# Latest **URL:** https://discuss.elastic.co/latest.md?page=1236 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1237 --- ## [Dynamically adding runtime fields](https://discuss.elastic.co/t/dynamically-adding-runtime-fields/298427)
**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 4:55am UTC](https://discuss.elastic.co/t/dynamically-adding-runtime-fields/298427 "2022-03-02T04:55:53Z")
Dear all, I have a few runtime fields with painless scripts in my mappings that work pretty well. So far I have a list of all the date fields to index. However, things are changing and now I have the problem that there … --- ## [Turn off label for split fields in Timelion](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 2\ **Last updated:** [March 2, 2022, 4:07am UTC](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177 "2022-03-02T04:07:46Z")
Is it possible to turn off the label in Timelion chart? When I created my Timelion chart, I have many points on the chart that is obvious what they are. So I don't need to have labels for all of them showing up. However,… --- ## [ECK, openshift 4.7, volumeClaimDeletePolicy, managed resources](https://discuss.elastic.co/t/eck-openshift-4-7-volumeclaimdeletepolicy-managed-resources/298379)
**Author:** [@froheik](https://discuss.elastic.co/u/froheik)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 2:07am UTC](https://discuss.elastic.co/t/eck-openshift-4-7-volumeclaimdeletepolicy-managed-resources/298379 "2022-03-02T02:07:13Z")
Hi! I'm using private ECK (2.0.0 operator, 8.0.0 es) cloud on openshift 4.7, and have two bugs. When set volumeClaimDeletePolicy in spec obviously, "oc apply -f" returned me error. Also i get that error when deploy by… --- ## [Is there a way to include external node module in my Kibana distributable?](https://discuss.elastic.co/t/is-there-a-way-to-include-external-node-module-in-my-kibana-distributable/298249)
**Author:** [@kyh119](https://discuss.elastic.co/u/kyh119)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 12:38am UTC](https://discuss.elastic.co/t/is-there-a-way-to-include-external-node-module-in-my-kibana-distributable/298249 "2022-03-02T00:38:54Z")
Hi, I created my plugin, and it requires a module that I've installed using 'yarn add node-ssh'. I did: ' yarn add @types/ssh2 ' in kibana directory. ' yarn add node-ssh' also. in 'server/routes.ts', wrote import { N… --- ## [Fleet Server - Certificate Challenges!](https://discuss.elastic.co/t/fleet-server-certificate-challenges/297896)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 12:33am UTC](https://discuss.elastic.co/t/fleet-server-certificate-challenges/297896 "2022-03-02T00:33:01Z")
Hello When i try to register Fleet Server using a certificate, it is getting successfully registered. But the problem is, it is throwing "Generating self-signed certificate for Fleet Server" after executing the command … --- ## [Filebeat Index Name Pattern - timestamp](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255)
**Author:** [@danielc](https://discuss.elastic.co/u/danielc)\ **Replies:** 7\ **Last updated:** [March 2, 2022, 12:11am UTC](https://discuss.elastic.co/t/filebeat-index-name-pattern-timestamp/296255 "2022-03-02T00:11:29Z")
Is %{+yyyy.MM.dd} the system time or log file timestamp? Configure the Elasticsearch output | Filebeat Reference \[7.10\] | Elastic output.elasticsearch: hosts: \["http://localhost:9200"\] index: "%{\[fields.log\_type\]}… --- ## [Running Elastic Standalong](https://discuss.elastic.co/t/running-elastic-standalong/298567)
**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 11:48pm UTC](https://discuss.elastic.co/t/running-elastic-standalong/298567 "2022-03-01T23:48:32Z")
Hello, In the process of getting our production cluster configured with a Fleet manager instance but not quite there yet. I am curious what the best approach is if I were to run the elastic agent in stand alone? I am s… --- ## [Standalone to Cluster Migration - any tips](https://discuss.elastic.co/t/standalone-to-cluster-migration-any-tips/298211)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 5\ **Last updated:** [March 1, 2022, 10:53pm UTC](https://discuss.elastic.co/t/standalone-to-cluster-migration-any-tips/298211 "2022-03-01T22:53:45Z")
Hi All, So I've got a nice elk instance working. My first in a very long time ( thanks to the security pack) that I don't want to blow away and rebuild when I want to reconfigure it. But what I had always planned to d… --- ## [Optimal node roles for 100-node cluster](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 10:27pm UTC](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511 "2022-03-01T22:27:38Z")
A cluster of 100 nodes was installed. We want it to serve as a search engine like Google. Servers are located in a data center. Raid-0 structure was preferred for the high-speed requirement. Query traffic will be more… --- ## [Please check if ES service is running properly:ElasticsearchStatusException](https://discuss.elastic.co/t/please-check-if-es-service-is-running-properly-elasticsearchstatusexception/298501)
**Author:** [@navin\_boddu](https://discuss.elastic.co/u/navin_boddu)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 10:24pm UTC](https://discuss.elastic.co/t/please-check-if-es-service-is-running-properly-elasticsearchstatusexception/298501 "2022-03-01T22:24:34Z")
ERROR Error occured while creating mapping of document into ES. Please check if ES service is running properly:ElasticsearchStatusException\[Elasticsearch exception \[type=validation\_exception, reason=Validation Failed: 1:… --- ## [Apply same settings on all fields that start with the same name in the index template in the Elasticsearch](https://discuss.elastic.co/t/apply-same-settings-on-all-fields-that-start-with-the-same-name-in-the-index-template-in-the-elasticsearch/298528)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 10:22pm UTC](https://discuss.elastic.co/t/apply-same-settings-on-all-fields-that-start-with-the-same-name-in-the-index-template-in-the-elasticsearch/298528 "2022-03-01T22:22:41Z")
n my Elasticsearch index, there is a field for example field\_abc that is an object. The problem is that multiple fields with name field\_abc can exist with different suffix. Like in our index in the same document field\_ab… --- ## [Error elastic search wont find java.dll and java SE](https://discuss.elastic.co/t/error-elastic-search-wont-find-java-dll-and-java-se/298540)
**Author:** [@tom\_Shabtay](https://discuss.elastic.co/u/tom_Shabtay)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 10:19pm UTC](https://discuss.elastic.co/t/error-elastic-search-wont-find-java-dll-and-java-se/298540 "2022-03-01T22:19:49Z")
When I start Elasticsearch won't work and will not find java.dll and java SE and you can see I have both installed (I reinstalled a couple of times and I reinstalled Elasticsearch as well) see command prompt below C:\\Us… --- ## [Logstash csv file](https://discuss.elastic.co/t/logstash-csv-file/298565)
**Author:** [@Hana\_Ne](https://discuss.elastic.co/u/Hana_Ne)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 9:39pm UTC](https://discuss.elastic.co/t/logstash-csv-file/298565 "2022-03-01T21:39:32Z")
I have question, How can we tell logstash to import only the first 10 lines from a csv file Thank you --- ## [Elastic Agent Standalone Configuration Validation](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 8:49pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562 "2022-03-01T20:49:26Z")
Hi All, I was wondering if there is a way with the Elastic Agent in standalone mode to validate a configuration? Looking at the output of the Elastic Agent process: elastic-agent help Usage: elastic-agent \[subcomm… --- ## [Elastich search can not start in vps](https://discuss.elastic.co/t/elastich-search-can-not-start-in-vps/298489)
**Author:** [@poozhan](https://discuss.elastic.co/u/poozhan)\ **Replies:** 4\ **Last updated:** [March 1, 2022, 8:20pm UTC](https://discuss.elastic.co/t/elastich-search-can-not-start-in-vps/298489 "2022-03-01T20:20:01Z")
Hello I installed java and Elasticsearch in vps my vps have 4g ram and 50g ssd when i start Elasticsearch this error display elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticse… --- ## [X509: certificate signed by unknown authority](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/298551)
**Author:** [@sath](https://discuss.elastic.co/u/sath)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 7:24pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/298551 "2022-03-01T19:24:09Z")
Hello, I'm running Elasticsearch 8 and am trying to output files on a Windows machine to Logstash. Now in preparation, I'm trying to get the index setup by running the following: .\\filebeat.exe setup --index-managemen… --- ## [Lens table/datatable visual options (pagination) missing?](https://discuss.elastic.co/t/lens-table-datatable-visual-options-pagination-missing/298553)
**Author:** [@Moni](https://discuss.elastic.co/u/Moni)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 8:12pm UTC](https://discuss.elastic.co/t/lens-table-datatable-visual-options-pagination-missing/298553 "2022-03-01T20:12:16Z")
Hi all , I don't see the Visual Options in lens table in v 7.16.3. also don't see it in v7.10.2 data table Please do let me know what I am missing here. it should have been available as this feature was added - as … --- ## [How to append a string to a value?](https://discuss.elastic.co/t/how-to-append-a-string-to-a-value/298542)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 3\ **Last updated:** [March 1, 2022, 7:53pm UTC](https://discuss.elastic.co/t/how-to-append-a-string-to-a-value/298542 "2022-03-01T19:53:57Z")
Hi, I would like to append the letter C to this key: "module-temp": 32.37 so that it looks like "module-temp": 32.37 C Tried this but didn't work: if ("\*" in \[module-temp\]) { mutate { replace =\> … --- ## [Could not execute action: PipelineAction::Create\](https://discuss.elastic.co/t/could-not-execute-action-pipelineaction-create-main/298454)
**Author:** [@sath](https://discuss.elastic.co/u/sath)\ **Replies:** 6\ **Last updated:** [March 1, 2022, 7:17pm UTC](https://discuss.elastic.co/t/could-not-execute-action-pipelineaction-create-main/298454 "2022-03-01T19:17:41Z")
Hello, Logstash isn't able to create the index, that's what my conclusion is after checking the logs. pipeline.yml - pipeline.id: main path.config: "/etc/logstash/conf.d/1.conf" 1.conf: input { beats { … --- ## [String json to SearchResponse](https://discuss.elastic.co/t/string-json-to-searchresponse/298543)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 6:38pm UTC](https://discuss.elastic.co/t/string-json-to-searchresponse/298543 "2022-03-01T18:38:53Z")
Hello. I used the example below to turn the json response into a SearchResponse and it worked fine. I made a change in my json file by adding the "suggest" but now I can't parse it correctly. Does anyone have any tips… --- ## [Solr metricbeat module?](https://discuss.elastic.co/t/solr-metricbeat-module/298547)
**Author:** [@MyrdhinBZH](https://discuss.elastic.co/u/MyrdhinBZH)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 6:36pm UTC](https://discuss.elastic.co/t/solr-metricbeat-module/298547 "2022-03-01T18:36:14Z")
Hello, I would like to monitor my solr servers with my ELK stack but I did not find Solr beat module... has Anyone ever retrieved metrics from solr instances to ELK? Thanks, --- ## [Discover Histogram changed to use inches (from timestamps)](https://discuss.elastic.co/t/discover-histogram-changed-to-use-inches-from-timestamps/298438)
**Author:** [@Philip\_Nicolcev](https://discuss.elastic.co/u/Philip_Nicolcev)\ **Replies:** 9\ **Last updated:** [March 1, 2022, 6:08pm UTC](https://discuss.elastic.co/t/discover-histogram-changed-to-use-inches-from-timestamps/298438 "2022-03-01T18:08:08Z")
I have an issue where the Discover view's histogram has suddenly changed to using inches (or what I assume is inches, since it's broken into groups of 12) as a unit for its x axis instead of the usual timestamps. It's li… --- ## [Drop\_event not working via process name or path](https://discuss.elastic.co/t/drop-event-not-working-via-process-name-or-path/298300)
**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 5:31pm UTC](https://discuss.elastic.co/t/drop-event-not-working-via-process-name-or-path/298300 "2022-03-01T17:31:32Z")
Hi, I'm using the processer in the System integration on Elastic Agent to try and reduce the ingest as we get a lot of noise. I've been doing some testing as I'd like to filter out an event code if the process name is … --- ## [Fleet Server 8.0 w/Docker Compose](https://discuss.elastic.co/t/fleet-server-8-0-w-docker-compose/298077)
**Author:** [@variable](https://discuss.elastic.co/u/variable)\ **Replies:** 0\ **Last updated:** [February 23, 2022, 7:38pm UTC](https://discuss.elastic.co/t/fleet-server-8-0-w-docker-compose/298077 "2022-02-23T19:38:13Z")
Pre 8.0, you could set an Elastic Agent container as a Fleet Server with Docker environment variables: docker run ... -e "KIBANA\_FLEET\_SETUP=1" \\ -e "FLEET\_ENROLL=1" \\ -e "FLEET\_SERVER\_INSECURE\_HTTP=1" \\ … --- ## [Alert if any value in a specific field stops appearing](https://discuss.elastic.co/t/alert-if-any-value-in-a-specific-field-stops-appearing/297545)
**Author:** [@duttad](https://discuss.elastic.co/u/duttad)\ **Replies:** 2\ **Last updated:** [March 1, 2022, 5:29pm UTC](https://discuss.elastic.co/t/alert-if-any-value-in-a-specific-field-stops-appearing/297545 "2022-03-01T17:29:36Z")
In my index, if any value has appeared in a specific field every day in the last 3 days, I expect to see this value at least once every day in the future. I want to receive an alert if any such value suddenly stops showi… --- ## [Kibana7 Average aggregation line graph bug](https://discuss.elastic.co/t/kibana7-average-aggregation-line-graph-bug/297551)
**Author:** [@TimC](https://discuss.elastic.co/u/TimC)\ **Replies:** 6\ **Last updated:** [March 1, 2022, 5:07pm UTC](https://discuss.elastic.co/t/kibana7-average-aggregation-line-graph-bug/297551 "2022-03-01T17:07:30Z")
I am migrating visualizations and dashboards from kibana 5 to 7 In Kibana7 line graphs aggregating Average with an X-Axis of Terms sorted by Sum (in our case we have a metric that is about time/power it took for this ta… --- ## [Ingest Pipline - Multiple Pipelines For Elastic Agent Data](https://discuss.elastic.co/t/ingest-pipline-multiple-pipelines-for-elastic-agent-data/298527)
**Author:** [@m-flow](https://discuss.elastic.co/u/m-flow)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 2:36pm UTC](https://discuss.elastic.co/t/ingest-pipline-multiple-pipelines-for-elastic-agent-data/298527 "2022-03-01T14:36:47Z")
Hello, I am currently researching for a solution to create a multi pipeline structure with ingest pipelines in elastic. The idea is to have some kind of post processing on the existing elastic-agent logs, for instance f… --- ## [Kibana Fleet shows Self Signed Certificate in Certificate Chain](https://discuss.elastic.co/t/kibana-fleet-shows-self-signed-certificate-in-certificate-chain/297947)
**Author:** [@SwampyFox](https://discuss.elastic.co/u/SwampyFox)\ **Replies:** 1\ **Last updated:** [March 1, 2022, 4:13pm UTC](https://discuss.elastic.co/t/kibana-fleet-shows-self-signed-certificate-in-certificate-chain/297947 "2022-03-01T16:13:17Z")
I have just run through the Elasticstack 8 instructions on Docker and have been able to get Elastic and Kibana up. However, when I click on Fleet in kibana, I get a message: "Error connecting to package registry...Reaso… --- ## [About AWS S3 Input](https://discuss.elastic.co/t/about-aws-s3-input/297922)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 5\ **Last updated:** [March 1, 2022, 4:02pm UTC](https://discuss.elastic.co/t/about-aws-s3-input/297922 "2022-03-01T16:02:33Z")
Hi, We're considering changes to the structure of our ingestion pipelines. One of those is to have dockerized services write their logs to s3 and then have filebeat read them back before forwarding. Given that we have … --- ## [Elasticsearch enrichment, join best practice](https://discuss.elastic.co/t/elasticsearch-enrichment-join-best-practice/298535)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-enrichment-join-best-practice/298535 "2022-03-01T15:57:10Z")
Hi, how would you handle the situation I have a large data source of 1000tis events/sec, which I need to enrich with data so that I can do analytics on it. The data source has a small amount of data (i.e. 100bytes) bu… [Previous page](https://discuss.elastic.co/latest.md?page=1235) [Next page](https://discuss.elastic.co/latest.md?page=1237)