# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1235

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1236

---

## [Plugin enhanced-table on Kibana cloud](https://discuss.elastic.co/t/plugin-enhanced-table-on-kibana-cloud/298004)

<div class="topic-metadata">

**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\
**Replies:** 11\
**Last updated:** [March 2, 2022, 2:57pm UTC](https://discuss.elastic.co/t/plugin-enhanced-table-on-kibana-cloud/298004 "2022-03-02T14:57:25Z")

</div>

Good morning, we need to setup enhanced-table plugin on the Kibana AWS environment but at this moment it isn't not allowed. Please Please consider that this plugin is widely used in on-premises environments and therefo…

---

## [SSL error in enterprise 7.17.0](https://discuss.elastic.co/t/ssl-error-in-enterprise-7-17-0/298630)

<div class="topic-metadata">

**Author:** [@bibilena](https://discuss.elastic.co/u/bibilena)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 2:32pm UTC](https://discuss.elastic.co/t/ssl-error-in-enterprise-7-17-0/298630 "2022-03-02T14:32:48Z")

</div>

Hello, I use a docker-compose for elastic, enterprise and Kibana. I use letsencrypt for the certificate and I want to use https. I have a several number of errors. I use 7.17.0 version ent-search\_1 | Custom Enterpri…

---

## [Exist Elasticsearch ingest pipeline if specific field exists](https://discuss.elastic.co/t/exist-elasticsearch-ingest-pipeline-if-specific-field-exists/298563)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 12\
**Last updated:** [March 2, 2022, 2:30pm UTC](https://discuss.elastic.co/t/exist-elasticsearch-ingest-pipeline-if-specific-field-exists/298563 "2022-03-02T14:30:22Z")

</div>

In an Elasticsearch Ingest Pipeline, how can I validate whether a specific field exists, and exit the pipeline immediately without processing if it does?

---

## [Elastic Stack 7.17.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 9:24pm UTC](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447 "2022-02-28T21:24:04Z")

</div>

Elasticsearch privilege escalation issue (ESA-2022-02) A flaw was discovered in elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security …

---

## [Adding scripted fields to document source](https://discuss.elastic.co/t/adding-scripted-fields-to-document-source/298552)

<div class="topic-metadata">

**Author:** [@andersnelson](https://discuss.elastic.co/u/andersnelson)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 2:01pm UTC](https://discuss.elastic.co/t/adding-scripted-fields-to-document-source/298552 "2022-03-02T14:01:31Z")

</div>

I am trying to move away from scripted fields in our Elasticsearch cluster. I have updated our Logstash config files to add the relevant fields to new incoming documents, but am having trouble figuring out how to update…

---

## [Field selector for a parameterized visualization](https://discuss.elastic.co/t/field-selector-for-a-parameterized-visualization/298589)

<div class="topic-metadata">

**Author:** [@Ignacio\_Garcia](https://discuss.elastic.co/u/Ignacio_Garcia)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:58pm UTC](https://discuss.elastic.co/t/field-selector-for-a-parameterized-visualization/298589 "2022-03-02T13:58:20Z")

</div>

Hi, I'm new to ELK so i'm playing around with visualizations to test them. I'd like to replicate jconsole on kibana 7.17 (using jolokia) First: It seems is not possible to have tabs for building a composed dashboard, s…

---

## [Pass each matched record value to filter in Elasticsearch](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541)

<div class="topic-metadata">

**Author:** [@ZulQ](https://discuss.elastic.co/u/ZulQ)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:39pm UTC](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541 "2022-03-02T13:39:37Z")

</div>

For geo\_distance query I'm using a constant value for distance. I need to make it dynamic. So I want to pass the above matched record radius value to distance. Here's the code: let searchRadius = '12KM' query:…

---

## [Modify date key/key\_as\_string format](https://discuss.elastic.co/t/modify-date-key-key-as-string-format/298557)

<div class="topic-metadata">

**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:25pm UTC](https://discuss.elastic.co/t/modify-date-key-key-as-string-format/298557 "2022-03-02T13:25:24Z")

</div>

Is there any way to modify the date format of the key? or provide maybe an additional key field in a format that I like for use later in Vega? Currently sorting by key\_as\_string but it's lengthy { "size": 0, "aggs":…

---

## [There is no grok expression that can parse 100% of the following log information](https://discuss.elastic.co/t/there-is-no-grok-expression-that-can-parse-100-of-the-following-log-information/298462)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 1:10pm UTC](https://discuss.elastic.co/t/there-is-no-grok-expression-that-can-parse-100-of-the-following-log-information/298462 "2022-03-02T13:10:11Z")

</div>

hello logtfile 12Jul20 10:18:09.561645: hello IT00S451.uaes.com (port 57276) 12Jul20 10:18:09.561645: info request for enable\_MULTI\_v7 from IT00S451.uaes.com (port 57276) 12Jul20 10:18:09.561645: exit IT00S451.uaes.co…

---

## [Filebeat for rotated logs: the old harvest always is handled before new harvest?](https://discuss.elastic.co/t/filebeat-for-rotated-logs-the-old-harvest-always-is-handled-before-new-harvest/298613)

<div class="topic-metadata">

**Author:** [@newtofilebeat](https://discuss.elastic.co/u/newtofilebeat)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 11:41am UTC](https://discuss.elastic.co/t/filebeat-for-rotated-logs-the-old-harvest-always-is-handled-before-new-harvest/298613 "2022-03-02T11:41:43Z")

</div>

we need use filebeat to collect our application logs but the logs will rotated weekly. The log file is updated every 5 minutes My question is: when a.log is rotated to a.log.1 and new file a.log is created, a.log.1 wil…

---

## [Fleet Server - To queue or not to queue, that is the question](https://discuss.elastic.co/t/fleet-server-to-queue-or-not-to-queue-that-is-the-question/298596)

<div class="topic-metadata">

**Author:** [@Luca\_SWU](https://discuss.elastic.co/u/Luca_SWU)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 11:33am UTC](https://discuss.elastic.co/t/fleet-server-to-queue-or-not-to-queue-that-is-the-question/298596 "2022-03-02T11:33:25Z")

</div>

Hello Elastic Community, Currently I am doing research about how to deploy Fleet Server and Elastic Agents in a self-managed Production environment. In this environment we would like to have the Elastic Agents and Flee…

---

## [Check license for production environment](https://discuss.elastic.co/t/check-license-for-production-environment/298597)

<div class="topic-metadata">

**Author:** [@Rohit\_Keshari](https://discuss.elastic.co/u/Rohit_Keshari)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:15am UTC](https://discuss.elastic.co/t/check-license-for-production-environment/298597 "2022-03-02T11:15:29Z")

</div>

Is it use open source Elasticsearch 7.10.2 in production environment?

---

## [Error when trying to index to data streamd](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603)

<div class="topic-metadata">

**Author:** [@notgurev](https://discuss.elastic.co/u/notgurev)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 9:55am UTC](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603 "2022-03-02T09:55:34Z")

</div>

I've created an index template + a data stream and tried to bulk create from Go library. Request is: {"create":{}} {"@timestamp":"2022-03-02T12:48:23+03:00","domain\_name":"adlook-rev.me","domain\_type":"","webmaster\_pin…

---

## [Elastic search clustering](https://discuss.elastic.co/t/elastic-search-clustering/298491)

<div class="topic-metadata">

**Author:** [@Bhagya\_09](https://discuss.elastic.co/u/Bhagya_09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elastic-search-clustering/298491 "2022-03-02T10:23:53Z")

</div>

I tried to set up Elasticsearch on docker. but i can't volume mount on /usr/share/Elasticsearch/config. /usr/share/elasticsearch/data, /usr/share/elasticsearch/plugins is okay. but only i can't volume mount path is /us…

---

## [Calculate cosine similarity for nested object in elasticsearch using Python](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601)

<div class="topic-metadata">

**Author:** [@RiyaP](https://discuss.elastic.co/u/RiyaP)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 9:42am UTC](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601 "2022-03-02T09:42:15Z")

</div>

I am working on an use case which has documents in following format:- \[{'Fruits': \['Mango', 'Apple'\]}, {'Fruits': \['Banana', 'Guava', 'Mango'\]}, {'Fruits': \['Grapes', 'Apple'\]}\] I am storing the data into Elasticsear…

---

## [Continuous transformation averaging](https://discuss.elastic.co/t/continuous-transformation-averaging/298494)

<div class="topic-metadata">

**Author:** [@sg09](https://discuss.elastic.co/u/sg09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:17am UTC](https://discuss.elastic.co/t/continuous-transformation-averaging/298494 "2022-03-02T10:17:00Z")

</div>

Hi, We collect device behavior/events during the day in a timeline index. Devices are turn on and off by customers and events are sent as they happen and each event provides event name and time consumed for each event. …

---

## [Injest Pipeline for conditional statement used in Scripts](https://discuss.elastic.co/t/injest-pipeline-for-conditional-statement-used-in-scripts/298178)

<div class="topic-metadata">

**Author:** [@shivani\_singh](https://discuss.elastic.co/u/shivani_singh)\
**Replies:** 25\
**Last updated:** [March 2, 2022, 5:25am UTC](https://discuss.elastic.co/t/injest-pipeline-for-conditional-statement-used-in-scripts/298178 "2022-03-02T05:25:12Z")

</div>

Hii, My goals - Find the existing field if present (responseBody.results\[i\].statusCode) and copy it's value into a new field (embedded\_error\_code ) at runtime My original field is a list of array. Below is the struct…

---

## [Why percentiles are based on iterations instead of number of requests](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181)

<div class="topic-metadata">

**Author:** [@Thanin\_Srithai](https://discuss.elastic.co/u/Thanin_Srithai)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 9:09am UTC](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181 "2022-03-02T09:09:23Z")

</div>

I noticed that the document says it need 1000 iterations or more in order to calculate 99.9th percentile. here I wonder that why it has to base on number of iterations but not the actual amount of requests. In many tra…

---

## [Metricbeat produces CPU usage spikes every 10 seconds across different releases](https://discuss.elastic.co/t/metricbeat-produces-cpu-usage-spikes-every-10-seconds-across-different-releases/298592)

<div class="topic-metadata">

**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 8:35am UTC](https://discuss.elastic.co/t/metricbeat-produces-cpu-usage-spikes-every-10-seconds-across-different-releases/298592 "2022-03-02T08:35:18Z")

</div>

Hello Elastic, I've seen different types of topics in this board that certain releases of metricbeat had memory leaks and other issues. Currently, I'm preparing some evaluations for a research project that also involve…

---

## [Event.set does not work](https://discuss.elastic.co/t/event-set-does-not-work/298317)

<div class="topic-metadata">

**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:33am UTC](https://discuss.elastic.co/t/event-set-does-not-work/298317 "2022-03-02T08:33:45Z")

</div>

Hello, I'm trying to create new field in my filter, but seems that event.set does not work properly. I can't see neither errors nor the new fields in elastic. I had to add the if condition since the field is not contain…

---

## [Visualize infrastructure performance](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:26am UTC](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776 "2022-03-02T08:26:33Z")

</div>

Hi, i want to create an infrastructure dashboards which shows the health of all systems in one visualization, say i have 100 servers, i want to monitor them all with a single metric. What i would like is a visualization…

---

## [Any alternative method of Searchsearch(SearchRequest request, Class\<TDocument\> tDocumentClass)](https://discuss.elastic.co/t/any-alternative-method-of-searchsearch-searchrequest-request-class-tdocument-tdocumentclass/298591)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Yadav](https://discuss.elastic.co/u/Vaibhav_Yadav)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 8:16am UTC](https://discuss.elastic.co/t/any-alternative-method-of-searchsearch-searchrequest-request-class-tdocument-tdocumentclass/298591 "2022-03-02T08:16:15Z")

</div>

Hello, Is there any alternative method for Searchsearch(SearchRequest request, Class\<TDocument\> tDocumentClass) that does not take Class\<TDocument\> tDocumentClass as an argument, because I do not have such type of mode…

---

## [Auto instrumention - Metrics work, traces not received](https://discuss.elastic.co/t/auto-instrumention-metrics-work-traces-not-received/295559)

<div class="topic-metadata">

**Author:** [@Jbezemer](https://discuss.elastic.co/u/Jbezemer)\
**Replies:** 22\
**Last updated:** [March 2, 2022, 8:15am UTC](https://discuss.elastic.co/t/auto-instrumention-metrics-work-traces-not-received/295559 "2022-03-02T08:15:09Z")

</div>

We want to trace all of our applications (built with OutSystems lowcode platform). So we used the auto instrumentation profiler for IIS 10.0. We are able to receive metrics, but traces are missing. The logs showed us tha…

---

## [Node roles -\> for node coordinator](https://discuss.elastic.co/t/node-roles-for-node-coordinator/298587)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 7:54am UTC](https://discuss.elastic.co/t/node-roles-for-node-coordinator/298587 "2022-03-02T07:54:35Z")

</div>

Hi I need to be sure how should I define in docker compose node roles as I need to create one coordinator node per host. According to guide from elastic page I should leave empty space for node.roles= for coordinating …

---

## [Docker Volume driver choice](https://discuss.elastic.co/t/docker-volume-driver-choice/298586)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 7:45am UTC](https://discuss.elastic.co/t/docker-volume-driver-choice/298586 "2022-03-02T07:45:25Z")

</div>

Hi Under creating docker compose file I have come across two vaguely described cases: when I need to use an external disk for example \[ I have a 3 hosts with multiply ssd(/opt/ssd/ds1/hot\_data/) and hdd (/opt/hdd/ds1/…

---

## [Is snapshot restore incremental？](https://discuss.elastic.co/t/is-snapshot-restore-incremental/298474)

<div class="topic-metadata">

**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\
**Replies:** 14\
**Last updated:** [March 2, 2022, 7:17am UTC](https://discuss.elastic.co/t/is-snapshot-restore-incremental/298474 "2022-03-02T07:17:50Z")

</div>

As we know, the snapshot process is incremental, so we can take snapshots frequently and It will be very fast after the first time。 My question is how restore work, When I restore snapshots in other clusters, is it incr…

---

## [Shrinked index should have same security settings than original index](https://discuss.elastic.co/t/shrinked-index-should-have-same-security-settings-than-original-index/298512)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 1:27pm UTC](https://discuss.elastic.co/t/shrinked-index-should-have-same-security-settings-than-original-index/298512 "2022-03-01T13:27:54Z")

</div>

When using ILM to reduce index, the new index change its name: "shrink-zda-original". When using security, we configure some permissions to "original" index. ILM will break permissions, this is really annoying using el…

---

## [Hello elastic - Multiple Pipelines](https://discuss.elastic.co/t/hello-elastic-multiple-pipelines/298484)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 9\
**Last updated:** [March 2, 2022, 6:45am UTC](https://discuss.elastic.co/t/hello-elastic-multiple-pipelines/298484 "2022-03-02T06:45:45Z")

</div>

DELETE index PUT index/\_doc/1 { "foo": "bar" } GET index/\_search { "query": { "match": { "foo": "bar" } } }

---

## [Mapping Problem](https://discuss.elastic.co/t/mapping-problem/298521)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/mapping-problem/298521 "2022-03-02T06:20:20Z")

</div>

Hello dear friends, I have a big problem. The problem is ; I have an index that I created by reindexing from another index. The mapping of this index was fine before, but now there are corruptions, I have no idea why. Fi…

---

## [How do synchronization data in es](https://discuss.elastic.co/t/how-do-synchronization-data-in-es/298581)

<div class="topic-metadata">

**Author:** [@YaY](https://discuss.elastic.co/u/YaY)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 5:13am UTC](https://discuss.elastic.co/t/how-do-synchronization-data-in-es/298581 "2022-03-02T05:13:18Z")

</div>

i know i can use 'reindex' to do the synchronization, but it's full synchronization rigth?! even add 'op\_type=create' only will find the missing index in the full index, my requirement is only handle and create increm…

[Previous page](https://discuss.elastic.co/latest.md?page=1234)

[Next page](https://discuss.elastic.co/latest.md?page=1236)
