# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1027

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1028

---

## [How to manage Elasticsearch data across multiple indices with Filebeat, ILM,](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901 "2022-07-28T15:51:39Z")

</div>

https://www.elastic.co/blog/how-to-manage-elasticsearch-data-multiple-indices-filebeat-ilm-data-stream I have read this through but cannot seem to get it to work. My current issue is that logs are being written but the…

---

## [Getting unusual data during aggregation and curation in Elasticsearch](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899)

<div class="topic-metadata">

**Author:** [@Anika\_Sultana](https://discuss.elastic.co/u/Anika_Sultana)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899 "2022-07-28T15:41:28Z")

</div>

Hi, I am using Elasticsearch 7.4. I noticed some unexpected scenarios during data aggregation and data curation. Let me explain the scenario. I have 100 user\_id and among them are AA, AB, AC, and AD. Now if I try to ag…

---

## [Difference between discover section queries and search requests by CONSOLE](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897)

<div class="topic-metadata">

**Author:** [@Purnima\_J](https://discuss.elastic.co/u/Purnima_J)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:38pm UTC](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897 "2022-07-28T15:38:05Z")

</div>

Hi, Does the queries that I run in discover as filters retrieve the results in a way of cache? I mean does it not hit the elasticsearch indices like a normal search requests in CONSOLE section? Thanks, Purnima

---

## [Is it possible to create a single document with an array of objects?](https://discuss.elastic.co/t/is-it-possible-to-create-a-single-document-with-an-array-of-objects/310616)

<div class="topic-metadata">

**Author:** [@Wellington\_Bezerra](https://discuss.elastic.co/u/Wellington_Bezerra)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 3:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-single-document-with-an-array-of-objects/310616 "2022-07-28T15:09:05Z")

</div>

I'm creating a query to feed my index that has a field in common and I wanted to include all values ​​with the same field in a single document. Example SQL DATA: ID NAME CODE ACTIVE QTD PROD 181304…

---

## [Failed to obtain node locks when starting elasticsearch](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:06pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892 "2022-07-28T15:06:21Z")

</div>

Some background: I had an elasticsearch installed in my CentOS with yum. After I uninstalled that with yum remove. Right now, I want to run elasticsearch in the same machine, but the error below appears when I run sudo s…

---

## [Monitoring ELK](https://discuss.elastic.co/t/monitoring-elk/310887)

<div class="topic-metadata">

**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 2:53pm UTC](https://discuss.elastic.co/t/monitoring-elk/310887 "2022-07-28T14:53:06Z")

</div>

Hi everyone, so I installed the ELK stack 8.2 for my cluster with 11 nodes, and I want to know if there is any possibility to monitor the stack, for example if ElasticSearch or kibana shut down or something like this I w…

---

## [Can't link to https://app-search-workshop.elasticlabs.training/](https://discuss.elastic.co/t/cant-link-to-https-app-search-workshop-elasticlabs-training/310771)

<div class="topic-metadata">

**Author:** [@Kimberly](https://discuss.elastic.co/u/Kimberly)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 2:40pm UTC](https://discuss.elastic.co/t/cant-link-to-https-app-search-workshop-elasticlabs-training/310771 "2022-07-28T14:40:01Z")

</div>

I was trying to work "ANALYTICS" section in the class 1's lab -"Lab: Introduction to Elastic App Search" but can't proceed for the following error: This site can’t be reachedThe webpage at https://app-search-workshop.el…

---

## [Httpjson Input](https://discuss.elastic.co/t/httpjson-input/310884)

<div class="topic-metadata">

**Author:** [@Hani\_Atalla](https://discuss.elastic.co/u/Hani_Atalla)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 2:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884 "2022-07-28T14:37:38Z")

</div>

I am configuring an HTTPJSON Input from Fleet using the UI and doing a POST on a REST endpoint. I need to send a body in the request. The documentation isn't too clear about the format it should be in inside the request …

---

## [APM/Kibana: Redis not shown as a Dependency](https://discuss.elastic.co/t/apm-kibana-redis-not-shown-as-a-dependency/310800)

<div class="topic-metadata">

**Author:** [@jpmc](https://discuss.elastic.co/u/jpmc)\
**Replies:** 0\
**Last updated:** [July 27, 2022, 8:50pm UTC](https://discuss.elastic.co/t/apm-kibana-redis-not-shown-as-a-dependency/310800 "2022-07-27T20:50:30Z")

</div>

Kibana version: 7.17 Elasticsearch version: 7.17 APM Server version: 7.17 APM Agent language and version: Ruby 2.5.3 (Rails 4.2) Browser version: Chrome 103.0.5060.134 Original install method (e.g. download page, yu…

---

## [HTTP output plugin failed to execute](https://discuss.elastic.co/t/http-output-plugin-failed-to-execute/310878)

<div class="topic-metadata">

**Author:** [@tylersiemers](https://discuss.elastic.co/u/tylersiemers)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 2:08pm UTC](https://discuss.elastic.co/t/http-output-plugin-failed-to-execute/310878 "2022-07-28T14:08:24Z")

</div>

Trying to use the http output plugin and have some basic newbie questions on the payload. I am getting these errors when trying to use the plugin. Jul 28 13:57:00 nt-logstash logstash\[335749\]: \[2022-07-28T13:57:00,180\]\[…

---

## [Install Elastic APM Agent on Windows Server](https://discuss.elastic.co/t/install-elastic-apm-agent-on-windows-server/309914)

<div class="topic-metadata">

**Author:** [@aji.shinde7](https://discuss.elastic.co/u/aji.shinde7)\
**Replies:** 6\
**Last updated:** [July 28, 2022, 1:35pm UTC](https://discuss.elastic.co/t/install-elastic-apm-agent-on-windows-server/309914 "2022-07-28T13:35:59Z")

</div>

Hello Experts, I am a beginner in Elasticsearch. I am looking for Installing Elastic APM Agent on windows servers. Followed Documentation but confused. Can anyone share any article / video where process is bit clear. …

---

## [Alerting API. Where can I find alert\_id?](https://discuss.elastic.co/t/alerting-api-where-can-i-find-alert-id/310730)

<div class="topic-metadata">

**Author:** [@oandreiev](https://discuss.elastic.co/u/oandreiev)\
**Replies:** 3\
**Last updated:** [July 28, 2022, 1:17pm UTC](https://discuss.elastic.co/t/alerting-api-where-can-i-find-alert-id/310730 "2022-07-28T13:17:01Z")

</div>

Hello, I'm trying to use Kibana's alerting api for muting an alert. It looks like this: POST \<kibana host\>:\<port\>/api/alerting/rule/\<rule\_id\>/alert/\<alert\_id\>/\_mute Where I can find the alert\_id? I've thought that I …

---

## [Display text in kibana pretty](https://discuss.elastic.co/t/display-text-in-kibana-pretty/310525)

<div class="topic-metadata">

**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\
**Replies:** 6\
**Last updated:** [July 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/display-text-in-kibana-pretty/310525 "2022-07-28T12:25:19Z")

</div>

Hi, i use the elastic together with kibana. Success and error messages are saved in the logs into the elastic. So there is an attribute errorState, which can be true or false. In addition, there is an errorMessage attri…

---

## [Eland error after upgrading Elastic](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858)

<div class="topic-metadata">

**Author:** [@mruiter](https://discuss.elastic.co/u/mruiter)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 11:25am UTC](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858 "2022-07-28T11:25:48Z")

</div>

After upgrading ElasticSearch from version 8.3.1 to 8.3.2 none of my Eland/Pandas code seems to work anymore. The thing that seems to cause the error is converting the Eland object to Pandas using .to\_pandas() import el…

---

## [How to run packetbeat as non-root in Kubernetes?](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862)

<div class="topic-metadata">

**Author:** [@yurikizio](https://discuss.elastic.co/u/yurikizio)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 11:55am UTC](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862 "2022-07-28T11:55:23Z")

</div>

Hi, I want to run packetbeat as non-root user because of security issue and I didn't find any solution how to do it. I tried to use these securityContext settings and I received this error. containers: - name:…

---

## [How to use BulkProcessor in Version 8.x.x?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708)

<div class="topic-metadata">

**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708 "2022-07-28T11:54:23Z")

</div>

Hello, in this Video: "Introduction into the Java HTTP Elasticsearch REST client- April 23, 2020 Elastic Meetup" from Official Elastic Community at Timeindex 17:23 it is showing the BulkProcessor. How to…

---

## [Changing elasticsearch FS repository path](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658)

<div class="topic-metadata">

**Author:** [@amirmono](https://discuss.elastic.co/u/amirmono)\
**Replies:** 4\
**Last updated:** [July 28, 2022, 11:26am UTC](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658 "2022-07-28T11:26:15Z")

</div>

I'm using elastiSearch 8.3 on a windows machine, and created a shared file system repository - my\_repo: PUT \_snapshot/my\_repo { "type": "fs", "settings": { "location": "relative\_path" …

---

## [App search - Engine Sharding](https://discuss.elastic.co/t/app-search-engine-sharding/310102)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 3\
**Last updated:** [July 28, 2022, 11:17am UTC](https://discuss.elastic.co/t/app-search-engine-sharding/310102 "2022-07-28T11:17:33Z")

</div>

Hi there :wave: I wanted to ask about sharding or distributing engines geographically. Some use cases come to mind: customers that would like to have their data in a given country for security or other reasons. our co…

---

## [A way to ensure additional field will be with correct type inside index](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 4\
**Last updated:** [July 28, 2022, 11:11am UTC](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770 "2022-07-28T11:11:20Z")

</div>

Hello, I was using the scripted field to get a date field from system.uptime.duration.ms field value. I used below painless script. String val = "system.uptime.duration.ms"; if (doc\[val\] != null){ if (doc\[val\]…

---

## [Unable to convert fields into DATE type in Logstash](https://discuss.elastic.co/t/unable-to-convert-fields-into-date-type-in-logstash/310830)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:35am UTC](https://discuss.elastic.co/t/unable-to-convert-fields-into-date-type-in-logstash/310830 "2022-07-28T10:35:28Z")

</div>

Hello team, I am unbale to convert field into data type. Can you please help me on this. Format is coming as Text only Sample Log: CIG,CCI05\_05\_NRW\_22102020043728\_000014635.txt,26/07/2022 04:37:50,26/07/2022 04:42:12,…

---

## [ECK Kibana access from outside kubernetes cluster](https://discuss.elastic.co/t/eck-kibana-access-from-outside-kubernetes-cluster/310257)

<div class="topic-metadata">

**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:22am UTC](https://discuss.elastic.co/t/eck-kibana-access-from-outside-kubernetes-cluster/310257 "2022-07-28T10:22:29Z")

</div>

Hi, We will deploy Kibana on ECK and access Kibana from outside kubernetes cluster, I found Ingress example, Can anyone please help how to mention the selector as Kibana in the service file, Example to mention selector …

---

## [Unable to integrate logstash to salesforce](https://discuss.elastic.co/t/unable-to-integrate-logstash-to-salesforce/310850)

<div class="topic-metadata">

**Author:** [@Ayaan\_Shaik](https://discuss.elastic.co/u/Ayaan_Shaik)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/unable-to-integrate-logstash-to-salesforce/310850 "2022-07-28T10:13:21Z")

</div>

Hi, I'm Trying to integrate salesforce to the logstash for data log ingest into ELK stack, But i'm not able connect succefully to the logstash salesforce connection. I have done connected app as per elastic doc and the…

---

## [Automatically export/import saved objects in kibana](https://discuss.elastic.co/t/automatically-export-import-saved-objects-in-kibana/310732)

<div class="topic-metadata">

**Author:** [@BaptisteA](https://discuss.elastic.co/u/BaptisteA)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/automatically-export-import-saved-objects-in-kibana/310732 "2022-07-28T10:13:58Z")

</div>

Hello, I work with the kibana version 8.3.1 on a docker container and I want to find a solution to export and saved my dashboards automatically on my computer. And import them when I restart Kibana. For the moment I tr…

---

## [Not able to trigger email from connector](https://discuss.elastic.co/t/not-able-to-trigger-email-from-connector/309672)

<div class="topic-metadata">

**Author:** [@desai.aditya12](https://discuss.elastic.co/u/desai.aditya12)\
**Replies:** 17\
**Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/not-able-to-trigger-email-from-connector/309672 "2022-07-28T10:13:47Z")

</div>

I am configuring a connector to send emails when server is down. for that i have done gmail configuration in elasticsearch.yml xpack.notification.email.account: gmail\_account: profile: gmail smtp: auth: true startt…

---

## [Fleet Server Deployment on kubernetes](https://discuss.elastic.co/t/fleet-server-deployment-on-kubernetes/310408)

<div class="topic-metadata">

**Author:** [@Mehran\_Hafizi](https://discuss.elastic.co/u/Mehran_Hafizi)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:10am UTC](https://discuss.elastic.co/t/fleet-server-deployment-on-kubernetes/310408 "2022-07-28T10:10:25Z")

</div>

Hello , I wanted to install Fleet server on the AKS cluster , but I got the following errror , would you please help me to solve this issue? Error: message: Application: fleet-server--7.17.0\[\]: State changed to FAILED…

---

## [Any help to solve these C# NEST (ElasticSearch) errors?](https://discuss.elastic.co/t/any-help-to-solve-these-c-nest-elasticsearch-errors/310772)

<div class="topic-metadata">

**Author:** [@ahmadmd](https://discuss.elastic.co/u/ahmadmd)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:09am UTC](https://discuss.elastic.co/t/any-help-to-solve-these-c-nest-elasticsearch-errors/310772 "2022-07-28T10:09:57Z")

</div>

Hello, Recently, I have started to work on C# NEST (ElasticSearch), and having some problems: Error Message: No route taking 1 parameters {index}/\_doc/{id} when using await ESClient.GetAsync(DocumentPath\<TModel\>.Id…

---

## [Output Logstash plugin for Azure Data Explorer (ADX) quickly running out of capacity](https://discuss.elastic.co/t/output-logstash-plugin-for-azure-data-explorer-adx-quickly-running-out-of-capacity/310599)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 9:29am UTC](https://discuss.elastic.co/t/output-logstash-plugin-for-azure-data-explorer-adx-quickly-running-out-of-capacity/310599 "2022-07-28T09:29:03Z")

</div>

Dear All, I use the ADX output plugin to send FW logs to ADX. I first tried it with a stdout{} plugin to massage the data and parse it my way and it was working fine. Now when I enabled the kusto output (That is how i…

---

## [Is standalone APM server required with Elastic APM Integration?](https://discuss.elastic.co/t/is-standalone-apm-server-required-with-elastic-apm-integration/310620)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 16\
**Last updated:** [July 28, 2022, 9:36am UTC](https://discuss.elastic.co/t/is-standalone-apm-server-required-with-elastic-apm-integration/310620 "2022-07-28T09:36:53Z")

</div>

Hi, I have installed ES, Kibana. And its up and running. Further, i have added Elastic APM Integration into Kibana, and have setup Fleet server, Elastic Agent. (note i did not setup any APM server yet) I am trying to…

---

## [Index rollover malfunctioning](https://discuss.elastic.co/t/index-rollover-malfunctioning/310838)

<div class="topic-metadata">

**Author:** [@AbilashKrishnan](https://discuss.elastic.co/u/AbilashKrishnan)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 9:34am UTC](https://discuss.elastic.co/t/index-rollover-malfunctioning/310838 "2022-07-28T09:34:30Z")

</div>

Hi Team, We are running cron job for index rollover. We have the condition of max\_age set to 1d as shown below , however it is not working as expected. The rollover is working but the index is not generated everyday, we…

---

## [Logstash CEF codec and ECS cannot parse 'rt' field throws an error](https://discuss.elastic.co/t/logstash-cef-codec-and-ecs-cannot-parse-rt-field-throws-an-error/310705)

<div class="topic-metadata">

**Author:** [@wii](https://discuss.elastic.co/u/wii)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 8:54am UTC](https://discuss.elastic.co/t/logstash-cef-codec-and-ecs-cannot-parse-rt-field-throws-an-error/310705 "2022-07-28T08:54:29Z")

</div>

Without ECS, the 'rt' field could be parsed fine and mapped into 'deviceReceiptTime' field. But after enabling ECS in Logstash configuration it throws me an error in log ingesting. Could somebody guide me through this as…

[Previous page](https://discuss.elastic.co/latest.md?page=1026)

[Next page](https://discuss.elastic.co/latest.md?page=1028)
