# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1176

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1177

---

## [Elastic Discord server](https://discuss.elastic.co/t/elastic-discord-server/179981)

<div class="topic-metadata">

**Author:** [@me22](https://discuss.elastic.co/u/me22)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 9:13pm UTC](https://discuss.elastic.co/t/elastic-discord-server/179981 "2022-03-02T21:13:23Z")

</div>

Hi, I created a Discord server for Elastic - https://discord.gg/UtTCJnA I hope it will be useful, especially if you want to use Slack-like tool but not necessarily Slack.

---

## [Migration from HLRC to Java API](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479)

<div class="topic-metadata">

**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\
**Replies:** 6\
**Last updated:** [April 11, 2022, 11:59am UTC](https://discuss.elastic.co/t/migration-from-hlrc-to-java-api/300479 "2022-04-11T11:59:06Z")

</div>

In this page talking about migration https://www.elastic.co/guide/en/elasticsearch/client/java-api-client/current/migrate-hlrc.html I found this keep the existing code as-is and use the new Java API Client for new fe…

---

## [Upgrade to Elastic 8.0.0 (Windows Zip package)](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816)

<div class="topic-metadata">

**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\
**Replies:** 6\
**Last updated:** [April 11, 2022, 11:46am UTC](https://discuss.elastic.co/t/upgrade-to-elastic-8-0-0-windows-zip-package/297816 "2022-04-11T11:46:22Z")

</div>

Error “… will not overwrite keystore …, because this incurs changing the file owner” Verbose at org.elasticsearch.common.settings.KeyStoreWrapper.save(KeyStoreWrapper.java:608) at org.elasticsearch.common.settings.Key…

---

## [Can I set hostname that in fleet elastic agent page?](https://discuss.elastic.co/t/can-i-set-hostname-that-in-fleet-elastic-agent-page/302086)

<div class="topic-metadata">

**Author:** [@xcyk1226](https://discuss.elastic.co/u/xcyk1226)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 9:15am UTC](https://discuss.elastic.co/t/can-i-set-hostname-that-in-fleet-elastic-agent-page/302086 "2022-04-11T09:15:52Z")

</div>

Can I set hostname by myself?

---

## [Duplicate logs in kibana](https://discuss.elastic.co/t/duplicate-logs-in-kibana/301945)

<div class="topic-metadata">

**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 11:37am UTC](https://discuss.elastic.co/t/duplicate-logs-in-kibana/301945 "2022-04-11T11:37:51Z")

</div>

Hello, I have an issue: Logs injects more than one time. It has different IDs but log contains the same data: I use FluentD to collect logs from the k8s cluster with this config: extraConfigMaps: containe…

---

## [Calculated fields](https://discuss.elastic.co/t/calculated-fields/302025)

<div class="topic-metadata">

**Author:** [@wiwinagtor](https://discuss.elastic.co/u/wiwinagtor)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 11:10am UTC](https://discuss.elastic.co/t/calculated-fields/302025 "2022-04-11T11:10:47Z")

</div>

Hello everyone, I am making a visualization in kibana in which I need to obtain several calculated fields at the end of it, such as "% of identified customers" (See the example). I searched on the web an also here, that …

---

## [Muliple nested 'Should' sub-queries using DSL](https://discuss.elastic.co/t/muliple-nested-should-sub-queries-using-dsl/302097)

<div class="topic-metadata">

**Author:** [@daniel.butler](https://discuss.elastic.co/u/daniel.butler)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 11:08am UTC](https://discuss.elastic.co/t/muliple-nested-should-sub-queries-using-dsl/302097 "2022-04-11T11:08:32Z")

</div>

Hi, I have a query which works as I intended however when trying to replicate the query in DSL I have been unable to get the generated query to match and so the results are obviously incorrect. What I need to achieve i…

---

## [How to display login user details and activities in Kibana UI](https://discuss.elastic.co/t/how-to-display-login-user-details-and-activities-in-kibana-ui/300190)

<div class="topic-metadata">

**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:55am UTC](https://discuss.elastic.co/t/how-to-display-login-user-details-and-activities-in-kibana-ui/300190 "2022-04-11T10:55:22Z")

</div>

Hello Team, Is there any way to display user details and activities , performed by user in Kibana UI. I would like to try configuration for UI and audit log is already tried out. Thanks in Advance, Prathibha.M

---

## [Okta - ElastiCloud - We hit an authentication error. Please check your credentials and try again](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882)

<div class="topic-metadata">

**Author:** [@chasep](https://discuss.elastic.co/u/chasep)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:54am UTC](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882 "2022-04-11T10:54:00Z")

</div>

Hi, Setting up OKTA\<-\>ElasticCloud SAML 2.0. For Reference, I have followed the steps from following. Integrating Elastic Cloud Kibana with Okta SAML SSO in 2021 - BioTeam Secure your clusters with SAML | Elasticsea…

---

## [Elastic fleet change datastream name based on field value](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 9\
**Last updated:** [April 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/elastic-fleet-change-datastream-name-based-on-field-value/301155 "2022-04-11T10:49:37Z")

</div>

Hi, I need to set different ILM policies based on logs field value (one for PROD , other for NONPROD), so I created an ingest pipeline that renames the \_index field as @ruflin suggested in a github issue and works good w…

---

## [Kibana fails login,commands with ERROR](https://discuss.elastic.co/t/kibana-fails-login-commands-with-error/301504)

<div class="topic-metadata">

**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:47am UTC](https://discuss.elastic.co/t/kibana-fails-login-commands-with-error/301504 "2022-04-11T10:47:21Z")

</div>

Hello i was configuring minimal security for Elasticsearch following the docs bellow. I set a password , but the problem is Kibana fail to login. You will find a screenshot of the error :

---

## [Continuous transform failures](https://discuss.elastic.co/t/continuous-transform-failures/302053)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 10:46am UTC](https://discuss.elastic.co/t/continuous-transform-failures/302053 "2022-04-11T10:46:14Z")

</div>

Hello, What can cause this error when running a continuous transform ? \[s1-aggs-xxx\] Search context missing, falling back to normal search; request \[apply\_results\] Caused by: org.Elasticsearch.search.SearchContextMiss…

---

## [How check internodes SSL encryption?](https://discuss.elastic.co/t/how-check-internodes-ssl-encryption/302095)

<div class="topic-metadata">

**Author:** [@Barbarossa](https://discuss.elastic.co/u/Barbarossa)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 10:39am UTC](https://discuss.elastic.co/t/how-check-internodes-ssl-encryption/302095 "2022-04-11T10:39:45Z")

</div>

If i have a cluster and configured the tranport layer connection to be encrypted, is there a way or some command to actually verify that the communication between all nodes is encrypted?

---

## [Elastic watcher for http 400 and http 500](https://discuss.elastic.co/t/elastic-watcher-for-http-400-and-http-500/302094)

<div class="topic-metadata">

**Author:** [@sravan.kumar.potnuru](https://discuss.elastic.co/u/sravan.kumar.potnuru)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 10:38am UTC](https://discuss.elastic.co/t/elastic-watcher-for-http-400-and-http-500/302094 "2022-04-11T10:38:06Z")

</div>

Hello I was quite new to the elastic and its observability stack. I was struggling hard to create the watcher based on the elastic APM data i.e., needs to trigger whenever there is a http 400 or 500 received in the APM…

---

## [Not able to create elasticsearch on Azure aks](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057)

<div class="topic-metadata">

**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\
**Replies:** 2\
**Last updated:** [April 11, 2022, 10:30am UTC](https://discuss.elastic.co/t/not-able-to-create-elasticsearch-on-azure-aks/302057 "2022-04-11T10:30:26Z")

</div>

Im trying to create Elasticsearch on azure Kubernetes service (v 1.20.13) using eck version (1.8.0) here is my kubernetes deployment script apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: …

---

## [Is it possible to add and delete alias to indexes on Kibana?](https://discuss.elastic.co/t/is-it-possible-to-add-and-delete-alias-to-indexes-on-kibana/302004)

<div class="topic-metadata">

**Author:** [@nanopico](https://discuss.elastic.co/u/nanopico)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-and-delete-alias-to-indexes-on-kibana/302004 "2022-04-11T10:19:25Z")

</div>

I know that it's possible to programmatically add and create alias through the API as outlined in the documentation Aliases API | Elasticsearch Guide \[8.1\] | Elastic Is it possible to do create an alias and add it to an…

---

## [After installation Kibana does'nt work](https://discuss.elastic.co/t/after-installation-kibana-doesnt-work/301716)

<div class="topic-metadata">

**Author:** [@Supelec](https://discuss.elastic.co/u/Supelec)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:15am UTC](https://discuss.elastic.co/t/after-installation-kibana-doesnt-work/301716 "2022-04-11T10:15:59Z")

</div>

Hello, OS server where i installed Kibana is MAc OS Monterey 12.3.1 I installed the ElK stack, i got an error message with Kibana. brew services list Name Status User File Elasticsearch error 256 oth…

---

## [Check if a single point, is contained in documents multiple geohash,](https://discuss.elastic.co/t/check-if-a-single-point-is-contained-in-documents-multiple-geohash/302091)

<div class="topic-metadata">

**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 10:14am UTC](https://discuss.elastic.co/t/check-if-a-single-point-is-contained-in-documents-multiple-geohash/302091 "2022-04-11T10:14:49Z")

</div>

So I have a geo point , \[-70, 40\] for example And I have an index with multiple documents, each document containing multiple geohashes of various precisions. I am struggling to find out, how can I query that my geopoin…

---

## [Kibana 7.3.2 Index creation failed](https://discuss.elastic.co/t/kibana-7-3-2-index-creation-failed/302020)

<div class="topic-metadata">

**Author:** [@Siva\_Kumar\_Menta](https://discuss.elastic.co/u/Siva_Kumar_Menta)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 10:02am UTC](https://discuss.elastic.co/t/kibana-7-3-2-index-creation-failed/302020 "2022-04-11T10:02:20Z")

</div>

Hi, I'm trying to create index by loading csv with Kibana version 7.3.2 but getting failed. Provided below are relavant screen shots. Please guide me with solution. Screenshots after loading data: Screen shot for…

---

## [Configuring multiple nodes](https://discuss.elastic.co/t/configuring-multiple-nodes/300922)

<div class="topic-metadata">

**Author:** [@albert2022](https://discuss.elastic.co/u/albert2022)\
**Replies:** 7\
**Last updated:** [April 11, 2022, 9:33am UTC](https://discuss.elastic.co/t/configuring-multiple-nodes/300922 "2022-04-11T09:33:45Z")

</div>

We try to run an Elasticsearch cluster with multiple nodes on the same VM for testing purpose and for this we are using the following docker compose file: version: "2.2" services: es01: image: docker.elastic.co/e…

---

## [Elasticsearch documents are dropped on bulk insert](https://discuss.elastic.co/t/elasticsearch-documents-are-dropped-on-bulk-insert/301837)

<div class="topic-metadata">

**Author:** [@JanMo](https://discuss.elastic.co/u/JanMo)\
**Replies:** 3\
**Last updated:** [April 11, 2022, 9:15am UTC](https://discuss.elastic.co/t/elasticsearch-documents-are-dropped-on-bulk-insert/301837 "2022-04-11T09:15:28Z")

</div>

I have the following situation: Logstash with a JDBC input connector and an Elasticsearch output connector. The data is loaded initially into the ES, meaning the indices which are filled do not exist prior to the Logstas…

---

## [Eror : No indices match pattern “filebeat-\*” - filebeat 8.1.2](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat-filebeat-8-1-2/302075)

<div class="topic-metadata">

**Author:** [@Ruhan\_Khandakar](https://discuss.elastic.co/u/Ruhan_Khandakar)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 8:24am UTC](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat-filebeat-8-1-2/302075 "2022-04-11T08:24:16Z")

</div>

Hi, Please help getting No matching indices found: No indices match pattern "filebeat-\*" this error, with filebeat-8.1.2 Here is my filebeat.yml configuration ###################### Filebeat Configuration Example ###…

---

## [Lens Metric - subtract a value based of number of days in query](https://discuss.elastic.co/t/lens-metric-subtract-a-value-based-of-number-of-days-in-query/301927)

<div class="topic-metadata">

**Author:** [@sqbell](https://discuss.elastic.co/u/sqbell)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 7:46am UTC](https://discuss.elastic.co/t/lens-metric-subtract-a-value-based-of-number-of-days-in-query/301927 "2022-04-11T07:46:50Z")

</div>

Hi, I'm trying to create a metric that would show our profits. I'm using Lens Metric and the calculation so far is like so: round((round((sum(money\_amount\_eur\_reverse, kql='type:bet\_transaction OR type:settle\_transacti…

---

## [Connectivity Issue between Winlog - Kafka - Logstash](https://discuss.elastic.co/t/connectivity-issue-between-winlog-kafka-logstash/302071)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 7:34am UTC](https://discuss.elastic.co/t/connectivity-issue-between-winlog-kafka-logstash/302071 "2022-04-11T07:34:51Z")

</div>

Hello, I am using elastic stack v8 composed of: 2 servers: Masters + data 1 server: data + kibana 1 server: kafka + logstash winglogbeat configuration output.kafka: hosts: \["X.X.X.X:9092"\] topic: "Win…

---

## [Disable apm-token, or add custom annotations to it?](https://discuss.elastic.co/t/disable-apm-token-or-add-custom-annotations-to-it/301981)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 7:17am UTC](https://discuss.elastic.co/t/disable-apm-token-or-add-custom-annotations-to-it/301981 "2022-04-11T07:17:45Z")

</div>

Hi thanks for ECK! I have a elastic instance in namespace A, but have a spring app that uses elastic apm in namespace B. The problem is, k8s Secret cannot be shared across namespaces, but we need the apm-token Secret to …

---

## [Whitespaces are not displayed on the visialization](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340)

<div class="topic-metadata">

**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\
**Replies:** 1\
**Last updated:** [April 11, 2022, 7:09am UTC](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340 "2022-04-11T07:09:00Z")

</div>

Hi All, I have a string field with multiple whitespaces in it(replaced whitespaces with \_ to show): "numloops\_\_\_\_\_\_\_\_\_\_\_\_\_\_| 5\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_" I see the the text is correctly captured in the Jason output…

---

## [Unable to execute custom mapping in Elasticsearch 7.10.2 Using Logstash 7.10.2](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068)

<div class="topic-metadata">

**Author:** [@Satya\_N](https://discuss.elastic.co/u/Satya_N)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 5:55am UTC](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068 "2022-04-11T05:55:15Z")

</div>

Hi All, I am trying to sync data from mysql to Elasticsearch using logstash 7.10.2..Elasticsearch version I am using is : 7.10.2. When I am executing template using logstash , it is not creating in Elasticsearch so ev…

---

## [Aggregation Filter Sort - InternalFilter cannot be cast to class InternalMultiBucketAggregation](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050)

<div class="topic-metadata">

**Author:** [@Sridatta19](https://discuss.elastic.co/u/Sridatta19)\
**Replies:** 4\
**Last updated:** [April 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050 "2022-04-11T05:02:05Z")

</div>

I'm try to sort the results generated after performing terms, filter and sum aggregation. But I keep facing an error. GET stats/\_search { "size": 0, "aggs": { "group\_by\_names": { "terms": { "field"…

---

## [Hide username/password ebats](https://discuss.elastic.co/t/hide-username-password-ebats/302062)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 0\
**Last updated:** [April 11, 2022, 2:43am UTC](https://discuss.elastic.co/t/hide-username-password-ebats/302062 "2022-04-11T02:43:47Z")

</div>

right there is a password and username, how do I make the beats that I have don't include it but can still be connected?

---

## [No Structured Logs Found in Stack Monitoring when using Logstash](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005)

<div class="topic-metadata">

**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\
**Replies:** 6\
**Last updated:** [April 11, 2022, 2:23am UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005 "2022-04-11T02:23:59Z")

</div>

Same issue Running filebeat -\> Elasticsearch = Works, can see Server, GC, Kibana etc logs... filebeat -\> Logstash = No Logs displayed

[Previous page](https://discuss.elastic.co/latest.md?page=1175)

[Next page](https://discuss.elastic.co/latest.md?page=1177)
