# Latest **URL:** https://discuss.elastic.co/latest.md?page=1258 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1259 --- ## [Metricbeat runtime error: slice bounds out of range](https://discuss.elastic.co/t/metricbeat-runtime-error-slice-bounds-out-of-range/297113)
**Author:** [@tperrot](https://discuss.elastic.co/u/tperrot)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 2:45pm UTC](https://discuss.elastic.co/t/metricbeat-runtime-error-slice-bounds-out-of-range/297113 "2022-02-16T14:45:45Z")
Hello, I’m currently integrating metricbeat 7.10 on a Linux distribution using Golang 1.14. But a “runtime error: slice bounds out of range” is raised, only on ARMv7 targets, see below. In addition, I integrated fileb… --- ## [Where can I find the Lab Guide to implement the labs](https://discuss.elastic.co/t/where-can-i-find-the-lab-guide-to-implement-the-labs/297372)
**Author:** [@Kareem\_Amin](https://discuss.elastic.co/u/Kareem_Amin)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 2:39pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-lab-guide-to-implement-the-labs/297372 "2022-02-16T14:39:13Z")
I am attending some courses on Elastic Learn. I can't find the lab instructions for two courses: Elastic Observability Engineer (On-Demand) Data Analysis with Kibana (On-Demand) In the course, the lab's URL takes me t… --- ## [Error loading integration details on Fleet Integrations Page](https://discuss.elastic.co/t/error-loading-integration-details-on-fleet-integrations-page/297313)
**Author:** [@alfkonee](https://discuss.elastic.co/u/alfkonee)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 2:09pm UTC](https://discuss.elastic.co/t/error-loading-integration-details-on-fleet-integrations-page/297313 "2022-02-16T14:09:57Z")
Hello there Please on the integrations Page in the ECK k8s deployment of Kibana I'm getting this Error Error connecting to package registry: request to https://epr.elastic.co/search?package=osquery\_manager&experimental… --- ## [Logstash ingest and export to elasticsearch files twice](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 15\ **Last updated:** [February 16, 2022, 2:06pm UTC](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247 "2022-02-16T14:06:26Z")
Hello! I have a logstash config that gather lines from CSVs and then send them to Elasticsearch. However, for some unknown reason, lines are duplicated in Elasticsearch, taking twice the storage space, and making statis… --- ## [Double to long conversion](https://discuss.elastic.co/t/double-to-long-conversion/297179)
**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\ **Replies:** 7\ **Last updated:** [February 16, 2022, 1:38pm UTC](https://discuss.elastic.co/t/double-to-long-conversion/297179 "2022-02-16T13:38:51Z")
Hi, How to convert (default) double type value returned by aggregation( Sum). I am receiving this exception while trying to explicitly convert to long type. Appreciate any advice. thank you. ==========================… --- ## [Question About Null Conditional](https://discuss.elastic.co/t/question-about-null-conditional/297187)
**Author:** [@msr1716](https://discuss.elastic.co/u/msr1716)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 1:31pm UTC](https://discuss.elastic.co/t/question-about-null-conditional/297187 "2022-02-16T13:31:23Z")
I am using an Elasticsearch ingest pipeline in a Filebeat module, and I see the statement of: if: 'ctx.json?.userIdentity?.userName == null' When json.userIdentity.userName is equal to null, what would the key/value pai… --- ## [Obtain UTC Offset with location](https://discuss.elastic.co/t/obtain-utc-offset-with-location/297359)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 1:25pm UTC](https://discuss.elastic.co/t/obtain-utc-offset-with-location/297359 "2022-02-16T13:25:44Z")
Hello everyone. I would like to know if it was possible to obtain the time difference (compared to utc time) if we have a location. I have for example a residencyTimezone: America/Los\_Angeles I would like as a result:… --- ## [ECK with elastic helm-charts](https://discuss.elastic.co/t/eck-with-elastic-helm-charts/297316)
**Author:** [@Ajay\_56611](https://discuss.elastic.co/u/Ajay_56611)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 12:00pm UTC](https://discuss.elastic.co/t/eck-with-elastic-helm-charts/297316 "2022-02-16T12:00:43Z")
Hi @pebrc and team, is there any helm charts available to deploy Elasticsearch, kibana and APM server in a cluster where ECK operator was deployed with the helm chart? Please advise. Many thanks in advance. --- ## [Passing variables form changes to operations](https://discuss.elastic.co/t/passing-variables-form-changes-to-operations/297353)
**Author:** [@marek\_duciuc](https://discuss.elastic.co/u/marek_duciuc)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 10:32am UTC](https://discuss.elastic.co/t/passing-variables-form-changes-to-operations/297353 "2022-02-16T10:32:08Z")
My operation file looks like: { "name": "match-all-query\_id", "operation-type": "search", "body": { "query": { "match\_all": {} }, "\_source": false } }, { "name": "match-all-quer… --- ## [Filebeat doesn't load logs into ElasticSearch (Windows)](https://discuss.elastic.co/t/filebeat-doesnt-load-logs-into-elasticsearch-windows/297319)
**Author:** [@Pixelixir](https://discuss.elastic.co/u/Pixelixir)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 10:28am UTC](https://discuss.elastic.co/t/filebeat-doesnt-load-logs-into-elasticsearch-windows/297319 "2022-02-16T10:28:03Z")
I've read all the setup instructions over and over again but I still don't know how to transfer logs into Elasticsearch (localhost) via Filebeat. Here is my Elasticsearch.yml and Filebeat inputs: --- ## [Aggregation based visualization metric percentage](https://discuss.elastic.co/t/aggregation-based-visualization-metric-percentage/297145)
**Author:** [@skyrudi](https://discuss.elastic.co/u/skyrudi)\ **Replies:** 6\ **Last updated:** [February 16, 2022, 10:27am UTC](https://discuss.elastic.co/t/aggregation-based-visualization-metric-percentage/297145 "2022-02-16T10:27:40Z")
Hi any idea why aggregation based visualization metric percentage is not multiplied by by 100 but divided by 100 ? --- ## ["mapper\_parsing\_exception" Geo Point](https://discuss.elastic.co/t/mapper-parsing-exception-geo-point/296160)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 10:08am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-geo-point/296160 "2022-02-16T10:08:50Z")
Hi, Can anyone tell why I'm getting an error here? P.S: I'm Running latest ELK stack 7.17 This is what i'm pasting in dev's console PUT /\_template/storms { "order": 0, "template": "storms\*", "mappings": { "… --- ## [Change template and ILM policy from an existing Datastream](https://discuss.elastic.co/t/change-template-and-ilm-policy-from-an-existing-datastream/296608)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 8\ **Last updated:** [February 16, 2022, 9:56am UTC](https://discuss.elastic.co/t/change-template-and-ilm-policy-from-an-existing-datastream/296608 "2022-02-16T09:56:38Z")
Hey! In our Elasticsearch we use Datastreams which split our data to several streams like bellow. So all the Datastreams have the same template and ILM policy. Since one of them has increased a lot I want to apply diff… --- ## [Index Lifecycle Policy Not Deleting Indices](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-indices/294880)
**Author:** [@Brandon\_Dooley](https://discuss.elastic.co/u/Brandon_Dooley)\ **Replies:** 5\ **Last updated:** [February 16, 2022, 9:54am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-deleting-indices/294880 "2022-02-16T09:54:44Z")
I have an index lifecycle policy set up which I want to delete indices after 30 days. In order to achieve this the policy has two phases: Hot Phase (with 'Delete data after this phase' selected) Delete Phase (in… --- ## [Switching policies for an index](https://discuss.elastic.co/t/switching-policies-for-an-index/296200)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 5\ **Last updated:** [February 16, 2022, 9:51am UTC](https://discuss.elastic.co/t/switching-policies-for-an-index/296200 "2022-02-16T09:51:39Z")
Hey! Is there any documentation on switching ilm policies for 7.10.0. I could find only for other versions like here: Switching policies for an index | Elasticsearch Guide \[7.4\] | Elastic My question is: Can I switch … --- ## [Stop elasticsearch cluster safely](https://discuss.elastic.co/t/stop-elasticsearch-cluster-safely/297327)
**Author:** [@vikia.4293ok](https://discuss.elastic.co/u/vikia.4293ok)\ **Replies:** 6\ **Last updated:** [February 16, 2022, 8:42am UTC](https://discuss.elastic.co/t/stop-elasticsearch-cluster-safely/297327 "2022-02-16T08:42:34Z")
Hello, there. If anyone has faced a similar problem, I would really appreciate your advice. We stop/start Elasticsearch cluster in develop envrionment everyday to reduce costs. But, sometimes, we find that some index\`… --- ## [Getting "master not discovered or elected yet, an election requires at least 2 nodes" after enabling SSL/HTTPS](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-after-enabling-ssl-https/296950)
**Author:** [@cgnusr01](https://discuss.elastic.co/u/cgnusr01)\ **Replies:** 10\ **Last updated:** [February 16, 2022, 8:11am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-after-enabling-ssl-https/296950 "2022-02-16T08:11:54Z")
I recently upgraded Elastic from version: 7.2 to version 7.16.1 with a rolling update and there were no problems. After some time and after following the instructions here: Set up basic security for the Elastic Stack | E… --- ## [I set it to niofs but the performance was too poor](https://discuss.elastic.co/t/i-set-it-to-niofs-but-the-performance-was-too-poor/297091)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 8:02am UTC](https://discuss.elastic.co/t/i-set-it-to-niofs-but-the-performance-was-too-poor/297091 "2022-02-16T08:02:05Z")
Performance tests were conducted with niofs and hybridfs, but in the case of niofs, 100 TPS hybridfs came out 680 TPS. Why is that? Do you have any documentation that goes deeper into niofs, mmapfs, and hybridfs? Help m… --- ## [How do you print a value of a variable in the source script?](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160)
**Author:** [@Marco\_Ramos](https://discuss.elastic.co/u/Marco_Ramos)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160 "2022-02-16T07:35:54Z")
how do you print a value of a variable in the source script? --- ## [ELK upgrade from 7.8.0 to 7.17.0](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333 "2022-02-16T07:31:19Z")
Hello all, I'm planning to upgrade ELK stack from 7.8.0 to 7.17.0, please suggest if I need to take care of any scenarios and risks that I may encounter during this upgrade. Thanks, Nandakishor --- ## [Change background color and text conditionally - OpenSearch Dashboard](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262)
**Author:** [@Raphael\_Carneiro](https://discuss.elastic.co/u/Raphael_Carneiro)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 7:28am UTC](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262 "2022-02-16T07:28:51Z")
Hi, I want to build a very simple visualization based on Count aggregation to be added to a dashboard. This visualization should look just like this: This text and background should change between OK/NOK based on a c… --- ## [Elastic search pagination to log server](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922 "2022-02-16T07:12:37Z")
Hello friends. I have a question today, so I'm writing it down. I'm going to write it down in detail today. I ask for your understanding of my poor English skills. I have a question when building a log server using E… --- ## [Kibana Hostname/IP does not match certificate's](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256)
**Author:** [@onjangkim](https://discuss.elastic.co/u/onjangkim)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 6:23am UTC](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256 "2022-02-16T06:23:51Z")
Hi please help me What is the cause of this error in kibana? scmail: error sending email: Hostname/IP does not match certificate's altnames: IP: 192.168.18.220 is not in the cert's list: "} --- ## [My JDBC SQL statement have $ sign how do i supply it in JDBC input plugin?](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-sign-how-do-i-supply-it-in-jdbc-input-plugin/297326)
**Author:** [@cans](https://discuss.elastic.co/u/cans)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 6:12am UTC](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-sign-how-do-i-supply-it-in-jdbc-input-plugin/297326 "2022-02-16T06:12:40Z")
Hi, My JDBC input conf statement involves selecting a view from an oracle database. This view involves a $ sign. therefore I get an SQL command not properly ended error when I run the logstash script. how do I escape th… --- ## [Unable to see APM agent data on Kibana UI](https://discuss.elastic.co/t/unable-to-see-apm-agent-data-on-kibana-ui/297236)
**Author:** [@Neha\_goswami](https://discuss.elastic.co/u/Neha_goswami)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 5:22am UTC](https://discuss.elastic.co/t/unable-to-see-apm-agent-data-on-kibana-ui/297236 "2022-02-16T05:22:25Z")
ES version : 7.16.2 APM Server version: 7.16.2 Java Agent Version : 1.28.4 (elastic-apm-agent-1.28.4.jar) We are trying to push data from APM Agent, The APM server shows data is getting published on Elasticsearch : {… --- ## ["Wild swings" in event rate when number of workers increase](https://discuss.elastic.co/t/wild-swings-in-event-rate-when-number-of-workers-increase/297320)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 4:38am UTC](https://discuss.elastic.co/t/wild-swings-in-event-rate-when-number-of-workers-increase/297320 "2022-02-16T04:38:38Z")
Hi, I'm trying to increase the event rate for my filebeat that is writing Netflow data to Elasticsearch, to keep up with the incoming Netflow traffic. I have already increased max\_bulk\_size to 1000 in filebeat.yml, whic… --- ## [How to compare the log values and drop the deduplicated log in Logstash](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:16am UTC](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239 "2022-02-16T04:16:37Z")
Feb 15, 2022 @ 16:16:01.743 columns.url:https://mail.google.com/mail/u/0/#inbox name:chrome\_browser\_history @timestamp:Feb 15, 2022 @ 16:16:01.743 @version:1 action:added calendarTime:Tue Feb 15 08:15:58 2022 UTC columns… --- ## [CCR connection issue](https://discuss.elastic.co/t/ccr-connection-issue/297312)
**Author:** [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 1:48am UTC](https://discuss.elastic.co/t/ccr-connection-issue/297312 "2022-02-16T01:48:18Z")
Hi, I am trying to setup CCR in our test. While setting up the remote cluster getting some issue. Using platinum license on both cluster. Below status is showing for remote cluster. Can anyone advise me on this whic… --- ## [Re-indexing into schema with new multifields](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 1:32am UTC](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203 "2022-02-16T01:32:33Z")
Hi, Let's say, for the sake of simplicity, I have an index "a" with only this field in the schema: "foo": { "type": "keyword", } And then I create a new index "b" with a new multifield … --- ## [Elasticsearch Basic License Precompiled Beats Downlad for OpenBSD 7.0?](https://discuss.elastic.co/t/elasticsearch-basic-license-precompiled-beats-downlad-for-openbsd-7-0/297310)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 1:13am UTC](https://discuss.elastic.co/t/elasticsearch-basic-license-precompiled-beats-downlad-for-openbsd-7-0/297310 "2022-02-16T01:13:15Z")
Hello, I have tried (and failed at the make stage) to compile the OSS version of beats on OpenBSD 7.0. I have since discovered that the OSS version does not have the capabilities that I need. What I'm looking for is a pr… [Previous page](https://discuss.elastic.co/latest.md?page=1257) [Next page](https://discuss.elastic.co/latest.md?page=1259)