# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=918 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 919 --- ## [The indices which match this index pattern don't contain any time fields](https://discuss.elastic.co/t/the-indices-which-match-this-index-pattern-dont-contain-any-time-fields/306146)
**Author:** [@danconcru](https://discuss.elastic.co/u/danconcru)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 4:12pm UTC](https://discuss.elastic.co/t/the-indices-which-match-this-index-pattern-dont-contain-any-time-fields/306146 "2022-06-01T16:12:23Z")
Hi everywhere, I know that this error is posted in another post, but I am tried everything without success. I have a fluentbit that create document reading differents logs from kubernet and send it's to elastcisearch. … --- ## [Can not get run Elasticsearch 6 on my MAC](https://discuss.elastic.co/t/can-not-get-run-elasticsearch-6-on-my-mac/301707)
**Author:** [@Sajjad\_Murtaza](https://discuss.elastic.co/u/Sajjad_Murtaza)\ **Replies:** 16\ **Last updated:** [June 1, 2022, 3:50pm UTC](https://discuss.elastic.co/t/can-not-get-run-elasticsearch-6-on-my-mac/301707 "2022-06-01T15:50:55Z")
Hi all, I can not get run Elasticsearch 6 on my MAC ➜ ~ brew services list Name Status User File dbus none … --- ## [ElasticSearch pagination - from/size vs Search After for number of hits less than 10k](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855)
**Author:** [@ano](https://discuss.elastic.co/u/ano)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-pagination-from-size-vs-search-after-for-number-of-hits-less-than-10k/305855 "2022-06-01T15:16:52Z")
Hi, I'm using Elasticsearch, and for paginating the search results, should I use the simple from/size, or should I go with search after. I've read that if the number of hits is less than 10k, then from/size is acceptabl… --- ## [Open Source Java Client XPack Security SSL Example](https://discuss.elastic.co/t/open-source-java-client-xpack-security-ssl-example/306075)
**Author:** [@nek4life](https://discuss.elastic.co/u/nek4life)\ **Replies:** 3\ **Last updated:** [June 1, 2022, 1:24pm UTC](https://discuss.elastic.co/t/open-source-java-client-xpack-security-ssl-example/306075 "2022-06-01T13:24:08Z")
I'm trying to use the new Java Client and running into issues when trying to connect to Elasticsearch running in a docker container now that xpack security is turned on by default. I'm getting the following error here. … --- ## [Monitor per Core w/ Metricbeat](https://discuss.elastic.co/t/monitor-per-core-w-metricbeat/306139)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 2:15pm UTC](https://discuss.elastic.co/t/monitor-per-core-w-metricbeat/306139 "2022-06-01T14:15:18Z")
I am needing to monitor processes running per CPU core using Metricbeat. I currently have the the windows.yml module configured with the perfmon metricset, however it is only showing the overall CPU and I'm needing to se… --- ## [Keep restarting Filebeat, Filebeat will lose some log](https://discuss.elastic.co/t/keep-restarting-filebeat-filebeat-will-lose-some-log/306138)
**Author:** [@xiongjunkun](https://discuss.elastic.co/u/xiongjunkun)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 2:13pm UTC](https://discuss.elastic.co/t/keep-restarting-filebeat-filebeat-will-lose-some-log/306138 "2022-06-01T14:13:57Z")
I'm testing Filebeat 7.12.0 for possible loss of logs, my input configuration is as follows: - type: log enabled: true paths: -/xxx/xxx.log I also wrote a python program: write 50,000 logs, and sleep for 1~2 se… --- ## [What does that \* in my node means?](https://discuss.elastic.co/t/what-does-that-in-my-node-means/306125)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 1:48pm UTC](https://discuss.elastic.co/t/what-does-that-in-my-node-means/306125 "2022-06-01T13:48:55Z")
I've been trying out working with more than one node and once checked them in DevTools I found this \* in one of my nodes. It's a silly thing but I want to avoid any misconception, so what does it mean? --- ## [Subselect filter for aggragation](https://discuss.elastic.co/t/subselect-filter-for-aggragation/306054)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 1:24pm UTC](https://discuss.elastic.co/t/subselect-filter-for-aggragation/306054 "2022-06-01T13:24:42Z")
Hi, I have been searching for a way to solve the following problem by performing a query or aggregation instead of looping through the data and filtering the results myself. I haven't found a solution up until now and w… --- ## [Generic filter for Messages containing JSON](https://discuss.elastic.co/t/generic-filter-for-messages-containing-json/304810)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 12:56pm UTC](https://discuss.elastic.co/t/generic-filter-for-messages-containing-json/304810 "2022-06-01T12:56:33Z")
Hi, I have the following initial situation, we get various log messages which have JSON content, they look like this, for example: message:Log Text case1 #json: {"case1-total":26,"case-valid":8,"case-duplicates":16,"c… --- ## [Kibana couldn't find verification code](https://discuss.elastic.co/t/kibana-couldnt-find-verification-code/305371)
**Author:** [@Nikos\_Kostis](https://discuss.elastic.co/u/Nikos_Kostis)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 12:44pm UTC](https://discuss.elastic.co/t/kibana-couldnt-find-verification-code/305371 "2022-06-01T12:44:36Z")
Trying to initially connect kibana 8.2.0 to elastic manually i get promted to enter the kibana verification code that i can get from the kibana pod, (i am trying to run elk stack in aks cluster). So i exec into the kib… --- ## [Logstash empty range in char class error](https://discuss.elastic.co/t/logstash-empty-range-in-char-class-error/306103)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 9:47am UTC](https://discuss.elastic.co/t/logstash-empty-range-in-char-class-error/306103 "2022-06-01T09:47:18Z")
Hello, I'm new to Elasticsearch I'm working with log files comming from filebeat and Filebeat and I'm trying to add a field "response\_time", and then affect the difference between timestamp to It. So I create a logsta… --- ## [Java for Elasticsearch version](https://discuss.elastic.co/t/java-for-elasticsearch-version/306094)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 12:04pm UTC](https://discuss.elastic.co/t/java-for-elasticsearch-version/306094 "2022-06-01T12:04:52Z")
Hai. I have a question here. Before this im using Elasticsearch version 7.3.1 with java 11. Now after I upgraded Elasticsearch to version 7.17.1, i accidentally upgrade the java also which java 17. Is there any impact o… --- ## [Elasticsearch query to capture '#' character](https://discuss.elastic.co/t/elasticsearch-query-to-capture-character/305906)
**Author:** [@andresf](https://discuss.elastic.co/u/andresf)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-capture-character/305906 "2022-06-01T11:58:44Z")
Hi, I want to create alert based on Elasticsearch query result and we have log message that contain "Error #-" from specific hostname. { "query": { "bool": { "must": \[ { "match": {"message": "Error … --- ## [Use the java API client to connect to an ES instance at a given URL](https://discuss.elastic.co/t/use-the-java-api-client-to-connect-to-an-es-instance-at-a-given-url/305622)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 5\ **Last updated:** [June 1, 2022, 11:42am UTC](https://discuss.elastic.co/t/use-the-java-api-client-to-connect-to-an-es-instance-at-a-given-url/305622 "2022-06-01T11:42:25Z")
Hi, I'm migrating XWiki to use the new Java API client with ES 8.2.0 and I can't find a way to tell the API to connect to a URL (https://domainname/path). If I use RestClient restClient = RestClient.builder(HttpHost.cr… --- ## [Comparing multiple filters in a visualization - kibana 7](https://discuss.elastic.co/t/comparing-multiple-filters-in-a-visualization-kibana-7/305945)
**Author:** [@ashyo98](https://discuss.elastic.co/u/ashyo98)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 11:38am UTC](https://discuss.elastic.co/t/comparing-multiple-filters-in-a-visualization-kibana-7/305945 "2022-06-01T11:38:41Z")
I have the following visualization I am looking to have some way to dynamically query multiple filters. An example query could be like: c\_status: \[300 TO 399\] vs c\_status: \[400 TO 499\] vs c\_status: \>=500 Should re… --- ## [Aggregation over collapsed field inner\_hits?](https://discuss.elastic.co/t/aggregation-over-collapsed-field-inner-hits/305980)
**Author:** [@Evelyn\_Gillie](https://discuss.elastic.co/u/Evelyn_Gillie)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 11:24am UTC](https://discuss.elastic.co/t/aggregation-over-collapsed-field-inner-hits/305980 "2022-06-01T11:24:44Z")
Listing: item\_id seller\_id price I want to group together all listings for the same item, and show the average price across all sellers. I'm using field collapsing on item\_id, but is there a way to to compute the… --- ## [Best way to retrieve multiple fields for a set of field values](https://discuss.elastic.co/t/best-way-to-retrieve-multiple-fields-for-a-set-of-field-values/304954)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 7\ **Last updated:** [June 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/best-way-to-retrieve-multiple-fields-for-a-set-of-field-values/304954 "2022-06-01T11:15:29Z")
Hello, I need to get from Elasticsearch specific fields for some number of hosts. This is my current approach where I prefer the list of "host.hostname" fields and "size" based on the size of list. """ { … --- ## [Vega-Lite condition in Kibana unexpected behaviour](https://discuss.elastic.co/t/vega-lite-condition-in-kibana-unexpected-behaviour/306014)
**Author:** [@monicakp](https://discuss.elastic.co/u/monicakp)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/vega-lite-condition-in-kibana-unexpected-behaviour/306014 "2022-06-01T11:15:19Z")
Hi. I'm creating a custom visualization using Vega-Lite in Kibana. I have one rectangle per document in my index, and based on a field (flag) in the document color the box either red or green. However, I've come across… --- ## [UnknownHostException while connecting to Elasticsearch](https://discuss.elastic.co/t/unknownhostexception-while-connecting-to-elasticsearch/305770)
**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\ **Replies:** 9\ **Last updated:** [June 1, 2022, 11:04am UTC](https://discuss.elastic.co/t/unknownhostexception-while-connecting-to-elasticsearch/305770 "2022-06-01T11:04:52Z")
Hi, while doing my first steps with the tutorial i face much problems even executing the first lines of code. I get an java.net.UnknownHostException that says "Der angegebene Host ist unbekannt (https://xxx.yyyzzz.co… --- ## [Server certificate CA fingerprint does not match the value configured in caFingerprint](https://discuss.elastic.co/t/server-certificate-ca-fingerprint-does-not-match-the-value-configured-in-cafingerprint/304783)
**Author:** [@Karuna](https://discuss.elastic.co/u/Karuna)\ **Replies:** 6\ **Last updated:** [June 1, 2022, 10:57am UTC](https://discuss.elastic.co/t/server-certificate-ca-fingerprint-does-not-match-the-value-configured-in-cafingerprint/304783 "2022-06-01T10:57:56Z")
Hey, I'm using Elasticsearch with a Javascript proxy, almost exactly the same as the example provided here: https://github.com/elastic/elasticsearch-js. We have a few proxies around the world and three servers in our c… --- ## [Apply index.default\_pipeline to an index-pattern?](https://discuss.elastic.co/t/apply-index-default-pipeline-to-an-index-pattern/306028)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 10:40am UTC](https://discuss.elastic.co/t/apply-index-default-pipeline-to-an-index-pattern/306028 "2022-06-01T10:40:53Z")
My data is split across monthly indexes such as virtualisation-capacity-2022-05. How do I set an index.default\_pipeline for an index-pattern such as virtualisation-capacity-\* so the default pipeline applies to all the mo… --- ## [The es-cluster warm-node rebalance tasks keeps going and some node shards decrease for long time](https://discuss.elastic.co/t/the-es-cluster-warm-node-rebalance-tasks-keeps-going-and-some-node-shards-decrease-for-long-time/306074)
**Author:** [@yitiao\_feiyu](https://discuss.elastic.co/u/yitiao_feiyu)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 10:28am UTC](https://discuss.elastic.co/t/the-es-cluster-warm-node-rebalance-tasks-keeps-going-and-some-node-shards-decrease-for-long-time/306074 "2022-06-01T10:28:20Z")
version ：7.17 The es-cluster warm-node rebalance tasks keeps going and not stop, warm node 's index comes from hot-node by ILM policy control, I didn't update warm index directly. I hava snapshot task, but I think it'… --- ## [How i can show percentage on gauge chart](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 8\ **Last updated:** [June 1, 2022, 10:27am UTC](https://discuss.elastic.co/t/how-i-can-show-percentage-on-gauge-chart/306090 "2022-06-01T10:27:46Z")
I have a column in data which contain 1000 row and values are 0 and 1 , how i can calculate percentage and show on gauge. for example 750 rows have 1 than percentage is 75 --- ## [ILM not working correctly](https://discuss.elastic.co/t/ilm-not-working-correctly/304529)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 4\ **Last updated:** [June 1, 2022, 10:01am UTC](https://discuss.elastic.co/t/ilm-not-working-correctly/304529 "2022-06-01T10:01:22Z")
Hello, Need some help / advice with ILM. I set up ILM policy to move data to cold tier, after exact amount of days, but for some reason it did not trigger migrate action. I then started to experiment with ILM console co… --- ## [How to get details from \_nodes api with java client?](https://discuss.elastic.co/t/how-to-get-details-from-nodes-api-with-java-client/305732)
**Author:** [@iatalay](https://discuss.elastic.co/u/iatalay)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 9:53am UTC](https://discuss.elastic.co/t/how-to-get-details-from-nodes-api-with-java-client/305732 "2022-06-01T09:53:36Z")
Hello, I am trying to get details from \_nodes api using Elasticsearch java client 7.17.3. Following code block throws an exception. Is there anyone have an idea about what is wrong here? Thanks, NodesInfoRequest.Buil… --- ## [How to force a forcemerge?](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 7\ **Last updated:** [June 1, 2022, 8:35am UTC](https://discuss.elastic.co/t/how-to-force-a-forcemerge/305090 "2022-06-01T08:35:42Z")
How do I force a forcemerge to run for shards with only one segment? I changed index.codec on my index to BEST\_COMPRESSION and I want my segments use it. But when I run forcemerge, it immediately returns. Guessing beca… --- ## [Create and modify fleet policy using kibana.yml](https://discuss.elastic.co/t/create-and-modify-fleet-policy-using-kibana-yml/305575)
**Author:** [@greibrokka](https://discuss.elastic.co/u/greibrokka)\ **Replies:** 2\ **Last updated:** [June 1, 2022, 9:41am UTC](https://discuss.elastic.co/t/create-and-modify-fleet-policy-using-kibana-yml/305575 "2022-06-01T09:41:48Z")
Elastic/Kibana/Fleet version 8.2.0 I'm trying to manage our fleet policies using kibana.yml, but have issues on getting the correct syntax for vars of type "yaml" (gist:0c91b495d1539ae93584da73052f1679 · GitHub) Here i… --- ## [\[analysis\] Kuromoji: can't analaze text with Half-width space in user dictionary](https://discuss.elastic.co/t/analysis-kuromoji-cant-analaze-text-with-half-width-space-in-user-dictionary/306097)
**Author:** [@cross1154](https://discuss.elastic.co/u/cross1154)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 9:19am UTC](https://discuss.elastic.co/t/analysis-kuromoji-cant-analaze-text-with-half-width-space-in-user-dictionary/306097 "2022-06-01T09:19:53Z")
I try to use kuromoji user dictionary to make Elasticsearch can analazed japanese name which with Half-width space between family name & first name. Settings example looks like the below: { "settings": { "analys… --- ## [AWS VPC Endpoint to S3 still worth/recommended to enable for Elasticsearch in a private subnet?](https://discuss.elastic.co/t/aws-vpc-endpoint-to-s3-still-worth-recommended-to-enable-for-elasticsearch-in-a-private-subnet/306092)
**Author:** [@AS11](https://discuss.elastic.co/u/AS11)\ **Replies:** 0\ **Last updated:** [June 1, 2022, 9:02am UTC](https://discuss.elastic.co/t/aws-vpc-endpoint-to-s3-still-worth-recommended-to-enable-for-elasticsearch-in-a-private-subnet/306092 "2022-06-01T09:02:43Z")
Does the following recommendation Instead we recommend creating a VPC endpoint that enables connecting to S3 in instances that reside in a private subnet in an AWS VPC. This will eliminate any limitations imposed by th… --- ## [Compare data from different time ranges and calculate change](https://discuss.elastic.co/t/compare-data-from-different-time-ranges-and-calculate-change/305949)
**Author:** [@Rhinos](https://discuss.elastic.co/u/Rhinos)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 9:00am UTC](https://discuss.elastic.co/t/compare-data-from-different-time-ranges-and-calculate-change/305949 "2022-06-01T09:00:16Z")
Hello, I am rather new to using Kibana, so please don't mind if I misuse terminology. In the end my issue is about presenting AWS Security Hub data, the findings end up in Elasticsearch / Kibana where we want to proces… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=917) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=919)