# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1262

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1263

---

## [Unable to initialize Fleet in v8.0.0](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968)

<div class="topic-metadata">

**Author:** [@vvlad](https://discuss.elastic.co/u/vvlad)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-in-v8-0-0/296968 "2022-02-14T15:59:42Z")

</div>

I've just update a cluster from 7.17 to 8.0.0 and the Fleet app in Kibana doesn't work anymore. I'm running OnPrem on Linux/aarch64. Is this a known issue? Logs below: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-02…

---

## [FieldNotFoundError on update to Elasticsearch 7.16.2](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173)

<div class="topic-metadata">

**Author:** [@JonDoe1234](https://discuss.elastic.co/u/JonDoe1234)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173 "2022-02-14T15:32:58Z")

</div>

Hi, since the update to Elasticsearch 7.16. I'm getting a java.lang.NoSuchFieldError: INDEX\_CONTENT\_TYPE when running a Unit Test that executes a save/saveAll() statement with Test containers. On 7.15 everything works …

---

## [\[Metricbeat\] Mysql user permission](https://discuss.elastic.co/t/metricbeat-mysql-user-permission/297018)

<div class="topic-metadata">

**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 3:22pm UTC](https://discuss.elastic.co/t/metricbeat-mysql-user-permission/297018 "2022-02-14T15:22:32Z")

</div>

Hi, I want to know which are the user privilege nedded for each metricset of mysql module: Performance Query Status The documentation talk about only the user root. Regards,

---

## [Custom Aggregations](https://discuss.elastic.co/t/custom-aggregations/15740)

<div class="topic-metadata">

**Author:** [@Justin\_Uang](https://discuss.elastic.co/u/Justin_Uang)\
**Replies:** 15\
**Last updated:** [February 14, 2022, 2:40pm UTC](https://discuss.elastic.co/t/custom-aggregations/15740 "2022-02-14T14:40:23Z")

</div>

Is there any way we can define our own aggregation functions beyond the provided metric and bucket aggregations? Thanks! Justin -- You received this message because you are subscribed to the Google Groups "e…

---

## [Getting continuous logstash tcp input error](https://discuss.elastic.co/t/getting-continuous-logstash-tcp-input-error/297150)

<div class="topic-metadata">

**Author:** [@ksarpong](https://discuss.elastic.co/u/ksarpong)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 2:14pm UTC](https://discuss.elastic.co/t/getting-continuous-logstash-tcp-input-error/297150 "2022-02-14T14:14:39Z")

</div>

"level":"ERROR","loggerName":"logstash.inputs.tcp","timeMillis":1644844639537,"thread":"nioEventLoopGroup-54-26","logEvent":{"message":"null: closing due:"}} {"level":"WARN","loggerName":"deprecation.logstash.codecs.plai…

---

## [Elasticsearch connection close issue](https://discuss.elastic.co/t/elasticsearch-connection-close-issue/295581)

<div class="topic-metadata">

**Author:** [@Ram\_N](https://discuss.elastic.co/u/Ram_N)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-close-issue/295581 "2022-02-14T14:07:36Z")

</div>

Hi Im using 7.10.2 and I have closed Elasticsearch Client while stopping application as below. @PreDestroy public void onShutdown(){ getEsClient().shutdownES(); } But Still Im getting below…

---

## [How to keep stable to ELK stack when downgrading the Centos VM from 8 to 7](https://discuss.elastic.co/t/how-to-keep-stable-to-elk-stack-when-downgrading-the-centos-vm-from-8-to-7/297140)

<div class="topic-metadata">

**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 2:00pm UTC](https://discuss.elastic.co/t/how-to-keep-stable-to-elk-stack-when-downgrading-the-centos-vm-from-8-to-7/297140 "2022-02-14T14:00:39Z")

</div>

Hello Dear Community, We will downgrade the distributions of Centos VMs running the ELK stack from 8 to 7 So what should I do before/after Cento's downgrade to keep stable the ELK? I need your recommendation. Should I b…

---

## [How to update more fields with script?](https://discuss.elastic.co/t/how-to-update-more-fields-with-script/297100)

<div class="topic-metadata">

**Author:** [@TottyAndBaty](https://discuss.elastic.co/u/TottyAndBaty)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 1:17pm UTC](https://discuss.elastic.co/t/how-to-update-more-fields-with-script/297100 "2022-02-14T13:17:28Z")

</div>

Sorry~ my english is not good.... here is my mapping . { "orders": { "aliases": {}, "mappings": { "properties": { "created\_at": { "type": "date" }, "expect\_pick\_start\_time": { "type": "lo…

---

## [How can i decrease the size of Pie chart](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 1:15pm UTC](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796 "2022-02-14T13:15:07Z")

</div>

Recently i have upgraded my Kibana version to kibana:7.16.2 and in this version have observed that Pie chart default visualization size has increased. Due to this in our case, visualization values are not showing compl…

---

## [Kibana not showing proper data](https://discuss.elastic.co/t/kibana-not-showing-proper-data/296807)

<div class="topic-metadata">

**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-not-showing-proper-data/296807 "2022-02-14T12:30:23Z")

</div>

HI experts, We are using Elasticsearch and Kibana 6.3.2. Earlier its working fine . But past one months kibana is not showing proper data which means some of our datas are missing . But that data's are available in Ela…

---

## [Extract time hour with runtime field](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122)

<div class="topic-metadata">

**Author:** [@ima](https://discuss.elastic.co/u/ima)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 10:48am UTC](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122 "2022-02-14T10:48:27Z")

</div>

Hello everyone, I wanna extract the time hour from the @timestamp field in winlogbeat using runtime field. is there any way to do that. thank you in advance for your help.

---

## [Logstash show errors for new client in log: "javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate"](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 10:40am UTC](https://discuss.elastic.co/t/logstash-show-errors-for-new-client-in-log-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/297118 "2022-02-14T10:40:31Z")

</div>

Dears, I need your support in case of configuration filebeat/logstash. filebeat 7.17.0 logstash 7.16.3 Previously, it was an ELK cluster in version 7.7.1 which I upgraded to version 7.16.3 Certificate preparation on…

---

## [Multimatch with CROSS\_FIELD query and decompounder](https://discuss.elastic.co/t/multimatch-with-cross-field-query-and-decompounder/296852)

<div class="topic-metadata">

**Author:** [@thaarbach](https://discuss.elastic.co/u/thaarbach)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 10:33am UTC](https://discuss.elastic.co/t/multimatch-with-cross-field-query-and-decompounder/296852 "2022-02-14T10:33:40Z")

</div>

The problem was also discussed by @singer and @hbruch and Here a example, that the search works not as expected: Create a index PUT example/ { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0…

---

## [\[MSSQL module\] - Transaction log stop after few hours](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323)

<div class="topic-metadata">

**Author:** [@Delta32000](https://discuss.elastic.co/u/Delta32000)\
**Replies:** 5\
**Last updated:** [February 14, 2022, 10:07am UTC](https://discuss.elastic.co/t/mssql-module-transaction-log-stop-after-few-hours/293323 "2022-02-14T10:07:21Z")

</div>

I was able to configure the mssql module on metricbeat. I use the ssl config for each Elasticsearch and Kibana. I was able to load the default dashboards in kibana. The thing is that I can see transaction log data for a …

---

## [How to handle rotating directory in input file for logstash](https://discuss.elastic.co/t/how-to-handle-rotating-directory-in-input-file-for-logstash/297104)

<div class="topic-metadata">

**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 9:59am UTC](https://discuss.elastic.co/t/how-to-handle-rotating-directory-in-input-file-for-logstash/297104 "2022-02-14T09:59:09Z")

</div>

Hi Team, I wants logstash to read logs from AWS S3 bucket but my log path directory is keep rotating on month basis and am not understand how to handle it. please suggest. input { s3 { "access\_key\_id" =\>…

---

## [Elastic Agent ECK 7.17.0 Work Around doesn't Work Correctly](https://discuss.elastic.co/t/elastic-agent-eck-7-17-0-work-around-doesnt-work-correctly/296335)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [February 14, 2022, 9:58am UTC](https://discuss.elastic.co/t/elastic-agent-eck-7-17-0-work-around-doesnt-work-correctly/296335 "2022-02-14T09:58:50Z")

</div>

Hi All, There is known issue with Elastic Agent managed by ECK where it doesn't work for 7.17.0. There is a provided workaround: https://github.com/elastic/cloud-on-k8s/issues/5323 (and https://github.com/elastic/cloud…

---

## [Elasticsearch mapper\_parsing\_exception for field appearing both in text and object form](https://discuss.elastic.co/t/elasticsearch-mapper-parsing-exception-for-field-appearing-both-in-text-and-object-form/296875)

<div class="topic-metadata">

**Author:** [@dory](https://discuss.elastic.co/u/dory)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-mapper-parsing-exception-for-field-appearing-both-in-text-and-object-form/296875 "2022-02-14T09:53:56Z")

</div>

Hello, I'm quite new to Elasticsearch and I'm trying since a few days to fix some indexing problems we have in our indices. The cause of this errors is that we have multiple applications logging data which finally ends …

---

## [Why use Elastic Search-UI instead of ReactiveSearch? What are the differences? Is there a comparison table somewhere?](https://discuss.elastic.co/t/why-use-elastic-search-ui-instead-of-reactivesearch-what-are-the-differences-is-there-a-comparison-table-somewhere/296514)

<div class="topic-metadata">

**Author:** [@tombburnell](https://discuss.elastic.co/u/tombburnell)\
**Replies:** 5\
**Last updated:** [February 14, 2022, 9:42am UTC](https://discuss.elastic.co/t/why-use-elastic-search-ui-instead-of-reactivesearch-what-are-the-differences-is-there-a-comparison-table-somewhere/296514 "2022-02-14T09:42:40Z")

</div>

Why use Elasticsearch-UI instead of ReactiveSearch? What are the differences? Is there a comparison table somewhere?

---

## [Limiting queries from elasticsearch service side](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557)

<div class="topic-metadata">

**Author:** [@LukoJy](https://discuss.elastic.co/u/LukoJy)\
**Replies:** 10\
**Last updated:** [February 14, 2022, 9:40am UTC](https://discuss.elastic.co/t/limiting-queries-from-elasticsearch-service-side/296557 "2022-02-14T09:40:24Z")

</div>

Hello, I would like to know if there is a way to limit incoming queries from the Elasticsearch service side, for example, restrict total hits, size, or searched shards to a specific value? In our environment, different…

---

## [Logstash with JDBC performance](https://discuss.elastic.co/t/logstash-with-jdbc-performance/296984)

<div class="topic-metadata">

**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\
**Replies:** 7\
**Last updated:** [February 14, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-with-jdbc-performance/296984 "2022-02-14T09:10:21Z")

</div>

Hello, I use Logstash with JDBC connector. I have 6 pipelines defined in my pipeline.yml. pipeline1 have 14 SQL pipeline2 have 10 SQL pipeline3 have 2 SQL pipeline4 have 8 SQL pipeline5 have 1 SQL pipeline6 have…

---

## [Aggregation is not limited to documents in the query in multi-field results](https://discuss.elastic.co/t/aggregation-is-not-limited-to-documents-in-the-query-in-multi-field-results/296322)

<div class="topic-metadata">

**Author:** [@lennardberger](https://discuss.elastic.co/u/lennardberger)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 8:59am UTC](https://discuss.elastic.co/t/aggregation-is-not-limited-to-documents-in-the-query-in-multi-field-results/296322 "2022-02-14T08:59:06Z")

</div>

Hi everyone, running Elasticsearch 7.10.1. We have the following index: "potential\_participants": { "properties": { "surface"…

---

## [Is there any way to make Winlogbeat not start automatically?](https://discuss.elastic.co/t/is-there-any-way-to-make-winlogbeat-not-start-automatically/297095)

<div class="topic-metadata">

**Author:** [@Will\_Wu](https://discuss.elastic.co/u/Will_Wu)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 8:56am UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-winlogbeat-not-start-automatically/297095 "2022-02-14T08:56:15Z")

</div>

hey guys! First time using winlogbeat。 is there any method to make Winlogbeat do not start automatically ?

---

## [Winlogbeat setup without direct access to elasticsearch/kibana](https://discuss.elastic.co/t/winlogbeat-setup-without-direct-access-to-elasticsearch-kibana/296949)

<div class="topic-metadata">

**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 7:42am UTC](https://discuss.elastic.co/t/winlogbeat-setup-without-direct-access-to-elasticsearch-kibana/296949 "2022-02-14T07:42:27Z")

</div>

Hello, I have windows servers that have access to logstash, but don't have direct access to Elasticsearch cluster nor kibana. How can I properly setup winlobeat to import dashboards/pipelines/indices/... ? Other beats …

---

## [\[Packetbeat\] How to distinguish netflow from different interface device in log?](https://discuss.elastic.co/t/packetbeat-how-to-distinguish-netflow-from-different-interface-device-in-log/297092)

<div class="topic-metadata">

**Author:** [@492917328](https://discuss.elastic.co/u/492917328)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 4:00am UTC](https://discuss.elastic.co/t/packetbeat-how-to-distinguish-netflow-from-different-interface-device-in-log/297092 "2022-02-14T04:00:32Z")

</div>

Packetbeat supports capturing all messages sent or received by the server on which Packetbeat is installed： packetbeat.interfaces.device: any But when I set the output to Elasticsearch, I found that the field interface…

---

## [Enterprise search error](https://discuss.elastic.co/t/enterprise-search-error/296592)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [February 14, 2022, 6:05am UTC](https://discuss.elastic.co/t/enterprise-search-error/296592 "2022-02-14T06:05:17Z")

</div>

Hi all, I had set up enterprise search in my system some months ago. Had used tar.gz file for setup. It was working... But now when i try to run enterprise-search, it throws error & exits: Elastic APM agent is disa…

---

## [Question about the statistics of Transaction Latency](https://discuss.elastic.co/t/question-about-the-statistics-of-transaction-latency/296941)

<div class="topic-metadata">

**Author:** [@wo7387196](https://discuss.elastic.co/u/wo7387196)\
**Replies:** 3\
**Last updated:** [February 14, 2022, 5:58am UTC](https://discuss.elastic.co/t/question-about-the-statistics-of-transaction-latency/296941 "2022-02-14T05:58:49Z")

</div>

why the Latency is the 50+ us , but not the third span end time 164us, I'm more concerned about the longest Latency 。

---

## [Fuzzy suggestion in App Search](https://discuss.elastic.co/t/fuzzy-suggestion-in-app-search/297045)

<div class="topic-metadata">

**Author:** [@kabilsharma](https://discuss.elastic.co/u/kabilsharma)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 3:49am UTC](https://discuss.elastic.co/t/fuzzy-suggestion-in-app-search/297045 "2022-02-14T03:49:43Z")

</div>

Feature Request , It would be great feature enhancement if we could give fuzzzy suggestions as you type. Currently user types Delih we are getting results Delhi. But what if we get Delhi in search suggestion would be …

---

## [Split array with different nested elemetnts](https://discuss.elastic.co/t/split-array-with-different-nested-elemetnts/297063)

<div class="topic-metadata">

**Author:** [@Gil\_Brudner](https://discuss.elastic.co/u/Gil_Brudner)\
**Replies:** 6\
**Last updated:** [February 14, 2022, 3:23am UTC](https://discuss.elastic.co/t/split-array-with-different-nested-elemetnts/297063 "2022-02-14T03:23:12Z")

</div>

Hi, I have a data stream coming in as array in the following format: \[ { "dataType": 9, "payload": "\[{\\"isHeadingHome\\":0,\\"isTesing\\":0}\]", "data": "9" }, { "dataType": 8, "payload": "\[{\\"FRO…

---

## [How to find the data that causes the mapper\_parsing\_exception](https://discuss.elastic.co/t/how-to-find-the-data-that-causes-the-mapper-parsing-exception/297096)

<div class="topic-metadata">

**Author:** [@AlanSBN](https://discuss.elastic.co/u/AlanSBN)\
**Replies:** 0\
**Last updated:** [February 14, 2022, 3:20am UTC](https://discuss.elastic.co/t/how-to-find-the-data-that-causes-the-mapper-parsing-exception/297096 "2022-02-14T03:20:40Z")

</div>

I am using the Node Elasticsearch client from inside Node Express, and I constructed a query that generates the following error: (node:85104) ResponseError: mapper\_parsing\_exception: \[mapper\_parsing\_exception\] Reason: …

---

## [How to recreate APM indexes in elastic?](https://discuss.elastic.co/t/how-to-recreate-apm-indexes-in-elastic/296961)

<div class="topic-metadata">

**Author:** [@GHostlyFOX](https://discuss.elastic.co/u/GHostlyFOX)\
**Replies:** 1\
**Last updated:** [February 14, 2022, 2:12am UTC](https://discuss.elastic.co/t/how-to-recreate-apm-indexes-in-elastic/296961 "2022-02-14T02:12:26Z")

</div>

How to recreate APM indexes in elastic?

[Previous page](https://discuss.elastic.co/latest.md?page=1261)

[Next page](https://discuss.elastic.co/latest.md?page=1263)
