# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1466 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1467 --- ## [Collapsible TreeFlow](https://discuss.elastic.co/t/collapsible-treeflow/269283)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 3:05pm UTC](https://discuss.elastic.co/t/collapsible-treeflow/269283 "2021-04-12T15:05:38Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [Is there any alternate way for connecting Elasticsearch from C++ code except ODBC?](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 6\ **Last updated:** [April 12, 2021, 2:47pm UTC](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837 "2021-04-12T14:47:06Z")
I tried fetching data of Elasticsearch from C++ code using Elasticsearch ODBC. As elasticsearch is known for its fast fetching speed, I'm not getting the expected performance using ODBC as compared to other RDBMS. So, ca… --- ## [Dropdown custom field aggregation](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269596)
**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 2:19pm UTC](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269596 "2021-04-12T14:19:51Z")
HELLO, i'm new in ELK i have table id | f1 | f2 | f3 0 | 10| 15| 2 1 | 30| 5 | 9 2 | 1 | 75| 6 i want to create a dropdown list. that list contain a multi choice (x1 x2 x3) if i choice x1 so the result should be … --- ## [Enrich policy access "\_id" field](https://discuss.elastic.co/t/enrich-policy-access-id-field/269868)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 2:15pm UTC](https://discuss.elastic.co/t/enrich-policy-access-id-field/269868 "2021-04-12T14:15:42Z")
I am trying to use an enrich policy to match on a filename and return the \_id fields of that doc to add in as a field in my secondary index. I have two indexes the first has 1 entry with field 'filename'. The second inde… --- ## [Multiple Tenant in O365 module from Filebeat](https://discuss.elastic.co/t/multiple-tenant-in-o365-module-from-filebeat/269445)
**Author:** [@Sebdb3](https://discuss.elastic.co/u/Sebdb3)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 2:14pm UTC](https://discuss.elastic.co/t/multiple-tenant-in-o365-module-from-filebeat/269445 "2021-04-12T14:14:52Z")
Hello everyone ! I recently added the o365 filebeat module for my tenant to a server. Good news it works perfectly but I wanted to add another tenant o365 on the same server, I didn't find any information about that. … --- ## [Errors with authentication to Active Directory](https://discuss.elastic.co/t/errors-with-authentication-to-active-directory/269835)
**Author:** [@rebirther](https://discuss.elastic.co/u/rebirther)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 2:13pm UTC](https://discuss.elastic.co/t/errors-with-authentication-to-active-directory/269835 "2021-04-12T14:13:54Z")
Hello! Please help with this problem! Objective: to implement login to KIbana through authentication in Active Directory. Version Elasticsearch and Kibana: 7.12.0 elastisearch.yml: node.name: node2 node.roles: \[ mas… --- ## [AnomalyDetection: Last bucket is not processed (bug?)](https://discuss.elastic.co/t/anomalydetection-last-bucket-is-not-processed-bug/268715)
**Author:** [@eudaco](https://discuss.elastic.co/u/eudaco)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 1:48pm UTC](https://discuss.elastic.co/t/anomalydetection-last-bucket-is-not-processed-bug/268715 "2021-04-12T13:48:51Z")
Hello everybody. I have faced, as it seems to me, with strange behavior of anomaly detection jobs. The last bucket is not processed when the model\_plot\_config is enabled. For example, when I use a bucket size "1d", th… --- ## [Unable to install Kibana on Windows](https://discuss.elastic.co/t/unable-to-install-kibana-on-windows/269743)
**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 1:39pm UTC](https://discuss.elastic.co/t/unable-to-install-kibana-on-windows/269743 "2021-04-12T13:39:25Z")
Hello, Kibana Version: 7.12.0- Windows I am unable to install Kibana though the Elastic search is up and running on http://localhost:9200/. The following are the commands I ran in Command prompt C:\>cd C:\\kibana\\kiban… --- ## [Logstash 7.9 high CPU, RAM and hangs when a unicode message is received by syslog input](https://discuss.elastic.co/t/logstash-7-9-high-cpu-ram-and-hangs-when-a-unicode-message-is-received-by-syslog-input/269885)
**Author:** [@ivorthe3ngine](https://discuss.elastic.co/u/ivorthe3ngine)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 1:36pm UTC](https://discuss.elastic.co/t/logstash-7-9-high-cpu-ram-and-hangs-when-a-unicode-message-is-received-by-syslog-input/269885 "2021-04-12T13:36:45Z")
Hi All, any assistance on this issue would be most appreciated. On receiving the following message, logstash stopped processing any further incoming messages and began consuming high CPU. Version: 7.9.0 Operating Syst… --- ## [Elasticsearch connection to kiabana](https://discuss.elastic.co/t/elasticsearch-connection-to-kiabana/269870)
**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-to-kiabana/269870 "2021-04-12T12:52:04Z")
HI team, I am having 2 instances, elasticsearch on 1 instance and kiabana on another instance. can u please help how to establish a connection between these es and kibana. \[image\] --- ## [Logstash](https://discuss.elastic.co/t/logstash/269583)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 12:03pm UTC](https://discuss.elastic.co/t/logstash/269583 "2021-04-12T12:03:12Z")
hi i hope this message finds you well , so how can configure High availibility between 2 logstash ? regards --- ## [Use Existing Claim in Helm chart](https://discuss.elastic.co/t/use-existing-claim-in-helm-chart/269873)
**Author:** [@Balha](https://discuss.elastic.co/u/Balha)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 11:54am UTC](https://discuss.elastic.co/t/use-existing-claim-in-helm-chart/269873 "2021-04-12T11:54:21Z")
Hello, I've installed elastic search with helm chart in k8s and want to specify an existing volume claim as vaules . Dose the chart support this feacher ? Br, Bilel --- ## [PacketBeats Oracle support](https://discuss.elastic.co/t/packetbeats-oracle-support/268582)
**Author:** [@tmihaldinec](https://discuss.elastic.co/u/tmihaldinec)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 11:36am UTC](https://discuss.elastic.co/t/packetbeats-oracle-support/268582 "2021-04-12T11:36:24Z")
Dear all, is there any plan to support Oracle with packetbeat? Most of system we use are using Oracle DB and it would be awesome to have this feature Thanks tomislav --- ## [Multiple pipelines](https://discuss.elastic.co/t/multiple-pipelines/269867)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 11:07am UTC](https://discuss.elastic.co/t/multiple-pipelines/269867 "2021-04-12T11:07:31Z")
hi, I have multiple inputs and I want to parse and enrich them by the project GitHub - Cargill/OpenSIEM-Logstash-Parsing: SIEM Logstash parsing for more than hundred technologies so how can I do that thanks --- ## [Painless - New Calculated field as a .keyword extension](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632)
**Author:** [@Raynb](https://discuss.elastic.co/u/Raynb)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 10:52am UTC](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632 "2021-04-12T10:52:22Z")
In our data we have a page field with URLs and some come in as /blog/really-good-content/ and others come as /blog/really-good-content (the lack of trailing slash) So in Painless I've made a scipted field to merge these… --- ## [How to understand "Strings longer than the ignore\_above setting will not be indexed or stored."?](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859)
**Author:** [@light\_chen](https://discuss.elastic.co/u/light_chen)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 10:41am UTC](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859 "2021-04-12T10:41:12Z")
I want to verify whether my understanding about the meaning that the glossary "not be indexed" and "not be stored" is right. I suppose "not be indexed" means that the terms analysed from the original field value will n… --- ## [Aggregation with java High Level Rest Client](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699)
**Author:** [@adelDz](https://discuss.elastic.co/u/adelDz)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 10:30am UTC](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699 "2021-04-12T10:30:38Z")
Hello, How to convert this Query Sql with java High Level Rest Client // select count(\*) from Customer group by Last\_Name, First\_Name, City Thank you in advance --- ## [REST calls from frontend](https://discuss.elastic.co/t/rest-calls-from-frontend/269788)
**Author:** [@elasticuser7](https://discuss.elastic.co/u/elasticuser7)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 10:09am UTC](https://discuss.elastic.co/t/rest-calls-from-frontend/269788 "2021-04-12T10:09:26Z")
Since ES provides a REST api, with all the powerful frontend frameworks out there, it will be tempting to make ES REST calls directly from the frontend. Would it be recommended to make such client-side ES calls especial… --- ## [Elastic search : Can query include kind of a subquery or subqueries using multiple indices?](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443 "2021-04-12T10:01:21Z")
I have index1 with geo-point data, index2 with polygons. Index2 has multiple polygon rows for given say id value. I would like to find all geo-points from index1 that are inside any of the polygons from index2 having sa… --- ## [Need to restart filebeat time to time](https://discuss.elastic.co/t/need-to-restart-filebeat-time-to-time/269845)
**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 9:56am UTC](https://discuss.elastic.co/t/need-to-restart-filebeat-time-to-time/269845 "2021-04-12T09:56:36Z")
Hi i have issue on filebeat Logs are not showing every 6hours(approximately) in Kibana dashboard. After restarting the filebeat ,Kibana dashboard gets logs again .my filebeat needs to restart around every 6 hours to kee… --- ## [Filebeat setup error Request Time-out](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821)
**Author:** [@Leon2](https://discuss.elastic.co/u/Leon2)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 9:30am UTC](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821 "2021-04-12T09:30:09Z")
Hi I'm struggeling in setting up filebeat to work with elastic cloud instance. all I'm trying to do is enabling a module( without changing any config, yet) and uplouding dashboard setting from filebeat to elastic cloud … --- ## [Dynamic sync between Mongo to Elastic search with Kafka and Logstash spring application](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799)
**Author:** [@mikaell](https://discuss.elastic.co/u/mikaell)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 9:24am UTC](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799 "2021-04-12T09:24:37Z")
Greetings! in this sequence we want to talk about Data base Connectivity especially the dynamic sync between mongo and elastic search with the aid of Apache Kafka and Logstash for ingesting document beside that we want … --- ## [Unable to receive whitelist acceptance email from Elastic Monitoring](https://discuss.elastic.co/t/unable-to-receive-whitelist-acceptance-email-from-elastic-monitoring/269580)
**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 8:57am UTC](https://discuss.elastic.co/t/unable-to-receive-whitelist-acceptance-email-from-elastic-monitoring/269580 "2021-04-12T08:57:00Z")
Hello, I have set up a Machine Learning job with a watcher and assigned an email address to receive these. Reading through documentaion i can see that i need to add this to the Email Monitoring Whitelist, which i have … --- ## [Space consumption after reindex](https://discuss.elastic.co/t/space-consumption-after-reindex/269618)
**Author:** [@speechkey](https://discuss.elastic.co/u/speechkey)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 7:25am UTC](https://discuss.elastic.co/t/space-consumption-after-reindex/269618 "2021-04-12T07:25:27Z")
Hi folks we are trying to migrate from 5.5.1 to 7.10.2. After upgrade to 6.8 I'm trying to reindex indices which were created on 5.5.1. curl -sq -X POST "http://elasticsearch:9200/\_reindex?pretty" -H 'Content-Type: app… --- ## [Hiding Multi-Field Display In Discover](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 7:24am UTC](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720 "2021-04-12T07:24:46Z")
Is it possible to hide the display of multi-fields in Discover for Kibana 7.12? I like the capability, but it really clutters up the display of data for regular users. --- ## [Send alert when transform has stopped](https://discuss.elastic.co/t/send-alert-when-transform-has-stopped/269790)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 6:59am UTC](https://discuss.elastic.co/t/send-alert-when-transform-has-stopped/269790 "2021-04-12T06:59:48Z")
Hi, Is it possible to trigger an alert when a transform has stopped either by a user or from when it has failed? One option would be to check if no new entries appear in the transform index however it is expected that … --- ## [How to get JVM Memory used with metricbeat jolokia module](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828)
**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 6:49am UTC](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828 "2021-04-12T06:49:33Z")
I'm trying to use Jolokia + metricbeat to gather Info about the JVM Memory. I did everything like described in the docs but it won't work. https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-jo… --- ## [Elastic search reindexing stuck at 52000 docs while the source has more docs](https://discuss.elastic.co/t/elastic-search-reindexing-stuck-at-52000-docs-while-the-source-has-more-docs/269831)
**Author:** [@Nissha](https://discuss.elastic.co/u/Nissha)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 5:33am UTC](https://discuss.elastic.co/t/elastic-search-reindexing-stuck-at-52000-docs-while-the-source-has-more-docs/269831 "2021-04-12T05:33:39Z")
I am trying to reindex a source index which has 500k documents with new mapping but the reindexing gets stuck at 52000 docs and doesn't proceed. It worked perfectly for another index which had 190k docs. Kindly help me w… --- ## [Scripted fields defined in kibana - when executed?](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814)
**Author:** [@Marcin\_Kolny](https://discuss.elastic.co/u/Marcin_Kolny)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 4:24am UTC](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814 "2021-04-12T04:24:30Z")
Hi, I couldn't find the details in the documentation, so I hope somebody here will be able to help; I'm curious when the scripted field defined in Kibana is executed? Is it executed on each query, or does Elasticsearch … --- ## [Golang logstash?](https://discuss.elastic.co/t/golang-logstash/269610)
**Author:** [@wshek](https://discuss.elastic.co/u/wshek)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 2:51pm UTC](https://discuss.elastic.co/t/golang-logstash/269610 "2021-04-08T14:51:45Z")
Enable golang for your logstash pipe This is not a rewrite its an extensible idea. Has anyone come across this type idea before? I have used Elasticstack for quite some time now. I can tell you unequivocally that th… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1465) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1467)