# Latest **URL:** https://discuss.elastic.co/latest.md?page=1173 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1174 --- ## [Successful create index pattern but when go to discovery tab it show "No results match your search criteria"](https://discuss.elastic.co/t/successful-create-index-pattern-but-when-go-to-discovery-tab-it-show-no-results-match-your-search-criteria/302192)
**Author:** [@Sugoy](https://discuss.elastic.co/u/Sugoy)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 9:37am UTC](https://discuss.elastic.co/t/successful-create-index-pattern-but-when-go-to-discovery-tab-it-show-no-results-match-your-search-criteria/302192 "2022-04-13T09:37:39Z")
can anyone help me, i using ELK to logging mikrotik using this tutorial Push logs and data into elasticsearch - Part 2 Mikrotik Logs it successful create index pattern but when go to discovery tab it show "No results mat… --- ## [Parsing query string with custom aggregation, using Search API](https://discuss.elastic.co/t/parsing-query-string-with-custom-aggregation-using-search-api/302200)
**Author:** [@veggiss](https://discuss.elastic.co/u/veggiss)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 9:32am UTC](https://discuss.elastic.co/t/parsing-query-string-with-custom-aggregation-using-search-api/302200 "2022-04-13T09:32:17Z")
I've installed a plugin to elastic (GitHub - opendatasoft/elasticsearch-aggregation-geoclustering: An Elasticsearch plugin to aggregate Geo Points in clusters.) and I have an endpoint (high level rest client) that takes … --- ## [ElasticSearch pods are in intializing dstate after configuring xpack security and tls](https://discuss.elastic.co/t/elasticsearch-pods-are-in-intializing-dstate-after-configuring-xpack-security-and-tls/302310)
**Author:** [@s19k15](https://discuss.elastic.co/u/s19k15)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-pods-are-in-intializing-dstate-after-configuring-xpack-security-and-tls/302310 "2022-04-13T09:19:55Z")
I am having an Elasticsearch deployment on a kubernetes cluster that was deployed with a 7.x chart and i changed the image to 8.x. This worked but now i need to enable new security feature, I have the following values: -… --- ## [file.name":"module/wrapper.go","file.line":259},"message":"Error fetching data for metricset kibana.status: error making http request: Get \\"https://kibana/api/status\\": x509: certificate signed by unknown authority](https://discuss.elastic.co/t/file-name-module-wrapper-go-file-line-259-message-error-fetching-data-for-metricset-kibana-status-error-making-http-request-get-https-kibana-api-status-x509-certificate-signed-by-unknown-authority/302304)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 8:47am UTC](https://discuss.elastic.co/t/file-name-module-wrapper-go-file-line-259-message-error-fetching-data-for-metricset-kibana-status-error-making-http-request-get-https-kibana-api-status-x509-certificate-signed-by-unknown-authority/302304 "2022-04-13T08:47:16Z")
Im using fleet server and elastic agent to monitoring kibana, i have cert error fleet server is running in a container bootstrap with ansible env: FLEET\_SERVER\_ENABLE: "1" FLEET\_URL: "{{ docker\_fleet\_serv… --- ## [No SQL Query information collected from PHP APM agent (WordPress CMS)](https://discuss.elastic.co/t/no-sql-query-information-collected-from-php-apm-agent-wordpress-cms/302208)
**Author:** [@erictung](https://discuss.elastic.co/u/erictung)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 8:19am UTC](https://discuss.elastic.co/t/no-sql-query-information-collected-from-php-apm-agent-wordpress-cms/302208 "2022-04-13T08:19:31Z")
Kibana version: 7.13.0 Elasticsearch version: 7.13.0 APM Server version: 7.13.0 APM Agent language and version: PHP 1.5 Browser version: Chrome 100 Original install method (e.g. download page, yum, deb, from source,… --- ## [Filebeat condition](https://discuss.elastic.co/t/filebeat-condition/302225)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 12:28pm UTC](https://discuss.elastic.co/t/filebeat-condition/302225 "2022-04-12T12:28:35Z")
Hi, I use filebeat to read logs from different paths so for example filebeat.yml filebeat.inputs: - type: log enabled: true paths: - D:\\elastic\_stack\\LOGS\\test-LOGS1\\\* fields: kafka\_topic: "kafka-top… --- ## [Rest API: load the color details with mapping](https://discuss.elastic.co/t/rest-api-load-the-color-details-with-mapping/302081)
**Author:** [@octagon.mobile](https://discuss.elastic.co/u/octagon.mobile)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 8:06am UTC](https://discuss.elastic.co/t/rest-api-load-the-color-details-with-mapping/302081 "2022-04-13T08:06:11Z")
The Rest API Bulk Get (api/saved\_objects/\_bulk\_get) doesn't return the colors used in a pie chart, unless user updates the color of pie chart slice. With default colors the response "uiStateJSON" is empty {} But when I… --- ## [Heartbeat doesn't discover anything on Kubernetes](https://discuss.elastic.co/t/heartbeat-doesnt-discover-anything-on-kubernetes/301819)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 4\ **Last updated:** [April 12, 2022, 11:07pm UTC](https://discuss.elastic.co/t/heartbeat-doesnt-discover-anything-on-kubernetes/301819 "2022-04-12T23:07:18Z")
Hello, I've Elastic Stack 8.1 installed. This is my heartbeat config below: heartbeat.yml: |- heartbeat.autodiscover: # Autodiscover pods providers: - type: kubernetes resource: pod … --- ## [Span compression potentially breaks Redis instrumentation?](https://discuss.elastic.co/t/span-compression-potentially-breaks-redis-instrumentation/300823)
**Author:** [@efdknittlfrank](https://discuss.elastic.co/u/efdknittlfrank)\ **Replies:** 23\ **Last updated:** [April 13, 2022, 7:11am UTC](https://discuss.elastic.co/t/span-compression-potentially-breaks-redis-instrumentation/300823 "2022-04-13T07:11:37Z")
I was eager to try out the new "Span compression" feature of the Java APM agent version 1.30.0. The good news: it works and it is awesome! The bad news: it looks like it leads to lockups and timeouts in our application, … --- ## [Reindex is failing slice option](https://discuss.elastic.co/t/reindex-is-failing-slice-option/302293)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 6:25am UTC](https://discuss.elastic.co/t/reindex-is-failing-slice-option/302293 "2022-04-13T06:25:06Z")
We have an index with 28 shards. Reindex is failing when we use the slice option as below. POST https://localhost:9200/\_reindex?wait\_for\_completion=false&slices=10 {"source":{ "index": "OldIndex"},"dest":{ "index": "new… --- ## [Running Elasticsearch with expired license](https://discuss.elastic.co/t/running-elasticsearch-with-expired-license/302282)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:27am UTC](https://discuss.elastic.co/t/running-elasticsearch-with-expired-license/302282 "2022-04-13T05:27:25Z")
Hi, My team is running Elasticsearch 7.16.3 with an enterprise license that is about to expire. We use X-Pack but as far as I know that became open-source since we started using it and we don't actively use any of the … --- ## [Are there any tiny tracks which can be used to run quickly to see everything is fine.?](https://discuss.elastic.co/t/are-there-any-tiny-tracks-which-can-be-used-to-run-quickly-to-see-everything-is-fine/302288)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:19am UTC](https://discuss.elastic.co/t/are-there-any-tiny-tracks-which-can-be-used-to-run-quickly-to-see-everything-is-fine/302288 "2022-04-13T05:19:45Z")
I am looking for tiny tracks which can be executed quickly to verify over all cluster and track executions. Thanks --- ## [Using dynamic value in google\_pubsub filter plugin attributes field](https://discuss.elastic.co/t/using-dynamic-value-in-google-pubsub-filter-plugin-attributes-field/302184)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 3:30am UTC](https://discuss.elastic.co/t/using-dynamic-value-in-google-pubsub-filter-plugin-attributes-field/302184 "2022-04-13T03:30:56Z")
Hi all, I don't know how to give a dynamic value to this attributes field in google\_pubsub output plugin. Currently this is what I do, which is not DRY output { if \[name\] == "userRegistered" { google\_pubsub { … --- ## [Why does not es use FileChannel2SocketChannel to recover shard？](https://discuss.elastic.co/t/why-does-not-es-use-filechannel2socketchannel-to-recover-shard/302224)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 2:43am UTC](https://discuss.elastic.co/t/why-does-not-es-use-filechannel2socketchannel-to-recover-shard/302224 "2022-04-13T02:43:23Z")
Why does not es use FileChannel2SocketChannel to recover shard? which can eliminate the copy between user and kernel. The only benefit that sending file though heap, i can think is to control sending rate. Is there an… --- ## [Index filter doesn't work on Data Frame Analytics](https://discuss.elastic.co/t/index-filter-doesnt-work-on-data-frame-analytics/301841)
**Author:** [@shuiqu](https://discuss.elastic.co/u/shuiqu)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 2:19am UTC](https://discuss.elastic.co/t/index-filter-doesnt-work-on-data-frame-analytics/301841 "2022-04-13T02:19:20Z")
I am new to elastic. When I use the machine learning feature I find that Index filter does not seem to work on Data Frame Analytics. I set the filter AveTicketPrice:500 to 600 on kibana\_sample\_data\_flights and saved th… --- ## [Conditional dynamic templates](https://discuss.elastic.co/t/conditional-dynamic-templates/302243)
**Author:** [@channing\_froom](https://discuss.elastic.co/u/channing_froom)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 1:59am UTC](https://discuss.elastic.co/t/conditional-dynamic-templates/302243 "2022-04-13T01:59:26Z")
Is it possible to set up dynamic templates through conditions, for example i have an attributes object in my index which holds only dynamic data, there are hundreds of possible combinations of data that is passed into th… --- ## [How to search on a graph using elastic search?](https://discuss.elastic.co/t/how-to-search-on-a-graph-using-elastic-search/302173)
**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 11:47pm UTC](https://discuss.elastic.co/t/how-to-search-on-a-graph-using-elastic-search/302173 "2022-04-12T23:47:20Z")
I'm thinking about building a search engine based on syntactic structure of a sentences. For example, an entry "Gus is learning piano" will be stored in a syntactically enriched form such as, {{"Gus", nsubj, "learning"… --- ## [Too many buckets](https://discuss.elastic.co/t/too-many-buckets/302275)
**Author:** [@mario-slowinski](https://discuss.elastic.co/u/mario-slowinski)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 9:34pm UTC](https://discuss.elastic.co/t/too-many-buckets/302275 "2022-04-12T21:34:20Z")
Hello In environment with almost 200 hosts, each sends metricbeat (i.e. network metrics every 30 seconds) to single Elasticsearch cluster. There is a business requirement to visualize incoming network traffic bandwidth … --- ## [How to change kibanas default port](https://discuss.elastic.co/t/how-to-change-kibanas-default-port/302104)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 9\ **Last updated:** [April 12, 2022, 8:28pm UTC](https://discuss.elastic.co/t/how-to-change-kibanas-default-port/302104 "2022-04-12T20:28:29Z")
Hi, whe i need to access my kibana from a browser, i need to put ip:5601, how i change the default kibanas port that to use 443 port and just use https://ip to access kibana? --- ## [Connect Workplace Search with SNowflake](https://discuss.elastic.co/t/connect-workplace-search-with-snowflake/302259)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 7:40pm UTC](https://discuss.elastic.co/t/connect-workplace-search-with-snowflake/302259 "2022-04-12T19:40:45Z")
Can you use a custom connector in workplace search to connect to snowflake to get data? why isn't there an out of the box connector for snowflake? are there any examples of how to get data when using a custom connecto… --- ## [Metricbeat Cluster Monitoring: logstash.node: Could not find field 'id' in Logstash API response](https://discuss.elastic.co/t/metricbeat-cluster-monitoring-logstash-node-could-not-find-field-id-in-logstash-api-response/299651)
**Author:** [@marcus\_lhisp](https://discuss.elastic.co/u/marcus_lhisp)\ **Replies:** 16\ **Last updated:** [April 12, 2022, 6:36pm UTC](https://discuss.elastic.co/t/metricbeat-cluster-monitoring-logstash-node-could-not-find-field-id-in-logstash-api-response/299651 "2022-04-12T18:36:41Z")
Hello Community, Today I've upgraded our ELK Stack from 8.0 to 8.1. Since then the metricbeat, running on the logstash node, started to log something that I wasn't able to figure out by myself with my "Google-fu". Bes… --- ## [This version of the ElasticsearchIO is only compatible with Elasticsearch v7.x, v6.x, v5.x and v2.x](https://discuss.elastic.co/t/this-version-of-the-elasticsearchio-is-only-compatible-with-elasticsearch-v7-x-v6-x-v5-x-and-v2-x/302253)
**Author:** [@Pavlo\_Kovalenko](https://discuss.elastic.co/u/Pavlo_Kovalenko)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 6:04pm UTC](https://discuss.elastic.co/t/this-version-of-the-elasticsearchio-is-only-compatible-with-elasticsearch-v7-x-v6-x-v5-x-and-v2-x/302253 "2022-04-12T18:04:29Z")
I need to integrate Google BigQuery into elasticsearch. I used Job template "BigQuery to elasticsearch" from DataFlow in Google console. But it is impossible because my elastic version is 8.1.2. And I got error java.lan… --- ## [Tcp/tcp.go:230 dial failed with: dial tcp localhost:8095: i/o timeout](https://discuss.elastic.co/t/tcp-tcp-go-230-dial-failed-with-dial-tcp-localhost-i-o-timeout/302261)
**Author:** [@BKS](https://discuss.elastic.co/u/BKS)\ **Replies:** 0\ **Last updated:** [April 12, 2022, 5:23pm UTC](https://discuss.elastic.co/t/tcp-tcp-go-230-dial-failed-with-dial-tcp-localhost-i-o-timeout/302261 "2022-04-12T17:23:04Z")
Hi, I have configured heartbeat service to monitor the micro services to get the status of up/down. In Kibana heartbeat dashboard, status is showing as down, but in actually the service is running over the mentioned po… --- ## [Trim off Website Name Programatically?](https://discuss.elastic.co/t/trim-off-website-name-programatically/302037)
**Author:** [@Christopher\_Parsons](https://discuss.elastic.co/u/Christopher_Parsons)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 5:08pm UTC](https://discuss.elastic.co/t/trim-off-website-name-programatically/302037 "2022-04-12T17:08:13Z")
I'd be interested in finding a way to trim off the " - Knowledge Architecture" at the end of our search results without having to reconfigure our CMS and therefore messing with the way search results present on Google… --- ## [Handling multiline with filebeat](https://discuss.elastic.co/t/handling-multiline-with-filebeat/301000)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 7\ **Last updated:** [April 12, 2022, 5:05pm UTC](https://discuss.elastic.co/t/handling-multiline-with-filebeat/301000 "2022-04-12T17:05:12Z")
Hello, I have the following snippet, and I am trying to capture all of it as a multiline \<\< JESI\>\> \[ERROR\] \[TIME:29 Mar 2022 04:34:53\]\[Tid:OUTBOUND\_RECOVERY\_01339\]Exception @\[NodeId=6;Element=Channel@amdocs/eai/adaptor… --- ## [Synthetic Monitoring](https://discuss.elastic.co/t/synthetic-monitoring/302002)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 4:56pm UTC](https://discuss.elastic.co/t/synthetic-monitoring/302002 "2022-04-12T16:56:17Z")
Hi, I have this error on my synthetics test on Uptime Module: page.click: Evaluation failed: DOMException: Failed to execute 'evaluate' on 'Document': The string '\[href=/observability\]' is not a valid XPath expression. … --- ## [How to show the pipeline conf source filename of error in logs](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201)
**Author:** [@Mahf](https://discuss.elastic.co/u/Mahf)\ **Replies:** 8\ **Last updated:** [April 12, 2022, 4:52pm UTC](https://discuss.elastic.co/t/how-to-show-the-pipeline-conf-source-filename-of-error-in-logs/302201 "2022-04-12T16:52:19Z")
Hello, We have multiple logstash conf files that we run simultaneously, the problem is that when we have many errors come from several pipelines, so we can't tell which one is the source of the error, sometimes it's eas… --- ## [Indicator Match - Rule Type: Correlation - Not Match Result Un Available](https://discuss.elastic.co/t/indicator-match-rule-type-correlation-not-match-result-un-available/301734)
**Author:** [@raghulannadurai](https://discuss.elastic.co/u/raghulannadurai)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 4:30pm UTC](https://discuss.elastic.co/t/indicator-match-rule-type-correlation-not-match-result-un-available/301734 "2022-04-12T16:30:39Z")
Good day to you all. Hope the below example can give you more context to the request, Let us consider the below, we have a three document doc1, doc2 and doc3. doc1 and doc2 were indexed into a index name A (firewall … --- ## [Elasticsearch 8.1 - python security client issues](https://discuss.elastic.co/t/elasticsearch-8-1-python-security-client-issues/302162)
**Author:** [@Aldo2](https://discuss.elastic.co/u/Aldo2)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-python-security-client-issues/302162 "2022-04-12T15:43:54Z")
Hi Elastic Community, We are having problems trying to connect a python (2.7.5) client to Elasticsearch 8.1 (with security enabled). We have tried the following example code: from elasticsearch import Elasticsearch fr… --- ## [Logstash reading recursively directories](https://discuss.elastic.co/t/logstash-reading-recursively-directories/302213)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 1\ **Last updated:** [April 12, 2022, 3:30pm UTC](https://discuss.elastic.co/t/logstash-reading-recursively-directories/302213 "2022-04-12T15:30:46Z")
Hi everyone, in my environment I'm trying to read log files that are saved on the file system like this: /home/andrea/mylogs/\[subdir1....subdirN\]/\*.gz /home/andrea/mylogs/\[subdir1...subdirM\]/\*.gz /home/andrea/mylogs/\[s… [Previous page](https://discuss.elastic.co/latest.md?page=1172) [Next page](https://discuss.elastic.co/latest.md?page=1174)