# Latest **URL:** https://discuss.elastic.co/latest.md?page=1351 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1352 --- ## [What is the correct way to support Global search across multiple document types?](https://discuss.elastic.co/t/what-is-the-correct-way-to-support-global-search-across-multiple-document-types/291388)
**Author:** [@abm\_a](https://discuss.elastic.co/u/abm_a)\ **Replies:** 3\ **Last updated:** [December 11, 2021, 9:23am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-support-global-search-across-multiple-document-types/291388 "2021-12-11T09:23:36Z")
Let's say in a Microservices architecture there are 100s of different entities and search needs to be supported that can look for matches in all those entities. I see a few ways of doing this. Create one index for each… --- ## [Nested Script Sorting - Access all matching nested documents inside script](https://discuss.elastic.co/t/nested-script-sorting-access-all-matching-nested-documents-inside-script/291497)
**Author:** [@Ruan23](https://discuss.elastic.co/u/Ruan23)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 8:26am UTC](https://discuss.elastic.co/t/nested-script-sorting-access-all-matching-nested-documents-inside-script/291497 "2021-12-11T08:26:23Z")
I am trying to find a way to sort root documents, based on the cumulative price of all the matching nested documents. Each vendor is stored as the root document, with all their products stored as nested documents: { … --- ## [Dec 11th, 2021: \[en\] On a road trip with Transform](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532)
**Author:** [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532 "2021-12-11T08:00:01Z")
Are you already tired of hearing Christmas songs? One of the classics is "Driving home for Christmas". The lyrics of that song have not much content, Chris Rea basically tells about a long boring journey in his car drivi… --- ## [MySQL Query Equivalent In JDBC Static](https://discuss.elastic.co/t/mysql-query-equivalent-in-jdbc-static/290347)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [December 11, 2021, 6:28am UTC](https://discuss.elastic.co/t/mysql-query-equivalent-in-jdbc-static/290347 "2021-12-11T06:28:42Z")
hello, I have a query in MySQL and I was wondering what would the equal query in JDBC static with parameters be. Here's my query: select name from my\_table where inet\_aton('1.1.1.1') between ip\_from and ip\_to limit 1;… --- ## [Rolling up Data Streams](https://discuss.elastic.co/t/rolling-up-data-streams/288328)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 7\ **Last updated:** [December 11, 2021, 6:21am UTC](https://discuss.elastic.co/t/rolling-up-data-streams/288328 "2021-12-11T06:21:24Z")
Hi there, I'm curious if making rollups from data streams is recommended/possible? It would be great after rolling over data from my data stream if I could also roll it up into bigger time chunks. Thanks! --- ## [How to connect Elasticsearch correctly in a Kafka connector?](https://discuss.elastic.co/t/how-to-connect-elasticsearch-correctly-in-a-kafka-connector/290949)
**Author:** [@Hongbo-Miao](https://discuss.elastic.co/u/Hongbo-Miao)\ **Replies:** 2\ **Last updated:** [December 11, 2021, 5:29am UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-correctly-in-a-kafka-connector/290949 "2021-12-11T05:29:12Z")
Step 1 - Deploy Elasticsearch in Kubernetes (succeed) I deployed Elasticsearch in Kubernetes by following the tutorial apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: hm-elasticsearch… --- ## [Elasticsearch Scoring Inconsistency](https://discuss.elastic.co/t/elasticsearch-scoring-inconsistency/291488)
**Author:** [@powerte](https://discuss.elastic.co/u/powerte)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-scoring-inconsistency/291488 "2021-12-11T00:30:31Z")
Our API uses Elasticsearch to return results based on scoring (relevance). In our use case, it's important we consistently return documents in the same sort order. We currently see that queries with larger result sets … --- ## [Setting Up Kibana and Elasticsearch with Filebeat Module in ECK](https://discuss.elastic.co/t/setting-up-kibana-and-elasticsearch-with-filebeat-module-in-eck/291478)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 10:30pm UTC](https://discuss.elastic.co/t/setting-up-kibana-and-elasticsearch-with-filebeat-module-in-eck/291478 "2021-12-10T22:30:33Z")
Hi Folks, I'm trying out the K8s Operator (a.k.a. ECK) and so far, so good. However, I'm wondering what the right pattern is for, say, configuring Kibana and Elasticsearch with the Apache module. I know I can do it ad… --- ## [Fleet apply pipelines](https://discuss.elastic.co/t/fleet-apply-pipelines/291288)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 6\ **Last updated:** [December 10, 2021, 10:22pm UTC](https://discuss.elastic.co/t/fleet-apply-pipelines/291288 "2021-12-10T22:22:51Z")
Hello, I have two questions about ingest pipelines on Fleet. I want to enrich a field in an existent integration (IIS) I know its not recommended to directly edit ingest pipelines on the integrations but the advance… --- ## [GROK Filter - Extract Year and Month](https://discuss.elastic.co/t/grok-filter-extract-year-and-month/291470)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 10:01pm UTC](https://discuss.elastic.co/t/grok-filter-extract-year-and-month/291470 "2021-12-10T22:01:45Z")
Hi.... I'm looking for some help on creating a new field based on a grok pattern. Here is the field in question: "last\_assessed\_for\_vulnerabilities": "2021-12-10T07:05:41.154Z" I'm looking to create the following fiel… --- ## [Filter out documents in Discover view that match a set of saved queries/searches?](https://discuss.elastic.co/t/filter-out-documents-in-discover-view-that-match-a-set-of-saved-queries-searches/291339)
**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 9:46pm UTC](https://discuss.elastic.co/t/filter-out-documents-in-discover-view-that-match-a-set-of-saved-queries-searches/291339 "2021-12-10T21:46:09Z")
My team is running a logging stack, where they need to follow up on error events in Kibana. Unfortunately, some errors take a while to get fixed, and some actually never get fixed because they are caused by external eve… --- ## [Error installing logstash codec plugin](https://discuss.elastic.co/t/error-installing-logstash-codec-plugin/291472)
**Author:** [@lucky7s](https://discuss.elastic.co/u/lucky7s)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 9:16pm UTC](https://discuss.elastic.co/t/error-installing-logstash-codec-plugin/291472 "2021-12-10T21:16:59Z")
I downloaded the logstash-codec-leef plugin from github and successfully ran 'build install' using jruby. All rspec tests succeed. When I try to install this plugin using 'sudo logstash-plugin install' I get the followi… --- ## [Filebeat Tomcat module Access logs](https://discuss.elastic.co/t/filebeat-tomcat-module-access-logs/291468)
**Author:** [@searchtool](https://discuss.elastic.co/u/searchtool)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 9:01pm UTC](https://discuss.elastic.co/t/filebeat-tomcat-module-access-logs/291468 "2021-12-10T21:01:11Z")
In response to this previous topic. Documentation mentions tomcat Access logs. This is a module for receiving Apache Tomcat access logs over Syslog or a file. I believe this is not correct and should just be just to… --- ## [In which conditions does bootstrap.password actually work?](https://discuss.elastic.co/t/in-which-conditions-does-bootstrap-password-actually-work/291465)
**Author:** [@Niwa\_7](https://discuss.elastic.co/u/Niwa_7)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 8:29pm UTC](https://discuss.elastic.co/t/in-which-conditions-does-bootstrap-password-actually-work/291465 "2021-12-10T20:29:53Z")
Hi, I am trying to automate Elasticsearch 7.16 cluster deployment, including system user passwords. For that I'd add bootstrap.password to elastic keystore and use that password to set the permanent password for elastic … --- ## [SSL certificate issues after partial cluster migration \[ES 7.14\]](https://discuss.elastic.co/t/ssl-certificate-issues-after-partial-cluster-migration-es-7-14/291463)
**Author:** [@djordan66](https://discuss.elastic.co/u/djordan66)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 7:54pm UTC](https://discuss.elastic.co/t/ssl-certificate-issues-after-partial-cluster-migration-es-7-14/291463 "2021-12-10T19:54:59Z")
Hi all, I'm running into an issue migrating machines in a cluster. Quick breakdown of the setup: We had a cluster running in one site on one network subnet (network a). We are being ushered out of the building, so we b… --- ## [Problems with Logstash Pipeline to ElasticSearch](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936)
**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\ **Replies:** 12\ **Last updated:** [December 10, 2021, 7:51pm UTC](https://discuss.elastic.co/t/problems-with-logstash-pipeline-to-elasticsearch/290936 "2021-12-10T19:51:48Z")
Hi i have some erros to up my logstash service as bellows \[2021-12-03T19:44:46,535\]\[INFO \]\[logstash.javapipeline \]\[KSC\] Pipeline terminated {"pipeline.id"=\>"KSC"} \[2021-12-03T19:44:46,550\]\[ERROR\]\[logstash.agent … --- ## [Heartbeat config files fail when path variables passed](https://discuss.elastic.co/t/heartbeat-config-files-fail-when-path-variables-passed/289890)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 3\ **Last updated:** [December 10, 2021, 6:42pm UTC](https://discuss.elastic.co/t/heartbeat-config-files-fail-when-path-variables-passed/289890 "2021-12-10T18:42:18Z")
In order to get my Kibana https heartbeat working, I had to add the standard ssl blob. I used the same blob that I have in all my .yml's that lets everything successfully (mostly) talk over https: ssl.enabled: true … --- ## [Error retrieving database names from Mongo instance: command listDatabases requires authentication](https://discuss.elastic.co/t/error-retrieving-database-names-from-mongo-instance-command-listdatabases-requires-authentication/290779)
**Author:** [@Abhishek\_Sarkate](https://discuss.elastic.co/u/Abhishek_Sarkate)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:23pm UTC](https://discuss.elastic.co/t/error-retrieving-database-names-from-mongo-instance-command-listdatabases-requires-authentication/290779 "2021-12-10T18:23:16Z")
I am trying to integrate elastic-agent in MongoDB replica-set and show mongo metrics on kibana , while trying with below code on mongo.conf security: authorization: enabled keyFile: /etc/keyfile MongoDb version u… --- ## [Configure logstash to receive different csv files with different fields](https://discuss.elastic.co/t/configure-logstash-to-receive-different-csv-files-with-different-fields/291451)
**Author:** [@sanchez](https://discuss.elastic.co/u/sanchez)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:16pm UTC](https://discuss.elastic.co/t/configure-logstash-to-receive-different-csv-files-with-different-fields/291451 "2021-12-10T18:16:08Z")
Hello good mornig for everyone I'm a beginner at Elasticsearch, Kibana, and Logstash I am trying to configure logstash to receive different csv files with different fields, how can I configure logstash to be able to de… --- ## [Log4j Critical Vulnerability](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 6:04pm UTC](https://discuss.elastic.co/t/log4j-critical-vulnerability/291452 "2021-12-10T18:04:28Z")
Are there any recommendations from Elastic regarding NVD - CVE-2021-44228), a very serious log4j vulnerability announced today? --- ## [State metric for a Java Tomcat process always reporting as "sleeping"](https://discuss.elastic.co/t/state-metric-for-a-java-tomcat-process-always-reporting-as-sleeping/291077)
**Author:** [@Kevin\_Brunette](https://discuss.elastic.co/u/Kevin_Brunette)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:50pm UTC](https://discuss.elastic.co/t/state-metric-for-a-java-tomcat-process-always-reporting-as-sleeping/291077 "2021-12-10T17:50:20Z")
I'm running metricbeat oss 7.14.0 on Ubuntu 18.04.6 (Bionic Beaver) LTS and attempting to tell if my Java Tomcat is running or down however; the "state" of the process always reports as "sleeping" regardless of whether t… --- ## [Rolling upgrade from 7.8.0-OSS to 7.15.2](https://discuss.elastic.co/t/rolling-upgrade-from-7-8-0-oss-to-7-15-2/291448)
**Author:** [@s.moran](https://discuss.elastic.co/u/s.moran)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 5:50pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-7-8-0-oss-to-7-15-2/291448 "2021-12-10T17:50:00Z")
We are trying to upgrade our 7.8.0-OSS cluster to 7.15.2 using an automated deployment method where all new nodes are added to the cluster before the old nodes are taken down 1-by-1. We have noticed that during deployme… --- ## [How to hide all the 'getting started/add data/' links](https://discuss.elastic.co/t/how-to-hide-all-the-getting-started-add-data-links/291285)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:25pm UTC](https://discuss.elastic.co/t/how-to-hide-all-the-getting-started-add-data-links/291285 "2021-12-10T17:25:10Z")
just trying to configure the system (kibana/elastic) for endusers. how can I avoid all the links to 'add data', links to '/home/app#' and everything else that is nice to have in a 'how to get started' mode. but I am … --- ## [EC2 cURL localhost:9200 - security\_exception](https://discuss.elastic.co/t/ec2-curl-localhost-9200-security-exception/291441)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:21pm UTC](https://discuss.elastic.co/t/ec2-curl-localhost-9200-security-exception/291441 "2021-12-10T17:21:37Z")
What is the simplest way to enable the health check of Elasticsearch? Do I have to set up AWS authentication, or can I bypass it for troubleshooting? Connected to an AWS EC2 instance using a .pem file. Elasticsearch is… --- ## [Rollup feature can't create job - Index pattern must match indices that contain time fields](https://discuss.elastic.co/t/rollup-feature-cant-create-job-index-pattern-must-match-indices-that-contain-time-fields/291436)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 5:07pm UTC](https://discuss.elastic.co/t/rollup-feature-cant-create-job-index-pattern-must-match-indices-that-contain-time-fields/291436 "2021-12-10T17:07:16Z")
Hi, I was exploring the rollup data feature, but i m not able to create a job via kibana UI, but i get the following error: Nevertheless i have date fields in the indice. Any ideas? Thanks, --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291397)
**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 4:53pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/291397 "2021-12-10T16:53:15Z")
Hi, i'm try to parse the ngfw event with logstash in tcp port 5000 to Elasticsearch but the logstash-plain.log always said: "status"=\>400, "error"=\>{"type"=\>"ma … --- ## [ECK is not allowing to create Loadbalancer service](https://discuss.elastic.co/t/eck-is-not-allowing-to-create-loadbalancer-service/291408)
**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 3:52pm UTC](https://discuss.elastic.co/t/eck-is-not-allowing-to-create-loadbalancer-service/291408 "2021-12-10T15:52:36Z")
I have created the ECK cluster with different nodesets and trying to access the coordinating nodeset using a service loadbalancer i have followed below to create a type of Service type Loadbalancer. But it is giving … --- ## [Discrepancy between CPU usage shown in Kibana vs AWS cloud watch metrics](https://discuss.elastic.co/t/discrepancy-between-cpu-usage-shown-in-kibana-vs-aws-cloud-watch-metrics/291346)
**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\ **Replies:** 5\ **Last updated:** [December 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/discrepancy-between-cpu-usage-shown-in-kibana-vs-aws-cloud-watch-metrics/291346 "2021-12-10T15:24:49Z")
I run Elasticsearch on EC2 instances launched in AWS. I use version 7.11.2. I've been load testing searches and I see CPU spikes up to 100% on data nodes when I look in Kibana. However, in AWS cloud watch I never see CPU… --- ## [Encountered a retryable error (will retry with exponential backoff) {:code=\>413,](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/291417)
**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 2:36pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-413/291417 "2021-12-10T14:36:20Z")
Hi there i got this error in my logstash while sending logs to the Elasticsearch cluster.When i restarted the logstash service it got fix. But after 1-2 days it will happen recursively. \[2021-12-10T10:17:52,948\]\[ERROR\]… --- ## [Logs not being sent to logstash from .net application](https://discuss.elastic.co/t/logs-not-being-sent-to-logstash-from-net-application/291401)
**Author:** [@Murad000](https://discuss.elastic.co/u/Murad000)\ **Replies:** 1\ **Last updated:** [December 10, 2021, 2:31pm UTC](https://discuss.elastic.co/t/logs-not-being-sent-to-logstash-from-net-application/291401 "2021-12-10T14:31:48Z")
Hello, I launched elk stack on docker but logstash isn't receiving any logs from my application. I cloned this repo,added RUN logstash-plugin install logstash-input-http to the logstash's Dockerfile and changed the con… [Previous page](https://discuss.elastic.co/latest.md?page=1350) [Next page](https://discuss.elastic.co/latest.md?page=1352)