# Latest **URL:** https://discuss.elastic.co/latest.md?page=1149 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1150 --- ## [What's coming in Elastic Workplace Search 8.2?](https://discuss.elastic.co/t/whats-coming-in-elastic-workplace-search-8-2/302659)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 5\ **Last updated:** [May 3, 2022, 4:18am UTC](https://discuss.elastic.co/t/whats-coming-in-elastic-workplace-search-8-2/302659 "2022-05-03T04:18:11Z")
I've heard some rumors and I want to know, whats coming in 8.2? Are AppSearch and Workplace Search being merged in any way? Are any new connectors coming? If so, which? --- ## [Http input does not result in the expected number of documents](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797)
**Author:** [@hughjarse](https://discuss.elastic.co/u/hughjarse)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 3:32am UTC](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797 "2022-05-03T03:32:49Z")
Hi. I would like ideas about what Logstash functionality I can use to troubleshoot a problem I'm experiencing with the http input plugin. Problem My http input does not seem to receive?/process? the expected number of e… --- ## [Unexpected error handling request. java.lang.RuntimeException: Fielddata is disabled on text fields by default. Set fielddata=true on \[traceId\] in order to load fielddata in memory by uninverting the inverted index](https://discuss.elastic.co/t/unexpected-error-handling-request-java-lang-runtimeexception-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-traceid-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/303776)
**Author:** [@Akhil\_Manepalli](https://discuss.elastic.co/u/Akhil_Manepalli)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 2:31am UTC](https://discuss.elastic.co/t/unexpected-error-handling-request-java-lang-runtimeexception-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-traceid-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/303776 "2022-05-03T02:31:27Z")
My elastic deployments consist of es-data, ingest & master. These are deployed as deployments in Kubernetes. I have Zipkin which uses elastic and Zipkin log shows the above error: : Unexpected error handling request. j… --- ## [Elastic Agent Standalone Configuration Input types logFile and filestream difference](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-input-types-logfile-and-filestream-difference/303773)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 8:16pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-input-types-logfile-and-filestream-difference/303773 "2022-05-02T20:16:44Z")
Elastic agent reference config file: Trying to setup standalone agent. came across few questions: In the inputs section, I have type as logFile and filestream, would like to know the difference and when to use which… --- ## [Applying platinum license in deployment config](https://discuss.elastic.co/t/applying-platinum-license-in-deployment-config/303743)
**Author:** [@seb.sch](https://discuss.elastic.co/u/seb.sch)\ **Replies:** 1\ **Last updated:** [May 3, 2022, 12:33am UTC](https://discuss.elastic.co/t/applying-platinum-license-in-deployment-config/303743 "2022-05-03T00:33:46Z")
Hello, as of December 2020, it was not possible to apply the license in the deployment on a OpenShift/Kubernetes cluster (see: Applying platinum license in Kubernetes - Elastic Stack / Elasticsearch - Discuss the Elasti… --- ## [Node not discovering master node properly, "Cluster state has not been recovered yet, cannot write to the \[null\] index" error \[503\]](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692)
**Author:** [@dheist](https://discuss.elastic.co/u/dheist)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 12:32am UTC](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692 "2022-05-03T00:32:29Z")
Hello, I have 2 servers in 2 different locations I am trying to make into a cluster. Both are running Elasticsearch v8.1.3. I have the master server, which is configured like this: cluster.name: yyz-news-prod node.name… --- ## [Using a colon in a field name does not work?](https://discuss.elastic.co/t/using-a-colon-in-a-field-name-does-not-work/303143)
**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 12:25am UTC](https://discuss.elastic.co/t/using-a-colon-in-a-field-name-does-not-work/303143 "2022-05-03T00:25:25Z")
I have the following as part of my mapping file: "entities.name1:Name2": { "type": "nested" }, But the field does not actually end up nested in the index. Is there a problem with the use of colons as part… --- ## [Elastic Meetup: A New Machine Learning Approach for Troubleshooting with the Elastic Stack](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782)
**Author:** [@ZeMatt](https://discuss.elastic.co/u/ZeMatt)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 10:12pm UTC](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782 "2022-05-02T22:12:33Z")
Hello Everyone, we're having an in-person meetup hosted by Elastic in Mountain View. Food & drink will be provided. A New Machine Learning Approach for Troubleshooting with the Elastic Stack, Wed, May 11, 2022, 5:00 PM |… --- ## [Grok pattern for date format](https://discuss.elastic.co/t/grok-pattern-for-date-format/302923)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 9:26pm UTC](https://discuss.elastic.co/t/grok-pattern-for-date-format/302923 "2022-05-02T21:26:39Z")
Hi, I am looking to ingest a custom set of logs and i need some help with a grok date format. I would like to convert the following date as the timestamp 19 April 2022 15:38:20 Any help would be appreciated. I have be… --- ## [Filebeat and Fortinet](https://discuss.elastic.co/t/filebeat-and-fortinet/303397)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 8:56pm UTC](https://discuss.elastic.co/t/filebeat-and-fortinet/303397 "2022-05-02T20:56:49Z")
Blockquote Hello. Filebeat seems to have built in Index patterns and templates for some Fortinet products, which is good from my point of view. What I would like to do is to instead of using the default index that F… --- ## [GeoIP data not creating "location" field and duplicating data](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612)
**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\ **Replies:** 7\ **Last updated:** [May 2, 2022, 8:29pm UTC](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612 "2022-05-02T20:29:39Z")
I'm ingesting logs from my firewall, and as part of that I thought it would be nice to look at geoip data. geoip { add\_tag =\> \[ "GeoIP" \] source =\> "src\_ip" } geoip { … --- ## [Logstash fine tuning for ingesting more events (s3 input)](https://discuss.elastic.co/t/logstash-fine-tuning-for-ingesting-more-events-s3-input/303681)
**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 7:48pm UTC](https://discuss.elastic.co/t/logstash-fine-tuning-for-ingesting-more-events-s3-input/303681 "2022-05-02T19:48:46Z")
Hello, We sending events for vpc flowlogs from multiple AWS accounts into a central s3 bucket and due to the large number of events we are always 5-6 days behind in Elasticsearch. I already set the batch.size to 6000 a… --- ## [How to get paid version of kibana (not cloud)](https://discuss.elastic.co/t/how-to-get-paid-version-of-kibana-not-cloud/303382)
**Author:** [@Rayhan\_Shaik](https://discuss.elastic.co/u/Rayhan_Shaik)\ **Replies:** 8\ **Last updated:** [May 2, 2022, 2:50pm UTC](https://discuss.elastic.co/t/how-to-get-paid-version-of-kibana-not-cloud/303382 "2022-05-02T14:50:02Z")
hi team, We are using the free version of kibana(not cloud) in our project, but now as per our project requirements ( automating the reports generation of dashboard and sending them over email ), we came to know that t… --- ## [Clean method for adding field when the values may be missing?](https://discuss.elastic.co/t/clean-method-for-adding-field-when-the-values-may-be-missing/303769)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 7:42pm UTC](https://discuss.elastic.co/t/clean-method-for-adding-field-when-the-values-may-be-missing/303769 "2022-05-02T19:42:28Z")
I have logs with variable field names. For example: {"field\_one":"first", "field\_two":"second"} ("field\_two":"second", "field\_three": "third"} To get the correct index mapping, I currently I use: mutate { add\_fi… --- ## [Retrieving DataStream list in Elasticsearch using python API](https://discuss.elastic.co/t/retrieving-datastream-list-in-elasticsearch-using-python-api/303705)
**Author:** [@curious\_ands](https://discuss.elastic.co/u/curious_ands)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 7:36pm UTC](https://discuss.elastic.co/t/retrieving-datastream-list-in-elasticsearch-using-python-api/303705 "2022-05-02T19:36:17Z")
In Kibana dev tools, When I am using the API call GET /\_data\_stream/ I am getting the list of DataStream. In similar way I want to retrieve it using the Elasticsearch Python API, I am not able to find the way. Can anyone… --- ## [Testing Logs in Logstash |Automation with Ansible](https://discuss.elastic.co/t/testing-logs-in-logstash-automation-with-ansible/303768)
**Author:** [@Amanda\_Ruzza](https://discuss.elastic.co/u/Amanda_Ruzza)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 7:24pm UTC](https://discuss.elastic.co/t/testing-logs-in-logstash-automation-with-ansible/303768 "2022-05-02T19:24:32Z")
Dear all, My team is currently working on deploying an ELK stack on AWS using Ansible and GitHub Actions. My question is: Is there a way to test that the the Log files sent from MetricBeats are being properly collecte… --- ## [Data node CPU constantly 90-98% on one node](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720)
**Author:** [@Damelon](https://discuss.elastic.co/u/Damelon)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 5:46pm UTC](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720 "2022-05-02T17:46:22Z")
I currently have an Elasticsearch cluster (7.15.1) Which has 3 masters, 6 data nodes, 2 ingest nodes which is deployed onto Kubernetes in AWS. Each data node is using an m5.2xlarge AWS instance and a 1.5TB storage volu… --- ## [Offline Mapping](https://discuss.elastic.co/t/offline-mapping/303756)
**Author:** [@millie123](https://discuss.elastic.co/u/millie123)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:49pm UTC](https://discuss.elastic.co/t/offline-mapping/303756 "2022-05-02T18:49:39Z")
I'm trying to get offline maps working in Kibana, but running into problems. For context, I want a standard OSM style base map, similar to the default base map, that doesn’t require an internet connection. I’ve tried a c… --- ## [Alert config](https://discuss.elastic.co/t/alert-config/303697)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:25pm UTC](https://discuss.elastic.co/t/alert-config/303697 "2022-05-02T18:25:28Z")
Hello, I always get a lot of help. If you specify one host.name in the filter, the value of the host is applied (here, 87.5%), and you can set an alarm based on that number. . I'm trying to set an alarm when any ass… --- ## [Vega autosize does not work](https://discuss.elastic.co/t/vega-autosize-does-not-work/303745)
**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 6:18pm UTC](https://discuss.elastic.co/t/vega-autosize-does-not-work/303745 "2022-05-02T18:18:40Z")
Since I updated elastic to v8.1.2 autosize is not working. I'm using "autosize": {"type": "fit", "contains": "padding"}, but even if I increase or decrease the size of the chart on the dashboard, the scrollbar always app… --- ## [\[NEST\] Bulk Ingest Not Utilizing Max System Resources](https://discuss.elastic.co/t/nest-bulk-ingest-not-utilizing-max-system-resources/303638)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 5:50pm UTC](https://discuss.elastic.co/t/nest-bulk-ingest-not-utilizing-max-system-resources/303638 "2022-05-02T17:50:23Z")
Hello Elastic Community, We have multiple environments set up for our Elasticsearch system, and I am experiencing some odd behavior. In the dev environment, when we perform a bulk update, the CPU utilization reaches to… --- ## [Lens: Top values bar diagram with percentage](https://discuss.elastic.co/t/lens-top-values-bar-diagram-with-percentage/303591)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 5:09pm UTC](https://discuss.elastic.co/t/lens-top-values-bar-diagram-with-percentage/303591 "2022-05-02T17:09:35Z")
I would like to be able to see percentages for each bar in a bar graph for top values, just like a donut chart displays it. Is this planned to be added in the future or is the donut chart my only option if I want percent… --- ## [Logstash best practices for multiple sources](https://discuss.elastic.co/t/logstash-best-practices-for-multiple-sources/303722)
**Author:** [@fropa](https://discuss.elastic.co/u/fropa)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 4:27pm UTC](https://discuss.elastic.co/t/logstash-best-practices-for-multiple-sources/303722 "2022-05-02T16:27:21Z")
Hi folks, I'm starting to use ELK, I've multiple source servers, some of them have also multiple logs to send. Now I'm trying to set up logstash sample configuration to just receive and send logs to the elasticsearch I… --- ## [Packetbeat setup fail](https://discuss.elastic.co/t/packetbeat-setup-fail/303406)
**Author:** [@OBT](https://discuss.elastic.co/u/OBT)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 4:21pm UTC](https://discuss.elastic.co/t/packetbeat-setup-fail/303406 "2022-05-02T16:21:34Z")
im trying to use packetbeat but i have some problem about the packetbeat.yml can someone help me thx! --- ## [Using elasticsearch with remote storage](https://discuss.elastic.co/t/using-elasticsearch-with-remote-storage/303631)
**Author:** [@James\_Hsia](https://discuss.elastic.co/u/James_Hsia)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 3:21pm UTC](https://discuss.elastic.co/t/using-elasticsearch-with-remote-storage/303631 "2022-05-02T15:21:13Z")
We have an AKS cluster in the US running an Elasticsearch pod (version 7.16.0) tied to an Azure File Share storage account in Europe. We are getting continuous issues in the Elasticsearch logs similar to the below upon … --- ## [Visualize unique count of IDs values by a date field](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616)
**Author:** [@H0tmilk](https://discuss.elastic.co/u/H0tmilk)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 2:51pm UTC](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616 "2022-05-02T14:51:31Z")
Hello, This is my data (for example) in Elasticsearch : { "id": 1, "status": "Active", "title": "Incident 1", "@timestamp": "28/04/22" }, { "id": 2, "status": "Active", "title": "Incident 2", "@timestamp": "28/… --- ## [I am trying to convert unix timestamp(string) coming from my dynamo db by using lambda function to date format to visualize in kibana](https://discuss.elastic.co/t/i-am-trying-to-convert-unix-timestamp-string-coming-from-my-dynamo-db-by-using-lambda-function-to-date-format-to-visualize-in-kibana/303622)
**Author:** [@Kedhar1006](https://discuss.elastic.co/u/Kedhar1006)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 2:35pm UTC](https://discuss.elastic.co/t/i-am-trying-to-convert-unix-timestamp-string-coming-from-my-dynamo-db-by-using-lambda-function-to-date-format-to-visualize-in-kibana/303622 "2022-05-02T14:35:44Z")
'use strict'; var moment = require('moment'); //var Elasticsearch = require('Elasticsearch'); //var client = new Elasticsearch.Clinet({ // host: 'https://.us-east-2.es.amazonaws.com', // log: 'error' //}); const… --- ## [Error changing certificate in Elasticsearch](https://discuss.elastic.co/t/error-changing-certificate-in-elasticsearch/303675)
**Author:** [@jorge.visentini](https://discuss.elastic.co/u/jorge.visentini)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 2:29pm UTC](https://discuss.elastic.co/t/error-changing-certificate-in-elasticsearch/303675 "2022-05-02T14:29:11Z")
I'm trying to change Elasticsearch SSL certificates but I'm getting some errors and it's not starting. I would like to change the CA and certificate to one generated by me, which I use for testing, to learn how to chang… --- ## [Error: Get "http://unix/": dial unix /opt/Elastic/Agent/data/tmp/default/endpoint-security/endpoint-security.sock: connect: no such file or directory](https://discuss.elastic.co/t/error-get-http-unix-dial-unix-opt-elastic-agent-data-tmp-default-endpoint-security-endpoint-security-sock-connect-no-such-file-or-directory/303448)
**Author:** [@Tryp](https://discuss.elastic.co/u/Tryp)\ **Replies:** 4\ **Last updated:** [May 2, 2022, 2:03pm UTC](https://discuss.elastic.co/t/error-get-http-unix-dial-unix-opt-elastic-agent-data-tmp-default-endpoint-security-endpoint-security-sock-connect-no-such-file-or-directory/303448 "2022-05-02T14:03:43Z")
I've been digging into this for a few days now and I feel I've reached a wall. elastic-agent connects to both elastic and fleet and I can see the logs coming in. elastic-endpoint connects to fleet but refuses to conn… --- ## [The label of kibanaAddFilter doesn't work](https://discuss.elastic.co/t/the-label-of-kibanaaddfilter-doesnt-work/301795)
**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\ **Replies:** 7\ **Last updated:** [May 2, 2022, 1:50pm UTC](https://discuss.elastic.co/t/the-label-of-kibanaaddfilter-doesnt-work/301795 "2022-05-02T13:50:37Z")
Hi, I am using Vega to create an age pyramid and I would like to filter the data by clicking on a bar. Thus, I created a signal and used kibanaAddFilter to define the query, as shown in the code below. "signals": \[ {… [Previous page](https://discuss.elastic.co/latest.md?page=1148) [Next page](https://discuss.elastic.co/latest.md?page=1150)