# Latest **URL:** https://discuss.elastic.co/latest.md?page=1240 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1241 --- ## [Wordpiece tokenizer](https://discuss.elastic.co/t/wordpiece-tokenizer/296276)
**Author:** [@Quentin\_Feuillade](https://discuss.elastic.co/u/Quentin_Feuillade)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 8:53am UTC](https://discuss.elastic.co/t/wordpiece-tokenizer/296276 "2022-02-28T08:53:22Z")
I am trying to use Worpiece tokenization (the tokenization method used in BERT) directly as a elastic tokenizer. After some digging i found this file in the official elastic source code but i can't find any way to use i… --- ## [I have a problem when I want to send logs of PFSense (2.5.2 amd64) to EK version 7.14.2](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 18\ **Last updated:** [February 28, 2022, 9:19am UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-pfsense-2-5-2-amd64-to-ek-version-7-14-2/297603 "2022-02-28T09:19:20Z")
I have a problem when I want to send logs from PFSense (2.5.2 amd64) to EK version 7.14.2 I did configure PFSense to send logs to EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2) --- ## [DELETED INDEXES UNABLE TO RESTORE USING SNAPSHOT BACKUP AND RESTORE](https://discuss.elastic.co/t/deleted-indexes-unable-to-restore-using-snapshot-backup-and-restore/297346)
**Author:** [@indrajit\_kal](https://discuss.elastic.co/u/indrajit_kal)\ **Replies:** 5\ **Last updated:** [February 28, 2022, 9:12am UTC](https://discuss.elastic.co/t/deleted-indexes-unable-to-restore-using-snapshot-backup-and-restore/297346 "2022-02-28T09:12:46Z")
ERROR \[backup\_repo:test-snapshot-2022.02.11-kxyy8jd4sumangv5kozy3q/9uLE7UaUQamgAH9pYbKAAA\] cannot restore index \[.siem-signals-default-000001\] because an open index with same name already exists in the cluster. Either c… --- ## [Should I prefer beats or Elastic Agent for monitoring application deployed using docker stack and not kubernetes?](https://discuss.elastic.co/t/should-i-prefer-beats-or-elastic-agent-for-monitoring-application-deployed-using-docker-stack-and-not-kubernetes/298079)
**Author:** [@Mahesh\_Abnave](https://discuss.elastic.co/u/Mahesh_Abnave)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 9:07am UTC](https://discuss.elastic.co/t/should-i-prefer-beats-or-elastic-agent-for-monitoring-application-deployed-using-docker-stack-and-not-kubernetes/298079 "2022-02-28T09:07:08Z")
I have an application up and running in set of docker containers (deployed using docker stack and not kubernetes). I want to do performance monitoring for this application. I am confused about whether I should go for bea… --- ## [How to determines if a geo point is within a polygon](https://discuss.elastic.co/t/how-to-determines-if-a-geo-point-is-within-a-polygon/298383)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 8:56am UTC](https://discuss.elastic.co/t/how-to-determines-if-a-geo-point-is-within-a-polygon/298383 "2022-02-28T08:56:42Z")
Hi team! I have a question for geo query. For example, I have a index which name is city, and in this index, I create a field which type is geo\_shape. Now I have a address's longitude and latitude, I want to get the c… --- ## [Elastic Search High level Client for OSS 7.4](https://discuss.elastic.co/t/elastic-search-high-level-client-for-oss-7-4/298369)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 8:14am UTC](https://discuss.elastic.co/t/elastic-search-high-level-client-for-oss-7-4/298369 "2022-02-28T08:14:48Z")
I am using Elasticsearch 7.4.0 OSS version server and want to connect via java rest api service. So I used EL rest high level client \ \org.elasticsearch.client\ \elastics… --- ## [Kibana pin filters from embeded dashboard are not applied when we navigate to another dashboard](https://discuss.elastic.co/t/kibana-pin-filters-from-embeded-dashboard-are-not-applied-when-we-navigate-to-another-dashboard/298367)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 8:08am UTC](https://discuss.elastic.co/t/kibana-pin-filters-from-embeded-dashboard-are-not-applied-when-we-navigate-to-another-dashboard/298367 "2022-02-28T08:08:03Z")
Pin filters works perfectly when we navigate from one dashboard to another using hyperlink(configured link in url template of index patterns) inside Kibana, where as we try navigating from embedded dashboard to another … --- ## [The truststore does not contain any trusted certificate entries after upgrade to 8.0](https://discuss.elastic.co/t/the-truststore-does-not-contain-any-trusted-certificate-entries-after-upgrade-to-8-0/298338)
**Author:** [@testshock](https://discuss.elastic.co/u/testshock)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 7:56am UTC](https://discuss.elastic.co/t/the-truststore-does-not-contain-any-trusted-certificate-entries-after-upgrade-to-8-0/298338 "2022-02-28T07:56:24Z")
I was doing offline upgrade from 7.16 to 8.0. With all servers stopped upgrade with rpm and started again. From 7.16 to 7.17 no problems at all. Cluster came up green. From 7.17 to 8.0 elastic i got Exception org.elas… --- ## [Last value of syste.uptime.duration.ms](https://discuss.elastic.co/t/last-value-of-syste-uptime-duration-ms/298119)
**Author:** [@ratseba](https://discuss.elastic.co/u/ratseba)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 7:30am UTC](https://discuss.elastic.co/t/last-value-of-syste-uptime-duration-ms/298119 "2022-02-28T07:30:45Z")
Hi, I need show on dashboard uptime for server. I tried do this by Lens -\> Metric. When i set for metric: Last value od system.uptime.duration.ms and sort by @timestamp then i dont see anything. In index i have this dat… --- ## [What is taking up disk space if I disable indexing of all properties and \_source?](https://discuss.elastic.co/t/what-is-taking-up-disk-space-if-i-disable-indexing-of-all-properties-and-source/298372)
**Author:** [@Adnukator](https://discuss.elastic.co/u/Adnukator)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 6:56am UTC](https://discuss.elastic.co/t/what-is-taking-up-disk-space-if-i-disable-indexing-of-all-properties-and-source/298372 "2022-02-28T06:56:07Z")
I'm trying to restructure our Elasticsearch settings to be more space efficient, even if at the price of less comfort. I have a set of 150k documents from a live server where I'm trying to measure the impact of different… --- ## [Relying on default value of \`pipeline.ecs\_compatibility\`,](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/298370)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 6:19am UTC](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/298370 "2022-02-28T06:19:51Z")
logstashを以下のコマンド起動したら「Relying on default value of pipeline.ecs\_compatibility～」というエラーが表示されました。 \[root@rhel8 conf.d\]# /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf \[INFO \] 2022-02-28 13:45:46.786 … --- ## [Script condition for not matching records](https://discuss.elastic.co/t/script-condition-for-not-matching-records/298293)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 5:19am UTC](https://discuss.elastic.co/t/script-condition-for-not-matching-records/298293 "2022-02-28T05:19:00Z")
Hi, I am selecting records based on range query. /\_update\_by\_query?conflicts=proceed { "query":{"range":{"dateTime":{"gte":"xxx","lte":"xxx"}}}, "script":{"source":"ctx.\_source.selected = true"} } how can i unselect… --- ## [Beatsで収集したログをそのままlogstashに送信できない](https://discuss.elastic.co/t/beats-logstash/297840)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 6\ **Last updated:** [February 28, 2022, 4:48am UTC](https://discuss.elastic.co/t/beats-logstash/297840 "2022-02-28T04:48:51Z")
filebeat,winlogbeatで収集したログを、logstashがインストールされているログ管理サーバに送信して、ログの管理を行いたいです。 filebeat,winlogbeatで収集したログを、logstashに受信できたと思ったのですが、生ログではなく、ログの情報（該当ログファイルのパス、ログファイルの作成日時等）が送られてきます。 filebeat,winlogbeatで収集したログを、生ログのままlogstashに… --- ## [Docker Elasticsearch up but not connecting python script](https://discuss.elastic.co/t/docker-elasticsearch-up-but-not-connecting-python-script/298360)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 12:10am UTC](https://discuss.elastic.co/t/docker-elasticsearch-up-but-not-connecting-python-script/298360 "2022-02-28T00:10:17Z")
Hi, I am have install Elasticsearch with docker it up but not able to make connection from python client. docker-compose.yaml version: '2.2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasti… --- ## [Slow listing indices in Kibana Index Management](https://discuss.elastic.co/t/slow-listing-indices-in-kibana-index-management/298143)
**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\ **Replies:** 1\ **Last updated:** [February 27, 2022, 11:49pm UTC](https://discuss.elastic.co/t/slow-listing-indices-in-kibana-index-management/298143 "2022-02-27T23:49:05Z")
We are runing a cluster whit 15 Nodes, Detecated master, data-hot, data-warm, data-cold, ingest and coordinating nodes. And only 1222 Indices. Normal querys and indexing looks like its ok. But listing listing indices in… --- ## [Upgrading Endgame appliance](https://discuss.elastic.co/t/upgrading-endgame-appliance/298273)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 11:26am UTC](https://discuss.elastic.co/t/upgrading-endgame-appliance/298273 "2022-02-25T11:26:23Z")
Hi I have an Endgame appliance that needs nginx upgrading. Can I upgrade using the nginx repo or do I need to install a new appliance? According to this link it is now EOL. Elastic product end of life dates | Elastic T… --- ## [Transforming documents after they have been retrieved?](https://discuss.elastic.co/t/transforming-documents-after-they-have-been-retrieved/298213)
**Author:** [@mafej](https://discuss.elastic.co/u/mafej)\ **Replies:** 2\ **Last updated:** [February 27, 2022, 11:34pm UTC](https://discuss.elastic.co/t/transforming-documents-after-they-have-been-retrieved/298213 "2022-02-27T23:34:20Z")
I'm wondering, is there functionality similar to ingest pipelines, but for output instead of input? Being able to transform data when it's ingested is nice, but what about the opposite of that, transforming documents aft… --- ## [Logs delay in Kibana](https://discuss.elastic.co/t/logs-delay-in-kibana/298332)
**Author:** [@vijayja](https://discuss.elastic.co/u/vijayja)\ **Replies:** 1\ **Last updated:** [February 27, 2022, 11:33pm UTC](https://discuss.elastic.co/t/logs-delay-in-kibana/298332 "2022-02-27T23:33:08Z")
Hi Team, We are facing the log delay issue in Kibana dashboard, Logs are getting delay by 2 hours, 2.5 hours and sometimes 3 hours, We have two identical kubernetes cluster, But facing the issue with only one cluster, n… --- ## [Elastics search date range issue](https://discuss.elastic.co/t/elastics-search-date-range-issue/298364)
**Author:** [@riya9](https://discuss.elastic.co/u/riya9)\ **Replies:** 0\ **Last updated:** [February 27, 2022, 8:06pm UTC](https://discuss.elastic.co/t/elastics-search-date-range-issue/298364 "2022-02-27T20:06:14Z")
Hello, I am newbie to Kibana and having hard time to create an alert for job which is not in success state for last 90 min ..am trying below query but somehow when using "gte": "now-90m", it get converted to below in … --- ## [SAML authentication request scoping (using IDP proxy)](https://discuss.elastic.co/t/saml-authentication-request-scoping-using-idp-proxy/297932)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 5\ **Last updated:** [February 27, 2022, 4:04pm UTC](https://discuss.elastic.co/t/saml-authentication-request-scoping-using-idp-proxy/297932 "2022-02-27T16:04:34Z")
Hi all, I am now trying to test the ELK do auth using SAML. the basic flow is ok since i may follow the documentation. But i think that one of the case is not fit. i would like to use ELK as SP and connect to a IDP prox… --- ## [Kibana Dashboard field value count](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494)
**Author:** [@shanthveeresh](https://discuss.elastic.co/u/shanthveeresh)\ **Replies:** 4\ **Last updated:** [February 27, 2022, 3:30pm UTC](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494 "2022-02-27T15:30:20Z")
Hi All, I am trying to find a .json script or keyword to count the number of field value count in Kibana dashboard, let me know if there is any way to do it, it will be very helpful. --- ## [Logstash input: Twitter](https://discuss.elastic.co/t/logstash-input-twitter/298351)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [February 27, 2022, 2:42pm UTC](https://discuss.elastic.co/t/logstash-input-twitter/298351 "2022-02-27T14:42:32Z")
Hello, I have a simple pipeline setup in Logstash (keys changed of course): input { twitter { consumer\_key =\> "rcLfXIhprrPKLgVI467Slbux0" consumer\_secret =\>"uYk68znfoDQq70lfWXS3I… --- ## [Timestamp does not match data](https://discuss.elastic.co/t/timestamp-does-not-match-data/298344)
**Author:** [@tjunge](https://discuss.elastic.co/u/tjunge)\ **Replies:** 2\ **Last updated:** [February 27, 2022, 2:21pm UTC](https://discuss.elastic.co/t/timestamp-does-not-match-data/298344 "2022-02-27T14:21:44Z")
Hi, I am new to Elastic Stack and trying to filter my fail2ban log. In Grok Debugger I tried to simulate my Grok pattern on my data but have problems with the timestamp. I always get the simulate error: Provided Grok p… --- ## [Help getting started with text embeddings](https://discuss.elastic.co/t/help-getting-started-with-text-embeddings/297185)
**Author:** [@spruitt](https://discuss.elastic.co/u/spruitt)\ **Replies:** 2\ **Last updated:** [February 27, 2022, 1:41pm UTC](https://discuss.elastic.co/t/help-getting-started-with-text-embeddings/297185 "2022-02-27T13:41:55Z")
I am getting up to speed with semantic search. I started with a repository link I found in the blog "Text similarity search with vector fields." It's Python starter code. I'm having problems from the start. A lot of … --- ## [How to setup pipline to extract file using grok in Elastic if the timestamp format is "20Aug21 20:36:07.058931 @fsafsasfdasdsadasd"](https://discuss.elastic.co/t/how-to-setup-pipline-to-extract-file-using-grok-in-elastic-if-the-timestamp-format-is-20aug21-2007-058931-fsafsasfdasdsadasd/298108)
**Author:** [@chenx319](https://discuss.elastic.co/u/chenx319)\ **Replies:** 8\ **Last updated:** [February 27, 2022, 12:30pm UTC](https://discuss.elastic.co/t/how-to-setup-pipline-to-extract-file-using-grok-in-elastic-if-the-timestamp-format-is-20aug21-2007-058931-fsafsasfdasdsadasd/298108 "2022-02-27T12:30:06Z")
one of my log ,and the format is like as follows: 20Aug21 20:36:07.058931 @fsafsasfdasdsadasd I want to extract 20Aug21 20:36:07.058931 to a date type field. I tried: PUT /\_ingest/pipeline/xxx-log { "processors":\[ … --- ## [Traces are not shown in Kibana](https://discuss.elastic.co/t/traces-are-not-shown-in-kibana/295757)
**Author:** [@rishisalunkhe](https://discuss.elastic.co/u/rishisalunkhe)\ **Replies:** 30\ **Last updated:** [February 27, 2022, 11:34am UTC](https://discuss.elastic.co/t/traces-are-not-shown-in-kibana/295757 "2022-02-27T11:34:19Z")
Kibana version: 7.15.2 Elasticsearch version: 7.16.3 APM Server version: 7.16.3 APM Agent language and version: Java 11, agent version: 1.28.4 Browser version: Google chrome 97.0.4692.99 \*\*Description: I am trying t… --- ## [DEPRECATED: CommonName field on X.509 certificates](https://discuss.elastic.co/t/deprecated-commonname-field-on-x-509-certificates/298310)
**Author:** [@ariverol](https://discuss.elastic.co/u/ariverol)\ **Replies:** 1\ **Last updated:** [February 27, 2022, 6:38am UTC](https://discuss.elastic.co/t/deprecated-commonname-field-on-x-509-certificates/298310 "2022-02-27T06:38:00Z")
Hi, I'm having a problem receiving data from a 7.17.0 filebeat to Logstash. If I run filebeat -e test config I see a warning lscommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as a h… --- ## [Age from year of birth](https://discuss.elastic.co/t/age-from-year-of-birth/298280)
**Author:** [@Anand\_p\_s](https://discuss.elastic.co/u/Anand_p_s)\ **Replies:** 3\ **Last updated:** [February 26, 2022, 7:05pm UTC](https://discuss.elastic.co/t/age-from-year-of-birth/298280 "2022-02-26T19:05:29Z")
Sir, I need to do a range aggeration for age ,from year of birth field. How it possible . Pls help --- ## [Workspace search with federated identities (Azure AD): How to configure Document Level Permissions?](https://discuss.elastic.co/t/workspace-search-with-federated-identities-azure-ad-how-to-configure-document-level-permissions/298334)
**Author:** [@Robin\_Vanderschueren](https://discuss.elastic.co/u/Robin_Vanderschueren)\ **Replies:** 0\ **Last updated:** [February 26, 2022, 4:40pm UTC](https://discuss.elastic.co/t/workspace-search-with-federated-identities-azure-ad-how-to-configure-document-level-permissions/298334 "2022-02-26T16:40:19Z")
I'm trying to figure out if it is possible to use Azure AD as an identity provider for Elastic Workspace search. Currently I've followed this blog: Elasticsearch (elastic cloud) SSO with Azure AD | by Rajat Panwar | Med… --- ## [Failed to start Elasticsearch, error code status 143](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303)
**Author:** [@shiva1](https://discuss.elastic.co/u/shiva1)\ **Replies:** 2\ **Last updated:** [February 26, 2022, 11:42am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303 "2022-02-26T11:42:42Z")
Hi, I am new to installing Elasticsearch, I did install Elasticsearch in debian buster 10, and when trying to start the Elasticsearch have the issue, it fails to start with (code=exited, status=143) Output : root@ip… [Previous page](https://discuss.elastic.co/latest.md?page=1239) [Next page](https://discuss.elastic.co/latest.md?page=1241)