# Latest **URL:** https://discuss.elastic.co/latest.md?page=1239 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1240 --- ## [Remove kibana deprecation warnings](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 5:21pm UTC](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438 "2022-02-28T17:21:16Z")
I am trying to remove kibana deprecation warnings. I am using kibana 7.10.2. There were some configurations that have been deprecated and I fixed those warnings. There is another deprecation warning that is still appeari… --- ## [Want to create a nest query to filter on optional field](https://discuss.elastic.co/t/want-to-create-a-nest-query-to-filter-on-optional-field/298433)
**Author:** [@tony\_sid](https://discuss.elastic.co/u/tony_sid)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 4:50pm UTC](https://discuss.elastic.co/t/want-to-create-a-nest-query-to-filter-on-optional-field/298433 "2022-02-28T16:50:02Z")
{ { "id": 8, "teamId": 0, "experience": 1, "companyName": "MyCompany" }, { "id": 9, "teamId": 0, "experience": 1, }, { "id": 10, … --- ## [Heartbeat HTTP pings fails with 403](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 4:32pm UTC](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289 "2022-02-28T16:32:05Z")
Hi Team, Strange heartbeat is failing with 403 response but we are getting valid 200 responses via CURL & Browser . Below is the configuration used for setting up the heartbeat any advice here will be helpful. I have … --- ## [Difference between two aggregations](https://discuss.elastic.co/t/difference-between-two-aggregations/294405)
**Author:** [@walshe06](https://discuss.elastic.co/u/walshe06)\ **Replies:** 10\ **Last updated:** [February 28, 2022, 4:17pm UTC](https://discuss.elastic.co/t/difference-between-two-aggregations/294405 "2022-02-28T16:17:02Z")
Hi all I am looking for some help with a watcher that I am trying to run. Basically I am trying to run a search query that will return a value if there is a difference between two aggregations. Below is the script I am… --- ## [Adding site error logs to elastic stack](https://discuss.elastic.co/t/adding-site-error-logs-to-elastic-stack/298363)
**Author:** [@Shorthills](https://discuss.elastic.co/u/Shorthills)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 4:07pm UTC](https://discuss.elastic.co/t/adding-site-error-logs-to-elastic-stack/298363 "2022-02-28T16:07:02Z")
Hi, New user here. My installation is properly pulling error logs from: /var/log/nginx/error.log\* But how do I make it so it also pulls the individual error log data from the sites as in this pattern: /var/log/nginx… --- ## [Logstash Even Hub input. error when running as a service, but not when I run single pipeline](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 3:43pm UTC](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423 "2022-02-28T15:43:10Z")
Hi Im trying to consume data from Azure Event Hub, I have 15 different logstash pipelines pointing to different storages, and Even Hubs, they all work well,and I can get data when I run the single pipelines alone, but wh… --- ## [How do I get a percolator query to use the same analyzer as the mapped fields?](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421)
**Author:** [@sanoj85](https://discuss.elastic.co/u/sanoj85)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 3:42pm UTC](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421 "2022-02-28T15:42:50Z")
--- ## [Impossible to overwrite "host.ip" when using Custom Logs integration](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348)
**Author:** [@Twyzz](https://discuss.elastic.co/u/Twyzz)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 3:25pm UTC](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348 "2022-02-28T15:25:01Z")
Hi, I'm trying to get the correct IP for the host.ip property in my logs documents, to be able to utilize all the built in links in kibana but unfortunately I cannot get it to work. The setup is quite easy. I'm running… --- ## [Date indexes as yesterday](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192)
**Author:** [@SKraine](https://discuss.elastic.co/u/SKraine)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 3:16pm UTC](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192 "2022-02-28T15:16:10Z")
Hey Everyone, I am trying to index some statistics into my self-hosted elastic stack. I am using the python API to index the document which has a very simple mapping that is dynamically mapped from a dictionary in pytho… --- ## [Fleet agent - Kubernetes Dashboard](https://discuss.elastic.co/t/fleet-agent-kubernetes-dashboard/298282)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 3:03pm UTC](https://discuss.elastic.co/t/fleet-agent-kubernetes-dashboard/298282 "2022-02-28T15:03:51Z")
i dont have any dashboard, how i add it ? --- ## [Jdbc\_driver\_library default folder in old versions](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416)
**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416 "2022-02-28T14:56:49Z")
Hello! Could someone suggest where is default folder for jars in logstash version 2.4.1? I know that beginning from 6 version it is - /usr/share/logstash/logstash-core/lib/jars/ but previous versions had another pa… --- ## [Can't see aws.cloudtrail logs in "Discover", but still getting Security Detections that uses aws.cloudtrail](https://discuss.elastic.co/t/cant-see-aws-cloudtrail-logs-in-discover-but-still-getting-security-detections-that-uses-aws-cloudtrail/298316)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 2:50pm UTC](https://discuss.elastic.co/t/cant-see-aws-cloudtrail-logs-in-discover-but-still-getting-security-detections-that-uses-aws-cloudtrail/298316 "2022-02-28T14:50:54Z")
Can't see aws.cloudtrail logs in "Discover", but still getting Security Detections that uses aws.cloudtrail. Keep on restarting the agent that ships the AWS Cloudtrail logs, okta logs, Google Workspace logs, but AWS eve… --- ## [Disable search function in Kibana dashboard and visualisation](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 2:40pm UTC](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133 "2022-02-28T14:40:50Z")
Hi there, we activated X-Pack for our Elasticsearch and Kibana and created different users, roles and spaces. That works great. However, we would like to disable the search for specific users, roles or spaces. Is that … --- ## [Secret in Azure module Metricbeat](https://discuss.elastic.co/t/secret-in-azure-module-metricbeat/298412)
**Author:** [@legos765](https://discuss.elastic.co/u/legos765)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 2:34pm UTC](https://discuss.elastic.co/t/secret-in-azure-module-metricbeat/298412 "2022-02-28T14:34:14Z")
Hello, I'm trying to implement Azure module in Metricbeat version 7.17. And im getting error when it is connecting to Azure: Refresh request failed. Status Code = '401'. Response body: {"error":"invalid\_client","error\_… --- ## [How to use parameters in a stored script that's executed using logstash output plugin](https://discuss.elastic.co/t/how-to-use-parameters-in-a-stored-script-thats-executed-using-logstash-output-plugin/298336)
**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 2:34pm UTC](https://discuss.elastic.co/t/how-to-use-parameters-in-a-stored-script-thats-executed-using-logstash-output-plugin/298336 "2022-02-28T14:34:08Z")
Hi, I've a stored script : POST \_scripts/1\_jd\_job\_domain { "script": { "lang": "painless", "params": { "generic\_domain": "generic domain" \[...\] }, "source" : """if ( ctx.\_source.car?.current\_assignmen… --- ## [Sorting and bucket\_selector not working on pipeline aggregation](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 2:25pm UTC](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353 "2022-02-28T14:25:17Z")
Hi Team, I have an index "order" that has order data with seller detail, status, and order value. { sId:1, name: "John", orderId:123 gov:100, rtsStatus:"BRECHED" }, { sId:1, name: "John", orderId:456 gov:150, rtsStatus… --- ## [Chinese Analyzer: Simplified and Traditional (stconvert)](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812)
**Author:** [@Karuna](https://discuss.elastic.co/u/Karuna)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 2:20pm UTC](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812 "2022-02-28T14:20:24Z")
I'm creating a search engine for my non-profit org that uses 21 languages, so I also need to support traditional and simplified Chinese as these are our second largest set of readers. I have read a few articles (你们好 - E… --- ## [APM on docker did not send logs trace to elastic cloud](https://discuss.elastic.co/t/apm-on-docker-did-not-send-logs-trace-to-elastic-cloud/295620)
**Author:** [@bekk777](https://discuss.elastic.co/u/bekk777)\ **Replies:** 25\ **Last updated:** [February 28, 2022, 1:36pm UTC](https://discuss.elastic.co/t/apm-on-docker-did-not-send-logs-trace-to-elastic-cloud/295620 "2022-02-28T13:36:07Z")
Hello everyone, I don´t understand why my configuration APM agent and server working on docker. But on the elastic cloud does not show anything on the APM service. But in Discover metrics show. cloud version v 7.15.2. … --- ## [Readiness probe failed: Error: Got HTTP code 503 but expected a 200](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 1:30pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571 "2022-02-28T13:30:29Z")
Hello, I have an issue where Kibana is not coming up due to a failed status check. I'm using the Helm charts for Elasticsearch and Kibana with some changes that are reflected by the values below. There was a similar is… --- ## [Switch from scripted fields to runtime fields?](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295)
**Author:** [@glushkov](https://discuss.elastic.co/u/glushkov)\ **Replies:** 7\ **Last updated:** [February 28, 2022, 1:22pm UTC](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295 "2022-02-28T13:22:40Z")
Hi, Kibana is warning me since ever when I look at Management \> Index patterns \> \ \> Scripted fields that "Scripted fields" are deprecated and one should use "runtime fields" instead. To be prepared, … --- ## [Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371 "2022-02-28T12:54:15Z")
I'm running a one node Elastic cluster with Elasticsearch and Kibana. The configuration worked before on an earlier version about a year ago, however, after Kibanas version automatically updated due to new container imag… --- ## [Filebeat w/ Iptables Module to Logstash to Elastic: Expected Fields Not Populated](https://discuss.elastic.co/t/filebeat-w-iptables-module-to-logstash-to-elastic-expected-fields-not-populated/295720)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 11:49am UTC](https://discuss.elastic.co/t/filebeat-w-iptables-module-to-logstash-to-elastic-expected-fields-not-populated/295720 "2022-02-28T11:49:32Z")
Hello: I'm pretty new at the ecosystem. I've learned a lot in the past few weeks however I think I've hit a roadblock where I can't seem to figure out why log lines are not being broken out into the expected fields and t… --- ## [Need to run two separate elk stack using docker](https://discuss.elastic.co/t/need-to-run-two-separate-elk-stack-using-docker/298402)
**Author:** [@auasad](https://discuss.elastic.co/u/auasad)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 12:33pm UTC](https://discuss.elastic.co/t/need-to-run-two-separate-elk-stack-using-docker/298402 "2022-02-28T12:33:13Z")
Hello community, I need to run two separate elk stack, i.e. elk7.17 and elk8.0 on same machine in docker containers using docker-compose. I have already changed the port for both like 9200, 9300 for elk7.17 and 9202 and … --- ## [Sub aggregration in Kibana Canvas](https://discuss.elastic.co/t/sub-aggregration-in-kibana-canvas/296433)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 10:45am UTC](https://discuss.elastic.co/t/sub-aggregration-in-kibana-canvas/296433 "2022-02-28T10:45:16Z")
Hi everyone, is there a possibility to use sub aggregation in Kibana Canvas? --- ## [Parsing message for haproxy logs no matched](https://discuss.elastic.co/t/parsing-message-for-haproxy-logs-no-matched/298395)
**Author:** [@Romain.Depreux](https://discuss.elastic.co/u/Romain.Depreux)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 10:31am UTC](https://discuss.elastic.co/t/parsing-message-for-haproxy-logs-no-matched/298395 "2022-02-28T10:31:43Z")
Hello, can anyone kindly help me to solve this problem? I'm trying to parse the fields of a haproxy log then dissect that message to map the different message values into fields for logstash. But I have the impression … --- ## [Function: cloudwatch, could not deploy, error: bucket 'functionbeat-deploy' already exist and you don't have permission to access it](https://discuss.elastic.co/t/function-cloudwatch-could-not-deploy-error-bucket-functionbeat-deploy-already-exist-and-you-dont-have-permission-to-access-it/293455)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 5\ **Last updated:** [February 28, 2022, 9:10am UTC](https://discuss.elastic.co/t/function-cloudwatch-could-not-deploy-error-bucket-functionbeat-deploy-already-exist-and-you-dont-have-permission-to-access-it/293455 "2022-02-28T09:10:26Z")
I had version 7.12 deployed of functionbeat, i removed it successfully using ./functionbeat -v -e -d "\*" remove cloudwatch I then configurd version 7.16 version of functionbeat and i am trying to deploy it but i get the… --- ## [Logstash and MongoDB input](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535)
**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 10:20am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-input/297535 "2022-02-28T10:20:15Z")
Hi! Logstash version: 7.17.0 Could you help me with logstash-mongodb issue, in view of input plugin for Logstash. I work on some task, where I need to get logs from postgre and mongo. Regarding to postgre - everythi… --- ## [SQL Vs. Query DSL](https://discuss.elastic.co/t/sql-vs-query-dsl/298384)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/sql-vs-query-dsl/298384 "2022-02-28T10:13:33Z")
Hi, I see huge difference in the performance when running the same query in the different approach. SQL: GET \_sql?format=json { "query": """ SELECT \* FROM "baseelements" WHERE "sessionId" = '621786a4186dc944ccb… --- ## [Interpret Text field as Date field during search](https://discuss.elastic.co/t/interpret-text-field-as-date-field-during-search/298385)
**Author:** [@Gokulnath\_Thangavel](https://discuss.elastic.co/u/Gokulnath_Thangavel)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 10:01am UTC](https://discuss.elastic.co/t/interpret-text-field-as-date-field-during-search/298385 "2022-02-28T10:01:54Z")
When we initially started using Elasticsearch we missed to add mappings to one of our indices. So all the Fields are having default type of "keyword". Is there any way to perform the date range search by interpreting tim… --- ## [Cluster setup issue when path.data and path.logs are configured](https://discuss.elastic.co/t/cluster-setup-issue-when-path-data-and-path-logs-are-configured/298124)
**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\ **Replies:** 7\ **Last updated:** [February 28, 2022, 9:38am UTC](https://discuss.elastic.co/t/cluster-setup-issue-when-path-data-and-path-logs-are-configured/298124 "2022-02-28T09:38:08Z")
I am trying to setup a 3 node cluster using Elasticsearch-7.17.0 in linux. I have made the following configurations in elasticsearch.yml file of all 3 nodes: path.data: /some/path/data path.logs: /some/path/logs network… [Previous page](https://discuss.elastic.co/latest.md?page=1238) [Next page](https://discuss.elastic.co/latest.md?page=1240)