# Latest **URL:** https://discuss.elastic.co/latest.md?page=1025 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1026 --- ## [Using Scripted field to display a sub-string](https://discuss.elastic.co/t/using-scripted-field-to-display-a-sub-string/310798)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 6\ **Last updated:** [July 29, 2022, 8:18pm UTC](https://discuss.elastic.co/t/using-scripted-field-to-display-a-sub-string/310798 "2022-07-29T20:18:55Z")
Hello. We are using ELK 7.6.2 stack. I have a field named host.name which displays a value such as ad-c2ff-v2bg.taz.root.net I need to extract the second substring (taz) using Scripted field. When I try to define a n… --- ## [Change Elastic Agent GRPC port via Environment Variable?](https://discuss.elastic.co/t/change-elastic-agent-grpc-port-via-environment-variable/311014)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 4\ **Last updated:** [July 29, 2022, 7:47pm UTC](https://discuss.elastic.co/t/change-elastic-agent-grpc-port-via-environment-variable/311014 "2022-07-29T19:47:56Z")
Hi All, I was wonder if there is a way to change the GRPC port the Elastic Agent uses via an environment variable. Use case: I have a Kubernetes cluster that runs with a complete underlying OS, because of this, I run … --- ## [Alert reconfiguration](https://discuss.elastic.co/t/alert-reconfiguration/310957)
**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\ **Replies:** 4\ **Last updated:** [July 29, 2022, 7:31pm UTC](https://discuss.elastic.co/t/alert-reconfiguration/310957 "2022-07-29T19:31:10Z")
Hi everyone, hope you’re doing well I have a small question kind of weird. When we upgrade our stack from 6.5.4 to 8.2. Do I need to do something for the alerts? to use them in the new version thank youuu --- ## [Force a synchronous refresh when updating documents](https://discuss.elastic.co/t/force-a-synchronous-refresh-when-updating-documents/311012)
**Author:** [@sz\_bb](https://discuss.elastic.co/u/sz_bb)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 6:30pm UTC](https://discuss.elastic.co/t/force-a-synchronous-refresh-when-updating-documents/311012 "2022-07-29T18:30:02Z")
As is well-documented, Elastic provides "near real-time search capabilities". My data is typically ingested with through the Bulk API and we use a 30 second refresh interval as the data typically does not need to be avai… --- ## [Could not index event to Elasticsearch due to opType: \[-1\]](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-due-to-optype-1/311010)
**Author:** [@co88liwan](https://discuss.elastic.co/u/co88liwan)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 5:41pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-due-to-optype-1/311010 "2022-07-29T17:41:48Z")
Hi all, We encountered a transient issue with the \[WARN\] said: Could not index event to Elasticsearch From the log, the response is like :response =\> {"create"=\>{"\_index"=\>"zzzzzzzzzz"}, "\_type"=\>"\_doc", "\_id"=\>"xxxx… --- ## [Speed of dense vector search with 512 or more dimensions](https://discuss.elastic.co/t/speed-of-dense-vector-search-with-512-or-more-dimensions/307121)
**Author:** [@telunyang](https://discuss.elastic.co/u/telunyang)\ **Replies:** 7\ **Last updated:** [July 29, 2022, 5:43pm UTC](https://discuss.elastic.co/t/speed-of-dense-vector-search-with-512-or-more-dimensions/307121 "2022-07-29T17:43:37Z")
Hi Team, Reading the article Introducing approximate nearest neighbor search in Elasticsearch 8.0 is very useful to our lab for building an Elasticsearch service, so I would like to consult you on how to speed up our qu… --- ## [Illegal\_argument\_exception when searching with scroll in new elasticserach java client](https://discuss.elastic.co/t/illegal-argument-exception-when-searching-with-scroll-in-new-elasticserach-java-client/310970)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 2\ **Last updated:** [July 29, 2022, 5:02pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-when-searching-with-scroll-in-new-elasticserach-java-client/310970 "2022-07-29T17:02:54Z")
What is the correct syntax when building a search request with scroll. I did this but I get an exception final co.elastic.clients.elasticsearch.core.SearchRequest req = rbuilder .index(indexPref… --- ## [LEEF Input Plugin](https://discuss.elastic.co/t/leef-input-plugin/311008)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 4:44pm UTC](https://discuss.elastic.co/t/leef-input-plugin/311008 "2022-07-29T16:44:32Z")
Hello, I am looking for LEEF Input plugin for Logstash. How can I configure Logstash to consume events in LEEF format sent over syslog. Please advise. -- Thanks, Siddarth --- ## [How to create Custom Endpoints with an API?](https://discuss.elastic.co/t/how-to-create-custom-endpoints-with-an-api/311004)
**Author:** [@rcorfield](https://discuss.elastic.co/u/rcorfield)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 4:36pm UTC](https://discuss.elastic.co/t/how-to-create-custom-endpoints-with-an-api/311004 "2022-07-29T16:36:50Z")
Hi I've created custom endpoints for my ECE cluster via the Cloud UI using the guidance here: However in future I'd like to use an API call, or some other programmatic method (writing config files directly?). Can some… --- ## [Filebeat won't create custom indices](https://discuss.elastic.co/t/filebeat-wont-create-custom-indices/310988)
**Author:** [@issy](https://discuss.elastic.co/u/issy)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 4:18pm UTC](https://discuss.elastic.co/t/filebeat-wont-create-custom-indices/310988 "2022-07-29T16:18:42Z")
I'm trying to have custom indices for different filebeat modules. In this example i want to have a custom indices for the apache module, but it doesn't seem to work. indices: - index: "filebeat-%{\[agent.version\]}-apac… --- ## [Elasticsearch v8 Java API client adding index settings](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-adding-index-settings/310888)
**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\ **Replies:** 4\ **Last updated:** [July 29, 2022, 3:42pm UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-adding-index-settings/310888 "2022-07-29T15:42:32Z")
How to set index setting while creation using Elasticsearch v8 Java API client. I can able to set numberOfShards and numberOfReplicas using below syntax but could not able to set analysis due to confusing builder syntax. … --- ## [Java API Client compatibility mode](https://discuss.elastic.co/t/java-api-client-compatibility-mode/310994)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 2:35pm UTC](https://discuss.elastic.co/t/java-api-client-compatibility-mode/310994 "2022-07-29T14:35:49Z")
Hello, I have a question regarding the compatibility mode of the Java API Client version 7.17.3. Looking at the documentation section entitled "Elasticsearch server compatibility policy" (Introduction | Elasticsearch J… --- ## [Elasticsearch json logging @timestamp missing](https://discuss.elastic.co/t/elasticsearch-json-logging-timestamp-missing/310992)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 2:01pm UTC](https://discuss.elastic.co/t/elasticsearch-json-logging-timestamp-missing/310992 "2022-07-29T14:01:25Z")
Hello there, I have a problem with elasticsearch logging and the filebeat module. I collect the logs from elasticsearch with the filebeat module. For example the deprecation logs: - module: elasticsearch deprecatio… --- ## [Fleet : Kubernetes integration different index from namespace](https://discuss.elastic.co/t/fleet-kubernetes-integration-different-index-from-namespace/310989)
**Author:** [@davide.lilliu](https://discuss.elastic.co/u/davide.lilliu)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 1:29pm UTC](https://discuss.elastic.co/t/fleet-kubernetes-integration-different-index-from-namespace/310989 "2022-07-29T13:29:00Z")
Hi, is it possibile, using Kubernetes integration on Fleet, to have different index from different k8s namespace? Davide L. --- ## [Stop elasticsearch\_dsl from sending events to Elastic when server is down](https://discuss.elastic.co/t/stop-elasticsearch-dsl-from-sending-events-to-elastic-when-server-is-down/310977)
**Author:** [@Adso\_4](https://discuss.elastic.co/u/Adso_4)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 10:36am UTC](https://discuss.elastic.co/t/stop-elasticsearch-dsl-from-sending-events-to-elastic-when-server-is-down/310977 "2022-07-29T10:36:07Z")
We have a django web application that sends user data with elasticsearch\_dsl library to an APM server. Our Elastic Stack is mounted with docker-compose, with Kibana, Elasticsearch and APM nodes. For every user interacti… --- ## [The client is unable to verify that the server is Elasticsearch due to an unsuccessful product check call. Some functionality may not be compatible if the server is running an unsupported product](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call-some-functionality-may-not-be-compatible-if-the-server-is-running-an-unsupported-product/310969)
**Author:** [@shashi1](https://discuss.elastic.co/u/shashi1)\ **Replies:** 10\ **Last updated:** [July 29, 2022, 1:09pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call-some-functionality-may-not-be-compatible-if-the-server-is-running-an-unsupported-product/310969 "2022-07-29T13:09:39Z")
Invalid NEST response built from a unsuccessful () low level call on POST: /client/az30268j/\_search?pretty=true&error\_trace=true&typed\_keys=true Audit trail of this API call: \[1\] ProductCheckOnStartup: Took: 00:00:00.7… --- ## [Logstash-keystore permission denied](https://discuss.elastic.co/t/logstash-keystore-permission-denied/309426)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [July 29, 2022, 1:03pm UTC](https://discuss.elastic.co/t/logstash-keystore-permission-denied/309426 "2022-07-29T13:03:13Z")
\`Hello. I´m going to install ELK for an customer, and as a start I´m setting up an test ELK with version 8.3.2 to see how it works. I am using Windows10 as the host for ELK As a start I have setup the Elasticsearch and … --- ## [How do you bootstrap an elastic cluster for production with security enabled? The documentation feels unclear](https://discuss.elastic.co/t/how-do-you-bootstrap-an-elastic-cluster-for-production-with-security-enabled-the-documentation-feels-unclear/310915)
**Author:** [@Atharv\_Kirtikar](https://discuss.elastic.co/u/Atharv_Kirtikar)\ **Replies:** 2\ **Last updated:** [July 29, 2022, 1:02pm UTC](https://discuss.elastic.co/t/how-do-you-bootstrap-an-elastic-cluster-for-production-with-security-enabled-the-documentation-feels-unclear/310915 "2022-07-29T13:02:47Z")
I am trying to create a 3 node cluster for production. The documentation here implies that with security creating an enrolment token is the way to go. However it also recommends here that you should have at least three… --- ## [Fleet - Elastic Agent | 8.3.2 Cannot upgrade agent via GUI](https://discuss.elastic.co/t/fleet-elastic-agent-8-3-2-cannot-upgrade-agent-via-gui/310984)
**Author:** [@AgnosticPriest](https://discuss.elastic.co/u/AgnosticPriest)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 12:50pm UTC](https://discuss.elastic.co/t/fleet-elastic-agent-8-3-2-cannot-upgrade-agent-via-gui/310984 "2022-07-29T12:50:46Z")
Hello everyone, Member of newly formed SOC in a mid sized company (3k monitored hosts/machines) Data: ELK 8.3.2 on 3 VM machines. Logstash, Fleet Server on a separate VM machine. Ubuntu 22 LTS 4 cores, 16 GB RAM, 2… --- ## [Installing a logstash plugin on Elastic Cloud](https://discuss.elastic.co/t/installing-a-logstash-plugin-on-elastic-cloud/310902)
**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\ **Replies:** 3\ **Last updated:** [July 29, 2022, 11:49am UTC](https://discuss.elastic.co/t/installing-a-logstash-plugin-on-elastic-cloud/310902 "2022-07-29T11:49:04Z")
Hi all, I am a seasoned Elastic Stack on premise user. Recently I have been exploring the possibilities of a double run (prem / cloud) to consider the portability of our projects to the cloud solution I usually instal… --- ## [How to delete the indices older than 90 days](https://discuss.elastic.co/t/how-to-delete-the-indices-older-than-90-days/310974)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 11:43am UTC](https://discuss.elastic.co/t/how-to-delete-the-indices-older-than-90-days/310974 "2022-07-29T11:43:10Z")
Hi, We are using Elasticsearch mostly for Observability. We have almost 1000 + VM' where we have deployed fleet agent to capture metrics. We would like to delete data if \> 90 days. Please be noted we are using standar… --- ## [APM not able to connect via Fleet Integration](https://discuss.elastic.co/t/apm-not-able-to-connect-via-fleet-integration/309140)
**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\ **Replies:** 5\ **Last updated:** [July 29, 2022, 10:33am UTC](https://discuss.elastic.co/t/apm-not-able-to-connect-via-fleet-integration/309140 "2022-07-29T10:33:50Z")
Kibana version: 8.3.1 Elasticsearch version: 8.3.1 APM Server version: 8.3.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Ubuntu 20.04 deb package Fresh install or upgraded … --- ## [Search for: elasticsearch right to enable](https://discuss.elastic.co/t/search-for-elasticsearch-right-to-enable/310958)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 8:31am UTC](https://discuss.elastic.co/t/search-for-elasticsearch-right-to-enable/310958 "2022-07-29T08:31:07Z")
Hi there, I have a simple question: I am admin for a central cluster mit multiple customers and would like to give the users in their space the rights not only to see the index they have (already by done giving the 'mon… --- ## [Integration with OCI logs ( Oracle cloud)](https://discuss.elastic.co/t/integration-with-oci-logs-oracle-cloud/310972)
**Author:** [@paolajuarez](https://discuss.elastic.co/u/paolajuarez)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 9:51am UTC](https://discuss.elastic.co/t/integration-with-oci-logs-oracle-cloud/310972 "2022-07-29T09:51:27Z")
How can I ingest logs from OCI to elastisearch? Any recommendation? --- ## [Python elastic-apm log messages](https://discuss.elastic.co/t/python-elastic-apm-log-messages/310879)
**Author:** [@matthiasthaler](https://discuss.elastic.co/u/matthiasthaler)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 9:30am UTC](https://discuss.elastic.co/t/python-elastic-apm-log-messages/310879 "2022-07-29T09:30:18Z")
While trying to log messages with Python, without any framework and by Instrumenting Custom Code, i found out that every capture message or error is interpreted as Error. Is there any possibility to simply log messages … --- ## [ConsumerConfig values with kafka input plugin](https://discuss.elastic.co/t/consumerconfig-values-with-kafka-input-plugin/310964)
**Author:** [@AlexB2](https://discuss.elastic.co/u/AlexB2)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 9:13am UTC](https://discuss.elastic.co/t/consumerconfig-values-with-kafka-input-plugin/310964 "2022-07-29T09:13:27Z")
Hi there I have a question: Is there a way to configure ConsumerConfig values for kafka input plugin I am interested in configure sasl.client.callback.handler.class There is no direct such option with kafka input pl… --- ## [Not support spring cloud gateway?](https://discuss.elastic.co/t/not-support-spring-cloud-gateway/309595)
**Author:** [@user2022](https://discuss.elastic.co/u/user2022)\ **Replies:** 4\ **Last updated:** [July 29, 2022, 9:06am UTC](https://discuss.elastic.co/t/not-support-spring-cloud-gateway/309595 "2022-07-29T09:06:26Z")
we have an application using spring cloud gateway,and we find some problems on apm,seems like java agent do not support spring cloud gateway (yet) ? see below for details. Kibana version:7.17.3 Elasticsearch version:7.… --- ## [Problem with GROK when coming from filebeat (bracket parsing)](https://discuss.elastic.co/t/problem-with-grok-when-coming-from-filebeat-bracket-parsing/310883)
**Author:** [@79g](https://discuss.elastic.co/u/79g)\ **Replies:** 3\ **Last updated:** [July 29, 2022, 8:21am UTC](https://discuss.elastic.co/t/problem-with-grok-when-coming-from-filebeat-bracket-parsing/310883 "2022-07-29T08:21:10Z")
Hello all, I'm sending some Filebeat logs to an Elasticsearch pipeline to transform and store on Elasticsearch. The input event looks like: Thu Jul 28 13:57:44 2022 us=22598 1.2.3.4:37491 \[my\_user\] Peer Connection In… --- ## [Unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate/310955)
**Author:** [@AGiles102](https://discuss.elastic.co/u/AGiles102)\ **Replies:** 0\ **Last updated:** [July 29, 2022, 8:12am UTC](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate/310955 "2022-07-29T08:12:36Z")
Hi all, I hope you can help me with the below. We are using a third party to sign our certificate, and I have followed the guide below. Our infrastructure team have provided me with a P12 file, which seems to work f… --- ## [Zendesk connector partly broken](https://discuss.elastic.co/t/zendesk-connector-partly-broken/310856)
**Author:** [@Zetanova](https://discuss.elastic.co/u/Zetanova)\ **Replies:** 4\ **Last updated:** [July 29, 2022, 7:56am UTC](https://discuss.elastic.co/t/zendesk-connector-partly-broken/310856 "2022-07-29T07:56:53Z")
I am posting my issue here, because I could not find the zendesk connector source on github, Is it close-source? If there is a better place to post it, please inform me. I added the zendesk connector and the jobs "incr… [Previous page](https://discuss.elastic.co/latest.md?page=1024) [Next page](https://discuss.elastic.co/latest.md?page=1026)