# Latest **URL:** https://discuss.elastic.co/latest.md?page=1030 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1031 --- ## [Having issues translating query dsl to NEST](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/310697)
**Author:** [@charlene](https://discuss.elastic.co/u/charlene)\ **Replies:** 0\ **Last updated:** [July 27, 2022, 12:48am UTC](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/310697 "2022-07-27T00:48:27Z")
I am using the nuget Nest(7.17.4) and am particular stucked at translating the fluent query dsl ...I thought there would be some syntax or any method I can utilize in Nest to simply paste the request queries (from inspec… --- ## [Log stream intermittently fails to display messages](https://discuss.elastic.co/t/log-stream-intermittently-fails-to-display-messages/306272)
**Author:** [@Torin\_Stepan](https://discuss.elastic.co/u/Torin_Stepan)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 10:30pm UTC](https://discuss.elastic.co/t/log-stream-intermittently-fails-to-display-messages/306272 "2022-07-26T22:30:26Z")
Hi, Using a deployment of Kibana v8.0 on the Elastic cloud, I'm aggregating logs from a few systems under a data view and viewing them in the stream page of the Logs app. This works fine at first, but when live streamin… --- ## [Unable to start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/310685)
**Author:** [@Ifty](https://discuss.elastic.co/u/Ifty)\ **Replies:** 4\ **Last updated:** [July 26, 2022, 10:00pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/310685 "2022-07-26T22:00:29Z")
Good Day! I am trying to setup Elasticsearch in a 3 node cluster, I am getting below error while I am trying to start Elasticsearch, // \[root@HRC-ESDC-GLES11 log\]# systemctl status elasticsearch.service â elasticsearc… --- ## [Deploy Elastic Agent 8.3.2 via Windows GPO](https://discuss.elastic.co/t/deploy-elastic-agent-8-3-2-via-windows-gpo/310689)
**Author:** [@bbs2web](https://discuss.elastic.co/u/bbs2web)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 9:35pm UTC](https://discuss.elastic.co/t/deploy-elastic-agent-8-3-2-via-windows-gpo/310689 "2022-07-26T21:35:41Z")
Hi, The following is a working PowerShell script to deploy Elastic Agent to Windows workstations via Group Policy 'Startup Script'. Group Policy service by default does not include the permission for it to create SymLin… --- ## [Elasticsearch GeoIP Processor inside foreach processor](https://discuss.elastic.co/t/elasticsearch-geoip-processor-inside-foreach-processor/310681)
**Author:** [@frank\_2](https://discuss.elastic.co/u/frank_2)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-geoip-processor-inside-foreach-processor/310681 "2022-07-26T19:20:43Z")
Hi, I'm running an 8.3.2 cluster, and I have an array containing some objects over which I'd like to iterate and enrich with the GeoIP processor, but am having limited success. I have a foreach processor set up with a … --- ## [Url similarity scoring](https://discuss.elastic.co/t/url-similarity-scoring/310560)
**Author:** [@Moverton](https://discuss.elastic.co/u/Moverton)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 7:01pm UTC](https://discuss.elastic.co/t/url-similarity-scoring/310560 "2022-07-26T19:01:58Z")
I want to create a search that scores by the similarity of Url's. So searching for https://www.sample.com/abc/def/index.html in a field with these values https://www.test.com/abc/ (different host, only one path par… --- ## [How to separate objects inside an array of objects?](https://discuss.elastic.co/t/how-to-separate-objects-inside-an-array-of-objects/310274)
**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 6:56pm UTC](https://discuss.elastic.co/t/how-to-separate-objects-inside-an-array-of-objects/310274 "2022-07-26T18:56:51Z")
Hi, I still new to ELK and I have been trying to process data that come to me as json file. The json file looks lie this. \[ { "user": "Beta", "percent": 28, "startTime": "2022-07-07T11:31:45", "type": "CPU",… --- ## [Query DSL (Domain Specific Language) depends on the Elasticsearch SDK versions?](https://discuss.elastic.co/t/query-dsl-domain-specific-language-depends-on-the-elasticsearch-sdk-versions/310578)
**Author:** [@Bruce\_Zu](https://discuss.elastic.co/u/Bruce_Zu)\ **Replies:** 0\ **Last updated:** [July 25, 2022, 9:37pm UTC](https://discuss.elastic.co/t/query-dsl-domain-specific-language-depends-on-the-elasticsearch-sdk-versions/310578 "2022-07-25T21:37:54Z")
Hi Elasticsearch team, Excuse me, I want to know if the Query DSL (Domain Specific Language) depends on the Elasticsearch client versions? We are upgrading our ES index from 6.8.0 to 7.6.2. The current project uses E… --- ## [After creating new config file and run it copy also old config file data in newly created index](https://discuss.elastic.co/t/after-creating-new-config-file-and-run-it-copy-also-old-config-file-data-in-newly-created-index/310669)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 4:54pm UTC](https://discuss.elastic.co/t/after-creating-new-config-file-and-run-it-copy-also-old-config-file-data-in-newly-created-index/310669 "2022-07-26T16:54:38Z")
Initially i have created c10.conf file it store csv data in recordv2 index it is working fine. After that i have created new configuration file gmrtant.conf to read multiple csv file to read new data which is different t… --- ## [Security events and rules matching](https://discuss.elastic.co/t/security-events-and-rules-matching/309922)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 4:49pm UTC](https://discuss.elastic.co/t/security-events-and-rules-matching/309922 "2022-07-26T16:49:20Z")
We are trying to understand what security events Elastic SIEM covers but it’s quite difficult cause there is no list of such events in the documentation or may be we don’t know where it is. We've decided to start with Wi… --- ## [Weighted avg aggregation in lens](https://discuss.elastic.co/t/weighted-avg-aggregation-in-lens/310652)
**Author:** [@tobi](https://discuss.elastic.co/u/tobi)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 3:39pm UTC](https://discuss.elastic.co/t/weighted-avg-aggregation-in-lens/310652 "2022-07-26T15:39:55Z")
Hi together, I currently have an request to implement via lens visualization. We have a weighted field as runtime field (rate \* traffic.count). We want to use that field to calcuate a weighted rate with the sum of all… --- ## [Visualization: upgrading from 6 to 7](https://discuss.elastic.co/t/visualization-upgrading-from-6-to-7/310665)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 3:38pm UTC](https://discuss.elastic.co/t/visualization-upgrading-from-6-to-7/310665 "2022-07-26T15:38:54Z")
Hi everyone! I have been googling quite a bit to try and find some info on how Kibana dashboards are affected during a Major migration from v6 to V7. The only bit of info I found is here and that does not worry me too … --- ## [Init:ImagePullBackOff error when trying to deploy elasticsearch object to k8s](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571)
**Author:** [@vuqar](https://discuss.elastic.co/u/vuqar)\ **Replies:** 5\ **Last updated:** [July 26, 2022, 3:27pm UTC](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571 "2022-07-26T15:27:10Z")
I am following this ECK quickstart tutorial. For whatever reason I can't deploy elasticsearch object. When I check pod status it says Init:0/2 and after couple minutes it changes to Init:ImagePullBackOff and finally to I… --- ## [Kibana not connected to epr.elastic.co Package Registry](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028)
**Author:** [@shuuny-matrix](https://discuss.elastic.co/u/shuuny-matrix)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 3:19pm UTC](https://discuss.elastic.co/t/kibana-not-connected-to-epr-elastic-co-package-registry/310028 "2022-07-26T15:19:41Z")
I have installed Elasticsearch and Kibana in my Ubuntu System in a corporate environment behind firewall and proxies. We have two crt files to use internet in browser. My elasticsearch is running fine. But when I run Ki… --- ## [Fleet can't enroll](https://discuss.elastic.co/t/fleet-cant-enroll/310242)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 2:52pm UTC](https://discuss.elastic.co/t/fleet-cant-enroll/310242 "2022-07-26T14:52:33Z")
i tried to enroll elastic-agent but it has an error "remote server is not ready to accept connections" here's my config .\\elastic-agent.exe install --url=https://urlelastic:8220 --enrollment-token=\ --insecure wh… --- ## [Looukps with memcahed or tanslate filter](https://discuss.elastic.co/t/looukps-with-memcahed-or-tanslate-filter/310650)
**Author:** [@paulohperes](https://discuss.elastic.co/u/paulohperes)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 2:43pm UTC](https://discuss.elastic.co/t/looukps-with-memcahed-or-tanslate-filter/310650 "2022-07-26T14:43:39Z")
Hi, I am doubt about lookups. Recently I implemented a pipeline using the filter plugin Memcached, but the Memcached plugin does not work well with json values. I needed to do this for work: memcached { hosts =\>… --- ## [Logstash-output-cloudwatchlogs](https://discuss.elastic.co/t/logstash-output-cloudwatchlogs/310653)
**Author:** [@jlbai](https://discuss.elastic.co/u/jlbai)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 2:20pm UTC](https://discuss.elastic.co/t/logstash-output-cloudwatchlogs/310653 "2022-07-26T14:20:53Z")
I am looking to get logs out our network devices, firewalls, aruba controllers, switches etc. I am looking at using the output plugin for cloud watch logs GitHub - amazon-archives/logstash-output-cloudwatchlogs: A logsta… --- ## [Copy and ship logs with Filebeat](https://discuss.elastic.co/t/copy-and-ship-logs-with-filebeat/310647)
**Author:** [@biandopa](https://discuss.elastic.co/u/biandopa)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 1:52pm UTC](https://discuss.elastic.co/t/copy-and-ship-logs-with-filebeat/310647 "2022-07-26T13:52:00Z")
Hello, I wanted to know if there is any option with Filebeat or another tool that creates a copy of the logs and ships them to Elasticsearch instead of only shipping them because we need the logs to stay in the cluster … --- ## [Add query timeout in Elastic native query - springboot](https://discuss.elastic.co/t/add-query-timeout-in-elastic-native-query-springboot/310651)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 2:11pm UTC](https://discuss.elastic.co/t/add-query-timeout-in-elastic-native-query-springboot/310651 "2022-07-26T14:11:45Z")
How can I add query timeout in the below Native Seach Query? final QueryBuilder contentTagQuery = QueryBuilders.boolQuery() .filter( QueryBuilders.termQuery("tenantId" , "en")); NativeSearchQuery query =… --- ## [What is proper order of nodes for rolling upgrade?](https://discuss.elastic.co/t/what-is-proper-order-of-nodes-for-rolling-upgrade/310317)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 2:11pm UTC](https://discuss.elastic.co/t/what-is-proper-order-of-nodes-for-rolling-upgrade/310317 "2022-07-26T14:11:26Z")
Hi upgrading an Elastic 6.x to latest 6.x Is there like a particular order that the nodes should be upgraded? Masters first, then data, then coordinators. And then applications like Kibana, Filebeat, logstash etc... T… --- ## [\[copy\] Data Stop ingesting after deleting index](https://discuss.elastic.co/t/copy-data-stop-ingesting-after-deleting-index/310649)
**Author:** [@noa-ru](https://discuss.elastic.co/u/noa-ru)\ **Replies:** 0\ **Last updated:** [July 26, 2022, 1:55pm UTC](https://discuss.elastic.co/t/copy-data-stop-ingesting-after-deleting-index/310649 "2022-07-26T13:55:33Z")
Hello all! i not found a solution for my problem, but i found this post with same problem. And when i found a solution, i discovered what i cant write it in this post. that's why i registered here and created this post… --- ## [Multiple instances of beats running](https://discuss.elastic.co/t/multiple-instances-of-beats-running/310336)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 1:48pm UTC](https://discuss.elastic.co/t/multiple-instances-of-beats-running/310336 "2022-07-26T13:48:13Z")
Fleet + Elastic Agent 8.3.2. Agent is installed on Win10, with only the system integration with all defaults. Looking at the processes running, it appears that there are multiple instances of filebeat & metricbeat runni… --- ## [In heartbeat ver. 7.17 browser type is not working](https://discuss.elastic.co/t/in-heartbeat-ver-7-17-browser-type-is-not-working/310284)
**Author:** [@Heet](https://discuss.elastic.co/u/Heet)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 1:45pm UTC](https://discuss.elastic.co/t/in-heartbeat-ver-7-17-browser-type-is-not-working/310284 "2022-07-26T13:45:44Z")
Trying using using the following code still not working. type: browser id: elastic-website name: Elastic website schedule: "@every 1m" source: inline: script: |- step("load homepage", async () =\> { await page.go… --- ## [Security Onion - Kibana - Unable to load tooltip content in Maps](https://discuss.elastic.co/t/security-onion-kibana-unable-to-load-tooltip-content-in-maps/310535)
**Author:** [@DigitalDick](https://discuss.elastic.co/u/DigitalDick)\ **Replies:** 5\ **Last updated:** [July 26, 2022, 1:30pm UTC](https://discuss.elastic.co/t/security-onion-kibana-unable-to-load-tooltip-content-in-maps/310535 "2022-07-26T13:30:28Z")
Hi, New here and new to Kibana. Any help greatly appreciated. So I have setup Security Onion 2.3, I am using netflow to send logs from Meraki to Security Onion. I can see the logs, I can see the dots on the maps etc. Wh… --- ## [Elasticsearch and Microsoft Windows Enterprise Certificate Authority](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764)
**Author:** [@Ryan\_Porter](https://discuss.elastic.co/u/Ryan_Porter)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-and-microsoft-windows-enterprise-certificate-authority/309764 "2022-07-26T13:25:30Z")
I'm at a bit of a loss here. I'm attempting to secure the Elastic Stack with certs generated by our organization’s Microsoft Enterprise Certificate Authority. Elasticsearch will happily start, but when I attempt to gener… --- ## [Dashboard Autorefresh still not working in Kibana 8.1.1](https://discuss.elastic.co/t/dashboard-autorefresh-still-not-working-in-kibana-8-1-1/310002)
**Author:** [@ondrej-ivanko](https://discuss.elastic.co/u/ondrej-ivanko)\ **Replies:** 3\ **Last updated:** [July 26, 2022, 12:50pm UTC](https://discuss.elastic.co/t/dashboard-autorefresh-still-not-working-in-kibana-8-1-1/310002 "2022-07-26T12:50:58Z")
Hi, the dashboard autorefresh issue still seem to persist in Kibana 8.1.1. I created custom dashboard with filters to display some application logs collected by Fluentd and sent to ElasticSearch. AutoReferesh is working… --- ## [Configuration issue: "xpack.security.enrollment.enabled must be set to true"](https://discuss.elastic.co/t/configuration-issue-xpack-security-enrollment-enabled-must-be-set-to-true/310626)
**Author:** [@najmiehsa](https://discuss.elastic.co/u/najmiehsa)\ **Replies:** 2\ **Last updated:** [July 26, 2022, 12:15pm UTC](https://discuss.elastic.co/t/configuration-issue-xpack-security-enrollment-enabled-must-be-set-to-true/310626 "2022-07-26T12:15:21Z")
Hi, I wanted to install the commercial version of kibana, but I was initially given only one enrollment token when I started using Docker for building purposes. Now I want to generate a new enrollment token via the enr… --- ## [Make elasticsearch aggregation response shorter](https://discuss.elastic.co/t/make-elasticsearch-aggregation-response-shorter/310254)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 9\ **Last updated:** [July 26, 2022, 12:22pm UTC](https://discuss.elastic.co/t/make-elasticsearch-aggregation-response-shorter/310254 "2022-07-26T12:22:03Z")
Hi, I am dealing with elasticsearch aggregation response json like below. { "took": 2, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed": 0 }, "hits": { … --- ## [Three nodes cluster without quorum](https://discuss.elastic.co/t/three-nodes-cluster-without-quorum/310632)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 12:18pm UTC](https://discuss.elastic.co/t/three-nodes-cluster-without-quorum/310632 "2022-07-26T12:18:52Z")
Hello. I am new here in this community. I have a three nodes cluster but two nodes are on the same virt and one on another. I need to set them like three masters and three data nodes. When I am updating the virt I nee… --- ## [Multiple filebeat log with logstash not working](https://discuss.elastic.co/t/multiple-filebeat-log-with-logstash-not-working/310472)
**Author:** [@sazzad114](https://discuss.elastic.co/u/sazzad114)\ **Replies:** 4\ **Last updated:** [July 26, 2022, 12:15pm UTC](https://discuss.elastic.co/t/multiple-filebeat-log-with-logstash-not-working/310472 "2022-07-26T12:15:55Z")
filebeat.input: - type: log enabled: true paths: - /var/log/nginx/\*log tags: \["server-log"\] fields: {log\_type: Server-log} - type: log enabled: true paths: - /var/www/laravel/storage/logs/\*.log tags… [Previous page](https://discuss.elastic.co/latest.md?page=1029) [Next page](https://discuss.elastic.co/latest.md?page=1031)