# Latest **URL:** https://discuss.elastic.co/latest.md?page=1164 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1165 --- ## [Missing event field from filebeat via docker autodiscovery](https://discuss.elastic.co/t/missing-event-field-from-filebeat-via-docker-autodiscovery/302843)
**Author:** [@galkinrost](https://discuss.elastic.co/u/galkinrost)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 5:06pm UTC](https://discuss.elastic.co/t/missing-event-field-from-filebeat-via-docker-autodiscovery/302843 "2022-04-20T17:06:46Z")
Hi! I'm trying to set up filebeat with docker autodiscovery. But for some reason the event field is missing in documents. Here the config: filebeat.config: modules: path: ${path.config}/modules.d/\*.yml reloa… --- ## [Unable to view elastic-agent(Zeek) & (windows) logs in Fleet](https://discuss.elastic.co/t/unable-to-view-elastic-agent-zeek-windows-logs-in-fleet/302574)
**Author:** [@Mayuresh\_More](https://discuss.elastic.co/u/Mayuresh_More)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 4:49pm UTC](https://discuss.elastic.co/t/unable-to-view-elastic-agent-zeek-windows-logs-in-fleet/302574 "2022-04-20T16:49:24Z")
Hello all, I have successfully configured the Fleet-server A fleet of ELK(Fleet-server), Linux(Zeek-elastic agent), Windows (-elastic-agent) however unable to view logs of elastic-agent in Fleet \> Agents \> osboxes & F… --- ## [How can use patterns\_files\_glob in grok？](https://discuss.elastic.co/t/how-can-use-patterns-files-glob-in-grok/302792)
**Author:** [@lingminzeng](https://discuss.elastic.co/u/lingminzeng)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 4:47pm UTC](https://discuss.elastic.co/t/how-can-use-patterns-files-glob-in-grok/302792 "2022-04-20T16:47:28Z")
My config: patterns\_files\_glob =\> "test.txt" But it not working and output error --- ## [Error when building logstash-filter-elasticsearch plugin](https://discuss.elastic.co/t/error-when-building-logstash-filter-elasticsearch-plugin/302838)
**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 4:29pm UTC](https://discuss.elastic.co/t/error-when-building-logstash-filter-elasticsearch-plugin/302838 "2022-04-20T16:29:48Z")
I'm trying to track down an issue I'm having with the logstash-filter-elasticsearch plugin so I've checked out the code and am trying to build from source. Running inside a ruby:9.2 docker container I'm checking out the… --- ## [Optimize / combine number of watcher](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 4:22pm UTC](https://discuss.elastic.co/t/optimize-combine-number-of-watcher/302670 "2022-04-20T16:22:34Z")
Hello all, We have created lots of alerts in our cluster and we are unbale to manage those alerts. Requirement: We need to 2 or more than 2 watcher in one watch. Like: for index Metrickbeat-\* we have 3 alerts for if: … --- ## [Exclude\_files param not working](https://discuss.elastic.co/t/exclude-files-param-not-working/302803)
**Author:** [@yyovchev](https://discuss.elastic.co/u/yyovchev)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 4:05pm UTC](https://discuss.elastic.co/t/exclude-files-param-not-working/302803 "2022-04-20T16:05:15Z")
Hello, I try to exclude only one log file from filebeat, but the records are still sent to Elasticsearch. Here is my /etc/filebeat/modules.d/nginx.yml file: # Module: nginx # Docs: https://www.elastic.co/guide/en/beats… --- ## [Cross Cluster Indices on in Index Management tab](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768)
**Author:** [@subham](https://discuss.elastic.co/u/subham)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:43pm UTC](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768 "2022-04-20T15:43:55Z")
Hi, I am not able to find my indices from remote cluster in Index Management tab. However, I am able to create index patterns using pattern cluster-name:index-name. Can someone tell if it's possible to search remote clu… --- ## [Access Management to Kibana production](https://discuss.elastic.co/t/access-management-to-kibana-production/302794)
**Author:** [@CP-AssafM](https://discuss.elastic.co/u/CP-AssafM)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:24pm UTC](https://discuss.elastic.co/t/access-management-to-kibana-production/302794 "2022-04-20T15:24:41Z")
Hi All, How do you manage your user's access to Kibana in production? I want to provide access to a user to specific customer logs (and not all the customer's logs), We have thousands of customers logs in the same ind… --- ## [DISTINCT values DSL query](https://discuss.elastic.co/t/distinct-values-dsl-query/302715)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 3:05pm UTC](https://discuss.elastic.co/t/distinct-values-dsl-query/302715 "2022-04-20T15:05:32Z")
Hello, I've been reading a lot about this topic because I've seen it has been asked before but I can do it works yet. I am trying to get unique values from an index. I have something like this: id | app\_name | … --- ## [Using HAProxy in front of ES cluster?](https://discuss.elastic.co/t/using-haproxy-in-front-of-es-cluster/302739)
**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 2:58pm UTC](https://discuss.elastic.co/t/using-haproxy-in-front-of-es-cluster/302739 "2022-04-20T14:58:29Z")
Hi, When using an Elasticsearch cluster, I understand that I can set the addresses of all the cluster nodes on my client application side. But: what occurs if I define only one node address on application side? is th… --- ## [Slow handling of documents when large text in a field](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 10\ **Last updated:** [April 20, 2022, 2:45pm UTC](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679 "2022-04-20T14:45:03Z")
Hi, We have problems when handling for documents with large content in a single field. We have index with mapping like this: "mappings" : { "properties" : { "properties" : { "name" : { "type" : "te… --- ## [Highlighting with fuzziness](https://discuss.elastic.co/t/highlighting-with-fuzziness/302827)
**Author:** [@iost\_ik](https://discuss.elastic.co/u/iost_ik)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 2:30pm UTC](https://discuss.elastic.co/t/highlighting-with-fuzziness/302827 "2022-04-20T14:30:51Z")
Всем привет! Возможно ли реализовать механику подсветки найденных совпадений учитывая ошибки? Например, если поиск ведётся при настройке fuzziness "AUTO:5, 7" Нурафен -\> Нурофен Галавит -\> Галавит, Алфавит --- ## [Kibana 7.17.3 and 8.1.3 Security Update](https://discuss.elastic.co/t/kibana-7-17-3-and-8-1-3-security-update/302826)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 2:20pm UTC](https://discuss.elastic.co/t/kibana-7-17-3-and-8-1-3-security-update/302826 "2022-04-20T14:20:34Z")
Kibana Exposure of Sensitive Information (ESA-2022-05) A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide… --- ## [Search\_as\_you\_type highlight issue](https://discuss.elastic.co/t/search-as-you-type-highlight-issue/302825)
**Author:** [@sinnetll19](https://discuss.elastic.co/u/sinnetll19)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 2:18pm UTC](https://discuss.elastic.co/t/search-as-you-type-highlight-issue/302825 "2022-04-20T14:18:22Z")
Continuing the discussion from Search\_as\_you\_type and highlight: "It will only highlight matching tokens — if you leave out the space after fox, it won't mark that." why does this happen and how can i use a search\_as\_y… --- ## [Significant drop in reported throughput after upgrading from 7.15 through to 8.1.2](https://discuss.elastic.co/t/significant-drop-in-reported-throughput-after-upgrading-from-7-15-through-to-8-1-2/302391)
**Author:** [@Alex\_Leonov](https://discuss.elastic.co/u/Alex_Leonov)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 1:54pm UTC](https://discuss.elastic.co/t/significant-drop-in-reported-throughput-after-upgrading-from-7-15-through-to-8-1-2/302391 "2022-04-20T13:54:31Z")
Kibana version: 8.1.2 Elasticsearch version: 8.1.2 APM Server version: Fleet/Agent/APM Integration 8.1.2 APM Agent language and version: elastic-apm-node, 3.31.0 Browser version: N/A Fresh install or upgraded f… --- ## [Controlling the services created for ElasticSearch in Kubernetes](https://discuss.elastic.co/t/controlling-the-services-created-for-elasticsearch-in-kubernetes/301743)
**Author:** [@codex](https://discuss.elastic.co/u/codex)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 1:43pm UTC](https://discuss.elastic.co/t/controlling-the-services-created-for-elasticsearch-in-kubernetes/301743 "2022-04-20T13:43:04Z")
I'm currently trying to use Elasticsearch with Consul, and there's an issue relating to the services that are created using the operator pattern. elastic-search-es-default ClusterIP None \ … --- ## [How to speed up move es node migration to another machine](https://discuss.elastic.co/t/how-to-speed-up-move-es-node-migration-to-another-machine/300913)
**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 1:31pm UTC](https://discuss.elastic.co/t/how-to-speed-up-move-es-node-migration-to-another-machine/300913 "2022-04-20T13:31:07Z")
Hi team, I have a 10 node es cluster created by ECK on k8s v1.22 . And Persistent storage uses local pv . For some reasons, I want to move one of the es instances to a new node. Because the index has opened the copy… --- ## [Résultats d'une requête très aléatoire](https://discuss.elastic.co/t/resultats-dune-requete-tres-aleatoire/300472)
**Author:** [@lfourny](https://discuss.elastic.co/u/lfourny)\ **Replies:** 4\ **Last updated:** [April 20, 2022, 1:17pm UTC](https://discuss.elastic.co/t/resultats-dune-requete-tres-aleatoire/300472 "2022-04-20T13:17:26Z")
Bonjour à tous. Dans une application web j'ai un script qui requeête 1 fois par jour un index afin de remonter la quantité de données enregistré la veille. Cet index dispose d'un champ DateUpdate qui enregistre la date … --- ## [Logstash does not open Port for Data-Input](https://discuss.elastic.co/t/logstash-does-not-open-port-for-data-input/302305)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 1:06pm UTC](https://discuss.elastic.co/t/logstash-does-not-open-port-for-data-input/302305 "2022-04-20T13:06:39Z")
Hi there, soo i'm trying to get a new cluster to work - everythings setup fine. We're using CentOS 7, Elasticsearch 7.15, Logstash 7.15. The service is running fine - no errors when running it in debug mode. There's… --- ## [Does clustering important for elastic stack](https://discuss.elastic.co/t/does-clustering-important-for-elastic-stack/302784)
**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\ **Replies:** 4\ **Last updated:** [April 20, 2022, 12:39pm UTC](https://discuss.elastic.co/t/does-clustering-important-for-elastic-stack/302784 "2022-04-20T12:39:14Z")
Could anyone explain to me clearly does clustering is required or not for elastic stack? --- ## [AcceptSecurityContext error, data 532](https://discuss.elastic.co/t/acceptsecuritycontext-error-data-532/302602)
**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 12:22pm UTC](https://discuss.elastic.co/t/acceptsecuritycontext-error-data-532/302602 "2022-04-20T12:22:28Z")
Crazy print domain authentication failed in my Elasticsearch logs today {"type": "server", "timestamp": "2022-04-18T08:55:38,254Z", "level": "WARN", "component": "o.e.x.s.a.AuthenticationService", "cluster.name": "Elast… --- ## [Reparsing / processing old indexes with new separation files in Logstash depending on path logs](https://discuss.elastic.co/t/reparsing-processing-old-indexes-with-new-separation-files-in-logstash-depending-on-path-logs/302807)
**Author:** [@dapmI](https://discuss.elastic.co/u/dapmI)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/reparsing-processing-old-indexes-with-new-separation-files-in-logstash-depending-on-path-logs/302807 "2022-04-20T12:01:23Z")
Hello, I'm currently in the process to separate indexes depending on the path logs. Here we had to separate logs depending on the source files to better apply lifecycle policy. Currently we have one common index with lo… --- ## [The PC is lagging and stops working when i run app search 8.1.1](https://discuss.elastic.co/t/the-pc-is-lagging-and-stops-working-when-i-run-app-search-8-1-1/302806)
**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 11:45am UTC](https://discuss.elastic.co/t/the-pc-is-lagging-and-stops-working-when-i-run-app-search-8-1-1/302806 "2022-04-20T11:45:55Z")
I have installed Elasticsearch and Kibana and elastic enterprise-search v8 and installed the tar.gz linux version, currently installed everything on ubuntu 20.04 as a dual boot in my PC with windows, gave it 250go of mem… --- ## [Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://elastic:xxxxxx@xxx.xxx.xx.xx:9200/", :error\_type=\>LogStash:error=\>"Elasticsearch Unreachable: \[https://elastic:xxxxxx@xxx.xxx.xx.xx:9200/\]](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200-error-type-logstash-error-elasticsearch-unreachable-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200/302676)
**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 11:32am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200-error-type-logstash-error-elasticsearch-unreachable-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200/302676 "2022-04-20T11:32:23Z")
Hi Team, I tried to connect Elasticsearch from Logstash i'm facing this error. I deployed Elasticsearch using HTTPS and check without passing a certificate its shows an error Elastic hosts is unreachable and again ill te… --- ## [How to access objects fields nested value in runtime field painless (or expression) scripts?](https://discuss.elastic.co/t/how-to-access-objects-fields-nested-value-in-runtime-field-painless-or-expression-scripts/302699)
**Author:** [@Mohammad\_Ostadi](https://discuss.elastic.co/u/Mohammad_Ostadi)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 9:25am UTC](https://discuss.elastic.co/t/how-to-access-objects-fields-nested-value-in-runtime-field-painless-or-expression-scripts/302699 "2022-04-20T09:25:33Z")
I have a document like this: POST test/\_doc { "name":"Ali", "age":20, "grades":\[ { "title":"math", "score":1 }, { "title":"english", "score":2 }, { "title":"physic", "sc… --- ## [Custom search fields using metadata](https://discuss.elastic.co/t/custom-search-fields-using-metadata/302713)
**Author:** [@Hamza\_Youssouf](https://discuss.elastic.co/u/Hamza_Youssouf)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:26am UTC](https://discuss.elastic.co/t/custom-search-fields-using-metadata/302713 "2022-04-20T08:26:36Z")
Hello, I'm new to Elastic. I would like to develop a .Net application that will use Elastic. I had a question about the research part. I have several types of documents with each specific metadata. Would it be possible … --- ## [Missing \_meta field in mapping \[doc\] of index\[watches\] & \[.triggered\_watches\]](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410)
**Author:** [@axi](https://discuss.elastic.co/u/axi)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:23am UTC](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410 "2022-04-20T08:23:21Z")
I just updated my cloud elastic stack from 6.8.23 to 7.17.2 using the cloud.elastic.co dashboard and all went well but I have now some WARNs in the log section of the dashboard: \[instance-0000000010\] Missing \_meta field… --- ## [How to set analyzer in Java Client Elasticsearch -\> Search Request Builder in query time](https://discuss.elastic.co/t/how-to-set-analyzer-in-java-client-elasticsearch-search-request-builder-in-query-time/302723)
**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-set-analyzer-in-java-client-elasticsearch-search-request-builder-in-query-time/302723 "2022-04-20T08:22:56Z")
How to set analyzer in Java Client Elasticsearch -\> Search Request Builder in query time --- ## [Event.module Field Not Added by Winlogbeat Module (\>= v8.0.0)](https://discuss.elastic.co/t/event-module-field-not-added-by-winlogbeat-module-v8-0-0/302595)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 7:27am UTC](https://discuss.elastic.co/t/event-module-field-not-added-by-winlogbeat-module-v8-0-0/302595 "2022-04-20T07:27:43Z")
Hi there, As far as I understand, event.module is not being added to each document originating from Winlogbeat (starting from v8.0.0) that uses Winlogbeat modules. This field was previously seen from v7.4.0 onwards, wh… --- ## [Will spring-boot-starter-actuator provide more information for Elatsic APM Agent?](https://discuss.elastic.co/t/will-spring-boot-starter-actuator-provide-more-information-for-elatsic-apm-agent/302540)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 7:10am UTC](https://discuss.elastic.co/t/will-spring-boot-starter-actuator-provide-more-information-for-elatsic-apm-agent/302540 "2022-04-20T07:10:31Z")
I am a newbie to Elastic APM, so I have some doubts about javaagent, I hope some friends could answer it. In a traditional SpringBoot project, there is usually a dependency such as org.springframework.boot:spring-boot-s… [Previous page](https://discuss.elastic.co/latest.md?page=1163) [Next page](https://discuss.elastic.co/latest.md?page=1165)