# Latest **URL:** https://discuss.elastic.co/latest.md?page=1023 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1024 --- ## [Runtime field pitfall](https://discuss.elastic.co/t/runtime-field-pitfall/311155)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 1:47am UTC](https://discuss.elastic.co/t/runtime-field-pitfall/311155 "2022-08-02T01:47:09Z")
If you have a runtime field that references a field, be sure to define the mapping for the referenced field. I was using an ECS field that was "always" present in my indices... until there was an ingest problem. When I… --- ## [How can I create my own APM Client for \[Insert Language\]](https://discuss.elastic.co/t/how-can-i-create-my-own-apm-client-for-insert-language/311166)
**Author:** [@psilospore](https://discuss.elastic.co/u/psilospore)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 12:22am UTC](https://discuss.elastic.co/t/how-can-i-create-my-own-apm-client-for-insert-language/311166 "2022-08-02T00:22:48Z")
Hi is there any guidance on how I could make my own APM Client? I am attempting to create one for Haskell. I attempted to browse some of the existing implementations but they can be quite large. It also seems that some c… --- ## [\[Filebeat\] duplicate output when using queue.disk and restarting](https://discuss.elastic.co/t/filebeat-duplicate-output-when-using-queue-disk-and-restarting/310959)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 4\ **Last updated:** [August 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/filebeat-duplicate-output-when-using-queue-disk-and-restarting/310959 "2022-08-02T00:12:07Z")
I am facing a problem with duplicate output when using queue.disk with Filebeat and restarting. The contents of filebeat.yml and the operating procedure are as follows filebeat.yml filebeat.inputs: - type: filestream … --- ## [How to list more than 10 option items for filtering in a dashboard](https://discuss.elastic.co/t/how-to-list-more-than-10-option-items-for-filtering-in-a-dashboard/311048)
**Author:** [@rogerlee](https://discuss.elastic.co/u/rogerlee)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:45pm UTC](https://discuss.elastic.co/t/how-to-list-more-than-10-option-items-for-filtering-in-a-dashboard/311048 "2022-08-01T22:45:17Z")
HI Experts, I created a series of dashboards. Now I want to use a "options control" to filter the result in dashboards, while the options control can only display 10 options. Is there any measure that I can break throug… --- ## [Elasticsearch Disaster Recovery](https://discuss.elastic.co/t/elasticsearch-disaster-recovery/311080)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 7\ **Last updated:** [August 1, 2022, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-disaster-recovery/311080 "2022-08-01T22:32:04Z")
Hi, Does anyone know how to perform/setup Elasticsearch Disaster Recovery? --- ## [Json for setting up new indices](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135)
**Author:** [@jhop](https://discuss.elastic.co/u/jhop)\ **Replies:** 7\ **Last updated:** [August 1, 2022, 10:09pm UTC](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135 "2022-08-01T22:09:30Z")
Sorry for the simple question but the documentation was not clear to me. I am using python to send data to elasticsearch. Should we always define an index before using json specifying this index to populate elasticsearc… --- ## [Elastic synthetic and playwright commands (Visual Comparison)](https://discuss.elastic.co/t/elastic-synthetic-and-playwright-commands-visual-comparison/311162)
**Author:** [@M.A](https://discuss.elastic.co/u/M.A)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 9:24pm UTC](https://discuss.elastic.co/t/elastic-synthetic-and-playwright-commands-visual-comparison/311162 "2022-08-01T21:24:01Z")
hi, were are using elastic synthetic for our UI tests. I have seen on the documentation that elastic synthetic is based on playwright and used jest commands. "...Use the assertion library provided by the Synthetics ag… --- ## [RUM and concurrent user](https://discuss.elastic.co/t/rum-and-concurrent-user/311163)
**Author:** [@M.A](https://discuss.elastic.co/u/M.A)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 9:43pm UTC](https://discuss.elastic.co/t/rum-and-concurrent-user/311163 "2022-08-01T21:43:42Z")
Hi, we are using RUM Agent for Real Time monitoring, I have seen that page views are tracked but is there a way to find out the concurrent user during a timeframe instead of the page views? Thanks M.A --- ## [Installation Failed GCS Repo, Exception in thread "main" java.net.ConnectException: Connection timed out](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673)
**Author:** [@adilusmani](https://discuss.elastic.co/u/adilusmani)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 8:55pm UTC](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673 "2022-08-01T20:55:32Z")
Hello, I am getting below error while installing Elasticsearch GCS plugin I am running the following command sudo ES\_JAVA\_OPTS="-Dhttp.proxyHost=\*\*\*\* -Dhttp.proxyPort=9200 Dhttps.proxyHost=\*\*\*\* -Dhttps.proxyPort=9200"… --- ## [Counting records missing from one month to another](https://discuss.elastic.co/t/counting-records-missing-from-one-month-to-another/310488)
**Author:** [@olivierl](https://discuss.elastic.co/u/olivierl)\ **Replies:** 22\ **Last updated:** [August 1, 2022, 7:38pm UTC](https://discuss.elastic.co/t/counting-records-missing-from-one-month-to-another/310488 "2022-08-01T19:38:49Z")
Hello there! I have a monthly interval in which I have multiple records with each 3 values: date email amount I'd like to be able to count all emails that simply disappear from a month to another (eg: customer leavin… --- ## [How to remove the value from the legend in TSVB](https://discuss.elastic.co/t/how-to-remove-the-value-from-the-legend-in-tsvb/310785)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 3\ **Last updated:** [August 1, 2022, 6:10pm UTC](https://discuss.elastic.co/t/how-to-remove-the-value-from-the-legend-in-tsvb/310785 "2022-08-01T18:10:46Z")
I've created a number of TSVB visualizations. The latest had very large values. Which is when I noticed that the values are included in the legend. In addition, we like having the legend NOT truncated. This combination m… --- ## [Reinstall Elasticsearch 8.x (mistakes were made)](https://discuss.elastic.co/t/reinstall-elasticsearch-8-x-mistakes-were-made/311146)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 6:02pm UTC](https://discuss.elastic.co/t/reinstall-elasticsearch-8-x-mistakes-were-made/311146 "2022-08-01T18:02:21Z")
noobish question: I am relearning elastic after a hiatus of a couple years. I downloaded the 8.3.3 tarball, uncompressed it and started elasticsearch, (I'm on linux) but I forgot to properly configure elasticsearch.yml… --- ## [Is there a way to write a query where x must be true AND y must be a + b, OR c + d?](https://discuss.elastic.co/t/is-there-a-way-to-write-a-query-where-x-must-be-true-and-y-must-be-a-b-or-c-d/311020)
**Author:** [@ccsisko](https://discuss.elastic.co/u/ccsisko)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 6:00pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-write-a-query-where-x-must-be-true-and-y-must-be-a-b-or-c-d/311020 "2022-08-01T18:00:22Z")
Hello! We're writing a query where a couple fields must be true, while another field must equal something OR something else. More specifically, we're querying for a document that has a status of X, and the amount value … --- ## [GDAL not able to connect to Elastic Search](https://discuss.elastic.co/t/gdal-not-able-to-connect-to-elastic-search/308601)
**Author:** [@Purnima\_J](https://discuss.elastic.co/u/Purnima_J)\ **Replies:** 5\ **Last updated:** [August 1, 2022, 5:22pm UTC](https://discuss.elastic.co/t/gdal-not-able-to-connect-to-elastic-search/308601 "2022-08-01T17:22:38Z")
I am pretty new to Elasticsearch. I have installed both Elasticsearch and kibana. I am able to connect to Elasticsearch by https://localhost:9200. I am trying to ingest geospatial data as mentioned in this blog - How to… --- ## [Cannot generate report PDF or PNG](https://discuss.elastic.co/t/cannot-generate-report-pdf-or-png/311019)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 6\ **Last updated:** [August 1, 2022, 4:50pm UTC](https://discuss.elastic.co/t/cannot-generate-report-pdf-or-png/311019 "2022-08-01T16:50:30Z")
Hello there, I´m trying to generate reports using pdf or png but for some reason is not showing on the share option from kibana discover tab. After checking on the reporting diagnostics tab, I saw something that may be… --- ## [Elasticsearch delete data for more than 2 mohts in multiple index](https://discuss.elastic.co/t/elasticsearch-delete-data-for-more-than-2-mohts-in-multiple-index/311144)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/elasticsearch-delete-data-for-more-than-2-mohts-in-multiple-index/311144 "2022-08-01T16:44:19Z")
Hi friends, I have 3 index. how can i delete data form these index if it is more than 2 months. I know can use ILM policy but my index is created from elastalert whereby i cant use ILM policy as it wont append timestamp… --- ## [Installing custom Elasticsearch plugins in Elastic Cloud](https://discuss.elastic.co/t/installing-custom-elasticsearch-plugins-in-elastic-cloud/311032)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 8\ **Last updated:** [August 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/installing-custom-elasticsearch-plugins-in-elastic-cloud/311032 "2022-08-01T16:44:14Z")
Hello, I'm a trial user of Elastic cloud, and I can see it's technically possible to install custom plugins in Elasticsearch nodes: However, as you can see, I'm not allowed to use this feature for my "subscription l… --- ## [Kibana - Upgrade Assistant](https://discuss.elastic.co/t/kibana-upgrade-assistant/311121)
**Author:** [@BenH1234](https://discuss.elastic.co/u/BenH1234)\ **Replies:** 3\ **Last updated:** [August 1, 2022, 4:11pm UTC](https://discuss.elastic.co/t/kibana-upgrade-assistant/311121 "2022-08-01T16:11:14Z")
Hi, I'm currently running an unsupported ES server version 5.6.16. I've recently upgraded it from 2 to 5 and I'm looking to upgrade it further. From 2 to 5 I used a migration plugin which isn't available in 5 so I'm look… --- ## [Metricbeat configuration multiples modules with different outputs](https://discuss.elastic.co/t/metricbeat-configuration-multiples-modules-with-different-outputs/311117)
**Author:** [@melzi](https://discuss.elastic.co/u/melzi)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 3:22pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-multiples-modules-with-different-outputs/311117 "2022-08-01T15:22:25Z")
Hello everyone, I have a problem with ELK and I would like to ask you for help... I have activated 2 modules metricbeat: System and Logstash-xpack. I need to send the data from the System module to logstash node and t… --- ## [Instrumentation settings available in Elastic agent?](https://discuss.elastic.co/t/instrumentation-settings-available-in-elastic-agent/311128)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 2:09pm UTC](https://discuss.elastic.co/t/instrumentation-settings-available-in-elastic-agent/311128 "2022-08-01T14:09:54Z")
Hi, I want to upgrade some Beats to Elastic Agent, and in the Beats, the settings for instrumentation to show the Go agent in APM are available. Is there a way to have this with the Elastic agent as well and if, where c… --- ## [Logstash if condition regex not working](https://discuss.elastic.co/t/logstash-if-condition-regex-not-working/310737)
**Author:** [@Gosia96](https://discuss.elastic.co/u/Gosia96)\ **Replies:** 10\ **Last updated:** [August 1, 2022, 1:56pm UTC](https://discuss.elastic.co/t/logstash-if-condition-regex-not-working/310737 "2022-08-01T13:56:53Z")
Hi, I'm trying to use regex in the if condition in logstash. My goal is to send the output into 2 different indexes basing on what the field "tags" contains. So far I had no luck with it. Logstash simply ignores my co… --- ## [I want best matching result comes first with fuzziness: AUTO on](https://discuss.elastic.co/t/i-want-best-matching-result-comes-first-with-fuzziness-auto-on/311085)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 1:33pm UTC](https://discuss.elastic.co/t/i-want-best-matching-result-comes-first-with-fuzziness-auto-on/311085 "2022-08-01T13:33:06Z")
{ "size":1000, "query":{ "multi\_match":{ "query":"monsoon", "type": "best\_fields", "fields":\["EntityType^4", "Title","Title.\_2gram","Title.\_3gram","Title.\_index\_pre… --- ## [Where is my data of fortinet?](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 27\ **Last updated:** [August 1, 2022, 1:20pm UTC](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009 "2022-08-01T13:20:03Z")
Hello, I installed Elasticsearch and kibana and filebeat in ubuntu 22.04 VM and i installed FortiGate 7.2.0 in other VM in VMware workstation, I follow the steps to upload the Fortinet logs in elastic and kibana as the … --- ## [\_source filed is using to much disk space](https://discuss.elastic.co/t/source-filed-is-using-to-much-disk-space/311103)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 12:11pm UTC](https://discuss.elastic.co/t/source-filed-is-using-to-much-disk-space/311103 "2022-08-01T12:11:55Z")
\_source for metricbeat index is using a lot of space. Index size is 15.2gb and \_source filed is 12.2gb. And from 4 kubernetes nodes in one day total size of metricbeat size is 160 gb. Any ideas why metricbeat index size … --- ## [RUM - Capturing async 3rd party JS API requests in a transaction](https://discuss.elastic.co/t/rum-capturing-async-3rd-party-js-api-requests-in-a-transaction/311016)
**Author:** [@mgulbransen](https://discuss.elastic.co/u/mgulbransen)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 12:08pm UTC](https://discuss.elastic.co/t/rum-capturing-async-3rd-party-js-api-requests-in-a-transaction/311016 "2022-08-01T12:08:40Z")
APM Agent language and version: apm-rum-angular 2.1.3 Browser version: Chrome 103.0.5060.134 Original install method (e.g. download page, yum, deb, from source, etc.) and version: npm Fresh install or upgraded from … --- ## [Grok Plugin: load custom patterns in Oniguruma format from file](https://discuss.elastic.co/t/grok-plugin-load-custom-patterns-in-oniguruma-format-from-file/311108)
**Author:** [@who](https://discuss.elastic.co/u/who)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 11:52am UTC](https://discuss.elastic.co/t/grok-plugin-load-custom-patterns-in-oniguruma-format-from-file/311108 "2022-08-01T11:52:44Z")
According to the documentation, we can use Oniguruma regex pattern formats in grok plugin (i.e. (?\the pattern here)). Also, there's the patterns\_dir configuration option that instructs grok filter to load pa… --- ## [Display all python prints in logstash](https://discuss.elastic.co/t/display-all-python-prints-in-logstash/310351)
**Author:** [@Didi\_Sisi](https://discuss.elastic.co/u/Didi_Sisi)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 11:39am UTC](https://discuss.elastic.co/t/display-all-python-prints-in-logstash/310351 "2022-08-01T11:39:30Z")
Hello, I have a python script like this: import time dictionary1 ={ "id": "02", "name": "sunil", "department": "HR" } dictionary2 ={ "id": "03", "name": "sunilals", "depa… --- ## [How can i use ELK 8.3.3 without security enabled?](https://discuss.elastic.co/t/how-can-i-use-elk-8-3-3-without-security-enabled/310501)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 11:39am UTC](https://discuss.elastic.co/t/how-can-i-use-elk-8-3-3-without-security-enabled/310501 "2022-08-01T11:39:01Z")
Hi I installed ELK 8. x on my machine, a single node. also enabled xpack security as without doing this I cannot add any agents. cert I'm using is self-signed. Now when I install the agent in the local machine it sen… --- ## [Moving from filebeats 6.8 to 7.10](https://discuss.elastic.co/t/moving-from-filebeats-6-8-to-7-10/310851)
**Author:** [@Ryan5](https://discuss.elastic.co/u/Ryan5)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:59am UTC](https://discuss.elastic.co/t/moving-from-filebeats-6-8-to-7-10/310851 "2022-08-01T10:59:02Z")
Hi, We are trying to move from filebeats version 6.8 to 7.10 however, the way to collect docker logs seems to have changed and following the new autodiscover method docker logs are not appearing in elasticsearch but nor… --- ## [Logstash Translate filter plugin based on multilevel dictionary](https://discuss.elastic.co/t/logstash-translate-filter-plugin-based-on-multilevel-dictionary/311105)
**Author:** [@who](https://discuss.elastic.co/u/who)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 10:50am UTC](https://discuss.elastic.co/t/logstash-translate-filter-plugin-based-on-multilevel-dictionary/311105 "2022-08-01T10:50:01Z")
Assuming we have a dictionary with nested structure (YAML): "key1": "sub-key1": "value1" "sub-key2": "value2" "sub-key3": "value3" "key2": "sub-key4": "value4" "sub-key5": "value5" "sub-key6": "value6" Curr… [Previous page](https://discuss.elastic.co/latest.md?page=1022) [Next page](https://discuss.elastic.co/latest.md?page=1024)