# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1321

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1322

---

## [Dec 13th, 2021: \[en\] Accessibility in Kibana](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579)

<div class="topic-metadata">

**Author:** [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Replies:** 0\
**Last updated:** [December 13, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2021-en-accessibility-in-kibana/290579 "2021-12-13T08:00:00Z")

</div>

Web Accessibility When was the last time you visited a website and got frustrated because you had trouble using it? Maybe the site was using WebGL technology that your browser didn’t support, you couldn’t read its text d…

---

## [Dec 22nd, 2021 \[KO\] Eland: 데이터 분석을 위한 Python client](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954)

<div class="topic-metadata">

**Author:** [@Jihyun\_Jeong](https://discuss.elastic.co/u/Jihyun_Jeong)\
**Replies:** 0\
**Last updated:** [December 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2021-ko-eland-python-client/291954 "2021-12-22T08:00:48Z")

</div>

파이썬(python) 은 데이터 분석을 위한 가장 보편적인 프로그래밍 언어로 자리 잡았습니다. 데이터 분석을 위해 NumPy, Pandas, SciPy, scikit-learn 등 파이썬의 주요 패키지를 주로 사용합니다. 특히, 판다스(Pandas) 는 데이터 분석에 있어서 가장 많이 사용하는 피이썬 라이브러리 중 하나 입니다. 데이터를 분석할 때 NumPy(넘파이), Pandas(판다…

---

## [Importing the index profiles from one environment to another(Index name are different)](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 5:56pm UTC](https://discuss.elastic.co/t/importing-the-index-profiles-from-one-environment-to-another-index-name-are-different/292769 "2022-01-05T17:56:23Z")

</div>

If we want to promote the Dashboards created in dev to upper environments what is the best practice? The index names will be different in upper environments and also possibility of sharing the same Elasticsearch cluster,…

---

## [Registry blows up after filebeat container restarts](https://discuss.elastic.co/t/registry-blows-up-after-filebeat-container-restarts/293572)

<div class="topic-metadata">

**Author:** [@ivankovnikita1992](https://discuss.elastic.co/u/ivankovnikita1992)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 5:51pm UTC](https://discuss.elastic.co/t/registry-blows-up-after-filebeat-container-restarts/293572 "2022-01-05T17:51:58Z")

</div>

Hello there, I've already read a lot of docs and issues but haven't found any solution for my problem, so hopefully someone can help... Our implementation is pretty simple - filebeat is set as daemonset for kubernetes …

---

## [Elastic APM not working out of the box when custom ConcurrentKafkaListenerContainerFactory](https://discuss.elastic.co/t/elastic-apm-not-working-out-of-the-box-when-custom-concurrentkafkalistenercontainerfactory/293046)

<div class="topic-metadata">

**Author:** [@solveretur](https://discuss.elastic.co/u/solveretur)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 5:40pm UTC](https://discuss.elastic.co/t/elastic-apm-not-working-out-of-the-box-when-custom-concurrentkafkalistenercontainerfactory/293046 "2022-01-05T17:40:54Z")

</div>

Kibana version: v 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: "co.elastic.apm:apm-agent-attach:1.25.0" Original install method (e.g. download page, yum, deb, fr…

---

## [Regarding log4j vulnerability](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 5:30pm UTC](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749 "2022-01-05T17:30:12Z")

</div>

Hello Team, I am using/running ELK 7.13 version on my environment using docker compose along with Filebeat 7.14 and have enabled xpack security option. I have restarted all three containers using docker compose and com…

---

## [Filebeat with multiple input - log sources](https://discuss.elastic.co/t/filebeat-with-multiple-input-log-sources/293567)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 5:19pm UTC](https://discuss.elastic.co/t/filebeat-with-multiple-input-log-sources/293567 "2022-01-05T17:19:35Z")

</div>

Hello, I am using filebeat 7.16 and I am trying to import multiple logs from different directories (.log and .csv). Also, I am trying to creat different index for each one of them. All of this must be done using one fil…

---

## [Can't move large ES snapshots to different server](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024)

<div class="topic-metadata">

**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\
**Replies:** 3\
**Last updated:** [January 5, 2022, 5:07pm UTC](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024 "2022-01-05T17:07:41Z")

</div>

I'm having an issue with moving a Elasticsearch index to a different machine. I'm running Elasticsearch on a single machine inside a docker container (single node cluster). I have 2 indexes that are 28.6gb and 15gb larg…

---

## [CCR request circuit breakers error](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809)

<div class="topic-metadata">

**Author:** [@dgarcia](https://discuss.elastic.co/u/dgarcia)\
**Replies:** 5\
**Last updated:** [January 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809 "2022-01-05T16:58:12Z")

</div>

Hi, We are using the CCR feature as part of ours process to migrate our data between two cluster, but we are experimenting some unexpected behaviour in the remote cluster. Once begin to follow an index in the remote cl…

---

## [Beginer error, sent data to APM but this is not showed on kibana](https://discuss.elastic.co/t/beginer-error-sent-data-to-apm-but-this-is-not-showed-on-kibana/290827)

<div class="topic-metadata">

**Author:** [@targino.cbranco](https://discuss.elastic.co/u/targino.cbranco)\
**Replies:** 9\
**Last updated:** [January 5, 2022, 4:52pm UTC](https://discuss.elastic.co/t/beginer-error-sent-data-to-apm-but-this-is-not-showed-on-kibana/290827 "2022-01-05T16:52:28Z")

</div>

Hi poeple! I'm starting with ELK, and I get some problems, I installed the last version of Elasticsearch, kibana and apm server, on kibana apm pages, I can see successful test of connectivity with apm server, but agent …

---

## [Question about nested pipeline](https://discuss.elastic.co/t/question-about-nested-pipeline/291400)

<div class="topic-metadata">

**Author:** [@fengjian1993](https://discuss.elastic.co/u/fengjian1993)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 4:39pm UTC](https://discuss.elastic.co/t/question-about-nested-pipeline/291400 "2022-01-05T16:39:02Z")

</div>

I have question with using nested pipeline :wink: distribution pipeline processor: PUT \_ingest/pipeline/pipeline\_for\_distribution { "description": "a pipeline for distribution", "processors": \[ { "pipeline": { "…

---

## [Java Api Client MatchQuery$Builder missing query method with the string as an argument](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 4:23pm UTC](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560 "2022-01-05T16:23:16Z")

</div>

Shouldn't it have public final Builder query(String value) method? Or should I use MatchQuery$Builder#query(FieldValue.of(.... ? I am using Elasticsearch-java-7.16.2 version

---

## [Java Api Client BoolQuery$Builder missing minimumShouldMatch method with Number as an argument](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 3:49pm UTC](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559 "2022-01-05T15:49:45Z")

</div>

Hello. BoolQuery$Builder has only public final Builder minimumShouldMatch(@Nullable String value) method. Im my opinion it should have the same method with a number as an argument. I am using Elasticsearch-java-7.16.…

---

## [Watcher Condition: Bucket Size](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635)

<div class="topic-metadata">

**Author:** [@appleyin1](https://discuss.elastic.co/u/appleyin1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 3:44pm UTC](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635 "2022-01-05T15:44:09Z")

</div>

Hello, does anyone knows how do I get the buckets size from the sub-aggregation buckets "obs1" under the Watcher condition ? Please advise, thanks. "aggregations" : { "system" : { "doc\_count\_error\_upper\_boun…

---

## [Could not connect to SMTP host](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207)

<div class="topic-metadata">

**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 3:42pm UTC](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207 "2022-01-05T15:42:50Z")

</div>

Hi, I have configured watcher related alerts. Sending the watcher alert emails from a "support.test@domain.com". Below is the action template I have used in watcher "actions": { "send\_email": { "email": { …

---

## [Force\_excute option excuting my alert every 5min](https://discuss.elastic.co/t/force-excute-option-excuting-my-alert-every-5min/293358)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 3:34pm UTC](https://discuss.elastic.co/t/force-excute-option-excuting-my-alert-every-5min/293358 "2022-01-05T15:34:11Z")

</div>

Hello team, I have creates one alert and I used below API to forcefully excute it. Also state is not changing from state" : "awaits\_successful\_execution" to "ack" POST \_watcher/watch/07342ab5-b6ee-4086-97b6-8a9eb17f39…

---

## [Java api client structuring aggregation](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981)

<div class="topic-metadata">

**Author:** [@Arun\_Nath](https://discuss.elastic.co/u/Arun_Nath)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 3:14pm UTC](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981 "2022-01-05T15:14:44Z")

</div>

Hi , Can anyone please share how to structure subAggregations using java api client . I have a code in java rest high level client using AggregationBuilders and was looking forward to upgrade to java api client . Code …

---

## [Reloads search analyzers are unsupported for tokenizer user\_dictionary](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 1:26pm UTC](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546 "2022-01-05T13:26:56Z")

</div>

Thesaurus is dynamically loaded but the tokenizer doesn't seem to have a related user\_dictionary, so is there a way to do it?

---

## [Elasticsearch 7.16.2 on M1 Max under Docker (ARM) aggressive throttling while indexing](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468 "2022-01-05T14:56:39Z")

</div>

Hey folks, I've been struggling a bit with Elasticsearch 7.16.2 running under Docker on my MacBook Pro M1 Max (64 GB RAM, 8 TB SSD). I have a job running under Ruby on Rails 6.1 with the most recent Elasticsearch Ruby …

---

## [Filebeat could not send to the kafka](https://discuss.elastic.co/t/filebeat-could-not-send-to-the-kafka/293528)

<div class="topic-metadata">

**Author:** [@flover97](https://discuss.elastic.co/u/flover97)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-could-not-send-to-the-kafka/293528 "2022-01-05T14:41:29Z")

</div>

Hello everyone, I ran into a problem that filebeat does not send data to kafka. Filebeat connects exactly to the kafka as it creates an empty topic, but the data does not come, I see no errors in the debug. Could there b…

---

## [Log4j2 issue](https://discuss.elastic.co/t/log4j2-issue/291776)

<div class="topic-metadata">

**Author:** [@umangpatel](https://discuss.elastic.co/u/umangpatel)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 2:33pm UTC](https://discuss.elastic.co/t/log4j2-issue/291776 "2022-01-05T14:33:31Z")

</div>

I have this mentioned 2 jar file... 1.)log4j-1.2.17.jar 2.)apache-log4j-extras-1.2.17.jar does this 2 jar affect any vulnerability? and yes so what changes required from our end please suggest.

---

## [Replace document vs update document](https://discuss.elastic.co/t/replace-document-vs-update-document/293549)

<div class="topic-metadata">

**Author:** [@AhmadHamouda](https://discuss.elastic.co/u/AhmadHamouda)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/replace-document-vs-update-document/293549 "2022-01-05T14:28:14Z")

</div>

Ill have documents which contain json ex: {id:100, usersIds: \[1,2,54\]} Ill need to update userIds adding some new ids and removing some exist ids My question is it better to replace the whole document or do update oper…

---

## [Installing and Scaling ECE 2.17 The supplied plan format is not supported](https://discuss.elastic.co/t/installing-and-scaling-ece-2-17-the-supplied-plan-format-is-not-supported/291883)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 5\
**Last updated:** [January 5, 2022, 2:27pm UTC](https://discuss.elastic.co/t/installing-and-scaling-ece-2-17-the-supplied-plan-format-is-not-supported/291883 "2022-01-05T14:27:09Z")

</div>

I installed ECE in the 3 machines but when I try to create the new cluster I'm getting this error The supplied plan format is not supported Tried with the LAB config but also with default configurations but the error p…

---

## [Copy values from one field to another within a nested object](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478)

<div class="topic-metadata">

**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478 "2022-01-05T14:18:45Z")

</div>

I have a document that has the structure with an field object with a nested field internally. The nested field is responsible for storing all interactions that occurred in an internal communication. It happens that I ne…

---

## [Python library for Kibana API?](https://discuss.elastic.co/t/python-library-for-kibana-api/293534)

<div class="topic-metadata">

**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 1:53pm UTC](https://discuss.elastic.co/t/python-library-for-kibana-api/293534 "2022-01-05T13:53:48Z")

</div>

Hi i would like to create MaaC, so need features like importing/exporting/deleting objects( visualizations, dashboards, index-patterns, watchers). I know that there is experimental kibana API but is there any library to …

---

## [Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index](https://discuss.elastic.co/t/detection-rule-output-of-a-aggregation-bucket-should-match-with-other-types-of-logs-in-the-same-index/292869)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 1:40pm UTC](https://discuss.elastic.co/t/detection-rule-output-of-a-aggregation-bucket-should-match-with-other-types-of-logs-in-the-same-index/292869 "2022-01-05T13:40:33Z")

</div>

Continuing the discussion from Detection Rule - Output of a aggregation bucket should match with other types of logs in the same index:

---

## [How to filter out values in tabel](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535)

<div class="topic-metadata">

**Author:** [@ge3k](https://discuss.elastic.co/u/ge3k)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/how-to-filter-out-values-in-tabel/293535 "2022-01-05T13:24:56Z")

</div>

Hello, I'm trying to create a table, where there would be @timestamp of event, source IP and count of occurrences when someone tried/succeeded to connect to a specific network port. But I only manage to create a tab…

---

## [Fetch .kibana indices that end with integer](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544 "2022-01-05T13:21:46Z")

</div>

Hi everyone I want to only fetch those kibana indices that end with integer like this .kibana\_1, .kibana\_2 etc I know how to fetch all indices that start with .kibana text using following curl command that I have typed…

---

## [Java Api Client TermsQueryBuilder how to add terms from collection of strings](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 3\
**Last updated:** [January 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464 "2022-01-05T13:17:13Z")

</div>

Hello. The only available method is by ObjectBuilder value(List v) method. Why there is no option to add just a list of Strings? I am using Elasticsearch-java-7.16.2 version

---

## [Collecting JMX statistics from every single pod](https://discuss.elastic.co/t/collecting-jmx-statistics-from-every-single-pod/293540)

<div class="topic-metadata">

**Author:** [@ezopek3](https://discuss.elastic.co/u/ezopek3)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 12:57pm UTC](https://discuss.elastic.co/t/collecting-jmx-statistics-from-every-single-pod/293540 "2022-01-05T12:57:33Z")

</div>

Hello, As my goal, I want to use Jolokia JVM agent with Metricbeat Kubernetes autodiscovery (with Jolokia module) to monitor my Java application statistics. Usually, we use Deployments to deploy our applications with s…

[Previous page](https://discuss.elastic.co/latest.md?page=1320)

[Next page](https://discuss.elastic.co/latest.md?page=1322)
