# Latest **URL:** https://discuss.elastic.co/latest.md?page=1255 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1256 --- ## [Configure deprecation log index properties](https://discuss.elastic.co/t/configure-deprecation-log-index-properties/291342)
**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\ **Replies:** 9\ **Last updated:** [February 18, 2022, 8:03am UTC](https://discuss.elastic.co/t/configure-deprecation-log-index-properties/291342 "2022-02-18T08:03:17Z")
7.16 adds a new stream/index for deprecation logging. e.g. the first one today is .ds-.logs-deprecation.elasticsearch-default-2021.12.09-000001 However, it is created with "number\_of\_replicas": "1" and I only have one … --- ## [Metricbeat http module query Confluent Cloud Metrics](https://discuss.elastic.co/t/metricbeat-http-module-query-confluent-cloud-metrics/297569)
**Author:** [@henriksped209](https://discuss.elastic.co/u/henriksped209)\ **Replies:** 0\ **Last updated:** [February 18, 2022, 7:22am UTC](https://discuss.elastic.co/t/metricbeat-http-module-query-confluent-cloud-metrics/297569 "2022-02-18T07:22:49Z")
Hi I have a task where I need to figure out how to collect metrics from Confluent Cloud in ELK Stack. I have been looking into metricbeat http module and I'm able to query metrics from the Confluent Cloud API: https://… --- ## [End point security fails for Elastic Agent with error "Missed two check-ins"](https://discuss.elastic.co/t/end-point-security-fails-for-elastic-agent-with-error-missed-two-check-ins/297477)
**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\ **Replies:** 5\ **Last updated:** [February 18, 2022, 3:35am UTC](https://discuss.elastic.co/t/end-point-security-fails-for-elastic-agent-with-error-missed-two-check-ins/297477 "2022-02-18T03:35:34Z")
When I install elastic-agent and fleet-server against a successfully running https/SSL Elasticsearch and Kibana.....The output indicates a successful start and enrolment but a few minutes later the elastic-agent status i… --- ## [Recent Kibana security update \[7.17\]](https://discuss.elastic.co/t/recent-kibana-security-update-7-17/296219)
**Author:** [@falcantara](https://discuss.elastic.co/u/falcantara)\ **Replies:** 3\ **Last updated:** [February 18, 2022, 2:12am UTC](https://discuss.elastic.co/t/recent-kibana-security-update-7-17/296219 "2022-02-18T02:12:58Z")
I was looking at this update here: https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215 and I saw that this vulnerability had low privileges. I'm assuming that with vulnerability in order to exploit you need… --- ## [Workplace search - how to pause or change frequency of content sync](https://discuss.elastic.co/t/workplace-search-how-to-pause-or-change-frequency-of-content-sync/297528)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 3\ **Last updated:** [February 17, 2022, 11:33pm UTC](https://discuss.elastic.co/t/workplace-search-how-to-pause-or-change-frequency-of-content-sync/297528 "2022-02-17T23:33:52Z")
How can you pause or change the frequency that an out of the box connector syncs (ServiceNow in this case)? I dont want it to sync as often as 2 hours. I tried the interrupt command at Content sources API reference | W… --- ## [Change the default master connection timeout of 30s to 60s](https://discuss.elastic.co/t/change-the-default-master-connection-timeout-of-30s-to-60s/297311)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 15\ **Last updated:** [February 17, 2022, 11:11pm UTC](https://discuss.elastic.co/t/change-the-default-master-connection-timeout-of-30s-to-60s/297311 "2022-02-17T23:11:33Z")
Hi, I am using Elasticsearch 5.5.2 version and when the node 2 is trying to connect to the master node node 1 I am getting the below error. I had opened this thread - Getting ConnectTimeoutException When joining in clust… --- ## [Elasticsearch-sql-cli jar and log4j vulnerabilty](https://discuss.elastic.co/t/elasticsearch-sql-cli-jar-and-log4j-vulnerabilty/297550)
**Author:** [@praveen4bv](https://discuss.elastic.co/u/praveen4bv)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-jar-and-log4j-vulnerabilty/297550 "2022-02-17T22:32:20Z")
We are running Elasticsearch 7.6.2 and have mitigated the log4j by setting the -Dlog4j2.formatMsgNoLookups=true in JVM options. However, our scans are still showing that Elasticsearch-sql-cli-7.6.2.jar file is vulner… --- ## [Apache monitoring on several FreeBSD hosts](https://discuss.elastic.co/t/apache-monitoring-on-several-freebsd-hosts/297479)
**Author:** [@txfz](https://discuss.elastic.co/u/txfz)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 11:22am UTC](https://discuss.elastic.co/t/apache-monitoring-on-several-freebsd-hosts/297479 "2022-02-17T11:22:32Z")
Hi, I'm new to the Elastic Stack. I've only barely managed to get it up and running before, so I may or may not fully understand all the things which I'm asking for here. We have a number of FreeBSD hosts running Apach… --- ## [No agents under endpoint or host section in security](https://discuss.elastic.co/t/no-agents-under-endpoint-or-host-section-in-security/297514)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 8:50pm UTC](https://discuss.elastic.co/t/no-agents-under-endpoint-or-host-section-in-security/297514 "2022-02-17T20:50:30Z")
Hi, We are testing out locally installed elk stack, enrolled agents to fleet and they are shown as healthy but in hosts section I see only fleet server and in endpoint section it just suggests to enroll agents, not show… --- ## [\[ES 8.0.0\] Index Template ".monitoring-logstash-mb" has a missing field](https://discuss.elastic.co/t/es-8-0-0-index-template-monitoring-logstash-mb-has-a-missing-field/297544)
**Author:** [@nikAizuddin](https://discuss.elastic.co/u/nikAizuddin)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 8:45pm UTC](https://discuss.elastic.co/t/es-8-0-0-index-template-monitoring-logstash-mb-has-a-missing-field/297544 "2022-02-17T20:45:01Z")
Hi, I'm using Elastic Stack and Beats version 8.0.0. I noticed Index Template .monitoring-logstash-mb is missing a mapping for logstash.node.stats.pipelines.queue.capacity.queue\_size\_in\_bytes field. My setup for Stack … --- ## [How to parse the multiline and nested json file](https://discuss.elastic.co/t/how-to-parse-the-multiline-and-nested-json-file/297542)
**Author:** [@ycui56](https://discuss.elastic.co/u/ycui56)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 8:22pm UTC](https://discuss.elastic.co/t/how-to-parse-the-multiline-and-nested-json-file/297542 "2022-02-17T20:22:31Z")
Hi, I read lots of posts on the similar topics, but I still have problems to figure it out. So I have to post this one and hopefully get help from here. Thanks a lot in advance. Jason file: { "lable1": { d1: 0, d2… --- ## [Problem in phrase\_prefix with filter](https://discuss.elastic.co/t/problem-in-phrase-prefix-with-filter/297538)
**Author:** [@Kalavero](https://discuss.elastic.co/u/Kalavero)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 7:17pm UTC](https://discuss.elastic.co/t/problem-in-phrase-prefix-with-filter/297538 "2022-02-17T19:17:17Z")
I have a query that I use for a search\_as\_you\_type field that is not returning the expected value. The query looks something like this: GET users/\_search { "\_source": \["first\_name","full\_name","last\_name","marketplac… --- ## [Unable to Migrate Custom Index to Cloud Through Logstash](https://discuss.elastic.co/t/unable-to-migrate-custom-index-to-cloud-through-logstash/297419)
**Author:** [@daniel.talbot](https://discuss.elastic.co/u/daniel.talbot)\ **Replies:** 4\ **Last updated:** [February 17, 2022, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-migrate-custom-index-to-cloud-through-logstash/297419 "2022-02-17T18:08:24Z")
Trying to use a basic configuration to write a custom index to a cloud instance but upon doing so I keep getting an error addressing Ruby. Posting the config and results of starting with systemctl betlow: Config: inpu… --- ## [Kibana Tables colors](https://discuss.elastic.co/t/kibana-tables-colors/297356)
**Author:** [@aaron1](https://discuss.elastic.co/u/aaron1)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 5:04pm UTC](https://discuss.elastic.co/t/kibana-tables-colors/297356 "2022-02-17T17:04:05Z")
I want to create a table that has severity levels of high medium and low and I want the words High medium and low to be in different colors. Is that possible in Kibana? --- ## [Variable in setup.template.json.path file not work?](https://discuss.elastic.co/t/variable-in-setup-template-json-path-file-not-work/297520)
**Author:** [@acidborn601](https://discuss.elastic.co/u/acidborn601)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 4:36pm UTC](https://discuss.elastic.co/t/variable-in-setup-template-json-path-file-not-work/297520 "2022-02-17T16:36:01Z")
Hello! I use Elasticsearch 7.15.1 with filebeat 7.15.1 and have some questions: First: i use this config on filebeat and work fine: setup.template: enabled: true settings: index.number\_of\_shards: 5 index.n… --- ## ["Module elasticsearch doesn't exist!" Error in FileBeat](https://discuss.elastic.co/t/module-elasticsearch-doesnt-exist-error-in-filebeat/297518)
**Author:** [@Molly\_Fraser](https://discuss.elastic.co/u/Molly_Fraser)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 4:27pm UTC](https://discuss.elastic.co/t/module-elasticsearch-doesnt-exist-error-in-filebeat/297518 "2022-02-17T16:27:30Z")
I keep getting the error "Module Elasticsearch doesn't exist!" when running "./filebeat module enable Elasticsearch" in both powershell and cmd using administrator privileges and normal. I am using Windows 10 with 7.15 … --- ## [Upgrading Elastic-Agent via Fleet in an Air-gapped environment failing](https://discuss.elastic.co/t/upgrading-elastic-agent-via-fleet-in-an-air-gapped-environment-failing/297413)
**Author:** [@dyltay](https://discuss.elastic.co/u/dyltay)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 4:12pm UTC](https://discuss.elastic.co/t/upgrading-elastic-agent-via-fleet-in-an-air-gapped-environment-failing/297413 "2022-02-17T16:12:39Z")
Hello, We have an air-gapped environment. Recently upgraded to 8.0.0. The Fleet GUI is rightly showing that the elastic-agents (Linux tar.gz installed) have an upgrade is available, but when trying to upgrade we get … --- ## [Can't enable read only mode](https://discuss.elastic.co/t/cant-enable-read-only-mode/297476)
**Author:** [@Libor\_Chaloupek](https://discuss.elastic.co/u/Libor_Chaloupek)\ **Replies:** 4\ **Last updated:** [February 17, 2022, 3:58pm UTC](https://discuss.elastic.co/t/cant-enable-read-only-mode/297476 "2022-02-17T15:58:45Z")
Hello there I got stuck after updating Enterprise Search from version 7.14 to 7.17. Based on app-server.log there needs to be migrations performed which is clear. The option 'skip\_read\_only\_check' is on FALSE as per def… --- ## [Phrase Suggester Score](https://discuss.elastic.co/t/phrase-suggester-score/297492)
**Author:** [@mukeshdantuluri15](https://discuss.elastic.co/u/mukeshdantuluri15)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 12:57pm UTC](https://discuss.elastic.co/t/phrase-suggester-score/297492 "2022-02-17T12:57:57Z")
Current Elastic API documentation shows only available options to get best matched suggestion as per below page, where as formulae to calculate score is not mentioned anywhere for understanding Need formulae used for s… --- ## [Which Java client to use for implementing search functionality](https://discuss.elastic.co/t/which-java-client-to-use-for-implementing-search-functionality/297461)
**Author:** [@roulupen](https://discuss.elastic.co/u/roulupen)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 9:17am UTC](https://discuss.elastic.co/t/which-java-client-to-use-for-implementing-search-functionality/297461 "2022-02-17T09:17:27Z")
Hi All, I want to query from my Elasticsearch instance and the queries will be dynamic based on the user selection. Which Java library is best fit for it and is there any example available for the initial setup of the l… --- ## [Elastisearch installation](https://discuss.elastic.co/t/elastisearch-installation/297341)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 18\ **Last updated:** [February 17, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elastisearch-installation/297341 "2022-02-17T15:43:10Z")
Hello Greetings of the day, I am trying to install Elasticsearch in linux server but its not installing & throwing error & logs are also not generating in var/log/Elasticsearch. Elasticsearch status: journalctl -x… --- ## [Keep differences from going negative](https://discuss.elastic.co/t/keep-differences-from-going-negative/297300)
**Author:** [@agiddens](https://discuss.elastic.co/u/agiddens)\ **Replies:** 3\ **Last updated:** [February 17, 2022, 3:14pm UTC](https://discuss.elastic.co/t/keep-differences-from-going-negative/297300 "2022-02-17T15:14:05Z")
I have a couple of questions and I think they are related but I could be wrong. Currently using Kibana 7.15.0 My data comes in every 5 minutes and looks like this. \[{Server:"id", requests\_since\_server\_started: , times… --- ## [Resolve mapping conflicts (kinda) automatically?](https://discuss.elastic.co/t/resolve-mapping-conflicts-kinda-automatically/297412)
**Author:** [@TheEvilDonut](https://discuss.elastic.co/u/TheEvilDonut)\ **Replies:** 2\ **Last updated:** [February 17, 2022, 2:25pm UTC](https://discuss.elastic.co/t/resolve-mapping-conflicts-kinda-automatically/297412 "2022-02-17T14:25:59Z")
So here's our situation. Most of our applications use an object field named (fictional) "foo" so :slight\_smile: foo.field\_a foo.field\_b foo.field\_c etc... But from time to time a "rogue log" will come in and will c… --- ## [Watch with action webhook status struck in "Firing" state](https://discuss.elastic.co/t/watch-with-action-webhook-status-struck-in-firing-state/297485)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 3\ **Last updated:** [February 17, 2022, 2:21pm UTC](https://discuss.elastic.co/t/watch-with-action-webhook-status-struck-in-firing-state/297485 "2022-02-17T14:21:41Z")
I Created a watcher with webhook action in it. When the input section matches it should execute the action which is a webook(Sending logs to ScienceLogic). The action state is showing Firing but we didn't see any logs at… --- ## [Cluster.routing.allocation.enable vs planned node outages, eg. rolling node restarts](https://discuss.elastic.co/t/cluster-routing-allocation-enable-vs-planned-node-outages-eg-rolling-node-restarts/297497)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 2:14pm UTC](https://discuss.elastic.co/t/cluster-routing-allocation-enable-vs-planned-node-outages-eg-rolling-node-restarts/297497 "2022-02-17T14:14:39Z")
Trying to recapture BCP for doing a planned node outage eg. by rolling restarts. Wouldn't it be good practice to set cluster.routing.allocation.enable transient to 'none' before taking a node offline and the then set it… --- ## [Scheduler Java plugin Logstash](https://discuss.elastic.co/t/scheduler-java-plugin-logstash/297482)
**Author:** [@aalagia](https://discuss.elastic.co/u/aalagia)\ **Replies:** 6\ **Last updated:** [February 17, 2022, 2:07pm UTC](https://discuss.elastic.co/t/scheduler-java-plugin-logstash/297482 "2022-02-17T14:07:42Z")
Hi, I need to use scheduler in custom plugin written in Java for Logstash. How is possible to implement this thing? Thank you Antonio --- ## [Error indexing data in Elasticsearch](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416)
**Author:** [@Matheus26](https://discuss.elastic.co/u/Matheus26)\ **Replies:** 2\ **Last updated:** [February 17, 2022, 1:55pm UTC](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416 "2022-02-17T13:55:50Z")
Hi, I'm trying to index datas in Elasticsearch, but I'm getting an error. I'm using the latest Nest release (7.17.0) in C# The error is "Failed to serialize anonymous type". This error message is from an exception af… --- ## [Migration from old ELK to Elastic Cloud](https://discuss.elastic.co/t/migration-from-old-elk-to-elastic-cloud/297369)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 3\ **Last updated:** [February 17, 2022, 1:38pm UTC](https://discuss.elastic.co/t/migration-from-old-elk-to-elastic-cloud/297369 "2022-02-17T13:38:55Z")
Hello, We are in the process of migrating an older version of ELK to Elastic Cloud. We are already evaluating pricing, subscription model, etc. and I am getting ahead of the process with some question I have. Right now… --- ## [Aggregation across multiple indexes/indices - significant terms](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787)
**Author:** [@anthonyfps](https://discuss.elastic.co/u/anthonyfps)\ **Replies:** 4\ **Last updated:** [February 17, 2022, 1:25pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787 "2022-02-17T13:25:30Z")
Hi, we have indexes that are split by date for manageability but contain the same mappings. I'm currently trying to use the significant terms aggregation to identify new terms, by specifying the foreground as e.g. the l… --- ## [Unable to access training data on app.strigo](https://discuss.elastic.co/t/unable-to-access-training-data-on-app-strigo/297491)
**Author:** [@gapa](https://discuss.elastic.co/u/gapa)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 12:57pm UTC](https://discuss.elastic.co/t/unable-to-access-training-data-on-app-strigo/297491 "2022-02-17T12:57:51Z")
Hello, I do not have access to the training dataset on my app.strigo environment. Please see attached from the lab guide and from my app.strigo environment Any ideas of what could be the problem? [Previous page](https://discuss.elastic.co/latest.md?page=1254) [Next page](https://discuss.elastic.co/latest.md?page=1256)