# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1054

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1055

---

## [Synthetics inline script not working per expectation](https://discuss.elastic.co/t/synthetics-inline-script-not-working-per-expectation/309249)

<div class="topic-metadata">

**Author:** [@wasimasif](https://discuss.elastic.co/u/wasimasif)\
**Replies:** 2\
**Last updated:** [July 9, 2022, 2:25pm UTC](https://discuss.elastic.co/t/synthetics-inline-script-not-working-per-expectation/309249 "2022-07-09T14:25:01Z")

</div>

I am trying the following synthetics inline script on elastic cloud. The line expect(productImages.length).toBe(9); is causing error Error: expect(received).toBe(expected) // Object.is equality Following is the inline …

---

## [Unable to parse response body for Response | ElasticsearchSinkConnector](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-elasticsearchsinkconnector/309241)

<div class="topic-metadata">

**Author:** [@Mayderson\_Santos](https://discuss.elastic.co/u/Mayderson_Santos)\
**Replies:** 0\
**Last updated:** [July 9, 2022, 2:44am UTC](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-elasticsearchsinkconnector/309241 "2022-07-09T02:44:54Z")

</div>

Hello, I'm having a problem in Elasticsearch version 8.3.2, I'm using Kafka Connect with Elasticsearch's sink connector in version 13.1.0, the following error occurs: Failed to execute bulk request due to 'java.io.IOEx…

---

## [Looking for way to search for wildcard with space characters. Does KQL have character escaping?](https://discuss.elastic.co/t/looking-for-way-to-search-for-wildcard-with-space-characters-does-kql-have-character-escaping/309250)

<div class="topic-metadata">

**Author:** [@megaksa](https://discuss.elastic.co/u/megaksa)\
**Replies:** 0\
**Last updated:** [July 9, 2022, 1:57pm UTC](https://discuss.elastic.co/t/looking-for-way-to-search-for-wildcard-with-space-characters-does-kql-have-character-escaping/309250 "2022-07-09T13:57:50Z")

</div>

Basically, I have log strings that I wanted to keep as a wildcard type to be able to search for exact substrings with either wildcard query \*abc\* or with regex /.\*abc.\*/. The problem is that Observability → Logs doesn't…

---

## [The CPU useage of elasticsearch three nodes is not balance](https://discuss.elastic.co/t/the-cpu-useage-of-elasticsearch-three-nodes-is-not-balance/309243)

<div class="topic-metadata">

**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\
**Replies:** 3\
**Last updated:** [July 9, 2022, 11:27am UTC](https://discuss.elastic.co/t/the-cpu-useage-of-elasticsearch-three-nodes-is-not-balance/309243 "2022-07-09T11:27:59Z")

</div>

elasticsearch version：7.10.2 nodes：3 indice config：3 primary shard & 1 Replica I use {"query": {"match\_all": {}} to query 10 pieces of data, and the CPU useage of the three nodes is not balance. node-0: node-1: …

---

## [Not equal condtions in elasticsearch aggregation](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976)

<div class="topic-metadata">

**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\
**Replies:** 5\
**Last updated:** [July 9, 2022, 5:21am UTC](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976 "2022-07-09T05:21:23Z")

</div>

I have a rails app that connects to Elasticsearch and the user could define some conditions like (at least),(at most), and ... to compare and find his specific result. everything is fine but now I have to add not equal t…

---

## [Logstash filter if internal networks](https://discuss.elastic.co/t/logstash-filter-if-internal-networks/309238)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 2\
**Last updated:** [July 9, 2022, 5:07am UTC](https://discuss.elastic.co/t/logstash-filter-if-internal-networks/309238 "2022-07-09T05:07:01Z")

</div>

This is a continuation of my previous thread which Badger kindly solved. I have sflow data coming in with the src\_ip and dst\_ip fields My internal networks are in this range and I'd like them not to be scanned for geoi…

---

## [Username or password is incorrect. Please try again. / HTTP/1.1 401 Unauthorized](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 3\
**Last updated:** [July 9, 2022, 4:41am UTC](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145 "2022-07-09T04:41:33Z")

</div>

Hello World! I'm trying to follow Install Kibana with Docker | Kibana Guide \[7.17\] | Elastic and even though it looks like Kibana started fine: % docker compose logs --tail 1 kibana | {"type":"log","@timestamp":"2022-…

---

## [ECS expect \`target\` value](https://discuss.elastic.co/t/ecs-expect-target-value/308652)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 8\
**Last updated:** [July 2, 2022, 12:40am UTC](https://discuss.elastic.co/t/ecs-expect-target-value/308652 "2022-07-02T00:40:54Z")

</div>

Hello boys and girls, I'm playing with logstash and sflow codec input Trying to enrich the data with geoip and get this error: \[WARN \]\[logstash.filters.geoip \]\[3\_sflow\] ECS expect \`target\` value \`destination.geo.ip\`…

---

## [How to implement space ignored search across a document with multiple fields](https://discuss.elastic.co/t/how-to-implement-space-ignored-search-across-a-document-with-multiple-fields/309236)

<div class="topic-metadata">

**Author:** [@Karan\_Bansal](https://discuss.elastic.co/u/Karan_Bansal)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 11:04pm UTC](https://discuss.elastic.co/t/how-to-implement-space-ignored-search-across-a-document-with-multiple-fields/309236 "2022-07-08T23:04:29Z")

</div>

I'm trying to implement a space agnostic product catalog search solution using Elasticsearch for a chemical oriented product database. I am using the word\_joiner with catenate\_all to join words, but when using multi\_matc…

---

## [Specify search analyzer during query time with the new Elastic Java Client](https://discuss.elastic.co/t/specify-search-analyzer-during-query-time-with-the-new-elastic-java-client/309235)

<div class="topic-metadata">

**Author:** [@Karan\_Bansal](https://discuss.elastic.co/u/Karan_Bansal)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 10:58pm UTC](https://discuss.elastic.co/t/specify-search-analyzer-during-query-time-with-the-new-elastic-java-client/309235 "2022-07-08T22:58:58Z")

</div>

Hi, is there a way to specify which analyzer to use for the query string while querying the index via the Elasticsearch Java Client API? I'm using the new Java Client API and when I'm specifying the analyzer during sear…

---

## [No monitoring data found](https://discuss.elastic.co/t/no-monitoring-data-found/309194)

<div class="topic-metadata">

**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 10:40am UTC](https://discuss.elastic.co/t/no-monitoring-data-found/309194 "2022-07-08T10:40:38Z")

</div>

Hello, I am getting No monitoring data found error while setting up stack monitoring. I learned that the recommended way to monitor a cluster is via metricbeat and I want the elasticsearch cluster to monitor itself which…

---

## [Ingress Nginx Integration](https://discuss.elastic.co/t/ingress-nginx-integration/309230)

<div class="topic-metadata">

**Author:** [@AlexandreCoelho](https://discuss.elastic.co/u/AlexandreCoelho)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 8:49pm UTC](https://discuss.elastic.co/t/ingress-nginx-integration/309230 "2022-07-08T20:49:49Z")

</div>

Hey, today i have elasticsearch implemented with fluentbit and Kibana, we are using nginx as ingress of my cluster. And I have notice that exist that integration with integrations. I have managed to implement agent …

---

## [Java Client for Composite Aggregation using Terms queries](https://discuss.elastic.co/t/java-client-for-composite-aggregation-using-terms-queries/309227)

<div class="topic-metadata">

**Author:** [@parashar1505](https://discuss.elastic.co/u/parashar1505)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 7:34pm UTC](https://discuss.elastic.co/t/java-client-for-composite-aggregation-using-terms-queries/309227 "2022-07-08T19:34:58Z")

</div>

Hi Team, I have created a composite query for aggregating on 2 different attributes as below - { "from": 0, "size": 0, "query": { "bool": { "must": \[ { …

---

## [If statement not work](https://discuss.elastic.co/t/if-statement-not-work/309183)

<div class="topic-metadata">

**Author:** [@david-a76](https://discuss.elastic.co/u/david-a76)\
**Replies:** 6\
**Last updated:** [July 8, 2022, 6:13pm UTC](https://discuss.elastic.co/t/if-statement-not-work/309183 "2022-07-08T18:13:32Z")

</div>

Hi all, I'm trying to import a sample json file: ... { "id": 2, "timestamp": "2019-08-11T17:55:56Z", "paymentType": "Visa", "name": "Darby Dacks", "gender": "Female", "ip\_address": "77.72.239.47", "purpos…

---

## [Logstash error "Errno::EACCES: Permission denied - NUL" when installing plugin input-syslog](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523)

<div class="topic-metadata">

**Author:** [@CarlosD](https://discuss.elastic.co/u/CarlosD)\
**Replies:** 3\
**Last updated:** [July 8, 2022, 6:04pm UTC](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523 "2022-07-08T18:04:39Z")

</div>

Hi, I haven't been able to install logstash-input-syslog I thought this could be solved by following this but it did not solve it I am trying this in a Windows 11 Enterprise Evaluation VM (WINDEV2204EVAL) Attaching t…

---

## [Filebeat red status after quickstart deployment](https://discuss.elastic.co/t/filebeat-red-status-after-quickstart-deployment/307795)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 4\
**Last updated:** [July 8, 2022, 5:31pm UTC](https://discuss.elastic.co/t/filebeat-red-status-after-quickstart-deployment/307795 "2022-07-08T17:31:37Z")

</div>

Good morning. After creating the operator and deploying 3 Master nodes + 3 multi-role nodes of ES with the following manifest: cat \<\<EOF | oc apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch m…

---

## [Using Custom Elastic Charts Fork in Kibana](https://discuss.elastic.co/t/using-custom-elastic-charts-fork-in-kibana/302780)

<div class="topic-metadata">

**Author:** [@Jacob\_Williams](https://discuss.elastic.co/u/Jacob_Williams)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 4:47pm UTC](https://discuss.elastic.co/t/using-custom-elastic-charts-fork-in-kibana/302780 "2022-07-08T16:47:31Z")

</div>

Like the title suggests I am trying to use a custom fork of elastic-charts in Kibana so I can do some custom themeing, mostly small things like adjusting font size on bar chart to client request. I was able to prepare a…

---

## [Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'heartbeat.yml')](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-heartbeat-yml/309161)

<div class="topic-metadata">

**Author:** [@Ronald1](https://discuss.elastic.co/u/Ronald1)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 4:28pm UTC](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-heartbeat-yml/309161 "2022-07-08T16:28:00Z")

</div>

Hello, I run ELK stack using Docker Compose. See Install Elasticsearch with Docker | Elasticsearch Guide \[8.3\] | Elastic. It works fine. I can login using Kibana. I want to run Heartbeat on Docker as well, using Run He…

---

## [Convert json nested fields into integer](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 7\
**Last updated:** [July 8, 2022, 4:23pm UTC](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167 "2022-07-08T16:23:35Z")

</div>

Hi. I am trying to convert a field read by a json filter in logstash. I am used to convert fields from other sources, but with this nested field from a json log file, I cannot convert a quoted number string to a integer. …

---

## [Migrate Elasticsearch from Elastic Helm Charts to Elastic Operator (ECK)](https://discuss.elastic.co/t/migrate-elasticsearch-from-elastic-helm-charts-to-elastic-operator-eck/307924)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 4:22pm UTC](https://discuss.elastic.co/t/migrate-elasticsearch-from-elastic-helm-charts-to-elastic-operator-eck/307924 "2022-07-08T16:22:41Z")

</div>

I'm migrating our stack from the Elastic Helm Charts to Elastic Operator (ECK). Are there any easy guides/recipes for migrating without losing all my data? Thx.

---

## [Calculate Apdex value in elasticsearch](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955)

<div class="topic-metadata">

**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\
**Replies:** 6\
**Last updated:** [July 8, 2022, 4:21pm UTC](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955 "2022-07-08T16:21:00Z")

</div>

Hello, Recently, we migrated our New Relic APM stack to escloud but we realised there is no official way to calculate the Apdex value. There is this new User Experience App but some people from our company are still req…

---

## [3.3.0 Released](https://discuss.elastic.co/t/3-3-0-released/309220)

<div class="topic-metadata">

**Author:** [@Olivier\_Bierlaire](https://discuss.elastic.co/u/Olivier_Bierlaire)\
**Replies:** 0\
**Last updated:** [July 8, 2022, 4:11pm UTC](https://discuss.elastic.co/t/3-3-0-released/309220 "2022-07-08T16:11:07Z")

</div>

We are pleased to announce that ECE 3.3.0 has been released today. Release notes: Elastic Cloud Enterprise 3.3.0 | Elastic Cloud Enterprise Reference \[3.3\] | Elastic

---

## [Add runtime field to system index template](https://discuss.elastic.co/t/add-runtime-field-to-system-index-template/307749)

<div class="topic-metadata">

**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 4:08pm UTC](https://discuss.elastic.co/t/add-runtime-field-to-system-index-template/307749 "2022-07-08T16:08:14Z")

</div>

Hello, We have a Data View created based on the .ds-.monitoring-es\* indices. We created a scripted field in that Data View that is working but as elastic says, it is deprecated. We tried to move that scripted field int…

---

## [Flattening JSON string level with other fields](https://discuss.elastic.co/t/flattening-json-string-level-with-other-fields/309182)

<div class="topic-metadata">

**Author:** [@Mostafa\_Talebi](https://discuss.elastic.co/u/Mostafa_Talebi)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 4:03pm UTC](https://discuss.elastic.co/t/flattening-json-string-level-with-other-fields/309182 "2022-07-08T16:03:43Z")

</div>

I have set up my kibana and Elastic. I am getting my logs from Fluentbit. My main app log, which is JSON, is sent by Fluent with other meta fields like this: { "containerId": "foo", "clusterId" : "bar", "s…

---

## [Can't export Data table visualization into CSV](https://discuss.elastic.co/t/cant-export-data-table-visualization-into-csv/307890)

<div class="topic-metadata">

**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 3:46pm UTC](https://discuss.elastic.co/t/cant-export-data-table-visualization-into-csv/307890 "2022-07-08T15:46:05Z")

</div>

Hello, We would like to export one of our Data table visualizations into a CSV file but we just have the option to generate PDF and PNG reports. I have seen some examples in different webpages that exported in CSV but w…

---

## [Kibana TSVB Markdown styling](https://discuss.elastic.co/t/kibana-tsvb-markdown-styling/309208)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 3:26pm UTC](https://discuss.elastic.co/t/kibana-tsvb-markdown-styling/309208 "2022-07-08T15:26:34Z")

</div>

Hello, I want to create a pretty and highly functional dashboard containing all important information and metrics regarding the whole network. Right now I am working on displaying information on failover status for ASA …

---

## [Kiban show wrong time](https://discuss.elastic.co/t/kiban-show-wrong-time/309193)

<div class="topic-metadata">

**Author:** [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin)\
**Replies:** 4\
**Last updated:** [July 8, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193 "2022-07-08T15:01:16Z")

</div>

i have log messages in the following format: {"@timestamp":"2022-07-08T10:01:43.181Z","log.level":"info","message":"verifyReceipt: found receipt","ecs":{"version":"1.6.0"}} @timestamp in UTC. When i check logs in Kiban…

---

## [Grok Parsing](https://discuss.elastic.co/t/grok-parsing/309200)

<div class="topic-metadata">

**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\
**Replies:** 2\
**Last updated:** [July 8, 2022, 2:03pm UTC](https://discuss.elastic.co/t/grok-parsing/309200 "2022-07-08T14:03:28Z")

</div>

Hi everyone, I am having trouble when I want to parse this Fortigate Log \<189\>devname="FWFG240D" type="traffic" subtype="forward" level="notice" vd="root" eventtime=1565130979 srcip=146.0.138.202 srcport=61103 dstip=192…

---

## [Creating Multiple Elastic Search Ingest Pipelines](https://discuss.elastic.co/t/creating-multiple-elastic-search-ingest-pipelines/309206)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 1:54pm UTC](https://discuss.elastic.co/t/creating-multiple-elastic-search-ingest-pipelines/309206 "2022-07-08T13:54:23Z")

</div>

I have created multiple ingest pipelines. I can export these pipelines from the dev console with the following command: GET \_ingest/pipeline/logs\* I copy this into a .json file, I would like to now import this back int…

---

## [Elasticsearch Source Plugin in Cloud Data Fusion (GCP)](https://discuss.elastic.co/t/elasticsearch-source-plugin-in-cloud-data-fusion-gcp/309168)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 1\
**Last updated:** [July 8, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-source-plugin-in-cloud-data-fusion-gcp/309168 "2022-07-08T13:25:12Z")

</div>

Hello Every One I am using Elasticsearch plugin in to cloud data fusion (CDAP tool) I am using follwing Configration but I am not detecting Output schema may be I am doing miss configuration please help how to I co…

[Previous page](https://discuss.elastic.co/latest.md?page=1053)

[Next page](https://discuss.elastic.co/latest.md?page=1055)
