# Latest **URL:** https://discuss.elastic.co/latest.md?page=1306 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1307 --- ## [Metricbeat Rollover Error](https://discuss.elastic.co/t/metricbeat-rollover-error/294508)
**Author:** [@idlerm](https://discuss.elastic.co/u/idlerm)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 8:31pm UTC](https://discuss.elastic.co/t/metricbeat-rollover-error/294508 "2022-01-16T20:31:18Z")
Hello all! I'm new to building EL and I can't seem to find the solution to an error I've been troubleshooting for days. I'm using version 7.13.4 for elastic and I've recently installed metricbeat into my server Everyt… --- ## [Date filter in logstash](https://discuss.elastic.co/t/date-filter-in-logstash/294431)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 6\ **Last updated:** [January 16, 2022, 7:16pm UTC](https://discuss.elastic.co/t/date-filter-in-logstash/294431 "2022-01-16T19:16:06Z")
Hi, I am trying to use Date filter of the logstash to create a timestamp on my data stored in Elasticsearch. The timestamp in my data is in Linux format and I want to change it to some standard format like as "dd MMM yy… --- ## [Cluster load while updating mappings of live production indexes](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718)
**Author:** [@ginopino](https://discuss.elastic.co/u/ginopino)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 6:14pm UTC](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718 "2022-01-16T18:14:38Z")
Hello! I need to add a couple of new keyword fields to a significant quantity of production indexes which are using a mapping with dynamic: strict I was hoping to be able to use a wildcard with the update mapping API, … --- ## [Getting log graph using python](https://discuss.elastic.co/t/getting-log-graph-using-python/294505)
**Author:** [@Raz\_Maabari](https://discuss.elastic.co/u/Raz_Maabari)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 3:55pm UTC](https://discuss.elastic.co/t/getting-log-graph-using-python/294505 "2022-01-16T15:55:22Z")
Hi, I would like to embed a kibana graph in a web application (react). what would be the best way to do so? --- ## [I want to get the same results if the words have empty space or no space](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:46pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492 "2022-01-16T12:46:18Z")
Hi everyone I want to get the same results if the words have empty space or no space. For example, we have a product called "washing mach ine" and I want the washing machine to return if the user searches for the word … --- ## [Is there a query that makes the word searched closer to the beginning of the text get more points?](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483 "2022-01-16T12:44:44Z")
hello Is there a query that makes the word searched closer to the beginning of the text get more points ?? For example, if we have two texts as follows Samsung mobile phone cover TypeC charger with fast charging capa… --- ## [Elasticsearch With Node.js throwing an Error: connect EADDRNOTAVAIL](https://discuss.elastic.co/t/elasticsearch-with-node-js-throwing-an-error-connect-eaddrnotavail/294495)
**Author:** [@qadeer.sipra](https://discuss.elastic.co/u/qadeer.sipra)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-with-node-js-throwing-an-error-connect-eaddrnotavail/294495 "2022-01-16T10:00:58Z")
I am using Elasticsearch6.8.3 docker on an AWS ec2 machine for the production environment. For this purpose, I have installed the Elasticsearch via docker compose. In a microservice architecture many of the other service… --- ## [Canvas date function time zone support](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 2\ **Last updated:** [January 16, 2022, 9:04am UTC](https://discuss.elastic.co/t/canvas-date-function-time-zone-support/294485 "2022-01-16T09:04:37Z")
Hello I have some Canvas pages on which I want to show the last time the Canvas was reloaded. Using the date function with a date formatted as shown below, the time zone is in UTC. The timezone setting in Kibana (7.16.… --- ## [How to denormalize array with huge number of values Elasticsearch?](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870)
**Author:** [@aldm](https://discuss.elastic.co/u/aldm)\ **Replies:** 2\ **Last updated:** [January 16, 2022, 9:03am UTC](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870 "2022-01-16T09:03:26Z")
Hi, We're building an app which is using Elasticsearch. For each user there will be followers (array of longs - ids of user who follow this user). With time, number of followers might increase to hundreds of thousands, … --- ## [Analyze two-words phrase as one token](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305)
**Author:** [@Talya](https://discuss.elastic.co/u/Talya)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 8:59am UTC](https://discuss.elastic.co/t/analyze-two-words-phrase-as-one-token/294305 "2022-01-16T08:59:04Z")
When dealing with phrases consisting with two words, I want to index them as one token and not retrieve them when the search matching one of those words. For ex. I have document with "French Toast", when someone is searc… --- ## [Kibana canvas "compare" function (expression language)](https://discuss.elastic.co/t/kibana-canvas-compare-function-expression-language/294484)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [January 16, 2022, 7:08am UTC](https://discuss.elastic.co/t/kibana-canvas-compare-function-expression-language/294484 "2022-01-16T07:08:10Z")
Hi Guys, So I am trying to use the "compare" expression to change field values. The problem I am currently facing is that only the first case value works, all the others goes to "other" (default). In this example, onl… --- ## [Partial matching against dates](https://discuss.elastic.co/t/partial-matching-against-dates/294190)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 7:45pm UTC](https://discuss.elastic.co/t/partial-matching-against-dates/294190 "2022-01-15T19:45:03Z")
I'm sure this is is easy but couldn't find a simple answer. If I have 'XXXX2000' in an index and I search '01022000' how can I accept that as a partial match, whereby the more of the word that matches the higher the sco… --- ## [Kibana Does Not Load from mobile network](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 6\ **Last updated:** [January 15, 2022, 7:06pm UTC](https://discuss.elastic.co/t/kibana-does-not-load-from-mobile-network/293968 "2022-01-15T19:06:47Z")
Kibana version 7.14 Elastic version 7.14 Kibana loads properly and fully using WIFI networks. However, when using mobile networks, Kibana does not load. The loading appears to stop at the log-in screen. The log-in scre… --- ## [How to check if a field has any subfields](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482)
**Author:** [@dantamsdb](https://discuss.elastic.co/u/dantamsdb)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-has-any-subfields/294482 "2022-01-15T17:03:08Z")
I get input that sometimes looks like this: { "baz": { "foo": "bar", "data": {} } } sometimes it looks like this: { "baz": { "foo": "bar", "data": { "fizz": "buzz", "fizzy": "buzzy" … --- ## [org.elasticsearch.action.get.MultiGetShardResponse extremly high "\[took\]" value](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434)
**Author:** [@trocade](https://discuss.elastic.co/u/trocade)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 4:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-get-multigetshardresponse-extremly-high-took-value/294434 "2022-01-15T16:45:44Z")
So we have some problems that something in our environment is causing our nodes to run out of HEAP memory (30GB per node) While looking at this I found these messages: server es\_server\[1635\]: {"type": "server", "timest… --- ## [How i can make a status panel in Kibana?](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 7\ **Last updated:** [January 15, 2022, 3:56pm UTC](https://discuss.elastic.co/t/how-i-can-make-a-status-panel-in-kibana/293765 "2022-01-15T15:56:15Z")
Most of the dashboard development may use the "status panel" to represent the on/off for service/server/machine. In Grafana , it have two libs: Status Panel plugin for Grafana | Grafana Labs Stat | Grafana Labs which … --- ## [Scripted fields in kibana canvas](https://discuss.elastic.co/t/scripted-fields-in-kibana-canvas/294475)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 1:11pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-canvas/294475 "2022-01-15T13:11:42Z")
Hi Guys, I am trying to use scripted fields inside a table elements in kibana canvas app. I'm guessing this is not supported (error - unknown column). Is there any alternative for that? My use case is the splunk "eva… --- ## [Lens visualization for opendistro - kibana](https://discuss.elastic.co/t/lens-visualization-for-opendistro-kibana/294472)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 3:38pm UTC](https://discuss.elastic.co/t/lens-visualization-for-opendistro-kibana/294472 "2022-01-15T15:38:19Z")
Hi all, When i try to create new visualization in Kibana, Lens option not showing. Is it only available in Elasticsearch? Is it not available in Opendistro for Elasticsearch (7.10.2)? Any way to import as plugin? --- ## [How to transform data through ruby code](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 12\ **Last updated:** [January 15, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-to-transform-data-through-ruby-code/293913 "2022-01-15T13:10:07Z")
Hi I need a help for extract data from one of filed from CSV. the header for these data presents like below: EPS\_BEARER\_ID-BEARER\_QCI-ARP\_PL-ARP\_PCI-ARP\_PVI-GBR\_UL-GBR\_DL-BEARER\_CAUSE-DEFAULT\_BEARER\_ID 5-7-undefin… --- ## [Service wont run with "Environment Variable"](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 11:49am UTC](https://discuss.elastic.co/t/service-wont-run-with-environment-variable/294124 "2022-01-15T11:49:26Z")
Hi dears, I have a secure cluster with some services such as Kibana, Metricbeat, APM-server, Elastic Agent and... In their config.yml I have user/pass for Elasticsearch: output: elasticsearch hosts: "\[my\_hosts\]" usern… --- ## [Elasticsearch cluster UUID is not available after version upgrade](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441)
**Author:** [@learning\_fun](https://discuss.elastic.co/u/learning_fun)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-is-not-available-after-version-upgrade/294441 "2022-01-15T10:27:13Z")
Hi There, we use only Elasticsearch and upgraded it from 6.7.0 to 7.16.2 . we run the Elasticsearch in kubernetes and after version upgrade, cluster UUID is not available. We have one master node , 3 data nodes, 1 coord… --- ## [Why Elasticsearch Mapping Explosion can causes OOM？](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 4\ **Last updated:** [January 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/why-elasticsearch-mapping-explosion-can-causes-oom/294371 "2022-01-15T10:25:45Z")
I think index Mapping is a large JSON object. Even if each node sends a copy, the memory usage is limited. Why does it cause OOM? --- ## [Inconsistent node role display for the same configuration](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449)
**Author:** [@co88liwan](https://discuss.elastic.co/u/co88liwan)\ **Replies:** 3\ **Last updated:** [January 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/inconsistent-node-role-display-for-the-same-configuration/294449 "2022-01-15T10:24:26Z")
Elasticsearch version: 7.16.2 In our case, all data nodes in elasticsearch.yml file are configured as node.roles: \[data\_hot, data\_content, \] But running cat node in dev tool we see inconsistent node role display, some… --- ## [Node\_type vs node\_roles, wrong documentation?](https://discuss.elastic.co/t/node-type-vs-node-roles-wrong-documentation/294473)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 8:12am UTC](https://discuss.elastic.co/t/node-type-vs-node-roles-wrong-documentation/294473 "2022-01-15T08:12:41Z")
Hello, I see in ECE 2.13 the node\_type parameter in the instances is replaced with node\_types, but I see the documentation examples and there is still node\_type being mentioned: Create instance configurations | Elastic… --- ## [Strict terms query (exclusive)](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 7:51am UTC](https://discuss.elastic.co/t/strict-terms-query-exclusive/294471 "2022-01-15T07:51:50Z")
Hi, I am looking to make a terms query but strictly containing specified terms and excluding all docs that do not contain only those terms (eg. docs matches if I have strictly and only A and B =\> no doc matches if I have… --- ## [FSCrawler : Retry connection, when it gets failure](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 15\ **Last updated:** [January 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/fscrawler-retry-connection-when-it-gets-failure/293488 "2022-01-15T05:41:26Z")
Hi David, Please share your suggestions. We are using fscrawler-2.4.. When we startup.. getting below connection error.. is there way to look (or) wait for connection success, then continue the process within the \_sett… --- ## [No email activation message](https://discuss.elastic.co/t/no-email-activation-message/294454)
**Author:** [@noactivation](https://discuss.elastic.co/u/noactivation)\ **Replies:** 1\ **Last updated:** [January 15, 2022, 4:24am UTC](https://discuss.elastic.co/t/no-email-activation-message/294454 "2022-01-15T04:24:39Z")
Signing up with my work address, no email activation message after ten minutes, clicked the 'resend' link, still no activation message. $WORK email is handled through gmail. Signed up with a personal account at a tiny I… --- ## [Logstash config change suggestion](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [January 15, 2022, 4:08am UTC](https://discuss.elastic.co/t/logstash-config-change-suggestion/294466 "2022-01-15T04:08:40Z")
Currently, if you run multiple pipelines, you have to list them in pipelines.yml. In some cases, it would be easier to have a pipelines.d directory with individual files for each pipeline instead of the single pipelines… --- ## [Elastic Agent - Memory Usage](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463)
**Author:** [@Huber](https://discuss.elastic.co/u/Huber)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 11:45pm UTC](https://discuss.elastic.co/t/elastic-agent-memory-usage/294463 "2022-01-14T23:45:42Z")
Hello, Is it normal that Elastic Agent utilizes around 500MB of ram on Windows 10 Endpoint Version 7.16.3 I have disabled for test Detection/Protection in the Policy. I have disabled all events collection DNS, Netwo… --- ## [Show multiple values in same table cell / any other field](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291)
**Author:** [@McCasian](https://discuss.elastic.co/u/McCasian)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 10:16pm UTC](https://discuss.elastic.co/t/show-multiple-values-in-same-table-cell-any-other-field/293291 "2022-01-14T22:16:48Z")
Hello everyone, I have to show Total RAM Capacity and Total Ram Capacity WS(Without Spare), and I have this for all other resources (Storage, CPU, etc.). Considering this, I would avoid making a very large table, but ra… [Previous page](https://discuss.elastic.co/latest.md?page=1305) [Next page](https://discuss.elastic.co/latest.md?page=1307)