# Latest **URL:** https://discuss.elastic.co/latest.md?page=1195 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1196 --- ## [Elastcsearch client - javascript connection error](https://discuss.elastic.co/t/elastcsearch-client-javascript-connection-error/300894)
**Author:** [@VV1002](https://discuss.elastic.co/u/VV1002)\ **Replies:** 7\ **Last updated:** [March 30, 2022, 5:56am UTC](https://discuss.elastic.co/t/elastcsearch-client-javascript-connection-error/300894 "2022-03-30T05:56:11Z")
Hi, I am running a 7.17 Elasticsearch and kibana services using docker compose with xpack security disabled (local env). I am developing an express application for some data manipulation so trying to use the Elasticsear… --- ## [How to create rule when monitor is up in UPTIME?](https://discuss.elastic.co/t/how-to-create-rule-when-monitor-is-up-in-uptime/300940)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-to-create-rule-when-monitor-is-up-in-uptime/300940 "2022-03-30T05:24:46Z")
I was exploring the alerting capabilities in ELK, found a way to trigger alerts when any monitor is down in Uptime App. I also want to trigger alerts when the downed service has come back up again but I'm not able creat… --- ## [Help me, question! java.io.IOException: Unable to parse response body for Response{requestLine=PUT](https://discuss.elastic.co/t/help-me-question-java-io-ioexception-unable-to-parse-response-body-for-response-requestline-put/301028)
**Author:** [@wonderfulLand](https://discuss.elastic.co/u/wonderfulLand)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 5:21am UTC](https://discuss.elastic.co/t/help-me-question-java-io-ioexception-unable-to-parse-response-body-for-response-requestline-put/301028 "2022-03-30T05:21:55Z")
Elasticsearch vesion :8.1.0 pom file: \ 4.0.0 org.springframework.boot spring-boot-starter-parent 2.6.4 com.example elasticsearchdemo 0.0.1-SNAPSHOT elasticsearchdem… --- ## [How to map timestamp with nano seconds?](https://discuss.elastic.co/t/how-to-map-timestamp-with-nano-seconds/300881)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 4\ **Last updated:** [March 30, 2022, 5:06am UTC](https://discuss.elastic.co/t/how-to-map-timestamp-with-nano-seconds/300881 "2022-03-30T05:06:42Z")
Hie , I have a time where it is of the format : 2022- 03-28T16:51:11.637003013Z I tried to map like this : date{ match =\> \["Pretime","yyyy-MM-dd'T'HH:mm:ss.SSSSSSSSSZ"\] target =\> "@timestamp" remove\_field =\> "Preti… --- ## [Help me! search rate spike down](https://discuss.elastic.co/t/help-me-search-rate-spike-down/301023)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 4:06am UTC](https://discuss.elastic.co/t/help-me-search-rate-spike-down/301023 "2022-03-30T04:06:34Z")
Hi! Nice to meet you all I'm having a problem with lag issues due to a sharp drop in search rate In other words, the APIs that request a search to elasticseach are experiencing a timeout. I think the image below will e… --- ## [コントロールの範囲スライダーで小数単位でスライダーを動かしたい](https://discuss.elastic.co/t/topic/301020)
**Author:** [@Koki](https://discuss.elastic.co/u/Koki)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 3:03am UTC](https://discuss.elastic.co/t/topic/301020 "2022-03-30T03:03:03Z")
0～１までの小数のみのデータがはいったフィールドに対して、範囲スライダーを利用したいと考えております。 ステップサイズを0.1、小数部分の桁数を1と設定すると、下記のようなエラーが発生するのですが、エラーが発生しないためには「ステップサイズ」および「小数部分の桁数」をどのように設定すればよいかを教えてください。 --- ## [Newcomer multiline.pattern question](https://discuss.elastic.co/t/newcomer-multiline-pattern-question/300934)
**Author:** [@covfefe](https://discuss.elastic.co/u/covfefe)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 2:33am UTC](https://discuss.elastic.co/t/newcomer-multiline-pattern-question/300934 "2022-03-30T02:33:36Z")
Hi, new to filebeat and multiline.pattern configuration as a whole. I was reading up on multiline.pattern examples and came across this where the example used was multiline.pattern: '\[1\]'. But lets say if each line … --- ## [ES not search with hyphen](https://discuss.elastic.co/t/es-not-search-with-hyphen/300769)
**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\ **Replies:** 8\ **Last updated:** [March 30, 2022, 12:54am UTC](https://discuss.elastic.co/t/es-not-search-with-hyphen/300769 "2022-03-30T00:54:42Z")
Hello :slight\_smile: I can't figure out the problem at all. I have a field with a title. The name consists of a hyphen. This is: "usd-coin". I'm trying to search with this query: { "sort": \[ { "… --- ## [Would it be deleted the closed index in delete phase of ILM?](https://discuss.elastic.co/t/would-it-be-deleted-the-closed-index-in-delete-phase-of-ilm/300912)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 12:22am UTC](https://discuss.elastic.co/t/would-it-be-deleted-the-closed-index-in-delete-phase-of-ilm/300912 "2022-03-30T00:22:35Z")
Does ILM support the closed index to be deleted in delete phase? Or should I reopen the index? --- ## [Officially recommended cluster planning](https://discuss.elastic.co/t/officially-recommended-cluster-planning/300539)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 10:38pm UTC](https://discuss.elastic.co/t/officially-recommended-cluster-planning/300539 "2022-03-29T22:38:30Z")
Are there any suggestions for cluster planning and hardware resources： Recommended configuration of CPU？ If there are only a few servers, do you need independent master and coordinating nodes？or reuse server for multip… --- ## [Return other fields in highlight](https://discuss.elastic.co/t/return-other-fields-in-highlight/300898)
**Author:** [@matty\_r](https://discuss.elastic.co/u/matty_r)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 10:28pm UTC](https://discuss.elastic.co/t/return-other-fields-in-highlight/300898 "2022-03-29T22:28:07Z")
Hi all, When highlighting a field, i'd like to also return both fields that are associated. I have the setup below. I want to highlight comment.message, but return both comment.message and comment.id: PUT temp-test { … --- ## [Metricbeat giving start\_time wrong](https://discuss.elastic.co/t/metricbeat-giving-start-time-wrong/301011)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 10:04pm UTC](https://discuss.elastic.co/t/metricbeat-giving-start-time-wrong/301011 "2022-03-29T22:04:04Z")
I have version 7.12.0 and some process is giving me wrong start time. here is example and I can only track it down when it is running h101024:/proc/3333% cat stat 3333 (adb9-ompi) S 3329 3333 2764 0 -1 1073741824 1033… --- ## [Possible to search multiple indices in one rule?](https://discuss.elastic.co/t/possible-to-search-multiple-indices-in-one-rule/301010)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 9:59pm UTC](https://discuss.elastic.co/t/possible-to-search-multiple-indices-in-one-rule/301010 "2022-03-29T21:59:14Z")
Dear all =) When I read this it doesn't mention, if I just can add multiple indices in the index array, and the rule will search them all? Does anyone know this? Hugs Sandra =) --- ## [Service Failed to Run: Failed to find metadata for existing index \>\> Failed to bind service \>\> Failed to read or upgrade local state](https://discuss.elastic.co/t/service-failed-to-run-failed-to-find-metadata-for-existing-index-failed-to-bind-service-failed-to-read-or-upgrade-local-state/300836)
**Author:** [@tgs.vaibhav](https://discuss.elastic.co/u/tgs.vaibhav)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 9:58pm UTC](https://discuss.elastic.co/t/service-failed-to-run-failed-to-find-metadata-for-existing-index-failed-to-bind-service-failed-to-read-or-upgrade-local-state/300836 "2022-03-29T21:58:20Z")
\[2022-03-28T06:42:22,558\]\[INFO \]\[o.e.x.m.p.l.CppLogMessageHandler\] \[SYSTNAME\] \[controller/13524\] \[Main.cc@110\] controller (64 bit): Version 7.3.2 (Build 265429af874fbe) Copyright (c) 2019 Elasticsearch BV \[2022-03-28T06:… --- ## [Frozen Tier](https://discuss.elastic.co/t/frozen-tier/299368)
**Author:** [@tmahany419](https://discuss.elastic.co/u/tmahany419)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 8:49pm UTC](https://discuss.elastic.co/t/frozen-tier/299368 "2022-03-29T20:49:39Z")
What's the difference between searchable snapshots and the frozen tier? Reading the documentation is looks like Frozen tier uses searchable snapshots and reading the searchable snapshot documentation it looks like the o… --- ## [Moving over snapshot to another system doesn't get added to registered repo](https://discuss.elastic.co/t/moving-over-snapshot-to-another-system-doesnt-get-added-to-registered-repo/300892)
**Author:** [@hishamnajem](https://discuss.elastic.co/u/hishamnajem)\ **Replies:** 5\ **Last updated:** [March 29, 2022, 8:31pm UTC](https://discuss.elastic.co/t/moving-over-snapshot-to-another-system-doesnt-get-added-to-registered-repo/300892 "2022-03-29T20:31:49Z")
I am taking a snapshot on system 1 and transferring the index-X, index.latest, meta-... and snap-.... over to system 2 under the same registered repo. System 2 does not find snapshot for restore. On SYSTEM 1: --\> curl … --- ## [Failing to parse datestamp](https://discuss.elastic.co/t/failing-to-parse-datestamp/301005)
**Author:** [@stevedwray](https://discuss.elastic.co/u/stevedwray)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 8:25pm UTC](https://discuss.elastic.co/t/failing-to-parse-datestamp/301005 "2022-03-29T20:25:05Z")
I'm using Integrations/Upload file, something I've done many times before with CSV files. I have a CSV file that has a datestamp field like this: 11/01/2022 06:00:06 PM which is from January, so the 01 is the month an… --- ## [Logtash Giving : : Expected one of #, input, filter, output at line 1, column 1 (byte 1) Error in syntax checking](https://discuss.elastic.co/t/logtash-giving-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-error-in-syntax-checking/300987)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 14\ **Last updated:** [March 29, 2022, 7:54pm UTC](https://discuss.elastic.co/t/logtash-giving-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-error-in-syntax-checking/300987 "2022-03-29T19:54:03Z")
\[WARN \] 2022-03-29 15:12:27.166 \[LogStash::Runner\] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified \[FATAL\] 2022-03-29 15:12:27.560 \[LogStash::Runner\] runner - The giv… --- ## [How to change replica for system indices](https://discuss.elastic.co/t/how-to-change-replica-for-system-indices/300415)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 6:08pm UTC](https://discuss.elastic.co/t/how-to-change-replica-for-system-indices/300415 "2022-03-29T18:08:32Z")
Hi all, I wanted to change the number of replicas for Elasticsearch system indices. I know that the forbit it but is there a way to override that to increase the number of indices or replicas for elastic system indices… --- ## [ElasticSearch 8.1.1 Java API - Sort doesn't work](https://discuss.elastic.co/t/elasticsearch-8-1-1-java-api-sort-doesnt-work/301003)
**Author:** [@AKDAS\_System](https://discuss.elastic.co/u/AKDAS_System)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 7:06pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-1-java-api-sort-doesnt-work/301003 "2022-03-29T19:06:19Z")
Hello, I'm currently in the process of migrating from Elasticsearch 6.8 to the new Java API in 8.1.1. So far everything is going well but the only problem that is left is that adding sort to SearchRequest breaks everythi… --- ## [Windows Fleet agent integrations need manual config to connect to elasticsearch](https://discuss.elastic.co/t/windows-fleet-agent-integrations-need-manual-config-to-connect-to-elasticsearch/301001)
**Author:** [@gbeltramelli](https://discuss.elastic.co/u/gbeltramelli)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 6:47pm UTC](https://discuss.elastic.co/t/windows-fleet-agent-integrations-need-manual-config-to-connect-to-elasticsearch/301001 "2022-03-29T18:47:43Z")
Hello everyone! I have the following observation, which may be some procedure that I am performing incorrectly. I have Fleet servers and Fleet agents installed, I have noticed that fleet agents on windows need manual c… --- ## [Doubts for SSL certs renew on ELK stack v8](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 6:37pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959 "2022-03-29T18:37:49Z")
i have an ELK stack version 8 environment and i use the default security configuration for Elasticsearch, with the default certificates (http\_ca.crt, http.p12, transport.p12), at the moment the environment works fine wit… --- ## [Trying to convert JSON to new JSON outputs quoted JSON](https://discuss.elastic.co/t/trying-to-convert-json-to-new-json-outputs-quoted-json/300998)
**Author:** [@geena.rollins](https://discuss.elastic.co/u/geena.rollins)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 6:12pm UTC](https://discuss.elastic.co/t/trying-to-convert-json-to-new-json-outputs-quoted-json/300998 "2022-03-29T18:12:20Z")
On my macbook monterey 12.2.1, I get quoted JSON. I'm hoping for plain JSON. logstash.yml is node.name: tester file.conf is input { file { path =\> \["/Users/geena.rollins/ws/hello.json"\] start\_position =\> … --- ## [Add apm-server in helm with eck-operator](https://discuss.elastic.co/t/add-apm-server-in-helm-with-eck-operator/300997)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 5:33pm UTC](https://discuss.elastic.co/t/add-apm-server-in-helm-with-eck-operator/300997 "2022-03-29T17:33:08Z")
We have an existing helm chart where we use to do helm install eck operator docker.elastic.co/eck/eck-operator:2.0.0 Then we have chart in which we have Elasticsearch, kibana yaml file with roles and fluentd dependencie… --- ## [Default install of logstash 8.1 results in error](https://discuss.elastic.co/t/default-install-of-logstash-8-1-results-in-error/300854)
**Author:** [@Louis\_Bohm](https://discuss.elastic.co/u/Louis_Bohm)\ **Replies:** 5\ **Last updated:** [March 29, 2022, 4:50pm UTC](https://discuss.elastic.co/t/default-install-of-logstash-8-1-results-in-error/300854 "2022-03-29T16:50:12Z")
I am running Centos 7.9 and followed the directions on this web to install logstash. After doing a yum -y install logstash to get logstash 8.1 installed did the following: Removed the logstash-sample.conf. Ran the fol… --- ## [Plugin root dir issues](https://discuss.elastic.co/t/plugin-root-dir-issues/300990)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 4:18pm UTC](https://discuss.elastic.co/t/plugin-root-dir-issues/300990 "2022-03-29T16:18:05Z")
I am developing a plugin for 8.1 and am having trouble setting up the tsconfig.json I am refencing an interface at /src/plugins/discover/public/application/doc\_views\_types and getting this error '/home/user/Desktop/kib… --- ## [JSON logs in filestream input not added correctly on Elasticsearch](https://discuss.elastic.co/t/json-logs-in-filestream-input-not-added-correctly-on-elasticsearch/300989)
**Author:** [@MartinNouv](https://discuss.elastic.co/u/MartinNouv)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 4:17pm UTC](https://discuss.elastic.co/t/json-logs-in-filestream-input-not-added-correctly-on-elasticsearch/300989 "2022-03-29T16:17:15Z")
Greetings Elastic Community ! I have an issue about my implementations of some JSON logs into Elasticsearch with a filebeat. First i didn't used the parsers function, and so all the fields was not implemented and all t… --- ## [Collect multiple events for processing in the filter and send to output (bulk)](https://discuss.elastic.co/t/collect-multiple-events-for-processing-in-the-filter-and-send-to-output-bulk/300986)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 4:25pm UTC](https://discuss.elastic.co/t/collect-multiple-events-for-processing-in-the-filter-and-send-to-output-bulk/300986 "2022-03-29T16:25:14Z")
Hi folks, I have following use case: I receive events from beat and would like to enrich them with additional information using a filter plugin in logstash. The filter plugin must send a request to an endpoint and retr… --- ## [Requests per second with Kibana Lens](https://discuss.elastic.co/t/requests-per-second-with-kibana-lens/300826)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 4:09pm UTC](https://discuss.elastic.co/t/requests-per-second-with-kibana-lens/300826 "2022-03-29T16:09:37Z")
Hello, How can we display a metric showing Requests per \[timeframe\] with a Metric Lens? In older Kibana versions this was possible: It's not a derivative, nor a counter\_rate but rather the average number of recor… --- ## [Delete temporary storage and cookies upon session termination](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 3:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974 "2022-03-29T15:30:00Z")
Can Elasticsearch be configured to delete temporary storage and cookies upon session termination? If so, is it documented in anywhere? [Previous page](https://discuss.elastic.co/latest.md?page=1194) [Next page](https://discuss.elastic.co/latest.md?page=1196)