# Latest **URL:** https://discuss.elastic.co/latest.md?page=1076 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1077 --- ## [Multiple Entity Type Indexing and Search](https://discuss.elastic.co/t/multiple-entity-type-indexing-and-search/306718)
**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 12:35pm UTC](https://discuss.elastic.co/t/multiple-entity-type-indexing-and-search/306718 "2022-06-23T12:35:04Z")
Hi there :wave: Let's say I have an application where I need to index multiple different types of entities: users, courses, programs, etc. Each of these entities will have a specific schema of their own, and different s… --- ## [Empty output when extracting field](https://discuss.elastic.co/t/empty-output-when-extracting-field/307514)
**Author:** [@sigizmynd](https://discuss.elastic.co/u/sigizmynd)\ **Replies:** 6\ **Last updated:** [June 23, 2022, 12:24pm UTC](https://discuss.elastic.co/t/empty-output-when-extracting-field/307514 "2022-06-23T12:24:17Z")
Hello I want to extract some value from my log: { "\_index": ".ds-filebeat-8.2.2-2022.06.14-000002", "\_id": "veGbcYEBr3mqBf4wJF1j", "\_version": 1, "\_score": null, "fields": { "host.os.name.text": \[ "AlmaLinux" \]… --- ## [Received an event that has a different character encoding from DLP software](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-from-dlp-software/308004)
**Author:** [@Stevenpoot](https://discuss.elastic.co/u/Stevenpoot)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 12:11pm UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-from-dlp-software/308004 "2022-06-23T12:11:08Z")
{:text=\>"\\u0000\\x FF\\u0001\\u0000\\u0000$\\u0000\\r\\u0000 \\u0000\\u001E\\u0006\\u0001\\u0006\\ u0002\\u0006\\u0003\\u0005\\u0001\\u0005\\u0002\\u0005\\u0003\\u0004\\u0001\\u0 004\\u0002\\u0004\\u0003\\u0003\\u0001\\u0003\\u0002\\u0003\\u0003\\u0002\\u… --- ## [LDAP Elasticserch without license](https://discuss.elastic.co/t/ldap-elasticserch-without-license/307917)
**Author:** [@diegoneto](https://discuss.elastic.co/u/diegoneto)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 11:56am UTC](https://discuss.elastic.co/t/ldap-elasticserch-without-license/307917 "2022-06-23T11:56:30Z")
Hello guys. Good evening! Configure an Elasticsearch Cluster with a basic license. However, I would like to authenticate via LDAP. Is doing this setup with the basic license possible? It would also accept login via SSO… --- ## [Use threshold on minimum number of observations for showing data on chloropleth map](https://discuss.elastic.co/t/use-threshold-on-minimum-number-of-observations-for-showing-data-on-chloropleth-map/307980)
**Author:** [@NiklasHBB](https://discuss.elastic.co/u/NiklasHBB)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 11:35am UTC](https://discuss.elastic.co/t/use-threshold-on-minimum-number-of-observations-for-showing-data-on-chloropleth-map/307980 "2022-06-23T11:35:58Z")
I have followed the reverse geocoding example and the basics work great using Kibana 7.16. I have left the 'apply global search to layer data' option turned off so that the map updates when I filter observations in a das… --- ## [Complex Proximity/Nested/exact-match Queries in Elasticsearch](https://discuss.elastic.co/t/complex-proximity-nested-exact-match-queries-in-elasticsearch/307998)
**Author:** [@jaivikram](https://discuss.elastic.co/u/jaivikram)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 11:33am UTC](https://discuss.elastic.co/t/complex-proximity-nested-exact-match-queries-in-elasticsearch/307998 "2022-06-23T11:33:34Z")
I am looking for proximity (and nested proximity as well) between multiple hetrogeneous groups By hetrogeneous I mean the token in the groups can be: term and term term and phrase phrase and phrase term and wildcard p… --- ## [Collapse, Term Aggregation, Grouping](https://discuss.elastic.co/t/collapse-term-aggregation-grouping/307993)
**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 11:01am UTC](https://discuss.elastic.co/t/collapse-term-aggregation-grouping/307993 "2022-06-23T11:01:33Z")
Hi there, I am using elasticsearch 7.17 and trying to group result on some field Here is the query which i am trying to run GET content-data/\_search { "\_source": false, "query": { "bool": { "should": \[ … --- ## [Elasticsearch not starting](https://discuss.elastic.co/t/elasticsearch-not-starting/307984)
**Author:** [@Ram3](https://discuss.elastic.co/u/Ram3)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting/307984 "2022-06-23T10:59:02Z")
Hello Everyone so I am very new to elasticsearch and I don't know How it work I had installed it and was working but suddenly today the clients told me that it is not working. I have made sure all the ownership is good … --- ## [Disk space of ELK](https://discuss.elastic.co/t/disk-space-of-elk/307977)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 10:36am UTC](https://discuss.elastic.co/t/disk-space-of-elk/307977 "2022-06-23T10:36:38Z")
Hi All, I using docker images for elasticsearch and kinbana on Linux host. And i have limited disk space to manage, so I am using ILM and SLM to delete the old indices so that disk space never reached to threshold. Bu… --- ## [English stop words](https://discuss.elastic.co/t/english-stop-words/307971)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 10:31am UTC](https://discuss.elastic.co/t/english-stop-words/307971 "2022-06-23T10:31:29Z")
Is there any way to define usual stop words to be removed from the text? I've defined English as a language, using a Web crawler and have some API on my website, but when I try to search for "the, a, an ..." it shows me … --- ## [Elasticsearch and NestJs multi cluster](https://discuss.elastic.co/t/elasticsearch-and-nestjs-multi-cluster/307989)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-and-nestjs-multi-cluster/307989 "2022-06-23T10:23:41Z")
Hello everyone, I have a small problem I want to produce an elasticsearch via an app NestJs. I have 3 hosts but I don't know how to configure my "search.module" "search.providers" and "search.service". Should I do someth… --- ## [Is Pipeline able to enrich data with a field of another line in same index?](https://discuss.elastic.co/t/is-pipeline-able-to-enrich-data-with-a-field-of-another-line-in-same-index/307988)
**Author:** [@Sebastien\_Taniere](https://discuss.elastic.co/u/Sebastien_Taniere)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 10:22am UTC](https://discuss.elastic.co/t/is-pipeline-able-to-enrich-data-with-a-field-of-another-line-in-same-index/307988 "2022-06-23T10:22:17Z")
Hello, I have to ingest this type of data : \[2022-06-23 12:11:53 INF\] \[Env=\] \[Depot=\] \[Activity=\] \[RequestId=0HMIJARNNC6FT:00000002\] Request finished HTTP/1.1 GET http://xxxx.yyyy:5000/api/Weight/GetPickLineSupportWeig… --- ## [Filebeat in HA through active passive](https://discuss.elastic.co/t/filebeat-in-ha-through-active-passive/306987)
**Author:** [@diptesh2007](https://discuss.elastic.co/u/diptesh2007)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 10:18am UTC](https://discuss.elastic.co/t/filebeat-in-ha-through-active-passive/306987 "2022-06-23T10:18:14Z")
I have a requirement to model ELK stack with failover across multiple AWS region. While there are no issues with running multiple instances of Logstash and Elasticsearch in active/active mode, the filebeat is expected t… --- ## [Dashboard Snapshot](https://discuss.elastic.co/t/dashboard-snapshot/307986)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 10:17am UTC](https://discuss.elastic.co/t/dashboard-snapshot/307986 "2022-06-23T10:17:33Z")
Hi All, I have created some dashboards and wanted to add in the beats package path kibana/7/dashboard but as we know the dashboard created on elk is exported in .ndjson format and if I put the .ndjson dashboard in beats… --- ## [Nodes getting removed often from the cluster](https://discuss.elastic.co/t/nodes-getting-removed-often-from-the-cluster/307956)
**Author:** [@Giuliano\_Drago](https://discuss.elastic.co/u/Giuliano_Drago)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 9:39am UTC](https://discuss.elastic.co/t/nodes-getting-removed-often-from-the-cluster/307956 "2022-06-23T09:39:13Z")
hello, I have a couple of clusters running: es 6.8.21 es 5.6.16 the machines are Ubuntu VMs and are continuously showing these error in the logs: \[2022-06-23T09:08:46,082\]\[INFO \]\[o.e.c.s.ClusterApplierService\] \[serve… --- ## [Filebeat configuration](https://discuss.elastic.co/t/filebeat-configuration/307974)
**Author:** [@Ronald1](https://discuss.elastic.co/u/Ronald1)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 9:28am UTC](https://discuss.elastic.co/t/filebeat-configuration/307974 "2022-06-23T09:28:25Z")
Hello all, This week I started looking into ELK to monitor our K8s cluster. Sorry if this is a newbie question :slight\_smile: I installed ELK (Elastic and Kibana) on a separate VM (not running on K8s) using Docker Comp… --- ## [Rally 2.5.0](https://discuss.elastic.co/t/rally-2-5-0/307970)
**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 9:05am UTC](https://discuss.elastic.co/t/rally-2-5-0/307970 "2022-06-23T09:05:42Z")
We have just released Rally 2.5.0. Highlights: We introduced the field-caps operation type We fully support the ZGC garbage collector We fixed an issue for Python 3.10 with use\_ssl: True that many users were hitting F… --- ## [Bug? "Could not communicate with the node... from the enrollment token."](https://discuss.elastic.co/t/bug-could-not-communicate-with-the-node-from-the-enrollment-token/306189)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 7\ **Last updated:** [June 23, 2022, 8:57am UTC](https://discuss.elastic.co/t/bug-could-not-communicate-with-the-node-from-the-enrollment-token/306189 "2022-06-23T08:57:01Z")
Hi there, I am making my first steps in Elasticsearch 8.x coming from 7.x. On 2 local virtual box nodes I would like to test / to understand the procedure of how I can let join a second Elasticsearch node to an already… --- ## [Aggregate on field value](https://discuss.elastic.co/t/aggregate-on-field-value/307968)
**Author:** [@zoriax](https://discuss.elastic.co/u/zoriax)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 8:56am UTC](https://discuss.elastic.co/t/aggregate-on-field-value/307968 "2022-06-23T08:56:28Z")
Hello, I'm new on this forum and I need your help :slight\_smile: I'm looking for a we to "aggregate" values on a field. Let me explain what I'm looking for : I have documents with this kind of fields : { "\_id" : "1… --- ## [Tokens offset issue](https://discuss.elastic.co/t/tokens-offset-issue/307737)
**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 8:50am UTC](https://discuss.elastic.co/t/tokens-offset-issue/307737 "2022-06-23T08:50:34Z")
Hello, I'm upgrading from Elastic 6.8.1 to 7.8.1 (tested on 8.2.3 as well) and getting the following error: startOffset must be non-negative, and endOffset must be \>= startOffset, and offsets must not go backwards I… --- ## [Winlogbeat Kibana data not showing](https://discuss.elastic.co/t/winlogbeat-kibana-data-not-showing/307966)
**Author:** [@yhk](https://discuss.elastic.co/u/yhk)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 8:36am UTC](https://discuss.elastic.co/t/winlogbeat-kibana-data-not-showing/307966 "2022-06-23T08:36:46Z")
Hello I'm just studying ELK I have finished building the ELK environment. I'm testing to collect windows log through winlogbeat for the first time. However, the winlogbeat setup seems to have been completed normally, … --- ## [Snmptrap for v3](https://discuss.elastic.co/t/snmptrap-for-v3/307610)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 8:32am UTC](https://discuss.elastic.co/t/snmptrap-for-v3/307610 "2022-06-23T08:32:20Z")
Hi Team, how can I enable snmptrap plugins for v3. The configuration I am going through applicable only for snmpv1 and v2. But my requirement is for v3 also. please guide me. Below is my configuration: input{ snmptra… --- ## [Can't Open Kibana Web Page](https://discuss.elastic.co/t/cant-open-kibana-web-page/307944)
**Author:** [@Darshana](https://discuss.elastic.co/u/Darshana)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 8:00am UTC](https://discuss.elastic.co/t/cant-open-kibana-web-page/307944 "2022-06-23T08:00:28Z")
Hi, I am not able to open kibana page in web browser. This issue come after C drive full. then i have delete temporary files to increase space in C drive. and also delete file from C:\\ELK IN\\elasticsearch-7.14.0\\data\\n… --- ## [Aggregation using part of a timestamp field](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858)
**Author:** [@mo-ezzat](https://discuss.elastic.co/u/mo-ezzat)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 7:53am UTC](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858 "2022-06-23T07:53:51Z")
Hello, I'm trying to make an aggregation using a field in the a timestamp format as "dateTimeReceived" : "2022-04-04T08:35:50.5566113Z" but I just want to use the date part, so I tried using the visualization on kib… --- ## [Removing timestamp from the dashboard report](https://discuss.elastic.co/t/removing-timestamp-from-the-dashboard-report/307847)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 7:35am UTC](https://discuss.elastic.co/t/removing-timestamp-from-the-dashboard-report/307847 "2022-06-23T07:35:30Z")
Hi, I want to remove this timestamp (\[Flights\] Global Flight Dashboard - Jun 1, 2022 @ 00:00:00.000 to Jun 10, 2022 @ 00:00:00.000) from the report of the dashboard. --- ## [How to identiry duplicates and delete it in index](https://discuss.elastic.co/t/how-to-identiry-duplicates-and-delete-it-in-index/307830)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 6\ **Last updated:** [June 23, 2022, 7:12am UTC](https://discuss.elastic.co/t/how-to-identiry-duplicates-and-delete-it-in-index/307830 "2022-06-23T07:12:42Z")
we are using elasticsearch 7.11.1 recently we observed an issue and below are the points for it. we store data for every 15 mins interval and we get time stamp from our input file (ex: 05:00, 23:15, 20:30, 11:45 ) r… --- ## [Elasticsearch is not installed in my laptop](https://discuss.elastic.co/t/elasticsearch-is-not-installed-in-my-laptop/307941)
**Author:** [@Talha\_Naeem](https://discuss.elastic.co/u/Talha_Naeem)\ **Replies:** 12\ **Last updated:** [June 23, 2022, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-installed-in-my-laptop/307941 "2022-06-23T06:52:03Z")
--- ## [Kibana n'affiche pas l'index](https://discuss.elastic.co/t/kibana-naffiche-pas-lindex/307841)
**Author:** [@Merveille\_Kimfuta](https://discuss.elastic.co/u/Merveille_Kimfuta)\ **Replies:** 5\ **Last updated:** [June 23, 2022, 6:47am UTC](https://discuss.elastic.co/t/kibana-naffiche-pas-lindex/307841 "2022-06-23T06:47:41Z")
Bonjour, "Indexlogstash" n'est pas proposé dans la liste des index dans Kibana alors qu'il est bien dans logstash.conf : output { elasticsearch { hosts =\> \["localhost:9200"\] user =\> "elastic" password =\> "rien" i… --- ## [Is there a guide as to how to upgrade old MSI installations?](https://discuss.elastic.co/t/is-there-a-guide-as-to-how-to-upgrade-old-msi-installations/307254)
**Author:** [@runegronkjaer](https://discuss.elastic.co/u/runegronkjaer)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:37am UTC](https://discuss.elastic.co/t/is-there-a-guide-as-to-how-to-upgrade-old-msi-installations/307254 "2022-06-23T06:37:47Z")
Is there a guide as to how to upgrade old MSI installations? That was so easy that the manual installation process seems super complicated in comparison. /Rune --- ## [While trying to Close Indices ElasticSearch gives error "Object reference not set to an instance of an object."](https://discuss.elastic.co/t/while-trying-to-close-indices-elasticsearch-gives-error-object-reference-not-set-to-an-instance-of-an-object/307844)
**Author:** [@EVINDX](https://discuss.elastic.co/u/EVINDX)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:12am UTC](https://discuss.elastic.co/t/while-trying-to-close-indices-elasticsearch-gives-error-object-reference-not-set-to-an-instance-of-an-object/307844 "2022-06-23T06:12:16Z")
I am trying to close the indices using the POST cmd localhost:9200/\_all/\_close But I am receiving this exception from Elasticsearch. Exception: 'Elasticsearch 'Indices.Close' API failed due to error 'Object reference … [Previous page](https://discuss.elastic.co/latest.md?page=1075) [Next page](https://discuss.elastic.co/latest.md?page=1077)