# Latest **URL:** https://discuss.elastic.co/latest.md?page=1010 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1011 --- ## [Geo\_bounds aggregation returns empty data for Multi-Polygon Country Geometries](https://discuss.elastic.co/t/geo-bounds-aggregation-returns-empty-data-for-multi-polygon-country-geometries/311886)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 5:04am UTC](https://discuss.elastic.co/t/geo-bounds-aggregation-returns-empty-data-for-multi-polygon-country-geometries/311886 "2022-08-12T05:04:03Z")
geo\_bounds aggregation fails to generate geo\_bounds for SOME countries (large countries?) in my dataset, how can I fix this\>? My example query against a country "New Zealand" GET countries/\_search { "query": { … --- ## [Issue after migration from geo\_shape pre-fix based to geo\_shape based bkd tree mapping](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406)
**Author:** [@Abhilash\_Venkatesh](https://discuss.elastic.co/u/Abhilash_Venkatesh)\ **Replies:** 9\ **Last updated:** [August 12, 2022, 3:54am UTC](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406 "2022-08-12T03:54:46Z")
Hi Problem Description We want to migrate from elastic 7.x to 8. Migrated to 7.17.5 and resolved issues. One of it was was location field with geo\_shape mapping, we used strategy : recursive . To resolve took backup … --- ## [Export results from query that is more than the default maxClauseCount](https://discuss.elastic.co/t/export-results-from-query-that-is-more-than-the-default-maxclausecount/311925)
**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 12:21pm UTC](https://discuss.elastic.co/t/export-results-from-query-that-is-more-than-the-default-maxclausecount/311925 "2022-08-11T12:21:05Z")
Hi, I have this issue where for my needs, I am required to export all the rules from Elastic Security and keep it locally which I use this command to achieve it - POST api/detection\_engine/rules/\_export. However the mai… --- ## [Analyze the logs in Storage utilization](https://discuss.elastic.co/t/analyze-the-logs-in-storage-utilization/311848)
**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 1:44am UTC](https://discuss.elastic.co/t/analyze-the-logs-in-storage-utilization/311848 "2022-08-12T01:44:16Z")
Hi, We are having a few queries on Elasticsearch logs optimization, we are doing the cost optimization and we want to know how to analyze the logs based on the storage utilization and also to know more about how many u… --- ## [Kibana Server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/311864)
**Author:** [@Naldo001](https://discuss.elastic.co/u/Naldo001)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 1:34am UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/311864 "2022-08-12T01:34:00Z")
kibana.service - Kibana Loaded: loaded (/usr/lib/systemd/system/kibana.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2022-08-10 13:03:46 EDT; 20min ago Docs: https://www.elasti… --- ## [Create visualize -\> Success rate based on time](https://discuss.elastic.co/t/create-visualize-success-rate-based-on-time/311203)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 1:10am UTC](https://discuss.elastic.co/t/create-visualize-success-rate-based-on-time/311203 "2022-08-12T01:10:25Z")
Hi, I'm using 7.16.2, here are the fields I've in my index... it holding data on builds in Jenkins.. build number, status: pass or fail... I need to create a graph of success rate based on time.. for example: % of the … --- ## [Elasticsearch not starting with IOException error when using p12 files from outside CA](https://discuss.elastic.co/t/elasticsearch-not-starting-with-ioexception-error-when-using-p12-files-from-outside-ca/311855)
**Author:** [@jamesp](https://discuss.elastic.co/u/jamesp)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-with-ioexception-error-when-using-p12-files-from-outside-ca/311855 "2022-08-11T20:46:46Z")
Hello, I successfully set up xpack basic security when I used self-signed certificates using Elasticsearch tools. When I had an internal authority create the p12 files for me following information from the Elasticsearch… --- ## [Elastic Siem external alerts](https://discuss.elastic.co/t/elastic-siem-external-alerts/310918)
**Author:** [@abr4xc](https://discuss.elastic.co/u/abr4xc)\ **Replies:** 4\ **Last updated:** [August 11, 2022, 7:58pm UTC](https://discuss.elastic.co/t/elastic-siem-external-alerts/310918 "2022-08-11T19:58:33Z")
I am trying to set up a new integration for an EDR that is not listed on the Kibana integrations yet, in order to set up the external alerts for that EDR i am adding the event.kind to alert but its not showing up in the … --- ## [To convert the Integers into a String](https://discuss.elastic.co/t/to-convert-the-integers-into-a-string/311936)
**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 7:14pm UTC](https://discuss.elastic.co/t/to-convert-the-integers-into-a-string/311936 "2022-08-11T19:14:42Z")
I have collected the metrics from a device through snmp input plugin and the field value is 0 & 1. How can I convert these values into strings (like 0 as Open, 1 as Close) in Kibana dashboards. --- ## [Issue/Error while reading data from Elastic index with Spark including Custom schema](https://discuss.elastic.co/t/issue-error-while-reading-data-from-elastic-index-with-spark-including-custom-schema/311930)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 7:00pm UTC](https://discuss.elastic.co/t/issue-error-while-reading-data-from-elastic-index-with-spark-including-custom-schema/311930 "2022-08-11T19:00:06Z")
I am trying the read data from a given Elasticsearch index including a custom schema while reading. The data is populated by another spark application in which the same schema is being used this has been done keeping in… --- ## [Rally: customize behaviour of each client](https://discuss.elastic.co/t/rally-customize-behaviour-of-each-client/311919)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 4\ **Last updated:** [August 11, 2022, 6:41pm UTC](https://discuss.elastic.co/t/rally-customize-behaviour-of-each-client/311919 "2022-08-11T18:41:23Z")
Hi! I have my track like this (snippet from challenges/operations) { "operation": "replay-listing-query", "clients": 4, "warmup-iterations": 10, "iterations": 100… --- ## [Adding Kibana, Fleet, Ingest node to cluster](https://discuss.elastic.co/t/adding-kibana-fleet-ingest-node-to-cluster/311958)
**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 5:51pm UTC](https://discuss.elastic.co/t/adding-kibana-fleet-ingest-node-to-cluster/311958 "2022-08-11T17:51:39Z")
Hello. I'm attempting to add a 4th node to my cluster. Nodes: \[elastic-node-01\] \[elastic-79\] \[elastic-180\] Roles: master, data \[kibana-primary\] Roles: ingest, ml, remote\_cluster\_client, transform I'm trying to instal… --- ## [Create document with values from parent aggregation and sub aggregation](https://discuss.elastic.co/t/create-document-with-values-from-parent-aggregation-and-sub-aggregation/311954)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 5:50pm UTC](https://discuss.elastic.co/t/create-document-with-values-from-parent-aggregation-and-sub-aggregation/311954 "2022-08-11T17:50:38Z")
Hi, Im queriyng elastic with logstash, exec input, and a bash script with curl. this is the response: "aggregations" : { "parent-agg" : { "buckets" : \[ { "key" : "one", "sub-aggs-t… --- ## [Fleet server keeps CrashLoopBackOff in Azure kubernetes](https://discuss.elastic.co/t/fleet-server-keeps-crashloopbackoff-in-azure-kubernetes/311938)
**Author:** [@levitoh123](https://discuss.elastic.co/u/levitoh123)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 2:49pm UTC](https://discuss.elastic.co/t/fleet-server-keeps-crashloopbackoff-in-azure-kubernetes/311938 "2022-08-11T14:49:34Z")
I have installed ECK and elasticsearch, kibana and fleet (agents and server) via the recipe yaml files in my kubernetes cluster running in Azure (version 1.21) and the fleet server keeps crashing without staying up. The … --- ## [Endpoint for creating new user in python using Elasticsearch client](https://discuss.elastic.co/t/endpoint-for-creating-new-user-in-python-using-elasticsearch-client/311714)
**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 7:08am UTC](https://discuss.elastic.co/t/endpoint-for-creating-new-user-in-python-using-elasticsearch-client/311714 "2022-08-11T07:08:41Z")
I am trying to create a new user by API in flask @app.route('/create-new-user', methods=\['GET','POST'\]) def createUser(): if request.method == 'POST': username = request.form.get('username') password… --- ## [Install & configuration of live logs with logstash (docker)](https://discuss.elastic.co/t/install-configuration-of-live-logs-with-logstash-docker/311814)
**Author:** [@Dreinale](https://discuss.elastic.co/u/Dreinale)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 1:43pm UTC](https://discuss.elastic.co/t/install-configuration-of-live-logs-with-logstash-docker/311814 "2022-08-11T13:43:06Z")
HI, I'm trying to install elk on the docker host and filebeat on another docker. So fo the first docker i followed that: Elasticsearch kibana & logstash with the ELK image. (i don't want security s i enabled it) I… --- ## [Need file location where can i edit elastic and logo "e" on top right corner side header bar](https://discuss.elastic.co/t/need-file-location-where-can-i-edit-elastic-and-logo-e-on-top-right-corner-side-header-bar/311918)
**Author:** [@Ayaan\_Shaik](https://discuss.elastic.co/u/Ayaan_Shaik)\ **Replies:** 3\ **Last updated:** [August 11, 2022, 1:39pm UTC](https://discuss.elastic.co/t/need-file-location-where-can-i-edit-elastic-and-logo-e-on-top-right-corner-side-header-bar/311918 "2022-08-11T13:39:23Z")
Hi Friends, Trying to find the location of a file for the header top right elastic symbol replace and "e" in /usr/share/kibana/src/......?????? where can i find this location in /usr/share/kibana ??? below is the im… --- ## [Logstash WARN: Could not index event to Elasticsearch .... Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/logstash-warn-could-not-index-event-to-elasticsearch-cant-get-text-on-a-start-object/311910)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/logstash-warn-could-not-index-event-to-elasticsearch-cant-get-text-on-a-start-object/311910 "2022-08-11T13:32:46Z")
Dears, I have some problem with json. When I send json log to logstash there are many errors like this: Could not index event to Elasticsearch .... Can't get text on a START\_OBJECT at 1:670 My json log looks like: {… --- ## [Alert if index has 0 documents in last X minutes (Rules and connectors or Detection Rules)](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/311695)
**Author:** [@stoza](https://discuss.elastic.co/u/stoza)\ **Replies:** 5\ **Last updated:** [August 11, 2022, 1:30pm UTC](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/311695 "2022-08-11T13:30:06Z")
Hello everyone, I'm using kibana version 7.17.2 I work with rule and connector in order to receive an alert if I don't receive any new document in one of my index for the last X minutes. Select index: INDEX index\* WH… --- ## [How to use http input logstash](https://discuss.elastic.co/t/how-to-use-http-input-logstash/311928)
**Author:** [@cihady](https://discuss.elastic.co/u/cihady)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 1:19pm UTC](https://discuss.elastic.co/t/how-to-use-http-input-logstash/311928 "2022-08-11T13:19:55Z")
I am trying to api call logstash by using http input but when I run logstash it failse and throws the error below Here is my config file input { http { host=\>0.0.0.0 port =\>2020 } } output { elasticsearch { … --- ## ["tags":\["info","savedobjects-service"\],"pid":X,"message":"Starting saved objects migrations"}](https://discuss.elastic.co/t/tags-info-savedobjects-service-pid-x-message-starting-saved-objects-migrations/311458)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 5\ **Last updated:** [August 11, 2022, 1:12pm UTC](https://discuss.elastic.co/t/tags-info-savedobjects-service-pid-x-message-starting-saved-objects-migrations/311458 "2022-08-11T13:12:43Z")
Hello World! As I start Kibana, it takes kinda long to start and in logs I see "Starting saved objects migrations": kibana | {"type":"log","@timestamp":"2022-08-04T04:10:47+00:00","tags":\["info","savedobjects-service"… --- ## [Elastic Agent error with event.created & event.ingested](https://discuss.elastic.co/t/elastic-agent-error-with-event-created-event-ingested/311927)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 1:03pm UTC](https://discuss.elastic.co/t/elastic-agent-error-with-event-created-event-ingested/311927 "2022-08-11T13:03:41Z")
I am in the process of migrating from self-managed beats to Elastic Agent. I'm currently monitoring an application log in filebeat, which I'm migrating to a Custom Log in Elastic Agent. The log is ingesting as expected. … --- ## [Split logs per customers](https://discuss.elastic.co/t/split-logs-per-customers/311658)
**Author:** [@YannKistenmacker](https://discuss.elastic.co/u/YannKistenmacker)\ **Replies:** 9\ **Last updated:** [August 11, 2022, 12:46pm UTC](https://discuss.elastic.co/t/split-logs-per-customers/311658 "2022-08-11T12:46:34Z")
Hello everyone, I'm new elasticsearch user and i'm in charge to develop a system to monitoring our customers logs. So starting by this point i have to monitoring Fortinet Firewall Logs and i've already did with filebeat… --- ## [Problem with Detections - Custom query rule](https://discuss.elastic.co/t/problem-with-detections-custom-query-rule/311543)
**Author:** [@Yuriy\_Tsarenko](https://discuss.elastic.co/u/Yuriy_Tsarenko)\ **Replies:** 9\ **Last updated:** [August 11, 2022, 12:24pm UTC](https://discuss.elastic.co/t/problem-with-detections-custom-query-rule/311543 "2022-08-11T12:24:47Z")
Good afternoon dear community. I turn to you with the following problem. The custom rule does not create security alerts, although it works without visible errors. Kibana Version: 8.3.1 Rule type: custom query. Rule … --- ## [Documentation for dynamic template mappings?](https://discuss.elastic.co/t/documentation-for-dynamic-template-mappings/311746)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 3\ **Last updated:** [August 11, 2022, 8:55am UTC](https://discuss.elastic.co/t/documentation-for-dynamic-template-mappings/311746 "2022-08-11T08:55:47Z")
Hello, I have trouble finding API documentation for setting dynamic templates. I expected this to be documented at Update mapping API | Elasticsearch Guide \[8.3\] | Elastic , but this just points to "mapping object" (A … --- ## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/311847)
**Author:** [@Carlos\_Vinicius](https://discuss.elastic.co/u/Carlos_Vinicius)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 11:59am UTC](https://discuss.elastic.co/t/illegal-argument-exception/311847 "2022-08-11T11:59:12Z")
Dears, good morning! I'm facing the error below, can someone shed some light on me? { "took": 461, "timed\_out": false, "\_shards": { "total": 39, "successful": 38, "skipped": 33, "failed": 1, "failures": \[ { … --- ## [Auditbeat on Windows core with sshd](https://discuss.elastic.co/t/auditbeat-on-windows-core-with-sshd/311920)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 11:42am UTC](https://discuss.elastic.co/t/auditbeat-on-windows-core-with-sshd/311920 "2022-08-11T11:42:56Z")
Just installed the first Aufitbeat agent to a Windows server and as this is a Windows Core server access is really only via ssh. Has anyone played with this setup? Auditbeat is reporting, but I'm not seeing sshd login be… --- ## [New Plugin-Api setAttribute not shown in APM App](https://discuss.elastic.co/t/new-plugin-api-setattribute-not-shown-in-apm-app/311903)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 4\ **Last updated:** [August 11, 2022, 11:04am UTC](https://discuss.elastic.co/t/new-plugin-api-setattribute-not-shown-in-apm-app/311903 "2022-08-11T11:04:08Z")
Kibana version: 7.8.0 Elasticsearch version: 7.8.0 APM Server version: 7.8.0 APM Agent language and version: Java 1.33.0 Browser version: Chrome 103 Description of the problem including expected versus actual behavi… --- ## [Connecting to ElasticSearch from Tableau Desktop](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-tableau-desktop/311906)
**Author:** [@Naresh\_Vadla](https://discuss.elastic.co/u/Naresh_Vadla)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 8:22am UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-tableau-desktop/311906 "2022-08-11T08:22:36Z")
I am trying to connect to Elasticsearch from Tableau Desktop. I am using Tableau Desktop 2021.x, Tableau Desktop 2022.x versions. My Elastic search version is 7.11.2. I have followed everything mentioned in But It is … --- ## [Add new document using logstash](https://discuss.elastic.co/t/add-new-document-using-logstash/311833)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 7:23am UTC](https://discuss.elastic.co/t/add-new-document-using-logstash/311833 "2022-08-11T07:23:52Z")
Hi, i have a file so i read this file using filebeat and i do the multilne like this filebeat.yml: - type: log enabled: true paths: - D:\\elastic\_stack\\logs\\\* fields: kafka\_topic: "kafka-topic-1" ta… [Previous page](https://discuss.elastic.co/latest.md?page=1009) [Next page](https://discuss.elastic.co/latest.md?page=1011)