# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=850 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 851 --- ## [Weighted avg aggregation in lens](https://discuss.elastic.co/t/weighted-avg-aggregation-in-lens/310652)
**Author:** [@tobi](https://discuss.elastic.co/u/tobi)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 3:39pm UTC](https://discuss.elastic.co/t/weighted-avg-aggregation-in-lens/310652 "2022-07-26T15:39:55Z")
Hi together, I currently have an request to implement via lens visualization. We have a weighted field as runtime field (rate \* traffic.count). We want to use that field to calcuate a weighted rate with the sum of all… --- ## [Visualization: upgrading from 6 to 7](https://discuss.elastic.co/t/visualization-upgrading-from-6-to-7/310665)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 3:38pm UTC](https://discuss.elastic.co/t/visualization-upgrading-from-6-to-7/310665 "2022-07-26T15:38:54Z")
Hi everyone! I have been googling quite a bit to try and find some info on how Kibana dashboards are affected during a Major migration from v6 to V7. The only bit of info I found is here and that does not worry me too … --- ## [Kibana not connected to epr.elastic.co Package Registry](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028)
**Author:** [@shuuny-matrix](https://discuss.elastic.co/u/shuuny-matrix)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 3:19pm UTC](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028 "2022-07-26T15:19:41Z")
I have installed Elasticsearch and Kibana in my Ubuntu System in a corporate environment behind firewall and proxies. We have two crt files to use internet in browser. My elasticsearch is running fine. But when I run Ki… --- ## [Fleet can't enroll](https://discuss.elastic.co/t/fleet-cant-enroll/310242)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 2:52pm UTC](https://discuss.elastic.co/t/fleet-cant-enroll/310242 "2022-07-26T14:52:33Z")
i tried to enroll elastic-agent but it has an error "remote server is not ready to accept connections" here's my config .\\elastic-agent.exe install --url=https://urlelastic:8220 --enrollment-token=\ --insecure wh… --- ## [Looukps with memcahed or tanslate filter](https://discuss.elastic.co/t/looukps-with-memcahed-or-tanslate-filter/310650)
**Author:** [@paulohperes](https://discuss.elastic.co/u/paulohperes)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 2:43pm UTC](https://discuss.elastic.co/t/looukps-with-memcahed-or-tanslate-filter/310650 "2022-07-26T14:43:39Z")
Hi, I am doubt about lookups. Recently I implemented a pipeline using the filter plugin Memcached, but the Memcached plugin does not work well with json values. I needed to do this for work: memcached { hosts =\>… --- ## [Logstash-output-cloudwatchlogs](https://discuss.elastic.co/t/logstash-output-cloudwatchlogs/310653)
**Author:** [@jlbai](https://discuss.elastic.co/u/jlbai)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 2:20pm UTC](https://discuss.elastic.co/t/logstash-output-cloudwatchlogs/310653 "2022-07-26T14:20:53Z")
I am looking to get logs out our network devices, firewalls, aruba controllers, switches etc. I am looking at using the output plugin for cloud watch logs GitHub - amazon-archives/logstash-output-cloudwatchlogs: A logsta… --- ## [Copy and ship logs with Filebeat](https://discuss.elastic.co/t/copy-and-ship-logs-with-filebeat/310647)
**Author:** [@biandopa](https://discuss.elastic.co/u/biandopa)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 1:52pm UTC](https://discuss.elastic.co/t/copy-and-ship-logs-with-filebeat/310647 "2022-07-26T13:52:00Z")
Hello, I wanted to know if there is any option with Filebeat or another tool that creates a copy of the logs and ships them to Elasticsearch instead of only shipping them because we need the logs to stay in the cluster … --- ## [Add query timeout in Elastic native query - springboot](https://discuss.elastic.co/t/add-query-timeout-in-elastic-native-query-springboot/310651)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 2:11pm UTC](https://discuss.elastic.co/t/add-query-timeout-in-elastic-native-query-springboot/310651 "2022-07-26T14:11:45Z")
How can I add query timeout in the below Native Seach Query? final QueryBuilder contentTagQuery = QueryBuilders.boolQuery() .filter( QueryBuilders.termQuery("tenantId" , "en")); NativeSearchQuery query =… --- ## [What is proper order of nodes for rolling upgrade?](https://discuss.elastic.co/t/what-is-proper-order-of-nodes-for-rolling-upgrade/310317)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 2:11pm UTC](https://discuss.elastic.co/t/what-is-proper-order-of-nodes-for-rolling-upgrade/310317 "2022-07-26T14:11:26Z")
Hi upgrading an Elastic 6.x to latest 6.x Is there like a particular order that the nodes should be upgraded? Masters first, then data, then coordinators. And then applications like Kibana, Filebeat, logstash etc... T… --- ## [\[copy\] Data Stop ingesting after deleting index](https://discuss.elastic.co/t/copy-data-stop-ingesting-after-deleting-index/310649)
**Author:** [@noa-ru](https://discuss.elastic.co/u/noa-ru)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 1:55pm UTC](https://discuss.elastic.co/t/copy-data-stop-ingesting-after-deleting-index/310649 "2022-07-26T13:55:33Z")
Hello all! i not found a solution for my problem, but i found this post with same problem. And when i found a solution, i discovered what i cant write it in this post. that's why i registered here and created this post… --- ## [Multiple instances of beats running](https://discuss.elastic.co/t/multiple-instances-of-beats-running/310336)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 1:48pm UTC](https://discuss.elastic.co/t/multiple-instances-of-beats-running/310336 "2022-07-26T13:48:13Z")
Fleet + Elastic Agent 8.3.2. Agent is installed on Win10, with only the system integration with all defaults. Looking at the processes running, it appears that there are multiple instances of filebeat & metricbeat runni… --- ## [In heartbeat ver. 7.17 browser type is not working](https://discuss.elastic.co/t/in-heartbeat-ver-7-17-browser-type-is-not-working/310284)
**Author:** [@Heet](https://discuss.elastic.co/u/Heet)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 1:45pm UTC](https://discuss.elastic.co/t/in-heartbeat-ver-7-17-browser-type-is-not-working/310284 "2022-07-26T13:45:44Z")
Trying using using the following code still not working. type: browser id: elastic-website name: Elastic website schedule: "@every 1m" source: inline: script: |- step("load homepage", async () =\> { await page.go… --- ## [Security Onion - Kibana - Unable to load tooltip content in Maps](https://discuss.elastic.co/t/security-onion-kibana-unable-to-load-tooltip-content-in-maps/310535)
**Author:** [@DigitalDick](https://discuss.elastic.co/u/DigitalDick)\ **Replies:** 5\ **Last updated:** [July 26, 2022, 1:30pm UTC](https://discuss.elastic.co/t/security-onion-kibana-unable-to-load-tooltip-content-in-maps/310535 "2022-07-26T13:30:28Z")
Hi, New here and new to Kibana. Any help greatly appreciated. So I have setup Security Onion 2.3, I am using netflow to send logs from Meraki to Security Onion. I can see the logs, I can see the dots on the maps etc. Wh… --- ## [Elasticsearch and Microsoft Windows Enterprise Certificate Authority](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764)
**Author:** [@Ryan\_Porter](https://discuss.elastic.co/u/Ryan_Porter)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764 "2022-07-26T13:25:30Z")
I'm at a bit of a loss here. I'm attempting to secure the Elastic Stack with certs generated by our organization’s Microsoft Enterprise Certificate Authority. Elasticsearch will happily start, but when I attempt to gener… --- ## [Dashboard Autorefresh still not working in Kibana 8.1.1](https://discuss.elastic.co/t/dashboard-autorefresh-still-not-working-in-kibana-8-1-1/310002)
**Author:** [@ondrej-ivanko](https://discuss.elastic.co/u/ondrej-ivanko)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 12:50pm UTC](https://discuss.elastic.co/t/dashboard-autorefresh-still-not-working-in-kibana-8-1-1/310002 "2022-07-26T12:50:58Z")
Hi, the dashboard autorefresh issue still seem to persist in Kibana 8.1.1. I created custom dashboard with filters to display some application logs collected by Fluentd and sent to ElasticSearch. AutoReferesh is working… --- ## [Configuration issue: "xpack.security.enrollment.enabled must be set to true"](https://discuss.elastic.co/t/configuration-issue-xpack-security-enrollment-enabled-must-be-set-to-true/310626)
**Author:** [@najmiehsa](https://discuss.elastic.co/u/najmiehsa)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 12:15pm UTC](https://discuss.elastic.co/t/configuration-issue-xpack-security-enrollment-enabled-must-be-set-to-true/310626 "2022-07-26T12:15:21Z")
Hi, I wanted to install the commercial version of kibana, but I was initially given only one enrollment token when I started using Docker for building purposes. Now I want to generate a new enrollment token via the enr… --- ## [Make elasticsearch aggregation response shorter](https://discuss.elastic.co/t/make-elasticsearch-aggregation-response-shorter/310254)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 9\ **Last updated:** [July 26, 2022, 12:22pm UTC](https://discuss.elastic.co/t/make-elasticsearch-aggregation-response-shorter/310254 "2022-07-26T12:22:03Z")
Hi, I am dealing with elasticsearch aggregation response json like below. { "took": 2, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed": 0 }, "hits": { … --- ## [Three nodes cluster without quorum](https://discuss.elastic.co/t/three-nodes-cluster-without-quorum/310632)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 12:18pm UTC](https://discuss.elastic.co/t/three-nodes-cluster-without-quorum/310632 "2022-07-26T12:18:52Z")
Hello. I am new here in this community. I have a three nodes cluster but two nodes are on the same virt and one on another. I need to set them like three masters and three data nodes. When I am updating the virt I nee… --- ## [Multiple filebeat log with logstash not working](https://discuss.elastic.co/t/multiple-filebeat-log-with-logstash-not-working/310472)
**Author:** [@sazzad114](https://discuss.elastic.co/u/sazzad114)\ **Replies:** 4\ **Last updated:** [July 26, 2022, 12:15pm UTC](https://discuss.elastic.co/t/multiple-filebeat-log-with-logstash-not-working/310472 "2022-07-26T12:15:55Z")
filebeat.input: - type: log enabled: true paths: - /var/log/nginx/\*log tags: \["server-log"\] fields: {log\_type: Server-log} - type: log enabled: true paths: - /var/www/laravel/storage/logs/\*.log tags… --- ## [Geo-bounding box query returns results outside of the box](https://discuss.elastic.co/t/geo-bounding-box-query-returns-results-outside-of-the-box/310618)
**Author:** [@xinyuluo](https://discuss.elastic.co/u/xinyuluo)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 10:29am UTC](https://discuss.elastic.co/t/geo-bounding-box-query-returns-results-outside-of-the-box/310618 "2022-07-26T10:29:37Z")
Hi! I am new to this space. I was trying to use geo-bounding box feature to match geo\_points inside a bounding box, but it seems that my query always generates returns outside of the box. for instance, the following quer… --- ## [Elastic Agent elasticsearch metrics/logs integration?](https://discuss.elastic.co/t/elastic-agent-elasticsearch-metrics-logs-integration/310619)
**Author:** [@markn](https://discuss.elastic.co/u/markn)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 10:06am UTC](https://discuss.elastic.co/t/elastic-agent-elasticsearch-metrics-logs-integration/310619 "2022-07-26T10:06:01Z")
Hi, for self monitoring we want to use the elastic agent to ship Elasticsearch logs and metrics to our monitoring cluster. According to documentation there should be a version 0.2.0 elasticsearch (technical preview) pa… --- ## [My ES client always receives "Request execution exceeded the timeout"](https://discuss.elastic.co/t/my-es-client-always-receives-request-execution-exceeded-the-timeout/310309)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 9:59am UTC](https://discuss.elastic.co/t/my-es-client-always-receives-request-execution-exceeded-the-timeout/310309 "2022-07-26T09:59:04Z")
Hi everyone, When validating my indexes on client side, requests are sent to my ES server. After 100s, I received a timeout exception from the client. Failure: org.hibernate.search.util.common.SearchException: HSEARCH4… --- ## [Use "calculate" to make an operation on a flattened field in Vega](https://discuss.elastic.co/t/use-calculate-to-make-an-operation-on-a-flattened-field-in-vega/310100)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 9:51am UTC](https://discuss.elastic.co/t/use-calculate-to-make-an-operation-on-a-flattened-field-in-vega/310100 "2022-07-26T09:51:28Z")
Hi! I'm trying to make a simple multiplication operation on a flattened field, but I don't seem to be able to access the flattened fields in the calculation. For instance, if I make this multiplication operation with n… --- ## [How does Logstash determine that a field matches a string regularly？](https://discuss.elastic.co/t/how-does-logstash-determine-that-a-field-matches-a-string-regularly/310586)
**Author:** [@wentao\_Xiong](https://discuss.elastic.co/u/wentao_Xiong)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 9:16am UTC](https://discuss.elastic.co/t/how-does-logstash-determine-that-a-field-matches-a-string-regularly/310586 "2022-07-26T09:16:30Z")
I am a newcomer to ELK, and now I encounter a problem as shown in the title: How does Logstash determine that a field matches a string regularly? such as whether the \[path\] field contains the "err" string? (the path fie… --- ## [How to do to connect filebeat to kibana?](https://discuss.elastic.co/t/how-to-do-to-connect-filebeat-to-kibana/310566)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 9:05am UTC](https://discuss.elastic.co/t/how-to-do-to-connect-filebeat-to-kibana/310566 "2022-07-26T09:05:00Z")
how to connect filebeat to kibana(accessed with https not http) ? because when i try "$ sudo filebeat setup -e" this error appear : \[i use version 8.3.2 for kibana elastic and filebeat \] Exiting: error connecting to Ki… --- ## [Regarding Proximity search with wildcard in Query String](https://discuss.elastic.co/t/regarding-proximity-search-with-wildcard-in-query-string/310609)
**Author:** [@Pratik\_Lahudkar](https://discuss.elastic.co/u/Pratik_Lahudkar)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 8:31am UTC](https://discuss.elastic.co/t/regarding-proximity-search-with-wildcard-in-query-string/310609 "2022-07-26T08:31:19Z")
Hi All, I am trying to implement proximity search with Wildcard in my data My query is - {"query": ""Hello world"~1"} I want to use it like "query": ""Hello\* world"~1" if there is any way to do so, please reply o… --- ## [How to archive data from a Transform?](https://discuss.elastic.co/t/how-to-archive-data-from-a-transform/310313)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 8:20am UTC](https://discuss.elastic.co/t/how-to-archive-data-from-a-transform/310313 "2022-07-26T08:20:57Z")
Hi, A Transform add data to a unique index. This index is getting too big. I would like to store the data (more than 2 days old) to another warm index. How could I achieve that? Thanks a lot for your time! --- ## [Dynamic URL input in Logstash](https://discuss.elastic.co/t/dynamic-url-input-in-logstash/310605)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 7:55am UTC](https://discuss.elastic.co/t/dynamic-url-input-in-logstash/310605 "2022-07-26T07:55:46Z")
Hello, I am trying to insert a URL as an input in Logstash, but the content of the URL is too large for Logstash to take in all at once with http\_poller (memory error), so what I can do is add arguments such as "PageNo"… --- ## [Elastic causes very high disk usage with minimal data](https://discuss.elastic.co/t/elastic-causes-very-high-disk-usage-with-minimal-data/310384)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 5\ **Last updated:** [July 26, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-causes-very-high-disk-usage-with-minimal-data/310384 "2022-07-26T07:18:50Z")
Hello, as my other post explained our 3 Node cluster fried 2 SSDs in 4 hours. We are currently investigating what really happened. Our System: 3 Nodes, Elastic 7.17.3, Kibana 7.17.3, Every node has a 2TB SSD and 32GB … --- ## [Infinite extent for field](https://discuss.elastic.co/t/infinite-extent-for-field/310091)
**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\ **Replies:** 13\ **Last updated:** [July 26, 2022, 6:49am UTC](https://discuss.elastic.co/t/infinite-extent-for-field/310091 "2022-07-26T06:49:21Z")
I copy and paste from Population Pyramid Example | Vega to Kibana and I got Infinite extent for field "people": \[Infinity, -Infinity\] { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "A popu… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=849) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=851)