# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1101

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1102

---

## [2 Logstash for load balancing and avoid duplication](https://discuss.elastic.co/t/2-logstash-for-load-balancing-and-avoid-duplication/306501)

<div class="topic-metadata">

**Author:** [@Devraj\_patel](https://discuss.elastic.co/u/Devraj_patel)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 8:56pm UTC](https://discuss.elastic.co/t/2-logstash-for-load-balancing-and-avoid-duplication/306501 "2022-06-06T20:56:20Z")

</div>

Till now I was using only 1 server with logstash for sending syslog data to Elasticsearch. I am switching to 2 servers with logstash for load balancing and using f5 VIP, is there a way logstash from different instances c…

---

## [Bash: line 1: yum: command not found](https://discuss.elastic.co/t/bash-line-1-yum-command-not-found/306492)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 7:55pm UTC](https://discuss.elastic.co/t/bash-line-1-yum-command-not-found/306492 "2022-06-06T19:55:37Z")

</div>

Hello World! I'm trying to get started with Elastic Stack 7.17 by following: Running the Elastic Stack on Docker, yet running into this: % docker-compose -f create-certs.yml run --rm create\_certs \[+\] Running 2/0 ⠿ Ne…

---

## [Mysql vers elk - fleet/agent](https://discuss.elastic.co/t/mysql-vers-elk-fleet-agent/306213)

<div class="topic-metadata">

**Author:** [@Fabien\_b](https://discuss.elastic.co/u/Fabien_b)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 7:23pm UTC](https://discuss.elastic.co/t/mysql-vers-elk-fleet-agent/306213 "2022-06-06T19:23:34Z")

</div>

Bonjour, j'aimerai savoir si il est possible de suivre ce tutoriel mais de pouvoir gérer cela via fleet et l'installation d'un agent. J'ai potentiellement la manipulation a faire sur un paquet de serveur et j'ai pour l…

---

## [Error installing Fleet Server](https://discuss.elastic.co/t/error-installing-fleet-server/306216)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 6:54pm UTC](https://discuss.elastic.co/t/error-installing-fleet-server/306216 "2022-06-06T18:54:47Z")

</div>

Hi, My setup: Elasticsearch 8.1.0, Kibana 8.1.0, Elastic Agent 8.1.0 Downloaded elastic agent on my windows machine. Ran the following command: elastic-agent.exe install --fleet-server-es=https://localhost:9200 --fl…

---

## [Veterans Training portal](https://discuss.elastic.co/t/veterans-training-portal/306477)

<div class="topic-metadata">

**Author:** [@mwgonzalez](https://discuss.elastic.co/u/mwgonzalez)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 5:40pm UTC](https://discuss.elastic.co/t/veterans-training-portal/306477 "2022-06-06T17:40:28Z")

</div>

Hello, but Im a Veteran and A contractor. I recently got access to the Elastic training subscription for veterans. I got this because my work requires that we get certified to work on a product before we can get administ…

---

## [Error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"analyzer \[analyzer\_keyword\] not found for field](https://discuss.elastic.co/t/error-root-cause-type-mapper-parsing-exception-reason-analyzer-analyzer-keyword-not-found-for-field/306416)

<div class="topic-metadata">

**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\
**Replies:** 5\
**Last updated:** [June 6, 2022, 5:38pm UTC](https://discuss.elastic.co/t/error-root-cause-type-mapper-parsing-exception-reason-analyzer-analyzer-keyword-not-found-for-field/306416 "2022-06-06T17:38:26Z")

</div>

Hello Team, When I am creating new index I am getting below error "curl -X PUT \[localhost:9200/holly\_good\](http://localhost:9200/holly\_good) -H 'Content-Type: application/json' -d @new.json " but it gave below error …

---

## [HTTP Response 401 "Unauthorized" Using API\_KEY (MetricBeat --\> Kibana)](https://discuss.elastic.co/t/http-response-401-unauthorized-using-api-key-metricbeat-kibana/305462)

<div class="topic-metadata">

**Author:** [@Lokesh\_Sachdeva](https://discuss.elastic.co/u/Lokesh_Sachdeva)\
**Replies:** 6\
**Last updated:** [June 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/http-response-401-unauthorized-using-api-key-metricbeat-kibana/305462 "2022-06-06T16:41:32Z")

</div>

Hi Elastic Team We are trying to load data from Metricbeat to Kibana using API KEY. API Key is created and provided full superuser (elastic role) access. API KEY is able to authenticate into Elasticsearch but while con…

---

## [How to use data plugin inside custom plugin?](https://discuss.elastic.co/t/how-to-use-data-plugin-inside-custom-plugin/306481)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/how-to-use-data-plugin-inside-custom-plugin/306481 "2022-06-06T16:24:40Z")

</div>

I want to render some data of a CSV file or sample data which provided by elastic search inside a custom plugin using data plugin I find this but couldn't able to get most out of it DashBoard plugin also used data plug…

---

## [Phrase Suggester Filter Docs](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479)

<div class="topic-metadata">

**Author:** [@Akka\_Tips](https://discuss.elastic.co/u/Akka_Tips)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479 "2022-06-06T16:03:48Z")

</div>

Hey, I'm trying to work out a way of filtering documents before the phrase suggester is fired. I have tried to use the collate functionality but this doesn't seem to achieve it as it only checks whether something is in t…

---

## [Unable to load software.log into elasticsearch](https://discuss.elastic.co/t/unable-to-load-software-log-into-elasticsearch/306309)

<div class="topic-metadata">

**Author:** [@Chandrapaul](https://discuss.elastic.co/u/Chandrapaul)\
**Replies:** 7\
**Last updated:** [June 6, 2022, 3:18pm UTC](https://discuss.elastic.co/t/unable-to-load-software-log-into-elasticsearch/306309 "2022-06-06T15:18:49Z")

</div>

I'm trying to load software logs from zeek into Elasticsearch. But if I run filebeat after adding software log path to zeek.yml in filebeat then I'm getting error : "Exiting: Failed to start crawler: creating module re…

---

## [How to decode html file in heartbeat/filebeat](https://discuss.elastic.co/t/how-to-decode-html-file-in-heartbeat-filebeat/306232)

<div class="topic-metadata">

**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\
**Replies:** 5\
**Last updated:** [June 2, 2022, 6:33pm UTC](https://discuss.elastic.co/t/how-to-decode-html-file-in-heartbeat-filebeat/306232 "2022-06-02T18:33:32Z")

</div>

Hi All, I have tried decoding XML file using decode\_xml processor in both heartbeat and filebeat and it worked as expected. Now I would like to decode html file. I didn't find a way to do that. Could you please sugges…

---

## [GeoSpatial Data for Maps](https://discuss.elastic.co/t/geospatial-data-for-maps/306441)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 2:59pm UTC](https://discuss.elastic.co/t/geospatial-data-for-maps/306441 "2022-06-06T14:59:51Z")

</div>

Hi, I have a flat file that has country and region. With this as a start point, how do I convert this data to geospatial fields for maps? When I use the current index pattern created from this file to create a map, it …

---

## [How can I move/migrate part of my data to a new cluster?](https://discuss.elastic.co/t/how-can-i-move-migrate-part-of-my-data-to-a-new-cluster/305289)

<div class="topic-metadata">

**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 2:59pm UTC](https://discuss.elastic.co/t/how-can-i-move-migrate-part-of-my-data-to-a-new-cluster/305289 "2022-06-06T14:59:03Z")

</div>

Hi, I have an ES cluster that runs on version 6.8.23 and I have a new cluster that runs version 7.17.1. I want to migrate data not older than 1 year to my new cluster. Is this possible? How can I do it?

---

## [How to monitor beats using metricbeat module with autodiscover](https://discuss.elastic.co/t/how-to-monitor-beats-using-metricbeat-module-with-autodiscover/306060)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 2:48pm UTC](https://discuss.elastic.co/t/how-to-monitor-beats-using-metricbeat-module-with-autodiscover/306060 "2022-06-06T14:48:52Z")

</div>

I have setup metricbeats to monitor Elasticsearch and kibana which work fine. However i want to to add the module "beats" to monitor filebeat etc. Beat module | Metricbeat Reference \[8.2\] | Elastic Note that i set http…

---

## [Pie visualization "Other" category misplaced](https://discuss.elastic.co/t/pie-visualization-other-category-misplaced/305815)

<div class="topic-metadata">

**Author:** [@dan3](https://discuss.elastic.co/u/dan3)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 1:40pm UTC](https://discuss.elastic.co/t/pie-visualization-other-category-misplaced/305815 "2022-06-06T13:40:32Z")

</div>

Hi, I recently updated to Kibana 8.2.0 and I noticed that all my pie chart visualizations that have an "Other" category (when selecting "Group other values in separate bucket") started showing up in a different place - …

---

## [PHP APM Agent, Custom Labels are not captured](https://discuss.elastic.co/t/php-apm-agent-custom-labels-are-not-captured/305414)

<div class="topic-metadata">

**Author:** [@vasudeva](https://discuss.elastic.co/u/vasudeva)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 1:39pm UTC](https://discuss.elastic.co/t/php-apm-agent-custom-labels-are-not-captured/305414 "2022-06-06T13:39:08Z")

</div>

Kibana version:7.17.0 Elasticsearch version:7.17.0 APM Server version:7.17.0 APM Agent language and version:PHP 1.3.1 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and ve…

---

## [Remote Server is not ready to accept connections](https://discuss.elastic.co/t/remote-server-is-not-ready-to-accept-connections/305911)

<div class="topic-metadata">

**Author:** [@ttss15](https://discuss.elastic.co/u/ttss15)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 1:23pm UTC](https://discuss.elastic.co/t/remote-server-is-not-ready-to-accept-connections/305911 "2022-06-06T13:23:47Z")

</div>

Hello, I am trying to set up fleet-managed agents on an air-gapped environment. The elastic package registry is up and running. Fleet server is also running and healthy. If I try to enroll an agent on a machine that is …

---

## [Multi Term aggregation on nested fields](https://discuss.elastic.co/t/multi-term-aggregation-on-nested-fields/306452)

<div class="topic-metadata">

**Author:** [@EL\_MOGHERBI\_MOHAMMED](https://discuss.elastic.co/u/EL_MOGHERBI_MOHAMMED)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 1:05pm UTC](https://discuss.elastic.co/t/multi-term-aggregation-on-nested-fields/306452 "2022-06-06T13:05:27Z")

</div>

hello, i want to aggregate on a multiple nested fields is there any way to do it here is my mapping: { "mappings": { "\_data\_stream\_timestamp": { "enabled": true }, …

---

## [How to change the default size of MultiTermAggregation in Java](https://discuss.elastic.co/t/how-to-change-the-default-size-of-multitermaggregation-in-java/306424)

<div class="topic-metadata">

**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 1:04pm UTC](https://discuss.elastic.co/t/how-to-change-the-default-size-of-multitermaggregation-in-java/306424 "2022-06-06T13:04:55Z")

</div>

I was wondering if there is a way to change the default size in MultiTermAggregation in Java, I can change the default size in dev tools in kibana, but cannot change the size in java. Query look like this GET test\_in…

---

## [How to tag AWS loadbalancer for Kibana](https://discuss.elastic.co/t/how-to-tag-aws-loadbalancer-for-kibana/306446)

<div class="topic-metadata">

**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 12:57pm UTC](https://discuss.elastic.co/t/how-to-tag-aws-loadbalancer-for-kibana/306446 "2022-06-06T12:57:46Z")

</div>

Hello, i am trying to deploy Kibana using eck operator. And i want for loadbalancer which is created by eks to have tags. For regular service i would add tags with annotation like this annotations: service.beta.kub…

---

## [Problem with indexing event their time in timestamp beginning with no zero](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341)

<div class="topic-metadata">

**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Replies:** 3\
**Last updated:** [June 6, 2022, 12:46pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341 "2022-06-06T12:46:13Z")

</div>

Hi, I have Oracle DB logs which have standard ISO8601 timestamp (yyyy-MM-ddTHH:mm:ss.SSSSSSZ). I have date filter filter { date { match =\> \[ "log\_timestamp", "ISO8601" \] } } But to the Elasticsearch are index…

---

## [Metricbeat dosen't show metrics on Kibana](https://discuss.elastic.co/t/metricbeat-dosent-show-metrics-on-kibana/306448)

<div class="topic-metadata">

**Author:** [@alexander2](https://discuss.elastic.co/u/alexander2)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 12:37pm UTC](https://discuss.elastic.co/t/metricbeat-dosent-show-metrics-on-kibana/306448 "2022-06-06T12:37:33Z")

</div>

Hello everyone, i'm having trouble seeing the metrics on my kibana dashboard. I have ELK deployed on my kubernetes cluster and a remote virtual machine (centos 8) which i installed metricbeat. i changed the output to lo…

---

## [Send Weblogic data into Elasticsearch](https://discuss.elastic.co/t/send-weblogic-data-into-elasticsearch/306444)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 12:22pm UTC](https://discuss.elastic.co/t/send-weblogic-data-into-elasticsearch/306444 "2022-06-06T12:22:51Z")

</div>

Hello team, We are using below code to send data to Elasticsearch from weblogic as per mentioned in below URL, but we are not getting any data. Elasticsearch URL: https://localhost:9200 username: elastic password: el…

---

## [Kbn-monaco find method not found](https://discuss.elastic.co/t/kbn-monaco-find-method-not-found/306443)

<div class="topic-metadata">

**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 11:41am UTC](https://discuss.elastic.co/t/kbn-monaco-find-method-not-found/306443 "2022-06-06T11:41:17Z")

</div>

Hello everyone, It seems that the version of monaco offered by Kibana 7.16.3 doesn't have "actions.find" when executing editor.getSupportedActions(). Is there any method to trigger the actions.find ? Thanks

---

## [Not able to fetch data from oracle database using jdbc plugin](https://discuss.elastic.co/t/not-able-to-fetch-data-from-oracle-database-using-jdbc-plugin/306442)

<div class="topic-metadata">

**Author:** [@Kishan3176](https://discuss.elastic.co/u/Kishan3176)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 11:26am UTC](https://discuss.elastic.co/t/not-able-to-fetch-data-from-oracle-database-using-jdbc-plugin/306442 "2022-06-06T11:26:03Z")

</div>

Hi All, I am new to logstash. There was a requirement where client want to monitor few database servers using logstash and sentinel. I am able to connect to Sentinel but I am not able to fetch data from oracle databas…

---

## [TSVB Annotations -](https://discuss.elastic.co/t/tsvb-annotations/306050)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 5\
**Last updated:** [June 6, 2022, 11:19am UTC](https://discuss.elastic.co/t/tsvb-annotations/306050 "2022-06-06T11:19:52Z")

</div>

Hi, Under annotations in a TSVB graph, the query field allows a scripted field to be used. However the 'row template required' box does not allow a scripted field. Hence the values on the graph are showing incorrect num…

---

## [Magento2: Elasticsearch failed to start: problem with java](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321)

<div class="topic-metadata">

**Author:** [@Konstantina\_Gerou](https://discuss.elastic.co/u/Konstantina_Gerou)\
**Replies:** 11\
**Last updated:** [June 6, 2022, 11:19am UTC](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321 "2022-06-06T11:19:07Z")

</div>

Hello, I've installed Magento2.4.4 in ubuntu20.04 VM. When i did the installation everything was fine. Now I am facing a failure . I tried almost everything to fix it, but nothing. Here is the output: Also in the E…

---

## [The following indices are missing the timestamp override field "event.ingested":](https://discuss.elastic.co/t/the-following-indices-are-missing-the-timestamp-override-field-event-ingested/306439)

<div class="topic-metadata">

**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 11:04am UTC](https://discuss.elastic.co/t/the-following-indices-are-missing-the-timestamp-override-field-event-ingested/306439 "2022-06-06T11:04:25Z")

</div>

Hi, I have duplicated the "Potential Disabling of SELinux" rule, exported it and imported it again to add my custom index pattern (selinux\_index) by editing the NDJSON file. However I am getting the following warning an…

---

## [Elastic APM service discovery not working with public API](https://discuss.elastic.co/t/elastic-apm-service-discovery-not-working-with-public-api/305448)

<div class="topic-metadata">

**Author:** [@avinashupadhyaya](https://discuss.elastic.co/u/avinashupadhyaya)\
**Replies:** 7\
**Last updated:** [June 6, 2022, 11:00am UTC](https://discuss.elastic.co/t/elastic-apm-service-discovery-not-working-with-public-api/305448 "2022-06-06T11:00:34Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Creating Visualization with Aggregation](https://discuss.elastic.co/t/creating-visualization-with-aggregation/306069)

<div class="topic-metadata">

**Author:** [@coolUser445](https://discuss.elastic.co/u/coolUser445)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 10:24am UTC](https://discuss.elastic.co/t/creating-visualization-with-aggregation/306069 "2022-06-06T10:24:00Z")

</div>

Hello, I have data of the following form: Person : Products Ordered Bob : \["Apples", "Oranges"\] Alice : \["Mangos", "Milk", "Tomatoes"\] Bob : \["Apples", "Bananas",…

[Previous page](https://discuss.elastic.co/latest.md?page=1100)

[Next page](https://discuss.elastic.co/latest.md?page=1102)
