# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=981 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 982 --- ## [How to use Qlik sense script in elasticsearch](https://discuss.elastic.co/t/how-to-use-qlik-sense-script-in-elasticsearch/301807)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 2:40pm UTC](https://discuss.elastic.co/t/how-to-use-qlik-sense-script-in-elasticsearch/301807 "2022-04-07T14:40:10Z")
i Need to migrate data from Qlik sense to Elasticsearch the data is loaded in Qlik sense with a script i dont have any prerequisite in qlik sense script i would like to know how to use that script to load data in Elastic… --- ## [My second node cannot access the repository](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755)
**Author:** [@Mestre](https://discuss.elastic.co/u/Mestre)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 2:29pm UTC](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755 "2022-04-07T14:29:16Z")
My second node cannot access the repository, on every Elasticsearch.yml (node1 & node 2) I have the same line path.repo: /home/lab/sambashare On node 1 y created a shared folder with samba that's is located on /home/la… --- ## [Can be Rally used to benchmark Kibana?](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 2:22pm UTC](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794 "2022-04-07T14:22:15Z")
I want to benchmark an Elastic Cloud Kibana installation and I was thinking on using Rally. Is it possible? and how? Thanks! --- ## [Selectively choosing documents from an index to include in a snapshot](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764)
**Author:** [@hishamnajem](https://discuss.elastic.co/u/hishamnajem)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 2:15pm UTC](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764 "2022-04-07T14:15:21Z")
Hello, is there a way within a single operation selectively include only some documents (based on a filter) when creating a snapshot? For example if I have an index named index-1 and it has 1000 docs of which 100 includ… --- ## [Filebeat daemon](https://discuss.elastic.co/t/filebeat-daemon/301777)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-daemon/301777 "2022-04-07T13:59:26Z")
Hello , I want to get filebeat on docker, i followed the instructions here : How to run Filebeat with Docker and use it with ELK stack But when i try to run the Filebeat container using this configuration : docker run… --- ## [Cannot upgrade to 8.x; cannot find incompatible indices](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526)
**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 1:56pm UTC](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526 "2022-04-07T13:56:57Z")
I'm not able to upgrade my cluster to 8.x. The Upgrade Assistant (via Kibana) does not identify any indices that need to be migrated (I additionally clicked the "migrate button," regardless). I'm stuck. After upgrading… --- ## [Logstash Filter issue](https://discuss.elastic.co/t/logstash-filter-issue/300950)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 1:49pm UTC](https://discuss.elastic.co/t/logstash-filter-issue/300950 "2022-04-07T13:49:11Z")
Hi, I have a problem with a logstash filter. The message which has to be filtered looks like: Imported data: {"total":10,"valid":7,"violations":{"missing":\["359072065634251","359072065633741"\],"Data":\["35907206563425… --- ## [What is the correct way to deploy \`Elastic Agent\` 8 via Docker?](https://discuss.elastic.co/t/what-is-the-correct-way-to-deploy-elastic-agent-8-via-docker/301688)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 10:54am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-deploy-elastic-agent-8-via-docker/301688 "2022-04-07T10:54:47Z")
I am trying to configure Elastic Stack using docker-compose.yml as follows, where Kibana gets the API key via bin/elasticsearch-create-enrollment-token -s kibana. version: "3.8" services: elasticsearch-node01: i… --- ## [Unable launch winlogbeats on windows 10 x86](https://discuss.elastic.co/t/unable-launch-winlogbeats-on-windows-10-x86/301863)
**Author:** [@lolo54000](https://discuss.elastic.co/u/lolo54000)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:18pm UTC](https://discuss.elastic.co/t/unable-launch-winlogbeats-on-windows-10-x86/301863 "2022-04-07T12:18:58Z")
Hi I want to install winlogbeat on windows 10 pro x86 (20h2). (my processor is a core I3 2100 ) I download the last version (8.1.1) in zip format and when i want to launch winlogbeat.exe i have an error that tell me : … --- ## [Elasticsearch filters aggregation does not return array format](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736)
**Author:** [@abhi-jana](https://discuss.elastic.co/u/abhi-jana)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 1:05pm UTC](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736 "2022-04-07T13:05:44Z")
The filters aggregation returns bucket as object "buckets": { "errors": { "doc\_count": 1 }, "warnings": { "doc\_count": 2 } } But i would like to return a … --- ## [What Does The Various Data Files Mean?](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756)
**Author:** [@shaloms](https://discuss.elastic.co/u/shaloms)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 12:55pm UTC](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756 "2022-04-07T12:55:27Z")
Hi All, I'm new to Elasticsearch and this is my first time posting here, so apologies if I'm doing something incorrectly. Looking in the data directory, I see that there are lot of types of data files such as cfs, cfe,… --- ## [Terms aggregation on field with lowercase normalizer](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 12:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640 "2022-04-07T12:54:15Z")
Hi, I mapped the following field: "name": { "type": "keyword", "normalizer": "lowercase", "fields": { "text": { "type": "text" } When I run Terms aggregation on this field, I get lowercase results. How can I get the … --- ## [Error - No application was found at this URL. Try going back or choosing an app from the menu](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:53pm UTC](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867 "2022-04-07T12:53:52Z")
Hi Experts, I created the dashboard in default space and imported that under space-test in kibana. Though the dashboard was imported successfully in space-test, I am not able to edit that dashboard in space-test. Whil… --- ## [Kibana saved objects index pattern update API](https://discuss.elastic.co/t/kibana-saved-objects-index-pattern-update-api/301793)
**Author:** [@uncleAlbert](https://discuss.elastic.co/u/uncleAlbert)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 12:39pm UTC](https://discuss.elastic.co/t/kibana-saved-objects-index-pattern-update-api/301793 "2022-04-07T12:39:42Z")
Hello, I see here the correct way to upload a new scripted field to an index pattern in Kibana. If I want to update a scripted field, can I append to the index pattern attributes.field? Will this overwrite the current … --- ## [BUG in Kibana Link - Query Gets Lost](https://discuss.elastic.co/t/bug-in-kibana-link-query-gets-lost/300608)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 12:12pm UTC](https://discuss.elastic.co/t/bug-in-kibana-link-query-gets-lost/300608 "2022-04-07T12:12:27Z")
We seem to have found a possible bug in Kibana v 7.16.2 where the query gets lost after navigation. Enter a search term in Kibana - results are displayed Copy the browser URL and open it in a new tab Same results are d… --- ## [Kibana Goal chart - Max Value](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845)
**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 12:00pm UTC](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845 "2022-04-07T12:00:47Z")
Hello Team, I know this question has been asked many times, but just wish to know if this is possible in the latest Kibana version 8.1, below is my query I have 2 host groups, each containing a set of systems, lets tak… --- ## [Thresholds for Search Latency & What to do when Search Latency is high](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850 "2022-04-07T11:46:35Z")
Hello everyone! Recently we are trying to develop a monitor for Search Latency in Elasticsearch. (The same as the Stack Monitoring chart) I researched optimum threshold values for Search Latency but couldn't find any do… --- ## [Pattern Capture Token Filter giving same start and end offset position](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858 "2022-04-07T11:46:34Z")
I was following the Pattern Capture Token Filter example on the Elasticsearch 5.6 documentation. I tried running one example on my local elastic instance. I got the tokens but they all are showing the same start and end … --- ## [Use Elasticsearch to read lucene documents](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 11:38am UTC](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852 "2022-04-07T11:38:48Z")
Hi All, I have an application that stores the data in lucene format. I want to read this data using Elasticsearch. Is there a way to implement the same? I have tried reindex api through kibana but that does not seem t… --- ## [Missing CPU Memory and network data](https://discuss.elastic.co/t/missing-cpu-memory-and-network-data/301856)
**Author:** [@Sonal1](https://discuss.elastic.co/u/Sonal1)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 10:52am UTC](https://discuss.elastic.co/t/missing-cpu-memory-and-network-data/301856 "2022-04-07T10:52:28Z")
Hi, We are trying to pull data for nodes from converge cloud but cpu, memory and network are shown as zero. Other data is coming. Is it so that metricbeat donot pull data for cpu, memory and network from converge cloud … --- ## [Create bulkRequest using latest java API client(8.1.1) for list of products using builder lambda method](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573)
**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 10:49am UTC](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573 "2022-04-07T10:49:49Z")
I am having a list of Products(for simplicity let's assume it has an id, brand, and name properties), and I want to index this list of products to Elasticsearch using java API client version 8.1.1. BulkRequest in java a… --- ## [Running filebeat with the setup command docker](https://discuss.elastic.co/t/running-filebeat-with-the-setup-command-docker/301853)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 10:08am UTC](https://discuss.elastic.co/t/running-filebeat-with-the-setup-command-docker/301853 "2022-04-07T10:08:20Z")
Hi everyone, i'm trying to install elk and filebeat on docker, well i uploaded the image of elk and it worked i can go to the kibana dashboard and view elastic ,... Now I want to install filebeat image so i followed the… --- ## [Filebeat Azure Module Base64 Issue](https://discuss.elastic.co/t/filebeat-azure-module-base64-issue/301198)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 8\ **Last updated:** [April 7, 2022, 10:06am UTC](https://discuss.elastic.co/t/filebeat-azure-module-base64-issue/301198 "2022-04-07T10:06:14Z")
Good Afternoon, We currently get the error below when running the azure module on Filebeat 8.0.1 @timestamp":"2022-03-31T12:45:12.573Z","log.logger":"azure-eventhub input","log.origin":{"file.name":"azureeventhub/input… --- ## [Elastic Search Cross cluster replication](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674)
**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 10:03am UTC](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674 "2022-04-07T10:03:48Z")
Hi Team, I have a cluster with 3 nodes in primary region (all nodes are data nodes and master-eligible). My requirement is to setup cross cluster replication in secondary region for disaster recovery. Can I setup CCR … --- ## [Several inputs for modules](https://discuss.elastic.co/t/several-inputs-for-modules/301851)
**Author:** [@Thermi](https://discuss.elastic.co/u/Thermi)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 9:55am UTC](https://discuss.elastic.co/t/several-inputs-for-modules/301851 "2022-04-07T09:55:04Z")
Hello, I need to configure several inputs for any particular module, but most modules only have one, or generally a way to specify the mode/type/protocol of one (syslog over TLS, syslog over UDP, reading from a log file… --- ## [Kibana monitor data display nothing](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760)
**Author:** [@GaiserChan](https://discuss.elastic.co/u/GaiserChan)\ **Replies:** 7\ **Last updated:** [April 7, 2022, 9:51am UTC](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760 "2022-04-07T09:51:09Z")
i have these index data such as ".monitoring-es-7\*" ".monitoring-kibana-7\*"... but kibana monitoring show message "we couldn\`t activate monitoring" i check F12 in chrome found /api/monitoring/v1/clusters response empt… --- ## [\[Elasticsearch 5.5\] when node left and rejoin, all data in the node gone](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825)
**Author:** [@meteoriteliu](https://discuss.elastic.co/u/meteoriteliu)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825 "2022-04-07T09:49:43Z")
I have a Elasticsearch 5.5 cluster consists of 8 nodes (all the same config of both master and data nodes) and each node contains about 60 shards and each shard contains about 15GB data. I run into the problem that if I… --- ## [Custom log integration with json file - no data](https://discuss.elastic.co/t/custom-log-integration-with-json-file-no-data/301847)
**Author:** [@maar](https://discuss.elastic.co/u/maar)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 9:36am UTC](https://discuss.elastic.co/t/custom-log-integration-with-json-file-no-data/301847 "2022-04-07T09:36:41Z")
I successfully added the agent: I added Custom Logs integration to the Default policy: Custom configurations: agent.logging.json: true json.keys\_under\_root: true json.add\_error\_key: true Contents of the /… --- ## [Alerts and actions problems with log threshold and index threshold](https://discuss.elastic.co/t/alerts-and-actions-problems-with-log-threshold-and-index-threshold/301846)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 9:19am UTC](https://discuss.elastic.co/t/alerts-and-actions-problems-with-log-threshold-and-index-threshold/301846 "2022-04-07T09:19:21Z")
Hi, I'm running on kibana 7.11.2 (checking also on 7.17.1) I tried to have a notification when my logs (index) showing some errors in message field. So I added new rules in alert and actions for log threshold. But I co… --- ## [Population pyramid](https://discuss.elastic.co/t/population-pyramid/301478)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 8:42am UTC](https://discuss.elastic.co/t/population-pyramid/301478 "2022-04-07T08:42:50Z")
Hello everyone! I need a little help. I would like to make a population pyramid on my data. I would like to separate the gender and make 5 year age brackets. While counting the number of people in each category. I know… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=980) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=982)