# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1519 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1520 --- ## [Check if id exist in array field or not using script\_fields](https://discuss.elastic.co/t/check-if-id-exist-in-array-field-or-not-using-script-fields/266453)
**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\ **Replies:** 1\ **Last updated:** [March 8, 2021, 9:08am UTC](https://discuss.elastic.co/t/check-if-id-exist-in-array-field-or-not-using-script-fields/266453 "2021-03-08T09:08:16Z")
Hi, i like to get a script field if a specific value exist in a array . Here is my mapping - "mappings": { "properties": { "field1": { "type": "text", }, "field2": { … --- ## [Visit elastic web 403](https://discuss.elastic.co/t/visit-elastic-web-403/266501)
**Author:** [@guangyao\_wang](https://discuss.elastic.co/u/guangyao_wang)\ **Replies:** 5\ **Last updated:** [March 8, 2021, 8:55am UTC](https://discuss.elastic.co/t/visit-elastic-web-403/266501 "2021-03-08T08:55:55Z")
--- ## [Monitor mysql user querries activity](https://discuss.elastic.co/t/monitor-mysql-user-querries-activity/266526)
**Author:** [@Radhouane](https://discuss.elastic.co/u/Radhouane)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 8:53am UTC](https://discuss.elastic.co/t/monitor-mysql-user-querries-activity/266526 "2021-03-08T08:53:51Z")
Hello, I am new to ELK stacking so I am trying to check all its capabilities. Actually, I am trying to monitor mysql database and see what information I can get using beats agents. One thing I can't find is user/login… --- ## [Metricbeat Error : instance/beat.go:971 Exiting: missing field accessing 'metricbeat.modules.0.hosts.0' (source:'metricbeat.yml'](https://discuss.elastic.co/t/metricbeat-error-instance-beat-go-971-exiting-missing-field-accessing-metricbeat-modules-0-hosts-0-source-metricbeat-yml/266520)
**Author:** [@vbharath2007](https://discuss.elastic.co/u/vbharath2007)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 8:27am UTC](https://discuss.elastic.co/t/metricbeat-error-instance-beat-go-971-exiting-missing-field-accessing-metricbeat-modules-0-hosts-0-source-metricbeat-yml/266520 "2021-03-08T08:27:11Z")
Hi, I'm trying to deploy metric beat in our environment using helm charts 7.11.2, but the pods are crashing due to below error. Please help me to fix this issue... 2021-03-08T08:09:50.607Z INFO instance/beat.go:304 Se… --- ## [Index.codec option](https://discuss.elastic.co/t/index-codec-option/266478)
**Author:** [@jungsoo](https://discuss.elastic.co/u/jungsoo)\ **Replies:** 1\ **Last updated:** [March 8, 2021, 8:18am UTC](https://discuss.elastic.co/t/index-codec-option/266478 "2021-03-08T08:18:36Z")
Hello, I have a question about index.codec. I have been reading document about index settings. (https://www.elastic.co/guide/en/elasticsearch/reference/6.2/index-modules.html) While I was testing index.codec, I realiz… --- ## [Error managing RECOVERED alerts](https://discuss.elastic.co/t/error-managing-recovered-alerts/265957)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 2\ **Last updated:** [March 8, 2021, 7:39am UTC](https://discuss.elastic.co/t/error-managing-recovered-alerts/265957 "2021-03-08T07:39:57Z")
Hi, After configure some alerts for metrics using "Inventory" and "Metrics threshold" types and setting up one index connector, Kibana is constantly creating RECOVERED records into my index without fired cases. Actuall… --- ## [Verify whether logstash is receiving data or not](https://discuss.elastic.co/t/verify-whether-logstash-is-receiving-data-or-not/266515)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 7:04am UTC](https://discuss.elastic.co/t/verify-whether-logstash-is-receiving-data-or-not/266515 "2021-03-08T07:04:37Z")
Hi, I am using beats input plugin and sending data to logstash. Logstash hangs frequently and putting back pressure on filebeat. As part of debugging I am using below curl command to test whether filebeat is able to co… --- ## [Elasticsearch Http Cors Setting - multiple domains](https://discuss.elastic.co/t/elasticsearch-http-cors-setting-multiple-domains/266514)
**Author:** [@sb\_jeong](https://discuss.elastic.co/u/sb_jeong)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-http-cors-setting-multiple-domains/266514 "2021-03-08T06:44:34Z")
Hi, everyone. I have a question while using elasticsearch in k8s environment because I have a question. Is there a way to create multiple domains in the http.cors.allow-origin: option? For example http.cors.allow-orig… --- ## [Metricbeat Error: data path already locked by another beat](https://discuss.elastic.co/t/metricbeat-error-data-path-already-locked-by-another-beat/266503)
**Author:** [@bob96589](https://discuss.elastic.co/u/bob96589)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 3:52am UTC](https://discuss.elastic.co/t/metricbeat-error-data-path-already-locked-by-another-beat/266503 "2021-03-08T03:52:10Z")
Steps to reproduce (run the following command in terminal): docker run -d --name metricbeat docker.elastic.co/beats/metricbeat:7.11.1 docker exec -it metricbeat metricbeat -e Error: 2021-03-08T03:29:41.319Z … --- ## [Filebeat CheckPoint Module](https://discuss.elastic.co/t/filebeat-checkpoint-module/265922)
**Author:** [@Kaarthick](https://discuss.elastic.co/u/Kaarthick)\ **Replies:** 2\ **Last updated:** [March 8, 2021, 5:17am UTC](https://discuss.elastic.co/t/filebeat-checkpoint-module/265922 "2021-03-08T05:17:54Z")
Hi Team, I'm using filebeat 7.10.0 and am new to filebeat. I have enabled the checkpoint module for parsing the checkpoint logs of different event types. So in checkpoint.yml i have configured input as - module: ch… --- ## [Filebeat pods restarting with "fatal error: concurrent map read and map write"](https://discuss.elastic.co/t/filebeat-pods-restarting-with-fatal-error-concurrent-map-read-and-map-write/265961)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 11:44am UTC](https://discuss.elastic.co/t/filebeat-pods-restarting-with-fatal-error-concurrent-map-read-and-map-write/265961 "2021-03-03T11:44:26Z")
I have deployed Filebeat -\> Logstash -\> elasticseach -\> kibana in OKD-3.11 running on Openstack Centos-7.6 VMs. Using oss docker images for the deployment. docker.elastic.co/beats/filebeat-oss:7.9.3 docker.elastic.co/l… --- ## [Logstash Load balancing configuration](https://discuss.elastic.co/t/logstash-load-balancing-configuration/266504)
**Author:** [@gurumurthy](https://discuss.elastic.co/u/gurumurthy)\ **Replies:** 0\ **Last updated:** [March 8, 2021, 3:58am UTC](https://discuss.elastic.co/t/logstash-load-balancing-configuration/266504 "2021-03-08T03:58:16Z")
For beats data we're trying to set up logstash load balancing. I see that I can only have one logstash SSL certificate in beats conf. Two logstash instances are created with separate SSL certificates, If I use respective… --- ## [Unable to change state Active: Running of Elasticsearch](https://discuss.elastic.co/t/unable-to-change-state-active-running-of-elasticsearch/266195)
**Author:** [@Salmankazmi](https://discuss.elastic.co/u/Salmankazmi)\ **Replies:** 1\ **Last updated:** [March 8, 2021, 3:57am UTC](https://discuss.elastic.co/t/unable-to-change-state-active-running-of-elasticsearch/266195 "2021-03-08T03:57:54Z")
Hi, I'm using VM via Putty. Filebeat and kibana are in Running status but Elasticsearch is in Failed state. --- ## [Creating indices of older days too](https://discuss.elastic.co/t/creating-indices-of-older-days-too/266492)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 11:15pm UTC](https://discuss.elastic.co/t/creating-indices-of-older-days-too/266492 "2021-03-07T23:15:16Z")
Hi I have deployed filebeat and logstash helm chart in eks. I am sending logs to amazon es. I am facing a similar issue https://github.com/uken/fluent-plugin-elasticsearch/issues/482, but in filebeat do we have optio… --- ## [ILM policy not showing Rollover options](https://discuss.elastic.co/t/ilm-policy-not-showing-rollover-options/266485)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 2\ **Last updated:** [March 7, 2021, 10:56pm UTC](https://discuss.elastic.co/t/ilm-policy-not-showing-rollover-options/266485 "2021-03-07T22:56:25Z")
I am unable to see the index rollover options in the ILM policy. Can some one help me? --- ## [Auditbeat wont start](https://discuss.elastic.co/t/auditbeat-wont-start/266491)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 10:00pm UTC](https://discuss.elastic.co/t/auditbeat-wont-start/266491 "2021-03-07T22:00:53Z")
I get 3 different errors msgs: unable to guess one or more required parameters: guess\_sockaddr\_in failed -or- unable to guess one or more required parameters: guess\_udp\_sendmsg failed -or- unable to guess one or mor… --- ## [Rapid7 InsightVM Nexpose integration missing in 7.11.0](https://discuss.elastic.co/t/rapid7-insightvm-nexpose-integration-missing-in-7-11-0/265238)
**Author:** [@florinsfetea](https://discuss.elastic.co/u/florinsfetea)\ **Replies:** 1\ **Last updated:** [March 7, 2021, 9:54pm UTC](https://discuss.elastic.co/t/rapid7-insightvm-nexpose-integration-missing-in-7-11-0/265238 "2021-03-07T21:54:22Z")
I had previously(7.9) configured a Fleet policy with Rapid7 Nexpose integration. Now after migrating to 7.11.0 my policy is there but the integration is failing. Also if I search for the integration itself I cannot… --- ## [How to query latest record for each record type in data table inside canvas](https://discuss.elastic.co/t/how-to-query-latest-record-for-each-record-type-in-data-table-inside-canvas/265132)
**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\ **Replies:** 4\ **Last updated:** [March 7, 2021, 8:51pm UTC](https://discuss.elastic.co/t/how-to-query-latest-record-for-each-record-type-in-data-table-inside-canvas/265132 "2021-03-07T20:51:29Z")
Hi, I have been struggling with what can or cannot be done in Kibana. One thing that we need is to query records from many data sources and be able to display the latest record for each data source. I googled around and… --- ## [Can I run Elastic 5.4 on an Apple M1?](https://discuss.elastic.co/t/can-i-run-elastic-5-4-on-an-apple-m1/266487)
**Author:** [@jchatard](https://discuss.elastic.co/u/jchatard)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 8:31pm UTC](https://discuss.elastic.co/t/can-i-run-elastic-5-4-on-an-apple-m1/266487 "2021-03-07T20:31:48Z")
Hi all, I know ARM was not supported until 7.8, but I have an application which still runs amazingly using 5.4 elasticsearch, and now that I have an Apple M1, I could transition all my docker images to ARM, except for E… --- ## [Looping through nested aggregations error](https://discuss.elastic.co/t/looping-through-nested-aggregations-error/266408)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 1\ **Last updated:** [March 7, 2021, 8:08pm UTC](https://discuss.elastic.co/t/looping-through-nested-aggregations-error/266408 "2021-03-07T20:08:37Z")
hi all, i have serial difference metric aggregation, and need to filter those documents, whose delta or value is greater than zero ...need to loop through all aggregations in condition and check for value \>0 ( where Val… --- ## [If Statement in Painless Script for Kibana's Bucket Script](https://discuss.elastic.co/t/if-statement-in-painless-script-for-kibanas-bucket-script/266418)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 3\ **Last updated:** [March 7, 2021, 7:10pm UTC](https://discuss.elastic.co/t/if-statement-in-painless-script-for-kibanas-bucket-script/266418 "2021-03-07T19:10:04Z")
Hello, Is there a good tutorial for using Painless Script in the Kibana's TSVB Bucket Script aggregation? I'm trying to do a "if" condition, as follow: If the value is less than 0, add 2^32. How to do that? --- ## [Best way to load a pcap file into elasticsearch 7.11](https://discuss.elastic.co/t/best-way-to-load-a-pcap-file-into-elasticsearch-7-11/266483)
**Author:** [@humbaw](https://discuss.elastic.co/u/humbaw)\ **Replies:** 1\ **Last updated:** [March 7, 2021, 6:58pm UTC](https://discuss.elastic.co/t/best-way-to-load-a-pcap-file-into-elasticsearch-7-11/266483 "2021-03-07T18:58:08Z")
Hi. I'm using elasticsearch 7.11 and I would like to ingest a pcap file into elasticsearch and kibana. What would be the best way to do this I tried using the analyzing network packets guide(https://www.elastic.co/… --- ## [Help me writing grook filter pattern for my log to injest into elasticsearch](https://discuss.elastic.co/t/help-me-writing-grook-filter-pattern-for-my-log-to-injest-into-elasticsearch/266423)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 4\ **Last updated:** [March 7, 2021, 5:36pm UTC](https://discuss.elastic.co/t/help-me-writing-grook-filter-pattern-for-my-log-to-injest-into-elasticsearch/266423 "2021-03-07T17:36:27Z")
These are few sample log lines 74128 2021-01-25T23:28:42.753582Z - xyz svn/repos get-latest-rev 74128 2021-01-25T23:28:43.030543Z - xyz svn/repos reparent /sm/branches/6.0r 74128 2021-01-25T23:28:43.307469Z - xyz svn/… --- ## [Query string query fuzzy performance](https://discuss.elastic.co/t/query-string-query-fuzzy-performance/266356)
**Author:** [@nbiondic](https://discuss.elastic.co/u/nbiondic)\ **Replies:** 2\ **Last updated:** [March 7, 2021, 5:27pm UTC](https://discuss.elastic.co/t/query-string-query-fuzzy-performance/266356 "2021-03-07T17:27:32Z")
Hi there, we're trying to optimize performance of our search and have run into an issue we need help with. We use the query\_string query to allow our customers to execute boolean queries on the data. We also allow fuzz… --- ## [Longer queries return a lot of search results](https://discuss.elastic.co/t/longer-queries-return-a-lot-of-search-results/266481)
**Author:** [@vastevenson](https://discuss.elastic.co/u/vastevenson)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 4:52pm UTC](https://discuss.elastic.co/t/longer-queries-return-a-lot-of-search-results/266481 "2021-03-07T16:52:05Z")
When users type in queries like "Italy was cool and nice", my search query returns nearly every document in my index. What are the best practices to improve precision of search results? I feel like the multi\_match should… --- ## [Tests ignores during sonarqube build](https://discuss.elastic.co/t/tests-ignores-during-sonarqube-build/266480)
**Author:** [@simon\_dcm](https://discuss.elastic.co/u/simon_dcm)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 3:45pm UTC](https://discuss.elastic.co/t/tests-ignores-during-sonarqube-build/266480 "2021-03-07T15:45:48Z")
Hello, I need to study the properties / statistics of the elasticsearch project as a student project. I'm using sonarqube but during the build, all tests are ignored and then there is no information about tests, coverag… --- ## [Independent Y axes for dual axis wrapped facet](https://discuss.elastic.co/t/independent-y-axes-for-dual-axis-wrapped-facet/265992)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 5\ **Last updated:** [March 7, 2021, 3:04pm UTC](https://discuss.elastic.co/t/independent-y-axes-for-dual-axis-wrapped-facet/265992 "2021-03-07T15:04:34Z")
Hello, My requirement is to get dual axis charts in wrapped facet as in below link. I have used the same code with my data , but wasn't getting independent Y axes for dual charts as below : { "$schema": "https:… --- ## [Analyzing navigation paths](https://discuss.elastic.co/t/analyzing-navigation-paths/266068)
**Author:** [@Faycal](https://discuss.elastic.co/u/Faycal)\ **Replies:** 2\ **Last updated:** [March 7, 2021, 2:35pm UTC](https://discuss.elastic.co/t/analyzing-navigation-paths/266068 "2021-03-07T14:35:37Z")
Hello, i'm saving the url visited of my site as single documents with a visitID and the timestamp of the impression. I'd like to "count" the navigation paths inside a visit of my visitors. example home.html -\> catalo… --- ## [Practical scoring function](https://discuss.elastic.co/t/practical-scoring-function/266473)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 0\ **Last updated:** [March 7, 2021, 12:28pm UTC](https://discuss.elastic.co/t/practical-scoring-function/266473 "2021-03-07T12:28:50Z")
Hi everyone. I am currently working on figuring out the practical scoring function of elastic search queries. I would like to know what scores give bad text or semantic similarity. What is the threshold that shows little… --- ## [Logstash not working!](https://discuss.elastic.co/t/logstash-not-working/264983)
**Author:** [@Mohyden](https://discuss.elastic.co/u/Mohyden)\ **Replies:** 9\ **Last updated:** [March 7, 2021, 5:17am UTC](https://discuss.elastic.co/t/logstash-not-working/264983 "2021-03-07T05:17:27Z")
Hello, I'm running Ubuntu 16.04. When I try to start Logstash with systemctl start logstash, and then systemctl status logstash, it shows these: logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1518) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1520)