# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1251

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1252

---

## [Kibana 7.14 - Canvas var\_set no longer accepts input context](https://discuss.elastic.co/t/kibana-7-14-canvas-var-set-no-longer-accepts-input-context/281420)

<div class="topic-metadata">

**Author:** [@markbyrnegkc](https://discuss.elastic.co/u/markbyrnegkc)\
**Replies:** 3\
**Last updated:** [September 7, 2021, 2:41am UTC](https://discuss.elastic.co/t/kibana-7-14-canvas-var-set-no-longer-accepts-input-context/281420 "2021-09-07T02:41:23Z")

</div>

In 7.14 the var\_set function in- Canvas no longer accepts the input context as the value. One needs to explicitly set the value now. Trying to run this expression: date | var\_set "mydate" | var "mydate" | render as="de…

---

## [Boost score on token order over proximity](https://discuss.elastic.co/t/boost-score-on-token-order-over-proximity/283126)

<div class="topic-metadata">

**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\
**Replies:** 2\
**Last updated:** [September 7, 2021, 1:21am UTC](https://discuss.elastic.co/t/boost-score-on-token-order-over-proximity/283126 "2021-09-07T01:21:55Z")

</div>

Hello, elastic team. Is there way to adjust score between proximity and order? I want to search by "any word in order with some slop". I found out that most of DSLs that matters with proximity and in order option cann…

---

## [Force shards to single node when changing phases](https://discuss.elastic.co/t/force-shards-to-single-node-when-changing-phases/283476)

<div class="topic-metadata">

**Author:** [@rschwa2](https://discuss.elastic.co/u/rschwa2)\
**Replies:** 5\
**Last updated:** [September 6, 2021, 11:52pm UTC](https://discuss.elastic.co/t/force-shards-to-single-node-when-changing-phases/283476 "2021-09-06T23:52:45Z")

</div>

We have 2 warm data nodes in our cluster, and 6 shards configured for each index. When an index migrates from hot to warm, the shards are evenly distributed across both warm nodes. However we also have a shrink action …

---

## [ILM - Warm phase index is showing up in Hot phase](https://discuss.elastic.co/t/ilm-warm-phase-index-is-showing-up-in-hot-phase/282788)

<div class="topic-metadata">

**Author:** [@Music91](https://discuss.elastic.co/u/Music91)\
**Replies:** 11\
**Last updated:** [September 6, 2021, 11:11pm UTC](https://discuss.elastic.co/t/ilm-warm-phase-index-is-showing-up-in-hot-phase/282788 "2021-09-06T23:11:48Z")

</div>

Team, One of the index i have created with routing policy set to warm but under the Lifecycle status the index is showing up under Hot. Any idea why it is showing in Hot when it is expected to show only in Warm. Please a…

---

## [Is it possible?](https://discuss.elastic.co/t/is-it-possible/281197)

<div class="topic-metadata">

**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\
**Replies:** 9\
**Last updated:** [September 6, 2021, 11:07pm UTC](https://discuss.elastic.co/t/is-it-possible/281197 "2021-09-06T23:07:33Z")

</div>

Can someone answer me this. I have a database with several configurations, and each configuration can be linked to the same serial\_number. To be able to analyze the data correctly, I need to filter så that each serial\_n…

---

## [To retrieve complete metricbeat data from the elasticsearch](https://discuss.elastic.co/t/to-retrieve-complete-metricbeat-data-from-the-elasticsearch/283112)

<div class="topic-metadata">

**Author:** [@nehasinha1807](https://discuss.elastic.co/u/nehasinha1807)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 11:01pm UTC](https://discuss.elastic.co/t/to-retrieve-complete-metricbeat-data-from-the-elasticsearch/283112 "2021-09-06T23:01:46Z")

</div>

I want to get full metricbeat data from elasticsearch in json through API. I tried with - /metricbeat\*/\_search but it is not giving complete data. Please suggest.

---

## [Logstash OSS License after 7.10 version](https://discuss.elastic.co/t/logstash-oss-license-after-7-10-version/283429)

<div class="topic-metadata">

**Author:** [@YashC](https://discuss.elastic.co/u/YashC)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 10:57pm UTC](https://discuss.elastic.co/t/logstash-oss-license-after-7-10-version/283429 "2021-09-06T22:57:07Z")

</div>

Hello, I am using logstash-oss docker image version 7.10.2, as it is based on Apache 2.0 license. Since Jan 2021 Elastic introduced a different license model starting from versions 7.11. However, there are still logst…

---

## [Joining aggregation results to the original documents](https://discuss.elastic.co/t/joining-aggregation-results-to-the-original-documents/282547)

<div class="topic-metadata">

**Author:** [@lyubimtsev](https://discuss.elastic.co/u/lyubimtsev)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 5:20pm UTC](https://discuss.elastic.co/t/joining-aggregation-results-to-the-original-documents/282547 "2021-09-06T17:20:21Z")

</div>

Hi I need help to create a query that creates metrics aggregations, merge created metrics to original documents and then filters documents using these metrics. Let's consider following dataset with managers' sales: …

---

## [Index rollover with date and time](https://discuss.elastic.co/t/index-rollover-with-date-and-time/283458)

<div class="topic-metadata">

**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 3:33pm UTC](https://discuss.elastic.co/t/index-rollover-with-date-and-time/283458 "2021-09-06T15:33:40Z")

</div>

Hi Community! I'm trying to create an index rollover with the date and hour when the new index is created because I set up the rollover every hour during the day. Having this in consideration, the format of the new inde…

---

## [Fleet Server - Error - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/283168)

<div class="topic-metadata">

**Author:** [@JimG](https://discuss.elastic.co/u/JimG)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 1:52pm UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/283168 "2021-09-06T13:52:13Z")

</div>

Hi everyone :slight\_smile: Im trying to make a test setup with a Ubuntu 20.04 , running with docker. I use docker-compose to make elastic agent/fleet server, but i cant make it work with a self signed certificate for f…

---

## [Edit custom labels on Kibana Visualizations](https://discuss.elastic.co/t/edit-custom-labels-on-kibana-visualizations/283272)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 1:41pm UTC](https://discuss.elastic.co/t/edit-custom-labels-on-kibana-visualizations/283272 "2021-09-06T13:41:28Z")

</div>

Kibana version 7.9.3 I'm trying to create a visualization of type Metric, and I see the visualization as attached in the screenshot. How do I get the label to read only Confirm Shipment - PORTUGAL and not Confirm Shipm…

---

## [Index pattern options alternatives](https://discuss.elastic.co/t/index-pattern-options-alternatives/283450)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 1:25pm UTC](https://discuss.elastic.co/t/index-pattern-options-alternatives/283450 "2021-09-06T13:25:50Z")

</div>

I tried Installing filebeat 7.14 in kubernetes on a new elastic cluster. In the old cluster I had over 5000 fields in the filebeat index pattern, which made it impossible to add new fields. In the new index in the new cl…

---

## [Convert Elasticsearch Date/Time field from UTC To Local Time?](https://discuss.elastic.co/t/convert-elasticsearch-date-time-field-from-utc-to-local-time/283441)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 9\
**Last updated:** [September 6, 2021, 1:11pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-date-time-field-from-utc-to-local-time/283441 "2021-09-06T13:11:52Z")

</div>

I am getting 12 Hours difference in Date. I want to set that date format to local time that is GMT+5. And I have set kibana default time period to Browser. Any one can help me how to set is as local time.

---

## [How to get all Field names with filter(or query) criteria on ElasticSearch?](https://discuss.elastic.co/t/how-to-get-all-field-names-with-filter-or-query-criteria-on-elasticsearch/283435)

<div class="topic-metadata">

**Author:** [@jinssssun](https://discuss.elastic.co/u/jinssssun)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 12:40pm UTC](https://discuss.elastic.co/t/how-to-get-all-field-names-with-filter-or-query-criteria-on-elasticsearch/283435 "2021-09-06T12:40:09Z")

</div>

PUT /test-product { "mappings": { "properties": { "profile": { "type": "nested" }, "product": { "type": "nested" } } } } i have a index that name's 'test-product' POS…

---

## [Sort data so that my exact match will be on top and then semi exact match with most words snd so on](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338)

<div class="topic-metadata">

**Author:** [@Jaymin](https://discuss.elastic.co/u/Jaymin)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 12:30pm UTC](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338 "2021-09-06T12:30:48Z")

</div>

I am using query\_string for searching my data. and wanted to sort my data such that exact match should be on top and less matched words would follow exact match. For Instance, { "size": 100, //"explain":true, "qu…

---

## [What is the difference between logstash and kibana pipelines?](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-and-kibana-pipelines/283420)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 11:55am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-and-kibana-pipelines/283420 "2021-09-06T11:55:52Z")

</div>

Hi! I have always used logstash but I would like to know if it could be replaced by kibana pipelines or if using kibana pipelines has any limitations thanks in advance!

---

## [Database file changed error](https://discuss.elastic.co/t/database-file-changed-error/281903)

<div class="topic-metadata">

**Author:** [@acezeus](https://discuss.elastic.co/u/acezeus)\
**Replies:** 13\
**Last updated:** [September 6, 2021, 11:38am UTC](https://discuss.elastic.co/t/database-file-changed-error/281903 "2021-09-06T11:38:42Z")

</div>

hello, i installed the elastic search for the first time along with kibana. everything was working fine until i switched off my pc for the day and started it the next morning. now when i try to start elasticsearch by ty…

---

## [Installation seems to hang](https://discuss.elastic.co/t/installation-seems-to-hang/281116)

<div class="topic-metadata">

**Author:** [@D-Groenewegen](https://discuss.elastic.co/u/D-Groenewegen)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 11:12am UTC](https://discuss.elastic.co/t/installation-seems-to-hang/281116 "2021-09-06T11:12:31Z")

</div>

Dear all, I hope you'll forgive me for my utter noobness. With the help of Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[7.14\] | Elastic, I tried installing ES for Linux. When I got to step…

---

## [Replace the kibana logo?](https://discuss.elastic.co/t/replace-the-kibana-logo/27547)

<div class="topic-metadata">

**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\
**Replies:** 60\
**Last updated:** [September 6, 2021, 10:33am UTC](https://discuss.elastic.co/t/replace-the-kibana-logo/27547 "2021-09-06T10:33:23Z")

</div>

Does anyone know if it is possible to replace the kibana logo with my company's logo? Only for corporate use.

---

## [Distance feature relevance score behaviour with boost \> 1](https://discuss.elastic.co/t/distance-feature-relevance-score-behaviour-with-boost-1/283386)

<div class="topic-metadata">

**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\
**Replies:** 0\
**Last updated:** [September 5, 2021, 9:00pm UTC](https://discuss.elastic.co/t/distance-feature-relevance-score-behaviour-with-boost-1/283386 "2021-09-05T21:00:30Z")

</div>

Hello, I am confused about the calculation of relevance scores with distance\_feature. In the documentation it says that: The distance\_feature query calculates a document’s relevance score as follows: relevance score …

---

## [Unable to test output with Filebeat to Elasticsearch](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654)

<div class="topic-metadata">

**Author:** [@jhaos](https://discuss.elastic.co/u/jhaos)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 9:38am UTC](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654 "2021-09-06T09:38:56Z")

</div>

Hi there, I'm trying to send the logs from Filebeat to Elasticsearch but I'm stuck with a problem regarding credentials or certification. I have the following configuration in filebeat.yml filebeat.modules: -…

---

## [How to manage high level client connection to Elasticsearch](https://discuss.elastic.co/t/how-to-manage-high-level-client-connection-to-elasticsearch/283410)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 9:31am UTC](https://discuss.elastic.co/t/how-to-manage-high-level-client-connection-to-elasticsearch/283410 "2021-09-06T09:31:17Z")

</div>

I wonder how to manage connection when using RestHighlevelClient in Java. The old connection is automatically disconnected. So I know that i need to connect and close when i need it. Is this right? So what is I to be ma…

---

## [Date filter plugin doesn't take the timezone into account when using ISO8601](https://discuss.elastic.co/t/date-filter-plugin-doesnt-take-the-timezone-into-account-when-using-iso8601/283306)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 9:14am UTC](https://discuss.elastic.co/t/date-filter-plugin-doesnt-take-the-timezone-into-account-when-using-iso8601/283306 "2021-09-06T09:14:37Z")

</div>

Hi, I'm trying to normalize some timestamps into UTC from CEST, so far I've had no issues whatsoever except for when the parsed timestamp is already in ISO8601. At first, I wasn't sure whether the date-filter-plugin was…

---

## [Find all indices belonging to box type hot](https://discuss.elastic.co/t/find-all-indices-belonging-to-box-type-hot/283415)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 9:00am UTC](https://discuss.elastic.co/t/find-all-indices-belonging-to-box-type-hot/283415 "2021-09-06T09:00:55Z")

</div>

Is there an easy way to find all indices belonging to box type hot? I know that I can run GET /\_nodes/box\_type:hot to get all the nodes, and then maybe run a second step to find which node an index belong to, but I’m tr…

---

## [Min aggregation issue](https://discuss.elastic.co/t/min-aggregation-issue/283171)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 8:46am UTC](https://discuss.elastic.co/t/min-aggregation-issue/283171 "2021-09-06T08:46:24Z")

</div>

If a min aggregation is used inside a terms aggregation, the result doesn't contain any buckets for the terms aggregation, as long as no mapping exists for the min aggregation field (e.g. there is no value for that field…

---

## [Query and sort inside nested object](https://discuss.elastic.co/t/query-and-sort-inside-nested-object/283404)

<div class="topic-metadata">

**Author:** [@Are](https://discuss.elastic.co/u/Are)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 8:29am UTC](https://discuss.elastic.co/t/query-and-sort-inside-nested-object/283404 "2021-09-06T08:29:51Z")

</div>

Edit: see step-by-step and deeper explanation in post below. I am trying to sort my search results based on a field inside a nested object. Running ES 7.9. The mapping of the nested object looks like this: { "metaDate…

---

## [How can I set X-Opaque-Id while using restHighLevelClient?](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-while-using-resthighlevelclient/283390)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:58am UTC](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-while-using-resthighlevelclient/283390 "2021-09-06T07:58:06Z")

</div>

Hi everyone. Can I set X-Opaque-Id while using restHighLevelClient so that I can trace it in the slow log. And if so, how to set? Any advice is helpful. best regards.

---

## [Server Up Time (Windows)](https://discuss.elastic.co/t/server-up-time-windows/281027)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:50am UTC](https://discuss.elastic.co/t/server-up-time-windows/281027 "2021-09-06T07:50:05Z")

</div>

Hi, Is there a way of returning the current up time values of a windows server. (Would it be the same approach for other os's if this were required). If have googled around but not been able to find anything, so any u…

---

## [Sheduled Tasks](https://discuss.elastic.co/t/sheduled-tasks/281024)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:48am UTC](https://discuss.elastic.co/t/sheduled-tasks/281024 "2021-09-06T07:48:43Z")

</div>

Is it possible to identify the state of a scheduled task. Not reading the event log and seeing if something has been written recently. I need to go the scheduled task and see what its actual state is. Is this possible…

---

## [Only one Logstash pipeline doesn't have uuid and appear in the Standalone Cluster](https://discuss.elastic.co/t/only-one-logstash-pipeline-doesnt-have-uuid-and-appear-in-the-standalone-cluster/283417)

<div class="topic-metadata">

**Author:** [@Musketeer7](https://discuss.elastic.co/u/Musketeer7)\
**Replies:** 0\
**Last updated:** [September 6, 2021, 7:44am UTC](https://discuss.elastic.co/t/only-one-logstash-pipeline-doesnt-have-uuid-and-appear-in-the-standalone-cluster/283417 "2021-09-06T07:44:26Z")

</div>

Hello everyone Firstly I should mention that I already know about the whole xpack.monitoring.cluster\_uuid thing that was fixed in this PR. However this doesn't seem to be the case here. I have a production cluster, wh…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1250)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1252)
