# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1180

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1181

---

## [Elasticsearch filters aggregation does not return array format](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736)

<div class="topic-metadata">

**Author:** [@abhi-jana](https://discuss.elastic.co/u/abhi-jana)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 1:05pm UTC](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736 "2022-04-07T13:05:44Z")

</div>

The filters aggregation returns bucket as object "buckets": { "errors": { "doc\_count": 1 }, "warnings": { "doc\_count": 2 } } But i would like to return a …

---

## [What Does The Various Data Files Mean?](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756)

<div class="topic-metadata">

**Author:** [@shaloms](https://discuss.elastic.co/u/shaloms)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 12:55pm UTC](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756 "2022-04-07T12:55:27Z")

</div>

Hi All, I'm new to Elasticsearch and this is my first time posting here, so apologies if I'm doing something incorrectly. Looking in the data directory, I see that there are lot of types of data files such as cfs, cfe,…

---

## [Terms aggregation on field with lowercase normalizer](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 12:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640 "2022-04-07T12:54:15Z")

</div>

Hi, I mapped the following field: "name": { "type": "keyword", "normalizer": "lowercase", "fields": { "text": { "type": "text" } When I run Terms aggregation on this field, I get lowercase results. How can I get the …

---

## [Error - No application was found at this URL. Try going back or choosing an app from the menu](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867)

<div class="topic-metadata">

**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 12:53pm UTC](https://discuss.elastic.co/t/error-no-application-was-found-at-this-url-try-going-back-or-choosing-an-app-from-the-menu/301867 "2022-04-07T12:53:52Z")

</div>

Hi Experts, I created the dashboard in default space and imported that under space-test in kibana. Though the dashboard was imported successfully in space-test, I am not able to edit that dashboard in space-test. Whil…

---

## [Kibana saved objects index pattern update API](https://discuss.elastic.co/t/kibana-saved-objects-index-pattern-update-api/301793)

<div class="topic-metadata">

**Author:** [@uncleAlbert](https://discuss.elastic.co/u/uncleAlbert)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 12:39pm UTC](https://discuss.elastic.co/t/kibana-saved-objects-index-pattern-update-api/301793 "2022-04-07T12:39:42Z")

</div>

Hello, I see here the correct way to upload a new scripted field to an index pattern in Kibana. If I want to update a scripted field, can I append to the index pattern attributes.field? Will this overwrite the current …

---

## [BUG in Kibana Link - Query Gets Lost](https://discuss.elastic.co/t/bug-in-kibana-link-query-gets-lost/300608)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 12:12pm UTC](https://discuss.elastic.co/t/bug-in-kibana-link-query-gets-lost/300608 "2022-04-07T12:12:27Z")

</div>

We seem to have found a possible bug in Kibana v 7.16.2 where the query gets lost after navigation. Enter a search term in Kibana - results are displayed Copy the browser URL and open it in a new tab Same results are d…

---

## [Getting MySQL Replication Metrics into Kibana](https://discuss.elastic.co/t/getting-mysql-replication-metrics-into-kibana/300229)

<div class="topic-metadata">

**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 12:10pm UTC](https://discuss.elastic.co/t/getting-mysql-replication-metrics-into-kibana/300229 "2022-04-07T12:10:56Z")

</div>

Hi, I'm trying to find a way to ingest MySQL replication status into Kibana. We're using the Elastic Cloud Service and the MySQL integration. This provides a lot of MySQL status data for a database servers but nothing…

---

## [Kibana Goal chart - Max Value](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845)

<div class="topic-metadata">

**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 12:00pm UTC](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845 "2022-04-07T12:00:47Z")

</div>

Hello Team, I know this question has been asked many times, but just wish to know if this is possible in the latest Kibana version 8.1, below is my query I have 2 host groups, each containing a set of systems, lets tak…

---

## [Thresholds for Search Latency & What to do when Search Latency is high](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850)

<div class="topic-metadata">

**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850 "2022-04-07T11:46:35Z")

</div>

Hello everyone! Recently we are trying to develop a monitor for Search Latency in Elasticsearch. (The same as the Stack Monitoring chart) I researched optimum threshold values for Search Latency but couldn't find any do…

---

## [Pattern Capture Token Filter giving same start and end offset position](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858 "2022-04-07T11:46:34Z")

</div>

I was following the Pattern Capture Token Filter example on the Elasticsearch 5.6 documentation. I tried running one example on my local elastic instance. I got the tokens but they all are showing the same start and end …

---

## [Use Elasticsearch to read lucene documents](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852)

<div class="topic-metadata">

**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 11:38am UTC](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852 "2022-04-07T11:38:48Z")

</div>

Hi All, I have an application that stores the data in lucene format. I want to read this data using Elasticsearch. Is there a way to implement the same? I have tried reindex api through kibana but that does not seem t…

---

## [Missing CPU Memory and network data](https://discuss.elastic.co/t/missing-cpu-memory-and-network-data/301856)

<div class="topic-metadata">

**Author:** [@Sonal1](https://discuss.elastic.co/u/Sonal1)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 10:52am UTC](https://discuss.elastic.co/t/missing-cpu-memory-and-network-data/301856 "2022-04-07T10:52:28Z")

</div>

Hi, We are trying to pull data for nodes from converge cloud but cpu, memory and network are shown as zero. Other data is coming. Is it so that metricbeat donot pull data for cpu, memory and network from converge cloud …

---

## [Create bulkRequest using latest java API client(8.1.1) for list of products using builder lambda method](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573)

<div class="topic-metadata">

**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 10:49am UTC](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573 "2022-04-07T10:49:49Z")

</div>

I am having a list of Products(for simplicity let's assume it has an id, brand, and name properties), and I want to index this list of products to Elasticsearch using java API client version 8.1.1. BulkRequest in java a…

---

## [Running filebeat with the setup command docker](https://discuss.elastic.co/t/running-filebeat-with-the-setup-command-docker/301853)

<div class="topic-metadata">

**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 10:08am UTC](https://discuss.elastic.co/t/running-filebeat-with-the-setup-command-docker/301853 "2022-04-07T10:08:20Z")

</div>

Hi everyone, i'm trying to install elk and filebeat on docker, well i uploaded the image of elk and it worked i can go to the kibana dashboard and view elastic ,... Now I want to install filebeat image so i followed the…

---

## [Filebeat Azure Module Base64 Issue](https://discuss.elastic.co/t/filebeat-azure-module-base64-issue/301198)

<div class="topic-metadata">

**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\
**Replies:** 8\
**Last updated:** [April 7, 2022, 10:06am UTC](https://discuss.elastic.co/t/filebeat-azure-module-base64-issue/301198 "2022-04-07T10:06:14Z")

</div>

Good Afternoon, We currently get the error below when running the azure module on Filebeat 8.0.1 @timestamp":"2022-03-31T12:45:12.573Z","log.logger":"azure-eventhub input","log.origin":{"file.name":"azureeventhub/input…

---

## [Elastic Search Cross cluster replication](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674)

<div class="topic-metadata">

**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 10:03am UTC](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674 "2022-04-07T10:03:48Z")

</div>

Hi Team, I have a cluster with 3 nodes in primary region (all nodes are data nodes and master-eligible). My requirement is to setup cross cluster replication in secondary region for disaster recovery. Can I setup CCR …

---

## [Several inputs for modules](https://discuss.elastic.co/t/several-inputs-for-modules/301851)

<div class="topic-metadata">

**Author:** [@Thermi](https://discuss.elastic.co/u/Thermi)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 9:55am UTC](https://discuss.elastic.co/t/several-inputs-for-modules/301851 "2022-04-07T09:55:04Z")

</div>

Hello, I need to configure several inputs for any particular module, but most modules only have one, or generally a way to specify the mode/type/protocol of one (syslog over TLS, syslog over UDP, reading from a log file…

---

## [Kibana monitor data display nothing](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760)

<div class="topic-metadata">

**Author:** [@GaiserChan](https://discuss.elastic.co/u/GaiserChan)\
**Replies:** 7\
**Last updated:** [April 7, 2022, 9:51am UTC](https://discuss.elastic.co/t/kibana-monitor-data-display-nothing/301760 "2022-04-07T09:51:09Z")

</div>

i have these index data such as ".monitoring-es-7\*" ".monitoring-kibana-7\*"... but kibana monitoring show message "we couldn\`t activate monitoring" i check F12 in chrome found /api/monitoring/v1/clusters response empt…

---

## [\[Elasticsearch 5.5\] when node left and rejoin, all data in the node gone](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825)

<div class="topic-metadata">

**Author:** [@meteoriteliu](https://discuss.elastic.co/u/meteoriteliu)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825 "2022-04-07T09:49:43Z")

</div>

I have a Elasticsearch 5.5 cluster consists of 8 nodes (all the same config of both master and data nodes) and each node contains about 60 shards and each shard contains about 15GB data. I run into the problem that if I…

---

## [Custom log integration with json file - no data](https://discuss.elastic.co/t/custom-log-integration-with-json-file-no-data/301847)

<div class="topic-metadata">

**Author:** [@maar](https://discuss.elastic.co/u/maar)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 9:36am UTC](https://discuss.elastic.co/t/custom-log-integration-with-json-file-no-data/301847 "2022-04-07T09:36:41Z")

</div>

I successfully added the agent: I added Custom Logs integration to the Default policy: Custom configurations: agent.logging.json: true json.keys\_under\_root: true json.add\_error\_key: true Contents of the /…

---

## [Alerts and actions problems with log threshold and index threshold](https://discuss.elastic.co/t/alerts-and-actions-problems-with-log-threshold-and-index-threshold/301846)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 9:19am UTC](https://discuss.elastic.co/t/alerts-and-actions-problems-with-log-threshold-and-index-threshold/301846 "2022-04-07T09:19:21Z")

</div>

Hi, I'm running on kibana 7.11.2 (checking also on 7.17.1) I tried to have a notification when my logs (index) showing some errors in message field. So I added new rules in alert and actions for log threshold. But I co…

---

## [Linear functional boosting scores](https://discuss.elastic.co/t/linear-functional-boosting-scores/301844)

<div class="topic-metadata">

**Author:** [@jsandeep316](https://discuss.elastic.co/u/jsandeep316)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 8:48am UTC](https://discuss.elastic.co/t/linear-functional-boosting-scores/301844 "2022-04-07T08:48:02Z")

</div>

I'm trying to understand the scoring for linear functional boosts in Elastic App Search. It says the factor field can range from 0 to 10, defaulting to 1. It also says "A negative factor or fractional factor will not de…

---

## [Population pyramid](https://discuss.elastic.co/t/population-pyramid/301478)

<div class="topic-metadata">

**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 8:42am UTC](https://discuss.elastic.co/t/population-pyramid/301478 "2022-04-07T08:42:50Z")

</div>

Hello everyone! I need a little help. I would like to make a population pyramid on my data. I would like to separate the gender and make 5 year age brackets. While counting the number of people in each category. I know…

---

## [Logstash is stopping becuase SystemExit Error](https://discuss.elastic.co/t/logstash-is-stopping-becuase-systemexit-error/299746)

<div class="topic-metadata">

**Author:** [@goutham\_eai](https://discuss.elastic.co/u/goutham_eai)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 8:28am UTC](https://discuss.elastic.co/t/logstash-is-stopping-becuase-systemexit-error/299746 "2022-04-07T08:28:47Z")

</div>

Hi All, I have upgraded the log stash from 7.8.0 to 7.16.2,After upgrading i am getting below error. \[2022-03-15T13:51:28,568\]\[DEBUG\]\[logstash.modules.scaffold\] Found module {:module\_name=\>"fb\_apache", :directory=\>"/us…

---

## [Logstash-plugin command does not work as expected](https://discuss.elastic.co/t/logstash-plugin-command-does-not-work-as-expected/300857)

<div class="topic-metadata">

**Author:** [@mpride63](https://discuss.elastic.co/u/mpride63)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:51am UTC](https://discuss.elastic.co/t/logstash-plugin-command-does-not-work-as-expected/300857 "2022-04-07T07:51:49Z")

</div>

I have Logstash working in a basic test scenario on a Windows server but I need to install a plugin. The problem is that the plugin command doesn't seem to work. No matter what option I run the logstash-plugin.bat with…

---

## [Collapse with point in time feature](https://discuss.elastic.co/t/collapse-with-point-in-time-feature/301535)

<div class="topic-metadata">

**Author:** [@nabhan\_karmi](https://discuss.elastic.co/u/nabhan_karmi)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:35am UTC](https://discuss.elastic.co/t/collapse-with-point-in-time-feature/301535 "2022-04-07T07:35:17Z")

</div>

I'm trying to use the collapse feature with the point in time, I successfully make the two features run together as per documentation, but the problem is with the result, in my case I have 3 documents has the same value …

---

## [Sub query using over order by in elasticsearch](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658)

<div class="topic-metadata">

**Author:** [@willers](https://discuss.elastic.co/u/willers)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:32am UTC](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658 "2022-04-07T07:32:05Z")

</div>

I need to transform the query to a query in Elasticsearch, but I didn't find a solution in my searches. Has anyone had this problem? SELECT \* FROM ( SELECT coalesce(open.day, close.day) as da…

---

## [Is there a way to read a dumped Elasticsearch index with Java?](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654)

<div class="topic-metadata">

**Author:** [@MikeThomsen](https://discuss.elastic.co/u/MikeThomsen)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:30am UTC](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654 "2022-04-07T07:30:34Z")

</div>

Is there a Java API for reading the contents of an Elasticsearch index that has been dumped to disk with the 2.X backup tools? We'd prefer to not set up a 2.X cluster and do rolling upgrades and unfortunately, the folks …

---

## [Error message: org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:82](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715)

<div class="topic-metadata">

**Author:** [@Supelec](https://discuss.elastic.co/u/Supelec)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:29am UTC](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715 "2022-04-07T07:29:29Z")

</div>

Hi, I installed Elasticsearch in Mac OS Monterey 12.3.1 in using brew command. The version installed is for Elasticsearch: 7.10.2/ java -version java version "1.8.0\_321" Java(TM) SE Runtime Environment (build 1.8.0\_…

---

## [Merging two nested fields with update\_by\_query](https://discuss.elastic.co/t/merging-two-nested-fields-with-update-by-query/301797)

<div class="topic-metadata">

**Author:** [@magedmakled](https://discuss.elastic.co/u/magedmakled)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:19am UTC](https://discuss.elastic.co/t/merging-two-nested-fields-with-update-by-query/301797 "2022-04-07T07:19:30Z")

</div>

Hello elastic community, I'm trying to merge two nested fields from two different documents. The nested fields have objects inside of them. I tried to load the nested array from the first document and add it to the nes…

[Previous page](https://discuss.elastic.co/latest.md?page=1179)

[Next page](https://discuss.elastic.co/latest.md?page=1181)
