# Latest **URL:** https://discuss.elastic.co/latest.md?page=1169 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1170 --- ## ['suggest\_mode' =\> 'always' does not return suggestion's full word query](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268)
**Author:** [@jacreich](https://discuss.elastic.co/u/jacreich)\ **Replies:** 8\ **Last updated:** [April 15, 2022, 4:49pm UTC](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268 "2022-04-15T16:49:29Z")
Hello, I am running an suggestions query using Elasticsearch v5.5. When looking for a whole word in the document (e.g. 'kneecap'), suggestions are not returned when the whole word is typed, but it does appear when typing… --- ## [ECS issues](https://discuss.elastic.co/t/ecs-issues/301804)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 4:14pm UTC](https://discuss.elastic.co/t/ecs-issues/301804 "2022-04-15T16:14:53Z")
Hi, We have recently upgraded from 7.x to 8.x which overall has been OK. We have a number of feeds via logstash which were in place under 7.x which are indexing correctly due to having been created under 7.x, however w… --- ## [Are any of Elastic's products affected by CVE-2022-22965?](https://discuss.elastic.co/t/are-any-of-elastics-products-affected-by-cve-2022-22965/301576)
**Author:** [@xxgogogo](https://discuss.elastic.co/u/xxgogogo)\ **Replies:** 3\ **Last updated:** [April 15, 2022, 2:08pm UTC](https://discuss.elastic.co/t/are-any-of-elastics-products-affected-by-cve-2022-22965/301576 "2022-04-15T14:08:52Z")
Hi, Are any of Elastic's products(Elasticsearch, Kibana, and so on) affected by CVE-2022-22965? Link: https://tanzu.vmware.com/security/cve-2022-22965 Thanks! --- ## [Logging ES queries in elasticsearch-spark-30](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435)
**Author:** [@sergeyka](https://discuss.elastic.co/u/sergeyka)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 2:03pm UTC](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435 "2022-04-15T14:03:48Z")
Is there a way to log Elasticsearch queries issued by the elasticsearch-spark-30\_2.12 library? What I tried: Setting everything to trace log level. URLs of requests sent to Elasticsearch were printed, but not the body… --- ## [Elastic 8.1 RAM memory leak](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497)
**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:55am UTC](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497 "2022-04-15T09:55:31Z")
Hello. I'm using Elasticsearch 8.1, dependency co.elastic.clients Elasticsearch-java version 8.1.2. When creating one scroll request for 15\_000 records, a large memory consumption occurs. The request consumed 8 GB of mem… --- ## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 12:20pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396 "2022-04-15T12:20:05Z")
Hello, We are using Elasticsearch 7.16.3 and Elasticsearch 7.15.1. Can you let us know which java version both the Elasticsearch versions are using? Please let us know, whether ES is affected any way by the report… --- ## [ODBC failed connection to remote ES server](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 12:03pm UTC](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493 "2022-04-15T12:03:34Z")
Hi, I'm trying to connect to my remote server, where i have ES and all my data, with the ODBC driver to pull data to excel in my PC. When i try to configure the remote connection in the ODBC data sources, i receive thi… --- ## [Incorrect time in @timestamp field](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 11:43am UTC](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489 "2022-04-15T11:43:25Z")
Dears, I have some odd problem with @timestamp field in my indices which include incorrect time i.e. minus two hours. Logstash should populate time to @timestamp from logs on the base of this: if ("" in \[hi.my\_date\]) {… --- ## [Is there another way to import template at boot?](https://discuss.elastic.co/t/is-there-another-way-to-import-template-at-boot/301544)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 10:35am UTC](https://discuss.elastic.co/t/is-there-another-way-to-import-template-at-boot/301544 "2022-04-15T10:35:06Z")
Hey there, I am configuring several Beats with a custom mapping. I would just to know if there is another way to load custom template (setup.template.\*) at startup or I must use the fields.yml file. I mean, if I have hu… --- ## [Problems when importing ml models with eland\_import\_hub\_model](https://discuss.elastic.co/t/problems-when-importing-ml-models-with-eland-import-hub-model/302499)
**Author:** [@cman](https://discuss.elastic.co/u/cman)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/problems-when-importing-ml-models-with-eland-import-hub-model/302499 "2022-04-15T10:24:20Z")
I have got some errors while trying to import a couple of ml models by the command "eland\_import\_hub\_model". In the one case I would like to import this model: sentence-transformers/paraphrase-multilingual-MiniLM-L12-v2 … --- ## [Monitor logs and create alert](https://discuss.elastic.co/t/monitor-logs-and-create-alert/302495)
**Author:** [@bdaniel7](https://discuss.elastic.co/u/bdaniel7)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 10:04am UTC](https://discuss.elastic.co/t/monitor-logs-and-create-alert/302495 "2022-04-15T10:04:52Z")
Hi, Is there a way to monitor incoming logs (from fluent-bit, in my case) and trigger an alert when specific keywords appear in logs? I'm just beginning to use the ELK stack, so forgive me if I say silly things. --- ## [Is it planned to support Openshift Metrics such as DeploymentConfig?](https://discuss.elastic.co/t/is-it-planned-to-support-openshift-metrics-such-as-deploymentconfig/299312)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 9:41am UTC](https://discuss.elastic.co/t/is-it-planned-to-support-openshift-metrics-such-as-deploymentconfig/299312 "2022-04-15T09:41:37Z")
Hi, as I noticed one cannot use metricbeat to retrieve metrics from objects like DeploymentConfig (maybe others) from Openshift. Is there a plan to make it possible ? Thanks --- ## [Parse Haproxy Log](https://discuss.elastic.co/t/parse-haproxy-log/302494)
**Author:** [@Serge\_Reynier](https://discuss.elastic.co/u/Serge_Reynier)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:40am UTC](https://discuss.elastic.co/t/parse-haproxy-log/302494 "2022-04-15T09:40:38Z")
Hi, I actually testing "elastic.co" to store and parse my haproxy logs, but I can't parse them properly. I use Haproxy 2.2 and elastic-agent to send logs and i installed Haproxy Integration to parse log. Lots of field … --- ## [Logstash Queues Management](https://discuss.elastic.co/t/logstash-queues-management/302493)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:14am UTC](https://discuss.elastic.co/t/logstash-queues-management/302493 "2022-04-15T09:14:50Z")
Hi, I'm wondering if there is a way to gracefully purge all events in either DLQ (Dead Letter Queue) / PQ (Persistent Queue)? By purging, I mean to drop all those pending events so that I could bring up a dead Logstash A… --- ## [Create Coordinate nodes on existing cluster on Kubernetes](https://discuss.elastic.co/t/create-coordinate-nodes-on-existing-cluster-on-kubernetes/302432)
**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 9:10am UTC](https://discuss.elastic.co/t/create-coordinate-nodes-on-existing-cluster-on-kubernetes/302432 "2022-04-15T09:10:12Z")
We want to add coordinate nodes to increase the performance. We have tried adding role : {} along with pod-affinity : {} but it doesn't create the coordinate nodes and marking yaml invalid. 3 master and 3 data nodes are… --- ## [Logstash Http poller plugin for JIRA](https://discuss.elastic.co/t/logstash-http-poller-plugin-for-jira/302486)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 7:09am UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin-for-jira/302486 "2022-04-15T07:09:51Z")
Hello Guys I want All Jira Issue Action Report to Elasticsearch my requirement is for full issue traking in to Elasticsearch please help me ASAP. --- ## [Deployment of ElasticCloud turned pending status suddenly](https://discuss.elastic.co/t/deployment-of-elasticcloud-turned-pending-status-suddenly/302485)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 7:05am UTC](https://discuss.elastic.co/t/deployment-of-elasticcloud-turned-pending-status-suddenly/302485 "2022-04-15T07:05:53Z")
I am using ElasticCloud v.7.12.1 and it's status suddenly turned pending status. Why does that happen and not able to access Kibana during that time? This is the Summary of Activity during the time of pending. Additio… --- ## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/301925)
**Author:** [@flavono123](https://discuss.elastic.co/u/flavono123)\ **Replies:** 19\ **Last updated:** [April 15, 2022, 6:20am UTC](https://discuss.elastic.co/t/master-not-discovered-exception/301925 "2022-04-15T06:20:21Z")
With the version 7.15.2 from ubuntu package, I deployed 4 ES nodes in 2 VMs, so 2 nodes fo r each VM. Names of nodes(node.name) are following: es-01-1(9301) es-01-2(9302) es-02-1(9301) es-02-2(9302) Where the prefix, … --- ## [How to Monitor Kibana User Experience](https://discuss.elastic.co/t/how-to-monitor-kibana-user-experience/302484)
**Author:** [@ame123](https://discuss.elastic.co/u/ame123)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 6:19am UTC](https://discuss.elastic.co/t/how-to-monitor-kibana-user-experience/302484 "2022-04-15T06:19:41Z")
Hi, I am trying to monitor our Kibana instances using Elastic APM, I was able to enable the built in APM agent and collect the logs. The built in agent does not have the RUM capability does anybody know how to enable RU… --- ## [Index aliases is missing](https://discuss.elastic.co/t/index-aliases-is-missing/302483)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 6:04am UTC](https://discuss.elastic.co/t/index-aliases-is-missing/302483 "2022-04-15T06:04:11Z")
Hi, My winlogbeat index aliases is empty, any idea why it is empty and how to include aliases in every new index? { "winlogbeat-8.1.2-2022.04.15" : { "aliases" : { }, "mappings" : { "\_meta" : { … --- ## [Facing error - Creation from saved object not supported by type dashboard](https://discuss.elastic.co/t/facing-error-creation-from-saved-object-not-supported-by-type-dashboard/300302)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 7\ **Last updated:** [April 15, 2022, 5:26am UTC](https://discuss.elastic.co/t/facing-error-creation-from-saved-object-not-supported-by-type-dashboard/300302 "2022-04-15T05:26:02Z")
Hi, I am trying to embed an existing dashboard in a custom plugin using its id as savedObjectID. I have referred the example plugin dashboard\_embeddable\_examples for the same. But I am facing the error - Creation from … --- ## [Count query over the date range doesn't return proper results](https://discuss.elastic.co/t/count-query-over-the-date-range-doesnt-return-proper-results/302476)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 4:51am UTC](https://discuss.elastic.co/t/count-query-over-the-date-range-doesnt-return-proper-results/302476 "2022-04-15T04:51:56Z")
Executing following query curl -s -XGET http://blah:9200/kgacrm-2022.04.15/\_count?pretty=true {"query": {"range" : {"timestamp": { "gte" : "now-15m", "lt" : "now"}}}} { "count" : 1725, "\_shards" : { "total" : 5… --- ## [Kibana asking for Enrollment Token when xpack.security.enabled: false in Elasticsearch](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118)
**Author:** [@AdmiralGT](https://discuss.elastic.co/u/AdmiralGT)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 4:12am UTC](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118 "2022-04-15T04:12:13Z")
I have Kibana and Elasticsearch running in a kubernetes cluster, both v8.1.2 In my Elasticsearch.yml I have xpack.security.enabled: false This is confirmed by trying to create the enrollment token in Elasticsearch … --- ## [Elastic Agent and Tagging](https://discuss.elastic.co/t/elastic-agent-and-tagging/302165)
**Author:** [@MarcomPrintable](https://discuss.elastic.co/u/MarcomPrintable)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 11:08pm UTC](https://discuss.elastic.co/t/elastic-agent-and-tagging/302165 "2022-04-14T23:08:58Z")
Greetings, I have an EC account and I have been really enjoying using the elastic agent. However, I am hitting a few rough spots. I am trying to tag in a general sense in the Elasticsearch output but I notice that -… --- ## [Unable to get autodiscover to play nice with mongodb using a kubernetes provider](https://discuss.elastic.co/t/unable-to-get-autodiscover-to-play-nice-with-mongodb-using-a-kubernetes-provider/302474)
**Author:** [@Renato\_D](https://discuss.elastic.co/u/Renato_D)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 10:48pm UTC](https://discuss.elastic.co/t/unable-to-get-autodiscover-to-play-nice-with-mongodb-using-a-kubernetes-provider/302474 "2022-04-14T22:48:15Z")
Metricbeat: 7.10.2 We have several mongodb instances across many clusters and would like to enhance the metrics output of all our mongo pods so we can start making some pretty graphs. I've been trying, in vein, to get … --- ## [How to extract fields from "message" field in logstash?](https://discuss.elastic.co/t/how-to-extract-fields-from-message-field-in-logstash/302470)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 9:15pm UTC](https://discuss.elastic.co/t/how-to-extract-fields-from-message-field-in-logstash/302470 "2022-04-14T21:15:44Z")
hello, I need help in extracting the fields that come in the "message" field, in case all the fields need to be extracted, can anyone help? here's the field: "message": "Apr 14 16:11:36 tutorial2022-1 sshd\[8454\]: PAM 2… --- ## [Facing issue in elastic search](https://discuss.elastic.co/t/facing-issue-in-elastic-search/302469)
**Author:** [@Hammadahmed](https://discuss.elastic.co/u/Hammadahmed)\ **Replies:** 3\ **Last updated:** [April 14, 2022, 8:31pm UTC](https://discuss.elastic.co/t/facing-issue-in-elastic-search/302469 "2022-04-14T20:31:23Z")
bin/Elasticsearch \[2022-04-15T00:47:44,478\]\[INFO \]\[o.e.n.Node \] \[ubuntu\] version\[8.1.2\], pid\[11981\], build\[default/tar/31df9689e80bad366ac20176aa7f2371ea5eb4c1/2022-03-29T21:18:59.991429448Z\], OS\[Linux/5.1… --- ## [Elasticsearch run error](https://discuss.elastic.co/t/elasticsearch-run-error/302370)
**Author:** [@dawiddudek](https://discuss.elastic.co/u/dawiddudek)\ **Replies:** 6\ **Last updated:** [April 14, 2022, 7:54pm UTC](https://discuss.elastic.co/t/elasticsearch-run-error/302370 "2022-04-14T19:54:58Z")
Hi, i tried install and run Elasticsearch but service is still failed. I try to run this on Ubuntu 20.04 LTS from apk, dpkg and archive. i found Elasticsearch: Job for elasticsearch.service failed - Stack Overflow but… --- ## [Rules and Connector is not sending ot email;](https://discuss.elastic.co/t/rules-and-connector-is-not-sending-ot-email/301223)
**Author:** [@Amisha\_Thakkar1](https://discuss.elastic.co/u/Amisha_Thakkar1)\ **Replies:** 12\ **Last updated:** [April 14, 2022, 7:48pm UTC](https://discuss.elastic.co/t/rules-and-connector-is-not-sending-ot-email/301223 "2022-04-14T19:48:52Z")
Hi Team I have setup rule under rules and connectors. I am trying to send out an email to my gmail. But its not working. But if i use watcher to send out an email. I am receiving emails. --- ## [Array in Scripted Field](https://discuss.elastic.co/t/array-in-scripted-field/302278)
**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 7:20pm UTC](https://discuss.elastic.co/t/array-in-scripted-field/302278 "2022-04-14T19:20:17Z")
Hi @LeeDr I saw a publication, the cula you explained how to work with array in a scripted field, I had a question, if I want to pivot in a table, an array so that in each cell a value of the array is assigned, how woul… [Previous page](https://discuss.elastic.co/latest.md?page=1168) [Next page](https://discuss.elastic.co/latest.md?page=1170)