# Latest **URL:** https://discuss.elastic.co/latest.md?page=1386 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1387 --- ## [Why aren't "flattened" fields usable via SQL?](https://discuss.elastic.co/t/why-arent-flattened-fields-usable-via-sql/288520)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 10:31am UTC](https://discuss.elastic.co/t/why-arent-flattened-fields-usable-via-sql/288520 "2021-11-17T10:31:06Z")
Are flattened type fields really not usable with SQL queries? They're not mentioned in: I have an index with these fields: ... "mappings" : { "properties" : { "name" : { "type" : "keyword"… --- ## [Reporting timeout](https://discuss.elastic.co/t/reporting-timeout/289180)
**Author:** [@millie123](https://discuss.elastic.co/u/millie123)\ **Replies:** 3\ **Last updated:** [November 17, 2021, 10:26am UTC](https://discuss.elastic.co/t/reporting-timeout/289180 "2021-11-17T10:26:31Z")
Generating a PDF report in canvas fails when the report is too big. Tried increasing timeout without success. Any suggestions greatly appreciated. --- ## [Can NEST index multiple documents to a data stream?](https://discuss.elastic.co/t/can-nest-index-multiple-documents-to-a-data-stream/288949)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 10:20am UTC](https://discuss.elastic.co/t/can-nest-index-multiple-documents-to-a-data-stream/288949 "2021-11-17T10:20:46Z")
The IndexMany method has no way to specify the op\_type. And the Bulk method doesn't seem to provide any configuration for op\_type either. --- ## [Lens - show values on histogram visualisation](https://discuss.elastic.co/t/lens-show-values-on-histogram-visualisation/289371)
**Author:** [@cpu](https://discuss.elastic.co/u/cpu)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 10:10am UTC](https://discuss.elastic.co/t/lens-show-values-on-histogram-visualisation/289371 "2021-11-17T10:10:06Z")
Hi All, I'm trying to show values on histogram visualisation created with lens. I can't find the option to get this results... I'm missing something? Could anyone point me to the solution? Thanks in advance! --- ## [How to run logstash on WSL (Ubuntu 20.04.3 LTS)](https://discuss.elastic.co/t/how-to-run-logstash-on-wsl-ubuntu-20-04-3-lts/289414)
**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 9:43am UTC](https://discuss.elastic.co/t/how-to-run-logstash-on-wsl-ubuntu-20-04-3-lts/289414 "2021-11-17T09:43:39Z")
Hi, Could you please help with running logstash as a service in WSL (Ubuntu 20.04.3 LTS) As of now I get below error message sudo systemctl start logstash.service System has not been booted with systemd as init system… --- ## ["ignore\_missing": true from geoip processor is not working](https://discuss.elastic.co/t/ignore-missing-true-from-geoip-processor-is-not-working/289420)
**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 9:24am UTC](https://discuss.elastic.co/t/ignore-missing-true-from-geoip-processor-is-not-working/289420 "2021-11-17T09:24:06Z")
Hi Everyone, I am using Elasticsearch 7.15, and python to ingest data into Elasticsearch. Before I start the ingestion, I define a pipeline and a mapping. Everything works very smoothly without the geoip processor. Wh… --- ## [Metric Beats Filesystem metric](https://discuss.elastic.co/t/metric-beats-filesystem-metric/289331)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 9:04am UTC](https://discuss.elastic.co/t/metric-beats-filesystem-metric/289331 "2021-11-17T09:04:45Z")
System filesystem metricset | Metricbeat Reference \[7.15\] | Elastic says that filesystem data is captured in windows however when trying I get INFO module/wrapper.go:259 Error fetching data for metricbeat system.file… --- ## [Elasticsearch reached the limit of ongoing initial primary recoveries](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 8\ **Last updated:** [November 17, 2021, 8:58am UTC](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390 "2021-11-17T08:58:40Z")
Hello, I've been monitoring my cluster performance and I found my cluster health turned into red when I check with GET \_cluster/allocation/explain?pretty I got this result "node\_allocation\_decisions" : \[ { "n… --- ## [Dashboard \[Filebeat Apache\] Access and error logs ECS](https://discuss.elastic.co/t/dashboard-filebeat-apache-access-and-error-logs-ecs/288993)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 8:28am UTC](https://discuss.elastic.co/t/dashboard-filebeat-apache-access-and-error-logs-ecs/288993 "2021-11-17T08:28:06Z")
Hi Everyone, Can you please tell me the meaning of the unique count of source.address range in this dashboard? --- ## [Share Canvas on website](https://discuss.elastic.co/t/share-canvas-on-website/288480)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 8:19am UTC](https://discuss.elastic.co/t/share-canvas-on-website/288480 "2021-11-17T08:19:10Z")
Hello everyone, I have a problem. I want to share a canvas in static website, and I follow every step from the documentation and it really show the workpad, BUT without my panels. I inserted in my canvas presentation s… --- ## [Elasticsearch shows "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster"](https://discuss.elastic.co/t/elasticsearch-shows-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/289406)
**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-shows-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/289406 "2021-11-17T08:02:39Z")
Hello Team, Im setting up a single node cluster and below is my Elasticsearch.yml file cluster.name: my-application node.name: node-1 node.master: true node.data: true bootstrap.memory\_lock: true network.host: CZASM… --- ## [Call recursively an API](https://discuss.elastic.co/t/call-recursively-an-api/289284)
**Author:** [@Mihai\_Stuparu](https://discuss.elastic.co/u/Mihai_Stuparu)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:47am UTC](https://discuss.elastic.co/t/call-recursively-an-api/289284 "2021-11-17T07:47:30Z")
Hello, Using below basic http\_poller request I will obtain a .json file that contains an attribute called "id". For each "id" I need to call other APIs, having the "id" value in the url: https://..../id. How can I ach… --- ## [Windows NPS Logs](https://discuss.elastic.co/t/windows-nps-logs/289115)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 10\ **Last updated:** [November 17, 2021, 7:18am UTC](https://discuss.elastic.co/t/windows-nps-logs/289115 "2021-11-17T07:18:57Z")
Hello everyone, I've been looking for a filebeat module for NPS Logs but there doesn't appear to be one available. What are my options here? I have winlogbeat which can get stuff from event log but in C:\\Windows\\Logs … --- ## [Elastic Search does not get logs from fluentbit](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276)
**Author:** [@merveyil](https://discuss.elastic.co/u/merveyil)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:11am UTC](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276 "2021-11-17T07:11:58Z")
Hi, i am newbie on Elasticsearch. I installed Elasticsearch and tried to send logs from fluentbit to elastic. I have script that generates 60 mb logs per minute. I read these logs with fluentbit and try to send them to e… --- ## [Restore cold indices on new cluster](https://discuss.elastic.co/t/restore-cold-indices-on-new-cluster/289315)
**Author:** [@maj7](https://discuss.elastic.co/u/maj7)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:00am UTC](https://discuss.elastic.co/t/restore-cold-indices-on-new-cluster/289315 "2021-11-17T07:00:56Z")
Hello everyone, I have a cluster which has a big amount of data and I wanted to move my data to a new cluster. The problem is my new cluster will not have a cold node. I took a snapshot of my old cluster and when I tr… --- ## [Wordnet Korean Dictionary for synonym](https://discuss.elastic.co/t/wordnet-korean-dictionary-for-synonym/289397)
**Author:** [@user\_el](https://discuss.elastic.co/u/user_el)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 6:59am UTC](https://discuss.elastic.co/t/wordnet-korean-dictionary-for-synonym/289397 "2021-11-17T06:59:10Z")
Hi I want to use synonyms for the Korean language in wordnet format. I am not able to find any dictionary. If anyone knows where can I get one. Please help. --- ## [Exiting: error loading config file: yaml: line 189: did not find expected key](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-189-did-not-find-expected-key/289317)
**Author:** [@armughan](https://discuss.elastic.co/u/armughan)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 6:37am UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-189-did-not-find-expected-key/289317 "2021-11-17T06:37:30Z")
Hi All, I'm trying to connect Filebeat with Elasticsearch After the configuration of filebeat.yml I'm having "Exiting: error loading config file: yaml: line 189: did not find expected key" filebeat.inputs: - type: log… --- ## [How to set a condition in set processor (ingest node pipeline) to check if log.level= error](https://discuss.elastic.co/t/how-to-set-a-condition-in-set-processor-ingest-node-pipeline-to-check-if-log-level-error/289347)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 4:28am UTC](https://discuss.elastic.co/t/how-to-set-a-condition-in-set-processor-ingest-node-pipeline-to-check-if-log-level-error/289347 "2021-11-17T04:28:20Z")
Hi, my doc looks like this and I need to access log.level which is a nested field. can someone help me as I need a condition to set a new field called statuscode if log.level=error. tried ctx.messageinfo.log.level=="e… --- ## [Install watcher plugin](https://discuss.elastic.co/t/install-watcher-plugin/289320)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 3:46am UTC](https://discuss.elastic.co/t/install-watcher-plugin/289320 "2021-11-17T03:46:38Z")
Hello, hello I tried to install the watcher plugin on my centos server, but the package was not found, is there another way to install it. And this report error No package license available. Error: Nothing to do No … --- ## [Monitoring does not work (Metricbeat)](https://discuss.elastic.co/t/monitoring-does-not-work-metricbeat/289380)
**Author:** [@VellayLoket](https://discuss.elastic.co/u/VellayLoket)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 2:26am UTC](https://discuss.elastic.co/t/monitoring-does-not-work-metricbeat/289380 "2021-11-17T02:26:17Z")
I'm trying to setup metricbeat, the service on Elasticsearch node started successfully, sending data, no problem. Kibana shows that metrics index was created and there are some information saved but when i try to migrate… --- ## [Doesn't a field support multiple types?](https://discuss.elastic.co/t/doesnt-a-field-support-multiple-types/289271)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [November 17, 2021, 2:23am UTC](https://discuss.elastic.co/t/doesnt-a-field-support-multiple-types/289271 "2021-11-17T02:23:52Z")
org.elasticsearch.index.mapper.MapperParsingException: object mapping for \[http.request.body.original\] tried to parse field \[original\] as object, but found a concrete value I plan to convert the http.request.body.orig… --- ## [Why is there a lot of "Waiting 30s" in the service log?](https://discuss.elastic.co/t/why-is-there-a-lot-of-waiting-30s-in-the-service-log/288722)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 11\ **Last updated:** [November 17, 2021, 1:24am UTC](https://discuss.elastic.co/t/why-is-there-a-lot-of-waiting-30s-in-the-service-log/288722 "2021-11-17T01:24:31Z")
Waiting 30s... Wait time is taken from max-age directive in Cache-Control header in APM Server's response. dbgIterationsCount: 37436. Waiting 30s... Wait time is taken from max-age directive in Cache-Control header in … --- ## [Add buttons at Kibana Dashboard](https://discuss.elastic.co/t/add-buttons-at-kibana-dashboard/289154)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 12:17am UTC](https://discuss.elastic.co/t/add-buttons-at-kibana-dashboard/289154 "2021-11-17T00:17:08Z")
Hello. I would like to add buttons to Kibana Dashboard. This button is to request an API to the server that I developed. Is this possible? --- ## [Node roles distribution](https://discuss.elastic.co/t/node-roles-distribution/289373)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:47pm UTC](https://discuss.elastic.co/t/node-roles-distribution/289373 "2021-11-16T23:47:27Z")
Hi community, I have 4 hosts to dedicate to Elasticsearch, what is the best distribution of master and data nodes as well as primary shards and replicas? thanks --- ## [Unable to restore snapshots](https://discuss.elastic.co/t/unable-to-restore-snapshots/289242)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:27pm UTC](https://discuss.elastic.co/t/unable-to-restore-snapshots/289242 "2021-11-16T23:27:58Z")
Unable to restore snapshots and got below error. I have closed the indexes whatever we created. But still system asks us to close system indexes as well. But if we try to close the system indexes then I am getting warnin… --- ## [Elasticsearch per request circuit breakers and real memory](https://discuss.elastic.co/t/elasticsearch-per-request-circuit-breakers-and-real-memory/289295)
**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 10:59pm UTC](https://discuss.elastic.co/t/elasticsearch-per-request-circuit-breakers-and-real-memory/289295 "2021-11-16T22:59:41Z")
Hi. After upgrading to version 7.13.1 with new circuit breakers that use real memory we are having issues with heavy aggregates on Elasticsearch cluster. Per request circuit breakers are not being tripped and nodes (58GB… --- ## [Cannot Load MaxMind GeoIP2-ISP.mmdb](https://discuss.elastic.co/t/cannot-load-maxmind-geoip2-isp-mmdb/289027)
**Author:** [@reyjrar](https://discuss.elastic.co/u/reyjrar)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 10:45pm UTC](https://discuss.elastic.co/t/cannot-load-maxmind-geoip2-isp-mmdb/289027 "2021-11-16T22:45:25Z")
Hello, We use multiple GeoIP databases. We're using GeoIP2-City to get location information, and GeoIP-ISP to get as.number and as.organization.name. However, I cannot load the provided MaxMind GeoIP2-ISP.mmdb. { "d… --- ## [How do I setup different retentions](https://discuss.elastic.co/t/how-do-i-setup-different-retentions/289359)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 3\ **Last updated:** [November 16, 2021, 10:36pm UTC](https://discuss.elastic.co/t/how-do-i-setup-different-retentions/289359 "2021-11-16T22:36:24Z")
We are currently using Curator to delete specific indicies at 30, 60 and 90 days. We have added 2 warm and 2 cold nodes to our cluster and still want to be able to do the same retention with ILM. Right now we just have a… --- ## [Using Elasticsearch for storing logs in microservice-based architecture](https://discuss.elastic.co/t/using-elasticsearch-for-storing-logs-in-microservice-based-architecture/289288)
**Author:** [@Oleksii88](https://discuss.elastic.co/u/Oleksii88)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 10:30pm UTC](https://discuss.elastic.co/t/using-elasticsearch-for-storing-logs-in-microservice-based-architecture/289288 "2021-11-16T22:30:48Z")
Hi, I am writing a new microservice-based system and considering Elasticsearch for logging data storage. What are the best practices of using ElastiSearch for logging? For now, I have 2 questions? but if anybody has id… --- ## [Elastic agent on the cluster side?](https://discuss.elastic.co/t/elastic-agent-on-the-cluster-side/289272)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 10:29pm UTC](https://discuss.elastic.co/t/elastic-agent-on-the-cluster-side/289272 "2021-11-16T22:29:56Z")
Hi, I'm setting up a cluster with three nodes OnPremise. Until now, I used metricbeat and filebeat to get metrics and logs about the nodes. Should I use Elastic Agents on the nodes instead? What do you recomend? Thank… [Previous page](https://discuss.elastic.co/latest.md?page=1385) [Next page](https://discuss.elastic.co/latest.md?page=1387)