# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=978 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 979 --- ## [Calculated fields](https://discuss.elastic.co/t/calculated-fields/302025)
**Author:** [@wiwinagtor](https://discuss.elastic.co/u/wiwinagtor)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 11:10am UTC](https://discuss.elastic.co/t/calculated-fields/302025 "2022-04-11T11:10:47Z")
Hello everyone, I am making a visualization in kibana in which I need to obtain several calculated fields at the end of it, such as "% of identified customers" (See the example). I searched on the web an also here, that … --- ## [Muliple nested 'Should' sub-queries using DSL](https://discuss.elastic.co/t/muliple-nested-should-sub-queries-using-dsl/302097)
**Author:** [@daniel.butler](https://discuss.elastic.co/u/daniel.butler)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 11:08am UTC](https://discuss.elastic.co/t/muliple-nested-should-sub-queries-using-dsl/302097 "2022-04-11T11:08:32Z")
Hi, I have a query which works as I intended however when trying to replicate the query in DSL I have been unable to get the generated query to match and so the results are obviously incorrect. What I need to achieve i… --- ## [How to display login user details and activities in Kibana UI](https://discuss.elastic.co/t/how-to-display-login-user-details-and-activities-in-kibana-ui/300190)
**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:55am UTC](https://discuss.elastic.co/t/how-to-display-login-user-details-and-activities-in-kibana-ui/300190 "2022-04-11T10:55:22Z")
Hello Team, Is there any way to display user details and activities , performed by user in Kibana UI. I would like to try configuration for UI and audit log is already tried out. Thanks in Advance, Prathibha.M --- ## [Okta - ElastiCloud - We hit an authentication error. Please check your credentials and try again](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882)
**Author:** [@chasep](https://discuss.elastic.co/u/chasep)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:54am UTC](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882 "2022-04-11T10:54:00Z")
Hi, Setting up OKTA\<-\>ElasticCloud SAML 2.0. For Reference, I have followed the steps from following. Integrating Elastic Cloud Kibana with Okta SAML SSO in 2021 - BioTeam Secure your clusters with SAML | Elasticsea… --- ## [Elastic fleet change datastream name based on field value](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 9\ **Last updated:** [April 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155 "2022-04-11T10:49:37Z")
Hi, I need to set different ILM policies based on logs field value (one for PROD , other for NONPROD), so I created an ingest pipeline that renames the \_index field as @ruflin suggested in a github issue and works good w… --- ## [Kibana fails login,commands with ERROR](https://discuss.elastic.co/t/kibana-fails-login-commands-with-error/301504)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:47am UTC](https://discuss.elastic.co/t/kibana-fails-login-commands-with-error/301504 "2022-04-11T10:47:21Z")
Hello i was configuring minimal security for Elasticsearch following the docs bellow. I set a password , but the problem is Kibana fail to login. You will find a screenshot of the error : --- ## [Continuous transform failures](https://discuss.elastic.co/t/continuous-transform-failures/302053)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 2\ **Last updated:** [April 11, 2022, 10:46am UTC](https://discuss.elastic.co/t/continuous-transform-failures/302053 "2022-04-11T10:46:14Z")
Hello, What can cause this error when running a continuous transform ? \[s1-aggs-xxx\] Search context missing, falling back to normal search; request \[apply\_results\] Caused by: org.Elasticsearch.search.SearchContextMiss… --- ## [How check internodes SSL encryption?](https://discuss.elastic.co/t/how-check-internodes-ssl-encryption/302095)
**Author:** [@Barbarossa](https://discuss.elastic.co/u/Barbarossa)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 10:39am UTC](https://discuss.elastic.co/t/how-check-internodes-ssl-encryption/302095 "2022-04-11T10:39:45Z")
If i have a cluster and configured the tranport layer connection to be encrypted, is there a way or some command to actually verify that the communication between all nodes is encrypted? --- ## [Elastic watcher for http 400 and http 500](https://discuss.elastic.co/t/elastic-watcher-for-http-400-and-http-500/302094)
**Author:** [@sravan.kumar.potnuru](https://discuss.elastic.co/u/sravan.kumar.potnuru)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 10:38am UTC](https://discuss.elastic.co/t/elastic-watcher-for-http-400-and-http-500/302094 "2022-04-11T10:38:06Z")
Hello I was quite new to the elastic and its observability stack. I was struggling hard to create the watcher based on the elastic APM data i.e., needs to trigger whenever there is a http 400 or 500 received in the APM… --- ## [Is it possible to add and delete alias to indexes on Kibana?](https://discuss.elastic.co/t/is-it-possible-to-add-and-delete-alias-to-indexes-on-kibana/302004)
**Author:** [@nanopico](https://discuss.elastic.co/u/nanopico)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-and-delete-alias-to-indexes-on-kibana/302004 "2022-04-11T10:19:25Z")
I know that it's possible to programmatically add and create alias through the API as outlined in the documentation Aliases API | Elasticsearch Guide \[8.1\] | Elastic Is it possible to do create an alias and add it to an… --- ## [After installation Kibana does'nt work](https://discuss.elastic.co/t/after-installation-kibana-doesnt-work/301716)
**Author:** [@Supelec](https://discuss.elastic.co/u/Supelec)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:15am UTC](https://discuss.elastic.co/t/after-installation-kibana-doesnt-work/301716 "2022-04-11T10:15:59Z")
Hello, OS server where i installed Kibana is MAc OS Monterey 12.3.1 I installed the ElK stack, i got an error message with Kibana. brew services list Name Status User File Elasticsearch error 256 oth… --- ## [Check if a single point, is contained in documents multiple geohash,](https://discuss.elastic.co/t/check-if-a-single-point-is-contained-in-documents-multiple-geohash/302091)
**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 10:14am UTC](https://discuss.elastic.co/t/check-if-a-single-point-is-contained-in-documents-multiple-geohash/302091 "2022-04-11T10:14:49Z")
So I have a geo point , \[-70, 40\] for example And I have an index with multiple documents, each document containing multiple geohashes of various precisions. I am struggling to find out, how can I query that my geopoin… --- ## [Kibana 7.3.2 Index creation failed](https://discuss.elastic.co/t/kibana-7-3-2-index-creation-failed/302020)
**Author:** [@Siva\_Kumar\_Menta](https://discuss.elastic.co/u/Siva_Kumar_Menta)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:02am UTC](https://discuss.elastic.co/t/kibana-7-3-2-index-creation-failed/302020 "2022-04-11T10:02:20Z")
Hi, I'm trying to create index by loading csv with Kibana version 7.3.2 but getting failed. Provided below are relavant screen shots. Please guide me with solution. Screenshots after loading data: Screen shot for… --- ## [Configuring multiple nodes](https://discuss.elastic.co/t/configuring-multiple-nodes/300922)
**Author:** [@albert2022](https://discuss.elastic.co/u/albert2022)\ **Replies:** 7\ **Last updated:** [April 11, 2022, 9:33am UTC](https://discuss.elastic.co/t/configuring-multiple-nodes/300922 "2022-04-11T09:33:45Z")
We try to run an Elasticsearch cluster with multiple nodes on the same VM for testing purpose and for this we are using the following docker compose file: version: "2.2" services: es01: image: docker.elastic.co/e… --- ## [Elasticsearch documents are dropped on bulk insert](https://discuss.elastic.co/t/elasticsearch-documents-are-dropped-on-bulk-insert/301837)
**Author:** [@JanMo](https://discuss.elastic.co/u/JanMo)\ **Replies:** 3\ **Last updated:** [April 11, 2022, 9:15am UTC](https://discuss.elastic.co/t/elasticsearch-documents-are-dropped-on-bulk-insert/301837 "2022-04-11T09:15:28Z")
I have the following situation: Logstash with a JDBC input connector and an Elasticsearch output connector. The data is loaded initially into the ES, meaning the indices which are filled do not exist prior to the Logstas… --- ## [Eror : No indices match pattern “filebeat-\*” - filebeat 8.1.2](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat-filebeat-8-1-2/302075)
**Author:** [@Ruhan\_Khandakar](https://discuss.elastic.co/u/Ruhan_Khandakar)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 8:24am UTC](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat-filebeat-8-1-2/302075 "2022-04-11T08:24:16Z")
Hi, Please help getting No matching indices found: No indices match pattern "filebeat-\*" this error, with filebeat-8.1.2 Here is my filebeat.yml configuration ###################### Filebeat Configuration Example ###… --- ## [Lens Metric - subtract a value based of number of days in query](https://discuss.elastic.co/t/lens-metric-subtract-a-value-based-of-number-of-days-in-query/301927)
**Author:** [@sqbell](https://discuss.elastic.co/u/sqbell)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 7:46am UTC](https://discuss.elastic.co/t/lens-metric-subtract-a-value-based-of-number-of-days-in-query/301927 "2022-04-11T07:46:50Z")
Hi, I'm trying to create a metric that would show our profits. I'm using Lens Metric and the calculation so far is like so: round((round((sum(money\_amount\_eur\_reverse, kql='type:bet\_transaction OR type:settle\_transacti… --- ## [Connectivity Issue between Winlog - Kafka - Logstash](https://discuss.elastic.co/t/connectivity-issue-between-winlog-kafka-logstash/302071)
**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 7:34am UTC](https://discuss.elastic.co/t/connectivity-issue-between-winlog-kafka-logstash/302071 "2022-04-11T07:34:51Z")
Hello, I am using elastic stack v8 composed of: 2 servers: Masters + data 1 server: data + kibana 1 server: kafka + logstash winglogbeat configuration output.kafka: hosts: \["X.X.X.X:9092"\] topic: "Win… --- ## [Whitespaces are not displayed on the visialization](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340)
**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 7:09am UTC](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340 "2022-04-11T07:09:00Z")
Hi All, I have a string field with multiple whitespaces in it(replaced whitespaces with \_ to show): "numloops\_\_\_\_\_\_\_\_\_\_\_\_\_\_| 5\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_" I see the the text is correctly captured in the Jason output… --- ## [Unable to execute custom mapping in Elasticsearch 7.10.2 Using Logstash 7.10.2](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068)
**Author:** [@Satya\_N](https://discuss.elastic.co/u/Satya_N)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 5:55am UTC](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068 "2022-04-11T05:55:15Z")
Hi All, I am trying to sync data from mysql to Elasticsearch using logstash 7.10.2..Elasticsearch version I am using is : 7.10.2. When I am executing template using logstash , it is not creating in Elasticsearch so ev… --- ## [Aggregation Filter Sort - InternalFilter cannot be cast to class InternalMultiBucketAggregation](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050)
**Author:** [@Sridatta19](https://discuss.elastic.co/u/Sridatta19)\ **Replies:** 4\ **Last updated:** [April 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050 "2022-04-11T05:02:05Z")
I'm try to sort the results generated after performing terms, filter and sum aggregation. But I keep facing an error. GET stats/\_search { "size": 0, "aggs": { "group\_by\_names": { "terms": { "field"… --- ## [Hide username/password ebats](https://discuss.elastic.co/t/hide-username-password-ebats/302062)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 2:43am UTC](https://discuss.elastic.co/t/hide-username-password-ebats/302062 "2022-04-11T02:43:47Z")
right there is a password and username, how do I make the beats that I have don't include it but can still be connected? --- ## [No Structured Logs Found in Stack Monitoring when using Logstash](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 6\ **Last updated:** [April 11, 2022, 2:23am UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005 "2022-04-11T02:23:59Z")
Same issue Running filebeat -\> Elasticsearch = Works, can see Server, GC, Kibana etc logs... filebeat -\> Logstash = No Logs displayed --- ## [How to connect Elastic version 8.0 on EC2 to Spring?](https://discuss.elastic.co/t/how-to-connect-elastic-version-8-0-on-ec2-to-spring/302043)
**Author:** [@hieuxt1002](https://discuss.elastic.co/u/hieuxt1002)\ **Replies:** 5\ **Last updated:** [April 11, 2022, 12:59am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-version-8-0-on-ec2-to-spring/302043 "2022-04-11T00:59:55Z")
Hello everyone, i'm student from Viet Nam, my english is not good, hope you understand for me. I have researched on google, Spring only supports for Elasticsearch version 7.1.x. So how can i do to configure connect Elast… --- ## [No Structured Logs Found in Stack Monitoring when using Logstashs](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776)
**Author:** [@akballow](https://discuss.elastic.co/u/akballow)\ **Replies:** 5\ **Last updated:** [April 10, 2022, 11:13pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776 "2022-04-10T23:13:54Z")
Hello All, Hope someone can help as I spent the past week trying to resolve this issue but couldn't. So some backstory. If I setup Elasticsearch with filebeat pointing to Elasticsearch, the Logs section in Stack Monito… --- ## [Surfacing Index Field Values in Kibana Alerts](https://discuss.elastic.co/t/surfacing-index-field-values-in-kibana-alerts/301903)
**Author:** [@Matt\_Jones](https://discuss.elastic.co/u/Matt_Jones)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 8:03pm UTC](https://discuss.elastic.co/t/surfacing-index-field-values-in-kibana-alerts/301903 "2022-04-10T20:03:15Z")
Hi, I'm setting up Kibana alerts in using a number of connectors (e.g. Email and MS Teams) and alerting on matches against an Elasticsearch query. Alerts are working fine....However, what I cannot figure out is how to … --- ## [Getting Unique Set of nested objects within aggregations](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434)
**Author:** [@Assaf\_Cohen](https://discuss.elastic.co/u/Assaf_Cohen)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 3:30pm UTC](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434 "2022-04-10T15:30:50Z")
Hello, to make my question clear i am attaching steps to reproduce: PUT /test { "mappings": { "dynamic\_templates": \[ { "strings\_as\_keywords": { "match\_mapping\_type": "string", "m… --- ## [How to make suggestions taking into account a few document fields?](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934)
**Author:** [@iNikolas](https://discuss.elastic.co/u/iNikolas)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 3:17pm UTC](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934 "2022-04-10T15:17:03Z")
Hi all! I'm trying to master Elasticsearch and there is one issue I have run into. My documents have fields first\_name, last\_name, and country. And seems the search is working as I'm expecting with a multi\_match query. … --- ## [How to configure Filebeat and Logstash 8.1 with TLS](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-8-1-with-tls/301534)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 2\ **Last updated:** [April 10, 2022, 1:15pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-8-1-with-tls/301534 "2022-04-10T13:15:01Z")
We are trying to secure the connectivity between Filebeat 8.1.1 \>\> Logstash 8.1.1 \>\> Elasticsearch 8.1.1 The documentation says we have to add a .p12 certificate in the output section of filebeat.yml and logstash pipeli… --- ## [Open closed index encountered problems](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046)
**Author:** [@Amirhossein\_Ebadi](https://discuss.elastic.co/u/Amirhossein_Ebadi)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 1:03pm UTC](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046 "2022-04-10T13:03:53Z")
Hi elastic community, I recentley closed an open index in my elastic cluster version 7.0. Few days after I re-opened that closed index.Everything worked fine and reponses status was ok. I used to get indices status by … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=977) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=979)