# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=692 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 693 --- ## [Change field format in response](https://discuss.elastic.co/t/change-field-format-in-response/321702)
**Author:** [@rybak.yuriy.m](https://discuss.elastic.co/u/rybak.yuriy.m)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 10:54pm UTC](https://discuss.elastic.co/t/change-field-format-in-response/321702 "2022-12-20T22:54:40Z")
I do some aggregattion with search api and in my response sum field looks like: "value": 9.34467409269E11" How do I can to change format to long without exponential format? --- ## [Index-append into data-stream](https://discuss.elastic.co/t/index-append-into-data-stream/320930)
**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\ **Replies:** 5\ **Last updated:** [December 20, 2022, 4:39pm UTC](https://discuss.elastic.co/t/index-append-into-data-stream/320930 "2022-12-20T16:39:37Z")
Hello, Does Rally 2.7.0 support index-append (bulk) into a data-stream? I am able to generate a data-stream using component templates and a composable index template without issue, but the index-append is not writing d… --- ## [How to set timerange query to -15min from now?](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662)
**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:33pm UTC](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662 "2022-12-20T14:33:55Z")
I need to check to see if two distinct logs are being generated every 15 min and every hour, so I'm trying to create two timeranges for two different indices -- one that checks for logs in the past 15 min and returns the… --- ## [Azure App Service Logs to Elastic Cloud (without Filebeat)](https://discuss.elastic.co/t/azure-app-service-logs-to-elastic-cloud-without-filebeat/321661)
**Author:** [@CrystalDesignDR](https://discuss.elastic.co/u/CrystalDesignDR)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:30pm UTC](https://discuss.elastic.co/t/azure-app-service-logs-to-elastic-cloud-without-filebeat/321661 "2022-12-20T14:30:41Z")
Hi, we send various types of data into our Elastic Cloud deployments, whether it be custom indexes or APM (RUM, node.js, ASP.NET, .NET Core ecc.) data, which is all very straight forward. But when it comes to applicati… --- ## [Regex Pattern to fetch field from message](https://discuss.elastic.co/t/regex-pattern-to-fetch-field-from-message/320563)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 9:14pm UTC](https://discuss.elastic.co/t/regex-pattern-to-fetch-field-from-message/320563 "2022-12-20T21:14:55Z")
HI Team, I'm trying to fetch some key field from my message and i need pattern to match exact keyword. i need UserID and User agent matching pattern \[INFO \] 2022-12-05 17:20:45:409 Logger - 365 Service Request: \U… --- ## [Kibana 8.4.x and 8.5.x Elasticsearch compatibility](https://discuss.elastic.co/t/kibana-8-4-x-and-8-5-x-elasticsearch-compatibility/321687)
**Author:** [@Thornfalt](https://discuss.elastic.co/u/Thornfalt)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 9:06pm UTC](https://discuss.elastic.co/t/kibana-8-4-x-and-8-5-x-elasticsearch-compatibility/321687 "2022-12-20T21:06:06Z")
I was browsing the support matrix at Support Matrix | Elastic When looking at the Elasticsearch compatibility, the Kibana versions 8.4.x and 8.5.x is not supported with Elasticsearch 8.4.x and 8.5.x. Does this mean it'… --- ## [Packetbeat unable to monitor mysql traffic](https://discuss.elastic.co/t/packetbeat-unable-to-monitor-mysql-traffic/321690)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 8:40pm UTC](https://discuss.elastic.co/t/packetbeat-unable-to-monitor-mysql-traffic/321690 "2022-12-20T20:40:13Z")
I'm trying out packetbeat to monitor events for the mysql protocol. Packetbeat seems to be able to detect packets on destination.port: 3306 which is the default mysql port as shown in this screenshot here: But packet… --- ## [HELP! Unable to open Kibana What should I do?](https://discuss.elastic.co/t/help-unable-to-open-kibana-what-should-i-do/321677)
**Author:** [@Pei\_Z](https://discuss.elastic.co/u/Pei_Z)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 8:16pm UTC](https://discuss.elastic.co/t/help-unable-to-open-kibana-what-should-i-do/321677 "2022-12-20T20:16:36Z")
I am unable to open Kibana because of this error. \[2022-12-21T01:57:34.111+08:00\]\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] R… --- ## [\[filebeat 8.5.3\] extracting log\_level from message with dissect processor, ignoring right padding modifier](https://discuss.elastic.co/t/filebeat-8-5-3-extracting-log-level-from-message-with-dissect-processor-ignoring-right-padding-modifier/321683)
**Author:** [@vincen](https://discuss.elastic.co/u/vincen)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 7:40pm UTC](https://discuss.elastic.co/t/filebeat-8-5-3-extracting-log-level-from-message-with-dissect-processor-ignoring-right-padding-modifier/321683 "2022-12-20T19:40:40Z")
I am trying to run filebeats on log files for a web application, and the messages have padding after the log level. I:DEBUG \[http-nio-8443-exec-45\] RequestCasTicketValidator 20 Dec 2022 11:00:17.221: Loading custom par… --- ## [Is it possible to trigger an alert when a new index is created](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605)
**Author:** [@Krishna\_Teja](https://discuss.elastic.co/u/Krishna_Teja)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 7:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605 "2022-12-20T19:43:55Z")
I have an ILM which creates indices every 10 days for a datastream. I need to update the mapping for the newly created index on creation. Is it possible to get an alert or trigger a webhook once a new index is created? --- ## [How to Deboost the final Score of the results when it matches set of Term/Range Filters](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490)
**Author:** [@Lakshman\_Raj\_Vasudev](https://discuss.elastic.co/u/Lakshman_Raj_Vasudev)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 7:42pm UTC](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490 "2022-12-20T19:42:21Z")
Hi, We have an Scenario,When the query matches certain Set of Term/Range Filter,Deboost the Relevancy Score of those matching documents with a boost Factor,as the usage of negative boosts were not permitted in the Lates… --- ## [Kibana Visualization Missing Time Range UI](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353)
**Author:** [@hidanny](https://discuss.elastic.co/u/hidanny)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353 "2022-10-26T08:34:34Z")
Hello all, This is my Visualization Tab and I am missing the Time Range UI that allows me to determine what time my data appears On the other hand, on my discover tab, I see that it exists as "Last 15 Mins" What… --- ## [Trouble with suggestions](https://discuss.elastic.co/t/trouble-with-suggestions/321673)
**Author:** [@Mihai\_Raulea](https://discuss.elastic.co/u/Mihai_Raulea)\ **Replies:** 4\ **Last updated:** [December 20, 2022, 7:16pm UTC](https://discuss.elastic.co/t/trouble-with-suggestions/321673 "2022-12-20T19:16:06Z")
i have a skills index with the following mapping: { "skills" : { "mappings" : { "properties" : { "skill" : { "type" : "completion", "analyzer" : "simple", "preserve\_sepa… --- ## [Logstash split one message into multiple](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496)
**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\ **Replies:** 10\ **Last updated:** [December 20, 2022, 7:10pm UTC](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496 "2022-12-20T19:10:54Z")
Hi, I've the following message and I managed to create the output from only message, {"@timestamp":"2022-12-01T13:30:00.004Z","message":"\<190\>Dec 1 14:29:59 10.62.161.199 AA-AMG3U: 0950198238 NN \[MDA 8/4\]: LN44 SA 20… --- ## [Watcher Automated Email Reports](https://discuss.elastic.co/t/watcher-automated-email-reports/321586)
**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 7:01pm UTC](https://discuss.elastic.co/t/watcher-automated-email-reports/321586 "2022-12-20T19:01:14Z")
Version 7.17: I'm trying to set up a Watcher to send report emails following this guide: I set up the email account in the elasticsearch.yml with a pretty basic setup since our SMTP server does not require authentica… --- ## [LogStash Conf | Drop Empty Lines](https://discuss.elastic.co/t/logstash-conf-drop-empty-lines/321674)
**Author:** [@srii](https://discuss.elastic.co/u/srii)\ **Replies:** 5\ **Last updated:** [December 20, 2022, 6:37pm UTC](https://discuss.elastic.co/t/logstash-conf-drop-empty-lines/321674 "2022-12-20T18:37:29Z")
The contents of LogStash's conf file looks like this: input { beats { port =\> 5044 } file { path =\> "/usr/share/logstash/iway\_logs/\*" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" … --- ## [Filebeat Incompatibility with Opensearch](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757)
**Author:** [@Anish\_Mittal](https://discuss.elastic.co/u/Anish_Mittal)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 6:19pm UTC](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757 "2022-12-20T18:19:09Z")
I have spent almost 4 days on filebeat and opensearch. I have used Filebeat \[7.0.0, 8.5.2, 6.0.0\] and Opensearch 2.4.0. But getting the error: "pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://lo… --- ## [KNN Search super slow](https://discuss.elastic.co/t/knn-search-super-slow/321631)
**Author:** [@TopTea1](https://discuss.elastic.co/u/TopTea1)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 5:57pm UTC](https://discuss.elastic.co/t/knn-search-super-slow/321631 "2022-12-20T17:57:03Z")
Hi, I'm using ES v8.1.3 in a dockerized env with 4 shards. In my database I have around ~90M documents, and for each I have a dense vector with a dim of 768. But when I'm trying to perform a search using ANN (with cosine… --- ## [Context Table?](https://discuss.elastic.co/t/context-table/321597)
**Author:** [@davidbeiler](https://discuss.elastic.co/u/davidbeiler)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 5:39pm UTC](https://discuss.elastic.co/t/context-table/321597 "2022-12-20T17:39:02Z")
Hi, Is it possible to add in a context table? I am using exabeam, but couldnt find anything, but i believe it uses the elkstack in the backend this is what i have currently query = { "size": 0, "qu… --- ## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332)
**Author:** [@mikes1962](https://discuss.elastic.co/u/mikes1962)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332 "2022-12-20T17:13:53Z")
I'm trying to install elasticsearch on RedHat 8.5 with SELinux enabled and enforcing. Additionally, the account I'm using has very limited sudo privileges so I run a python script to execute the commands. So I am executi… --- ## [Filebeat processor - what is this ~ good for?](https://discuss.elastic.co/t/filebeat-processor-what-is-this-good-for/321616)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 4:24pm UTC](https://discuss.elastic.co/t/filebeat-processor-what-is-this-good-for/321616 "2022-12-20T16:24:14Z")
Hi there, in a 7.17.4. processor block in filebeat I found this statement; ... processors: add\_docker\_metadata: ~ ... What does this sing ~ stand for or do? Thanks! --- ## [Getting K8s annotations in Filebeat logs](https://discuss.elastic.co/t/getting-k8s-annotations-in-filebeat-logs/321671)
**Author:** [@RudyStolds](https://discuss.elastic.co/u/RudyStolds)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 4:06pm UTC](https://discuss.elastic.co/t/getting-k8s-annotations-in-filebeat-logs/321671 "2022-12-20T16:06:20Z")
Hi, I'm trying to get additional annotations from my K8s deployment into Elasticsearch. I'm currently on filebeat 7.18.8. My filebeat imputs in the filebeat.yml file look like the code below filebeat.inputs: - type: … --- ## [Reporting capabilities: Power Bi (Desktop) vs Kibana canvas](https://discuss.elastic.co/t/reporting-capabilities-power-bi-desktop-vs-kibana-canvas/319564)
**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 3:26pm UTC](https://discuss.elastic.co/t/reporting-capabilities-power-bi-desktop-vs-kibana-canvas/319564 "2022-11-22T15:26:58Z")
Hi team, I would like to make a comparison between reporting capabilities between Microsoft Power Bi and Kibana Canvas. I know pretty well Power Bi and I would like to understand better whether under the hood Kibana Can… --- ## [ALLOCATION\_FAILED after restore from snapshot](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659)
**Author:** [@wish\_wei](https://discuss.elastic.co/u/wish_wei)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659 "2022-12-20T14:12:21Z")
Hi I tried to restore index from snapshot download from s3 repository, the origin index's primary shard is about 110GB large.After restore finished， it shows that all shards is ALLOCATION\_FAILED，detail is： sdk\_client\_… --- ## [Empty Agent policy](https://discuss.elastic.co/t/empty-agent-policy/321650)
**Author:** [@nestro](https://discuss.elastic.co/u/nestro)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 2:19pm UTC](https://discuss.elastic.co/t/empty-agent-policy/321650 "2022-12-20T14:19:39Z")
Hi! I can't select a policy for fleet, I've tried to reinstall the whole Stack but it doesn't work either. The problem: The default policies: --- ## [Root mapping definition has unsupported parameters when trying to update the mapping](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655)
**Author:** [@cchertita](https://discuss.elastic.co/u/cchertita)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 1:37pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655 "2022-12-20T13:37:34Z")
Hello, I am trying to setup custom logging for Mulesoft APIs and trying to send data to an ELK server (instead of Kibana, it uses OpenSearch from AWS). I am also using a custom JSON Logger that is required for separate … --- ## [Monitor Uptime With Telnet](https://discuss.elastic.co/t/monitor-uptime-with-telnet/321654)
**Author:** [@OscarFilho](https://discuss.elastic.co/u/OscarFilho)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:36pm UTC](https://discuss.elastic.co/t/monitor-uptime-with-telnet/321654 "2022-12-20T13:36:02Z")
We are using Elastic Cloud to monitor our company's services. Today I installed a private location type monitor that is located in our company's on-premises environment. I would like some help and know if it is possibl… --- ## [Customized Index Template](https://discuss.elastic.co/t/customized-index-template/321557)
**Author:** [@Pankhuri\_Gupta](https://discuss.elastic.co/u/Pankhuri_Gupta)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 1:15pm UTC](https://discuss.elastic.co/t/customized-index-template/321557 "2022-12-20T13:15:13Z")
Hi, I have metricbeat indices being created with metricbeat-7.17\* as index template name but I want to create Index template with some other name.Basically, I want to customize my index templates name. Please provide st… --- ## [ML Datafeed Error](https://discuss.elastic.co/t/ml-datafeed-error/321646)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:00pm UTC](https://discuss.elastic.co/t/ml-datafeed-error/321646 "2022-12-20T13:00:18Z")
Hello! Does anyone know why im facing this issue ? Datafeed is encountering errors extracting data: No search context found for id \[xxxxxx\] --- ## [MY ILM policy is not deleting old data](https://discuss.elastic.co/t/my-ilm-policy-is-not-deleting-old-data/321628)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 12:59pm UTC](https://discuss.elastic.co/t/my-ilm-policy-is-not-deleting-old-data/321628 "2022-12-20T12:59:26Z")
My old data is not deleting don't know why PUT \_ilm/policy/prudhviilm { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_age": "5m" } } }, "warm": { "min\_age": "5m", "acti… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=691) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=693)