# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1081

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1082

---

## [Packetbeat not running in windows](https://discuss.elastic.co/t/packetbeat-not-running-in-windows/307647)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 5\
**Last updated:** [June 21, 2022, 7:12am UTC](https://discuss.elastic.co/t/packetbeat-not-running-in-windows/307647 "2022-06-21T07:12:01Z")

</div>

I have installed packetbeat 7.17.3v elk is also 7.17.3v after editing config yml file packetbeat is not running in powershell(not showing any errors too). please check the attachment.

---

## [How to express the logic to let nested field match multiple groups condition](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614)

<div class="topic-metadata">

**Author:** [@Bruce\_Zu](https://discuss.elastic.co/u/Bruce_Zu)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 7:11am UTC](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614 "2022-06-21T07:11:54Z")

</div>

Elasticsearch version 6.8.0 mappings like { "properties": { "id": { "type": "long" }, "authentication\_worker": { "type": "nested", "properties": { "authorized\_id": { "t…

---

## [The instance rejected the connection](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722)

<div class="topic-metadata">

**Author:** [@Ventsislav\_Kyorovski](https://discuss.elastic.co/u/Ventsislav_Kyorovski)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 7:08am UTC](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722 "2022-06-21T07:08:54Z")

</div>

Hello everyone, We use Elastic Cloud hosted on GCP, our production cluster is 1.41 TB storage, 32 GB RAM, 8 vCPU split in 2 zones. We have a Java application which uses the ES as a database and yesterday, when we hit 2…

---

## [Hi how can I know the the APM env variables?](https://discuss.elastic.co/t/hi-how-can-i-know-the-the-apm-env-variables/307684)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 7:01am UTC](https://discuss.elastic.co/t/hi-how-can-i-know-the-the-apm-env-variables/307684 "2022-06-21T07:01:14Z")

</div>

Hi, I have an app in python, How can I know these: app.config\['ELASTIC\_APM'\] = { 'SERVICE\_NAME': '\<\*\*SERVICE-NAME\*\*\>', 'SECRET\_TOKEN': '\<\*\*SECRET-TOKEN\*\*\>', } apm = ElasticAPM(app) I didnt see something about…

---

## [Kibana table resizing of columns](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 6:37am UTC](https://discuss.elastic.co/t/kibana-table-resizing-of-columns/307633 "2022-06-21T06:37:41Z")

</div>

Dear team, Is there a way to resize columns per user needs? We have a dashboard in 1 space, which is used by multiple users, each with their own monitor sizes. That causes an issue with different width of table colum…

---

## [Limitation in dashboard creation](https://discuss.elastic.co/t/limitation-in-dashboard-creation/307640)

<div class="topic-metadata">

**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 6:33am UTC](https://discuss.elastic.co/t/limitation-in-dashboard-creation/307640 "2022-06-21T06:33:04Z")

</div>

Hi I have a series of data that I load daily with the following information: Username assigned quota quota used last connection I'm trying to create a series of dashboards to graphically collect some results that we …

---

## [フィルタリングの指定方法について](https://discuss.elastic.co/t/topic/307593)

<div class="topic-metadata">

**Author:** [@Tash](https://discuss.elastic.co/u/Tash)\
**Replies:** 3\
**Last updated:** [June 21, 2022, 6:00am UTC](https://discuss.elastic.co/t/topic/307593 "2022-06-21T06:00:33Z")

</div>

Kibanaで多少複雑な条件に合致したドキュメントをフィルタリングしたいです。 例えば、下記内容において、フィールドA（ID）とB（色）に着目して、 Bに「Red」が含まれている場合、そのA（ID）のドキュメントを全てフィルタリングしたいです。 下例の場合、対象となるドキュメント\_idは1,2,3,6,7,8,9,10,12,13となる。 ダッシュボード全体、もしくはビジュアリゼーション単体で上記フィルタリングを実現するにはどう…

---

## [How can I sync data from mysql db to Elastic App Search?](https://discuss.elastic.co/t/how-can-i-sync-data-from-mysql-db-to-elastic-app-search/307501)

<div class="topic-metadata">

**Author:** [@Rustin\_Spencer](https://discuss.elastic.co/u/Rustin_Spencer)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 6:00am UTC](https://discuss.elastic.co/t/how-can-i-sync-data-from-mysql-db-to-elastic-app-search/307501 "2022-06-21T06:00:27Z")

</div>

How can I sync data from mysql db to Elastic App Search? Do I have to use normal elasticsearch?

---

## [Processors Configuration taking the processors from the resource request of kubernetes](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 0\
**Last updated:** [June 21, 2022, 4:50am UTC](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707 "2022-06-21T04:50:36Z")

</div>

Hi All, I am running es-cluster on kubernetes with below resources request on container. resources: requests: cpu: 8 memory: "64Gi" I have not put limit on the resources. I have 224 VCPUs(HT on) on my host machine…

---

## [Maxtimeout Reached](https://discuss.elastic.co/t/maxtimeout-reached/307486)

<div class="topic-metadata">

**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 4:31am UTC](https://discuss.elastic.co/t/maxtimeout-reached/307486 "2022-06-21T04:31:42Z")

</div>

Hi Everyone, recently when I try to index a document. The request, response with max-timeout reached after a certain point in time, and it starts indexing again. Now, I'm trying to find the root cause of that issue. T…

---

## [Sorting on Visual](https://discuss.elastic.co/t/sorting-on-visual/307705)

<div class="topic-metadata">

**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\
**Replies:** 4\
**Last updated:** [June 21, 2022, 4:05am UTC](https://discuss.elastic.co/t/sorting-on-visual/307705 "2022-06-21T04:05:42Z")

</div>

Need to sort on visual By field called "Category". So i click the filter and add below code. { "sorts": \[ { "field": "Category", "direction": "ASC" } \] } But i didnt sort by "Catagory". Can some…

---

## [Elk stack license](https://discuss.elastic.co/t/elk-stack-license/307473)

<div class="topic-metadata">

**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Replies:** 4\
**Last updated:** [June 21, 2022, 4:00am UTC](https://discuss.elastic.co/t/elk-stack-license/307473 "2022-06-21T04:00:23Z")

</div>

Hi, How can I enable the machine learning features for kibana downloaded on my system. My trial has ended. How do I upgrade from basic license? Thanks in Advance

---

## [Discarding logs in elk](https://discuss.elastic.co/t/discarding-logs-in-elk/307481)

<div class="topic-metadata">

**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\
**Replies:** 7\
**Last updated:** [June 21, 2022, 3:28am UTC](https://discuss.elastic.co/t/discarding-logs-in-elk/307481 "2022-06-21T03:28:33Z")

</div>

We are using winlogbeat agent. Can we discard or drop log messages based on a criteria defined in elk stack. We dont want to drop logs based on winlog yml config on systems but we want to drop logs centrally.Is it pos…

---

## [Java API - Having problem by searching data on kibana](https://discuss.elastic.co/t/java-api-having-problem-by-searching-data-on-kibana/307268)

<div class="topic-metadata">

**Author:** [@Ahsan\_Sharif](https://discuss.elastic.co/u/Ahsan_Sharif)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 2:06am UTC](https://discuss.elastic.co/t/java-api-having-problem-by-searching-data-on-kibana/307268 "2022-06-21T02:06:26Z")

</div>

SearchRequest request = new SearchRequest(); request.indices("search\_products"); request.source(new SearchSourceBuilder().query(QueryBuilders.wrapperQuery(queryString))); SearchResponse response = client.search(request, …

---

## [Watcher alert for capture the defined kubernetes pod resource limit](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281)

<div class="topic-metadata">

**Author:** [@dkumar89](https://discuss.elastic.co/u/dkumar89)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 2:05am UTC](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281 "2022-06-21T02:05:03Z")

</div>

Hi Team, we would like to know the defined resource limit for all the kubernetes pod for which we have enabled monitoring. Is there a field that can give us resource(CPU, Memory) limit values that we defined in pod dep…

---

## [Monitor roles for the user](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272)

<div class="topic-metadata">

**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\
**Replies:** 0\
**Last updated:** [June 15, 2022, 12:24pm UTC](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272 "2022-06-15T12:24:41Z")

</div>

Hello, I have elastisearch exporter for getting cluster metrics to Prometheus, But we have to add a username and Password in the service file, Which roles will be okay for getting cluster details?

---

## [Fetching Documents with alias](https://discuss.elastic.co/t/fetching-documents-with-alias/307285)

<div class="topic-metadata">

**Author:** [@Skeldren](https://discuss.elastic.co/u/Skeldren)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:56am UTC](https://discuss.elastic.co/t/fetching-documents-with-alias/307285 "2022-06-21T01:56:24Z")

</div>

Hey all :wave: I have a question regarding alias. Basically was performing some tests to check how it worked. I created two Alias for the same Index with different routing keys and filters. Let's say the Index is cal…

---

## [Finding documents with "too many fields"](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:53am UTC](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313 "2022-06-21T01:53:58Z")

</div>

What's the easiest way to find documents from an index that appears to have too many fields. I want to delete those documents, but there doesn't seem to be a way to easily find them. The background to how I get here. …

---

## [Getting login prompt after configuring elasticsearch LDAP integration](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310)

<div class="topic-metadata">

**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 1:46am UTC](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310 "2022-06-21T01:46:48Z")

</div>

I have attached the login prompt. Not sure if the message is an indication of the issue. I have also attached the security section of the elasticsearch.yml

---

## [Question about Elastic Search: In Elastic Search, can we store data on a local machine and allow other machines to access the data stored on the local machine?](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:38am UTC](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704 "2022-06-21T01:38:09Z")

</div>

In Microsoft SQL server, we can store data on a local machine, deploy the server, and allow other machines to access that data. How would this be analogous to Elasticsearch? I've been sifting through the documentation an…

---

## [New to Elastic - Incorrect Training Lab username/password](https://discuss.elastic.co/t/new-to-elastic-incorrect-training-lab-username-password/307670)

<div class="topic-metadata">

**Author:** [@mganon98](https://discuss.elastic.co/u/mganon98)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 12:46am UTC](https://discuss.elastic.co/t/new-to-elastic-incorrect-training-lab-username-password/307670 "2022-06-21T00:46:49Z")

</div>

I am new to Elastic. I am attempting an on-demand course. I cannot access the lab environment with the error that the username/password is incorrect. Is there a feature to retrieve my username and reset the lab environme…

---

## [Trouble Installing and Configuring Elastic Search on Windows Virtual Machine](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 11:52pm UTC](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694 "2022-06-20T23:52:09Z")

</div>

I am following the documentation on this webpage: Install Elasticsearch with .zip on Windows | Elasticsearch Guide \[8.2\] | Elastic. Essentially, when I run bin\\elasticsearch-create-enrollment-token -s node while having E…

---

## [What is the best model to save data on elasticsearch?](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560)

<div class="topic-metadata">

**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 9:50pm UTC](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560 "2022-06-20T21:50:20Z")

</div>

I have a rails application and use Elasticsearch as a search engine in my rails app. this app collects data from the mobile application and could collect from any kind of mobile app. mobile app sends two types of data us…

---

## [Using Logstash + Filebeat combination pros and cons](https://discuss.elastic.co/t/using-logstash-filebeat-combination-pros-and-cons/307687)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 6:26pm UTC](https://discuss.elastic.co/t/using-logstash-filebeat-combination-pros-and-cons/307687 "2022-06-20T18:26:52Z")

</div>

Hi everybody. I'm getting my first ECK environment in Kubernetes. It has 3 MasterNodes, 3 DataNodes and 2 nodes for Kibana LoadBalancer. My next target was installing Logstash, as my first idea was having some beats s…

---

## [Azure Marketplace Elasticsearch service failed](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697)

<div class="topic-metadata">

**Author:** [@Patricio\_Merino](https://discuss.elastic.co/u/Patricio_Merino)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 9:05pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697 "2022-06-20T21:05:32Z")

</div>

Hi all, In our application we are using Azure Marketplace Elasticsearch. Around two weeks ago, the service is failed: And in the application we can´t connect to this: {"name":"TimeoutError","meta":{"body":null,"s…

---

## [How to close the gap of elements in X axis of the canvas](https://discuss.elastic.co/t/how-to-close-the-gap-of-elements-in-x-axis-of-the-canvas/307678)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 8:32pm UTC](https://discuss.elastic.co/t/how-to-close-the-gap-of-elements-in-x-axis-of-the-canvas/307678 "2022-06-20T20:32:42Z")

</div>

I have a area chart configured in the kibana canvas and I want to close the gap between the date elements in the X axis. Is there a way to do so? Here is how it is looking like: Best regards.

---

## [Display Predefined Category type for Pie Chart when landing to Kibana Dashboard](https://discuss.elastic.co/t/display-predefined-category-type-for-pie-chart-when-landing-to-kibana-dashboard/307688)

<div class="topic-metadata">

**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 8:28pm UTC](https://discuss.elastic.co/t/display-predefined-category-type-for-pie-chart-when-landing-to-kibana-dashboard/307688 "2022-06-20T20:28:01Z")

</div>

In my dashboard there are plenty of visuals. Out of them i have filter and pie chart. Let's say using filter we can select which Ware house's asset types count distribution you want display(Asset Types: Laps, Scans and p…

---

## [New install - error setting certificate verify locations](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455)

<div class="topic-metadata">

**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\
**Replies:** 8\
**Last updated:** [June 20, 2022, 8:05pm UTC](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455 "2022-06-20T20:05:30Z")

</div>

Following the instructions here: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.2\] | Elastic Installing from apt on Ubuntu server 20.04 wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch …

---

## [Multi-fields vs Nested data type](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664)

<div class="topic-metadata">

**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 7:38pm UTC](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664 "2022-06-20T19:38:07Z")

</div>

Hey, Trying to understand difference between "fields" and "nested". For example, I have an array of objects, each one having the following fields: name name\_hash First (and probably obvious) option is to map this as …

---

## [Logstash pipeline for error logs?](https://discuss.elastic.co/t/logstash-pipeline-for-error-logs/307681)

<div class="topic-metadata">

**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\
**Replies:** 5\
**Last updated:** [June 20, 2022, 6:39pm UTC](https://discuss.elastic.co/t/logstash-pipeline-for-error-logs/307681 "2022-06-20T18:39:01Z")

</div>

How can I create a logstash pipeline for logstash error logs and put it in Elasticsearch?(So I can see it in discover and see the logs from kibana/discover and analytics?

[Previous page](https://discuss.elastic.co/latest.md?page=1080)

[Next page](https://discuss.elastic.co/latest.md?page=1082)
