# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1261

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1262

---

## [Embed anonymous not working](https://discuss.elastic.co/t/embed-anonymous-not-working/297117)

<div class="topic-metadata">

**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\
**Replies:** 5\
**Last updated:** [February 15, 2022, 5:23am UTC](https://discuss.elastic.co/t/embed-anonymous-not-working/297117 "2022-02-15T05:23:22Z")

</div>

hi, I'm having trouble embedding anonymously into another website, when I input the kibana.yml config and my kibana can't be accessed with an error #xpack.security.authc.providers: basic.basic1: order: 0 anonymous.ano…

---

## [Geo IP Location Mapping issue in Logstash Filter](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 1\
**Last updated:** [February 15, 2022, 5:22am UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168 "2022-02-15T05:22:00Z")

</div>

I am using geoIP logstash filter for getting the geo location details using IPs in logstash. For manually updating the maxmind geolite2 databse, we have downloaded the database files(GeoLite2-City.mmdb and GeoLite2-ASN.…

---

## [Fleet: Share integration configuration](https://discuss.elastic.co/t/fleet-share-integration-configuration/296597)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 5:08am UTC](https://discuss.elastic.co/t/fleet-share-integration-configuration/296597 "2022-02-15T05:08:52Z")

</div>

Hi all, We just started playing around with Fleet and we stumbled over the following topic: According to the documentation, each agent can only be enrolled in a single policy. The integrations are configured on that po…

---

## [Choosing Elastic APM](https://discuss.elastic.co/t/choosing-elastic-apm/297208)

<div class="topic-metadata">

**Author:** [@Shoeb\_Chowdhury](https://discuss.elastic.co/u/Shoeb_Chowdhury)\
**Replies:** 0\
**Last updated:** [February 15, 2022, 4:22am UTC](https://discuss.elastic.co/t/choosing-elastic-apm/297208 "2022-02-15T04:22:02Z")

</div>

Which top 3 benefits do you want to mention for choosing Elastic AMP over its competitors? Can I optimize licensing costs using the transaction sampling rate feature? What are the major drawbacks of using this feature? …

---

## [Elasticsearch upgrade with indexing](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [February 15, 2022, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149 "2022-02-15T00:26:36Z")

</div>

Im using Elasticsearch 7.4.2 with three cluserted nodes. Im upgrading node 1 to 7.10.2 and then I want to update some KIbana Objects inside Elasticsearch. At that time, other nodes will be in 7.4.2 and still running. Can…

---

## [Embed anonymous not working](https://discuss.elastic.co/t/embed-anonymous-not-working/297201)

<div class="topic-metadata">

**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\
**Replies:** 1\
**Last updated:** [February 15, 2022, 12:20am UTC](https://discuss.elastic.co/t/embed-anonymous-not-working/297201 "2022-02-15T00:20:16Z")

</div>

hi, I'm having trouble embedding anonymously into another website, when I input the kibana.yml config and my kibana can't be accessed with an error xpack.security.authc.providers: basic.basic1: order: 0 anonymous.an…

---

## [Kibana authentication with Nginx prompting password again and again](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [February 15, 2022, 12:14am UTC](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074 "2022-02-15T00:14:02Z")

</div>

Hi Team, I have a complete elastic-stack with x-pack security and its working fine. However my concern is I wanted to secure this with 2 FA or other basic authentication by putting it behind Nginx reverse proxy. Since t…

---

## [Kibana lens formula flexibility for histogram aggregation](https://discuss.elastic.co/t/kibana-lens-formula-flexibility-for-histogram-aggregation/297184)

<div class="topic-metadata">

**Author:** [@Samuel\_Wehrli](https://discuss.elastic.co/u/Samuel_Wehrli)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 11:05pm UTC](https://discuss.elastic.co/t/kibana-lens-formula-flexibility-for-histogram-aggregation/297184 "2022-02-14T23:05:03Z")

</div>

Hi, I use the kibana lens formula feature to calculate cumulative sums as the denominator in a division. This works with date histograms. Unfortunately, using pipeline aggregations (such as cumulative sum) seems not poss…

---

## [How to use filters in a query](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 10\
**Last updated:** [February 14, 2022, 11:01pm UTC](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990 "2022-02-14T23:01:38Z")

</div>

Hello. I am working with Elasticsearch 6.8.0 and am trying to follow the example on this page filter but cannot get the filter clause to produce the results I want. I am working with the sample dataset in the bank inde…

---

## [EQL rules do not work but see hits](https://discuss.elastic.co/t/eql-rules-do-not-work-but-see-hits/297136)

<div class="topic-metadata">

**Author:** [@Why](https://discuss.elastic.co/u/Why)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 10:45pm UTC](https://discuss.elastic.co/t/eql-rules-do-not-work-but-see-hits/297136 "2022-02-14T22:45:11Z")

</div>

Hello, I'm trying to get started with Elastic SIEM and I noticed a problem. To retrieve the logs, I use Auditbeat (for technical reasons, I can't use Elastic Agent). I have the impression that none of the rules writte…

---

## [Audit logs on ES 7.16.3](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 9:30pm UTC](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190 "2022-02-14T21:30:24Z")

</div>

Hello, Last time I upgraded ES to latest version 7.16.3, The problem which I have is define audit logs, I have below config: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_name: true …

---

## [Elastic Enterprise Search Sources](https://discuss.elastic.co/t/elastic-enterprise-search-sources/291373)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 6\
**Last updated:** [February 14, 2022, 9:09pm UTC](https://discuss.elastic.co/t/elastic-enterprise-search-sources/291373 "2022-02-14T21:09:49Z")

</div>

This may be out of scope but would be amazing to figure out. I've seen some odd ball integrations on GitHub that get started then abandoned so they are not contenders. Just like many places in a hybrid setup with some o…

---

## [Readiness probe failed waiting for cluster to become ready](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192)

<div class="topic-metadata">

**Author:** [@cloudnative](https://discuss.elastic.co/u/cloudnative)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 9:02pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192 "2022-02-14T21:02:20Z")

</div>

Hi, I am currently experiencing the above error after initially experiencing a crashloopbackup error due to a wrong container repo. We were trying to create an a new user account with "bin/Elasticsearch-user ". While thi…

---

## [App Search snippets / highligts for full text](https://discuss.elastic.co/t/app-search-snippets-highligts-for-full-text/297166)

<div class="topic-metadata">

**Author:** [@alho94](https://discuss.elastic.co/u/alho94)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 8:22pm UTC](https://discuss.elastic.co/t/app-search-snippets-highligts-for-full-text/297166 "2022-02-14T20:22:06Z")

</div>

I am using search-ui and app search to build a reactjs-based search front-end. If I want to preview the results, I can use the snippet to preview and highlight the results. However, this works only to a maximum length of…

---

## [Delay between Logstash and ES? ELK 7.16.1 \[ECK\]](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882)

<div class="topic-metadata">

**Author:** [@rudyfaile](https://discuss.elastic.co/u/rudyfaile)\
**Replies:** 15\
**Last updated:** [February 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882 "2022-02-14T19:59:30Z")

</div>

Howdy, Similar to and We're experiencing a 1-2 minute delay between logstash and ES and can't figure out why. We're relatively sure the problem is between logstash and ES. If I manually trigger an error it appear…

---

## [Is there a save to ssave configurations , boosts , curation in a Config](https://discuss.elastic.co/t/is-there-a-save-to-ssave-configurations-boosts-curation-in-a-config/297046)

<div class="topic-metadata">

**Author:** [@kabilsharma](https://discuss.elastic.co/u/kabilsharma)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 7:46pm UTC](https://discuss.elastic.co/t/is-there-a-save-to-ssave-configurations-boosts-curation-in-a-config/297046 "2022-02-14T19:46:07Z")

</div>

Hello, Is there any possible way we can save all the curations, boosts, anylitics and record in case we start another or bigger server setup so all our congigraion will be applied to new setup. Kindly mention if there …

---

## [Kibana TLS handshake timeout](https://discuss.elastic.co/t/kibana-tls-handshake-timeout/296691)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 7:45pm UTC](https://discuss.elastic.co/t/kibana-tls-handshake-timeout/296691 "2022-02-14T19:45:55Z")

</div>

{"type":"error","@timestamp":"2022-02-08T02:53:43+00:00","tags":\["connection","client","error"\],"pid":8,"level":"error","error":{"message":"TLS handshake timeout","name":"Error","stack":"Error: TLS handshake timeout\\n …

---

## [Master-Eligible node cluster resiliency for ElasticSearch 7.x](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125)

<div class="topic-metadata">

**Author:** [@crossdelena12](https://discuss.elastic.co/u/crossdelena12)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 7:22pm UTC](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125 "2022-02-14T19:22:51Z")

</div>

Hello, I am using Elasticsearch v7.17.0. Here is my configuration that I am testing the new version with, I have dedicated master node (3) and data node (1). This sets up my cluster and am in business. However, when I …

---

## [Finding message length](https://discuss.elastic.co/t/finding-message-length/296604)

<div class="topic-metadata">

**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 6:32pm UTC](https://discuss.elastic.co/t/finding-message-length/296604 "2022-02-14T18:32:16Z")

</div>

this giving runtime error. Please advice. GET logstash-2022.01.25/\_doc/\_search { "query": { "match\_all": {} }, "script\_fields": { "log\_size": { "script": { "lang": "painless", "source": "doc\['message.keyword'\].…

---

## [Pipeline stopped with "Index 83 out of bounds for length 16"](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 6:07pm UTC](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898 "2022-02-14T18:07:01Z")

</div>

Hi, We have a configuration of logstash with several pipelines, having a main pipeline that receives the information, identifies the type of information and sends to different pipelines for procesing before sending the …

---

## [Logstash - jdbc retry multiple ips](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107)

<div class="topic-metadata">

**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 6:03pm UTC](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107 "2022-02-14T18:03:12Z")

</div>

Hi i'm connecting to my database via scan name and my scan name resolve to 3 IPs but the issue is sometimes 1 or 2 IPs get unavailable my question how i can set the connection to retry all IPs as below jdbc\_connectio…

---

## [Prefix query with multiple terms in sequence](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175)

<div class="topic-metadata">

**Author:** [@FelipeGXavier](https://discuss.elastic.co/u/FelipeGXavier)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175 "2022-02-14T17:44:04Z")

</div>

I'm looking for a way to make a query with multiple terms with prefix that preserve the order they're showed. Using match\_phrase\_prefix only the last term is the prefix. I can combine prefix with multiple match\_phrase …

---

## [First deploy elastic stack over docker swarm](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 5:55pm UTC](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313 "2022-02-14T17:55:32Z")

</div>

Hi Probably some of you have already deployed an elastic stack via docker swarm. I in my case will be the first time doing it on bare metal. Please give me examples of configurations, what to pay attention to?

---

## [Adding multiple values to an array](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 19\
**Last updated:** [February 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494 "2022-02-14T17:31:27Z")

</div>

Hello, I have an array which contains a bunch of time stamps which get added every time the record is modified from the source PGSQL database. I'm looking to modify this array to contain both a string and a time stamp. …

---

## [Range aggregation Scripts](https://discuss.elastic.co/t/range-aggregation-scripts/297147)

<div class="topic-metadata">

**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 5:25pm UTC](https://discuss.elastic.co/t/range-aggregation-scripts/297147 "2022-02-14T17:25:31Z")

</div>

Hi All, Below is my problem statement. I want to calculate aging stage based on below requirement. If Stage='INT' then today() - 'INT1 Date' else If Stage='MCH' then today() - 'Applied Date (WEB/MCH)' else If Sta…

---

## [Map - Add a dynamic scale and a north arrow on a map visualisation](https://discuss.elastic.co/t/map-add-a-dynamic-scale-and-a-north-arrow-on-a-map-visualisation/259221)

<div class="topic-metadata">

**Author:** [@Lolo](https://discuss.elastic.co/u/Lolo)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 4:50pm UTC](https://discuss.elastic.co/t/map-add-a-dynamic-scale-and-a-north-arrow-on-a-map-visualisation/259221 "2022-02-14T16:50:32Z")

</div>

Hello everybody! Anyone knows, how can we add a dynamic scale and the north arrow on a map visualisation? I need to have the scale on the map to have an idea of the distance, to be able to measure it on a screen shot (…

---

## [Dump Indexes and Documents from one server to another](https://discuss.elastic.co/t/dump-indexes-and-documents-from-one-server-to-another/296873)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 4:43pm UTC](https://discuss.elastic.co/t/dump-indexes-and-documents-from-one-server-to-another/296873 "2022-02-14T16:43:23Z")

</div>

If I need to backup my Elasticsearch database, or migrate data from one server to another, is it possible to dump the data and import it to another server? Or if my current server (ES 6.8) and I migrate to a new one (ES…

---

## [How to disable the addition of flattened source data to fields in Elasticsearch Kibana 7.16.3](https://discuss.elastic.co/t/how-to-disable-the-addition-of-flattened-source-data-to-fields-in-elasticsearch-kibana-7-16-3/296367)

<div class="topic-metadata">

**Author:** [@aiyerganapathy](https://discuss.elastic.co/u/aiyerganapathy)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 4:33pm UTC](https://discuss.elastic.co/t/how-to-disable-the-addition-of-flattened-source-data-to-fields-in-elasticsearch-kibana-7-16-3/296367 "2022-02-14T16:33:25Z")

</div>

We are using Elasticsearch, Logstash and Kibana version 7.16.3. Previously we were using version 7.10.x, and we used to have a minimum set of data in fields . However, after upgrading to the latest version, it is flatten…

---

## [Logstash or Spark?](https://discuss.elastic.co/t/logstash-or-spark/296500)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/logstash-or-spark/296500 "2022-02-14T16:14:32Z")

</div>

Hello, I have a project where I have to send millions of entries from different MYSQL databases to Elasticsearch (in Elastic Cloud instance). I'll have to make transformations to these data before sending it in Elasti…

---

## [Elasticsearch/client.go:408 Cannot index event](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event/297167)

<div class="topic-metadata">

**Author:** [@qubusp](https://discuss.elastic.co/u/qubusp)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-client-go-408-cannot-index-event/297167 "2022-02-14T16:01:49Z")

</div>

2022-02-14T15:46:03.114Z WARN \[elasticsearch\] elasticsearch/client.go:408 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbaeb900, ext:63780449718, loc:(\*time.Location)(0x5864aa0)}, Met…

[Previous page](https://discuss.elastic.co/latest.md?page=1260)

[Next page](https://discuss.elastic.co/latest.md?page=1262)
