# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1049

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1050

---

## [Creating Index Patterns and Dashboards Using API](https://discuss.elastic.co/t/creating-index-patterns-and-dashboards-using-api/309548)

<div class="topic-metadata">

**Author:** [@christng](https://discuss.elastic.co/u/christng)\
**Replies:** 3\
**Last updated:** [July 13, 2022, 4:54pm UTC](https://discuss.elastic.co/t/creating-index-patterns-and-dashboards-using-api/309548 "2022-07-13T16:54:40Z")

</div>

I'm using Kubernetes and trying to create index patterns and dashboards on Kibana 7.17 using the curl commands but they do not seem to be working. I've followed everything at these sources: Saved objects APIs | Kibana Gu…

---

## [Understanding the result for the query](https://discuss.elastic.co/t/understanding-the-result-for-the-query/307861)

<div class="topic-metadata">

**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 4:47pm UTC](https://discuss.elastic.co/t/understanding-the-result-for-the-query/307861 "2022-07-13T16:47:26Z")

</div>

Continuing the discussion from Restrict specific time range: Hi, As per the issue, you have recommended that time:(from:now%2Fd-12h,to:now%2Fd-12h)) will give data from today's date - 12 hour i.e 12am to 12pm. In my c…

---

## [Monitoring Beats installed server](https://discuss.elastic.co/t/monitoring-beats-installed-server/309554)

<div class="topic-metadata">

**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 4:34pm UTC](https://discuss.elastic.co/t/monitoring-beats-installed-server/309554 "2022-07-13T16:34:17Z")

</div>

I have installed filebeat and Winlogbeat around 700 servers. I want to monitor these servers if any servers failed to sent logs in Elasticsearch. How can i do this ?

---

## [When field \_index in elasticsearch is generated?](https://discuss.elastic.co/t/when-field-index-in-elasticsearch-is-generated/309519)

<div class="topic-metadata">

**Author:** [@maoxuguang](https://discuss.elastic.co/u/maoxuguang)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 4:19pm UTC](https://discuss.elastic.co/t/when-field-index-in-elasticsearch-is-generated/309519 "2022-07-13T16:19:12Z")

</div>

in elasticsearch, there is a field named \_index, is this field generated by logstash? In logstash we output same data to both elasticsearch and mongodb, while elasticsearch has a field named \_index, but mongodb has no s…

---

## [Elasticsearch Index mappings( version 6.5.4)](https://discuss.elastic.co/t/elasticsearch-index-mappings-version-6-5-4/309535)

<div class="topic-metadata">

**Author:** [@gyrao\_72](https://discuss.elastic.co/u/gyrao_72)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 4:14pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mappings-version-6-5-4/309535 "2022-07-13T16:14:36Z")

</div>

I am using filebeat to fetch logs, logstash to filter, and pushing them to elasticsearch. I have created an index on elasticsearch import-export-logger. This id mapping of import-export-logger. { "import-export-logg…

---

## [My ELK stack the /dev/mapper/centos-root directory is getting full (95%)](https://discuss.elastic.co/t/my-elk-stack-the-dev-mapper-centos-root-directory-is-getting-full-95/309544)

<div class="topic-metadata">

**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 2:57pm UTC](https://discuss.elastic.co/t/my-elk-stack-the-dev-mapper-centos-root-directory-is-getting-full-95/309544 "2022-07-13T14:57:16Z")

</div>

Hello All, Trying to figure out how, but still no luck. If someone can help me out here in this. My Elasticsearch node is getting full \[root@srvde432 nodes\]# df -h Filesystem Size Used Avail Use% Mount…

---

## [Error setting up Fleet Server to monitor .NET or JAVA code monitoring using APM feature](https://discuss.elastic.co/t/error-setting-up-fleet-server-to-monitor-net-or-java-code-monitoring-using-apm-feature/309352)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 3:55pm UTC](https://discuss.elastic.co/t/error-setting-up-fleet-server-to-monitor-net-or-java-code-monitoring-using-apm-feature/309352 "2022-07-13T15:55:47Z")

</div>

Hi, I want to use APM feature for my .NET or JAVA code monitoring. Going through APM Guide 8.1, it tells us in order to install APM, we must have below 4 components: APM Agents, Elastic APM Integration, Elasticsearch,…

---

## [Visualize (Count) Keywords in Kibana](https://discuss.elastic.co/t/visualize-count-keywords-in-kibana/309335)

<div class="topic-metadata">

**Author:** [@Cal](https://discuss.elastic.co/u/Cal)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 3:59pm UTC](https://discuss.elastic.co/t/visualize-count-keywords-in-kibana/309335 "2022-07-13T15:59:02Z")

</div>

Hello, I am trying to count the number of times a keyword occurs and graph it alongside other keywords. An example CSV file is: Store | Item | Item | Item A Apple Orange B …

---

## [To write a custom code for visualization](https://discuss.elastic.co/t/to-write-a-custom-code-for-visualization/309112)

<div class="topic-metadata">

**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\
**Replies:** 10\
**Last updated:** [July 13, 2022, 3:43pm UTC](https://discuss.elastic.co/t/to-write-a-custom-code-for-visualization/309112 "2022-07-13T15:43:52Z")

</div>

I'm writing a custom code in kibana (vega). In which I want show the the total working hours of employe by calculating diffrence from two available fields like (out time - Intime). how can I get that in vega by writing …

---

## [View already Agent's subscribed APM diagnostic listeners](https://discuss.elastic.co/t/view-already-agents-subscribed-apm-diagnostic-listeners/307170)

<div class="topic-metadata">

**Author:** [@er.nluchka](https://discuss.elastic.co/u/er.nluchka)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 3:27pm UTC](https://discuss.elastic.co/t/view-already-agents-subscribed-apm-diagnostic-listeners/307170 "2022-07-13T15:27:11Z")

</div>

APM Agent language and version: Dotnet (variety) Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and version: Nuget package Fresh install or upgraded from other version? F…

---

## [Method tracing for .net core](https://discuss.elastic.co/t/method-tracing-for-net-core/308412)

<div class="topic-metadata">

**Author:** [@socialmatrix](https://discuss.elastic.co/u/socialmatrix)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 3:25pm UTC](https://discuss.elastic.co/t/method-tracing-for-net-core/308412 "2022-07-13T15:25:53Z")

</div>

Is there anyway to trace .net core methods like how java methods can be traced as per this article.

---

## [Failed to find a X509ExtendedTrustManager in the trust manager factory for \[PKIX\] and truststore \[null\]](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager-in-the-trust-manager-factory-for-pkix-and-truststore-null/309547)

<div class="topic-metadata">

**Author:** [@blaked](https://discuss.elastic.co/u/blaked)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 3:14pm UTC](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager-in-the-trust-manager-factory-for-pkix-and-truststore-null/309547 "2022-07-13T15:14:38Z")

</div>

I'm using Sonarqube Development Edition on Windows 2019 (I've previously posted this to the SQ forums but only gotten light feedback). Things have worked fine for years with the current config - but when I upgraded to S…

---

## [Metricbeat credentials config help](https://discuss.elastic.co/t/metricbeat-credentials-config-help/307283)

<div class="topic-metadata">

**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\
**Replies:** 5\
**Last updated:** [July 13, 2022, 2:37pm UTC](https://discuss.elastic.co/t/metricbeat-credentials-config-help/307283 "2022-07-13T14:37:46Z")

</div>

HI Team, In " metricbeat.yml" configuration file we are using the below values for estrablish the connection to AWS. metricbeat.modules: - module: aws period: 300s metricsets: - lambda access\_key\_id…

---

## [JVM crashes with APM agent 1.33 and JPMS enabled](https://discuss.elastic.co/t/jvm-crashes-with-apm-agent-1-33-and-jpms-enabled/309503)

<div class="topic-metadata">

**Author:** [@emmettl](https://discuss.elastic.co/u/emmettl)\
**Replies:** 4\
**Last updated:** [July 13, 2022, 2:22pm UTC](https://discuss.elastic.co/t/jvm-crashes-with-apm-agent-1-33-and-jpms-enabled/309503 "2022-07-13T14:22:58Z")

</div>

Kibana version: 7.17.4 Elasticsearch version: 7.17.4 APM Server version: 7.17.4 APM Agent language and version: 1.33.0 Description of the problem including expected versus actual behavior. Please include screenshot…

---

## [Add dynapmic alias field if target field exist](https://discuss.elastic.co/t/add-dynapmic-alias-field-if-target-field-exist/309543)

<div class="topic-metadata">

**Author:** [@Denergym](https://discuss.elastic.co/u/Denergym)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 2:15pm UTC](https://discuss.elastic.co/t/add-dynapmic-alias-field-if-target-field-exist/309543 "2022-07-13T14:15:59Z")

</div>

Hi ! I need add alias field if target field exist or string. I do this with dynamic templates and aliases field { "mappings": { "dynamic\_templates": \[ { "add\_alias\_for\_open": { "mat…

---

## [How to return exact match result first then other matches?](https://discuss.elastic.co/t/how-to-return-exact-match-result-first-then-other-matches/309452)

<div class="topic-metadata">

**Author:** [@Jake\_Wong](https://discuss.elastic.co/u/Jake_Wong)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 2:06pm UTC](https://discuss.elastic.co/t/how-to-return-exact-match-result-first-then-other-matches/309452 "2022-07-13T14:06:09Z")

</div>

I am newbie to elastic. I have data in elasticsearch, with field post\_title : Chocolate Hot Homemade I expect to get 'ho' (exact match) as first result when I search 'ho' like this: Homemade Hot chocolate I have t…

---

## [Elasticsearch Data nodes](https://discuss.elastic.co/t/elasticsearch-data-nodes/309517)

<div class="topic-metadata">

**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes/309517 "2022-07-13T14:05:27Z")

</div>

Hello I am a beginner in elastic, I want to create an elasticsearch cluster with 3 data nodes, I want to ask can I specify for each data node, the type of logs meaning if I can specify for each data node what is the ty…

---

## [Kibana Regex check if a field contains the value of another](https://discuss.elastic.co/t/kibana-regex-check-if-a-field-contains-the-value-of-another/309295)

<div class="topic-metadata">

**Author:** [@Druffle](https://discuss.elastic.co/u/Druffle)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:54pm UTC](https://discuss.elastic.co/t/kibana-regex-check-if-a-field-contains-the-value-of-another/309295 "2022-07-13T13:54:29Z")

</div>

Hello, I'm trying to search for documents in which a description field contains the value of a name field (from another document). I tried to do a Regex query as following : GET inventory-full-index/\_search { "query"…

---

## [Is it safe to modify an index created with App Search via Kibana?](https://discuss.elastic.co/t/is-it-safe-to-modify-an-index-created-with-app-search-via-kibana/309506)

<div class="topic-metadata">

**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 1:43pm UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-an-index-created-with-app-search-via-kibana/309506 "2022-07-13T13:43:32Z")

</div>

Hi, I have joined a team using app search, but we have a requirement for a more complex suggestion logic than we can implement using the Query Suggestion API. Is it safe for me to alter the index created by App search …

---

## [Why do we need logstash](https://discuss.elastic.co/t/why-do-we-need-logstash/309379)

<div class="topic-metadata">

**Author:** [@yugeeklab](https://discuss.elastic.co/u/yugeeklab)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:43pm UTC](https://discuss.elastic.co/t/why-do-we-need-logstash/309379 "2022-07-13T13:43:12Z")

</div>

I found out my Logstash has no logic except for forwarding log to Elasticsearch. Filebeat has many logic instead of Logstash(filtering etc.) In my case, Still do i need Logstash?? Why??

---

## [Search UI: Aggs in UI state and request?](https://discuss.elastic.co/t/search-ui-aggs-in-ui-state-and-request/308364)

<div class="topic-metadata">

**Author:** [@esTest](https://discuss.elastic.co/u/esTest)\
**Replies:** 4\
**Last updated:** [July 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/search-ui-aggs-in-ui-state-and-request/308364 "2022-07-13T13:29:56Z")

</div>

Versions: @elastic/search-ui-elasticsearch-connector: “1.13.0” @elastic/react-search-ui: “1.13.0” Backend: ES Hello, thank you for your work on all of these packages! Wondering if there is more recommended way to …

---

## [Query for values not present for the last 90 days](https://discuss.elastic.co/t/query-for-values-not-present-for-the-last-90-days/309308)

<div class="topic-metadata">

**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:37pm UTC](https://discuss.elastic.co/t/query-for-values-not-present-for-the-last-90-days/309308 "2022-07-13T13:37:05Z")

</div>

Hello forum, I am trying to wrap my head around a query. In order to weed out some users i need to search for values in field "data.authenticationInfo.metadata.identifier.keyword" not present in the last 90 days. Coul…

---

## [Kibana outputs integer values with commas](https://discuss.elastic.co/t/kibana-outputs-integer-values-with-commas/309522)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:27pm UTC](https://discuss.elastic.co/t/kibana-outputs-integer-values-with-commas/309522 "2022-07-13T13:27:21Z")

</div>

Hi. I don’t remember with which version of elastic, but they began to notice in kibana on graphs or tables the output of integer values with commas. This is data from the database. Why does kibana do this? Has anyone …

---

## [Avoid reinventing a reindexing toolbox](https://discuss.elastic.co/t/avoid-reinventing-a-reindexing-toolbox/309273)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 0\
**Last updated:** [July 10, 2022, 8:43pm UTC](https://discuss.elastic.co/t/avoid-reinventing-a-reindexing-toolbox/309273 "2022-07-10T20:43:05Z")

</div>

Anyone know of a good CLI toolbox for doing reindexing to save #shards? Or should I create my own set of REST API scripts for this from scratch, surely someone else should have had the same issue before :slight\_smile: E…

---

## [Optimizing storage with fleet integrations](https://discuss.elastic.co/t/optimizing-storage-with-fleet-integrations/309532)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 1:02pm UTC](https://discuss.elastic.co/t/optimizing-storage-with-fleet-integrations/309532 "2022-07-13T13:02:20Z")

</div>

Our log storage is through the roof with the new elasticstack with fleet set up. How/where can I configure compression options for this?

---

## [Watcher transform bytes to mb](https://discuss.elastic.co/t/watcher-transform-bytes-to-mb/309430)

<div class="topic-metadata">

**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 12:58pm UTC](https://discuss.elastic.co/t/watcher-transform-bytes-to-mb/309430 "2022-07-13T12:58:27Z")

</div>

how i transform bytes to mb ? { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ …

---

## [How to Replace agent.\* and ecs.version with older Fields(filebeat.version,beat.hostname)](https://discuss.elastic.co/t/how-to-replace-agent-and-ecs-version-with-older-fields-filebeat-version-beat-hostname/309526)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-replace-agent-and-ecs-version-with-older-fields-filebeat-version-beat-hostname/309526 "2022-07-13T11:34:43Z")

</div>

Hi Team, I recently upgraded my filebeat from 5.6.5 to 7.17.3 and found in 7.x fields are different from 5.6.5. I want all the processor metadata should replaced with older keys but I still can't get rid of agent.ephem…

---

## [Install Fleet server 8.2.2 fails: Error - could not start the HTTP server for the API: failed to listen on the named pipe](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964)

<div class="topic-metadata">

**Author:** [@tidenhub](https://discuss.elastic.co/u/tidenhub)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 12:02pm UTC](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964 "2022-07-13T12:02:19Z")

</div>

Hi, I set up Elasticsearch and Kibana via Docker Compose using elasticsearch/docker-compose.yml at 8.2 · elastic/elasticsearch (github.com). I created the agent policy to host Fleet Server. I choose "Quick start" as de…

---

## [Is it possible to create custom visualization (without Vega)?](https://discuss.elastic.co/t/is-it-possible-to-create-custom-visualization-without-vega/308644)

<div class="topic-metadata">

**Author:** [@Kushal\_Roy](https://discuss.elastic.co/u/Kushal_Roy)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 11:45am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-custom-visualization-without-vega/308644 "2022-07-13T11:45:23Z")

</div>

I want to create a visualization, like a plugin and add it to the dashboard. Is it possible to do so??

---

## [Java SearchResponse\<ObjectNode\> serialization](https://discuss.elastic.co/t/java-searchresponse-objectnode-serialization/309523)

<div class="topic-metadata">

**Author:** [@3xil3](https://discuss.elastic.co/u/3xil3)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 11:12am UTC](https://discuss.elastic.co/t/java-searchresponse-objectnode-serialization/309523 "2022-07-13T11:12:36Z")

</div>

it's a simple question, but I can't seem to serialize the SearchResponse back to a json string. What I've tried: final SearchResponse\<ObjectNode\> search1 = client.search( e -\> e.index("myindex") …

[Previous page](https://discuss.elastic.co/latest.md?page=1048)

[Next page](https://discuss.elastic.co/latest.md?page=1050)
