# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=849 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 850 --- ## [Bug? Logstash Ouput & Initial Fleet Setup](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 1\ **Last updated:** [July 27, 2022, 3:23pm UTC](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751 "2022-07-27T15:23:14Z")
Fleet 8.3.2, fresh install. I have a Fleet Server Policy that uses a Logstash ouput: From the guided install/generated CLI text, it appears that it does not take into account the Logstash output as it sets the --fle… --- ## [Filebeat 7.11.0 multiples path and multiples index](https://discuss.elastic.co/t/filebeat-7-11-0-multiples-path-and-multiples-index/310761)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 2:19pm UTC](https://discuss.elastic.co/t/filebeat-7-11-0-multiples-path-and-multiples-index/310761 "2022-07-27T14:19:11Z")
Hi, I need to create several indexes for different log files. I am using the following settings: setup.ilm: enabled: false setup.template: enabled: true name: "log\_dev\_testing pattern: "log\_dev\_testing-\*" set… --- ## [Issue while configuring metricbeat in logstash version 7.16.3](https://discuss.elastic.co/t/issue-while-configuring-metricbeat-in-logstash-version-7-16-3/310677)
**Author:** [@Subhanwita\_Mullick](https://discuss.elastic.co/u/Subhanwita_Mullick)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 6:24pm UTC](https://discuss.elastic.co/t/issue-while-configuring-metricbeat-in-logstash-version-7-16-3/310677 "2022-07-26T18:24:02Z")
Hello, I am migrating the logstash to version 7.16.3 from 7.9.3. But there is some error while updating the metricbeat in logstash. Error: Class org.jruby.RubyFloat cannot be cast to class Java.lang.double PFA the scr… --- ## [Script query for child document not working](https://discuss.elastic.co/t/script-query-for-child-document-not-working/310752)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 3\ **Last updated:** [July 27, 2022, 1:52pm UTC](https://discuss.elastic.co/t/script-query-for-child-document-not-working/310752 "2022-07-27T13:52:51Z")
{ "script": { "script": { "source": "doc\['tr\_billed'\].value == doc\['tr\_bill\_discount'\].value", "lang": "painless" }, "boost": 1 } … --- ## [Is there any way to reference the actual record from a graph created in Dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-reference-the-actual-record-from-a-graph-created-in-dashboard/310738)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [July 27, 2022, 1:23pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-reference-the-actual-record-from-a-graph-created-in-dashboard/310738 "2022-07-27T13:23:45Z")
I have created several graphs in Dashboard using Lens. This allows me to visually monitor the incidences. Now I would like to see the logs of the areas of interest in the graphs. Is it possible to see the logs around … --- ## [Long process notification](https://discuss.elastic.co/t/long-process-notification/310638)
**Author:** [@azv](https://discuss.elastic.co/u/azv)\ **Replies:** 2\ **Last updated:** [July 27, 2022, 1:01pm UTC](https://discuss.elastic.co/t/long-process-notification/310638 "2022-07-27T13:01:08Z")
Hi! There are processes in a console application we log spans. How can I create an alert to get a notification if a process takes too long to complete? I have the following example code. private static void Ex… --- ## [Pattern analyzer regex help](https://discuss.elastic.co/t/pattern-analyzer-regex-help/310694)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 2\ **Last updated:** [July 27, 2022, 12:31pm UTC](https://discuss.elastic.co/t/pattern-analyzer-regex-help/310694 "2022-07-27T12:31:10Z")
Got a question regarding the pattern analyzer. Example text: S6UlZgYCJaSIQcy03OOA==Ieuwc7Ix/CQfwoDSOVJl== 2oZjflRSRkcj4/OHcp78== It's encrypted (each letter is hashed to 20 characters ending with == sign). I would like… --- ## [Can't connect to remote cluster](https://discuss.elastic.co/t/cant-connect-to-remote-cluster/310468)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 6\ **Last updated:** [July 27, 2022, 11:34am UTC](https://discuss.elastic.co/t/cant-connect-to-remote-cluster/310468 "2022-07-27T11:34:46Z")
Node 1: ES 7.14.0 (remote\_cluster\_client role is added to yml file) Node 2: ES 7.13.2 I've added my remote cluster via API: PUT /\_cluster/settings { "persistent" : { "cluster" : { "remote" : { "clu… --- ## [Script based conditional sorting for date fields inside nested object](https://discuss.elastic.co/t/script-based-conditional-sorting-for-date-fields-inside-nested-object/310432)
**Author:** [@M\_L](https://discuss.elastic.co/u/M_L)\ **Replies:** 9\ **Last updated:** [July 27, 2022, 12:00pm UTC](https://discuss.elastic.co/t/script-based-conditional-sorting-for-date-fields-inside-nested-object/310432 "2022-07-27T12:00:42Z")
Hello. I have the following property in my mapping: "attempts": { "type": "nested", "properties": { "type": { "type": "keyword" }, "reason": { "type": "keyword" }, "status": { … --- ## [High load at midnight caused by ES docker containers while no usage occurs](https://discuss.elastic.co/t/high-load-at-midnight-caused-by-es-docker-containers-while-no-usage-occurs/310663)
**Author:** [@tamaloa](https://discuss.elastic.co/u/tamaloa)\ **Replies:** 3\ **Last updated:** [July 27, 2022, 10:48am UTC](https://discuss.elastic.co/t/high-load-at-midnight-caused-by-es-docker-containers-while-no-usage-occurs/310663 "2022-07-27T10:48:21Z")
We are running a somewhat untypical setup (not your usual production elasticsearch usage) of around 40 very small (single node) elasticsearch docker instances (version 7.17.3) per server. Most instances contain very lit… --- ## [Remove/Prevent duplicates with rollover](https://discuss.elastic.co/t/remove-prevent-duplicates-with-rollover/310717)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 14\ **Last updated:** [July 27, 2022, 9:49am UTC](https://discuss.elastic.co/t/remove-prevent-duplicates-with-rollover/310717 "2022-07-27T09:49:19Z")
Hi, One of my index has an ILM (index lifecycle management) with rollovers. The problem is, when the index receive data and rollover at the same time, the latest data are duplicated (present in both the new and old ind… --- ## [Date\_histogram interval versus fixed\_interval and calendar\_interval](https://discuss.elastic.co/t/date-histogram-interval-versus-fixed-interval-and-calendar-interval/310733)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 9:35am UTC](https://discuss.elastic.co/t/date-histogram-interval-versus-fixed-interval-and-calendar-interval/310733 "2022-07-27T09:35:45Z")
I am upgrading to elasticsearch 8 which doesn't support the interval on date\_histogram anymore. Instead it expects a fixed\_interval or calendar\_interval. I am a bit confused about the old interval field. Does interval: … --- ## [Bug with legend when it's bottom](https://discuss.elastic.co/t/bug-with-legend-when-its-bottom/308663)
**Author:** [@franckfct](https://discuss.elastic.co/u/franckfct)\ **Replies:** 5\ **Last updated:** [July 27, 2022, 9:30am UTC](https://discuss.elastic.co/t/bug-with-legend-when-its-bottom/308663 "2022-07-27T09:30:09Z")
I've ugraded to V8 yesterday, and i have some bugs. When i modify a graph, if the legend is "bottom", when i save, i have a big white space under the graph between the legend and the bottom of the frame. The space i… --- ## [Accessing a flattened field in Kibana-VegaLite](https://discuss.elastic.co/t/accessing-a-flattened-field-in-kibana-vegalite/310253)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 7\ **Last updated:** [July 27, 2022, 9:27am UTC](https://discuss.elastic.co/t/accessing-a-flattened-field-in-kibana-vegalite/310253 "2022-07-27T09:27:46Z")
Hi there! I'm successfully being able to flatten a nested field in VegaLite (several nestings, by the way). However, even if the flattened field is recognized, I get undefined when accessing the fields. Any ideas why … --- ## [Creating \`Query\` with multi-query clauses, is \`boost\` value required?](https://discuss.elastic.co/t/creating-query-with-multi-query-clauses-is-boost-value-required/310729)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 9:17am UTC](https://discuss.elastic.co/t/creating-query-with-multi-query-clauses-is-boost-value-required/310729 "2022-07-27T09:17:24Z")
In the new elasticsearch java client api, when creating a Query object, do we need to explicitly provide boost value for multi-query clauses? If not provided, what is the default boost value. Anybody had an idea? --- ## [Can we search the documents from multiple index by specifying the index with wildcard character like "test\*"?](https://discuss.elastic.co/t/can-we-search-the-documents-from-multiple-index-by-specifying-the-index-with-wildcard-character-like-test/310645)
**Author:** [@Aurovindo\_Sahu](https://discuss.elastic.co/u/Aurovindo_Sahu)\ **Replies:** 1\ **Last updated:** [July 27, 2022, 8:55am UTC](https://discuss.elastic.co/t/can-we-search-the-documents-from-multiple-index-by-specifying-the-index-with-wildcard-character-like-test/310645 "2022-07-27T08:55:12Z")
I want to search data from multiple indices and all the indices prefix is test. Is this possible to have the index name in the get request like test\* --- ## [Canvas TSVB time filter control](https://discuss.elastic.co/t/canvas-tsvb-time-filter-control/310548)
**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\ **Replies:** 1\ **Last updated:** [July 27, 2022, 8:28am UTC](https://discuss.elastic.co/t/canvas-tsvb-time-filter-control/310548 "2022-07-27T08:28:45Z")
Hi, I'm attempting to build a canvas visualisation of some time series data, using a line on the left hand y axis, and bar on the right hand y axis, and @timestamp across the x. This is a simple setup in TSVB. Replica… --- ## [Aggregate exception occurred {:ERROR=\>#\](https://discuss.elastic.co/t/aggregate-exception-occurred-error-nomethoderror-undefined-method-for-nil-nilclass/308435)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 6\ **Last updated:** [July 27, 2022, 8:13am UTC](https://discuss.elastic.co/t/aggregate-exception-occurred-error-nomethoderror-undefined-method-for-nil-nilclass/308435 "2022-07-27T08:13:39Z")
Hello, I'm new with elastic, I'm working with logs, I want to process from them a new fields based on aggregation. This the my configuration file input { beats { port =\> 5044 } } filter { json { source =\>… --- ## [Filebeat zeek module shows no data](https://discuss.elastic.co/t/filebeat-zeek-module-shows-no-data/310707)
**Author:** [@Bakhtawar](https://discuss.elastic.co/u/Bakhtawar)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 5:05am UTC](https://discuss.elastic.co/t/filebeat-zeek-module-shows-no-data/310707 "2022-07-27T05:05:15Z")
Hi, I followed the steps mentioned in your blog to send zeek logs to elastic. I installed zeek version 4.0.7 and filebeat version 7.17.5. Elasticsearch and kibana version is 7.15.0. Filebeats is unable to send zeek logs … --- ## [Kibana lens display one line with multiple values](https://discuss.elastic.co/t/kibana-lens-display-one-line-with-multiple-values/310602)
**Author:** [@rkidev](https://discuss.elastic.co/u/rkidev)\ **Replies:** 2\ **Last updated:** [July 27, 2022, 3:23am UTC](https://discuss.elastic.co/t/kibana-lens-display-one-line-with-multiple-values/310602 "2022-07-27T03:23:56Z")
I am trying to create time series graph using Kibana(version 8.3) lens. In my document I have following fields - {"timestamp":"2019-06-02T10:16:44", "byte":17, "tName":"Group 1", "reg":"4"} I am able to show byte on th… --- ## [ERR"reason"Unable to Tessellate shape Possible malformed shape detected](https://discuss.elastic.co/t/err-reason-unable-to-tessellate-shape-possible-malformed-shape-detected/309989)
**Author:** [@baiwenbo1997](https://discuss.elastic.co/u/baiwenbo1997)\ **Replies:** 4\ **Last updated:** [July 27, 2022, 2:07am UTC](https://discuss.elastic.co/t/err-reason-unable-to-tessellate-shape-possible-malformed-shape-detected/309989 "2022-07-27T02:07:55Z")
I want to know why it failed, because of accuracy?Why does this polygon be judged as a self -intersecting graph, which causes storage POLYGON((38628095.0171 3322658.2041,38628095.2386 3322662.567299999,38628095.1811 332… --- ## [\[Aggregation Query\] Recreate kibana dashboards in asp.net core](https://discuss.elastic.co/t/aggregation-query-recreate-kibana-dashboards-in-asp-net-core/310373)
**Author:** [@charlene](https://discuss.elastic.co/u/charlene)\ **Replies:** 1\ **Last updated:** [July 27, 2022, 1:36am UTC](https://discuss.elastic.co/t/aggregation-query-recreate-kibana-dashboards-in-asp-net-core/310373 "2022-07-27T01:36:56Z")
Hi all, I am looking for ways to recreate my kibana dashboards on my own website (wanna do a little more one the visuals) , thus I have to get data from elasticsearch and query them and then visualize them. I am using t… --- ## [Having issues translating query dsl to NEST](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/310697)
**Author:** [@charlene](https://discuss.elastic.co/u/charlene)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 12:48am UTC](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/310697 "2022-07-27T00:48:27Z")
I am using the nuget Nest(7.17.4) and am particular stucked at translating the fluent query dsl ...I thought there would be some syntax or any method I can utilize in Nest to simply paste the request queries (from inspec… --- ## [Log stream intermittently fails to display messages](https://discuss.elastic.co/t/log-stream-intermittently-fails-to-display-messages/306272)
**Author:** [@Torin\_Stepan](https://discuss.elastic.co/u/Torin_Stepan)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 10:30pm UTC](https://discuss.elastic.co/t/log-stream-intermittently-fails-to-display-messages/306272 "2022-07-26T22:30:26Z")
Hi, Using a deployment of Kibana v8.0 on the Elastic cloud, I'm aggregating logs from a few systems under a data view and viewing them in the stream page of the Logs app. This works fine at first, but when live streamin… --- ## [Unable to start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/310685)
**Author:** [@Ifty](https://discuss.elastic.co/u/Ifty)\ **Replies:** 4\ **Last updated:** [July 26, 2022, 10:00pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/310685 "2022-07-26T22:00:29Z")
Good Day! I am trying to setup Elasticsearch in a 3 node cluster, I am getting below error while I am trying to start Elasticsearch, // \[root@HRC-ESDC-GLES11 log\]# systemctl status elasticsearch.service â elasticsearc… --- ## [Elasticsearch GeoIP Processor inside foreach processor](https://discuss.elastic.co/t/elasticsearch-geoip-processor-inside-foreach-processor/310681)
**Author:** [@frank\_2](https://discuss.elastic.co/u/frank_2)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-geoip-processor-inside-foreach-processor/310681 "2022-07-26T19:20:43Z")
Hi, I'm running an 8.3.2 cluster, and I have an array containing some objects over which I'd like to iterate and enrich with the GeoIP processor, but am having limited success. I have a foreach processor set up with a … --- ## [Url similarity scoring](https://discuss.elastic.co/t/url-similarity-scoring/310560)
**Author:** [@Moverton](https://discuss.elastic.co/u/Moverton)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 7:01pm UTC](https://discuss.elastic.co/t/url-similarity-scoring/310560 "2022-07-26T19:01:58Z")
I want to create a search that scores by the similarity of Url's. So searching for https://www.sample.com/abc/def/index.html in a field with these values https://www.test.com/abc/ (different host, only one path par… --- ## [How to separate objects inside an array of objects?](https://discuss.elastic.co/t/how-to-separate-objects-inside-an-array-of-objects/310274)
**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 6:56pm UTC](https://discuss.elastic.co/t/how-to-separate-objects-inside-an-array-of-objects/310274 "2022-07-26T18:56:51Z")
Hi, I still new to ELK and I have been trying to process data that come to me as json file. The json file looks lie this. \[ { "user": "Beta", "percent": 28, "startTime": "2022-07-07T11:31:45", "type": "CPU",… --- ## [Query DSL (Domain Specific Language) depends on the Elasticsearch SDK versions?](https://discuss.elastic.co/t/query-dsl-domain-specific-language-depends-on-the-elasticsearch-sdk-versions/310578)
**Author:** [@Bruce\_Zu](https://discuss.elastic.co/u/Bruce_Zu)\ **Replies:** 0\ **Last updated:** [July 25, 2022, 9:37pm UTC](https://discuss.elastic.co/t/query-dsl-domain-specific-language-depends-on-the-elasticsearch-sdk-versions/310578 "2022-07-25T21:37:54Z")
Hi Elasticsearch team, Excuse me, I want to know if the Query DSL (Domain Specific Language) depends on the Elasticsearch client versions? We are upgrading our ES index from 6.8.0 to 7.6.2. The current project uses E… --- ## [After creating new config file and run it copy also old config file data in newly created index](https://discuss.elastic.co/t/after-creating-new-config-file-and-run-it-copy-also-old-config-file-data-in-newly-created-index/310669)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 4:54pm UTC](https://discuss.elastic.co/t/after-creating-new-config-file-and-run-it-copy-also-old-config-file-data-in-newly-created-index/310669 "2022-07-26T16:54:38Z")
Initially i have created c10.conf file it store csv data in recordv2 index it is working fine. After that i have created new configuration file gmrtant.conf to read multiple csv file to read new data which is different t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=848) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=850)