# Latest **URL:** https://discuss.elastic.co/latest.md?page=1324 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1325 --- ## [BadRequest400Exception latitude must be a number](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169)
**Author:** [@rayuth](https://discuss.elastic.co/u/rayuth)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 5:48am UTC](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169 "2022-01-04T05:48:52Z")
Hi All, I got an error: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"latitude must be a number"}\],"type":"mapper\_parsing\_exception","reason":"faile… --- ## [Kibana Server Is Not Ready Yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/293393)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:46am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/293393 "2022-01-04T05:46:11Z")
Hello, I just had a quick question on Kibana and Elasticsearch. I am getting what seems to be a pretty common error. "Kibana server is not ready yet". This happened after I followed this tutorial https://www.elastic.co/… --- ## [Docker - Upgrade elasticsearch from 7.15.2 to 7.16.2](https://discuss.elastic.co/t/docker-upgrade-elasticsearch-from-7-15-2-to-7-16-2/293360)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:37am UTC](https://discuss.elastic.co/t/docker-upgrade-elasticsearch-from-7-15-2-to-7-16-2/293360 "2022-01-04T05:37:17Z")
Hey, I have ES 7.15.2 running in docker, and I want to upgrade it to 7.16.2. How can I do that? The only solution I can see is this Rolling upgrades but I believe it does not work in Docker. --- ## [AWS Beanstalk and Elastic Cloud Filebeat](https://discuss.elastic.co/t/aws-beanstalk-and-elastic-cloud-filebeat/293385)
**Author:** [@tsoeiro](https://discuss.elastic.co/u/tsoeiro)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 9:00pm UTC](https://discuss.elastic.co/t/aws-beanstalk-and-elastic-cloud-filebeat/293385 "2022-01-03T21:00:13Z")
I have a docker container running on AWS Beanstalk. Is it possible to ingest my docker container logs into Elasticsearch (Cloud service) using Filebeats? Could not find a proper Elastic Integration ingest option for Be… --- ## [Age of index incorrect for ILM](https://discuss.elastic.co/t/age-of-index-incorrect-for-ilm/293387)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 5:32am UTC](https://discuss.elastic.co/t/age-of-index-incorrect-for-ilm/293387 "2022-01-04T05:32:49Z")
I'm trying out an ILM policy and I'm getting strange results. First, it seems like the indices are reporting the incorrect age. Today is Jan 3, and the index created on Jan 1 has an age of 5.29h. I just now sent off this… --- ## [How to calculate EXCEPT SET from one to another?](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244)
**Author:** [@hiteny](https://discuss.elastic.co/u/hiteny)\ **Replies:** 2\ **Last updated:** [December 31, 2021, 11:05am UTC](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244 "2021-12-31T11:05:31Z")
I want to get the keys which only appears in bucket2\>metric2 Here is the code : POST testa/\_search?size=0 { "size": 0, "query": { "term": { "create\_date": { "value": "2021-12-25" } } … --- ## [Generating A Certificate From The CA I Made Through Elasticsearch](https://discuss.elastic.co/t/generating-a-certificate-from-the-ca-i-made-through-elasticsearch/293236)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 2:53am UTC](https://discuss.elastic.co/t/generating-a-certificate-from-the-ca-i-made-through-elasticsearch/293236 "2022-01-04T02:53:10Z")
Hello, I am about done setting up security going through this tutorial: I am getting stuck here: Send the kibana-server.csr certificate signing request to your internal CA or trusted CA for signing to obtain a signed… --- ## [Exiting: error loading template: failed to load template: couldn't load template: 400 Bad Request:](https://discuss.elastic.co/t/exiting-error-loading-template-failed-to-load-template-couldnt-load-template-400-bad-request/292423)
**Author:** [@mshah](https://discuss.elastic.co/u/mshah)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 12:34am UTC](https://discuss.elastic.co/t/exiting-error-loading-template-failed-to-load-template-couldnt-load-template-400-bad-request/292423 "2022-01-04T00:34:10Z")
Hi All, I am new to Elastic stack and trying out a PoC to get approval but i am unable to get winlogBeat or File beat working. Tried multiple time and looked around online but not sure where i am missing. I get below e… --- ## [How to use Lens to visualize/consider monitors down in a row](https://discuss.elastic.co/t/how-to-use-lens-to-visualize-consider-monitors-down-in-a-row/289966)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 11:07pm UTC](https://discuss.elastic.co/t/how-to-use-lens-to-visualize-consider-monitors-down-in-a-row/289966 "2022-01-03T23:07:48Z")
Hey there, I am trying to use Lens to visualize Heartbeat monitors down in a row. For example, I try to create a table to get the % values of service down in a specific time interval; every Heartbeat check will run ev… --- ## [Add grok patterns on unformatted message in Kibana visualization](https://discuss.elastic.co/t/add-grok-patterns-on-unformatted-message-in-kibana-visualization/293379)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 10:11pm UTC](https://discuss.elastic.co/t/add-grok-patterns-on-unformatted-message-in-kibana-visualization/293379 "2022-01-03T22:11:20Z")
Hi there, am trying to create a "metric visualization" to show the count of the "number of instances matching a text pattern", but do not see that field within the list of eligible fields when trying to use. From the ma… --- ## [Can we rename any index?](https://discuss.elastic.co/t/can-we-rename-any-index/293377)
**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 6:11pm UTC](https://discuss.elastic.co/t/can-we-rename-any-index/293377 "2022-01-03T18:11:46Z")
Is there any way to rename an index without the need of copying data to another index ? --- ## [Alert when a service stops on linux](https://discuss.elastic.co/t/alert-when-a-service-stops-on-linux/293003)
**Author:** [@derek.olds](https://discuss.elastic.co/u/derek.olds)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 5:39pm UTC](https://discuss.elastic.co/t/alert-when-a-service-stops-on-linux/293003 "2022-01-03T17:39:33Z")
I can get a list of processes running on a host, but I don't get a signal when the process stops. Do I need to set something up to track number of records over a given time? Is there an easier way? --- ## [Cisco IOS Fleet integration unable to properly grok generated messages](https://discuss.elastic.co/t/cisco-ios-fleet-integration-unable-to-properly-grok-generated-messages/293375)
**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 5:20pm UTC](https://discuss.elastic.co/t/cisco-ios-fleet-integration-unable-to-properly-grok-generated-messages/293375 "2022-01-03T17:20:14Z")
I've just begun working with some of the fleet integrations, specifically v1.2 of the Cisco\_IOS version and have some of our switches sending data properly and being received. However, every entry is unable to properly p… --- ## [Sort on object part that exist](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354)
**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 5:18pm UTC](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354 "2022-01-03T17:18:39Z")
Hi guys, sorry i have another question but this time concerning the sorting of a request. Considering this mapping { "sample\_data": { "mappings": { "properties": { "title": { … --- ## [Unable to add custom analyzer](https://discuss.elastic.co/t/unable-to-add-custom-analyzer/293373)
**Author:** [@maviles](https://discuss.elastic.co/u/maviles)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 4:37pm UTC](https://discuss.elastic.co/t/unable-to-add-custom-analyzer/293373 "2022-01-03T16:37:38Z")
Greetings, I'm unable to add a custom analyzer "tokenizer" to an existing, up and running index. I'm able to add the same custom analyzer creating a new index and reindexing an old one to a recently created one. However… --- ## [Completion Suggester not showing results if value is already in previous field](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370)
**Author:** [@javaman](https://discuss.elastic.co/u/javaman)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 4:12pm UTC](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370 "2022-01-03T16:12:13Z")
I experience a problem with the completion suggester in Elasticsearch 7.9.1 (also present in 6.7) If I have more than one suggest input with the same value for different contexts it will only find a completion for the f… --- ## [Is it worse to have very large documents/indices with a ton of data, or split that data into smaller documents/indices using a relational paradigm?](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284)
**Author:** [@annmarie-switzer](https://discuss.elastic.co/u/annmarie-switzer)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 3:59pm UTC](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284 "2022-01-03T15:59:23Z")
Say I have a store and each product I sell has a document in Elasticsearch: { id: "abc", name: "mittens", price: "$10.00" }, { id: "def", name: "hat", price: "$13.00" } My store's website allows… --- ## [Elastic Agent - critical issues, filling up hard drive space](https://discuss.elastic.co/t/elastic-agent-critical-issues-filling-up-hard-drive-space/293304)
**Author:** [@Ndx](https://discuss.elastic.co/u/Ndx)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 2:40am UTC](https://discuss.elastic.co/t/elastic-agent-critical-issues-filling-up-hard-drive-space/293304 "2022-01-03T02:40:15Z")
@ferullo I think there might be critical bug in elastic agent - today all servers ( system drives were filled up ) server 2012, 2016, 2019, Win 10 machines as well. Files in C:\\Program Files\\Elastic\\Endpoint\\state\\log\\… --- ## [Search text part in object](https://discuss.elastic.co/t/search-text-part-in-object/293332)
**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 3:19pm UTC](https://discuss.elastic.co/t/search-text-part-in-object/293332 "2022-01-03T15:19:42Z")
Hi guys, new here and had some trouble for this basic search. In the database, we have objects containing strings like this. {fr: "french string", en: "english string", nl: "nl string"} for generic purpose (defined in… --- ## [Monitoring Logstash using Metricbeat](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/293344)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 7\ **Last updated:** [January 3, 2022, 2:44pm UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/293344 "2022-01-03T14:44:04Z")
Hi, I have 3 instances of Logstash and want to monitor them in Kibana This is my /etc/metricbeat/modules.d/logstash-xpack.yml configuration: # Module: logstash # Docs: https://www.elastic.co/guide/en/beats/metricbeat/… --- ## [Canvas Table subtotals](https://discuss.elastic.co/t/canvas-table-subtotals/293359)
**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 2:36pm UTC](https://discuss.elastic.co/t/canvas-table-subtotals/293359 "2022-01-03T14:36:51Z")
Hi! I am trying to calculate subtotals in a table in canvas. Something like this (using the demodata): Using the code: demodata | mapColumn name="year" expression={getCell "time" | formatdate "YYYY"} | ply by="ye… --- ## [How to set kibana\_system credentials to elasticsearch](https://discuss.elastic.co/t/how-to-set-kibana-system-credentials-to-elasticsearch/293316)
**Author:** [@raka](https://discuss.elastic.co/u/raka)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 2:26pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-system-credentials-to-elasticsearch/293316 "2022-01-03T14:26:09Z")
Hi, We have one EFK stack running on 7.14.X version with X-pack security enabled and we defined elastic user for kibana application and everything works so far. But, we noticed a few warning messages in kibana pod. It s… --- ## [Java API requires GPL code](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 2:11pm UTC](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936 "2022-01-03T14:11:28Z")
I would like to use the new Java API described here: But when I include it in my pom and try to generate a JAR with all dependencies included, licensescan-maven-plugin tells me that there are two GPL dependencies: \[W… --- ## [Ingest pipeline to copy data from one field to another based on condition](https://discuss.elastic.co/t/ingest-pipeline-to-copy-data-from-one-field-to-another-based-on-condition/293352)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 0\ **Last updated:** [January 3, 2022, 1:50pm UTC](https://discuss.elastic.co/t/ingest-pipeline-to-copy-data-from-one-field-to-another-based-on-condition/293352 "2022-01-03T13:50:05Z")
Hi, I'm looking to copy data from one field to another, if initially the destination field is blank assign a value, if non blank don't overwrite to another but upon re-indexing from another source the doc pipeline doesn… --- ## [Kibana authentication when sharing the dashboard in web application](https://discuss.elastic.co/t/kibana-authentication-when-sharing-the-dashboard-in-web-application/44987)
**Author:** [@sriram](https://discuss.elastic.co/u/sriram)\ **Replies:** 28\ **Last updated:** [January 3, 2022, 1:34pm UTC](https://discuss.elastic.co/t/kibana-authentication-when-sharing-the-dashboard-in-web-application/44987 "2022-01-03T13:34:53Z")
Hi, cluster ID : cd59e4 want to show kibana dashboard in my webapplication. on opening kibana it is asking for authentication . I dont want my user to enter credentials again . and anonymous user is not secure ... c… --- ## [FileBeat How to control the ports used](https://discuss.elastic.co/t/filebeat-how-to-control-the-ports-used/293296)
**Author:** [@gaogao110](https://discuss.elastic.co/u/gaogao110)\ **Replies:** 5\ **Last updated:** [January 3, 2022, 1:23pm UTC](https://discuss.elastic.co/t/filebeat-how-to-control-the-ports-used/293296 "2022-01-03T13:23:30Z")
During use, the program will randomly start the port, is there any way to control ? --- ## [Some puzzle about filebeat version7.x rpm installation](https://discuss.elastic.co/t/some-puzzle-about-filebeat-version7-x-rpm-installation/293312)
**Author:** [@mmgithub123](https://discuss.elastic.co/u/mmgithub123)\ **Replies:** 2\ **Last updated:** [January 3, 2022, 12:59pm UTC](https://discuss.elastic.co/t/some-puzzle-about-filebeat-version7-x-rpm-installation/293312 "2022-01-03T12:59:47Z")
about this topic，there are some discuss before，for example： and but，the basic question is ，when we install filebeat use rpm follow this page ：Filebeat quick start: installation and configuration | Filebeat Reference… --- ## [Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data)](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/293158)
**Author:** [@sujitk72](https://discuss.elastic.co/u/sujitk72)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 12:35pm UTC](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-please-make-sure-that-multiple-beats-are-not-sharing-the-same-data-path-path-data/293158 "2022-01-03T12:35:53Z")
I have removed 5x and installed 7x that is not working. ./filebeat -e -d "\*" 2021-12-30T02:52:25.982+0530 INFO instance/beat.go:686 Home path: \[/app/filebeat-7.16.2-linux-x86\_64\] Config path: \[/app/filebeat-7.16.2-linu… --- ## [Load index template through logstash](https://discuss.elastic.co/t/load-index-template-through-logstash/293328)
**Author:** [@okopnik](https://discuss.elastic.co/u/okopnik)\ **Replies:** 1\ **Last updated:** [January 3, 2022, 12:17pm UTC](https://discuss.elastic.co/t/load-index-template-through-logstash/293328 "2022-01-03T12:17:19Z")
For a while, I've been shipping events from winlogbeat to logstash and then to elastic. I used my own, very basic template. I cannot figure out how to load the winlogbeat template to elastic. Is it possible to do this wh… --- ## [\_dateparsefailure in ISO8601 date strings](https://discuss.elastic.co/t/dateparsefailure-in-iso8601-date-strings/292799)
**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\ **Replies:** 7\ **Last updated:** [January 3, 2022, 11:40am UTC](https://discuss.elastic.co/t/dateparsefailure-in-iso8601-date-strings/292799 "2022-01-03T11:40:01Z")
I want to pull logs from an mssql server and parse their date strings. unfortunately I can not figure out why it can not parse the date. My filter looks like this: filter { date { match =\> \[ "evtime", "ISO8601" \] tim… [Previous page](https://discuss.elastic.co/latest.md?page=1323) [Next page](https://discuss.elastic.co/latest.md?page=1325)