# Latest **URL:** https://discuss.elastic.co/latest.md?page=1198 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1199 --- ## [Elastic Agent Enrollment behind Proxy Server](https://discuss.elastic.co/t/elastic-agent-enrollment-behind-proxy-server/300888)
**Author:** [@alphabet5](https://discuss.elastic.co/u/alphabet5)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 9:27pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-behind-proxy-server/300888 "2022-03-28T21:27:38Z")
I am trying to add Elastic Agents to windows hosts. These hosts need to communicate through a proxy (using squid currently). I've tried adding the registry keys before running the install command, as well as using envir… --- ## [Elasticsearch query](https://discuss.elastic.co/t/elasticsearch-query/300708)
**Author:** [@chrisml](https://discuss.elastic.co/u/chrisml)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 8:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query/300708 "2022-03-28T20:41:24Z")
Could anyone shed any light on the nested bool should/musts here? Is it necessary or just poorly written? (the query is generated, depending on user-input) --- ## [How to build an Elasticsearch query that will take into account the distance between words?](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 8:14pm UTC](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886 "2022-03-28T20:14:16Z")
I'm running with elasticsearch:7.6.2 I have an index with 4 simple documents: PUT demo\_idx/\_doc/1 { "content": "Distributed nature, simple REST APIs, speed, and scalability, Elasticsearch is the central c… --- ## [Load Balancers & deployment endpoints](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893)
**Author:** [@Chuck\_Reynolds](https://discuss.elastic.co/u/Chuck_Reynolds)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 8:13pm UTC](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893 "2022-03-28T20:13:51Z")
I'm currently doing a POC of ECE for a group in my company but I can't seem to get past how one configures a load balancer to talk to the Elasticsearch deplyment endpoint. I've create one load balancer that points the t… --- ## [Kibana site can't be reached](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 8:03pm UTC](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607 "2022-03-28T20:03:13Z")
I have not made any changes to the elk stack .It was working fine till yesterday, today at the beginning it did not let me login to the kibana portal.I cleared browser history restarted Elasticsearch and kibana and tried… --- ## [Is it possible to auto increment documents as they are indexed?](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 7:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887 "2022-03-28T19:56:48Z")
Context: I am using the bulk API to index several documents into an index I would like to auto increment a field, 'y', present in the documents, which would tally the order in which documents are indexed. (I know i… --- ## [Elastic-security listening port](https://discuss.elastic.co/t/elastic-security-listening-port/300569)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 7:09pm UTC](https://discuss.elastic.co/t/elastic-security-listening-port/300569 "2022-03-28T19:09:02Z")
Is it possible to change the port elastic-security service is listening on the localhost? Found that elastic is listening on 6788 and 6789 ports locally but those are reserved for other things on couple of our hosts and… --- ## [Kibana excluding Meta fields in Index Pattern](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787)
**Author:** [@sof](https://discuss.elastic.co/u/sof)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 5:22pm UTC](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787 "2022-03-28T17:22:41Z")
Hello. I created an index pattern in Kibana. I wish to remove \_index, \_type and similar Meta fields which were auto created by Kibana using Field Filtering from the Management -\> Index Patterns -\> Field Filters wish wo… --- ## [How do you figure out what endpoint to query for a given API reference definition?](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627)
**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 4:46pm UTC](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627 "2022-03-28T16:46:45Z")
I want to monitor allocators and move instances using those features of the API. how do I go about figuring our what endpoints to query? Could someone point me to how I would go about querying/setting those particular v… --- ## [Saved field "logdate" of data view "app\*" is invalid for use with the "Date Histogram" aggregation](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:48pm UTC](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868 "2022-03-28T15:48:20Z")
Recently, we upgraded our production machine which meant I would have to re-deploy Filebeat on this new server. All the log paths and log formats are the same, however, for whatever reason, it is having an issue with log… --- ## [Wildcard conflicting](https://discuss.elastic.co/t/wildcard-conflicting/300870)
**Author:** [@OlivierC](https://discuss.elastic.co/u/OlivierC)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 3:44pm UTC](https://discuss.elastic.co/t/wildcard-conflicting/300870 "2022-03-28T15:44:50Z")
Hello, I try to find a query for something looking easy for a human, but I can't create it with ES. Let's imagine we have an index named words with a few data: PUT words/\_doc/1 { "name": "elastic" } PUT words/\_doc/2… --- ## [Elasticsearch not able to search string contains special character](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866)
**Author:** [@Koushik\_Chatterjee](https://discuss.elastic.co/u/Koushik_Chatterjee)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866 "2022-03-28T15:35:01Z")
I am developing an web application where I'm using Elasticsearch. I'm trying to search strings contains - or @ eg. email address koushik@testmail.com, but it's not working. Other fields like first name, last name etc. wo… --- ## [I create user login system with file uploading , and user can upload unlimited textfiles and search word, how to create and mapping index this case?](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 3:15pm UTC](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835 "2022-03-28T15:15:05Z")
--- ## [How to upload textfile to ESdatabase and make it searchable?](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855 "2022-03-28T15:13:51Z")
i try to upload textfile to ES database, i try convert textfile to String formate and then store. i dont know is it proper way? or any other way is available in ES for store textfiles and make it searchable? --- ## [Personnel dashboards](https://discuss.elastic.co/t/personnel-dashboards/300276)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 2:55pm UTC](https://discuss.elastic.co/t/personnel-dashboards/300276 "2022-03-28T14:55:03Z")
Hi, Is it possible to have personnel dashboards in kibana. The idea is not to have a dashboard for user alone (with full control) and hidden to others. version: 8 --- ## [How to parse apache error.log](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 2:48pm UTC](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822 "2022-03-28T14:48:27Z")
Hi, help! i can't parse this timestamp: \[Mon Mar 28 09:02:28.627528 2022\] \[mpm\_winnt:notice\] \[pid 0000:tid 000\] 0000000: Apache/00.00.0.0 (Win00) OpenSSL/0.0.0h configured -- resuming normal operations suggestions? T… --- ## [Elasticsearch stops comunication](https://discuss.elastic.co/t/elasticsearch-stops-comunication/300327)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-comunication/300327 "2022-03-28T14:27:10Z")
Getting error while seach an index through the discover in Kibana. Thanks in advance --- ## [Elastic Detection Actions - any way to add fields?](https://discuss.elastic.co/t/elastic-detection-actions-any-way-to-add-fields/300764)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 2:08pm UTC](https://discuss.elastic.co/t/elastic-detection-actions-any-way-to-add-fields/300764 "2022-03-28T14:08:22Z")
We are creating numerous threshold detections for a specific client. This client is asking the threshold detections to email them when the alert is triggered, but they are asking us to include details about the original… --- ## [Search scroll high off-heap memory usage](https://discuss.elastic.co/t/search-scroll-high-off-heap-memory-usage/300812)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:48pm UTC](https://discuss.elastic.co/t/search-scroll-high-off-heap-memory-usage/300812 "2022-03-28T13:48:30Z")
Cluster: Elasticsearch v7.17.1 running with elastic docker image on kubernetes 6 data nodes: 4 CPUs / 14 Go HEAP / 28 Go memory Indice: 3 primary shards (+ 1 replica) , 60 Go data Usage: nightly full index export, w… --- ## [Logstash cannot connect to Elasticsearch on kubernetes](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496)
**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:59pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496 "2022-03-28T13:59:52Z")
Hi everyone, i'm having trouble concerning Logstash. So i installed ELK stack on kubernetes using helm. every pod is is running and ready. Elasticsearch and kibana are perfectly fine. the problem is with logstash as yo… --- ## [XOR on field values](https://discuss.elastic.co/t/xor-on-field-values/300346)
**Author:** [@franpom](https://discuss.elastic.co/u/franpom)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 1:23pm UTC](https://discuss.elastic.co/t/xor-on-field-values/300346 "2022-03-28T13:23:25Z")
Hello, Is it possible to use the XOR function in packetbeat processors or in Advanced / JSON input on field values? My goal is to do XOR on field values retrieved by packetbeat. --- ## [Elasticsearch Hadoop - Analyzer support](https://discuss.elastic.co/t/elasticsearch-hadoop-analyzer-support/300404)
**Author:** [@Shalini\_Pereira](https://discuss.elastic.co/u/Shalini_Pereira)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-analyzer-support/300404 "2022-03-28T13:14:31Z")
Does es-hadoop maven dependency have support for built-in analyzers? I am setting up a project to read & write data from Elasticsearch using spark and have created simple analyzers on index but need more help on this fu… --- ## [Connection timed out when remote cluster re-indexing](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694 "2022-03-28T13:02:46Z")
Getting Connection timed out error while re-indexing data from old cluster to new cluster. curl: (28) Failed to connect to elasticsearchurl port 9200: Connection timed out We are using curl command like this curl -… --- ## [Metricbeat Output to Secure Elasticsearch Error](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830 "2022-03-28T13:02:23Z")
Hi, I'm using ELK Stack 8.0, which is Elasticsearch running in secured mode. I'm having the problem to output my metricbeat to Elasticsearch. Below is the error when I run the command "metricbeat setup -e" {"log.leve… --- ## [Remote reindex ElasticSearch API giving Null Pointer Exception](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 1:01pm UTC](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843 "2022-03-28T13:01:09Z")
Remote reindex Elasticsearch API giving Null Pointer Exception GET ..../tasks/{taskid} ------ ----- "error" : { "type" : "null\_pointer\_exception", "reason" : null } Can someone know what could be the cause… --- ## [Filebeat config - several apps on one server](https://discuss.elastic.co/t/filebeat-config-several-apps-on-one-server/300837)
**Author:** [@Albert\_Komst](https://discuss.elastic.co/u/Albert_Komst)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 12:07pm UTC](https://discuss.elastic.co/t/filebeat-config-several-apps-on-one-server/300837 "2022-03-28T12:07:14Z")
Hello, I have few apps I would like to monitor on one server. Filebeat config for app1 looks like below: filebeat: inputs: - fields: fileset: module: app1 name: debug fields\_und… --- ## [Enable email Alerts for High Severity Detections](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320)
**Author:** [@jbal24](https://discuss.elastic.co/u/jbal24)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320 "2022-03-28T11:59:44Z")
Hi All, How can I enable email Alerts for ALL High Severity Detections? Best regards, --- ## [Error accessing Kibana after Upgrade](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677)
**Author:** [@kubernetes87](https://discuss.elastic.co/u/kubernetes87)\ **Replies:** 12\ **Last updated:** [March 28, 2022, 11:46am UTC](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677 "2022-03-28T11:46:45Z")
Hi community, for testing purposes I copied a VM with Ubuntu 18.04.6. On that machine everything worked fine. I upgraded the Ubuntu to 21.10 (the underlying Kibana and Elasticsearch had been updated too). Now I have … --- ## [Anomaly detection rules don't execute provided actions](https://discuss.elastic.co/t/anomaly-detection-rules-dont-execute-provided-actions/300691)
**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 11:44am UTC](https://discuss.elastic.co/t/anomaly-detection-rules-dont-execute-provided-actions/300691 "2022-03-28T11:44:54Z")
Hi, I've got a detection rule set up for a anomaly job, it checks whether in the last 5 minutes an anomaly higher than 50, 75 or 90 was reported and then performs two action: index a document with data such as the score… --- ## [How to distribute documents across shards equally, using \_routing in Elasticsearch](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802)
**Author:** [@likhith1995](https://discuss.elastic.co/u/likhith1995)\ **Replies:** 9\ **Last updated:** [March 28, 2022, 11:41am UTC](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802 "2022-03-28T11:41:50Z")
Hi Team, We are ingesting the data into Elasticsearch, using 3 routing values (namely 3g, 4g, 5g). We assigned 3 primary shards and 1 replica. Index Rollover is configured to 1gb (max per primary shard) for testing. Wh… [Previous page](https://discuss.elastic.co/latest.md?page=1197) [Next page](https://discuss.elastic.co/latest.md?page=1199)