# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=758 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 759 --- ## [Is there a way to return true/false if documents exists for the given query?](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965)
**Author:** [@Hamza\_Khalid](https://discuss.elastic.co/u/Hamza_Khalid)\ **Replies:** 5\ **Last updated:** [October 19, 2022, 12:37pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965 "2022-10-19T12:37:47Z")
I have a query: GET users/\_search { "from": 0, "size": 20, "query": { "match\_all": {} } What i want to achieve is if the above query returns even a single document i get the response as true and if no document is r… --- ## [Logstash problems with certs - docker-compose](https://discuss.elastic.co/t/logstash-problems-with-certs-docker-compose/316991)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 12:28pm UTC](https://discuss.elastic.co/t/logstash-problems-with-certs-docker-compose/316991 "2022-10-19T12:28:37Z")
Hi everyone, I'm trying to configure logstash but apparently I am inserting the wrong certificate logstash.outputs.elasticsearch\]\[main\] Failed to perform request {:message=\>"Certificate for \ doesn't match any of th… --- ## [Connection refused with Python connection in Docker](https://discuss.elastic.co/t/connection-refused-with-python-connection-in-docker/316365)
**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 11:40am UTC](https://discuss.elastic.co/t/connection-refused-with-python-connection-in-docker/316365 "2022-10-19T11:40:23Z")
Trying to install Elasticsearch and Kibana 8.4.3 Docker containers on a development laptop, and run elasticsearch-py commands from an app in another running container. And I'm stuck. I have the ES8 and Kibana containers… --- ## [Query "at least one not in given array"](https://discuss.elastic.co/t/query-at-least-one-not-in-given-array/316984)
**Author:** [@ltr31](https://discuss.elastic.co/u/ltr31)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 11:20am UTC](https://discuss.elastic.co/t/query-at-least-one-not-in-given-array/316984 "2022-10-19T11:20:52Z")
Hello I have documents with let say positive terms and negative terms like { ... "mood" : \[ "happy", "excited", "furious" \], ... } Positive terms can be an infinite list of values, … --- ## [searchAsync is calling both OnResponse and onFailure](https://discuss.elastic.co/t/searchasync-is-calling-both-onresponse-and-onfailure/316981)
**Author:** [@jjc](https://discuss.elastic.co/u/jjc)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 10:06am UTC](https://discuss.elastic.co/t/searchasync-is-calling-both-onresponse-and-onfailure/316981 "2022-10-19T10:06:15Z")
Hi, i've got a little problem. im running an async search that first returns calls OnResponse with the desired result then immediately calls onFailure. The index i'm querying contains exactly one single row. Please i… --- ## [Different time in copied index and pipeline](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 10:02am UTC](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980 "2022-10-19T10:02:25Z")
I have something strange with timezones. From my raspberry Pi I am sending some specific information (temperature) to Sylog (separate Syslog Server). Same format as normal syslog: In my Syslog server I am splitting the… --- ## [Why logstash does not create field on Kibana](https://discuss.elastic.co/t/why-logstash-does-not-create-field-on-kibana/316978)
**Author:** [@glaucoperucchi](https://discuss.elastic.co/u/glaucoperucchi)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 9:36am UTC](https://discuss.elastic.co/t/why-logstash-does-not-create-field-on-kibana/316978 "2022-10-19T09:36:50Z")
Hello guys, I need a your help. I did a filter with grok, but when I go to kibana I did not see the field of the filter. The log: type=USER\_ACCT msg=audit(1666101680.397:1224): pid=665272 uid=0 auid=525000037 ses=27 … --- ## [WAF logs Configuration from s3 bucket to Elasticsearch Using logstash s3 Plugin](https://discuss.elastic.co/t/waf-logs-configuration-from-s3-bucket-to-elasticsearch-using-logstash-s3-plugin/315243)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 9:32am UTC](https://discuss.elastic.co/t/waf-logs-configuration-from-s3-bucket-to-elasticsearch-using-logstash-s3-plugin/315243 "2022-10-19T09:32:46Z")
Hello Everyone I am trying to Configuring WAF 2.0 logs from s3 Bucket to elasticsearch but I am facing some erroorm please Helpme for the same. My Current Logstash configuration input { s3 { access\_key\_id =\> "myid" … --- ## [Logstash to convert scientific notation to float](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231)
**Author:** [@the\_elkguy](https://discuss.elastic.co/u/the_elkguy)\ **Replies:** 7\ **Last updated:** [October 19, 2022, 9:25am UTC](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231 "2022-10-19T09:25:54Z")
Hello, I'm using logstash ruby filter to convert scientific notation from string to float which seem to be not working. I have used GROK to extract the scientific notation (1.989e-04) from the message and now converting… --- ## [How to rename a field with regex](https://discuss.elastic.co/t/how-to-rename-a-field-with-regex/316972)
**Author:** [@Saeedeh\_Moghimi](https://discuss.elastic.co/u/Saeedeh_Moghimi)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/how-to-rename-a-field-with-regex/316972 "2022-10-19T09:11:05Z")
I have a log like this: {"A.amazon.aws.requestedParameters":{"testlabel1":"testvalue1"}} {"B.amazon.aws.requestedParameters":{"testlabel1":"testvalue1"}} ... and I want to change the field name to something like this: A… --- ## [Remove field with pattern using mutate](https://discuss.elastic.co/t/remove-field-with-pattern-using-mutate/316966)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 9:08am UTC](https://discuss.elastic.co/t/remove-field-with-pattern-using-mutate/316966 "2022-10-19T09:08:00Z")
Hi there, i want to remove some field based on pattern. for example, i have some field like: iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.2 iso.org.dod.internet.mgmt.mib-2.interfaces.ifEntry.3 and i want to del… --- ## [ERROR: no\_shard\_available\_action\_exception](https://discuss.elastic.co/t/error-no-shard-available-action-exception/316950)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 11\ **Last updated:** [October 19, 2022, 8:44am UTC](https://discuss.elastic.co/t/error-no-shard-available-action-exception/316950 "2022-10-19T08:44:42Z")
Hi, Does someone know how to fix this issue "no\_shard\_available\_action\_exception". Encountered this error after I restore my cluster, index was restored but the documents was not restored. Kindly see the error below: '… --- ## [Duplicated data in index](https://discuss.elastic.co/t/duplicated-data-in-index/316863)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 8:26am UTC](https://discuss.elastic.co/t/duplicated-data-in-index/316863 "2022-10-19T08:26:43Z")
Hi I have a problem that sometime during uploading to elastic data with eventType number has a difrent date then it has in the file, This is suspicious that metadata has been changed somewhere, I guess that logstash are… --- ## [Problem in multi match search](https://discuss.elastic.co/t/problem-in-multi-match-search/316963)
**Author:** [@Fakeknox](https://discuss.elastic.co/u/Fakeknox)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 7:47am UTC](https://discuss.elastic.co/t/problem-in-multi-match-search/316963 "2022-10-19T07:47:13Z")
hello i have 6 different field that i want to search in all of them . im using edge gram analyzer for search and using multi match query and text come from front. my sample code is : esClient.search({ index… --- ## [Connecting and fetching elasticsearch from react Js](https://discuss.elastic.co/t/connecting-and-fetching-elasticsearch-from-react-js/316955)
**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\ **Replies:** 5\ **Last updated:** [October 19, 2022, 7:44am UTC](https://discuss.elastic.co/t/connecting-and-fetching-elasticsearch-from-react-js/316955 "2022-10-19T07:44:54Z")
Hello, Would it be possible or is there any library available in javascript to connect and fetch data from elasticsearch index by providing json as input which elasticserver understand. regards, --- ## [Deploying in tomcat : React JS app with elasticsearch backend](https://discuss.elastic.co/t/deploying-in-tomcat-react-js-app-with-elasticsearch-backend/316956)
**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 7:44am UTC](https://discuss.elastic.co/t/deploying-in-tomcat-react-js-app-with-elasticsearch-backend/316956 "2022-10-19T07:44:12Z")
what are the approaches to create a react js application with elasticsearch as backend. Can this application be deployed in Tomcat server. Thanks and Regards, --- ## [Kubernetes Module of Metricbeat does not get pct metrics from Kubelet on Windows](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-pct-metrics-from-kubelet-on-windows/315694)
**Author:** [@rituzzzpilot](https://discuss.elastic.co/u/rituzzzpilot)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 7:26am UTC](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-pct-metrics-from-kubelet-on-windows/315694 "2022-10-19T07:26:07Z")
Hi, everyone I have been testing metricbeat 7.17 Kubernetes module with Kubelet 1.24.3 and windows worker nodes (Windows Server 2022). I use Metricbeat in order to get metrics of containers, pods and nodes. I got node a… --- ## [Index Lifecycle Management - closing indices](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 7:10am UTC](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757 "2022-10-19T07:10:07Z")
Have I failed to find the relevant part of the documentation for Elasticsearch 7.17 and 8.4, or is it the case that Index Lifecycle Management does not provide a way to close indices? (And if it really doesn't provide a … --- ## [CSV file input renew interval](https://discuss.elastic.co/t/csv-file-input-renew-interval/316952)
**Author:** [@Julian\_Tang](https://discuss.elastic.co/u/Julian_Tang)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 6:40am UTC](https://discuss.elastic.co/t/csv-file-input-renew-interval/316952 "2022-10-19T06:40:22Z")
Hi I have a question ,about a CSV file , I adds additional row , 1.what time well renew this data ? 2.if I need to change interval , how to do? 3.or another better choice to update this? input { file { path =\> … --- ## [Not able to monitor with Metricbeat. Monitoring with Self monitoring in kibana](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 6\ **Last updated:** [October 19, 2022, 6:14am UTC](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790 "2022-10-19T06:14:30Z")
Hello, I have configured metricbeat in windows providing you the steps I followed. kibana -\> stack monitoring -\> monitor with metricbeat -\> followed the steps mentioned there -\> downloaded and setup metricbeat. -\> cha… --- ## [How much data in GB is being ingested daily in our Elastic Cloud?](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905 "2022-10-19T05:24:58Z")
Hello, Where to see how much data in GB is being ingested daily to our Hot nodes in our Elastic Cloud solution? Kind regards, Dane --- ## [Cannot restore index \[.ds-.logs-deprecation.elasticsearch-default](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 5:21am UTC](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856 "2022-10-19T05:21:33Z")
Hi, Does someone know if .ds-.logs-deprecation.elasticsearch-default index can be deleted or can it be disabled on the configuration? I'm encountering the error below while restoring my cluster. {"error":{"root\_cause":… --- ## [Using if else in logstash filter](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 8\ **Last updated:** [October 19, 2022, 5:13am UTC](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853 "2022-10-19T05:13:50Z")
Hi everyone, i'd like to ask, is it possible to use OR operator in if else statement in logstash filter? so, i want to delete the event that has value "VoIP-Null0", "Null0", and "Loopback0" in data.ifDescr field. i … --- ## [Hello Community,](https://discuss.elastic.co/t/hello-community/316949)
**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:07am UTC](https://discuss.elastic.co/t/hello-community/316949 "2022-10-19T05:07:51Z")
Can we index the postgrec table with data as an index to elasti -search via a java client? If yes please help me out. As most of the tutorials only index some data(hard-coded) from java programme to elastic-search. --- ## [Delete Phase Not Actioned](https://discuss.elastic.co/t/delete-phase-not-actioned/316726)
**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 4:46am UTC](https://discuss.elastic.co/t/delete-phase-not-actioned/316726 "2022-10-19T04:46:38Z")
Hi there, I have an ILM configured with the following settings PUT \_ilm/policy/cwl-abc-policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { … --- ## [Restoring watchers](https://discuss.elastic.co/t/restoring-watchers/316391)
**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 4:30am UTC](https://discuss.elastic.co/t/restoring-watchers/316391 "2022-10-19T04:30:11Z")
Hi Everyone, I am trying to restore the watcher snapshot from ELK 7.10 version to 8.2 but it showing the following error. after this issue, I tried to setup 7.1 cluster to reindex these watchers but when I tried to … --- ## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884 "2022-10-19T03:59:49Z")
Hello, While I am trying to upgrade from 8.3.2 to 8.4.1 Its upgrading the Elasticsearch but the service is not running. \[2022-10-18T11:15:37,060\]\[ERROR\]\[o.e.b.Elasticsearch \] \[vm0dnelkdma0003.corp.chartercom.com\] … --- ## [About zabbix and elastic](https://discuss.elastic.co/t/about-zabbix-and-elastic/316946)
**Author:** [@sjh0207](https://discuss.elastic.co/u/sjh0207)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 3:20am UTC](https://discuss.elastic.co/t/about-zabbix-and-elastic/316946 "2022-10-19T03:20:35Z")
Hi. i'm from korea Please understand that I am using a translator due to lack of English skills I am considering zabbix and elastic for network traffic monitoring. The reason for considering zabbix and elastic is to … --- ## [Okta log Intergration](https://discuss.elastic.co/t/okta-log-intergration/316830)
**Author:** [@sean.doody](https://discuss.elastic.co/u/sean.doody)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:18am UTC](https://discuss.elastic.co/t/okta-log-intergration/316830 "2022-10-19T03:18:26Z")
Hello, I am trying to test getting Okta logs to Elastic, when trying to do so, it doesnt seem like Elastic wants to ingest the logs. I am currently just testing off a work laptop, but one I get this figured out I will us… --- ## [How to configure ILM options such as Hot-Warm-Cold configuration and data limits to each phase with the Helm chart?](https://discuss.elastic.co/t/how-to-configure-ilm-options-such-as-hot-warm-cold-configuration-and-data-limits-to-each-phase-with-the-helm-chart/316872)
**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-configure-ilm-options-such-as-hot-warm-cold-configuration-and-data-limits-to-each-phase-with-the-helm-chart/316872 "2022-10-18T09:48:33Z")
how to configure ILM options such as Hot-Warm-Cold configuration and data limits to each phase with the Helm chart ? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=757) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=759)