# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1368

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1369

---

## [Errors/Problems with logstash in docker-compose](https://discuss.elastic.co/t/errors-problems-with-logstash-in-docker-compose/290616)

<div class="topic-metadata">

**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\
**Replies:** 0\
**Last updated:** [December 1, 2021, 12:14am UTC](https://discuss.elastic.co/t/errors-problems-with-logstash-in-docker-compose/290616 "2021-12-01T00:14:22Z")

</div>

Hello, I have problems to up my docker-compose enviroment with logstash docker-compose.yml # cat docker-compose.yml version: '2' services: logstash: image: docker.elastic.co/logstash/logstash:7.10.2 containe…

---

## [Trying to use snapshot and restore for pushing index data from one cluster to another](https://discuss.elastic.co/t/trying-to-use-snapshot-and-restore-for-pushing-index-data-from-one-cluster-to-another/290612)

<div class="topic-metadata">

**Author:** [@milindyedge](https://discuss.elastic.co/u/milindyedge)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 11:49pm UTC](https://discuss.elastic.co/t/trying-to-use-snapshot-and-restore-for-pushing-index-data-from-one-cluster-to-another/290612 "2021-11-30T23:49:19Z")

</div>

I am working on to try and use Snapshot and Restore feature to push index data from one running/live cluster to another live cluster without needing to have any downtime in destination cluster. I have spun up 2 multi-nod…

---

## [Analyzers at Index time and search time are not matching](https://discuss.elastic.co/t/analyzers-at-index-time-and-search-time-are-not-matching/290614)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:48pm UTC](https://discuss.elastic.co/t/analyzers-at-index-time-and-search-time-are-not-matching/290614 "2021-11-30T23:48:15Z")

</div>

Hi, I am trying to use synsets in Elasticsearch to build a pseudo QA System. My mapping file looks something as below: { "settings": { "analysis": { "analyzer": { "synset": { "tokenizer…

---

## [Does Elasticsearch provide highlighting on "copy\_to" field in their newer versions?](https://discuss.elastic.co/t/does-elasticsearch-provide-highlighting-on-copy-to-field-in-their-newer-versions/290611)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:24pm UTC](https://discuss.elastic.co/t/does-elasticsearch-provide-highlighting-on-copy-to-field-in-their-newer-versions/290611 "2021-11-30T23:24:10Z")

</div>

I had used Elasticsearch few years ago(version 6.4.0) and they had no provision to provide highlight the "copy\_to" field. I would like to know if they have this provision now? If yes, how do I avoid the highlighting of …

---

## [AccessDeniedException when taking a snapshot of ES index in local machine](https://discuss.elastic.co/t/accessdeniedexception-when-taking-a-snapshot-of-es-index-in-local-machine/289848)

<div class="topic-metadata">

**Author:** [@milindyedge](https://discuss.elastic.co/u/milindyedge)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 11:15pm UTC](https://discuss.elastic.co/t/accessdeniedexception-when-taking-a-snapshot-of-es-index-in-local-machine/289848 "2021-11-30T23:15:00Z")

</div>

Getting below error when taking snapshot of the index. ----------------------- Error ----------------------- java.lang.IllegalStateException: Unable to access 'path.repo' (/Users/mlyedge/gitrepos/search-query-service/c…

---

## [Disable doc\_values and index for nested type fields](https://discuss.elastic.co/t/disable-doc-values-and-index-for-nested-type-fields/290609)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 10:42pm UTC](https://discuss.elastic.co/t/disable-doc-values-and-index-for-nested-type-fields/290609 "2021-11-30T22:42:40Z")

</div>

I set 'doc\_values' to 'False' on nested fields but it does not work in index creation got stuck. I wonder how to correctly disable 'doc\_values' and 'index' on 'nested' fields? Should I disable it just on the level of the…

---

## [Shipping Postfix logs to ELK stack](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603)

<div class="topic-metadata">

**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 9:54pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603 "2021-11-30T21:54:36Z")

</div>

Hello, Well this is not actually an issue rather query. I have been playing with ELK stack for a few days. I have a working ELK stack running on Ubuntu 20.4. Now, I want to ship mail logs (postfix logs) to my ELK stack…

---

## [Elasticsearch for Two Services](https://discuss.elastic.co/t/elasticsearch-for-two-services/290344)

<div class="topic-metadata">

**Author:** [@Klaus\_Salazar](https://discuss.elastic.co/u/Klaus_Salazar)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 9:44pm UTC](https://discuss.elastic.co/t/elasticsearch-for-two-services/290344 "2021-11-30T21:44:09Z")

</div>

Hi, is possible that Elasticsearch can support two services on the same server, for example i have a wazuh server and this use Elasticsearch but i need install in this same sserver thehive that also use Elasticsearch, is…

---

## [Logstash + Redis](https://discuss.elastic.co/t/logstash-redis/289100)

<div class="topic-metadata">

**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\
**Replies:** 8\
**Last updated:** [November 30, 2021, 8:44pm UTC](https://discuss.elastic.co/t/logstash-redis/289100 "2021-11-30T20:44:38Z")

</div>

Hi guys, I am trying to figure out how to use Logstash with Redis Does anyone know how to configure logstash to insert a specific field in message in Redis ? For example, I have a json message with some fields, like: …

---

## [Nessus XML Parsing Errors and No output](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599)

<div class="topic-metadata">

**Author:** [@James\_Doherty](https://discuss.elastic.co/u/James_Doherty)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 8:19pm UTC](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599 "2021-11-30T20:19:30Z")

</div>

I am having a really difficult time getting my Nessus files to parse correctly if at all. This is my Logstash config: input { file { path =\> "/opt/nessus/\*" mode =\> "read" start\_position =\> "beginning" …

---

## [About the timeout of elasticsearch](https://discuss.elastic.co/t/about-the-timeout-of-elasticsearch/290555)

<div class="topic-metadata">

**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 12:14pm UTC](https://discuss.elastic.co/t/about-the-timeout-of-elasticsearch/290555 "2021-11-30T12:14:10Z")

</div>

When using the Java highlevel API to execute a query, the timeout is specified. The client timeout is abnormal, but the server is still querying. This timeout only be for the client? Or another way of saying that the …

---

## [Some networks were defined but are not used by any service: elastic](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480)

<div class="topic-metadata">

**Author:** [@iruushi\_lol](https://discuss.elastic.co/u/iruushi_lol)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 6:43pm UTC](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480 "2021-11-30T18:43:36Z")

</div>

hey, i have a little problem with elastic, i have a error message : some networks were defined but are not used by any service: elastic, i have install kibana and this error appeared. i want to create ELK server on doc…

---

## [Adding custom search filter throws Unhandled Rejection (TypeError): Cannot read properties of undefined (reading 'totalResults')](https://discuss.elastic.co/t/adding-custom-search-filter-throws-unhandled-rejection-typeerror-cannot-read-properties-of-undefined-reading-totalresults/289865)

<div class="topic-metadata">

**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 8:26pm UTC](https://discuss.elastic.co/t/adding-custom-search-filter-throws-unhandled-rejection-typeerror-cannot-read-properties-of-undefined-reading-totalresults/289865 "2021-11-30T20:26:53Z")

</div>

I have a requirement where i need to show the facets with all the facet values without even making the search. i'm able to capture the userinput and store it in state. when the user is trying to search i'm adding the use…

---

## [A security-enabled local group membership was enumerated -\> wbengine.exe](https://discuss.elastic.co/t/a-security-enabled-local-group-membership-was-enumerated-wbengine-exe/290550)

<div class="topic-metadata">

**Author:** [@Metro20357](https://discuss.elastic.co/u/Metro20357)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/a-security-enabled-local-group-membership-was-enumerated-wbengine-exe/290550 "2021-11-30T11:26:53Z")

</div>

Hi all :slightly\_smiling\_face: I'm starting my adventure with Elstick and please be patient to Me :slight\_smile: I have such a case.I would like to know if there is anything to be afraid of :expressionless: I got the…

---

## [ES 1.7.1 - Node health chcks](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562)

<div class="topic-metadata">

**Author:** [@Deepak\_Soni](https://discuss.elastic.co/u/Deepak_Soni)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 8:23pm UTC](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562 "2021-11-30T20:23:09Z")

</div>

Hello, We have a ES cluster using very old version of Elasticsearch 1.7.1. We are hosting it using EC2. We had a data node failure caused by EBS impairment. This failure was not detected as node failure by the data node …

---

## [Multiple Data Formats in TSVB causes display raw value](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454 "2021-11-30T19:49:45Z")

</div>

Hello, I recently upgraded to elastic stack 7.15 and one of my TSVB visualizations seems to have broke. the problem seems to come from adding a second type of data format to the graph see here the working graph ( using…

---

## [Creating different indexes for different modules from filebeat](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499)

<div class="topic-metadata">

**Author:** [@Lenny](https://discuss.elastic.co/u/Lenny)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 7:47pm UTC](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499 "2021-11-30T19:47:50Z")

</div>

Hello, I'm very new to elk stack so please bear with me. I'm learning Elastic Stack from scratch and I have paid for and taken a few classes, but none of the classes I have gone through seem to go very in depth for the i…

---

## [Heartbeat automatic import dashboards failed](https://discuss.elastic.co/t/heartbeat-automatic-import-dashboards-failed/290572)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 7:25pm UTC](https://discuss.elastic.co/t/heartbeat-automatic-import-dashboards-failed/290572 "2021-11-30T19:25:36Z")

</div>

Hey there, using ELK v.7.15.2 I was trying to import Heartbeat dashboards into Kibana. I set the following parameters: setup.dashboards.enabled: true but I am facing the following error: Exiting: Error importing Ki…

---

## [Heartbeat processors variable in docker-compose file](https://discuss.elastic.co/t/heartbeat-processors-variable-in-docker-compose-file/290582)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:16pm UTC](https://discuss.elastic.co/t/heartbeat-processors-variable-in-docker-compose-file/290582 "2021-11-30T19:16:59Z")

</div>

Hi, is it possible to provide variable required by a specific processor (i.e. add\_observer\_metadata) directly into docker-compose file? Something like: command: \> heartbeat -e -E processors.add\_observer\_meta…

---

## [Mapping conflict](https://discuss.elastic.co/t/mapping-conflict/290571)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 7:16pm UTC](https://discuss.elastic.co/t/mapping-conflict/290571 "2021-11-30T19:16:08Z")

</div>

I have mapping conflict. I know which field it has it. and I know what happen. using 7.14.1 basically one of the field which suppose to be float 0.0 become text "0.0" I scan whole index and updated about 17,000 docume…

---

## [Copy String field to new Integer Field gives error](https://discuss.elastic.co/t/copy-string-field-to-new-integer-field-gives-error/290590)

<div class="topic-metadata">

**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 6:31pm UTC](https://discuss.elastic.co/t/copy-string-field-to-new-integer-field-gives-error/290590 "2021-11-30T18:31:07Z")

</div>

Hello I have a keyword field that it should be a numeric instead. To avoid reindexing all my data I created a new field with the right numeric mapping. I would like to add the old data to the new mapping I am trying th…

---

## [Import and load HTML+Js in Kibana as a visualization panel](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834)

<div class="topic-metadata">

**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 5:03pm UTC](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834 "2021-11-30T17:03:25Z")

</div>

Hi, I have created a JS+HTML package which interacts with Elasticsearch and displays data in the format I want. I just want to display it on my Kibana dashboard. It's okay if it does not interact with other panels, but…

---

## [Canvas pointseries not working with csv](https://discuss.elastic.co/t/canvas-pointseries-not-working-with-csv/290424)

<div class="topic-metadata">

**Author:** [@mmR](https://discuss.elastic.co/u/mmR)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:43pm UTC](https://discuss.elastic.co/t/canvas-pointseries-not-working-with-csv/290424 "2021-11-30T16:43:09Z")

</div>

Hi there, I have a problem with kibana canvas pointseries. one of the example codes do not work. csv "fruit,stock kiwi,10 banana,5" | clog | pointseries color=fruit size=stock | clog | pie | render The first clog…

---

## [Elastic.Apm.Extensions.Hosting doesn't work with net48 if you already have a dependency on Microsoft.Extensions.DependencyInjection version 5.0](https://discuss.elastic.co/t/elastic-apm-extensions-hosting-doesnt-work-with-net48-if-you-already-have-a-dependency-on-microsoft-extensions-dependencyinjection-version-5-0/289403)

<div class="topic-metadata">

**Author:** [@ismaelhamed](https://discuss.elastic.co/u/ismaelhamed)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:34pm UTC](https://discuss.elastic.co/t/elastic-apm-extensions-hosting-doesnt-work-with-net48-if-you-already-have-a-dependency-on-microsoft-extensions-dependencyinjection-version-5-0/289403 "2021-11-30T16:34:47Z")

</div>

I've created a small Gist to illustrate it. But, if you have a net48 app which already have dependencies to Microsoft.Extensions.DependencyInjection version 5.0 and you add Elastic.Apm.Extensions.Hosting you'll get the …

---

## [Best practice for handling \_ids in get and search results](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500)

<div class="topic-metadata">

**Author:** [@davestewart](https://discuss.elastic.co/u/davestewart)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500 "2021-11-30T16:19:52Z")

</div>

Hello, Frontend engineer here, slowly improving at using Elasticsearch. Does anyone have any advice on how to best work with document \_ids, specifically with regards to sending them to the front end after a \_search or \_…

---

## [Attachment Pipeline Support for Old MS Word and Excel Format](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141)

<div class="topic-metadata">

**Author:** [@David\_Chan](https://discuss.elastic.co/u/David_Chan)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 4:14pm UTC](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141 "2021-11-30T16:14:23Z")

</div>

Hi All! I'm uploading a Microsoft Word in .doc format, instead of .docx, to Elasticsearch using attachment pipeline, and I receive the following response. { "error": { "root\_cause": \[ { …

---

## [FScrawler does not scans the \`/tmp/es\`](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:01pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417 "2021-11-30T16:01:32Z")

</div>

Using Debian 10, Elasticsearch7,Java jdk 11 and FScrawler, when I run the crawler, it only index the files in /tmp/es directory at first lunch after first setup of \_settings.yaml. At first initialize, it seems good cau…

---

## [File ingest timestamp question](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 3:25pm UTC](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566 "2021-11-30T15:25:45Z")

</div>

by default when i ingest a single json file kibana present timestamp at the time of the ingesting process. is there a way to use a timestamp record within the json and present it in kibana as the ingesting time?

---

## [HTTP spans doesn't show the full information about the request](https://discuss.elastic.co/t/http-spans-doesnt-show-the-full-information-about-the-request/288908)

<div class="topic-metadata">

**Author:** [@floyola](https://discuss.elastic.co/u/floyola)\
**Replies:** 12\
**Last updated:** [November 30, 2021, 3:04pm UTC](https://discuss.elastic.co/t/http-spans-doesnt-show-the-full-information-about-the-request/288908 "2021-11-30T15:04:38Z")

</div>

Hi! I'm using Opentelemetry + Elastic. The problem that I'm facing is that the http requests child spans doesn't show the full information. The way those spans are shown aren't useful since doesn't indicates which span…

---

## [Elasticsearch multiple connections using python](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458)

<div class="topic-metadata">

**Author:** [@Zouhair](https://discuss.elastic.co/u/Zouhair)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458 "2021-11-30T15:00:50Z")

</div>

Hi, I am using python to connect to my Elasticsearch and execute a search query. I have noticed that the python Elasticsearch module is making 2 connexion to the specified cluster. is that normal ? if not how can i co…

[Previous page](https://discuss.elastic.co/latest.md?page=1367)

[Next page](https://discuss.elastic.co/latest.md?page=1369)
