# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1001

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1002

---

## [Elasticsearch v8 Java API client boost Query](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410)

<div class="topic-metadata">

**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410 "2022-08-19T13:48:40Z")

</div>

I am using new Java API client . I have a method in my code which returns Query of multiple types e.g bool, range public Query createQuery(String field, String value) { if(something) return Query.of(query-\>query.ra…

---

## [Restore data from data folder](https://discuss.elastic.co/t/restore-data-from-data-folder/312448)

<div class="topic-metadata">

**Author:** [@meternich](https://discuss.elastic.co/u/meternich)\
**Replies:** 3\
**Last updated:** [August 19, 2022, 1:31pm UTC](https://discuss.elastic.co/t/restore-data-from-data-folder/312448 "2022-08-19T13:31:00Z")

</div>

I've messed up something with my backups an I accidently deleted few indexes. I have a file system copy of an index (from elastic data folder), but I have deleted index in elastic. When I copy the files into elastic data…

---

## [Inconsistency in Security setup notes for Kubernetes (TLS), autogenerated keys missing?](https://discuss.elastic.co/t/inconsistency-in-security-setup-notes-for-kubernetes-tls-autogenerated-keys-missing/312468)

<div class="topic-metadata">

**Author:** [@FreshMike](https://discuss.elastic.co/u/FreshMike)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 1:11pm UTC](https://discuss.elastic.co/t/inconsistency-in-security-setup-notes-for-kubernetes-tls-autogenerated-keys-missing/312468 "2022-08-19T13:11:05Z")

</div>

Hi All, Elastic 7.17.3 via Helm Chart I have trouble with the following: This Helm chart can generate a \[Kubernetes Secret\] or use an existing one to setup Elastic credentials. This chart is setting TLS and creating …

---

## [Index lifecycle management (cleanup) based on document fields](https://discuss.elastic.co/t/index-lifecycle-management-cleanup-based-on-document-fields/312465)

<div class="topic-metadata">

**Author:** [@joeripeeters](https://discuss.elastic.co/u/joeripeeters)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 12:38pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-cleanup-based-on-document-fields/312465 "2022-08-19T12:38:01Z")

</div>

Hi all, I have an index with data that contains a start-date and end-date. Documents that have an end-date past today, are not valuable anymore. So ideally, I want them out of the index. Is there a way to have index li…

---

## [How to get logs of multiple hostnames using scoll api](https://discuss.elastic.co/t/how-to-get-logs-of-multiple-hostnames-using-scoll-api/312453)

<div class="topic-metadata">

**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 10:08am UTC](https://discuss.elastic.co/t/how-to-get-logs-of-multiple-hostnames-using-scoll-api/312453 "2022-08-19T10:08:33Z")

</div>

hi all , is it possible to pass multiple hosts in scroll api , i want to get multiple logs from multiple hosts using scroll request url = '{0}/{1}/\_search?scroll=1m&ignore\_unavailable=true'.format( …

---

## [Elastic/Kibana integration with TheHive](https://discuss.elastic.co/t/elastic-kibana-integration-with-thehive/312454)

<div class="topic-metadata">

**Author:** [@Kara1990](https://discuss.elastic.co/u/Kara1990)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 10:08am UTC](https://discuss.elastic.co/t/elastic-kibana-integration-with-thehive/312454 "2022-08-19T10:08:26Z")

</div>

Hi. Is there a guide somewhere how to take all the information from the alarm in kibana over to TheHive via webhook? What I'm looking for is when an alarm is triggered, then all data regarding the alarm must be transfe…

---

## [Importing CoreSetup, CoreStart, etc](https://discuss.elastic.co/t/importing-coresetup-corestart-etc/312449)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 9:31am UTC](https://discuss.elastic.co/t/importing-coresetup-corestart-etc/312449 "2022-08-19T09:31:18Z")

</div>

We have to import CoreSetup, CoreStart,.... from @kbn/core/server or ../../src/core/public I found importing libraries in the above 2 ways in different documents. Which one should I use? I am creating a plugin exte…

---

## [Kibana PagerDuty Connector - ability to select document field as DedupKey option](https://discuss.elastic.co/t/kibana-pagerduty-connector-ability-to-select-document-field-as-dedupkey-option/311530)

<div class="topic-metadata">

**Author:** [@sivanov](https://discuss.elastic.co/u/sivanov)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 7:46am UTC](https://discuss.elastic.co/t/kibana-pagerduty-connector-ability-to-select-document-field-as-dedupkey-option/311530 "2022-08-19T07:46:55Z")

</div>

Hi, As part of PagerDuty integration, we would like to use a document field as a DedupKey field in the setup. I am struggling to find documentation that explains how to reach out, if possible at all, to document fields…

---

## [Static Mappings Ignored by Some Fields While Others Work](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415)

<div class="topic-metadata">

**Author:** [@othman](https://discuss.elastic.co/u/othman)\
**Replies:** 2\
**Last updated:** [August 19, 2022, 7:41am UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415 "2022-08-19T07:41:56Z")

</div>

I'm fairly new to ELK stack so most likely I'm just doing something dumb. I've failed to find suitable Google results hence this post. I have an Index Template configured with mappings, and I create a fresh index and st…

---

## [What are the Vulnerabilities of elk 7.17.3v?](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421 "2022-08-19T07:39:02Z")

</div>

what are the Vulnerabilities of elk 7.17.3v ? what are the Solutions to fix those vulnerabilities?

---

## [Logstash doesn't receive logs from kafka (filebeat transfer logs to kafka)](https://discuss.elastic.co/t/logstash-doesnt-receive-logs-from-kafka-filebeat-transfer-logs-to-kafka/311972)

<div class="topic-metadata">

**Author:** [@NAM\_VO](https://discuss.elastic.co/u/NAM_VO)\
**Replies:** 15\
**Last updated:** [August 19, 2022, 3:26am UTC](https://discuss.elastic.co/t/logstash-doesnt-receive-logs-from-kafka-filebeat-transfer-logs-to-kafka/311972 "2022-08-19T03:26:16Z")

</div>

Hi, I'm currently using: filebeat 8.3.3 (installed on Windows), Elasticsearch version 8.3.3 logstash 8.3.3 kafka 3.2.1 elk, kafka are on 1 server (192.168.9.70) the Windows IP which installing filebeat is 192.168.9.…

---

## [ElasticSearchRepository usage in java low level client](https://discuss.elastic.co/t/elasticsearchrepository-usage-in-java-low-level-client/312346)

<div class="topic-metadata">

**Author:** [@Gowri\_Shankkari](https://discuss.elastic.co/u/Gowri_Shankkari)\
**Replies:** 2\
**Last updated:** [August 19, 2022, 6:22am UTC](https://discuss.elastic.co/t/elasticsearchrepository-usage-in-java-low-level-client/312346 "2022-08-19T06:22:15Z")

</div>

I am using 'elasticsearch-rest-client:8.3.3' to connect elasticsearch using java low level rest client. Is there a way to use ElasticsearchRepository (@Document annotation) when using low level rest client. I know it is …

---

## [Regular Expression](https://discuss.elastic.co/t/regular-expression/312426)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 5:31am UTC](https://discuss.elastic.co/t/regular-expression/312426 "2022-08-19T05:31:09Z")

</div>

Hi, Can anyone please help me with this regular expression!! So, this is my string 'timerange={timerange from=\\"now/d\\" to=\\"now/d\\"}' I want to findall and replace with 'timerange={timerange from=\\"2022-08-19T04:00:00…

---

## [Elastic Agent 8.3.3 - Endpoint Security Integration not found inside host](https://discuss.elastic.co/t/elastic-agent-8-3-3-endpoint-security-integration-not-found-inside-host/312419)

<div class="topic-metadata">

**Author:** [@ZiaulAfiq](https://discuss.elastic.co/u/ZiaulAfiq)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 2:16am UTC](https://discuss.elastic.co/t/elastic-agent-8-3-3-endpoint-security-integration-not-found-inside-host/312419 "2022-08-19T02:16:40Z")

</div>

Hi all! Need some clarification here. I have successfully installed elastic-agent version 8.3.3 into a host but it seems that only endpoint-security have error during running diagnostics test on host. For the host, I…

---

## [Circuit\_breaking\_exception for \[request\] Data too large, but index being queried is only 8.44mb](https://discuss.elastic.co/t/circuit-breaking-exception-for-request-data-too-large-but-index-being-queried-is-only-8-44mb/312418)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 1:04am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-for-request-data-too-large-but-index-being-queried-is-only-8-44mb/312418 "2022-08-19T01:04:00Z")

</div>

I'm getting this error when running the aggregation below. The index being queried is only 8.44mb. I was able to run these types of queries on a much smaller cluster, in terms of RAM, with ES v6 and never see these types…

---

## [Can we change SSL CA cert after adding license with old SSL](https://discuss.elastic.co/t/can-we-change-ssl-ca-cert-after-adding-license-with-old-ssl/312404)

<div class="topic-metadata">

**Author:** [@Dipesh](https://discuss.elastic.co/u/Dipesh)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 12:13am UTC](https://discuss.elastic.co/t/can-we-change-ssl-ca-cert-after-adding-license-with-old-ssl/312404 "2022-08-19T00:13:04Z")

</div>

HI Team, Currently i am working on Elasticsearch 8.3 with self generated CA Cert and ssl's and i want to add license but have a doubt. can we change CA Certs after Adding License with old certs?

---

## [Add timezone local to all events with fleet-managed elastic agent](https://discuss.elastic.co/t/add-timezone-local-to-all-events-with-fleet-managed-elastic-agent/312408)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 7:55pm UTC](https://discuss.elastic.co/t/add-timezone-local-to-all-events-with-fleet-managed-elastic-agent/312408 "2022-08-18T19:55:04Z")

</div>

Is there a way to include an add\_locale.format: 'offset' processor by default for all events sent in by a fleet-managed elastic agent? I have a number of custom logs that don't have proper timezone indicators, so my inge…

---

## [Elastic Search 7 on Microsoft Azure Connection Failure](https://discuss.elastic.co/t/elastic-search-7-on-microsoft-azure-connection-failure/312407)

<div class="topic-metadata">

**Author:** [@JSK1304](https://discuss.elastic.co/u/JSK1304)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 7:52pm UTC](https://discuss.elastic.co/t/elastic-search-7-on-microsoft-azure-connection-failure/312407 "2022-08-18T19:52:51Z")

</div>

I am new to Elasticsearch and I have created a 1 node Elasticsearch cluster in Microsoft Azure using the "Elastic Stack" template. But I am not able to connect to the cluster using connection pool or using a single node…

---

## [Migrating the index from 7.14 version to the new elasticsearch cluster with 8.0 version](https://discuss.elastic.co/t/migrating-the-index-from-7-14-version-to-the-new-elasticsearch-cluster-with-8-0-version/312400)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [August 18, 2022, 7:33pm UTC](https://discuss.elastic.co/t/migrating-the-index-from-7-14-version-to-the-new-elasticsearch-cluster-with-8-0-version/312400 "2022-08-18T19:33:45Z")

</div>

Is it possible to migrate the data from elasticsearch cluster with 7.14 version to new cluster which is having 8.0 version? Is there any migration path has been defined for this activity? Any utilities available?

---

## [Trouble running the ELK-8.3.3 docker-compose instructions. failed to retrieve password hash](https://discuss.elastic.co/t/trouble-running-the-elk-8-3-3-docker-compose-instructions-failed-to-retrieve-password-hash/312403)

<div class="topic-metadata">

**Author:** [@Mike\_MacHenry](https://discuss.elastic.co/u/Mike_MacHenry)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 6:26pm UTC](https://discuss.elastic.co/t/trouble-running-the-elk-8-3-3-docker-compose-instructions-failed-to-retrieve-password-hash/312403 "2022-08-18T18:26:41Z")

</div>

Hey folks, I have copied the tutorial from here and I have been unable to make the basic tutorial work. I have followed it by copying the docker-compose.yaml and .env file, updating my passwords in the .env, and also vp…

---

## [Within Enterprise Search Engine, data ingestion/Storage](https://discuss.elastic.co/t/within-enterprise-search-engine-data-ingestion-storage/312213)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 2\
**Last updated:** [August 18, 2022, 6:11pm UTC](https://discuss.elastic.co/t/within-enterprise-search-engine-data-ingestion-storage/312213 "2022-08-18T18:11:45Z")

</div>

Hello there, I'm new to Elastic Enterprise Search, I have a question: If the source data contains pictures/images, would Elastic ingests the data including the pictures/images and store it to Search Engine shards or ju…

---

## [Filtering directly from data table - Kibana dashboard](https://discuss.elastic.co/t/filtering-directly-from-data-table-kibana-dashboard/312075)

<div class="topic-metadata">

**Author:** [@SaraAlshamsi](https://discuss.elastic.co/u/SaraAlshamsi)\
**Replies:** 3\
**Last updated:** [August 18, 2022, 6:03pm UTC](https://discuss.elastic.co/t/filtering-directly-from-data-table-kibana-dashboard/312075 "2022-08-18T18:03:57Z")

</div>

Hello, I have an issue in filtering directly from a data table in Kibana dashboard. Case 1: When I select an item, to filter it, from the first page of the table, I can filter without any problem and the filter is app…

---

## [Migrating from HLRC 7.17 to Java Client 8.13 - missing PercolateQueryBuilder](https://discuss.elastic.co/t/migrating-from-hlrc-7-17-to-java-client-8-13-missing-percolatequerybuilder/312300)

<div class="topic-metadata">

**Author:** [@javierco](https://discuss.elastic.co/u/javierco)\
**Replies:** 3\
**Last updated:** [August 18, 2022, 4:58pm UTC](https://discuss.elastic.co/t/migrating-from-hlrc-7-17-to-java-client-8-13-missing-percolatequerybuilder/312300 "2022-08-18T16:58:18Z")

</div>

I'm testing the migration of the Java api for High Level Rest Client version 7.17 into the new Java API Client 8.3 and I'm having problems finding the equivalent to: org.elasticsearch.percolator.PercolateQueryBuilder; L…

---

## [RELP plugin does not parse syslogs](https://discuss.elastic.co/t/relp-plugin-does-not-parse-syslogs/312365)

<div class="topic-metadata">

**Author:** [@Fastfox](https://discuss.elastic.co/u/Fastfox)\
**Replies:** 2\
**Last updated:** [August 18, 2022, 4:51pm UTC](https://discuss.elastic.co/t/relp-plugin-does-not-parse-syslogs/312365 "2022-08-18T16:51:30Z")

</div>

Hi there, Getting to know Elastic stack here and I noticed that normal TCP reliability is not enough for my usecase where the device will be powered off suddenly at at arbitrary times. It looks like rsyslog RELP protoco…

---

## [Grok Pattern for java duration](https://discuss.elastic.co/t/grok-pattern-for-java-duration/312386)

<div class="topic-metadata">

**Author:** [@rokka](https://discuss.elastic.co/u/rokka)\
**Replies:** 1\
**Last updated:** [August 18, 2022, 4:45pm UTC](https://discuss.elastic.co/t/grok-pattern-for-java-duration/312386 "2022-08-18T16:45:02Z")

</div>

Hi, how can I parse the Java duration format like "PT20M36.4402321S"? https://docs.oracle.com/javase/8/docs/api/java/time/Duration.html#parse-java.lang.CharSequence- I can´t find an existing pattern on logstash-patter…

---

## [Aggregating child highlights into parent's score and result](https://discuss.elastic.co/t/aggregating-child-highlights-into-parents-score-and-result/312224)

<div class="topic-metadata">

**Author:** [@nickchomey](https://discuss.elastic.co/u/nickchomey)\
**Replies:** 1\
**Last updated:** [August 18, 2022, 4:35pm UTC](https://discuss.elastic.co/t/aggregating-child-highlights-into-parents-score-and-result/312224 "2022-08-18T16:35:29Z")

</div>

I am trying to implement Elasticsearch for a forum (among other things), where we have Forum, Topics and Replies, each being a child of the previous. We can ignore Forum for now and just focus on the Topics and Replies a…

---

## [Update enrich index from logstash](https://discuss.elastic.co/t/update-enrich-index-from-logstash/312378)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [August 18, 2022, 4:12pm UTC](https://discuss.elastic.co/t/update-enrich-index-from-logstash/312378 "2022-08-18T16:12:22Z")

</div>

I have a logstash jdbc pull that updates an index of device information at hourly intervals. That index is used by an enrich processor to add the device information, like sector, country, lat/long, to the data we ingest…

---

## [Tomcat filebeat module expected log format?](https://discuss.elastic.co/t/tomcat-filebeat-module-expected-log-format/272450)

<div class="topic-metadata">

**Author:** [@sarahw](https://discuss.elastic.co/u/sarahw)\
**Replies:** 2\
**Last updated:** [August 17, 2022, 1:20pm UTC](https://discuss.elastic.co/t/tomcat-filebeat-module-expected-log-format/272450 "2022-08-17T13:20:24Z")

</div>

I have been trying to use the Tomcat module for filebeat 7.9 (Tomcat module | Filebeat Reference \[7.9\] | Elastic) to ingest tomcat access logs from files but my log files are producing errors. I'd like to know what forma…

---

## [Can't use elasticsearch connector properly](https://discuss.elastic.co/t/cant-use-elasticsearch-connector-properly/312392)

<div class="topic-metadata">

**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 2:18pm UTC](https://discuss.elastic.co/t/cant-use-elasticsearch-connector-properly/312392 "2022-08-18T14:18:23Z")

</div>

Hey, I need to use source connector elasticsearch to send data from elasticsearch to kafka. Unfortunately, i Have some trouble in elasticsearch, maybe i don't configure elasticsearch properly. when i go to this link h…

---

## [Controls on Dashboards not showing all the options](https://discuss.elastic.co/t/controls-on-dashboards-not-showing-all-the-options/312115)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 4\
**Last updated:** [August 18, 2022, 2:02pm UTC](https://discuss.elastic.co/t/controls-on-dashboards-not-showing-all-the-options/312115 "2022-08-18T14:02:33Z")

</div>

I've been trying to make use of the Controls in the Kibana Dashboards but it keeps eliminating some information. It's saying to change the configuration on Kibana.yml but I'm using the Elastic Cloud so I'm not sure what …

[Previous page](https://discuss.elastic.co/latest.md?page=1000)

[Next page](https://discuss.elastic.co/latest.md?page=1002)
