# Latest **URL:** https://discuss.elastic.co/latest.md?page=1384 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1385 --- ## [Accessing gzipped response with RestClient or RestHighLevelClient](https://discuss.elastic.co/t/accessing-gzipped-response-with-restclient-or-resthighlevelclient/289538)
**Author:** [@soren.nohr](https://discuss.elastic.co/u/soren.nohr)\ **Replies:** 3\ **Last updated:** [November 18, 2021, 9:01am UTC](https://discuss.elastic.co/t/accessing-gzipped-response-with-restclient-or-resthighlevelclient/289538 "2021-11-18T09:01:39Z")
Hi All, I am using the Java RestClient to do a search against an Elasticsearch cluster, requesting a gzipped response by setting the 'Accept-Encoding' header to 'gzip'. Using Wireshark I can see that the Elastic cluster… --- ## [Retrieve each filter response in one result](https://discuss.elastic.co/t/retrieve-each-filter-response-in-one-result/289467)
**Author:** [@uedemir](https://discuss.elastic.co/u/uedemir)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 8:36am UTC](https://discuss.elastic.co/t/retrieve-each-filter-response-in-one-result/289467 "2021-11-18T08:36:37Z")
Hi, Is it possible to combine three or more filter query with each wished size and get ids of document separately in result? For example; size parameter in query is 100 and I need to get 10 documents from first of my f… --- ## [Problems in outputting files to shared unit with Logstash in Windows](https://discuss.elastic.co/t/problems-in-outputting-files-to-shared-unit-with-logstash-in-windows/289423)
**Author:** [@rrodrmal\_everis](https://discuss.elastic.co/u/rrodrmal_everis)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 8:05am UTC](https://discuss.elastic.co/t/problems-in-outputting-files-to-shared-unit-with-logstash-in-windows/289423 "2021-11-18T08:05:51Z")
Hello all: First publication in this forum for me. I hope I'm not breaking a bunch of guidelines. We have a Logstash 7.11.1 installed over a Windows Server 2016 ingesting log files via filebeat. As output, both an Ela… --- ## [Could not index event to Elasticsearch - object mapping for customersegment\_age\_classe tried to parse field customersegment\_age\_classe as object, but found a concrete value](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-object-mapping-for-customersegment-age-classe-tried-to-parse-field-customersegment-age-classe-as-object-but-found-a-concrete-value/289433)
**Author:** [@Maksonsse](https://discuss.elastic.co/u/Maksonsse)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 7:45am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-object-mapping-for-customersegment-age-classe-tried-to-parse-field-customersegment-age-classe-as-object-but-found-a-concrete-value/289433 "2021-11-18T07:45:19Z")
Hello everyone and thanks for passing by ! I'm actually trying to import data into Elasticsearch (with ELK stack) from a view in a dockerized mysql with Logstash but i'm failing miserably for some weeks now as i'm a com… --- ## [How to re configure a data stream for lowering the usage of shards](https://discuss.elastic.co/t/how-to-re-configure-a-data-stream-for-lowering-the-usage-of-shards/289530)
**Author:** [@vijayebpzr](https://discuss.elastic.co/u/vijayebpzr)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 7:13am UTC](https://discuss.elastic.co/t/how-to-re-configure-a-data-stream-for-lowering-the-usage-of-shards/289530 "2021-11-18T07:13:36Z")
I have a data stream which is associated with an index template which create 3 shards per index daily. This is a time based indices which creates new index daily. We are approaching the maximum number of allowed shards i… --- ## [X-pack for "read only accounts" in Kibana](https://discuss.elastic.co/t/x-pack-for-read-only-accounts-in-kibana/289429)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 7:11am UTC](https://discuss.elastic.co/t/x-pack-for-read-only-accounts-in-kibana/289429 "2021-11-18T07:11:06Z")
Hi, at the moment we only use Kibana with accounts that can create, edit and view dashboards and visualizations. Can we use x-pack, for example, to create additional users who can only read certain dashboards / visualiz… --- ## [Urgent Help Required :: Need to sync specific Feilds from three different indexes to single Index using Logstash pipeline](https://discuss.elastic.co/t/urgent-help-required-need-to-sync-specific-feilds-from-three-different-indexes-to-single-index-using-logstash-pipeline/289535)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 6:59am UTC](https://discuss.elastic.co/t/urgent-help-required-need-to-sync-specific-feilds-from-three-different-indexes-to-single-index-using-logstash-pipeline/289535 "2021-11-18T06:59:20Z")
Hi, I am trying to sync specific fields from three different index in to single index using Logstash pipeline. Am using Elasticsearch as input, filter and output plugins, But while creating Pipeline am getting error(No … --- ## [How to sync specific fields based on common values of three different collections in MongoDB to ElasticSearch using logstash pipeline](https://discuss.elastic.co/t/how-to-sync-specific-fields-based-on-common-values-of-three-different-collections-in-mongodb-to-elasticsearch-using-logstash-pipeline/289532)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 6:42am UTC](https://discuss.elastic.co/t/how-to-sync-specific-fields-based-on-common-values-of-three-different-collections-in-mongodb-to-elasticsearch-using-logstash-pipeline/289532 "2021-11-18T06:42:54Z")
In Logstash Pipeline we are using mongoDB as input plugin and we are using three different collection to sync specific Fields in Elasticsearch Index based on common values of different collections. But How to sync specif… --- ## [Reindex api request failing on Elasticsearch 6.6](https://discuss.elastic.co/t/reindex-api-request-failing-on-elasticsearch-6-6/289428)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 5:09am UTC](https://discuss.elastic.co/t/reindex-api-request-failing-on-elasticsearch-6-6/289428 "2021-11-18T05:09:33Z")
Facing issue while running reindex api on ES v6.6. Please refer below shared output: Command: $ curl -XPOST http://\:9200/\_reindex?pretty -H 'Content-Type: application/json' -d' { "source": { "in… --- ## [Logstashのkvフィルターについて](https://discuss.elastic.co/t/logstash-kv/289523)
**Author:** [@a-naga](https://discuss.elastic.co/u/a-naga)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 4:08am UTC](https://discuss.elastic.co/t/logstash-kv/289523 "2021-11-18T04:08:47Z")
logstashで以下のようなフォーマットのログを取り込もうとしています。 {column1=1 column2=MESSAGE XXXXX column3=10.xxx.xx.xx column4=test1 column5=test2} 以下のようにkvフィルターを使用していますが、 「column2」が「"column2" : "MESSAGE"」になります。 kv { source =\> "message" … --- ## [Overriding filebeat palo alto modules @timestamp](https://discuss.elastic.co/t/overriding-filebeat-palo-alto-modules-timestamp/289436)
**Author:** [@Sirrah](https://discuss.elastic.co/u/Sirrah)\ **Replies:** 5\ **Last updated:** [November 18, 2021, 3:20am UTC](https://discuss.elastic.co/t/overriding-filebeat-palo-alto-modules-timestamp/289436 "2021-11-18T03:20:56Z")
Recently, I set up a filebeat to receive palo alto and sophos data. Filebeat module parsed the data as the timestamp. Instead of using the timestamp in log, i want to use the received time as @timestamp. Does there any… --- ## [Ingest mixed container logs with text and JSON \[ECK\]\[filebeat\]](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-eck-filebeat/289464)
**Author:** [@Sven\_Eliasson](https://discuss.elastic.co/u/Sven_Eliasson)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 2:54am UTC](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-eck-filebeat/289464 "2021-11-18T02:54:06Z")
Hi, I'm trying to digest logs with Filebeat on our Kubernetes cluster which is using ECK on Kubernetes. We are migrating logs to a JSON format, but many legacy or 3rd party containers use plain logs. So we need to suppo… --- ## [Unable to see DNS queries though it shows count](https://discuss.elastic.co/t/unable-to-see-dns-queries-though-it-shows-count/289388)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 2:53am UTC](https://discuss.elastic.co/t/unable-to-see-dns-queries-though-it-shows-count/289388 "2021-11-18T02:53:54Z")
Hi Team, My elastic stack version is 7.15 and have windows AD which has DNS roles on it. I configured the SIEM APP and enrolled the server with elastic agent and fleet server. However in Security App/Kibana under Networ… --- ## [Can we use elasticsearch queries in app search?](https://discuss.elastic.co/t/can-we-use-elasticsearch-queries-in-app-search/289239)
**Author:** [@ayushnvijay](https://discuss.elastic.co/u/ayushnvijay)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 1:54am UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-queries-in-app-search/289239 "2021-11-18T01:54:12Z")
I have been working on a search system and was impressed by search ui that i gave app search a shot over Elasticsearch. Now I wanted to query data the way I would do for elasticsearch but kept getting key error. Are app … --- ## [Mssql server data -\> elasticsearch](https://discuss.elastic.co/t/mssql-server-data-elasticsearch/289517)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 1:03am UTC](https://discuss.elastic.co/t/mssql-server-data-elasticsearch/289517 "2021-11-18T01:03:58Z")
We currently have an application that sends it's logs to an mssql server database. I'd like to pull those logs into Elasticsearch directly from sql server similar using filebeat to import file based logs. I've looked a… --- ## [Detection Rule Export API not working](https://discuss.elastic.co/t/detection-rule-export-api-not-working/287548)
**Author:** [@tejas.tech](https://discuss.elastic.co/u/tejas.tech)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 12:44am UTC](https://discuss.elastic.co/t/detection-rule-export-api-not-working/287548 "2021-11-18T00:44:23Z")
I would like to export all detection rule with details, and I did check with "Kibana IP: port/api/detection\_engine/rules/\_export", when I check with this I am getting 404 error with not found. Could anyone please help … --- ## [Does an index pattern have a limit to the amount of fields it contains?](https://discuss.elastic.co/t/does-an-index-pattern-have-a-limit-to-the-amount-of-fields-it-contains/289434)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 11:26pm UTC](https://discuss.elastic.co/t/does-an-index-pattern-have-a-limit-to-the-amount-of-fields-it-contains/289434 "2021-11-17T23:26:44Z")
Hi, We have an index pattern that is currently at 1008 fields and when trying to add a new index that would fall into this index pattern the extra fields are not appearing on the index pattern. I have had a look and al… --- ## [Get IP and MAC of host](https://discuss.elastic.co/t/get-ip-and-mac-of-host/289457)
**Author:** [@Markus\_Lindner](https://discuss.elastic.co/u/Markus_Lindner)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 1:20pm UTC](https://discuss.elastic.co/t/get-ip-and-mac-of-host/289457 "2021-11-17T13:20:32Z")
Hey guys, I want to monitor the hosts in my network and track the ip's and mac's. I use a metricbeat with "add\_host\_metadata" and "add\_cloud\_metadata" processors. Now i can see all IP's and Mac's of the host, but they … --- ## [How to avoid memory leak on creating role in huge elastic instance](https://discuss.elastic.co/t/how-to-avoid-memory-leak-on-creating-role-in-huge-elastic-instance/289426)
**Author:** [@Hamidreza\_Ahmadinia](https://discuss.elastic.co/u/Hamidreza_Ahmadinia)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 11:24pm UTC](https://discuss.elastic.co/t/how-to-avoid-memory-leak-on-creating-role-in-huge-elastic-instance/289426 "2021-11-17T23:24:10Z")
hi I have an Elasticsearch instane with 25,612,514,771 documents When i create role in kibana, unassigned\_shards inceases and status turn to yellow. for about 10 minutes Search Latency increases too. --- ## [When do I use unique: true?](https://discuss.elastic.co/t/when-do-i-use-unique-true/289492)
**Author:** [@Laszlo\_Stahorszki](https://discuss.elastic.co/u/Laszlo_Stahorszki)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 6:10pm UTC](https://discuss.elastic.co/t/when-do-i-use-unique-true/289492 "2021-11-17T18:10:15Z")
Using kubernetes module for my metricbeat config, deployed as DaemonSet. metricbeat.config.modules: # Mounted \`metricbeat-daemonset-modules\` configmap: path: ${path.config}/modules.yml # Reload module config… --- ## [Kibana kql suggestions not working](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 10\ **Last updated:** [November 17, 2021, 10:32pm UTC](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240 "2021-11-17T22:32:35Z")
Do I need to configure anything to make kibana kql filtering suggestions working? --- ## ['logging-and-metrics' system owned cluster unhealthy with Kibana instance deployment failing](https://discuss.elastic.co/t/logging-and-metrics-system-owned-cluster-unhealthy-with-kibana-instance-deployment-failing/289505)
**Author:** [@A\_I](https://discuss.elastic.co/u/A_I)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 9:02pm UTC](https://discuss.elastic.co/t/logging-and-metrics-system-owned-cluster-unhealthy-with-kibana-instance-deployment-failing/289505 "2021-11-17T21:02:36Z")
I am unfortunately not able to provide logs at this time however guidance on a starting point would be helpful. We recently needed to increase the capacity of our logging-and-metrics cluster, the advice was to change sy… --- ## [How to show all the values for facet for Select input](https://discuss.elastic.co/t/how-to-show-all-the-values-for-facet-for-select-input/289122)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 3\ **Last updated:** [November 17, 2021, 9:02pm UTC](https://discuss.elastic.co/t/how-to-show-all-the-values-for-facet-for-select-input/289122 "2021-11-17T21:02:28Z")
I'm using SingleSelectFacet for select input and it shows only 5 values in the dropdown. if i need to show all the values in the Select Input what props should i pass to the SingSelectFacet. if i use the custom component… --- ## [Machine Learning for Visualizations](https://discuss.elastic.co/t/machine-learning-for-visualizations/289393)
**Author:** [@pianist\_iris](https://discuss.elastic.co/u/pianist_iris)\ **Replies:** 3\ **Last updated:** [November 17, 2021, 8:43pm UTC](https://discuss.elastic.co/t/machine-learning-for-visualizations/289393 "2021-11-17T20:43:01Z")
We have multiple Kibana visualizations which are traffic volume graph or login count graph. Now we would like to utilize machine learning module to detect anomaly in those graphs. What would be the most efficient way t… --- ## [Understanding extremely slow rewrite\_time due to fuzziness](https://discuss.elastic.co/t/understanding-extremely-slow-rewrite-time-due-to-fuzziness/289502)
**Author:** [@blackmad](https://discuss.elastic.co/u/blackmad)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 7:47pm UTC](https://discuss.elastic.co/t/understanding-extremely-slow-rewrite-time-due-to-fuzziness/289502 "2021-11-17T19:47:00Z")
I'm managing a relatively large ES cluster and I'm struggling to understand why I'm seeing such large rewrite\_time on searches of more than a few tokens. For this nonsense query "djkh hjk hjk hjkh jhkj jhjk jkh jewrh" I… --- ## [Elasticsearch for social networking sites like instagram for user posts and likes,](https://discuss.elastic.co/t/elasticsearch-for-social-networking-sites-like-instagram-for-user-posts-and-likes/289496)
**Author:** [@MOHIT2710](https://discuss.elastic.co/u/MOHIT2710)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-for-social-networking-sites-like-instagram-for-user-posts-and-likes/289496 "2021-11-17T18:53:10Z")
Hi Elastic team, I need your suggestions for using Elasticsearch as a search engine for my application similar to instagram or fb. Use case::If user is searching for any word that could be any post title,username,chann… --- ## [Query with wildcard](https://discuss.elastic.co/t/query-with-wildcard/289372)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 6:47pm UTC](https://discuss.elastic.co/t/query-with-wildcard/289372 "2021-11-17T18:47:53Z")
I want to generate phrase queries with wildcard, but this query returns 0 result: "query": { "bool": { "must": \[ { "query\_string": { "query": "\\"user login authen\*\\"", … --- ## [TSVB ability to use tokens in panel filters that represent global time filter values to adjust viz based on global time selection](https://discuss.elastic.co/t/tsvb-ability-to-use-tokens-in-panel-filters-that-represent-global-time-filter-values-to-adjust-viz-based-on-global-time-selection/287841)
**Author:** [@catchsvix](https://discuss.elastic.co/u/catchsvix)\ **Replies:** 6\ **Last updated:** [November 17, 2021, 6:24pm UTC](https://discuss.elastic.co/t/tsvb-ability-to-use-tokens-in-panel-filters-that-represent-global-time-filter-values-to-adjust-viz-based-on-global-time-selection/287841 "2021-11-17T18:24:11Z")
Apologies if I'm not using the correct terminology for the kibana fields I'm referring to. I have a need to create a day-over-day (or WoW etc) comparison visualization for a given time range. I'm able to do it for a fi… --- ## [Is there is a typescript version of '@elastic/react-search-ui'?](https://discuss.elastic.co/t/is-there-is-a-typescript-version-of-elastic-react-search-ui/289375)
**Author:** [@AhmedTohamy01](https://discuss.elastic.co/u/AhmedTohamy01)\ **Replies:** 3\ **Last updated:** [November 17, 2021, 6:19pm UTC](https://discuss.elastic.co/t/is-there-is-a-typescript-version-of-elastic-react-search-ui/289375 "2021-11-17T18:19:58Z")
Hi, I'm trying to use '@elastic/react-search-ui' in a react typescript repo, but i can't find the @types for this repo in npm . I also can't find @types for '@elastic/react-search-ui-views' & '@elastic/search-ui-app-se… --- ## [Watcher template for terms with no data](https://discuss.elastic.co/t/watcher-template-for-terms-with-no-data/289490)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 5:56pm UTC](https://discuss.elastic.co/t/watcher-template-for-terms-with-no-data/289490 "2021-11-17T17:56:38Z")
Hi, I would like a watcher alert (released as an email) that identifies vehicles with no data, for example: vehicles = \["abc", "def", "ghi"\] show vehicles with no data in past 7 days. I could count those that have occ… [Previous page](https://discuss.elastic.co/latest.md?page=1383) [Next page](https://discuss.elastic.co/latest.md?page=1385)