# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=374

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 375

---

## [How to change field from text, float to only float?](https://discuss.elastic.co/t/how-to-change-field-from-text-float-to-only-float/346958)

<div class="topic-metadata">

**Author:** [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\
**Replies:** 4\
**Last updated:** [November 15, 2023, 8:52am UTC](https://discuss.elastic.co/t/how-to-change-field-from-text-float-to-only-float/346958 "2023-11-15T08:52:12Z")

</div>

Hello there, We have an issue on one of our customer sites where a field is mapped as text, float rather than just float. I believe this is causing a grok timeout issue. The ELK stack is receiving logs from an applica…

---

## [Calculate time in different events](https://discuss.elastic.co/t/calculate-time-in-different-events/347198)

<div class="topic-metadata">

**Author:** [@StefanC](https://discuss.elastic.co/u/StefanC)\
**Replies:** 0\
**Last updated:** [November 15, 2023, 7:58am UTC](https://discuss.elastic.co/t/calculate-time-in-different-events/347198 "2023-11-15T07:58:51Z")

</div>

How is it possible to cacluate MBTF/availability of equipment within elastic? The events equipment available and unavailable come within different events. How is it possible to caculate the timedifference between @times…

---

## [Configure 2 log paths for filebeat and output 2 kafka topics and 2 indexes to display on kibana](https://discuss.elastic.co/t/configure-2-log-paths-for-filebeat-and-output-2-kafka-topics-and-2-indexes-to-display-on-kibana/346941)

<div class="topic-metadata">

**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\
**Replies:** 9\
**Last updated:** [November 15, 2023, 7:38am UTC](https://discuss.elastic.co/t/configure-2-log-paths-for-filebeat-and-output-2-kafka-topics-and-2-indexes-to-display-on-kibana/346941 "2023-11-15T07:38:52Z")

</div>

Hi team Elastic, I am configuring ELK according to the following flow: Filebeat\> kafka\>Logstash\>ES\>Kibana I need to monitor 2 logs paths on the server on kibana I want to configure those 2 paths as 2 separate kafka t…

---

## [Elastic Query Issue](https://discuss.elastic.co/t/elastic-query-issue/346861)

<div class="topic-metadata">

**Author:** [@rwire](https://discuss.elastic.co/u/rwire)\
**Replies:** 3\
**Last updated:** [November 15, 2023, 7:06am UTC](https://discuss.elastic.co/t/elastic-query-issue/346861 "2023-11-15T07:06:16Z")

</div>

We initially implemented proximity search using wildcard queries in Elasticsearch, but this approach couldn't accommodate all of our functional use cases. In some scenarios, we encountered an error due to the 128 combina…

---

## [Query logs](https://discuss.elastic.co/t/query-logs/347119)

<div class="topic-metadata">

**Author:** [@VijayIQA](https://discuss.elastic.co/u/VijayIQA)\
**Replies:** 2\
**Last updated:** [November 15, 2023, 3:24am UTC](https://discuss.elastic.co/t/query-logs/347119 "2023-11-15T03:24:21Z")

</div>

Hi Team, I have Elastic Cluster with 2 nodes. it acts as database. with test index how to know or how to monitor query response time.

---

## [How to check bucket size condition and change email action in watcher?](https://discuss.elastic.co/t/how-to-check-bucket-size-condition-and-change-email-action-in-watcher/347183)

<div class="topic-metadata">

**Author:** [@helloworld3112](https://discuss.elastic.co/u/helloworld3112)\
**Replies:** 0\
**Last updated:** [November 15, 2023, 3:27am UTC](https://discuss.elastic.co/t/how-to-check-bucket-size-condition-and-change-email-action-in-watcher/347183 "2023-11-15T03:27:06Z")

</div>

Hello everyone, I have a watcher: { "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "index-\*" \], "body": { "query": {"…

---

## [Watcher not working (8.10.4)](https://discuss.elastic.co/t/watcher-not-working-8-10-4/347092)

<div class="topic-metadata">

**Author:** [@laripour](https://discuss.elastic.co/u/laripour)\
**Replies:** 1\
**Last updated:** [November 15, 2023, 1:03am UTC](https://discuss.elastic.co/t/watcher-not-working-8-10-4/347092 "2023-11-15T01:03:13Z")

</div>

Hi everyone i have generated new plugin with "node scripts/generate\_plugin" command but kibana (in dev mode with "yarn start" command) does not recognize new changes in server side files. tahnks.

---

## [Error Creating S3 Repository](https://discuss.elastic.co/t/error-creating-s3-repository/347178)

<div class="topic-metadata">

**Author:** [@Ben\_GSP](https://discuss.elastic.co/u/Ben_GSP)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:57pm UTC](https://discuss.elastic.co/t/error-creating-s3-repository/347178 "2023-11-14T23:57:15Z")

</div>

I'm getting the following error when attempting to create a new s3 repository: { "error": { "root\_cause": \[ { "type": "repository\_exception", "reason": "\[s3\_01\] Could not determine repository…

---

## [Query with AND operator across inner hits of a document?](https://discuss.elastic.co/t/query-with-and-operator-across-inner-hits-of-a-document/347175)

<div class="topic-metadata">

**Author:** [@cphramington](https://discuss.elastic.co/u/cphramington)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:40pm UTC](https://discuss.elastic.co/t/query-with-and-operator-across-inner-hits-of-a-document/347175 "2023-11-14T23:40:46Z")

</div>

I'm currently using a query like this to prioritize hits that contain multiple terms from the query string over those that contain fewer. "nested": { "path": "my\_nested\_fie…

---

## [How to set kibana timepicker of the date and hour in the data](https://discuss.elastic.co/t/how-to-set-kibana-timepicker-of-the-date-and-hour-in-the-data/347143)

<div class="topic-metadata">

**Author:** [@Dilpreet](https://discuss.elastic.co/u/Dilpreet)\
**Replies:** 2\
**Last updated:** [November 14, 2023, 11:26pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-timepicker-of-the-date-and-hour-in-the-data/347143 "2023-11-14T23:26:42Z")

</div>

Hello All, I want to set the timepicker in kibana dashboard to the latest date and time. For context : I have data for multiple accounts. Each account runs on a different time in a day. So I want to show the data in da…

---

## [Using Elastic Defend with VPN](https://discuss.elastic.co/t/using-elastic-defend-with-vpn/347174)

<div class="topic-metadata">

**Author:** [@totobarbar](https://discuss.elastic.co/u/totobarbar)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:24pm UTC](https://discuss.elastic.co/t/using-elastic-defend-with-vpn/347174 "2023-11-14T23:24:52Z")

</div>

Hello, I use Elastic-Agent with Wireguard like this: I use a vpn because I don't want to expose my elasticsearch cluster on the internet I configured the Wireguard client to run on a custom network namespace where …

---

## [GrokProcessor unescaped character](https://discuss.elastic.co/t/grokprocessor-unescaped-character/347171)

<div class="topic-metadata">

**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:12pm UTC](https://discuss.elastic.co/t/grokprocessor-unescaped-character/347171 "2023-11-14T23:12:48Z")

</div>

Hi, Recently my elasticsearch logs are full of these. \[WARN \]\[o.e.i.c.GrokProcessor \] \[node01\] character class has '-' without escape Running 8.8.0, I wouldn't know where to start looking for an unescaped '-'. Any…

---

## [Purchase frequency](https://discuss.elastic.co/t/purchase-frequency/347038)

<div class="topic-metadata">

**Author:** [@J\_Dor](https://discuss.elastic.co/u/J_Dor)\
**Replies:** 1\
**Last updated:** [November 14, 2023, 11:02pm UTC](https://discuss.elastic.co/t/purchase-frequency/347038 "2023-11-14T23:02:45Z")

</div>

Hi, I'm new to Kibana and need help creating a visualization. I have a dashboard with client data and need to know how many clients have made more than one purchase within a set timeframe, using email as the field. Is t…

---

## [Kibana 8.10 not starting and kibana log is not generating](https://discuss.elastic.co/t/kibana-8-10-not-starting-and-kibana-log-is-not-generating/347093)

<div class="topic-metadata">

**Author:** [@BandredK](https://discuss.elastic.co/u/BandredK)\
**Replies:** 1\
**Last updated:** [November 14, 2023, 11:01pm UTC](https://discuss.elastic.co/t/kibana-8-10-not-starting-and-kibana-log-is-not-generating/347093 "2023-11-14T23:01:35Z")

</div>

Hi, I have elasticsearch cluster formed with 3 nodes, cluster is up and running in green state epoch timestamp cluster status node.total node.data shards pri relo init unassign pending\_tasks max\_task\_wait\_time ac…

---

## [Kibana data table visualization repeating the fields](https://discuss.elastic.co/t/kibana-data-table-visualization-repeating-the-fields/347110)

<div class="topic-metadata">

**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\
**Replies:** 1\
**Last updated:** [November 14, 2023, 10:58pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-repeating-the-fields/347110 "2023-11-14T22:58:18Z")

</div>

Hello community I'm trying to create data table visualization, but I have an issue of fields are repeating it self when ever new value comes in here is a screen shot of my data table I want to make it like this da…

---

## [Default index template](https://discuss.elastic.co/t/default-index-template/347158)

<div class="topic-metadata">

**Author:** [@Milad\_Heydariaan](https://discuss.elastic.co/u/Milad_Heydariaan)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 7:15pm UTC](https://discuss.elastic.co/t/default-index-template/347158 "2023-11-14T19:15:41Z")

</div>

With legacy templates, we used to have a "default template" (with \* pattern and order -10) which sets a few index settings including threshold for slowlogs, number of shard, and number of replicas. Then users could creat…

---

## [Unassigned shards -- and two shards rebalancing](https://discuss.elastic.co/t/unassigned-shards-and-two-shards-rebalancing/346555)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 6\
**Last updated:** [November 14, 2023, 7:00pm UTC](https://discuss.elastic.co/t/unassigned-shards-and-two-shards-rebalancing/346555 "2023-11-14T19:00:24Z")

</div>

My cluster has been stuck in Yellow for a couple of days. There are two shards that are being rebalanced (and have been for days ???) and this is appears to be causing the cluster to refuse to allocate replicas of prima…

---

## [Elasticsearch improvements from version 7.9 to 8.10](https://discuss.elastic.co/t/elasticsearch-improvements-from-version-7-9-to-8-10/347026)

<div class="topic-metadata">

**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\
**Replies:** 3\
**Last updated:** [November 14, 2023, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-improvements-from-version-7-9-to-8-10/347026 "2023-11-14T18:48:28Z")

</div>

Is there a list somewhere of the Elasticsearch significant improvements from 7.9 version to 8.7

---

## [Cannot create datastream under new index template](https://discuss.elastic.co/t/cannot-create-datastream-under-new-index-template/347126)

<div class="topic-metadata">

**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\
**Replies:** 5\
**Last updated:** [November 14, 2023, 3:17pm UTC](https://discuss.elastic.co/t/cannot-create-datastream-under-new-index-template/347126 "2023-11-14T15:17:49Z")

</div>

Hi I am using logstash running Kubernetes under ECK. I am ingesting both logs (filebeat) and metrics (metricbeat). Now i want ingest data from heartbeat. I get the following error: \[2023-11-14T13:22:23,598\]\[INFO \]\[logs…

---

## [Restart the Logstash 8.8 configuration without restarting it](https://discuss.elastic.co/t/restart-the-logstash-8-8-configuration-without-restarting-it/347095)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 2\
**Last updated:** [November 14, 2023, 2:34pm UTC](https://discuss.elastic.co/t/restart-the-logstash-8-8-configuration-without-restarting-it/347095 "2023-11-14T14:34:07Z")

</div>

Hello, Is there a way to reload the Logstash 8.8 configuration without restarting it? Thank you

---

## [Using transforms and ingest pipelines on data that changes over time](https://discuss.elastic.co/t/using-transforms-and-ingest-pipelines-on-data-that-changes-over-time/347101)

<div class="topic-metadata">

**Author:** [@pulsy](https://discuss.elastic.co/u/pulsy)\
**Replies:** 5\
**Last updated:** [November 14, 2023, 1:55pm UTC](https://discuss.elastic.co/t/using-transforms-and-ingest-pipelines-on-data-that-changes-over-time/347101 "2023-11-14T13:55:36Z")

</div>

I'm thinking about using elastic transforms together with ingest pipelines to basically create views of mongodb collections that are spread over multiple database servers, so we can efficiently sort and filter by referen…

---

## [Random slow query after some time of idle](https://discuss.elastic.co/t/random-slow-query-after-some-time-of-idle/346783)

<div class="topic-metadata">

**Author:** [@LeoL](https://discuss.elastic.co/u/LeoL)\
**Replies:** 2\
**Last updated:** [November 14, 2023, 1:22pm UTC](https://discuss.elastic.co/t/random-slow-query-after-some-time-of-idle/346783 "2023-11-14T13:22:46Z")

</div>

Hello, I explain our stituation. We have a pod on OpenShift with a .NET application that uses the NEST library to connect to an Elasticsearch node. What happens is that after some idle time, the calls (any call) takes 1…

---

## [Logstash Multiple Output Atomicity](https://discuss.elastic.co/t/logstash-multiple-output-atomicity/347100)

<div class="topic-metadata">

**Author:** [@mile3880](https://discuss.elastic.co/u/mile3880)\
**Replies:** 1\
**Last updated:** [November 14, 2023, 1:14pm UTC](https://discuss.elastic.co/t/logstash-multiple-output-atomicity/347100 "2023-11-14T13:14:48Z")

</div>

Does Logstash guarantee atomicity of multiple output options? For Example, if I set 2 different outputs to Elasticsearch A and B, and when connection to Elasticsearch A is temporarily unstable, can Logstash stop sending…

---

## [How can find out specific string in elastic](https://discuss.elastic.co/t/how-can-find-out-specific-string-in-elastic/347113)

<div class="topic-metadata">

**Author:** [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:59am UTC](https://discuss.elastic.co/t/how-can-find-out-specific-string-in-elastic/347113 "2023-11-14T11:59:45Z")

</div>

I am looking for a specific string in my log now how can define it ? because it is finding all words such as "validation" , "field" , "is" , "the" but I want just find specific string My pattern is " the validation is …

---

## [Elastic Agent - Duplicate Collection of AWS CloudWatch Metrics](https://discuss.elastic.co/t/elastic-agent-duplicate-collection-of-aws-cloudwatch-metrics/347112)

<div class="topic-metadata">

**Author:** [@shwanlee](https://discuss.elastic.co/u/shwanlee)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:43am UTC](https://discuss.elastic.co/t/elastic-agent-duplicate-collection-of-aws-cloudwatch-metrics/347112 "2023-11-14T11:43:26Z")

</div>

Hello, I am collecting AWS CloudWatch metrics with multiple Elastic Agents with the same policy, but there is an issue with data being collected redundantly. How can I solve this? If I don't have a way to handle this as…

---

## [Does anyone use connection pooling in ElasticSearch8.5? How to use it?](https://discuss.elastic.co/t/does-anyone-use-connection-pooling-in-elasticsearch8-5-how-to-use-it/346974)

<div class="topic-metadata">

**Author:** [@maoqingjue](https://discuss.elastic.co/u/maoqingjue)\
**Replies:** 16\
**Last updated:** [November 14, 2023, 11:09am UTC](https://discuss.elastic.co/t/does-anyone-use-connection-pooling-in-elasticsearch8-5-how-to-use-it/346974 "2023-11-14T11:09:13Z")

</div>

Does anyone use connection pooling in Elasticsearch8.5? How to use it?

---

## [Sending AWS Cloud Watch Logs to Elasticsearch](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459)

<div class="topic-metadata">

**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\
**Replies:** 5\
**Last updated:** [November 14, 2023, 11:01am UTC](https://discuss.elastic.co/t/sending-aws-cloud-watch-logs-to-elasticsearch/346459 "2023-11-14T11:01:37Z")

</div>

Hello community. I want to send AWS Cloud Watch logs to my local Elasticsearch cluster? I have seen AWS integrations but my question is how I'm going to connect those integrations on my AWS Cloud Watch?

---

## [Server requirement for every node role](https://discuss.elastic.co/t/server-requirement-for-every-node-role/347075)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 3\
**Last updated:** [November 14, 2023, 10:20am UTC](https://discuss.elastic.co/t/server-requirement-for-every-node-role/347075 "2023-11-14T10:20:29Z")

</div>

Hi all, I need information about master, data, inget, and coordination server requirements. Anyone can share with me about CPU and Memory needs of each role node? CPU RAM Master Data Coordinatin…

---

## [One day, the dashboards and graphs were using disappeared](https://discuss.elastic.co/t/one-day-the-dashboards-and-graphs-were-using-disappeared/346976)

<div class="topic-metadata">

**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\
**Replies:** 7\
**Last updated:** [November 14, 2023, 9:47am UTC](https://discuss.elastic.co/t/one-day-the-dashboards-and-graphs-were-using-disappeared/346976 "2023-11-14T09:47:07Z")

</div>

One day, I changed the value of 'xpack.security.enabled' from 'true' to 'false' in my Kibana+Elasticsearch environment. I had no problems using it after that, but when I logged into Kibana a few days later, all my dashbo…

---

## [No span and transaction for Dubbo example](https://discuss.elastic.co/t/no-span-and-transaction-for-dubbo-example/347094)

<div class="topic-metadata">

**Author:** [@bixiyan](https://discuss.elastic.co/u/bixiyan)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 9:12am UTC](https://discuss.elastic.co/t/no-span-and-transaction-for-dubbo-example/347094 "2023-11-14T09:12:30Z")

</div>

Hi team: I am doing a poc on elastic apm using dubbo. Kibana version: 7.16.3 Elasticsearch: 7.16.3 apm-server:v7.16.3 I have create a dubbo provider and consumer. Consumer run every second to call provider. Now I c…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=373)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=375)
