# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1361

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1362

---

## [Indexing of empty arrays affecting search results](https://discuss.elastic.co/t/indexing-of-empty-arrays-affecting-search-results/291006)

<div class="topic-metadata">

**Author:** [@michael-jaxsta](https://discuss.elastic.co/u/michael-jaxsta)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 4:20am UTC](https://discuss.elastic.co/t/indexing-of-empty-arrays-affecting-search-results/291006 "2021-12-06T04:20:46Z")

</div>

Hi all, We are using Elasticsearch for searching content on our website which is primarily musician names. The primary search field is "name" but we also have a number of secondary index fields included in the search s…

---

## [MySQL integration does not ingest performance metrics](https://discuss.elastic.co/t/mysql-integration-does-not-ingest-performance-metrics/291003)

<div class="topic-metadata">

**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 3:56am UTC](https://discuss.elastic.co/t/mysql-integration-does-not-ingest-performance-metrics/291003 "2021-12-06T03:56:34Z")

</div>

Hi, We noticed that the MySQL performance metricset is not ingesting any data. If we refer to the Fleet policy that we have for MySQL integration, we noticed that the host details are missing for mysql.performance metr…

---

## [How to create birds eye visualization in kibana?](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628)

<div class="topic-metadata">

**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\
**Replies:** 6\
**Last updated:** [December 6, 2021, 3:51am UTC](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628 "2021-12-06T03:51:35Z")

</div>

Hi Team, I want to create a similar visualization in kibana dashboard which kind of visualization should I use? I am trying to create a visualization where users could see pod distribution across the nodes. I want s…

---

## [Elastic Cloud Fills up to infinity](https://discuss.elastic.co/t/elastic-cloud-fills-up-to-infinity/290999)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 2\
**Last updated:** [December 6, 2021, 3:34am UTC](https://discuss.elastic.co/t/elastic-cloud-fills-up-to-infinity/290999 "2021-12-06T03:34:27Z")

</div>

Hello, I created an instance in Elastic Cloud, and I used Fleet to install Metricbeat, Endpoint Security, etc. My instance started 1GB of RAM, and was costing me $40 a month or so. Now, it is costing me about $300 a mon…

---

## [Change certificate for up and running cluster](https://discuss.elastic.co/t/change-certificate-for-up-and-running-cluster/290976)

<div class="topic-metadata">

**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 3:18am UTC](https://discuss.elastic.co/t/change-certificate-for-up-and-running-cluster/290976 "2021-12-06T03:18:15Z")

</div>

hello, i want to change/update the whole cluster nodes certificates (because I've lost the ca.key so i can't generate a new certificate for the new node), for that i generated new certs for the cluster nodes using : /b…

---

## [Elasticsearch reindex search\_context\_missing\_exception](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890)

<div class="topic-metadata">

**Author:** [@sathish-ykone](https://discuss.elastic.co/u/sathish-ykone)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 2:08am UTC](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890 "2021-12-06T02:08:15Z")

</div>

We have 30 million entries in our current index, and we're getting a search context missing exception problem during reindexing. Can somebody assist me with this? error "type": "search\_phase\_execution\_exception", "reas…

---

## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/290743)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 2:05am UTC](https://discuss.elastic.co/t/illegal-argument-exception/290743 "2021-12-06T02:05:39Z")

</div>

Hi, I have problem with elastic error illegal\_argument\_exception because I changed field from text to number. However only new indexes have number field, old still have text field - I guess. "type": "illegal\_argument\_ex…

---

## [Specifications required](https://discuss.elastic.co/t/specifications-required/290778)

<div class="topic-metadata">

**Author:** [@Ajinkya\_Yadav](https://discuss.elastic.co/u/Ajinkya_Yadav)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 2:01am UTC](https://discuss.elastic.co/t/specifications-required/290778 "2021-12-06T02:01:03Z")

</div>

Hello guys, I'm new to Elasticsearch, can anyone please tell me what are the minimum spec's for Elastic Endpoint? Thanks.

---

## [Mapping definition has unsupported parameters: \[norms : false\]](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-norms-false/290911)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 1:50am UTC](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-norms-false/290911 "2021-12-06T01:50:58Z")

</div>

I am trying to disable norms in Elasticsearch 6.8 but getting the error: elasticsearch.exceptions.RequestError: TransportError(400, 'mapper\_parsing\_exception', 'Mapping definition for \[AC\] has unsupported parameters: …

---

## [Unable to remove Root Node](https://discuss.elastic.co/t/unable-to-remove-root-node/290978)

<div class="topic-metadata">

**Author:** [@salim-buet03](https://discuss.elastic.co/u/salim-buet03)\
**Replies:** 3\
**Last updated:** [December 6, 2021, 1:49am UTC](https://discuss.elastic.co/t/unable-to-remove-root-node/290978 "2021-12-06T01:49:14Z")

</div>

I have 2 nodes cluster, both are mastered enabled. node-1 cluster.name: test node.name: "node-1" node.master: true node.data: true path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch http.port: 8200 net…

---

## [Need help to create setup.template.name and setup.template.pattern:](https://discuss.elastic.co/t/need-help-to-create-setup-template-name-and-setup-template-pattern/290975)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 1:40am UTC](https://discuss.elastic.co/t/need-help-to-create-setup-template-name-and-setup-template-pattern/290975 "2021-12-06T01:40:39Z")

</div>

Hello team, I Need help to create setup.template.name and setup.template.pattern I have setup filebeat and rename index name. Can you please help me to setup these two parameter

---

## [Need to apply ILM policy on existing index](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290984)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [December 5, 2021, 11:49pm UTC](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290984 "2021-12-05T23:49:44Z")

</div>

Hello team, I have created one index kafka-facebook and missed to apply ILM policies. Now all data is going into S3 bucket like: partials:kafka-facebook-2021-12-04-000035 The above index has almost 500 GB of data. ca…

---

## [Unit elasticsearch.service has failed to start on centos 7](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224)

<div class="topic-metadata">

**Author:** [@dan\_bau](https://discuss.elastic.co/u/dan_bau)\
**Replies:** 10\
**Last updated:** [December 5, 2021, 11:49pm UTC](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224 "2021-12-05T23:49:10Z")

</div>

Can you please help? rpm -qa|grep elasticsearch elasticsearch-7.15.2-1.x86\_64 Nov 25 23:20:01 vps.ovh.net crond\[2260\]: WARNING: RunAsUser for MSP ignored, check group ids (egid=48, want=51) Nov 25 23:20:01 vps.ovh.net …

---

## [Need to apply ILM policy on existing index](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290987)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [December 5, 2021, 11:42pm UTC](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290987 "2021-12-05T23:42:46Z")

</div>

Hello team, I have created one index kafka-facebook and missed to apply ILM policies. Now all data is going into S3 bucket like: partials:kafka-facebook-2021-12-04-000035 The above index has almost 500 GB of data. can…

---

## [ES 7.14: can not get API key to work](https://discuss.elastic.co/t/es-7-14-can-not-get-api-key-to-work/290969)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 5, 2021, 6:26pm UTC](https://discuss.elastic.co/t/es-7-14-can-not-get-api-key-to-work/290969 "2021-12-05T18:26:57Z")

</div>

I am trying to use an API key to authenticate using the API: first the code then the stack trace... $logger.info "Try connecting to ES #{params}" if $logger begin @client = Elasticsearch::Client.ne…

---

## [Logstash cannot Index Log Files into Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-index-log-files-into-elasticsearch/290408)

<div class="topic-metadata">

**Author:** [@Amol](https://discuss.elastic.co/u/Amol)\
**Replies:** 3\
**Last updated:** [December 5, 2021, 12:20pm UTC](https://discuss.elastic.co/t/logstash-cannot-index-log-files-into-elasticsearch/290408 "2021-12-05T12:20:06Z")

</div>

Could anyone please help, as i have a logstash config file which need to pick log file when it is updated with new logs. once logstash is started it is working fine, but next day the log file is updated but the data is n…

---

## [ElasticSearch Accessing Nested Documents in a Query Script - Null Pointer Exception](https://discuss.elastic.co/t/elasticsearch-accessing-nested-documents-in-a-query-script-null-pointer-exception/290980)

<div class="topic-metadata">

**Author:** [@abhirathmahipal](https://discuss.elastic.co/u/abhirathmahipal)\
**Replies:** 0\
**Last updated:** [December 5, 2021, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-accessing-nested-documents-in-a-query-script-null-pointer-exception/290980 "2021-12-05T10:43:50Z")

</div>

Gist: Trying to write a custom filter on nested documents using painless. Want to write error checks when there are no nested documents to surpass null\_pointer\_exception I have a mapping as such (simplified) { "video…

---

## [Generation new ssl keys for a new node](https://discuss.elastic.co/t/generation-new-ssl-keys-for-a-new-node/289312)

<div class="topic-metadata">

**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\
**Replies:** 4\
**Last updated:** [November 18, 2021, 11:27pm UTC](https://discuss.elastic.co/t/generation-new-ssl-keys-for-a-new-node/289312 "2021-11-18T23:27:21Z")

</div>

hello , i have a cluster of 3 nodes and i want to add a new node to the cluster, for that i need to regenerate a new certificate for this new node; i generate the first certs using this command: /usr/share/elasticsearc…

---

## [Search multiple indices](https://discuss.elastic.co/t/search-multiple-indices/290972)

<div class="topic-metadata">

**Author:** [@Alireza\_Niary](https://discuss.elastic.co/u/Alireza_Niary)\
**Replies:** 3\
**Last updated:** [December 5, 2021, 8:50am UTC](https://discuss.elastic.co/t/search-multiple-indices/290972 "2021-12-05T08:50:22Z")

</div>

Is search on multiple indices asynchronous from each other? if I use "GET /my-index-1,my-index-2/\_search" dose Elasticsearch, search both indices simultaneous or in turn? I'm assuming that there is one node and single…

---

## [Dec 5th, 2021: \[ko\] Elastic Agent, 어떻게 사용하는건가요?](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012)

<div class="topic-metadata">

**Author:** [@JongminKim](https://discuss.elastic.co/u/JongminKim)\
**Replies:** 0\
**Last updated:** [December 5, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012 "2021-12-05T08:00:17Z")

</div>

소문만 무성하고 얼굴을 잘 보여주지 않았던 Elastic Agent 가 7.8 버전에서 드디어 출시가 되었고 GA 가 되었습니다. 그런데 아직 많이들 사용 해 보지 않으셨죠? 그래서, 오늘 한번 Elastic Agent 를 어떻게 사용하는지 한번 살펴보려고 합니다. 예전에는 Elasticsearch 로 데이터 수집을 위해서는 Logstash 그리고 Beats 를 활용했습니다. 물론 지금도…

---

## [Is there a way to filter by date and not by date time in Kibana Lens?](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387)

<div class="topic-metadata">

**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\
**Replies:** 8\
**Last updated:** [December 5, 2021, 7:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387 "2021-12-05T07:08:03Z")

</div>

I've recently tried to use kibana lens and realised that my time filter in control is filtering by date time. Is there a way to make it filter by date instead? what I plan to obtain is something similar to this:

---

## [Would having multiple ports/connections improve performance in a cluster](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959)

<div class="topic-metadata">

**Author:** [@soundof](https://discuss.elastic.co/u/soundof)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 8:28pm UTC](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959 "2021-12-04T20:28:35Z")

</div>

Hi Im new to Elasticsearch and setting up a cluster with 3 nodes. Each server/node has multiple ethernet ports on the networking adapter. Would configuring the Elasticsearch node to have 2 IPs/ports increase performanc…

---

## [I need clear instruction to remove endpoint as it destruc my system](https://discuss.elastic.co/t/i-need-clear-instruction-to-remove-endpoint-as-it-destruc-my-system/290906)

<div class="topic-metadata">

**Author:** [@cthibault](https://discuss.elastic.co/u/cthibault)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 6:31pm UTC](https://discuss.elastic.co/t/i-need-clear-instruction-to-remove-endpoint-as-it-destruc-my-system/290906 "2021-12-04T18:31:39Z")

</div>

ELK is destroing all the computer in my office by using all the drive space, all the RAM et all the bandwidth. I need to remove this scrap as soon as possible. HELP...

---

## [Scatter plot which uses data source from Enhanced table on Dashboard](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 1\
**Last updated:** [December 4, 2021, 6:04pm UTC](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871 "2021-12-04T18:04:37Z")

</div>

Hi, I have Enhanced table plugin installed and I created pivot table which is visible on Dashboard. Underneath, I would like to have scatter plot which would be using data source not from index but from this pivot table…

---

## [FATAL Error: Unknown configuration key(s): "action.auto\_create\_index"](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850)

<div class="topic-metadata">

**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 6:01pm UTC](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850 "2021-12-04T18:01:32Z")

</div>

Hi, i have this message when i start the service kibana: my kibana.yml file: # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 elasticsearch.hosts: - https://elk0…

---

## [Debugger works for everything but plugin](https://discuss.elastic.co/t/debugger-works-for-everything-but-plugin/290962)

<div class="topic-metadata">

**Author:** [@devin244](https://discuss.elastic.co/u/devin244)\
**Replies:** 0\
**Last updated:** [December 4, 2021, 5:57pm UTC](https://discuss.elastic.co/t/debugger-works-for-everything-but-plugin/290962 "2021-12-04T17:57:45Z")

</div>

I have set up debugging in all Kibana source code so that breakpoints work. I cannot get breakpoints working for my plugin code though. Here's what I've done so far. Cloned Kibana Got debugging working after huge effor…

---

## [Kibana and REST API output](https://discuss.elastic.co/t/kibana-and-rest-api-output/290950)

<div class="topic-metadata">

**Author:** [@rimvydukas](https://discuss.elastic.co/u/rimvydukas)\
**Replies:** 1\
**Last updated:** [December 4, 2021, 3:21pm UTC](https://discuss.elastic.co/t/kibana-and-rest-api-output/290950 "2021-12-04T15:21:25Z")

</div>

Hi, I'm complete newbie with Elasticsearch, so sorry for maybe simple questions:) My problem. I'm trying to retrieve index patterns via Kibana's REST API. I'm trying to use the following command: curl -X GET "localhost…

---

## [How to add country name field based on mobile number using Mobile\_Number using logstash](https://discuss.elastic.co/t/how-to-add-country-name-field-based-on-mobile-number-using-mobile-number-using-logstash/289588)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 3:08pm UTC](https://discuss.elastic.co/t/how-to-add-country-name-field-based-on-mobile-number-using-mobile-number-using-logstash/289588 "2021-12-04T15:08:51Z")

</div>

Hi, I am having logs in txt file contains fields below. I want to extract country code from mobile number and create (translate) into new field called country. I checked with translate filter but not getting how to ext…

---

## [Building Pie chart in kibana](https://discuss.elastic.co/t/building-pie-chart-in-kibana/290150)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 6\
**Last updated:** [December 4, 2021, 2:26pm UTC](https://discuss.elastic.co/t/building-pie-chart-in-kibana/290150 "2021-12-04T14:26:21Z")

</div>

Hi, I have tried build pie chart on field such as "STAT" and "Sender\_", but some logs contain only the "STAT" field and some logs contain "Sender\_id". I tried building viz on two parameters but it's not working through …

---

## [Elascicsearch was running in mbp m1 pro much slower than intel platform](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952)

<div class="topic-metadata">

**Author:** [@wangxueyuan](https://discuss.elastic.co/u/wangxueyuan)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 1:05pm UTC](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952 "2021-12-04T13:05:50Z")

</div>

I just got a mbp m1 pro .And I found that using es 7.15.2 , in my think pad I just can complete my procedure in just 3 minuts . The contents of procedure is just writing index data to es.But I installed es 7.15.2 and run…

[Previous page](https://discuss.elastic.co/latest.md?page=1360)

[Next page](https://discuss.elastic.co/latest.md?page=1362)
