# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1279

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1280

---

## [Hot to get all results in the Dev Tools](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 11:14am UTC](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178 "2022-02-03T11:14:55Z")

</div>

Hi All, I'm using 7.16.2, When I run query in the dev tools I get only 10 first results... How can I get all the query results? Thanks, Shay

---

## [ClassNotFoundException : com.fasterxml.jackson.core.type.TypeReference](https://discuss.elastic.co/t/classnotfoundexception-com-fasterxml-jackson-core-type-typereference/294793)

<div class="topic-metadata">

**Author:** [@sadu](https://discuss.elastic.co/u/sadu)\
**Replies:** 6\
**Last updated:** [February 3, 2022, 10:56am UTC](https://discuss.elastic.co/t/classnotfoundexception-com-fasterxml-jackson-core-type-typereference/294793 "2022-02-03T10:56:26Z")

</div>

APM Server version: 1.28.4 \*\* Attaching APM agent \*\*: By VM option: -javaagent:lib/elastic-apm-agent.jar \*\* Java \*\*: 1.8 Hello, In our application we create view where admin can check current APM agent configurat…

---

## [Error with \_sql query with curl](https://discuss.elastic.co/t/error-with-sql-query-with-curl/295232)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 10:05am UTC](https://discuss.elastic.co/t/error-with-sql-query-with-curl/295232 "2022-02-03T10:05:57Z")

</div>

Hello ! I am trying to cast a query to my Elasticsearch cluster. When I use where with numeric fields, everything works correctly, but when I try to use it with text fields, problems appear. What would be the correct s…

---

## [Filebeat cannot assign requested address](https://discuss.elastic.co/t/filebeat-cannot-assign-requested-address/296137)

<div class="topic-metadata">

**Author:** [@sulfred](https://discuss.elastic.co/u/sulfred)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 9:25am UTC](https://discuss.elastic.co/t/filebeat-cannot-assign-requested-address/296137 "2022-02-03T09:25:08Z")

</div>

I am trying to read the syslog information by filebeat. I have my filebeat installed in docker. I get error message ERROR \[syslog\] syslog/input.go:150 Error starting the servererrorlisten tcp 192.168.1.142:…

---

## [Transfer message via filebeat](https://discuss.elastic.co/t/transfer-message-via-filebeat/288793)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 9\
**Last updated:** [February 3, 2022, 9:06am UTC](https://discuss.elastic.co/t/transfer-message-via-filebeat/288793 "2022-02-03T09:06:39Z")

</div>

Lines passed by filebeat are not processed correctly. Part of the line sometimes breaks up into several parts, part of the message arrives, and the other can be shaken altogether. original file Network Management Card…

---

## [How to create grok filter to parse the below log format](https://discuss.elastic.co/t/how-to-create-grok-filter-to-parse-the-below-log-format/295988)

<div class="topic-metadata">

**Author:** [@poddraj](https://discuss.elastic.co/u/poddraj)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:32am UTC](https://discuss.elastic.co/t/how-to-create-grok-filter-to-parse-the-below-log-format/295988 "2022-02-03T07:32:59Z")

</div>

2022-02-01 01:25:45.778-\[ActivationSrvc-28\] com.verizon.vnm.activation.ejb.helper.ActivationRequestHelper.nbaReqResponse(ActivationRequestHelper.java:3313) INFO {"VSAD\_ID":"ABFD","log\_type":"","app\_name":"ABC","VAST\_ID"…

---

## [Logstash Automation](https://discuss.elastic.co/t/logstash-automation/296150)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:26am UTC](https://discuss.elastic.co/t/logstash-automation/296150 "2022-02-03T07:26:57Z")

</div>

there is a one Folder name logs in that Folder there is multiple json file like 1.json, 2.json, etc i want to pars logs in Elasticsearch with logstash so Question is that how to configure that all file in one conf fi…

---

## [Kafka input kibana message one field](https://discuss.elastic.co/t/kafka-input-kibana-message-one-field/296134)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:00am UTC](https://discuss.elastic.co/t/kafka-input-kibana-message-one-field/296134 "2022-02-03T07:00:31Z")

</div>

Hello! I'm new here and have been stuck with an issue for 2 days. I have a working flow with winlogbeat - kafka - logstash - Elasticsearch. I receive the winlogbeat logs in kibana but the problem is that the full log …

---

## [How to nested and other field search](https://discuss.elastic.co/t/how-to-nested-and-other-field-search/296147)

<div class="topic-metadata">

**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 7:11am UTC](https://discuss.elastic.co/t/how-to-nested-and-other-field-search/296147 "2022-02-03T07:11:59Z")

</div>

Hello! I want to know about the search conditions. { "query": { "nested": { "path": "others", "query": { "bool": { "must": \[ { "match": { "others.key": "0204key" } }, …

---

## [Iteration In Logstash | Looping](https://discuss.elastic.co/t/iteration-in-logstash-looping/296148)

<div class="topic-metadata">

**Author:** [@Mayank\_Malhotra](https://discuss.elastic.co/u/Mayank_Malhotra)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 6:59am UTC](https://discuss.elastic.co/t/iteration-in-logstash-looping/296148 "2022-02-03T06:59:52Z")

</div>

Hi All, I am creating a logstasg config in which I need to use iteration at some point giving an example below in terms of simpler programing language :- int n=300000; int counter=0,skip=0; while(counter\<300000) { skip…

---

## [ELK Query For Percentage](https://discuss.elastic.co/t/elk-query-for-percentage/296149)

<div class="topic-metadata">

**Author:** [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 6:58am UTC](https://discuss.elastic.co/t/elk-query-for-percentage/296149 "2022-02-03T06:58:52Z")

</div>

Hi Team, We have three fields like, system.memory.total: 8181809152 system.memory.actual.used.bytes: 1474260992 system.memory.actual.free: 6707548160 Is it possible to write a query for more than 80 percentage of …

---

## [Embedding Kibana Dashboards in a custom AngluarJS/ReactJS Web Application](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-a-custom-angluarjs-reactjs-web-application/292768)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 6:05am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboards-in-a-custom-angluarjs-reactjs-web-application/292768 "2022-02-03T06:05:19Z")

</div>

Would like to know what is the best practice to embed the Kibana Dashboards in AngularJS/ReactJS web application without using iframe. It should display only the dashboards and not any controls which are present in Kiban…

---

## [How to pagination many data?(data count example 100,000)](https://discuss.elastic.co/t/how-to-pagination-many-data-data-count-example-100-000/295205)

<div class="topic-metadata">

**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 5:58am UTC](https://discuss.elastic.co/t/how-to-pagination-many-data-data-count-example-100-000/295205 "2022-02-03T05:58:08Z")

</div>

I want to display more than 100,000 data on a 1page 10data. For example, when i press page 1023, Data from 10221 to 10230 should be displayed. In this case, should I use 'search after' instead of 'scroll'? If it is be…

---

## [APM agent for Angular js 11.2.14](https://discuss.elastic.co/t/apm-agent-for-angular-js-11-2-14/296144)

<div class="topic-metadata">

**Author:** [@Chaitanya\_krishna\_ch](https://discuss.elastic.co/u/Chaitanya_krishna_ch)\
**Replies:** 0\
**Last updated:** [February 3, 2022, 5:22am UTC](https://discuss.elastic.co/t/apm-agent-for-angular-js-11-2-14/296144 "2022-02-03T05:22:34Z")

</div>

Hi, We are currently using Angular-JS 11.2.14. I am looking for APM agent for it. which agent should I use? Do we mandatorily required to create APM init inside our app code? Help me?

---

## [Fleet Host healthy, but no data](https://discuss.elastic.co/t/fleet-host-healthy-but-no-data/295824)

<div class="topic-metadata">

**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 3:19am UTC](https://discuss.elastic.co/t/fleet-host-healthy-but-no-data/295824 "2022-02-03T03:19:32Z")

</div>

Hi, I have configured fleet on my ES cluster and I can see all my endpoints are healthy under the Fleet\>Agents. But I cannot see either data stream or logs of the endpoints. when I go through the ES logs, I could fin…

---

## [Elastic Agent Standalone Kubernetes ICMP Check; Heartbeat won't Start](https://discuss.elastic.co/t/elastic-agent-standalone-kubernetes-icmp-check-heartbeat-wont-start/296005)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [February 2, 2022, 11:30pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-kubernetes-icmp-check-heartbeat-wont-start/296005 "2022-02-02T23:30:55Z")

</div>

Hi All, I'm trying to setup a standalone Elastic Agent config on Kubernetes, but am running into an issue where Heartbeat doesn't start, and eventually enters a failed state. Elastic Agent: 7.16.2 ECK: 1.9.1 Elastics…

---

## [Removing original index after split](https://discuss.elastic.co/t/removing-original-index-after-split/296073)

<div class="topic-metadata">

**Author:** [@kalikasan](https://discuss.elastic.co/u/kalikasan)\
**Replies:** 1\
**Last updated:** [February 2, 2022, 11:11pm UTC](https://discuss.elastic.co/t/removing-original-index-after-split/296073 "2022-02-02T23:11:57Z")

</div>

Hi, I've got a single shard index of 75GB taking 40% of my physical disk space (according to df) which I needed to split into two shards. After the split, the disk space taken by the new index is around the double of th…

---

## [How to update date field type to a string in ES?](https://discuss.elastic.co/t/how-to-update-date-field-type-to-a-string-in-es/296131)

<div class="topic-metadata">

**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\
**Replies:** 3\
**Last updated:** [February 2, 2022, 10:57pm UTC](https://discuss.elastic.co/t/how-to-update-date-field-type-to-a-string-in-es/296131 "2022-02-02T22:57:41Z")

</div>

Hi ES team, I am trying to build a custom ES template where one field would occasionally passes a string that matches with date format causing mapping conflicts and dropping of data by logstash. If i try to disable a…

---

## [Ansible deployment of Filebeat](https://discuss.elastic.co/t/ansible-deployment-of-filebeat/296132)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 0\
**Last updated:** [February 2, 2022, 10:35pm UTC](https://discuss.elastic.co/t/ansible-deployment-of-filebeat/296132 "2022-02-02T22:35:22Z")

</div>

I was wondering if it was recommended to deploy filebeat through ansible. I am interested in installing and configuring filebeat on multiple machines (each with different log configurations), however I can't seem to find…

---

## [Is it possible use GCP Dataflow to export BigQuery data to App Search?](https://discuss.elastic.co/t/is-it-possible-use-gcp-dataflow-to-export-bigquery-data-to-app-search/296108)

<div class="topic-metadata">

**Author:** [@David\_Robbins](https://discuss.elastic.co/u/David_Robbins)\
**Replies:** 2\
**Last updated:** [February 2, 2022, 9:25pm UTC](https://discuss.elastic.co/t/is-it-possible-use-gcp-dataflow-to-export-bigquery-data-to-app-search/296108 "2022-02-02T21:25:07Z")

</div>

Total newbie to product so bear with me. I'd like to use App Search for web app but have 1.5 records in BigQuery we would like to search. I've been using the GCP MarketPlace integration and the Dataflow template to exp…

---

## [Problem using fingerprint for my documents stored in elasticsearch](https://discuss.elastic.co/t/problem-using-fingerprint-for-my-documents-stored-in-elasticsearch/295101)

<div class="topic-metadata">

**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\
**Replies:** 16\
**Last updated:** [February 2, 2022, 9:23pm UTC](https://discuss.elastic.co/t/problem-using-fingerprint-for-my-documents-stored-in-elasticsearch/295101 "2022-02-02T21:23:23Z")

</div>

Hi, I want to provide a unique id for the data I store in Elasticsearch index using fingerprint. But when I feed a bulk of docs to logstash I only one of the documents is stored in the index. I have 9 docs (9 json dicti…

---

## [ILM policy based on index and not on index template](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123)

<div class="topic-metadata">

**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\
**Replies:** 5\
**Last updated:** [February 2, 2022, 8:51pm UTC](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123 "2022-02-02T20:51:49Z")

</div>

Hi, Is there a way to configure ILM policy specific to index and not based on index template? it is annoying to have multiple templates and specifying index patterns for each type (daily, monthly, yearly). If i want to …

---

## [Google Workspace Setup](https://discuss.elastic.co/t/google-workspace-setup/293581)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 4\
**Last updated:** [February 2, 2022, 8:43pm UTC](https://discuss.elastic.co/t/google-workspace-setup/293581 "2022-02-02T20:43:17Z")

</div>

Hello, I'm attempting to start up the Google Workspace Audit Reports Integration in fleet and have successfully followed the steps to create service accounts, grant API access and oAuth IDs. I also have the json file fo…

---

## [Timestamp Event at Logstash Input](https://discuss.elastic.co/t/timestamp-event-at-logstash-input/296122)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 0\
**Last updated:** [February 2, 2022, 8:24pm UTC](https://discuss.elastic.co/t/timestamp-event-at-logstash-input/296122 "2022-02-02T20:24:44Z")

</div>

We are using Persistent Queues, and I would like to calculate the time an event is in queue before actually being sent through the pipeline, but in order to do so, I need to add a timestamp in the input section of the pi…

---

## [Rollup Search results differ based on timeline interval](https://discuss.elastic.co/t/rollup-search-results-differ-based-on-timeline-interval/296120)

<div class="topic-metadata">

**Author:** [@rfox](https://discuss.elastic.co/u/rfox)\
**Replies:** 0\
**Last updated:** [February 2, 2022, 8:02pm UTC](https://discuss.elastic.co/t/rollup-search-results-differ-based-on-timeline-interval/296120 "2022-02-02T20:02:56Z")

</div>

If I use different timeline intervals on a rollup search I get a different set of resulting keys where I expect the same resulting keys but just in different time buckets and counts. It seems the larger the interval the…

---

## [Elastic crash](https://discuss.elastic.co/t/elastic-crash/295791)

<div class="topic-metadata">

**Author:** [@Grace\_A](https://discuss.elastic.co/u/Grace_A)\
**Replies:** 14\
**Last updated:** [February 2, 2022, 7:55pm UTC](https://discuss.elastic.co/t/elastic-crash/295791 "2022-02-02T19:55:16Z")

</div>

Elastic have some issue about java heap size. Elastic, Kibana, and Logstash live on 1 server that has 52 GB RAM. We've also tried change the jvm options for elastic from 1 to 40 Gb. But the elastic always shut down all …

---

## [Fleet Agent not showing logs - Fleet Agent not opening port syslog (panw module - filebeat)](https://discuss.elastic.co/t/fleet-agent-not-showing-logs-fleet-agent-not-opening-port-syslog-panw-module-filebeat/296111)

<div class="topic-metadata">

**Author:** [@AMe](https://discuss.elastic.co/u/AMe)\
**Replies:** 1\
**Last updated:** [February 2, 2022, 7:23pm UTC](https://discuss.elastic.co/t/fleet-agent-not-showing-logs-fleet-agent-not-opening-port-syslog-panw-module-filebeat/296111 "2022-02-02T19:23:31Z")

</div>

Elastic Agent has not opened the port for Syslog to receive data. Fleet integration - filebeat module - Palo Alto firewall network (panw) - via Syslog. Use Case: I set up a fleet server, created a new policy and added …

---

## [How do I modify queue.mem.events property when the APM server is managed through Fleet integration?](https://discuss.elastic.co/t/how-do-i-modify-queue-mem-events-property-when-the-apm-server-is-managed-through-fleet-integration/294791)

<div class="topic-metadata">

**Author:** [@Yash\_Gill](https://discuss.elastic.co/u/Yash_Gill)\
**Replies:** 5\
**Last updated:** [February 2, 2022, 7:09pm UTC](https://discuss.elastic.co/t/how-do-i-modify-queue-mem-events-property-when-the-apm-server-is-managed-through-fleet-integration/294791 "2022-02-02T19:09:39Z")

</div>

Kibana version: 7.16.2 Elasticsearch version: 7.16.2 APM Server version: 7.16.1 APM Agent language and version: .NET Standard 2.0 Browser version: NA Original install method (e.g. download page, yum, deb, from …

---

## [Saved object is missing Could not locate that visualization](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/295624)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 3\
**Last updated:** [February 2, 2022, 6:53pm UTC](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/295624 "2022-02-02T18:53:54Z")

</div>

Hello all, I am using ELK 7.16.2. I have been using custom plugin. So, I have been creating charts with the data I have with my plugin and visualizing in kibana. but Now, I am getting the following error. Saved object …

---

## [ElasticSearch keyword mapping leads to illegal\_state\_exception](https://discuss.elastic.co/t/elasticsearch-keyword-mapping-leads-to-illegal-state-exception/296107)

<div class="topic-metadata">

**Author:** [@Jabest](https://discuss.elastic.co/u/Jabest)\
**Replies:** 0\
**Last updated:** [February 2, 2022, 6:24pm UTC](https://discuss.elastic.co/t/elasticsearch-keyword-mapping-leads-to-illegal-state-exception/296107 "2022-02-02T18:24:08Z")

</div>

In a spring boot application when indexing an object into es I get the following exception. Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9299\], URI \[/my\_index\_name/\_doc/1…

[Previous page](https://discuss.elastic.co/latest.md?page=1278)

[Next page](https://discuss.elastic.co/latest.md?page=1280)
