# Latest **URL:** https://discuss.elastic.co/latest.md?page=1152 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1153 --- ## [Apply Access Control on single field](https://discuss.elastic.co/t/apply-access-control-on-single-field/303369)
**Author:** [@hamedheidarian](https://discuss.elastic.co/u/hamedheidarian)\ **Replies:** 3\ **Last updated:** [April 29, 2022, 10:23am UTC](https://discuss.elastic.co/t/apply-access-control-on-single-field/303369 "2022-04-29T10:23:39Z")
Hi, All field-level security documentation examples, apply access control on field of an index. But is there any way to apply it on field of a specific document? --- ## [Adding certificates to Fleet Server](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586)
**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\ **Replies:** 0\ **Last updated:** [April 29, 2022, 9:06am UTC](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586 "2022-04-29T09:06:30Z")
I'm in the process of getting Fleet added to my Elastic cluster. I have a Fleet server and have enrolled the Fleet server using Quick Start for handling certificates when enrolling because I was having issues with certu… --- ## [Splitting json file](https://discuss.elastic.co/t/splitting-json-file/303488)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 10\ **Last updated:** [April 29, 2022, 8:35am UTC](https://discuss.elastic.co/t/splitting-json-file/303488 "2022-04-29T08:35:43Z")
Hi I am totally new in logstash, and i am having some issues when splitting a json file. My file is super easy { "data": \[ { "name": "name1" }, { "name": "name2" … --- ## [After match, get next lines in a watcher alert](https://discuss.elastic.co/t/after-match-get-next-lines-in-a-watcher-alert/303583)
**Author:** [@sree3](https://discuss.elastic.co/u/sree3)\ **Replies:** 0\ **Last updated:** [April 29, 2022, 8:23am UTC](https://discuss.elastic.co/t/after-match-get-next-lines-in-a-watcher-alert/303583 "2022-04-29T08:23:12Z")
Hi All, I have configured a watcher alert that will search a particular query pattern. This is working fine and what i'm trying to achieve is to get the next 4 lines also added to notifications, if the above match is fo… --- ## [Merge fields between documents](https://discuss.elastic.co/t/merge-fields-between-documents/303525)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 8:01am UTC](https://discuss.elastic.co/t/merge-fields-between-documents/303525 "2022-04-29T08:01:45Z")
Hi everyone, I have 2 kinds of docments in an Elasticsearch index. Document 1: { "\_id": "xxxxxxx", "internal\_id": "123456", "message": "LOREM IPSUM" } Document 2: { "\_id": "yyyyyyy", "internal\_id": "123456", "… --- ## [Analysis with Lens Table return statusCode: 413](https://discuss.elastic.co/t/analysis-with-lens-table-return-statuscode-413/302926)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 4\ **Last updated:** [April 29, 2022, 7:18am UTC](https://discuss.elastic.co/t/analysis-with-lens-table-return-statuscode-413/302926 "2022-04-29T07:18:33Z")
I have an enviroment with Kibana v7.14.1 e I created an analysis with lens component that return the error {statusCode: 413, error: "Request Entity Too Large",…} error: "Request Entity Too Large" message: "Payload co… --- ## [List of users and roles](https://discuss.elastic.co/t/list-of-users-and-roles/303036)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 7:17am UTC](https://discuss.elastic.co/t/list-of-users-and-roles/303036 "2022-04-29T07:17:54Z")
Hi, I would like to know if there is a way to view/export the list of users and their roles. I use an environment with Kibana v 7.14.1 --- ## [Is it possible to hide the scroller of legends and display all the legends](https://discuss.elastic.co/t/is-it-possible-to-hide-the-scroller-of-legends-and-display-all-the-legends/303234)
**Author:** [@sukhwinder\_kumar](https://discuss.elastic.co/u/sukhwinder_kumar)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 7:02am UTC](https://discuss.elastic.co/t/is-it-possible-to-hide-the-scroller-of-legends-and-display-all-the-legends/303234 "2022-04-29T07:02:00Z")
Is it possible to hide the scroller of legends and display all the legends? I dont need scroller, I want to show all the legends. --- ## [로그 watcher를 통한 알림 설정 관련 문의](https://discuss.elastic.co/t/watcher/303568)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 6:46am UTC](https://discuss.elastic.co/t/watcher/303568 "2022-04-29T06:46:25Z")
안녕하세요~! 늘 많은 도움을 받고 있습니다. watcher를 통해, 특정 조건 부합시 slack으로 알림을 보내도록 하고 싶은데, 혹시 참고할만한 레퍼런스가 있을까요? --- ## [Alerts and Actions 설정 관련 문의](https://discuss.elastic.co/t/alerts-and-actions/303574)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 6:38am UTC](https://discuss.elastic.co/t/alerts-and-actions/303574 "2022-04-29T06:38:31Z")
보시는 바와 같이 Alert 설정을 하려고 하는데요, 제가 Logstash의 filter의 mutate에서 설정한 필드명이 보이지 않습니다. iso.로 시작하는 필드도 안보이고, 변경한 forti\_로 시작하는 필드도 안보이네요. 혹시 이 필드명을 Alert 설정에서 선택할 수 있게 하려면 어떻게 해야할까요?? mutate { rename =\> { "i… --- ## [Kibana: getting 503 "service unavailable"](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471)
**Author:** [@Poojan](https://discuss.elastic.co/u/Poojan)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 5:42am UTC](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471 "2022-04-29T05:42:56Z")
Hello guys, I am working on kibana 8.1.2 version. while creating/updating charts and loading dashboard I am getting 503 "service unavailable" message. Can anyone please help me to understand this issue? Thanks Pooja… --- ## [Dynamic kibana vizualization with filter dropdown](https://discuss.elastic.co/t/dynamic-kibana-vizualization-with-filter-dropdown/303212)
**Author:** [@Avarjana](https://discuss.elastic.co/u/Avarjana)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 6:09am UTC](https://discuss.elastic.co/t/dynamic-kibana-vizualization-with-filter-dropdown/303212 "2022-04-29T06:09:15Z")
I want to render a Metric Visualization dynamically based on a dropdown filter control value. Metric value generation logic should change depending on the dropdown value. Example scenario: Filter dropdown field can hav… --- ## [Logstash filter only particular fields and index those fields](https://discuss.elastic.co/t/logstash-filter-only-particular-fields-and-index-those-fields/303470)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 7\ **Last updated:** [April 29, 2022, 5:08am UTC](https://discuss.elastic.co/t/logstash-filter-only-particular-fields-and-index-those-fields/303470 "2022-04-29T05:08:15Z")
Hi, I have heartbeat which pushed the data to 5044 through which logstash consumes. I want to index only if monitor.status is down. I am using tag heartbeat for differentiating the various beat input. My data: { "\_i… --- ## [Restricting users to only see data that has been captured about themselves](https://discuss.elastic.co/t/restricting-users-to-only-see-data-that-has-been-captured-about-themselves/302985)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 3:25am UTC](https://discuss.elastic.co/t/restricting-users-to-only-see-data-that-has-been-captured-about-themselves/302985 "2022-04-29T03:25:31Z")
I would like to create a role that restricts users to only seeing data associated with them. for example, I only want Jenny to see data associated with a field that is user.name = Jenny Is this possible, as I would ide… --- ## [The soft link of the ElasticSearch data directory is faulty](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099)
**Author:** [@Yisay](https://discuss.elastic.co/u/Yisay)\ **Replies:** 4\ **Last updated:** [April 29, 2022, 1:44am UTC](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099 "2022-04-29T01:44:03Z")
I want to move the Elasticsearch data file to another directory, Here is my command to operate cp -ar aa/node/0/indices/indices\_name bb/indices\_name rm -rm aa/node/0/indices/indices\_name ln -s bb/indices\_name aa/node… --- ## [A Question for Configure SSL/TLS for self-managed Fleet Servers](https://discuss.elastic.co/t/a-question-for-configure-ssl-tls-for-self-managed-fleet-servers/303218)
**Author:** [@quhang](https://discuss.elastic.co/u/quhang)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 6:29am UTC](https://discuss.elastic.co/t/a-question-for-configure-ssl-tls-for-self-managed-fleet-servers/303218 "2022-04-26T06:29:47Z")
Hello there, When try to configure SSL for the fleet and Join an elc cluster that currently has enabled https refer this article: In this document, the Elasticsearch-ca.crt confuses me, according the description, it… --- ## [How to export Watcher from one cluster to another cluster](https://discuss.elastic.co/t/how-to-export-watcher-from-one-cluster-to-another-cluster/303390)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 0\ **Last updated:** [April 27, 2022, 10:32am UTC](https://discuss.elastic.co/t/how-to-export-watcher-from-one-cluster-to-another-cluster/303390 "2022-04-27T10:32:14Z")
All existing watchers and alarms need to be migrated to a new elastic cluster. --- ## [Why alerting is not allowing - (hyphen) in manage sender name?](https://discuss.elastic.co/t/why-alerting-is-not-allowing-hyphen-in-manage-sender-name/303391)
**Author:** [@Kanmani\_R](https://discuss.elastic.co/u/Kanmani_R)\ **Replies:** 0\ **Last updated:** [April 27, 2022, 11:05am UTC](https://discuss.elastic.co/t/why-alerting-is-not-allowing-hyphen-in-manage-sender-name/303391 "2022-04-27T11:05:33Z")
Alerting is not allowing - (hyphen) in manage sender name but it's allowing in manage email group name. In alerting it is not allowing - (hyphen) in manage sender name. But it is allowing - (hyphen) in manage email … --- ## [Action \[indices:admin/create\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user/303458)
**Author:** [@mattstubbs](https://discuss.elastic.co/u/mattstubbs)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 1:02am UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user/303458 "2022-04-29T01:02:57Z")
Hi Team, tl;dr: Complains that user needs one of \[create\_index,manage,all\], but user has create\_index and manage A pretty basic error message here that seems very straightforward but is giving my team trouble. I am tr… --- ## [Mapping conflict -\> Reindex/mapping for only one field](https://discuss.elastic.co/t/mapping-conflict-reindex-mapping-for-only-one-field/303466)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 1:00am UTC](https://discuss.elastic.co/t/mapping-conflict-reindex-mapping-for-only-one-field/303466 "2022-04-29T01:00:28Z")
Hi after some changes I need to reindex(or mapping) mass of close indexes of high capacity. I've tried already global reindex but it consumed a lot of time. How I can reindex/remapping all of my historical indexes throu… --- ## [Extract field from kibana](https://discuss.elastic.co/t/extract-field-from-kibana/303495)
**Author:** [@Roberto\_Mejri](https://discuss.elastic.co/u/Roberto_Mejri)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 12:50am UTC](https://discuss.elastic.co/t/extract-field-from-kibana/303495 "2022-04-29T00:50:23Z")
Hi, I need to exctract all the field: "cf" from kibana to a txt file or visualize... the field: "cf" are inside the "message", Does somebody know How may I accomplish the duty? They are also kept in an other field… --- ## [Discover에 보여지는 필드 관련 문의](https://discuss.elastic.co/t/discover/303114)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 12:28am UTC](https://discuss.elastic.co/t/discover/303114 "2022-04-29T00:28:38Z")
안녕하세요~! 위와 같이 logstash에서 snmp를 수집하여, 값을 가져오긴하는데 필드 값이 저런 형태로 보여지는데요 혹시 저 필드의 이름을 커스터마이징할 수 있을까요? --- ## [Elasticsearch OOM, IndexWrter consumed significant memory, seems memory leak](https://discuss.elastic.co/t/elasticsearch-oom-indexwrter-consumed-significant-memory-seems-memory-leak/301283)
**Author:** [@medcl.net](https://discuss.elastic.co/u/medcl.net)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-oom-indexwrter-consumed-significant-memory-seems-memory-leak/301283 "2022-04-01T07:04:48Z")
Hi Team, We recently upgraded our Elasticsearch cluster from 7.6.2 to 7.17.1, and after a few days, it seems working very well, but when we doing some heavy indexing job, the cluster start to crash in an randomly way. T… --- ## [Click errors Missing required parameter: query](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056)
**Author:** [@Sam\_S](https://discuss.elastic.co/u/Sam_S)\ **Replies:** 1\ **Last updated:** [April 28, 2022, 10:02pm UTC](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056 "2022-04-28T22:02:56Z")
When trying to register an empty search I get the following result: {"errors":\["Missing required parameter: query"\]} This is the payload executed at engines/local-test/click.json: {"query":"","document\_id":"4c1e9616-6… --- ## [Minimal example of connection from Java and search for every document on index](https://discuss.elastic.co/t/minimal-example-of-connection-from-java-and-search-for-every-document-on-index/301334)
**Author:** [@Malo\_Maisonneuve](https://discuss.elastic.co/u/Malo_Maisonneuve)\ **Replies:** 5\ **Last updated:** [April 28, 2022, 9:55pm UTC](https://discuss.elastic.co/t/minimal-example-of-connection-from-java-and-search-for-every-document-on-index/301334 "2022-04-28T21:55:06Z")
Hello, I want to use Java to do basic queries in a remote elastic cluster. It seems I successfully am connected to it, but querying does not return any result, whereas I have documents on my elastic cluster, on the req… --- ## [ElasticSearch High Search response times on new Machine](https://discuss.elastic.co/t/elasticsearch-high-search-response-times-on-new-machine/303293)
**Author:** [@dnsh](https://discuss.elastic.co/u/dnsh)\ **Replies:** 4\ **Last updated:** [April 28, 2022, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-high-search-response-times-on-new-machine/303293 "2022-04-28T19:37:42Z")
I have 4 EC2 machines in Elasticsearch Cluster. Configuration: c5d.large, Memory: 3.5G, Data Disk: 50GB NVME instance storage. Elasticsearch Version: 6.8.21 I added the 5th machine with the same configuration c5d.larg… --- ## [After update to 8.1.3 Logstash in cluster no longer functioning](https://discuss.elastic.co/t/after-update-to-8-1-3-logstash-in-cluster-no-longer-functioning/303439)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 7:35pm UTC](https://discuss.elastic.co/t/after-update-to-8-1-3-logstash-in-cluster-no-longer-functioning/303439 "2022-04-28T19:35:48Z")
Running an 8.1.3 cluster with all components updated. Filebeat agent is also latest. This particular host has multiple log files that I was shipping, then creating a different index on each logfile based on the "type" … --- ## [Kibana Discover not working](https://discuss.elastic.co/t/kibana-discover-not-working/303169)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 7:34pm UTC](https://discuss.elastic.co/t/kibana-discover-not-working/303169 "2022-04-28T19:34:49Z")
Hello all, When I try to open the Discover in Kibana version 8.1.0, facing an issue as below, could anyone suggest why is it happening and how to address this? --- ## [Netflow application ID to application name](https://discuss.elastic.co/t/netflow-application-id-to-application-name/303549)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 6:51pm UTC](https://discuss.elastic.co/t/netflow-application-id-to-application-name/303549 "2022-04-28T18:51:10Z")
Im getting netflow data from multiples machines using filebeat, one of the fields I get is netflow.application\_id and I need to transate the Id to the name of the application, the format of the application\_id is this: 3,… --- ## [Execute Tensorflow model in elasticsearch rescore plugin](https://discuss.elastic.co/t/execute-tensorflow-model-in-elasticsearch-rescore-plugin/303545)
**Author:** [@ashwin91kumar](https://discuss.elastic.co/u/ashwin91kumar)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 5:17pm UTC](https://discuss.elastic.co/t/execute-tensorflow-model-in-elasticsearch-rescore-plugin/303545 "2022-04-28T17:17:39Z")
Hi Everyone, I'm trying to execute a Tensorflow model. I'm running into the below security issues and unable to provide execute permission for JavaCpp. Is there way to execute TF2 models in Elasticsearch plugin. {"type… [Previous page](https://discuss.elastic.co/latest.md?page=1151) [Next page](https://discuss.elastic.co/latest.md?page=1153)