# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1011

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1012

---

## [Does elasticsearch not support nfs as data directory?](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 7\
**Last updated:** [August 11, 2022, 6:30am UTC](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692 "2022-08-11T06:30:37Z")

</div>

es: 7.17.3 I mount the nfs path locally, and then point the es data directory to the location of the nfs, but the es startup fails, if I change the es data directory to a local partition (var/lib/elasticsearch) , then e…

---

## [Elastic Agent 8.3.3 on MacOS x509: “XYZR" certificate is not standards compliant](https://discuss.elastic.co/t/elastic-agent-8-3-3-on-macos-x509-xyzr-certificate-is-not-standards-compliant/311896)

<div class="topic-metadata">

**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\
**Replies:** 0\
**Last updated:** [August 11, 2022, 6:16am UTC](https://discuss.elastic.co/t/elastic-agent-8-3-3-on-macos-x509-xyzr-certificate-is-not-standards-compliant/311896 "2022-08-11T06:16:34Z")

</div>

Hello Team, Fleet server is healthy and working well with Linux elastic agents. Only when i run an agent with another Agent policy for MacOS, I get this error. siza:elastic-agent-8.3.3-darwin-x86\_64 macZ$ sudo ./elast…

---

## [Configure Kibana logging.quiet](https://discuss.elastic.co/t/configure-kibana-logging-quiet/310590)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [August 11, 2022, 5:07am UTC](https://discuss.elastic.co/t/configure-kibana-logging-quiet/310590 "2022-08-11T05:07:01Z")

</div>

Hello World! I'm trying to: to be more precise: logging.quiet \[7.13.0\] Deprecated in 7.13.0. This setting will be removed in Kibana 8.0.Instead, set the root logger level to error. Set the value of this setting t…

---

## [Esrally: error: --target-hosts and --client-options must define the same keys for multi cluster setups](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 8\
**Last updated:** [August 11, 2022, 4:58am UTC](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780 "2022-08-11T04:58:58Z")

</div>

Rally version elastic/rally latest version The command is as shown above. Because the destination elasticsearch uses xpack, I use client-options to prevent a security exception. Even after looking at the official …

---

## [How to see the data from the time range \>=90 days in discover and alerting](https://discuss.elastic.co/t/how-to-see-the-data-from-the-time-range-90-days-in-discover-and-alerting/311783)

<div class="topic-metadata">

**Author:** [@muthusundar.p](https://discuss.elastic.co/u/muthusundar.p)\
**Replies:** 2\
**Last updated:** [August 11, 2022, 1:46am UTC](https://discuss.elastic.co/t/how-to-see-the-data-from-the-time-range-90-days-in-discover-and-alerting/311783 "2022-08-11T01:46:25Z")

</div>

Dear Experts, Please let us know how to see or set a dashboard to view greater than 90days of data. every time we select the time range in the discover option.

---

## [Reset elastic user password in docker container](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884)

<div class="topic-metadata">

**Author:** [@single.track.mind](https://discuss.elastic.co/u/single.track.mind)\
**Replies:** 3\
**Last updated:** [August 11, 2022, 12:30am UTC](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884 "2022-08-11T00:30:55Z")

</div>

I have inherited a 7.16.2 elastic cluster with Basic license, running in docker containers(using docker-compose) and am trying to add xpack.security.enabled=true as an intermediate step to configure internal user passwo…

---

## [Veeam Logstash Grok](https://discuss.elastic.co/t/veeam-logstash-grok/311774)

<div class="topic-metadata">

**Author:** [@rcraigncs](https://discuss.elastic.co/u/rcraigncs)\
**Replies:** 16\
**Last updated:** [August 10, 2022, 10:57pm UTC](https://discuss.elastic.co/t/veeam-logstash-grok/311774 "2022-08-10T22:57:30Z")

</div>

Hello, I'm trying to grok logs from Veeam logs \> filebeat file stream \> logstash to create a better filter on logs collected from Veeam. I'm relatively new when it comes to grok and I'm stuck on how I would go about gro…

---

## [Change type character varying to date elasticsearch](https://discuss.elastic.co/t/change-type-character-varying-to-date-elasticsearch/311885)

<div class="topic-metadata">

**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 10:52pm UTC](https://discuss.elastic.co/t/change-type-character-varying-to-date-elasticsearch/311885 "2022-08-10T22:52:11Z")

</div>

hi , anyone know how to changed data from char to date, i have inserted this code but she doesnt work . "datecons" : { "type" : "date" "format": "yyyy-MM-dd HH:mm:ss.SSSSSS" }, and my data like this:

---

## [Cant access API. Get unauthorized message](https://discuss.elastic.co/t/cant-access-api-get-unauthorized-message/311876)

<div class="topic-metadata">

**Author:** [@MK817664](https://discuss.elastic.co/u/MK817664)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 8:38pm UTC](https://discuss.elastic.co/t/cant-access-api-get-unauthorized-message/311876 "2022-08-10T20:38:25Z")

</div>

So I'm very new and green to ES, I was trying to run over some online docs to try and get the connected to the API and do a insert of an attachment (PDF) When I attempted to run the put command I get back action \[indic…

---

## [Analysis the Logs of the Elastic](https://discuss.elastic.co/t/analysis-the-logs-of-the-elastic/311845)

<div class="topic-metadata">

**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 9:40pm UTC](https://discuss.elastic.co/t/analysis-the-logs-of-the-elastic/311845 "2022-08-10T21:40:41Z")

</div>

Hi, We are having a few queries on Elasticsearch logs optimization, we are doing the cost optimization and analyzing the consumed resources logs and breakups for each and every resource. As per the developer's perspec…

---

## [Scaling of the Elastic](https://discuss.elastic.co/t/scaling-of-the-elastic/311846)

<div class="topic-metadata">

**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 9:40pm UTC](https://discuss.elastic.co/t/scaling-of-the-elastic/311846 "2022-08-10T21:40:04Z")

</div>

Hi, How to check the current usage of the Elasticsearch and is there any possibility to do the scaling of the elastic

---

## [Map - Filter by boundary, shape or line](https://discuss.elastic.co/t/map-filter-by-boundary-shape-or-line/311682)

<div class="topic-metadata">

**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\
**Replies:** 2\
**Last updated:** [August 10, 2022, 9:35pm UTC](https://discuss.elastic.co/t/map-filter-by-boundary-shape-or-line/311682 "2022-08-10T21:35:32Z")

</div>

creating the filter for heat map geolocation is awesome, but how do i delete a filtered area? There doesn't appear to have the the same UI as noted below. I am running 8.3.3 Any ideas? Cheers, Matt

---

## [Apply "doesn't equal" with nested query](https://discuss.elastic.co/t/apply-doesnt-equal-with-nested-query/311821)

<div class="topic-metadata">

**Author:** [@Anh\_Le](https://discuss.elastic.co/u/Anh_Le)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 9:13pm UTC](https://discuss.elastic.co/t/apply-doesnt-equal-with-nested-query/311821 "2022-08-10T21:13:56Z")

</div>

Hi there! Please help to suggest queries to get data. How to get documents that don't have FilterFields. ContentFieldUseID = 20 and FilterFields.ContentFieldValues = "aaaa@gmail.com". Expected result: I want to get two…

---

## [Connection error with ssh and pem file (FSCrawler)](https://discuss.elastic.co/t/connection-error-with-ssh-and-pem-file-fscrawler/311878)

<div class="topic-metadata">

**Author:** [@Doddy\_Joel](https://discuss.elastic.co/u/Doddy_Joel)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 9:02pm UTC](https://discuss.elastic.co/t/connection-error-with-ssh-and-pem-file-fscrawler/311878 "2022-08-10T21:02:39Z")

</div>

I'm using FSCrawler by @dadoonet and I'm trying to connect directory with ssh. I have ssh configured on my server so I can access a directory and use FSCrawler. The steps I have followed are as follows: Create a publ…

---

## [I have created a new search box specific to one field search, exact search. how can i make it case insensitive?](https://discuss.elastic.co/t/i-have-created-a-new-search-box-specific-to-one-field-search-exact-search-how-can-i-make-it-case-insensitive/311870)

<div class="topic-metadata">

**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\
**Replies:** 5\
**Last updated:** [August 10, 2022, 8:20pm UTC](https://discuss.elastic.co/t/i-have-created-a-new-search-box-specific-to-one-field-search-exact-search-how-can-i-make-it-case-insensitive/311870 "2022-08-10T20:20:33Z")

</div>

I have created 2 search box with react-search-ui out of box library. one search for specific field search with exact match and other generic search that search all, like below : Since the exact search is implemented…

---

## [Match Query for 2 Fields from 2 Indices (Like SQL Inner Join)](https://discuss.elastic.co/t/match-query-for-2-fields-from-2-indices-like-sql-inner-join/310990)

<div class="topic-metadata">

**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\
**Replies:** 2\
**Last updated:** [August 10, 2022, 7:40pm UTC](https://discuss.elastic.co/t/match-query-for-2-fields-from-2-indices-like-sql-inner-join/310990 "2022-08-10T19:40:45Z")

</div>

Hi, I am wondering if it is possible to query ES for matches on values in 2 fields from 2 indexes, so that I can use resulting values from both events in visualizations. I've set up indicator match rules via Kibana and…

---

## [Devise logs](https://discuss.elastic.co/t/devise-logs/311849)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 3\
**Last updated:** [August 10, 2022, 7:16pm UTC](https://discuss.elastic.co/t/devise-logs/311849 "2022-08-10T19:16:42Z")

</div>

Hi, i have log file it looks like this : \*TR START\* AAAA INS AAAA: 121212 DATE 20-07-22 TIME 09:18:00 09:18:04 PI 09:1…

---

## [Create multiple dashboard from a dashboard template](https://discuss.elastic.co/t/create-multiple-dashboard-from-a-dashboard-template/311664)

<div class="topic-metadata">

**Author:** [@atony](https://discuss.elastic.co/u/atony)\
**Replies:** 4\
**Last updated:** [August 10, 2022, 4:29pm UTC](https://discuss.elastic.co/t/create-multiple-dashboard-from-a-dashboard-template/311664 "2022-08-10T16:29:05Z")

</div>

Hello guys, I would like to generate similar dashboards for values of a field. for each value of the field -\> generate dashboard is there any way to do it on Kibana? I did it manualy for some values, using filters, b…

---

## [Convert Kibana Visualize to elasticsearch dsl](https://discuss.elastic.co/t/convert-kibana-visualize-to-elasticsearch-dsl/311738)

<div class="topic-metadata">

**Author:** [@zys864](https://discuss.elastic.co/u/zys864)\
**Replies:** 3\
**Last updated:** [August 10, 2022, 4:09pm UTC](https://discuss.elastic.co/t/convert-kibana-visualize-to-elasticsearch-dsl/311738 "2022-08-10T16:09:02Z")

</div>

Kibana Visualize internally use \_msearch,How to convert a Kibana Visualize to elasticsearch \_msearch dsl.

---

## [Search UI - how to collapse/expand everything under the search bar](https://discuss.elastic.co/t/search-ui-how-to-collapse-expand-everything-under-the-search-bar/311778)

<div class="topic-metadata">

**Author:** [@tonyfam](https://discuss.elastic.co/u/tonyfam)\
**Replies:** 2\
**Last updated:** [August 10, 2022, 4:08pm UTC](https://discuss.elastic.co/t/search-ui-how-to-collapse-expand-everything-under-the-search-bar/311778 "2022-08-10T16:08:04Z")

</div>

Hello, We are using the generated "Search Experience" Search UI package , which is so useful! It's a search bar on our website. Now, we'd like to have a button so the website user can collapse/expand the search resu…

---

## [Creating success rate based on boolean field](https://discuss.elastic.co/t/creating-success-rate-based-on-boolean-field/311812)

<div class="topic-metadata">

**Author:** [@frederico](https://discuss.elastic.co/u/frederico)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 9:36am UTC](https://discuss.elastic.co/t/creating-success-rate-based-on-boolean-field/311812 "2022-08-10T09:36:30Z")

</div>

Hello, I'm using elk 7.11.2 I want to do a line chart where I plot a ratio over time of a certain boolean field. Ie, i want aggregate by time (minutes or hours) and plot the percentage of records where the boolean fie…

---

## [Oauth2 proxy and kibana authentication](https://discuss.elastic.co/t/oauth2-proxy-and-kibana-authentication/311840)

<div class="topic-metadata">

**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\
**Replies:** 1\
**Last updated:** [August 10, 2022, 2:51pm UTC](https://discuss.elastic.co/t/oauth2-proxy-and-kibana-authentication/311840 "2022-08-10T14:51:15Z")

</div>

We are using Oauth2 reverse proxy to authenticate the users via google. We want to use a static username and password from kibana+elasticsearch once the user gets authenticate via google so that we dont have to add or de…

---

## [Extract value from message field ( runtime fields)](https://discuss.elastic.co/t/extract-value-from-message-field-runtime-fields/311679)

<div class="topic-metadata">

**Author:** [@jplopezy](https://discuss.elastic.co/u/jplopezy)\
**Replies:** 16\
**Last updated:** [August 10, 2022, 2:23pm UTC](https://discuss.elastic.co/t/extract-value-from-message-field-runtime-fields/311679 "2022-08-10T14:23:44Z")

</div>

Hello everyone, Currently, I have an OpenVPN log that is sent from the server to elastic... from what I see the fields are pretty generic and the most important one is "message", it has all the information and I can't p…

---

## [Merge two csv files into single csv file using logstash](https://discuss.elastic.co/t/merge-two-csv-files-into-single-csv-file-using-logstash/311478)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 4\
**Last updated:** [August 10, 2022, 2:21pm UTC](https://discuss.elastic.co/t/merge-two-csv-files-into-single-csv-file-using-logstash/311478 "2022-08-10T14:21:31Z")

</div>

Hi All, I am trying to merge two csv files into single csv file using logstash and below is the sample data and config I have tried, logstash-1.csv Sample,Gender,Age 1,dentist,10 2,doctor,20 3,rep,30 logstash-2.csv S…

---

## [Process\_cluster\_event\_timeout\_exception error on put-mapping in test environment](https://discuss.elastic.co/t/process-cluster-event-timeout-exception-error-on-put-mapping-in-test-environment/311567)

<div class="topic-metadata">

**Author:** [@diegomarcet](https://discuss.elastic.co/u/diegomarcet)\
**Replies:** 5\
**Last updated:** [August 10, 2022, 2:18pm UTC](https://discuss.elastic.co/t/process-cluster-event-timeout-exception-error-on-put-mapping-in-test-environment/311567 "2022-08-10T14:18:43Z")

</div>

Hello, I'm using the docker.elastic.co/elasticsearch/elasticsearch:7.17.5 docker image for running our tests in the CI server on a single node configuration. We're frequently getting the following error while running t…

---

## [Nested search works not as expected](https://discuss.elastic.co/t/nested-search-works-not-as-expected/311841)

<div class="topic-metadata">

**Author:** [@wegad61878](https://discuss.elastic.co/u/wegad61878)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 2:17pm UTC](https://discuss.elastic.co/t/nested-search-works-not-as-expected/311841 "2022-08-10T14:17:57Z")

</div>

Hello, I have the following documents \[ { "id": "Car#1", "accessories": \[ { "type": "Turbo", "price": 20 }, { "type": "Supercharger", "price": 30 } …

---

## [Security on index level](https://discuss.elastic.co/t/security-on-index-level/311831)

<div class="topic-metadata">

**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\
**Replies:** 3\
**Last updated:** [August 10, 2022, 2:16pm UTC](https://discuss.elastic.co/t/security-on-index-level/311831 "2022-08-10T14:16:33Z")

</div>

Hi Is it possible to create security on index level, so access to an index is role based controlled, instead of setting security on all documents in an index? /Casper

---

## [Lots of open ports and traffic towards elasticsearch](https://discuss.elastic.co/t/lots-of-open-ports-and-traffic-towards-elasticsearch/311835)

<div class="topic-metadata">

**Author:** [@Mark\_S](https://discuss.elastic.co/u/Mark_S)\
**Replies:** 3\
**Last updated:** [August 10, 2022, 2:09pm UTC](https://discuss.elastic.co/t/lots-of-open-ports-and-traffic-towards-elasticsearch/311835 "2022-08-10T14:09:08Z")

</div>

I have logstash, kibana on one server and another one runs elasticsearch. I have three open pipelines collecting logfile data. I noticed a lot of open ports (277 established TCP connections in the range 45000 - 55000). …

---

## [Elastic Search Queries](https://discuss.elastic.co/t/elastic-search-queries/311764)

<div class="topic-metadata">

**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\
**Replies:** 3\
**Last updated:** [August 10, 2022, 1:51pm UTC](https://discuss.elastic.co/t/elastic-search-queries/311764 "2022-08-10T13:51:29Z")

</div>

Hi, We are having a few queries on Elasticsearch logs optimization, We want to see the breakup of logs in each running resource also we have quires on how to analyze the logs based on the storage utilization and how man…

---

## [Can dynamic mapping templates block a particular field from being mapped?](https://discuss.elastic.co/t/can-dynamic-mapping-templates-block-a-particular-field-from-being-mapped/311837)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 1:45pm UTC](https://discuss.elastic.co/t/can-dynamic-mapping-templates-block-a-particular-field-from-being-mapped/311837 "2022-08-10T13:45:41Z")

</div>

I have an index template set to "dynamic": "enable", which causes all fields to be added into the mapping. But what if there are fields that I explicitely do not want to be mapped? I know that dynamic templates can chan…

[Previous page](https://discuss.elastic.co/latest.md?page=1010)

[Next page](https://discuss.elastic.co/latest.md?page=1012)
