# Latest **URL:** https://discuss.elastic.co/latest.md?page=1266 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1267 --- ## [Pipeline aggregation throwing an error](https://discuss.elastic.co/t/pipeline-aggregation-throwing-an-error/296839)
**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 6:57am UTC](https://discuss.elastic.co/t/pipeline-aggregation-throwing-an-error/296839 "2022-02-11T06:57:50Z")
I am working with the kibana\_sample\_data\_ecommerce index. I will display two queries here: GET kibana\_sample\_data\_ecommerce/\_search?size=0 { "aggs": { "customer\_centric": { "terms": { "field": "custo… --- ## [Logstash in K8s: Deployment vs StatefulSet](https://discuss.elastic.co/t/logstash-in-k8s-deployment-vs-statefulset/296595)
**Author:** [@Nadiia\_Maltseva](https://discuss.elastic.co/u/Nadiia_Maltseva)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 6:43am UTC](https://discuss.elastic.co/t/logstash-in-k8s-deployment-vs-statefulset/296595 "2022-02-11T06:43:50Z")
Hi, community! I am running Logstash on an EC2 instance in AWS. And I want to migrate to Kubernetes (since all our applications are running there). Could you, please, advise me on what factors should be taken into acco… --- ## [Logstash cmd displaying wrong output](https://discuss.elastic.co/t/logstash-cmd-displaying-wrong-output/296938)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 6:40am UTC](https://discuss.elastic.co/t/logstash-cmd-displaying-wrong-output/296938 "2022-02-11T06:40:45Z")
Hi, I am new to ELK stack and I am trying to test out parsing sample syslog messages by following the steps mentioned on the official website -- https://www.elastic.co/guide/en/logstash/current/config-examples.html#\_pro… --- ## [Date filter year not parsing correctly](https://discuss.elastic.co/t/date-filter-year-not-parsing-correctly/296883)
**Author:** [@pkrishnan](https://discuss.elastic.co/u/pkrishnan)\ **Replies:** 3\ **Last updated:** [February 11, 2022, 6:26am UTC](https://discuss.elastic.co/t/date-filter-year-not-parsing-correctly/296883 "2022-02-11T06:26:32Z")
This is my sample log line 2021-06-28 10:25:29.537695 traceID=d283c222257e0e92ba97269a5f780d81 spanID=f46645e821cb4dab A4 LG 4 Logger.cpp:250 - Configuring log file: /home/rxm/log/latest/2021-06-28-102529-log-%3N.log Ar… --- ## [Kibana configuration to automatically add visualization and add it into the dashboard for a microservice](https://discuss.elastic.co/t/kibana-configuration-to-automatically-add-visualization-and-add-it-into-the-dashboard-for-a-microservice/296928)
**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\ **Replies:** 11\ **Last updated:** [February 11, 2022, 6:16am UTC](https://discuss.elastic.co/t/kibana-configuration-to-automatically-add-visualization-and-add-it-into-the-dashboard-for-a-microservice/296928 "2022-02-11T06:16:38Z")
Hi there, I'm using kibana version 7.17.0. I have created couple of microservices and set up them to send logs to kibana using logstash and Elasticsearch. Then I have created visualization for each microservice to vie… --- ## [How does apm-server set service.name?](https://discuss.elastic.co/t/how-does-apm-server-set-service-name/296556)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 5:52am UTC](https://discuss.elastic.co/t/how-does-apm-server-set-service-name/296556 "2022-02-11T05:52:38Z")
I have deployed apm-server on multiple public cloud kubernetes clusters, but when they send health metrics to elasticsearch, the service.name is all called apm-server , is there any way to distinguish it? I checked the a… --- ## [Elasticsearch Log deletion not happening as per defined days in log4j.pproperties file](https://discuss.elastic.co/t/elasticsearch-log-deletion-not-happening-as-per-defined-days-in-log4j-pproperties-file/296934)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 5:21am UTC](https://discuss.elastic.co/t/elasticsearch-log-deletion-not-happening-as-per-defined-days-in-log4j-pproperties-file/296934 "2022-02-11T05:21:29Z")
Dear Team, We are facing an issue where Elasticsearch logging with log4j2.properties not performing the log rotation on the basis of lfLastmodified age condition, we want to rotate the logs every after 7days but it is n… --- ## [Scripted Field in Data Table](https://discuss.elastic.co/t/scripted-field-in-data-table/296871)
**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 4:04am UTC](https://discuss.elastic.co/t/scripted-field-in-data-table/296871 "2022-02-11T04:04:48Z")
Hello, I'm working with data tables in kibana and would like to create an additional column from a script. The following script is working { "script" : "if (doc\['cpu.used.pct'\].value \> 100) { return 1 }" } But I w… --- ## [I am new to Elastic search and trying to fetch data for one of the attribute whose value(lengh \>15)](https://discuss.elastic.co/t/i-am-new-to-elastic-search-and-trying-to-fetch-data-for-one-of-the-attribute-whose-value-lengh-15/294984)
**Author:** [@anji.nersu](https://discuss.elastic.co/u/anji.nersu)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 3:21am UTC](https://discuss.elastic.co/t/i-am-new-to-elastic-search-and-trying-to-fetch-data-for-one-of-the-attribute-whose-value-lengh-15/294984 "2022-02-11T03:21:44Z")
GET catalog-us/\_search { "query": { "bool": { "must": \[ { "term": { "relation\_type": { "value": "product" } } }, { … --- ## [Filebeat can be collected normally after starting and will stop automatically soon](https://discuss.elastic.co/t/filebeat-can-be-collected-normally-after-starting-and-will-stop-automatically-soon/296925)
**Author:** [@y792872131](https://discuss.elastic.co/u/y792872131)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 3:05am UTC](https://discuss.elastic.co/t/filebeat-can-be-collected-normally-after-starting-and-will-stop-automatically-soon/296925 "2022-02-11T03:05:58Z")
An error is as follows: --- ## [Elastic Cloud - Out Of Memory restarts](https://discuss.elastic.co/t/elastic-cloud-out-of-memory-restarts/296912)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 10\ **Last updated:** [February 11, 2022, 1:57am UTC](https://discuss.elastic.co/t/elastic-cloud-out-of-memory-restarts/296912 "2022-02-11T01:57:16Z")
Hi, We are running a small deployment in the Elastic Cloud ingesting very low events per second, however every couple of days we receive an email advising that a node has been restarted as it is out of memory. Checking… --- ## [Invert Axis](https://discuss.elastic.co/t/invert-axis/296902)
**Author:** [@NJ.SE](https://discuss.elastic.co/u/NJ.SE)\ **Replies:** 8\ **Last updated:** [February 11, 2022, 1:32am UTC](https://discuss.elastic.co/t/invert-axis/296902 "2022-02-11T01:32:30Z")
Using for RSSI values whereas negative numbers are worse than positive. So I want -80 to be at the top, not the bottom. Any easy way to flip the values? --- ## [How to create a pie chart of same value with two different filters](https://discuss.elastic.co/t/how-to-create-a-pie-chart-of-same-value-with-two-different-filters/296127)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 17\ **Last updated:** [February 11, 2022, 1:20am UTC](https://discuss.elastic.co/t/how-to-create-a-pie-chart-of-same-value-with-two-different-filters/296127 "2022-02-11T01:20:38Z")
I would like to create a pie chart based on two different filters and put the two values in a pie chart to have two sections value to be percentage of the sum of the two values. Is this doable? --- ## [How to change Enterprise Search logs to eastern time (ET)](https://discuss.elastic.co/t/how-to-change-enterprise-search-logs-to-eastern-time-et/296892)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 12:39am UTC](https://discuss.elastic.co/t/how-to-change-enterprise-search-logs-to-eastern-time-et/296892 "2022-02-11T00:39:52Z")
The logs are written in GMT (UTC) time. How do I convert this to ET? Thanks. --- ## [Kibana login loop while use iframe](https://discuss.elastic.co/t/kibana-login-loop-while-use-iframe/296542)
**Author:** [@petertw6235](https://discuss.elastic.co/u/petertw6235)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 12:31am UTC](https://discuss.elastic.co/t/kibana-login-loop-while-use-iframe/296542 "2022-02-11T00:31:57Z")
Hi, I shared my Kibana dashboard with public link(anonymous) and user can visit my dashboard in our website used iframe. But the browser will try to login again and again without showing anything. I got the following … --- ## [The 2022 Elastic Community Conference starts very soon!](https://discuss.elastic.co/t/the-2022-elastic-community-conference-starts-very-soon/296917)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 11:55pm UTC](https://discuss.elastic.co/t/the-2022-elastic-community-conference-starts-very-soon/296917 "2022-02-10T23:55:22Z")
The 2022 Elastic Community Conference starts very soon! Check out the full schedule right here. You can also head directly to our YouTube channel to follow the specific language tracks using the links below. ElasticCC: … --- ## [Elastic indexed data but response has error](https://discuss.elastic.co/t/elastic-indexed-data-but-response-has-error/296859)
**Author:** [@tleduong](https://discuss.elastic.co/u/tleduong)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 11:46pm UTC](https://discuss.elastic.co/t/elastic-indexed-data-but-response-has-error/296859 "2022-02-10T23:46:39Z")
Data was indexed successfully but we got the response below from Elastic. Is there a reason why Elastic returned error but data is still indexed? Error: %{"errors" =\> true, "items" =\> \[%{"index" =\> %{"\_id" =\> "tracts-59… --- ## [3 Single Node Elastic search to 3 Node cluster](https://discuss.elastic.co/t/3-single-node-elastic-search-to-3-node-cluster/296866)
**Author:** [@shivam060897](https://discuss.elastic.co/u/shivam060897)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 11:32pm UTC](https://discuss.elastic.co/t/3-single-node-elastic-search-to-3-node-cluster/296866 "2022-02-10T23:32:04Z")
Hi, I have 3 single-node Elasticsearch nodes on 3 hosts all working file. As of now all my data is on first host (say host-1) and ES on host-2 and host-3 are not being used. Now my requirement is to have all 3 running … --- ## [Nodes out of memory with completion suggester / ngrams](https://discuss.elastic.co/t/nodes-out-of-memory-with-completion-suggester-ngrams/296907)
**Author:** [@ravib](https://discuss.elastic.co/u/ravib)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 10:01pm UTC](https://discuss.elastic.co/t/nodes-out-of-memory-with-completion-suggester-ngrams/296907 "2022-02-10T22:01:32Z")
Hello, I am still using Elasticsearch 5.6 version I have an index with a completion suggest field and also a text field with edge ngram size 3 to 10 \[i don't query both of them at the same time\]…. so I got few queries … --- ## [FsCrawler does not do anything, does not index pfd's](https://discuss.elastic.co/t/fscrawler-does-not-do-anything-does-not-index-pfds/296747)
**Author:** [@jank12](https://discuss.elastic.co/u/jank12)\ **Replies:** 3\ **Last updated:** [February 10, 2022, 11:21pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-do-anything-does-not-index-pfds/296747 "2022-02-10T23:21:16Z")
This n00b is thoroughly confused. I have severa quite large pdf files I want to be able to full text search. They comrpise of raw text and images contaning text. So I want to index the text in the pdf, OCR the images a… --- ## [Indexing 100GB of Dataa](https://discuss.elastic.co/t/indexing-100gb-of-dataa/296891)
**Author:** [@deepakray](https://discuss.elastic.co/u/deepakray)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 9:43pm UTC](https://discuss.elastic.co/t/indexing-100gb-of-dataa/296891 "2022-02-10T21:43:05Z")
Hello, We are trying to index having 83,286,866 documents. It takes around 3 days to index. This is the first time we are creating the indexes. Configuration: Elasticsearch 7.10 Windows Server 2016 Heap Size 16Gb … --- ## [Java regex matcher in painless seems not to be working](https://discuss.elastic.co/t/java-regex-matcher-in-painless-seems-not-to-be-working/296904)
**Author:** [@PascalThalmann](https://discuss.elastic.co/u/PascalThalmann)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 9:42pm UTC](https://discuss.elastic.co/t/java-regex-matcher-in-painless-seems-not-to-be-working/296904 "2022-02-10T21:42:51Z")
Hi i try to match a simple pattern from a string, like this: GET testindex/\_search { "query": { "match\_all": {} }, "script\_fields": { "free\_float": { "script": { "source": """ def m… --- ## [APM Notifications: Feasibility Question](https://discuss.elastic.co/t/apm-notifications-feasibility-question/296896)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 8:59pm UTC](https://discuss.elastic.co/t/apm-notifications-feasibility-question/296896 "2022-02-10T20:59:15Z")
Hello, I've setup an APM integration via a python APM agent. I would like to send an email every time there is an error in the application. Here's the catch: I would like the email body to contain the actual error mes… --- ## [Create multiple logstash configurations for different Filebeat instances](https://discuss.elastic.co/t/create-multiple-logstash-configurations-for-different-filebeat-instances/296781)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 9\ **Last updated:** [February 10, 2022, 7:51pm UTC](https://discuss.elastic.co/t/create-multiple-logstash-configurations-for-different-filebeat-instances/296781 "2022-02-10T19:51:49Z")
As of now, I am using Docker compose to set up an image of Logstash. Here is my use case: I have Filebeat installed on 5 machines, each with different log paths and log formats. Instead of having one logstash.conf file … --- ## [Syntax error shown in EQL queries for correlation](https://discuss.elastic.co/t/syntax-error-shown-in-eql-queries-for-correlation/296836)
**Author:** [@wsouza](https://discuss.elastic.co/u/wsouza)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 12:25pm UTC](https://discuss.elastic.co/t/syntax-error-shown-in-eql-queries-for-correlation/296836 "2022-02-10T12:25:26Z")
Hi folks! I'm running a query, through EQL, for event correlation, however, it's returning a syntax error. The strange thing is that the same query is made in another Elastic SIEM and it doesn't return an error. Has any… --- ## [Elastic agent complete container in azure](https://discuss.elastic.co/t/elastic-agent-complete-container-in-azure/296893)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 7:40pm UTC](https://discuss.elastic.co/t/elastic-agent-complete-container-in-azure/296893 "2022-02-10T19:40:51Z")
Has anyone else much experience running the elastic agent complete container in an azure container instance? I am looking to update he host file in the container. Any ideas? --- ## [Logging configuration issues in Kibana 7.16](https://discuss.elastic.co/t/logging-configuration-issues-in-kibana-7-16/295517)
**Author:** [@quality](https://discuss.elastic.co/u/quality)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 6:58pm UTC](https://discuss.elastic.co/t/logging-configuration-issues-in-kibana-7-16/295517 "2022-02-10T18:58:59Z")
Kibana 7.16 END GOAL: All Kibana logging options can be configured from kibana.yml All Kibana logs should be visible with journalctl. (they stream to journald) BACKGROUND: The below issues were discovered after … --- ## [Поиск по документам (pdf, docx и прочие)](https://discuss.elastic.co/t/pdf-docx/296885)
**Author:** [@romixart](https://discuss.elastic.co/u/romixart)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 6:06pm UTC](https://discuss.elastic.co/t/pdf-docx/296885 "2022-02-10T18:06:08Z")
Используем ES для полнотекстового поиска по структурированным данным (название, даты, атрибуты, вложенные сущности с названиями и т.д.). Сейчас нам необходимо к каждому документу проиндексировать N файлов, чтобы поиск мо… --- ## [How to automatically set the server date/time when adding data?](https://discuss.elastic.co/t/how-to-automatically-set-the-server-date-time-when-adding-data/296708)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 15\ **Last updated:** [February 10, 2022, 6:14pm UTC](https://discuss.elastic.co/t/how-to-automatically-set-the-server-date-time-when-adding-data/296708 "2022-02-10T18:14:13Z")
Hi there, In old ES versions, I was using the \_timestamp field but it's been removed and it's now recommended to set the date on the client side. However, I'm surprised to not find any easy way to continue to set it on … --- ## [Query using Runtime Field](https://discuss.elastic.co/t/query-using-runtime-field/296864)
**Author:** [@jkulcsar](https://discuss.elastic.co/u/jkulcsar)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 5:24pm UTC](https://discuss.elastic.co/t/query-using-runtime-field/296864 "2022-02-10T17:24:43Z")
Hello all I've added a runtime field to my logstash indexes to concatenate two fields on the fly (in this context: the Model and Serial Number of a product): PUT logstash-\*/\_mapping { "runtime": { "m\_s\_unique\_id"… [Previous page](https://discuss.elastic.co/latest.md?page=1265) [Next page](https://discuss.elastic.co/latest.md?page=1267)