# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1150

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1151

---

## [Logstash not receiving messages when started via docker-compose (Docker is ok)](https://discuss.elastic.co/t/logstash-not-receiving-messages-when-started-via-docker-compose-docker-is-ok/303645)

<div class="topic-metadata">

**Author:** [@alex\_london](https://discuss.elastic.co/u/alex_london)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 1:41pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-messages-when-started-via-docker-compose-docker-is-ok/303645 "2022-05-02T13:41:30Z")

</div>

I've encountered strange behaviour when running Logstash via docker-compose which I have been unable to figure out. Logstash starts (seemingly) fine, but it does not receive any events from Beats or other sources. Events…

---

## [\[Vega/EMS\] Problems using EMS map World Countries](https://discuss.elastic.co/t/vega-ems-problems-using-ems-map-world-countries/302507)

<div class="topic-metadata">

**Author:** [@Kayak007](https://discuss.elastic.co/u/Kayak007)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 1:34pm UTC](https://discuss.elastic.co/t/vega-ems-problems-using-ems-map-world-countries/302507 "2022-05-02T13:34:44Z")

</div>

Hi, Trying to use the World Countries map from the EMS Boundaries with Vega like it's shown in the documentation here. The (very simple) code is the following under Kibana 7.16.3: { $schema: https://vega.github.io/s…

---

## [Redis Cache keyspace miss issue](https://discuss.elastic.co/t/redis-cache-keyspace-miss-issue/303584)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 8:25am UTC](https://discuss.elastic.co/t/redis-cache-keyspace-miss-issue/303584 "2022-04-29T08:25:59Z")

</div>

Hi everyone, We're using an ELK stack with redis buffer on kubernetes. Lately there has been an increase in traffic and we've noticed that some logs are not registered to Elasticsearch. Redis-cli shows steadily increasi…

---

## [Derive index with reversed nesting](https://discuss.elastic.co/t/derive-index-with-reversed-nesting/303393)

<div class="topic-metadata">

**Author:** [@denbo](https://discuss.elastic.co/u/denbo)\
**Replies:** 5\
**Last updated:** [May 2, 2022, 12:24pm UTC](https://discuss.elastic.co/t/derive-index-with-reversed-nesting/303393 "2022-05-02T12:24:01Z")

</div>

I have an index of products with a (denormalized) m:n relationship to categories. My goal is to derive a categories index from it which contains the same information, but with the relationship reversed. What I have # …

---

## [Is it possible to calculate the number of results by grouping them by several criteria?](https://discuss.elastic.co/t/is-it-possible-to-calculate-the-number-of-results-by-grouping-them-by-several-criteria/303497)

<div class="topic-metadata">

**Author:** [@Denys\_Lukash](https://discuss.elastic.co/u/Denys_Lukash)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 11:53am UTC](https://discuss.elastic.co/t/is-it-possible-to-calculate-the-number-of-results-by-grouping-them-by-several-criteria/303497 "2022-05-02T11:53:24Z")

</div>

Hi dear community. I'm a new user of elastic and I'm having trouble building a query, I don't know if it's possible to do what I want. My task is to get the number of products in each category. The problem is that the g…

---

## [No access to APM API](https://discuss.elastic.co/t/no-access-to-apm-api/302307)

<div class="topic-metadata">

**Author:** [@dthapostle](https://discuss.elastic.co/u/dthapostle)\
**Replies:** 15\
**Last updated:** [May 2, 2022, 11:06am UTC](https://discuss.elastic.co/t/no-access-to-apm-api/302307 "2022-05-02T11:06:06Z")

</div>

IKibana version: 7.17.2 Elasticsearch version: 7.17.2 APM Server version: APM integration 7.17.1 APM Agent language and version: ASP.Net 7.17.2 Browser version: Safari 15.3 Original install method (e.g. download p…

---

## [Log ES inserts / operations](https://discuss.elastic.co/t/log-es-inserts-operations/303738)

<div class="topic-metadata">

**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 10:55am UTC](https://discuss.elastic.co/t/log-es-inserts-operations/303738 "2022-05-02T10:55:21Z")

</div>

Hello guys, I would like to know how to log Elasticsearch operations like inserts with parameters for URL called, Ex: http://cloud:9200/myindex/\_doc Using free ES 7.15.1 Thanks.

---

## [Hunspell fails to stem correctly](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739)

<div class="topic-metadata">

**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 10:56am UTC](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739 "2022-05-02T10:56:02Z")

</div>

We are a bit puzzled about some shortcomings when using hunspell for stemming and can't figure out why it fails. Examples: gulerod (singular), gulerødder (plural) mand (singular), mænd (plural) mønster (singular), møns…

---

## [Elasticsearch login](https://discuss.elastic.co/t/elasticsearch-login/303527)

<div class="topic-metadata">

**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-login/303527 "2022-05-02T10:23:32Z")

</div>

Hello Team, kindly advise why I am being prompted to enter username/password when accessing ES. PLease find attached image. I have installed latest version of Kibana and ES 8.1 Thanks, Roshan

---

## [Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735)

<div class="topic-metadata">

**Author:** [@rinki\_kumari](https://discuss.elastic.co/u/rinki_kumari)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 10:08am UTC](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735 "2022-05-02T10:08:47Z")

</div>

input { http\_poller { urls =\> { test =\> { method =\> get url =\> "http://172.24.105.27:8092/" headers =\> { Accept =\> "application/json" Authorization =\> "Basic QXBp" } } } } } o…

---

## [Can I compare Two SearchRequest Object](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487)

<div class="topic-metadata">

**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\
**Replies:** 6\
**Last updated:** [May 2, 2022, 9:37am UTC](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487 "2022-05-02T09:37:03Z")

</div>

I want to compare two SearchRequest, kind a like to see if both SearchRequest object's query are same or not. for Example: Reader queryJson = new StringReader( "{" + " \\"query\\": {" + …

---

## [Changing snapshot repo from standard to standard-ia](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479)

<div class="topic-metadata">

**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 9:32am UTC](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479 "2022-05-02T09:32:24Z")

</div>

Hi all, I created a bucket in AWS s3 bucket, named "backup-s3-bucket" Then I created a snapshot repo like below: PUT \_snapshot/aws\_repo { "type": "s3", "settings": { "bucket": "backup-s3-bucket", "endp…

---

## [Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727)

<div class="topic-metadata">

**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727 "2022-05-02T09:23:40Z")

</div>

input json message to logstash via filebeat is "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}" oupt…

---

## [Function\_score queryでのスコアリング時に単語が分割されてしまう事象について](https://discuss.elastic.co/t/function-score-query/302662)

<div class="topic-metadata">

**Author:** [@Totsuka](https://discuss.elastic.co/u/Totsuka)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 9:02am UTC](https://discuss.elastic.co/t/function-score-query/302662 "2022-05-02T09:02:57Z")

</div>

＜実現したいこと＞ titleフィールドに「消費税」という単語が含まれていれば、5ポイント、 questionフィールドに「消費税」という単語が含まれていれば、4ポイント、 answerフィールドに「消費税」という単語が含まれていれば、3ポイントを付与し、 その合計をスコアリングの値とし("score\_mode": "sum")、スコアの降順で表示したいです。 ※Elasticsearchのデフォルトのスコアリングは無視する設…

---

## [Need help in file.conf for Logstash - Salesforce pipeline](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720)

<div class="topic-metadata">

**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 8:21am UTC](https://discuss.elastic.co/t/need-help-in-file-conf-for-logstash-salesforce-pipeline/303720 "2022-05-02T08:21:57Z")

</div>

I'm trying to configure a pipeline to send Salesforce's data to Elasticsearch using Logstash. I created the a Connected App and flagged the OAuth 2.0 and i've put the callback url. Now, i have the client secret and the…

---

## [How do I setup a cluster with secure enabled? (Version 8)](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 7:49am UTC](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579 "2022-05-02T07:49:48Z")

</div>

Hello! When I try to connect a new to the cluster, I am only getting this message: \[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[node-1\] client did not trust this server's certificate, closing connection Netty4TcpCh…

---

## [Hints for use of Ingest pipeline? To map IP address to Region+City and never store IP address](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712)

<div class="topic-metadata">

**Author:** [@Bevaldss](https://discuss.elastic.co/u/Bevaldss)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 7:38am UTC](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712 "2022-05-02T07:38:52Z")

</div>

Due to compliance with DPA we cannot store client IP addresses. I want to on-the-fly map client IP address to its' Region+City and also at same time make sure the IP address is never stored in any document. Looks like …

---

## [Helm Chart support for Hot-Warm-Cold Architecture with Index Lifecycle Management](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701)

<div class="topic-metadata">

**Author:** [@Vijendhar](https://discuss.elastic.co/u/Vijendhar)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 2:30am UTC](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701 "2022-05-02T02:30:14Z")

</div>

Is there a plan to support Hot-Warm-Cold Architecture with Index Lifecycle Management with the Helm chart for this issue ?

---

## [Upgrade ELK from 6.8.9 to latest stable version](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 6:41am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703 "2022-05-02T06:41:02Z")

</div>

What to consider when upgrading ELK from 6.8.9 to latest stable version? I understand that I should be doing a rolling upgrade from 6.8.9 to 7.16.3 and from 7.16.3 to 8.x How can I reindex the existing indices? I also…

---

## [Kibana dashboard](https://discuss.elastic.co/t/kibana-dashboard/303704)

<div class="topic-metadata">

**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 6:35am UTC](https://discuss.elastic.co/t/kibana-dashboard/303704 "2022-05-02T06:35:15Z")

</div>

How to create a replica of stack monitoring in dashboard? like current counts, memory & cpu usage?

---

## [Elastic Cloud don't see events from NXLog](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677)

<div class="topic-metadata">

**Author:** [@vasjab](https://discuss.elastic.co/u/vasjab)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677 "2022-05-02T06:20:05Z")

</div>

Hello. I'm trying to configure nxlog with Elastic cloud instance but Elastic don't see events. Can you please help how I can read events on Elastic cloud? Thanks.

---

## [Explore elastic observability](https://discuss.elastic.co/t/explore-elastic-observability/303702)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 5:28am UTC](https://discuss.elastic.co/t/explore-elastic-observability/303702 "2022-05-02T05:28:28Z")

</div>

We ELK cluster running on 6.8.9 and planning to upgrade soon to latest stable version. Does the latest stable version have elastic observability features? How is it different than ELK stack I have? ELK stack I have - …

---

## [APM Permission UI for space user](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680)

<div class="topic-metadata">

**Author:** [@renato473](https://discuss.elastic.co/u/renato473)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 5:24am UTC](https://discuss.elastic.co/t/apm-permission-ui-for-space-user/303680 "2022-05-02T05:24:08Z")

</div>

Hey, I would like to know how I do through users / roles that only list the APM service that my developer works instead of showing all the APM services that are being monitored. example: attached an image that would li…

---

## [Conda Overriding Pip-Installed Elasticsearch Version](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684)

<div class="topic-metadata">

**Author:** [@KatePearce](https://discuss.elastic.co/u/KatePearce)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 2:22am UTC](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684 "2022-05-02T02:22:51Z")

</div>

I'm currently working on a project that requires me to use Elasticsearch version 7.0.2; however, though the pip-installed version of Elasticsearch is 7.0.2, when I check the version in my Jupyter notebook, it still says …

---

## [Problem to connect kibana with elasticsearch](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 1:55am UTC](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581 "2022-05-02T01:55:11Z")

</div>

Hello , i have two virtuel machines in vmware ESXI , I installed Elasticsearch in the first machine and kibana without Elasticsearch in the second machine and i try to cennect them this is my Elasticsearch.yml and kiban…

---

## [Inquiries about warning fields](https://discuss.elastic.co/t/inquiries-about-warning-fields/303695)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 1:43am UTC](https://discuss.elastic.co/t/inquiries-about-warning-fields/303695 "2022-05-02T01:43:55Z")

</div>

As you can see, I am going to set up an Alert, and I The field name you set is not visible. Fields starting with iso. are not visible, and fields starting with the changed forti\_ are not visible. How can I make thi…

---

## [Alert 설정 관련 문의 드립니다](https://discuss.elastic.co/t/alert/303693)

<div class="topic-metadata">

**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 1:14am UTC](https://discuss.elastic.co/t/alert/303693 "2022-05-02T01:14:29Z")

</div>

안녕하세요 늘 많은 도움을 받고 있습니다. 몇가지 궁금한게 있는데 답변 부탁드립니다. Watcher 사용 종료된다고 들었는데, 아예 기능 자체를 못쓰게 되는건가요? 아니면 사용은 가능한데 기술지원 같은게 안되는 것인가요? filter에서 host.name 한개를 지정하면 해당 호스트의 수치가 적용 (여기서는 87.5%)되어서, 그 수치 기준으로 알람 설정을 할 수 있는데, …

---

## [ElasticSearch Java Client 8.1.2 - Entity content is too large for the configured buffer limit](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690)

<div class="topic-metadata">

**Author:** [@pipedreamer007](https://discuss.elastic.co/u/pipedreamer007)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690 "2022-05-02T00:34:20Z")

</div>

Hi everyone - I'm trying to index a large amount of data into my Elasticsearch 8.1 Docker container. I've already changed the setting http.max\_content\_length in the Elasticsearch.yml file so I no longer encounter the 41…

---

## [ESM tool migration](https://discuss.elastic.co/t/esm-tool-migration/303521)

<div class="topic-metadata">

**Author:** [@iliyab09](https://discuss.elastic.co/u/iliyab09)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/esm-tool-migration/303521 "2022-05-02T00:12:22Z")

</div>

Hello I have couple questions about migration, can't find the information nowhere. When the migration is in progress do I need to stop read write to my old cluster? When the migration is done I can just connect to…

---

## [Pod metrics Error in Metricbeat Kubernetes Overview ECS](https://discuss.elastic.co/t/pod-metrics-error-in-metricbeat-kubernetes-overview-ecs/303626)

<div class="topic-metadata">

**Author:** [@ktony](https://discuss.elastic.co/u/ktony)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 5:44pm UTC](https://discuss.elastic.co/t/pod-metrics-error-in-metricbeat-kubernetes-overview-ecs/303626 "2022-04-29T17:44:07Z")

</div>

Hello, I am currently trying to get our Kubernetes metrics using metricbeat deployed on ECK. We are getting the metrics for the Kubernetes cluster, however, the metrics we are getting is incorrect. We are seeing the iss…

[Previous page](https://discuss.elastic.co/latest.md?page=1149)

[Next page](https://discuss.elastic.co/latest.md?page=1151)
