# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1083

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1084

---

## [Create an alert when deadline date reached](https://discuss.elastic.co/t/create-an-alert-when-deadline-date-reached/307428)

<div class="topic-metadata">

**Author:** [@danje57](https://discuss.elastic.co/u/danje57)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 10:17am UTC](https://discuss.elastic.co/t/create-an-alert-when-deadline-date-reached/307428 "2022-06-20T10:17:19Z")

</div>

Dear all, I create an action register, which is a list of task I need to perform during the year. This is a basic csv file with header: Tack name; Task Description; START\_Date; Due\_Date;Status I would like to have an…

---

## [Heartbeat showing Down even the port is working when autodiscovery of Docker Host Port and IP's](https://discuss.elastic.co/t/heartbeat-showing-down-even-the-port-is-working-when-autodiscovery-of-docker-host-port-and-ips/307568)

<div class="topic-metadata">

**Author:** [@itssenthil](https://discuss.elastic.co/u/itssenthil)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 9:42am UTC](https://discuss.elastic.co/t/heartbeat-showing-down-even-the-port-is-working-when-autodiscovery-of-docker-host-port-and-ips/307568 "2022-06-20T09:42:30Z")

</div>

Hey Elastic Team, Good Day, I'm done the configurations to autodiscovery of Heartbeat, and also it discovers the port, but the some of the up status ports in realtime in docker showing down from the beginning in the Hear…

---

## [Can heartbeat monitor ip/website via specific network interface?](https://discuss.elastic.co/t/can-heartbeat-monitor-ip-website-via-specific-network-interface/307346)

<div class="topic-metadata">

**Author:** [@luckyclue](https://discuss.elastic.co/u/luckyclue)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 9:30am UTC](https://discuss.elastic.co/t/can-heartbeat-monitor-ip-website-via-specific-network-interface/307346 "2022-06-20T09:30:26Z")

</div>

One server connected to 3 ISP and need to monitor those latency to some ip/websites . Can heartbeat monitor ip/website via specific network interface ? or run some scripts (for change gateway ) after complete a round of…

---

## [Write logs from wordpress in the elasticsearch](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587 "2022-06-20T09:22:37Z")

</div>

Hi, If possible- I ave a question: I have a elk cluster. this is my mysql deployment: apiVersion: apps/v1 kind: Deployment metadata: name: mysql namespace: database labels: app: mysql spec: replicas: 1 …

---

## [In docker(docker-compose), I got some errors](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489)

<div class="topic-metadata">

**Author:** [@StartMenu](https://discuss.elastic.co/u/StartMenu)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489 "2022-06-20T09:22:36Z")

</div>

I used this files to up dockers I changed log4j2.properties file for less logs to watch clearly : rootLogger.level = info to rootLogger.level = warn then ,mounted it into docker container: -./Elasticsearch/config…

---

## [Vulnerability CVE-2020-13956 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854)

<div class="topic-metadata">

**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\
**Replies:** 4\
**Last updated:** [June 20, 2022, 9:11am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854 "2022-06-20T09:11:20Z")

</div>

Hello, vulnerability CVE-2020-13956 is reported on the httpclient-4.5.10.jar libraries of the reindex module of Elasticsearch (modules/reindex/httpclient-4.5.10.jar). Are there any official statements regarding if this…

---

## [Date with the max count grouped by a term](https://discuss.elastic.co/t/date-with-the-max-count-grouped-by-a-term/307377)

<div class="topic-metadata">

**Author:** [@crimson589](https://discuss.elastic.co/u/crimson589)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 8:43am UTC](https://discuss.elastic.co/t/date-with-the-max-count-grouped-by-a-term/307377 "2022-06-20T08:43:06Z")

</div>

I'm currently getting this results message1 | 2022-06-09 | 250 message1 | 2022-06-08 | 300 message2 | 2022-06-09 | 400 message2 | 2022-06-08 | 200 And my current setting is like this What do I need to add here t…

---

## [全文検索でヒットしないケースについて](https://discuss.elastic.co/t/topic/307615)

<div class="topic-metadata">

**Author:** [@zaru](https://discuss.elastic.co/u/zaru)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 8:00am UTC](https://discuss.elastic.co/t/topic/307615 "2022-06-20T08:00:14Z")

</div>

Elasticsearch v7 を利用しています。 kuromoji を使った日本語の全文検索を使っているのですが、特定のキーワードだとヒットしない状況です。なにか改善方法があるかアドバイス頂けると嬉しいです。 登録テキスト : 新松戸 (実際はこのワードを含む長文) データ型 : text kuromoji 設定 : デフォルトのまま 形態素解析 : 新松戸 (分割されない) 検索キーワード 新松戸 …

---

## [ECK Operator - unbound immediate PersistentVolumeClaims error](https://discuss.elastic.co/t/eck-operator-unbound-immediate-persistentvolumeclaims-error/307558)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 6\
**Last updated:** [June 20, 2022, 7:57am UTC](https://discuss.elastic.co/t/eck-operator-unbound-immediate-persistentvolumeclaims-error/307558 "2022-06-20T07:57:53Z")

</div>

I'm using below spec and as per documenation, the standard storageClassName should be available as standard. But getting error: Warning FailedScheduling 18s default-scheduler 0/1 nodes are available: 1 pod has un…

---

## [Split filter in Logstash gives NilClass error](https://discuss.elastic.co/t/split-filter-in-logstash-gives-nilclass-error/307498)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 7:41am UTC](https://discuss.elastic.co/t/split-filter-in-logstash-gives-nilclass-error/307498 "2022-06-20T07:41:25Z")

</div>

Hello, I'm trying to split JSON using the split filter in Logstash, but with no success. This data is coming straight from an API and then forwarded to the filter in Logstash. The structure of the JSON is the followi…

---

## [Error could not read configuration file /var/lib/elastic-agent/elastic-agent.yml](https://discuss.elastic.co/t/error-could-not-read-configuration-file-var-lib-elastic-agent-elastic-agent-yml/307612)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 7:06am UTC](https://discuss.elastic.co/t/error-could-not-read-configuration-file-var-lib-elastic-agent-elastic-agent-yml/307612 "2022-06-20T07:06:28Z")

</div>

how to install elastic-agent properly in centos? i just installed using rpm in my host is fine. and when i want to enroll in other agent has an error could not read configuration file /var/lib/elastic-agent/elastic-agent…

---

## [Issue with using Role that has Document level security enabled in indexing operation](https://discuss.elastic.co/t/issue-with-using-role-that-has-document-level-security-enabled-in-indexing-operation/307609)

<div class="topic-metadata">

**Author:** [@swapnil\_vaidya](https://discuss.elastic.co/u/swapnil_vaidya)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 6:48am UTC](https://discuss.elastic.co/t/issue-with-using-role-that-has-document-level-security-enabled-in-indexing-operation/307609 "2022-06-20T06:48:59Z")

</div>

Hi, I have scenario where multiple tenants are writing data into same index. I want to achieve data isolation for tenant using document level security. I have created role by adding query for document level security. …

---

## [Send different event to multiple output plugins in same config](https://discuss.elastic.co/t/send-different-event-to-multiple-output-plugins-in-same-config/307390)

<div class="topic-metadata">

**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 6:45am UTC](https://discuss.elastic.co/t/send-different-event-to-multiple-output-plugins-in-same-config/307390 "2022-06-20T06:45:33Z")

</div>

Hi Team, I have one pipeline with multiple output, elasticsearch and kafka. Now, the requirement is to sent a field to elasticsearch, but while sending to kafka that field needs to drop. Here my config says input is f…

---

## [Pls Help me I'm stuck over here](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601)

<div class="topic-metadata">

**Author:** [@Draco\_King](https://discuss.elastic.co/u/Draco_King)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 5:53am UTC](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601 "2022-06-20T05:53:04Z")

</div>

{"error":{"root\_cause":\[{"type":"not\_x\_content\_exception","reason":"Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes"}\],"type":"not\_x\_content\_exception","reason":"Compressor det…

---

## [Rally error when bulk-size=1](https://discuss.elastic.co/t/rally-error-when-bulk-size-1/306880)

<div class="topic-metadata">

**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 5:46am UTC](https://discuss.elastic.co/t/rally-error-when-bulk-size-1/306880 "2022-06-20T05:46:37Z")

</div>

I'm using Rally to simulate an Elasticsearch single node receiving logs on by one. The following parameter of track.json: "bulk-size": 1, "ingest-percentage": {{ingest\_percentage | default(100.0)}} Sho…

---

## [Import all table from sqlserver to elasticsearch](https://discuss.elastic.co/t/import-all-table-from-sqlserver-to-elasticsearch/307516)

<div class="topic-metadata">

**Author:** [@Khadija\_BOUDINAR](https://discuss.elastic.co/u/Khadija_BOUDINAR)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 5:41am UTC](https://discuss.elastic.co/t/import-all-table-from-sqlserver-to-elasticsearch/307516 "2022-06-20T05:41:54Z")

</div>

Can i imported my database with all tables sqlserver to Elasticsearch ?

---

## [Help with installing Filebeat ubuntu 20.04](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599)

<div class="topic-metadata">

**Author:** [@Badr\_Atouhlaten](https://discuss.elastic.co/u/Badr_Atouhlaten)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 5:06am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599 "2022-06-20T05:06:19Z")

</div>

Please help to understand how \[Filebeat\] works, i have elk stack installed with fleet server , system & fleet server integration installed in the stack i have an ubuntu 18.04 added as client and i wanted to monitor /ro…

---

## [Ingest Pipeline location](https://discuss.elastic.co/t/ingest-pipeline-location/307588)

<div class="topic-metadata">

**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 4:10am UTC](https://discuss.elastic.co/t/ingest-pipeline-location/307588 "2022-06-20T04:10:50Z")

</div>

Sorry if this should be in Kibana but I am looking to restore an earlier version of an ingest pipeline to compare it to the current but I cannot seem to figure out where it would have been stored. Are they kept in an ind…

---

## [Kibana not working](https://discuss.elastic.co/t/kibana-not-working/307595)

<div class="topic-metadata">

**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 2:25am UTC](https://discuss.elastic.co/t/kibana-not-working/307595 "2022-06-20T02:25:00Z")

</div>

Hi, My Elasticsearch is working at URL # https://172.20.192.1:9201 I am able to see Elasticsearch reply in CURL and browser. version # 8.2.3 Now, i have run Kibana, these are different errors i see ng\\chromium\\chrom…

---

## [Hunspell russian language. Problem with some grammar cases](https://discuss.elastic.co/t/hunspell-russian-language-problem-with-some-grammar-cases/307575)

<div class="topic-metadata">

**Author:** [@GrigoriyKrasovskiy](https://discuss.elastic.co/u/GrigoriyKrasovskiy)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 2:13am UTC](https://discuss.elastic.co/t/hunspell-russian-language-problem-with-some-grammar-cases/307575 "2022-06-20T02:13:36Z")

</div>

I use Elasticsearch 7.17.4 with docker and hunspell for russian language. My settings for index analysis: "analysis": { "filter": { "my\_stemmer": { "type": "stemmer", "language…

---

## [Kibana 8.2.3, When installed kibana it requires service access token for connection elastic search](https://discuss.elastic.co/t/kibana-8-2-3-when-installed-kibana-it-requires-service-access-token-for-connection-elastic-search/307561)

<div class="topic-metadata">

**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 1:35am UTC](https://discuss.elastic.co/t/kibana-8-2-3-when-installed-kibana-it-requires-service-access-token-for-connection-elastic-search/307561 "2022-06-20T01:35:33Z")

</div>

I installed elastic and kibana 8.2.3 with Java 17 on ubuntu. Firstly I putted Elasticsearch.username, Elasticsearch.password. But it returns error below . Then i tried generate service account token like this. P…

---

## [Visualize 수집 시간 관련 문의드립니다](https://discuss.elastic.co/t/visualize/307205)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 12:44am UTC](https://discuss.elastic.co/t/visualize/307205 "2022-06-20T00:44:23Z")

</div>

안녕하세요~! 디스크 쓰기 용량에 대한 정보를 수집해서 보여주고 있는데, 보시다시피 110TB나 되는 매우 많은 양의 데이터가 보여지는데요 이게 시간 범위 설정하는 부분이 저렇게 되어있다보니, 이게 하루 데이터인지 한달 데이터인지 1년 데이터인지 잘 모르겠습니다. 이게 얼마만큼의 기간의 데이터일까요? 저거를 저렇게 110TB씩이나 보여주지 않고, 1분 혹은 1시간 데이터만 보여줄…

---

## [Merging / Moving two different data paths on the same node](https://discuss.elastic.co/t/merging-moving-two-different-data-paths-on-the-same-node/307555)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 12:32am UTC](https://discuss.elastic.co/t/merging-moving-two-different-data-paths-on-the-same-node/307555 "2022-06-20T00:32:05Z")

</div>

When configuring a node, you can put multiple data paths in the configuration to spread the data across multiple drives, etc. If we were to upgrade our storage to a faster NVMe drive, how can we merge the two different …

---

## [Need to stop continuous logging of kibana](https://discuss.elastic.co/t/need-to-stop-continuous-logging-of-kibana/307157)

<div class="topic-metadata">

**Author:** [@Amy007](https://discuss.elastic.co/u/Amy007)\
**Replies:** 2\
**Last updated:** [June 19, 2022, 4:08pm UTC](https://discuss.elastic.co/t/need-to-stop-continuous-logging-of-kibana/307157 "2022-06-19T16:08:02Z")

</div>

Hi , After starting kibana in my windows machine, I see continuous logging of kibana on console. For eg., if i keep kibana open for 2 hours(without doing any operation at all), i see continuous logging for these 2 hours …

---

## [DSL - How to calculate a percentage value?](https://discuss.elastic.co/t/dsl-how-to-calculate-a-percentage-value/307584)

<div class="topic-metadata">

**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\
**Replies:** 1\
**Last updated:** [June 19, 2022, 3:53pm UTC](https://discuss.elastic.co/t/dsl-how-to-calculate-a-percentage-value/307584 "2022-06-19T15:53:42Z")

</div>

Hi guys, i'm trying to caclulate the relationship between two values, but i can't get the desired value. This is my (DSL) \_search: { "size": 0, "query": { "bool": { "filter": \[ {"term": {"h.cat": "o…

---

## [Kibana webhook watcher](https://discuss.elastic.co/t/kibana-webhook-watcher/306869)

<div class="topic-metadata">

**Author:** [@dee.lgp](https://discuss.elastic.co/u/dee.lgp)\
**Replies:** 2\
**Last updated:** [June 19, 2022, 11:54am UTC](https://discuss.elastic.co/t/kibana-webhook-watcher/306869 "2022-06-19T11:54:25Z")

</div>

''' Hi Team, I am getting the below error when I am trying to execute the webhook watcher. "actions": \[ { "id": "mw", "type": "webhook", "status": "failure", "error": { "root\_cause": \[ { "type": "socket\_timeou…

---

## [Elasticsearch index on blob](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951)

<div class="topic-metadata">

**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\
**Replies:** 5\
**Last updated:** [June 19, 2022, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951 "2022-06-19T11:48:11Z")

</div>

Is it possible to make a blob which is a compressed binary representation of a string, searchable?

---

## [Merge data neflow and snmp, see description ports in neflow](https://discuss.elastic.co/t/merge-data-neflow-and-snmp-see-description-ports-in-neflow/305580)

<div class="topic-metadata">

**Author:** [@dreshme](https://discuss.elastic.co/u/dreshme)\
**Replies:** 1\
**Last updated:** [June 19, 2022, 11:26am UTC](https://discuss.elastic.co/t/merge-data-neflow-and-snmp-see-description-ports-in-neflow/305580 "2022-06-19T11:26:57Z")

</div>

Hello I use ELK 7.17. I get data from filebeat netflow and snmp plugin. I don't know, how i can combine information about interfaces.ifAlias and interfaces.index received from snmp plugin and netflow.egress\_interface…

---

## [Data sent through APM server is not injecting number fields](https://discuss.elastic.co/t/data-sent-through-apm-server-is-not-injecting-number-fields/307389)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 6\
**Last updated:** [June 19, 2022, 9:22am UTC](https://discuss.elastic.co/t/data-sent-through-apm-server-is-not-injecting-number-fields/307389 "2022-06-19T09:22:28Z")

</div>

Kibana version : 7.17 Elasticsearch version : 7.17 APM Server version : 7.17 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se…

---

## [Elastic Search Add Ingest Timestamp and Calculate Lag](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576)

<div class="topic-metadata">

**Author:** [@divyank.gupta](https://discuss.elastic.co/u/divyank.gupta)\
**Replies:** 1\
**Last updated:** [June 18, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576 "2022-06-18T21:25:35Z")

</div>

Elasticsearch Experts, need your help to achieve below mention goal. Goal: Try to find a way to calculate lag between the time, log message was generated at application end (@timestamp field) and the time, it was ingest…

[Previous page](https://discuss.elastic.co/latest.md?page=1082)

[Next page](https://discuss.elastic.co/latest.md?page=1084)
