# Latest **URL:** https://discuss.elastic.co/latest.md?page=1045 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1046 --- ## [Change in a field for the selected time period](https://discuss.elastic.co/t/change-in-a-field-for-the-selected-time-period/307913)
**Author:** [@baahubali](https://discuss.elastic.co/u/baahubali)\ **Replies:** 3\ **Last updated:** [July 16, 2022, 11:41am UTC](https://discuss.elastic.co/t/change-in-a-field-for-the-selected-time-period/307913 "2022-07-16T11:41:31Z")
We can find the Daily, Weekly, Monthly or Yearly changes for a field using Lens now. Great! But how do we find Change in a field for the selected time period in the top right? This is a very basic requirement but I hav… --- ## [High IOwiats on ELK Linux Instance](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597)
**Author:** [@AmarKolhapuri](https://discuss.elastic.co/u/AmarKolhapuri)\ **Replies:** 2\ **Last updated:** [July 16, 2022, 12:34am UTC](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597 "2022-07-16T00:34:23Z")
Hi All, We have a Weblogic server and other applications/servers(HTTP server) that write logs to the Logs mount. In order to monitor the performance of the application, this mount is shared with the ELK stack. After re… --- ## [Elasticsearch 8.3 Heap Memory Sizing Confusion](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771)
**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\ **Replies:** 1\ **Last updated:** [July 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771 "2022-07-16T00:32:08Z")
Hello all, I'm a little confused with the new sizing documentation that was written for the 8.3 release. It mentions leaving 1kb Heap available per field in an index. Does this mean 1kb heap should be available per fiel… --- ## [Cycle through Dropdown Filter Values every minute in Canvas](https://discuss.elastic.co/t/cycle-through-dropdown-filter-values-every-minute-in-canvas/308990)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:30pm UTC](https://discuss.elastic.co/t/cycle-through-dropdown-filter-values-every-minute-in-canvas/308990 "2022-07-15T21:30:19Z")
Hi In Kibana, is there any way that I can have the canvas automatically change the dropdown filter value chosen every minute? E.g. Location - 00000D changes to Location - 000064 after 1 minute and changes again after an… --- ## [Source code of kibana dashboard](https://discuss.elastic.co/t/source-code-of-kibana-dashboard/309463)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:20pm UTC](https://discuss.elastic.co/t/source-code-of-kibana-dashboard/309463 "2022-07-15T21:20:38Z")
Hello After creating my dashboard with kibana , is there a way to view the source code of this dashboard and how can I find or view the source code of my kibana dashboard already created ? --- ## [Anomaly detection score details](https://discuss.elastic.co/t/anomaly-detection-score-details/309704)
**Author:** [@Amit\_Thombre](https://discuss.elastic.co/u/Amit_Thombre)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 9:13pm UTC](https://discuss.elastic.co/t/anomaly-detection-score-details/309704 "2022-07-15T21:13:04Z")
PFA the image showing 2 anomalies. The first has got a score of 55 but it is written that it is 2 times higher and second is with score 29 but it is more than 3 time higher. Questions is why is the anomaly with 3 ti… --- ## [Date range query with another query](https://discuss.elastic.co/t/date-range-query-with-another-query/309515)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:11pm UTC](https://discuss.elastic.co/t/date-range-query-with-another-query/309515 "2022-07-15T21:11:21Z")
I have 2 queries like this and i have to apply date range filter, is it possible to merge the 2 queries, i am applying search on the same index in 2 queries. first query GET index\_1/\_search { "\_source": \["file.filen… --- ## [Unable to bulk\_create index-pattern](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:48pm UTC](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754 "2022-07-15T20:48:10Z")
Hello World! I'm trying to follow these: Grant privileges and roles needed for setup | Auditbeat Reference \[7.17\] | Elastic Grant privileges and roles needed for setup | Filebeat Reference \[7.17\] | Elastic Grant privi… --- ## [Error: \[o.e.b.Elasticsearch \] fatal exception while booting Elasticsearchorg.elasticsearch.bootstrap.StartupException: org.elasticsearch.ElasticsearchSecurityException:](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685)
**Author:** [@kkumar.e](https://discuss.elastic.co/u/kkumar.e)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 8:44pm UTC](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685 "2022-07-15T20:44:15Z")
Hi All, I am running into an ssl certificate issue when trying to form a cluster with 2 Elasticsearch nodes created on 2 AWS EC2 servers spread across 2 subnets. I followed the steps in the below ref link to generate CA… --- ## [Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"}](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757)
**Author:** [@Suman\_Thota](https://discuss.elastic.co/u/Suman_Thota)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:39pm UTC](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757 "2022-07-15T20:39:28Z")
Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"} when following instructions in Create API key API | Elasticsearch Guide \[8.3\] | Elastic to create an api key. Elasticsearch version: 8.… --- ## [Can cross cluster can be spread across multicloud?](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660)
**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\ **Replies:** 3\ **Last updated:** [July 15, 2022, 7:53pm UTC](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660 "2022-07-15T19:53:06Z")
Can cross cluster replication be spread across multi cloud environment? Need it to create multi-cloud solution that can be kept in sync. --- ## [Transform data mismatch with source index](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659 "2022-07-15T19:07:23Z")
Hi, I'm using transforms to aggregate our access logs to a daily aggregate, e.g. "customer A had 500 requests totalling 1000 credits". Problem The problem that I now have is that I want to verify that the transformed … --- ## [Scripted Field Painless](https://discuss.elastic.co/t/scripted-field-painless/309328)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 6:18pm UTC](https://discuss.elastic.co/t/scripted-field-painless/309328 "2022-07-15T18:18:19Z")
Good morning. I am having problems when generating a scripted field. The situation is as follows. Inside my index, I have "field1" and "field2", if "field1" = 0, "field2" does not exist, if "field1" = 1, "field2" contain… --- ## [APM's dependency is blank but data found in indices](https://discuss.elastic.co/t/apms-dependency-is-blank-but-data-found-in-indices/309760)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 6:08pm UTC](https://discuss.elastic.co/t/apms-dependency-is-blank-but-data-found-in-indices/309760 "2022-07-15T18:08:48Z")
Hi, I am using elk 8.2.2 and found a strange issue recently. The APM module is working fine except the Dependencies . It is blank for all services. I have also tried re-attaching the APM integration with kibana objects… --- ## [Unsupported scope was requested. Enterprise Search integration with Box using OAuth 2](https://discuss.elastic.co/t/unsupported-scope-was-requested-enterprise-search-integration-with-box-using-oauth-2/308964)
**Author:** [@rajkeshav](https://discuss.elastic.co/u/rajkeshav)\ **Replies:** 6\ **Last updated:** [July 15, 2022, 5:44pm UTC](https://discuss.elastic.co/t/unsupported-scope-was-requested-enterprise-search-integration-with-box-using-oauth-2/308964 "2022-07-15T17:44:09Z")
I am trying to connect a Box application as a Source in Workplace Search. The Box application is using OAuth 2.0 by following the documentation link: Connecting Box | Workplace Search Guide \[8.3\] | Elastic The redirect … --- ## [Unable to push messages to Kafka streams](https://discuss.elastic.co/t/unable-to-push-messages-to-kafka-streams/309458)
**Author:** [@Rao\_Nelakurti](https://discuss.elastic.co/u/Rao_Nelakurti)\ **Replies:** 5\ **Last updated:** [July 15, 2022, 4:39pm UTC](https://discuss.elastic.co/t/unable-to-push-messages-to-kafka-streams/309458 "2022-07-15T16:39:45Z")
Hi Team, I'm trying to send application logs (filebeat -\> logstash-\> kafka topic) to kafka stream. For some reason I'm not able to see logs in kafka. Here is my filebeat.conf filebeat.spool\_size: 2048 filebeat.idle\_ti… --- ## [\[C# NEST\] Query results with special characters not mapping properly](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749)
**Author:** [@jleonapl](https://discuss.elastic.co/u/jleonapl)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 4:28pm UTC](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749 "2022-07-15T16:28:55Z")
When performing queries on indices that have field names with special characters, they are not correctly mapped to the provided model. Example index: { "\_index" : "my-index-with-special-characters", "\_i… --- ## [Kibana Plugins Degraded](https://discuss.elastic.co/t/kibana-plugins-degraded/309748)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 4\ **Last updated:** [July 15, 2022, 4:22pm UTC](https://discuss.elastic.co/t/kibana-plugins-degraded/309748 "2022-07-15T16:22:42Z")
Hi there, I´ve done a few searchs for this kind of solution and I could not find anywhere. Can someone help me? Jul 15 12:00:36 kbn kibana\[3899\]: \[2022-07-15T12:00:36.438-03:00\]\[ERROR\]\[plugins.securitySolution\] Bulk… --- ## [How to visualize a single state on kibana maps?](https://discuss.elastic.co/t/how-to-visualize-a-single-state-on-kibana-maps/309628)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 4:20pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-single-state-on-kibana-maps/309628 "2022-07-15T16:20:19Z")
I've a GEOJSON file for a state (Maharashtra), and visualized it on Kibana maps. I'm able to see the state. but I want to see the map for that state only, not other part (states, countries) on maps. how can I do this?? … --- ## [Elastalert2 reaalert every 5 minutes and group the number of hits](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:50pm UTC](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710 "2022-07-15T15:50:21Z")
Seeking your advice and help. Currently my Heartbeat will monitor system health for every 5 minutes. Then, it will save the data to Elasticsearch. My Elastalert2 will retrieve the date from Elasticsearch. I have 2 syst… --- ## [Kibana Error in Report Generation](https://discuss.elastic.co/t/kibana-error-in-report-generation/309401)
**Author:** [@Apoorv\_Agarwal](https://discuss.elastic.co/u/Apoorv_Agarwal)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 3:40pm UTC](https://discuss.elastic.co/t/kibana-error-in-report-generation/309401 "2022-07-15T15:40:00Z")
I am getting the following error while trying to generate a csv report from Kibana. Following is the error code I can see in the logs: {"type":"log","@timestamp":"2022-07-12T10:20:45Z","tags":\["debug","legacy-service… --- ## [Json message storing with message. extension in index](https://discuss.elastic.co/t/json-message-storing-with-message-extension-in-index/309726)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 3:26pm UTC](https://discuss.elastic.co/t/json-message-storing-with-message-extension-in-index/309726 "2022-07-15T15:26:02Z")
Hi Team, I have small query here. I am sending json messag on Kafka queue and indexing the same in Elasticsearch. It is inserting properly but all the fields are storing with message.field extension. Is there any param… --- ## [: i/o timeout](https://discuss.elastic.co/t/i-o-timeout/309648)
**Author:** [@Rook1](https://discuss.elastic.co/u/Rook1)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:14pm UTC](https://discuss.elastic.co/t/i-o-timeout/309648 "2022-07-15T15:14:35Z")
Hello, i have a problems with heartbeat. It's work normally before and now very often shows down( : i/o timeout ) but internet's is good if i tried open sites manually is too open good. I don;t understand why heartbeat a… --- ## [Kibana 7.12.0 server.cors setting seems not work](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561)
**Author:** [@Terry\_Li](https://discuss.elastic.co/u/Terry_Li)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 2:57pm UTC](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561 "2022-07-15T14:57:09Z")
Hi, I need to login Kibana via my application ("http://localhost:3000"). I post login data to "http://localhost:5601/internal/security/login" by ajax, but "Access-Control-Allow-Origin" header not show in the response $.… --- ## [Aggregate values of multi-value fields from one document?](https://discuss.elastic.co/t/aggregate-values-of-multi-value-fields-from-one-document/309549)
**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 2:43pm UTC](https://discuss.elastic.co/t/aggregate-values-of-multi-value-fields-from-one-document/309549 "2022-07-15T14:43:51Z")
I am parsing a json object into elasticsearch. one object is consist of nested json and this have multiple value. This field is provid ing multiple values like below. (also attached screenshot. How can i aggregate… --- ## [Add a new node to ES cluster v 8.1](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743)
**Author:** [@pcb1](https://discuss.elastic.co/u/pcb1)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 1:46pm UTC](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743 "2022-07-15T13:46:47Z")
Hello, I have ES -8,1 cluster working . The only change I made to the existing nodes in the cluster is : xpack.security.http.ssl: enabled: false Now , I want to add new data node but getting errors here are my steps… --- ## [Unable to monitor logstash from kibana](https://discuss.elastic.co/t/unable-to-monitor-logstash-from-kibana/309728)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 1:27pm UTC](https://discuss.elastic.co/t/unable-to-monitor-logstash-from-kibana/309728 "2022-07-15T13:27:06Z")
Hi Team, I am trying to monitor logstash from Kibana. Ihave modified the logstash.yml file but its not adding to kibana / not able to see it from kibana. My Elasticsearch is running with TLS. added below parameters in… --- ## [Capture network traffic](https://discuss.elastic.co/t/capture-network-traffic/309738)
**Author:** [@brkw](https://discuss.elastic.co/u/brkw)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 1:14pm UTC](https://discuss.elastic.co/t/capture-network-traffic/309738 "2022-07-15T13:14:06Z")
Hi all. I want to use ELk stack with beats to capture all traffic in my network. I installed ELK stack on VM and I want to capture all the traffic which goes in or out in my network. My configuration is set in this way: … --- ## [How to implement with complicate wording (hero hero hero)](https://discuss.elastic.co/t/how-to-implement-with-complicate-wording-hero-hero-hero/309722)
**Author:** [@Ch\_Corporate](https://discuss.elastic.co/u/Ch_Corporate)\ **Replies:** 10\ **Last updated:** [July 15, 2022, 1:00pm UTC](https://discuss.elastic.co/t/how-to-implement-with-complicate-wording-hero-hero-hero/309722 "2022-07-15T13:00:58Z")
My data is Doc 1 hero hero hero Doc 2 hero hero Doc 3 hero We would have Result is Doc 3:"hero" How do I implement this case use regular expression or wild card --- ## [NEST C# Client - Bulk Partial update of a Nested List by condition](https://discuss.elastic.co/t/nest-c-client-bulk-partial-update-of-a-nested-list-by-condition/309733)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 12:17pm UTC](https://discuss.elastic.co/t/nest-c-client-bulk-partial-update-of-a-nested-list-by-condition/309733 "2022-07-15T12:17:28Z")
Hi, I have an index which has nested list object. I need to only update certain values based on a condition. List of history with dates and values I need to update only values matching with dates. In the below example … [Previous page](https://discuss.elastic.co/latest.md?page=1044) [Next page](https://discuss.elastic.co/latest.md?page=1046)