524 "2022-01-05T10:47:12Z")
Hi, I'm running filebeat 7.14.0 to ingest Netflow data, which is then stored in Elasticsearch and viewed on Kibana. When I run "filebeat -e", I will see some logs generated by filebeat every 30s. The logs are similar to… --- ## [Calculated the sum of blank per doc](https://discuss.elastic.co/t/calculated-the-sum-of-blank-per-doc/293516)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 0\ **Last updated:** [January 5, 2022, 10:07am UTC](https://discuss.elastic.co/t/calculated-the-sum-of-blank-per-doc/293516 "2022-01-05T10:07:31Z")
Hi, Have a data structure doc like attached, I want to create a field which is the calculation of sum of blanks per doc or per ID So a field "total blank" with above example should be like "total blank" 3 2 1 … --- ## [Migrating Java Rest Client to Java Api Client](https://discuss.elastic.co/t/migrating-java-rest-client-to-java-api-client/293337)
**Author:** [@Swati\_Jain1](https://discuss.elastic.co/u/Swati_Jain1)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 9:56am UTC](https://discuss.elastic.co/t/migrating-java-rest-client-to-java-api-client/293337 "2022-01-05T09:56:51Z")
After upgrading Elasticsearch to 7.16.2, Elasticsearch Java Rest Client seems to be deprecated. We are migrating to Java API client which lacks proper documentation. Please help. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1104) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1106)