# Latest **URL:** https://discuss.elastic.co/latest.md?page=1292 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1293 --- ## [Yarn kbn bootstrap](https://discuss.elastic.co/t/yarn-kbn-bootstrap/295261)
**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 6:33pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap/295261 "2022-01-25T18:33:55Z")
I am trying to run this command: yarn kbn bootstrap and I get this error: ERROR: \[Errno 2\] No such file or directory: 'kbn' I am using Elasticsearch 7.10 Some help please --- ## [Multiple visualization charts are not loading using iframe on web page](https://discuss.elastic.co/t/multiple-visualization-charts-are-not-loading-using-iframe-on-web-page/295029)
**Author:** [@abhijeet\_k](https://discuss.elastic.co/u/abhijeet_k)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 6:17pm UTC](https://discuss.elastic.co/t/multiple-visualization-charts-are-not-loading-using-iframe-on-web-page/295029 "2022-01-25T18:17:30Z")
Hi Folks, I am integrating the visualization charts on react js app using iframe, but if I create multiple charts and load them on the same page then I am getting the following error. Setup lifecycle of "infra" plugin … --- ## [Start over with snapshots](https://discuss.elastic.co/t/start-over-with-snapshots/295376)
**Author:** [@mwise29](https://discuss.elastic.co/u/mwise29)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 6:12pm UTC](https://discuss.elastic.co/t/start-over-with-snapshots/295376 "2022-01-25T18:12:47Z")
We experienced some failed snapshots in one of our non-prod environments and now the snapshots aren't being fired on the configured schedule. We'd like to completely start over with the snapshots in this environment (de… --- ## [The Ingest Pipeline for 365 Defender doesn't populate hostname](https://discuss.elastic.co/t/the-ingest-pipeline-for-365-defender-doesnt-populate-hostname/294312)
**Author:** [@hinchliff](https://discuss.elastic.co/u/hinchliff)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 5:39pm UTC](https://discuss.elastic.co/t/the-ingest-pipeline-for-365-defender-doesnt-populate-hostname/294312 "2022-01-25T17:39:51Z")
We're using the "Microsoft" module in Filebeat to collect data from Microsoft Defender -- both the "defender\_atp" and the "m365\_defender". We're also using the Ingest Pipelines provided via Filebeat to parse and process… --- ## [LogStash V7.16.3 file plugin failed to load](https://discuss.elastic.co/t/logstash-v7-16-3-file-plugin-failed-to-load/295332)
**Author:** [@Landong.Zuo](https://discuss.elastic.co/u/Landong.Zuo)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 5:13pm UTC](https://discuss.elastic.co/t/logstash-v7-16-3-file-plugin-failed-to-load/295332 "2022-01-25T17:13:35Z")
Hi , I've installed Logstash V7.16.3 on Windows 10, and I am struggling to load log files using the following configuration even after deleting the sinceDB input { file { path =\> "C:\\software\\EL… --- ## [Facing problem to break this log in grok pattern](https://discuss.elastic.co/t/facing-problem-to-break-this-log-in-grok-pattern/295305)
**Author:** [@jannatnishat](https://discuss.elastic.co/u/jannatnishat)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 5:02pm UTC](https://discuss.elastic.co/t/facing-problem-to-break-this-log-in-grok-pattern/295305 "2022-01-25T17:02:29Z")
=================== Start: 2022-01-23-16:44:04 ====================== URL:https://www.siikoytto.com/siikoytto/api/v5/selfcare/dpdp/get\_subscriptions Request:{"msisdn":"880139919"} Response:{"status":true,"message":"Su… --- ## [Missing documents in scroll when there is GC on server](https://discuss.elastic.co/t/missing-documents-in-scroll-when-there-is-gc-on-server/295073)
**Author:** [@EtienneMiret](https://discuss.elastic.co/u/EtienneMiret)\ **Replies:** 4\ **Last updated:** [January 25, 2022, 4:52pm UTC](https://discuss.elastic.co/t/missing-documents-in-scroll-when-there-is-gc-on-server/295073 "2022-01-25T16:52:45Z")
When using the scroll API to retrieve large number of documents for batch processing, there are sometimes a number of documents missing. Usually a full page (exactly 10k). When looking at the timestamps of those failing … --- ## [How to paas null in bulk action when updating using helpers in python](https://discuss.elastic.co/t/how-to-paas-null-in-bulk-action-when-updating-using-helpers-in-python/294526)
**Author:** [@bipin\_kumar2](https://discuss.elastic.co/u/bipin_kumar2)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 4:49pm UTC](https://discuss.elastic.co/t/how-to-paas-null-in-bulk-action-when-updating-using-helpers-in-python/294526 "2022-01-25T16:49:57Z")
how to paas null in bulk action when updating using helpers in python , i am passing assing in helpers to update a field as null nut it throws error . action is as below actions = \[ { '\_op\_type': 'update', '\_index':… --- ## [Curator is not deleting ES snapshots](https://discuss.elastic.co/t/curator-is-not-deleting-es-snapshots/293774)
**Author:** [@hudar01](https://discuss.elastic.co/u/hudar01)\ **Replies:** 5\ **Last updated:** [January 25, 2022, 4:27pm UTC](https://discuss.elastic.co/t/curator-is-not-deleting-es-snapshots/293774 "2022-01-25T16:27:00Z")
Hello, Curator is not deleting 7 day old snapshots, even though they're there. I'm using python virtual environment where I've the following installed: (es-curator) \[ec2-user@im es-curator\]$ pip list Package … --- ## [Pubsub input stopped - context deadline exceeded](https://discuss.elastic.co/t/pubsub-input-stopped-context-deadline-exceeded/293585)
**Author:** [@nitzang1](https://discuss.elastic.co/u/nitzang1)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 4:25pm UTC](https://discuss.elastic.co/t/pubsub-input-stopped-context-deadline-exceeded/293585 "2022-01-25T16:25:00Z")
Hi all, I'm facing an issue where filebeat pubsub input stop pulling events just after throwing this error: 2022-01-05T15:30:24.404Z ERROR \[gcp.pubsub\] gcppubsub/input.go:141 context deadline exceeded {"pubsub\_project"… --- ## [Logstash on prem - Kubernetes or not](https://discuss.elastic.co/t/logstash-on-prem-kubernetes-or-not/295372)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 4:15pm UTC](https://discuss.elastic.co/t/logstash-on-prem-kubernetes-or-not/295372 "2022-01-25T16:15:47Z")
Hi, I'm checking for the advantages/disadvantages to install logstash on openshift (On Prem) or VMWare. Someone has some tips/advice/.. ? thanks in advance. --- ## [Tried to override GC log settings, doubled the logging instead](https://discuss.elastic.co/t/tried-to-override-gc-log-settings-doubled-the-logging-instead/294277)
**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 4:14pm UTC](https://discuss.elastic.co/t/tried-to-override-gc-log-settings-doubled-the-logging-instead/294277 "2022-01-25T16:14:36Z")
I used to edit /etc/elasticsearch/jvm.options in order to reduce the amount of GC logging. As directed in a recent update, I've now moved my changes to /etc/elasticsearch/jvm.options.d/gc.options. However, instead of o… --- ## [Why some boolean settings has two different suffix one is "enable" and another is "enabled"](https://discuss.elastic.co/t/why-some-boolean-settings-has-two-different-suffix-one-is-enable-and-another-is-enabled/294906)
**Author:** [@GrandFisher](https://discuss.elastic.co/u/GrandFisher)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 4:09pm UTC](https://discuss.elastic.co/t/why-some-boolean-settings-has-two-different-suffix-one-is-enable-and-another-is-enabled/294906 "2022-01-25T16:09:43Z")
I want to know why the class EnableAllocationDecider has a setting called cluster.routing.allocation.enable which end with "enable", while class IndicesService has setting indices.id\_field\_data.enabled which end with "e… --- ## [Query Against Minhash Field](https://discuss.elastic.co/t/query-against-minhash-field/295370)
**Author:** [@Nutchapol\_Dendumrong](https://discuss.elastic.co/u/Nutchapol_Dendumrong)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 4:08pm UTC](https://discuss.elastic.co/t/query-against-minhash-field/295370 "2022-01-25T16:08:45Z")
I have been following this tutorial to create minhash signature. However, it is unclear to me how to perform searching using minhash properly. I have attempted the following query, which I quickly learned that it is v… --- ## [SiemConnector with Filebeat problem](https://discuss.elastic.co/t/siemconnector-with-filebeat-problem/295365)
**Author:** [@Juan\_Fernandez\_Bernt](https://discuss.elastic.co/u/Juan_Fernandez_Bernt)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 4:05pm UTC](https://discuss.elastic.co/t/siemconnector-with-filebeat-problem/295365 "2022-01-25T16:05:13Z")
Hello, im trying to use crowdstrike Siem Connector with filebeat. I've been checking some documentation but can't find a way to solve my problem. I think is kind of working but the field message looks like a bunch of h… --- ## [Rank Feature Query as multiplier](https://discuss.elastic.co/t/rank-feature-query-as-multiplier/294022)
**Author:** [@ajay\_15](https://discuss.elastic.co/u/ajay_15)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 4:05pm UTC](https://discuss.elastic.co/t/rank-feature-query-as-multiplier/294022 "2022-01-25T16:05:11Z")
I am looking to multiply score from Rank feature query(Rank feature query | Elasticsearch Guide \[7.16\] | Elastic) to relevancy score calculated from my query. I know we can do something similar using rescore query and f… --- ## [Run aggregation separately on time based indices](https://discuss.elastic.co/t/run-aggregation-separately-on-time-based-indices/293981)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 3:57pm UTC](https://discuss.elastic.co/t/run-aggregation-separately-on-time-based-indices/293981 "2022-01-25T15:57:46Z")
I have time based indices in Elasticsearch of an index and I want to run aggregation separately for every index. Is it possible ? There is any way to tell Elasticsearch not to run aggregation on whole data of all time in… --- ## [Use script in suggestion](https://discuss.elastic.co/t/use-script-in-suggestion/294069)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 3:54pm UTC](https://discuss.elastic.co/t/use-script-in-suggestion/294069 "2022-01-25T15:54:47Z")
hello how to use script(painless) in suggestion?? --- ## [Local index replication to support terms query lookups](https://discuss.elastic.co/t/local-index-replication-to-support-terms-query-lookups/295325)
**Author:** [@rhart](https://discuss.elastic.co/u/rhart)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 3:43pm UTC](https://discuss.elastic.co/t/local-index-replication-to-support-terms-query-lookups/295325 "2022-01-25T15:43:12Z")
The documentation in ES version 6.8 (Terms Query | Elasticsearch Guide \[6.8\] | Elastic) eluded to an approach to improve performance for terms lookups by searching for terms on a local node that has a fully replicated in… --- ## [Synthetic monitoring](https://discuss.elastic.co/t/synthetic-monitoring/295071)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 3:03pm UTC](https://discuss.elastic.co/t/synthetic-monitoring/295071 "2022-01-25T15:03:48Z")
I am looking for a step by step guide for Synthetic monitoring. Anyone have a good resource to reference? --- ## [How to retrieve results with certain amount of hits](https://discuss.elastic.co/t/how-to-retrieve-results-with-certain-amount-of-hits/295360)
**Author:** [@Almog\_Wertzberger](https://discuss.elastic.co/u/Almog_Wertzberger)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 2:37pm UTC](https://discuss.elastic.co/t/how-to-retrieve-results-with-certain-amount-of-hits/295360 "2022-01-25T14:37:39Z")
Hi, Having this query for example: GET person\_group/\_search { "query": { "bool": { "filter": \[ { "exists": { "field": "educations" } … --- ## [Integrating kibana dashboard into react App](https://discuss.elastic.co/t/integrating-kibana-dashboard-into-react-app/295227)
**Author:** [@Fillipe\_Developer](https://discuss.elastic.co/u/Fillipe_Developer)\ **Replies:** 4\ **Last updated:** [January 25, 2022, 2:30pm UTC](https://discuss.elastic.co/t/integrating-kibana-dashboard-into-react-app/295227 "2022-01-25T14:30:51Z")
Hi guys, I want to know if it is possible to integrate Kibana into a react app, using its graphs and data? If there is already this possibility, please let me know what documentation? --- ## [Kibana Api](https://discuss.elastic.co/t/kibana-api/295309)
**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 2:22pm UTC](https://discuss.elastic.co/t/kibana-api/295309 "2022-01-25T14:22:08Z")
Is there any Library or api that can be done with a code with python and add changes in kibana Dashboard and how can we done changes through the code ? --- ## [Nested Composite Aggregations with ElasticSearch](https://discuss.elastic.co/t/nested-composite-aggregations-with-elasticsearch/295282)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 1:48pm UTC](https://discuss.elastic.co/t/nested-composite-aggregations-with-elasticsearch/295282 "2022-01-25T13:48:54Z")
I have an index that stores sales by salesperson, and each sale has a service rating. Using composite I get these separate ratings within an object by duplicating the seller ID. Is it possible to nest within a single obj… --- ## [Add ILM to existing index](https://discuss.elastic.co/t/add-ilm-to-existing-index/295352)
**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 1:35pm UTC](https://discuss.elastic.co/t/add-ilm-to-existing-index/295352 "2022-01-25T13:35:28Z")
Hi, im having an index called 'jenkins\_jobs\_logs' and i want to add ILM policy. after some investigation, i understood that i must perform a reindex. i reindex to the ILM pattern(jenkins\_jobs\_logs --\> jenkins\_jobs\_log… --- ## [Faceted Search Query](https://discuss.elastic.co/t/faceted-search-query/295351)
**Author:** [@andrew\_1555](https://discuss.elastic.co/u/andrew_1555)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 1:31pm UTC](https://discuss.elastic.co/t/faceted-search-query/295351 "2022-01-25T13:31:38Z")
So I am trying to write a query which returns aggregations of facets. So for example (Red: 12, Green: 8, XL : 4 etc) where the numbers are the document counts. I have been following this article which explains what I am… --- ## [Auditbeat processor ignores drop\_event](https://discuss.elastic.co/t/auditbeat-processor-ignores-drop-event/294917)
**Author:** [@ziv1](https://discuss.elastic.co/u/ziv1)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 1:28pm UTC](https://discuss.elastic.co/t/auditbeat-processor-ignores-drop-event/294917 "2022-01-25T13:28:11Z")
Hi, Trying to filter out some spam generated by auditbeat using a processor but it looks like, depending on how/where I set it up in the yml, it either completely ignores the processor, or stops processing events all to… --- ## [Configure ElasticSearch ingest pipeline at startup?](https://discuss.elastic.co/t/configure-elasticsearch-ingest-pipeline-at-startup/295087)
**Author:** [@tlc](https://discuss.elastic.co/u/tlc)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 12:54pm UTC](https://discuss.elastic.co/t/configure-elasticsearch-ingest-pipeline-at-startup/295087 "2022-01-25T12:54:11Z")
I've ported a logstash pipeline to an ES ingest pipeline, because I found out that some of our deployments use filebeat-\>logstash-\>ES, but others use Elastic Agent-\>ES. (I know nothing about Agent, I know a little about… --- ## [Point In Time creation failure after upgrade](https://discuss.elastic.co/t/point-in-time-creation-failure-after-upgrade/295172)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 12:50pm UTC](https://discuss.elastic.co/t/point-in-time-creation-failure-after-upgrade/295172 "2022-01-25T12:50:38Z")
Hello, I need some help in an issue, I recently upgraded my Elasticsearch on local setup ( i.e downloaded 7.16.2 ). Now when I try to run a Point in Time API to retrieve the PIT id, on the Elasticsearch logs it gives me … --- ## [Fleet Server invalid argument "tcp://10.233.110.49:8220" for "--fleet-server-port"](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/293566)
**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Replies:** 2\ **Last updated:** [January 25, 2022, 12:37pm UTC](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/293566 "2022-01-25T12:37:33Z")
We are looking at depoying fleet server within our ECK env. We're currently using ECK 1.8 and ELK 7.15.1. When I deploy Fleet the pod just continuously crashes with the below logs Performing setup of Fleet in Kibana … [Previous page](https://discuss.elastic.co/latest.md?page=1291) [Next page](https://discuss.elastic.co/latest.md?page=1293)