# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1082

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1083

---

## [Logstash Startup issue](https://discuss.elastic.co/t/logstash-startup-issue/307639)

<div class="topic-metadata">

**Author:** [@shivani\_chittauri](https://discuss.elastic.co/u/shivani_chittauri)\
**Replies:** 7\
**Last updated:** [June 20, 2022, 5:50pm UTC](https://discuss.elastic.co/t/logstash-startup-issue/307639 "2022-06-20T17:50:32Z")

</div>

unable to start logstash, while Elasticsearch and kibana both are up and running. logtstash.conf looks like no change on any other file logstash.yml has everything commented except "pipeline.ordered: auto"

---

## [Connecting logstash to remote elasticsearch running on https with no port specified](https://discuss.elastic.co/t/connecting-logstash-to-remote-elasticsearch-running-on-https-with-no-port-specified/307671)

<div class="topic-metadata">

**Author:** [@rajivraghu](https://discuss.elastic.co/u/rajivraghu)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 5:42pm UTC](https://discuss.elastic.co/t/connecting-logstash-to-remote-elasticsearch-running-on-https-with-no-port-specified/307671 "2022-06-20T17:42:56Z")

</div>

Hello , i am running Elasticsearch on a website called Cloud IDE gitpod. Once i start the docker image on the gitpod, docker run \\ --name elasticsearch \\ --net elastic \\ -p 9200:9200 \\ -e disco…

---

## [Make a string query with a range](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571 "2022-06-20T17:13:36Z")

</div>

I try to make a query string but i only want documents that have a field between a certain range. How can i do that ?

---

## [FunctionScoreQuery.Builder not able to create](https://discuss.elastic.co/t/functionscorequery-builder-not-able-to-create/307676)

<div class="topic-metadata">

**Author:** [@pasupathi-raja](https://discuss.elastic.co/u/pasupathi-raja)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 4:44pm UTC](https://discuss.elastic.co/t/functionscorequery-builder-not-able-to-create/307676 "2022-06-20T16:44:46Z")

</div>

I'm trying to build the following query in elasticsearch-java library. { "from": 0, "size": 10, "query": { "function\_score": { "functions": \[ { "filter": { "term": { …

---

## [Make file URL open file](https://discuss.elastic.co/t/make-file-url-open-file/307655)

<div class="topic-metadata">

**Author:** [@Marouene\_dakhlaoui](https://discuss.elastic.co/u/Marouene_dakhlaoui)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 3:56pm UTC](https://discuss.elastic.co/t/make-file-url-open-file/307655 "2022-06-20T15:56:39Z")

</div>

I have document with value file:///C:/image\_data/images/audi.png, in my Data views dashboard I formatted the value to a URL like the following. The problem, is that when I click on the link it becomes : http://local…

---

## [Create specific column](https://discuss.elastic.co/t/create-specific-column/307669)

<div class="topic-metadata">

**Author:** [@Renato\_Souza](https://discuss.elastic.co/u/Renato_Souza)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 3:53pm UTC](https://discuss.elastic.co/t/create-specific-column/307669 "2022-06-20T15:53:48Z")

</div>

How to create or what the documentation for this: I have some data in column message, but i need to create a new column for this IP and network name. This possible?

---

## [Set IP address as index](https://discuss.elastic.co/t/set-ip-address-as-index/307642)

<div class="topic-metadata">

**Author:** [@fropa](https://discuss.elastic.co/u/fropa)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 3:39pm UTC](https://discuss.elastic.co/t/set-ip-address-as-index/307642 "2022-06-20T15:39:07Z")

</div>

Hi, Can I configure logstash to set "source IP address" as index ? Is there any variable for that?

---

## [Logstash Log4j Update](https://discuss.elastic.co/t/logstash-log4j-update/307604)

<div class="topic-metadata">

**Author:** [@rishabjain1012](https://discuss.elastic.co/u/rishabjain1012)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 3:35pm UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604 "2022-06-20T15:35:59Z")

</div>

Hi, We are using opensource versions of logstash docker Images. Our security team found that these images contain log4j-core-2.17.0.jar which is found to be vulnerable. Can someone provide us an update as of when will…

---

## [Elasticsearch Keep Stopping](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422)

<div class="topic-metadata">

**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\
**Replies:** 22\
**Last updated:** [June 20, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422 "2022-06-20T15:31:21Z")

</div>

I am running Elasticsearch 8 on a server with 300gb hard drive and 16gb RAM. The Elasticsearch keep stopping in few hours. I tried restarting it using systemctl and got below message ● elasticsearch.service - Elasticse…

---

## [Elastic mapping improper integer coercion to decimal/float](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165)

<div class="topic-metadata">

**Author:** [@VenkateshD](https://discuss.elastic.co/u/VenkateshD)\
**Replies:** 5\
**Last updated:** [June 20, 2022, 3:26pm UTC](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165 "2022-06-20T15:26:42Z")

</div>

Input document {"warrantyMiles":65000,"loadIndex":95} Index mapping "loadIndex": { "type": "integer", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "warrantyMiles": { "type": "integer", "fiel…

---

## [Snapshot for cluster size TB](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493)

<div class="topic-metadata">

**Author:** [@christians](https://discuss.elastic.co/u/christians)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 3:17pm UTC](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493 "2022-06-20T15:17:50Z")

</div>

Hi, In the actuallity i have the policy slm for snapshot daily with cluster size 2-5 GB the snapshot are corrects. I have a question for an cluster size 9TB. We need implement a snapshot daily optim. Please Could you …

---

## [Logstash giving error while creating template - Failed to install template Got response code '400' contacting Elasticsearch at URL](https://discuss.elastic.co/t/logstash-giving-error-while-creating-template-failed-to-install-template-got-response-code-400-contacting-elasticsearch-at-url/307677)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 3:14pm UTC](https://discuss.elastic.co/t/logstash-giving-error-while-creating-template-failed-to-install-template-got-response-code-400-contacting-elasticsearch-at-url/307677 "2022-06-20T15:14:10Z")

</div>

I am getting this error failed to install when specifying the template file in the logstash configuration. But the same template json is working if I create it using the Elasticsearch API. I actually don't want to create…

---

## [Use sns message value for Elasticsearch input query](https://discuss.elastic.co/t/use-sns-message-value-for-elasticsearch-input-query/307488)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 2:47pm UTC](https://discuss.elastic.co/t/use-sns-message-value-for-elasticsearch-input-query/307488 "2022-06-20T14:47:57Z")

</div>

Hello, Is there a way to retrieve a value from an SNS message (via an input) and pass that same value to an Elastic input ?

---

## [Elasticsearch master node failover](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504)

<div class="topic-metadata">

**Author:** [@artem.zikov](https://discuss.elastic.co/u/artem.zikov)\
**Replies:** 4\
**Last updated:** [June 20, 2022, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504 "2022-06-20T14:29:11Z")

</div>

Hello. I have Elasticsearch cluster (for graylog) with Elasticsearch-oss 7.10.2 Cluster has 3 nodes: 2 data/master and 1 master # curl -XGET 'localhost:9200/\_cat/nodes?v&pretty' ip heap.percent ram.percent cp…

---

## [Create nested object mapping using logstash unloading from postgres](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 2:24pm UTC](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661 "2022-06-20T14:24:35Z")

</div>

Hi, I am unloading data from Postgres to Elasticsearch using logstash. In this case if the index is not there in Elasticsearch logstash is creating an index with the predefined mapping. The mapping is perfect for all th…

---

## [Unable to retrieve license information from license server](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 5\
**Last updated:** [June 20, 2022, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766 "2022-06-20T14:13:18Z")

</div>

Setting up a multi-node ELK 8.2 stack and hitting an issue I've not been able to sort out. The basics of Elasticsearch and Kibana are working, but Logstash doesn't want to connect to the one Elasticsearch machine I have.…

---

## [Map data not displaying in 8.2.0](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450)

<div class="topic-metadata">

**Author:** [@martb](https://discuss.elastic.co/u/martb)\
**Replies:** 17\
**Last updated:** [June 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450 "2022-06-20T14:12:57Z")

</div>

Hi, Ive migrated from 7.16 to 8.2 but since then my maps are not displaying. The data is there and mapped with a gep\_point for the location. I also noticed the location is no longer displaying in the discover ie with t…

---

## [Backfill Rollup indices from external Sources](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667)

<div class="topic-metadata">

**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 2:08pm UTC](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667 "2022-06-20T14:08:18Z")

</div>

hi there, we have a legacy selwritten data retention solution which i want to migrate into pure elastic. it contains daily averages(weighted) af some metrics over the last 5 years. The Rollup off the latest metric alr…

---

## [Filebeat file\_identity inode\_uuid](https://discuss.elastic.co/t/filebeat-file-identity-inode-uuid/307665)

<div class="topic-metadata">

**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 2:01pm UTC](https://discuss.elastic.co/t/filebeat-file-identity-inode-uuid/307665 "2022-06-20T14:01:57Z")

</div>

This may be an old discussion and we have seen some improvements in the past, but I would like to bring it up again. The issue is that by default, filebeat indentifies files by inode and device id. The problem with the …

---

## [Inability to retrieve data set when sorted on multivalued date field](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660)

<div class="topic-metadata">

**Author:** [@rand0m86](https://discuss.elastic.co/u/rand0m86)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 1:40pm UTC](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660 "2022-06-20T13:40:27Z")

</div>

We have a data set of 40M+ records in one of the indices in Elasticsearch v6.8.18. Data is added/updated/removed daily at a given time (no ad-hoc changes happen during the day). In the application which uses ES we have …

---

## [Opentelemetry traces in event driven system](https://discuss.elastic.co/t/opentelemetry-traces-in-event-driven-system/307659)

<div class="topic-metadata">

**Author:** [@Matic\_Di\_Batista](https://discuss.elastic.co/u/Matic_Di_Batista)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 1:38pm UTC](https://discuss.elastic.co/t/opentelemetry-traces-in-event-driven-system/307659 "2022-06-20T13:38:36Z")

</div>

Elasticsearch observability: 8.2 Is there anything special in your setup? Normal POC setup: two services HTTP and message bus communication using Dapr Opentelemetry collector for log and trace aggregation Using otlp/…

---

## [Logstash 8.x ecs.compatibility mode adds event.original](https://discuss.elastic.co/t/logstash-8-x-ecs-compatibility-mode-adds-event-original/307654)

<div class="topic-metadata">

**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 1:05pm UTC](https://discuss.elastic.co/t/logstash-8-x-ecs-compatibility-mode-adds-event-original/307654 "2022-06-20T13:05:42Z")

</div>

As already discussed in a previous thread, logstash in ecs.compatibility mode adds the event.original field to all events. The proposed solution was to turn off ecs.compatibility. The problem is that disabling ecs.compa…

---

## [Filter hosts based on port](https://discuss.elastic.co/t/filter-hosts-based-on-port/307495)

<div class="topic-metadata">

**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 12:27pm UTC](https://discuss.elastic.co/t/filter-hosts-based-on-port/307495 "2022-06-20T12:27:00Z")

</div>

Hello, i am using auto discovery in kubernetes and some discovered hosts has port 0 on which health check is failing. I want to be able to filter those hosts and run icmp check for them. How can i achieve this with condi…

---

## [Highlight not working properly](https://discuss.elastic.co/t/highlight-not-working-properly/307128)

<div class="topic-metadata">

**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\
**Replies:** 6\
**Last updated:** [June 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/highlight-not-working-properly/307128 "2022-06-20T12:23:52Z")

</div>

Hi Team, Can anyone please explain me the flow of highlight in Elasticsearch? When i am adding multiple queries in should condition then highlight is not returning expected values and when i am trying with single query…

---

## [Spring-boot-starter-data-elasticsearch 2.4.4 gives results and 2.5.13 and above versions don't give results for query](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621)

<div class="topic-metadata">

**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 8:50am UTC](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621 "2022-06-20T08:50:12Z")

</div>

@Query("{"terms":{"id": ?0}}") public Page findById(List id) Spring-boot-starter-data-Elasticsearch 2.4.4 generates a query with wrapper inside that is encrypted during debug and I get matching results from index When…

---

## [Benchmarking es-cluster on AWS](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636 "2022-06-20T12:01:22Z")

</div>

Hi All, I am running my es-cluster on kubernetes on AWS instance x2iedn(memory optimized) and i4i(Storage optimized). I tried benchmarking the es cluster on both instance type. I have 3 data nodes and 1 master node. …

---

## [Creating Analyzer Query in Java API Client Elasticsearch version 7.16.3](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620)

<div class="topic-metadata">

**Author:** [@Aadi](https://discuss.elastic.co/u/Aadi)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 12:00pm UTC](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620 "2022-06-20T12:00:30Z")

</div>

Hi everyone, I have a java application in which ElasticSearchClient is used for establishing connection with Elasticsearch server. The application uses BulkRequest for indexing documents. Following code index the docum…

---

## [How can I get my kibana and elasticsearch url? for the filebeat?](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623 "2022-06-20T11:31:38Z")

</div>

Thanks, How can I know my kibana and Elasticsearch url? output.elasticsearch: hosts: \["\<es\_url\>"\] username: "elastic" password: "\<password\>" setup.kibana: host: "\<kibana\_url\>" how can I get these? thanks

---

## [Reorder results to ensure the closest match returns first](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635)

<div class="topic-metadata">

**Author:** [@Thomas\_Gibbs](https://discuss.elastic.co/u/Thomas_Gibbs)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 10:57am UTC](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635 "2022-06-20T10:57:15Z")

</div>

I'd like to make a single rescore query that pushes the closest metadata match to what someone searched (before applying the function score), but then have the function score as a much larger factor afterwards, in order…

---

## [Copy some fields from one index to another](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421)

<div class="topic-metadata">

**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\
**Replies:** 9\
**Last updated:** [June 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421 "2022-06-20T11:24:48Z")

</div>

I am thinking if it's possible to merge two indices to holt my data first\_index: PUT first\_index { "mappings": { "dynamic": "false", "\_source": { "excludes": \["content"\] }, "properties": { …

[Previous page](https://discuss.elastic.co/latest.md?page=1081)

[Next page](https://discuss.elastic.co/latest.md?page=1083)
