# Latest **URL:** https://discuss.elastic.co/latest.md?page=1273 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1274 --- ## [Questions about migrating from Elasticsearch to Enterprise App Search](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352)
**Author:** [@SMB](https://discuss.elastic.co/u/SMB)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:03pm UTC](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352 "2022-02-07T21:03:56Z")
Hi there, currently my company is looking at migrating from a hosted ES installation (with custom PHP integration) to Enterprise App Search. Primarily for the UI (analytics, ease of tuning, non-developer exposure etc.) t… --- ## [Threat Intel Indicator Rule: Request timed out](https://discuss.elastic.co/t/threat-intel-indicator-rule-request-timed-out/296408)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 7:46pm UTC](https://discuss.elastic.co/t/threat-intel-indicator-rule-request-timed-out/296408 "2022-02-07T19:46:15Z")
Hello folks, I really like this Threat Intel feature in Elastic Security, but sadly I can't seem to make a single rule related to this work. They always fail: "Request timed out". I run ELK on a SSD with enough RAM for… --- ## [Elastic agent / fleet server fails to install /connect to elastic search - Error: certificate is required when certificate private key is provided](https://discuss.elastic.co/t/elastic-agent-fleet-server-fails-to-install-connect-to-elastic-search-error-certificate-is-required-when-certificate-private-key-is-provided/296516)
**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 7:15pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-server-fails-to-install-connect-to-elastic-search-error-certificate-is-required-when-certificate-private-key-is-provided/296516 "2022-02-07T19:15:24Z")
sudo ./elastic-agent install --url=https://szu.azhszzz.com:8220 --fleet-server-es=https://szu.azhszzz.com:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NDQxNDU0Njc3NDY6eDR4UTVSZ3lUbi1F… --- ## [Is there a way to use APM in ASP.NET Framework 4.6.1](https://discuss.elastic.co/t/is-there-a-way-to-use-apm-in-asp-net-framework-4-6-1/295055)
**Author:** [@Vitor\_Dias](https://discuss.elastic.co/u/Vitor_Dias)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 5:49pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-apm-in-asp-net-framework-4-6-1/295055 "2022-02-07T17:49:59Z")
we have a .net framework 4.6.1 application. Is there any way to install the APM package on it? --- ## [Un-Assigned Shards after the restart of the ES cluster on Kubernetes](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423)
**Author:** [@pulir](https://discuss.elastic.co/u/pulir)\ **Replies:** 8\ **Last updated:** [February 7, 2022, 5:08pm UTC](https://discuss.elastic.co/t/un-assigned-shards-after-the-restart-of-the-es-cluster-on-kubernetes/296423 "2022-02-07T17:08:04Z")
I am using Elasticsearch 7.10.2 deployed on k8s cluster. The master and data nodes are backed by PVs for persisting the data. I have created a Cluster of 3 master and 3 data nodes, with 2 client nodes dedicated. My probl… --- ## [I amm trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this?](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636)
**Author:** [@Gw\_Do](https://discuss.elastic.co/u/Gw_Do)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 5:37pm UTC](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636 "2022-02-07T17:37:54Z")
HI, I am trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this? Thank you, Gwen --- ## [Elasticsearch: Automatically setting index level settings for daily indexes](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-automatically-setting-index-level-settings-for-daily-indexes/296505 "2022-02-07T17:35:52Z")
I need to increase the, maximum value of documents retrieved by an Elasticsearch query maximum number of script\_fields that are allowed in a query After refering this, I used the update-index-settings API as below, fo… --- ## [Noob Question: What Is Placing Specific Data Into Fields Called](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 5:03pm UTC](https://discuss.elastic.co/t/noob-question-what-is-placing-specific-data-into-fields-called/296351 "2022-02-07T17:03:54Z")
Hello, What is placing specific data, such as an IP address, into a field, perhaps called src.ip called? I'm asking so that I can begin to learn by searching. Thank you! --- ## [\[Maps\] Apply global time to style metadata requests](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 4:58pm UTC](https://discuss.elastic.co/t/maps-apply-global-time-to-style-metadata-requests/296497 "2022-02-07T16:58:24Z")
What does flag "Apply global time to style metadata requests" means in Kibana Maps --- ## [Query String on version 6 and above](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:27pm UTC](https://discuss.elastic.co/t/query-string-on-version-6-and-above/296498 "2022-02-07T16:27:23Z")
Hi everybody, I'm currently working with ES 5.5 and using query\_string as my full-text search DSL. Our search contains multiple fields, with multiple boosts, and some of them are short string fields and other ones are … --- ## [Metricbeat zfs datasets](https://discuss.elastic.co/t/metricbeat-zfs-datasets/296495)
**Author:** [@Combo12](https://discuss.elastic.co/u/Combo12)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:17pm UTC](https://discuss.elastic.co/t/metricbeat-zfs-datasets/296495 "2022-02-07T16:17:05Z")
hi! As per https://github.com/elastic/beats/issues/25725 it doesn't seem to be a built-in solution for monitoring ZFS datasets with metricbeat. Do you have any idea on what's the best way on doing it other than the fol… --- ## [Sum of count of record](https://discuss.elastic.co/t/sum-of-count-of-record/296481)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/sum-of-count-of-record/296481 "2022-02-07T16:08:51Z")
Hello everyone, I need help with a little thing. In a table graph, I would also like to display a "total" line with the sum of the numbers on the far right. On this image for example I would like to have this line a… --- ## [404 on PDF Report](https://discuss.elastic.co/t/404-on-pdf-report/295606)
**Author:** [@BalajiTechs](https://discuss.elastic.co/u/BalajiTechs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:08pm UTC](https://discuss.elastic.co/t/404-on-pdf-report/295606 "2022-02-07T16:08:34Z")
I am on 7.16.2 version of elastic cloud. I am trying to generate a PDF report from a dashboard with ~25 visualizations. The generated PDF contains only error string(as shown in below image). The last successful repor… --- ## [TLS Error Calling Webhook Connector from Kibana](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:42pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498 "2022-02-07T15:42:41Z")
Hello - I'm running Elastic/Kibana version 7.16.2 on Linux with SSL enabled and CA signed certs. My TLS related Kibana settings are: server.ssl.enabled: true server.ssl.certificate: /path/to/server.crt server.ssl.key:… --- ## [Bizarre Error: bash: ./filebeat: No such file or directory](https://discuss.elastic.co/t/bizarre-error-bash-filebeat-no-such-file-or-directory/296407)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:39pm UTC](https://discuss.elastic.co/t/bizarre-error-bash-filebeat-no-such-file-or-directory/296407 "2022-02-07T15:39:03Z")
So this is a surreal one... I am having issues with modules not working, and I suspect an unnamed distribution is packaging and/or installing it wrong. At my wits end I decided to manually download the precompiled binari… --- ## [Data Node Roles](https://discuss.elastic.co/t/data-node-roles/296482)
**Author:** [@Enis\_Kollugil](https://discuss.elastic.co/u/Enis_Kollugil)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 3:16pm UTC](https://discuss.elastic.co/t/data-node-roles/296482 "2022-02-07T15:16:52Z")
Hello everyone, We need some hints for a situation. We have an Elasticsearch cluster with version 7.10 and we configure it for data nodes as follows. node.master: false node.data: true node.ingest: true However, when… --- ## [Wildcard search based on a field like Splunk?](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250)
**Author:** [@jlrMantu](https://discuss.elastic.co/u/jlrMantu)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:04pm UTC](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250 "2022-02-07T15:04:13Z")
Hello, Sorry if this has been posted before, I couldn't find. We are currently using Splunk but moving to Elastic / Kibana. On Splunk, we have some Fields in the dashboard, and when we search for a value, the search su… --- ## [SearchBox view causing autosuggestions not appearing](https://discuss.elastic.co/t/searchbox-view-causing-autosuggestions-not-appearing/295893)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/searchbox-view-causing-autosuggestions-not-appearing/295893 "2022-02-07T14:51:00Z")
I have the below SearchBox view, but this is causing my autocomplete suggestion does not show any suggestions even though i'm getting the suggestions from the elastic. Any suggestions please. … --- ## [Roll Up for \_size field / Archive \_size field for statistics](https://discuss.elastic.co/t/roll-up-for-size-field-archive-size-field-for-statistics/296485)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 2:48pm UTC](https://discuss.elastic.co/t/roll-up-for-size-field-archive-size-field-for-statistics/296485 "2022-02-07T14:48:54Z")
Hi folks, I want to archive the \_size field (along with some other fields such as kubernetes.namespace) in a dedicated archive index. From here I have learned that this could be done using Roll Ups. However I am not su… --- ## [Osquery Live queries: windows endpoints not responding 'action undefined'](https://discuss.elastic.co/t/osquery-live-queries-windows-endpoints-not-responding-action-undefined/296087)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 7\ **Last updated:** [February 7, 2022, 2:40pm UTC](https://discuss.elastic.co/t/osquery-live-queries-windows-endpoints-not-responding-action-undefined/296087 "2022-02-07T14:40:39Z")
Hello, I installed Osquery manager integration on my endpoints, for linux it worked like magic, while on the windows I get the following results With no errors reported on log files (elastic-agent, osquerybeat, o… --- ## [Role account permissions](https://discuss.elastic.co/t/role-account-permissions/296471)
**Author:** [@stuwee](https://discuss.elastic.co/u/stuwee)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:23pm UTC](https://discuss.elastic.co/t/role-account-permissions/296471 "2022-02-07T14:23:36Z")
Hi, is it possible to allow a role account to create new user accounts? I don't see it in the permissions. Right now I can only create new accounts from the built in elastic user. --- ## [Filebeat -\> elastic: onConnect callback failed: error loading template](https://discuss.elastic.co/t/filebeat-elastic-onconnect-callback-failed-error-loading-template/296121)
**Author:** [@mevan](https://discuss.elastic.co/u/mevan)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-elastic-onconnect-callback-failed-error-loading-template/296121 "2022-02-07T14:10:52Z")
I have followed the instructions here: Grant privileges and roles needed for publishing | Filebeat Reference \[7.17\] | Elastic I have setup.ilm.check\_exists: false set in /etc/filebeat/filebeat.yml See screenshot of my … --- ## [Logstash is Stopping automatically](https://discuss.elastic.co/t/logstash-is-stopping-automatically/296455)
**Author:** [@David\_Samm](https://discuss.elastic.co/u/David_Samm)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 2:04pm UTC](https://discuss.elastic.co/t/logstash-is-stopping-automatically/296455 "2022-02-07T14:04:46Z")
Hi logstash is stopping automatically after some time I have increased xms and xmx to 4 GB in config in JVM.Options file even though Facing same issue --- ## [Convert string field to json](https://discuss.elastic.co/t/convert-string-field-to-json/296478)
**Author:** [@rcts](https://discuss.elastic.co/u/rcts)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 2:04pm UTC](https://discuss.elastic.co/t/convert-string-field-to-json/296478 "2022-02-07T14:04:01Z")
Hi! I need to convert this "message" field to json, how? --- ## [Required to avoid below search patterns from the search results in Elastic Search](https://discuss.elastic.co/t/required-to-avoid-below-search-patterns-from-the-search-results-in-elastic-search/296469)
**Author:** [@sangasur](https://discuss.elastic.co/u/sangasur)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 12:50pm UTC](https://discuss.elastic.co/t/required-to-avoid-below-search-patterns-from-the-search-results-in-elastic-search/296469 "2022-02-07T12:50:41Z")
We have a requirement to search the availability of any sensitive data without masking (like firstName, lastName, eMail etc..) from the kibana/Elasticsearch logs from the field full\_message . Usually these details will b… --- ## [Stalled in creating a new beat](https://discuss.elastic.co/t/stalled-in-creating-a-new-beat/296301)
**Author:** [@YUAN\_YE](https://discuss.elastic.co/u/YUAN_YE)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:26pm UTC](https://discuss.elastic.co/t/stalled-in-creating-a-new-beat/296301 "2022-02-07T13:26:38Z")
I pushed the Beat version back to 7.15 to try to create a new beat, but it stalled while executing the Mage GenerateCustomBeat as per the tutorial I've tried again many times, but each time I get stuck in the same pl… --- ## [Force field processing as "double" instead of "long"](https://discuss.elastic.co/t/force-field-processing-as-double-instead-of-long/296220)
**Author:** [@Dror\_Tirosh](https://discuss.elastic.co/u/Dror_Tirosh)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 1:23pm UTC](https://discuss.elastic.co/t/force-field-processing-as-double-instead-of-long/296220 "2022-02-07T13:23:49Z")
I try to load json-structured logs using filebeat into kibana. it parses OK, but some values are numeric with very large numbers. filebeat complains that Value \[40000000000000000000\] is out of range for a long"}}, dro… --- ## [WARN: o.e.t.ThreadPool - absolute clock went backwards…](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320)
**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 12:46pm UTC](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320 "2022-02-07T12:46:16Z")
Hi, after a fresh installation this log entry shows up on every node once a minute. absolute clock went backwards by \[300ms/300ms\] while timer thread was sleeping I already searched the forum and the Elasticsearch doc… --- ## [Can it replace Prometheus?](https://discuss.elastic.co/t/can-it-replace-prometheus/296417)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 12:40pm UTC](https://discuss.elastic.co/t/can-it-replace-prometheus/296417 "2022-02-07T12:40:53Z")
I use Prometheus to gather k8s' resources. The resource data pipeline is as follows. k8s -\> Prometheus -\> Java app -\> Elasticsearch -\> (search) Java app Here I have a question. Why use Prometheus? Wouldn't Prometheus no… --- ## [Question about strange behaviour with Fuzzy query in elasticsearch](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362)
**Author:** [@psydow](https://discuss.elastic.co/u/psydow)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 12:30pm UTC](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362 "2022-02-07T12:30:07Z")
Hello everyone, I am new to the elastic stack and fulltext search for this reason there came up a question regarding some fuzzy queries I was working with the last Weeks. For context I want to realise a system where th… [Previous page](https://discuss.elastic.co/latest.md?page=1272) [Next page](https://discuss.elastic.co/latest.md?page=1274)