# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1111

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1112

---

## [Script exception runtime error](https://discuss.elastic.co/t/script-exception-runtime-error/305689)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 3:07pm UTC](https://discuss.elastic.co/t/script-exception-runtime-error/305689 "2022-05-30T15:07:19Z")

</div>

Hi there, i have created scripted field for one of my index and here is the script: def path = doc\['request\_id.keyword'\].value; if (path != null) { def first = path.indexOf("\_"); def second = first + 1 + pat…

---

## [Elastic Master Nodes not discovered exception on ECK](https://discuss.elastic.co/t/elastic-master-nodes-not-discovered-exception-on-eck/305929)

<div class="topic-metadata">

**Author:** [@adityasinghal26](https://discuss.elastic.co/u/adityasinghal26)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elastic-master-nodes-not-discovered-exception-on-eck/305929 "2022-05-30T15:06:39Z")

</div>

Hi, We have a 2 node cluster which has all master, data, ingest and ml roles. This ECK setup is deployed using Oracle Cloud for Kubernetes Engine (OKE). Recently, we were trying to upgrade the Kubernetes version on OKE…

---

## [Filebeat unable to recognize the colorful file content](https://discuss.elastic.co/t/filebeat-unable-to-recognize-the-colorful-file-content/305921)

<div class="topic-metadata">

**Author:** [@sujeetkp](https://discuss.elastic.co/u/sujeetkp)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 2:54pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-recognize-the-colorful-file-content/305921 "2022-05-30T14:54:29Z")

</div>

I am trying to read a log file using filebeat. The log file looks as below. When filebeat reads it, it is displaying some special characters as below. Looks like filebeat is not able to recognize/ignore the color…

---

## [Localhost:9200 error when installing](https://discuss.elastic.co/t/localhost-9200-error-when-installing/305965)

<div class="topic-metadata">

**Author:** [@Merveille\_Kimfuta](https://discuss.elastic.co/u/Merveille_Kimfuta)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 2:19pm UTC](https://discuss.elastic.co/t/localhost-9200-error-when-installing/305965 "2022-05-30T14:19:42Z")

</div>

Hello everyone, I am trying to install ELK using this tutorial https://www.youtube.com/watch?v=4BtAuGcUjCo but i am stuck at a message error when typing localhost:9200 on the web. Can someone have any idea how I can ove…

---

## [Rename Kibana space id](https://discuss.elastic.co/t/rename-kibana-space-id/305941)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 2:19pm UTC](https://discuss.elastic.co/t/rename-kibana-space-id/305941 "2022-05-30T14:19:35Z")

</div>

Hi, I want to rename space name and id in Kibana. I noticed that using update API we can rename the space but not the space id. And if I rename the space, the dashboard title still displays the space id. So my question …

---

## [Logstash password and username authentication](https://discuss.elastic.co/t/logstash-password-and-username-authentication/305786)

<div class="topic-metadata">

**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 2:15pm UTC](https://discuss.elastic.co/t/logstash-password-and-username-authentication/305786 "2022-05-30T14:15:12Z")

</div>

Hi guys, I was searching in the documentation a way to authenticate a client, for example a metricbeat, into a logstash pipeline using an username and a password, but i couldn't find any option for this. Is there any c…

---

## [Secure between Logstash and Filebeat - File does not contain valid private key](https://discuss.elastic.co/t/secure-between-logstash-and-filebeat-file-does-not-contain-valid-private-key/305806)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 1:20pm UTC](https://discuss.elastic.co/t/secure-between-logstash-and-filebeat-file-does-not-contain-valid-private-key/305806 "2022-05-30T13:20:59Z")

</div>

I am trying to secure between Filebeat and Logstash. However, I do encounter some difficulties. Without SSL the connection does work. First I created with the Elasticsearch-certuitil a CA. C:\\PATH\\elasticsearch-8.0.1\>b…

---

## [Inconsistent results when searching/deleting documents containing quotes](https://discuss.elastic.co/t/inconsistent-results-when-searching-deleting-documents-containing-quotes/305698)

<div class="topic-metadata">

**Author:** [@bizmate](https://discuss.elastic.co/u/bizmate)\
**Replies:** 8\
**Last updated:** [May 30, 2022, 1:02pm UTC](https://discuss.elastic.co/t/inconsistent-results-when-searching-deleting-documents-containing-quotes/305698 "2022-05-30T13:02:11Z")

</div>

ES question in my document i have .... "message": "10.42.224.236 - 26/May/2022:06:15:58 +0000 "GET /index.php" 200" and i would like to match from GET to 200. If i query with GET /index\_prod\*/\_search { "query": …

---

## [Elastic Security - APIs on Resolver](https://discuss.elastic.co/t/elastic-security-apis-on-resolver/305958)

<div class="topic-metadata">

**Author:** [@inf](https://discuss.elastic.co/u/inf)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 12:59pm UTC](https://discuss.elastic.co/t/elastic-security-apis-on-resolver/305958 "2022-05-30T12:59:00Z")

</div>

Hi there, I am trying to find out more about resolver-related APIs for Elastic Security, as I was not able to find any information about them from this page. These 3 HTTP requests were made (in the same order below) wh…

---

## [ElasticSearch.Net Package issue on the Framework 4.8](https://discuss.elastic.co/t/elasticsearch-net-package-issue-on-the-framework-4-8/305950)

<div class="topic-metadata">

**Author:** [@Gopinath\_Basker](https://discuss.elastic.co/u/Gopinath_Basker)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-net-package-issue-on-the-framework-4-8/305950 "2022-05-30T12:35:09Z")

</div>

Hi Team, We have Elasticsearch 7.17.3 and tried to query the information. for that we used NEST package 7.15.0 but we faced issue while querying Issue is "Elasticsearch.Net.Utf8Json.JsonParsingException: expected:'Str…

---

## [Trace Ids not added on uncaught exceptions - ecsFormat()?](https://discuss.elastic.co/t/trace-ids-not-added-on-uncaught-exceptions-ecsformat/305947)

<div class="topic-metadata">

**Author:** [@Alexsander\_Pereira](https://discuss.elastic.co/u/Alexsander_Pereira)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 12:29pm UTC](https://discuss.elastic.co/t/trace-ids-not-added-on-uncaught-exceptions-ecsformat/305947 "2022-05-30T12:29:51Z")

</div>

Trace Ids not added on uncaught exceptions? When using ECSFormat with winston I don't have TraceIds (transaction.id e etc...) information in uncaught Exceptions. elastic/ecs-logging-nodejs#124 import { createLogger, f…

---

## [Duplicated fields in analyze response object when analyzing korean with nori\_tokenizer](https://discuss.elastic.co/t/duplicated-fields-in-analyze-response-object-when-analyzing-korean-with-nori-tokenizer/305943)

<div class="topic-metadata">

**Author:** [@maruoovv](https://discuss.elastic.co/u/maruoovv)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 12:05pm UTC](https://discuss.elastic.co/t/duplicated-fields-in-analyze-response-object-when-analyzing-korean-with-nori-tokenizer/305943 "2022-05-30T12:05:49Z")

</div>

Hi, i'm analyzing korean keyword with nori tokenizer and synonym\_graph, i found some field is duplicated in analyze response object. Elasticsearch version : 7.1.1 index settings PUT /test-index { "settings" : { "a…

---

## [Logstash consuming too many resources](https://discuss.elastic.co/t/logstash-consuming-too-many-resources/305201)

<div class="topic-metadata">

**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\
**Replies:** 2\
**Last updated:** [May 20, 2022, 6:47am UTC](https://discuss.elastic.co/t/logstash-consuming-too-many-resources/305201 "2022-05-20T06:47:13Z")

</div>

Logstash is consuming a lot of memory and there are many hanging processes redirecting output to temporary files that seem to be no longer available. Example of one process: root Ss May01 0:00 sh -c /sbin/blkid \>\>/…

---

## [Authenticate Elasticsearch \<--\> Kibana Client Communication (xpack.security.http.ssl.client\_authentication)s](https://discuss.elastic.co/t/authenticate-elasticsearch-kibana-client-communication-xpack-security-http-ssl-client-authentication-s/305038)

<div class="topic-metadata">

**Author:** [@Lokesh\_Sachdeva](https://discuss.elastic.co/u/Lokesh_Sachdeva)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 10:30am UTC](https://discuss.elastic.co/t/authenticate-elasticsearch-kibana-client-communication-xpack-security-http-ssl-client-authentication-s/305038 "2022-05-30T10:30:04Z")

</div>

Hi Team We are configuring ELK Docker 8.0.0 in our system with SSL Configuration. List item SSL Authentication Between Kibana & End User (Host Machine): Its working fine with Elasticsearch generated CA. Kibana is run…

---

## [How to calculate & draw metrics of scripted metrics](https://discuss.elastic.co/t/how-to-calculate-draw-metrics-of-scripted-metrics/305281)

<div class="topic-metadata">

**Author:** [@ultimate](https://discuss.elastic.co/u/ultimate)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 10:07am UTC](https://discuss.elastic.co/t/how-to-calculate-draw-metrics-of-scripted-metrics/305281 "2022-05-30T10:07:26Z")

</div>

Problem description we have log files from different devices parsed into our Elasticsearch database, line by line. The log files are built as a ring buffer, so they always have a fixed size of 1000 lines. They can be man…

---

## [Delete child document without parent](https://discuss.elastic.co/t/delete-child-document-without-parent/305745)

<div class="topic-metadata">

**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\
**Replies:** 5\
**Last updated:** [May 30, 2022, 10:05am UTC](https://discuss.elastic.co/t/delete-child-document-without-parent/305745 "2022-05-30T10:05:08Z")

</div>

i want to delete the child document in the index with out parent .i want delete query for this

---

## [External access to ElasticSearch cluster](https://discuss.elastic.co/t/external-access-to-elasticsearch-cluster/305833)

<div class="topic-metadata">

**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 10:04am UTC](https://discuss.elastic.co/t/external-access-to-elasticsearch-cluster/305833 "2022-05-30T10:04:00Z")

</div>

Using Install Elasticsearch with Docker | Elasticsearch Guide \[8.11\] | Elastic I can easily setup a 3-node cluster on a single host, with docker-compose. This is all fine if I just use ES via the included Kibana contai…

---

## [How to transmitting data from logstash to pubsub lite](https://discuss.elastic.co/t/how-to-transmitting-data-from-logstash-to-pubsub-lite/305930)

<div class="topic-metadata">

**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 9:54am UTC](https://discuss.elastic.co/t/how-to-transmitting-data-from-logstash-to-pubsub-lite/305930 "2022-05-30T09:54:34Z")

</div>

Hi Team, is there any plugin or way to transmitting data from logstash to pubsublite. i have used the ' logstash-output-google\_pubsub' but didn't work for pub/sub lite.

---

## [Kibana reloads while updating query](https://discuss.elastic.co/t/kibana-reloads-while-updating-query/305370)

<div class="topic-metadata">

**Author:** [@gora](https://discuss.elastic.co/u/gora)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 9:46am UTC](https://discuss.elastic.co/t/kibana-reloads-while-updating-query/305370 "2022-05-30T09:46:14Z")

</div>

Hi Team, Am using kibana from version 5.6.4 recently i have upgraded to 7.13.0 version. Am facing reload issue while updating the query. Before version 7.x.x when i change the time duration and click refresh only the wid…

---

## [Failed to get API Group-Resources](https://discuss.elastic.co/t/failed-to-get-api-group-resources/261548)

<div class="topic-metadata">

**Author:** [@karasamil](https://discuss.elastic.co/u/karasamil)\
**Replies:** 4\
**Last updated:** [May 30, 2022, 9:40am UTC](https://discuss.elastic.co/t/failed-to-get-api-group-resources/261548 "2022-05-30T09:40:59Z")

</div>

I am trying to deploy Elastic Cloud on kubernetes. When I first tryed i have managed to start elasticsearch on kubernetes cluster. But now for some reason, when i try to deploy same quickstart elasticsearch it never even…

---

## ['Latest' Transform job not refreshing all docs in the destination index](https://discuss.elastic.co/t/latest-transform-job-not-refreshing-all-docs-in-the-destination-index/305720)

<div class="topic-metadata">

**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\
**Replies:** 5\
**Last updated:** [May 30, 2022, 9:38am UTC](https://discuss.elastic.co/t/latest-transform-job-not-refreshing-all-docs-in-the-destination-index/305720 "2022-05-30T09:38:02Z")

</div>

Hi, I'm new to Transforms. I have a Powershell script that every hour gathers VMware virtual machine capacity metrics (cpu, memory and such) from vCenter and stores them in an index: virtualisation-vm-yyyy-MM I've crea…

---

## [Migrate ECK data from one k8s cluster to another](https://discuss.elastic.co/t/migrate-eck-data-from-one-k8s-cluster-to-another/305790)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 9:37am UTC](https://discuss.elastic.co/t/migrate-eck-data-from-one-k8s-cluster-to-another/305790 "2022-05-30T09:37:41Z")

</div>

Im trying to migrate ECK data from one k8s cluster to k8s another. Im aware i can take snapshots and restore them, but does anyone know if there is a way i can sync data between one cluster and another? So there is no d…

---

## [Collectd - Logstash not working](https://discuss.elastic.co/t/collectd-logstash-not-working/305632)

<div class="topic-metadata">

**Author:** [@John\_Murray1](https://discuss.elastic.co/u/John_Murray1)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 9:06am UTC](https://discuss.elastic.co/t/collectd-logstash-not-working/305632 "2022-05-30T09:06:51Z")

</div>

Hey, Apologies if this has come up before, I am new to Elastic Stack. This was working but stopped after about 4 Hrs. I am collecting SNMP data with collectd and sending it to logstash, but its not processing any more…

---

## [Number\_of\_replicas is 1 for new indices, even in the template is set to 0](https://discuss.elastic.co/t/number-of-replicas-is-1-for-new-indices-even-in-the-template-is-set-to-0/305686)

<div class="topic-metadata">

**Author:** [@Daniel\_Rinzis](https://discuss.elastic.co/u/Daniel_Rinzis)\
**Replies:** 2\
**Last updated:** [May 30, 2022, 9:03am UTC](https://discuss.elastic.co/t/number-of-replicas-is-1-for-new-indices-even-in-the-template-is-set-to-0/305686 "2022-05-30T09:03:41Z")

</div>

Hello! Why is the number\_of\_replicas 1 for new indices in the cluster even though if I use GET \_template the number appears to be 0? "settings" : { "index" : { "refresh\_interval" : "30s", …

---

## [Declaring Variables in Logstash Config File](https://discuss.elastic.co/t/declaring-variables-in-logstash-config-file/305826)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 8:59am UTC](https://discuss.elastic.co/t/declaring-variables-in-logstash-config-file/305826 "2022-05-30T08:59:46Z")

</div>

I am repeating a string (let's "abc-123") in my Logstash config file multiple times. I want to declare it as a variable at the start of config file and call this variable where required. Something like: var my\_str = "ab…

---

## [Elastic APM 8.2 in kubernetes](https://discuss.elastic.co/t/elastic-apm-8-2-in-kubernetes/305755)

<div class="topic-metadata">

**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 8:58am UTC](https://discuss.elastic.co/t/elastic-apm-8-2-in-kubernetes/305755 "2022-05-30T08:58:27Z")

</div>

We are trying to instal APM server 8.2 to trace our applications. AS APM Server standalone is deprecated, trying to get APM server running in our kubernetes cluster. Could you provide sample YAML to run APM integration i…

---

## [Logstash file input check\_archive\_validity behaviour question](https://discuss.elastic.co/t/logstash-file-input-check-archive-validity-behaviour-question/305919)

<div class="topic-metadata">

**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Replies:** 0\
**Last updated:** [May 30, 2022, 8:55am UTC](https://discuss.elastic.co/t/logstash-file-input-check-archive-validity-behaviour-question/305919 "2022-05-30T08:55:01Z")

</div>

Hi, I recently migrated to logstash/logstash:6.8.23 docker image, to benefit from the archive checking setting... I see repeated logs about corrupted archives, but cannot figure out if they apply to the same filepath (…

---

## [How to avoid “failed to find nested object under path” on Kibana?](https://discuss.elastic.co/t/how-to-avoid-failed-to-find-nested-object-under-path-on-kibana/303257)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 5\
**Last updated:** [May 30, 2022, 8:48am UTC](https://discuss.elastic.co/t/how-to-avoid-failed-to-find-nested-object-under-path-on-kibana/303257 "2022-05-30T08:48:35Z")

</div>

Hi, I have a Kibana dashboard which contains many widgets. The widgets displays data from multiple indices lets say index1 and index2. When I try to filter data by nested field for index1 using KQL I get 'failed to find…

---

## [DataNodeの稼働中にレプリカ数の設定を変更した際の挙動について](https://discuss.elastic.co/t/datanode/305761)

<div class="topic-metadata">

**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\
**Replies:** 4\
**Last updated:** [May 30, 2022, 8:28am UTC](https://discuss.elastic.co/t/datanode/305761 "2022-05-30T08:28:33Z")

</div>

Elasticsearch のDataNodeが稼働中にレプリカ数の設定を変更した際の挙動についてご教授いただけないでしょうか ＜実現したいこと＞ AWS上に以下の構成でDataNodeを作成した際に、レプリカ数を2個に設定しています。 Elasticsearch のバージョンは7.10です。 AZ：3つ Node：6台 3つの各AZにはNodeの数が均等になるように2台ずつ配置されています。 また、３つの各AZには「プラ…

---

## [Kibana Visual Library Controls](https://discuss.elastic.co/t/kibana-visual-library-controls/305767)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [May 30, 2022, 8:18am UTC](https://discuss.elastic.co/t/kibana-visual-library-controls/305767 "2022-05-30T08:18:27Z")

</div>

Hi, In the Controls section of the Visual library is it possible to rearrange the order of the controls? E.g. in the added controls in the screenshot, I want to get the product related filters in one line. Thanks

[Previous page](https://discuss.elastic.co/latest.md?page=1110)

[Next page](https://discuss.elastic.co/latest.md?page=1112)
