# Latest **URL:** https://discuss.elastic.co/latest.md?page=1388 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1389 --- ## [Anyone have success using Machine Learning to detect Fast or Impossible Travel?](https://discuss.elastic.co/t/anyone-have-success-using-machine-learning-to-detect-fast-or-impossible-travel/288822)
**Author:** [@obsidian](https://discuss.elastic.co/u/obsidian)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 10:43am UTC](https://discuss.elastic.co/t/anyone-have-success-using-machine-learning-to-detect-fast-or-impossible-travel/288822 "2021-11-16T10:43:48Z")
So far I've seen a built-in job called rare source ip for user, however, it is using auditbeat. Is there a way to detect rare source ips for a user using a different datasource? --- ## [Time panel Elasticsearch/kibana](https://discuss.elastic.co/t/time-panel-elasticsearch-kibana/289308)
**Author:** [@Ragazza\_gioiosa](https://discuss.elastic.co/u/Ragazza_gioiosa)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 10:58am UTC](https://discuss.elastic.co/t/time-panel-elasticsearch-kibana/289308 "2021-11-16T10:58:25Z")
I would like to know if it is possible to translate the time panel that is inside a dashboard to another language. Thanks! --- ## [Z names with an elastic index](https://discuss.elastic.co/t/z-names-with-an-elastic-index/289066)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 10:56am UTC](https://discuss.elastic.co/t/z-names-with-an-elastic-index/289066 "2021-11-16T10:56:55Z")
I support an environment similar to AWS where the server names are of limited(/no) value in their raw form, so we have aliased them such that they are meaningful. If the server were rebuilt the zname would change, but t… --- ## [Filter in the front end for the end user in the dashboard](https://discuss.elastic.co/t/filter-in-the-front-end-for-the-end-user-in-the-dashboard/287874)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 10:47am UTC](https://discuss.elastic.co/t/filter-in-the-front-end-for-the-end-user-in-the-dashboard/287874 "2021-11-16T10:47:34Z")
Hi All, is there any option to add filter to a particular visualisation by a end user in a dashboard having multiple visualisation of different index? --- ## [Bucket selection (Elasticsearch 6.8)](https://discuss.elastic.co/t/bucket-selection-elasticsearch-6-8/287697)
**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 10:29am UTC](https://discuss.elastic.co/t/bucket-selection-elasticsearch-6-8/287697 "2021-11-16T10:29:39Z")
Hi, I'm running this query GET assignment/\_search?size=0 { "query": { "bool": { "must": \[ { "term": { "user\_post": "post" } }, { "nested": { … --- ## [Sort search results when sorted by double\_range or float\_range field return array\_index\_out\_of\_bounds\_exception](https://discuss.elastic.co/t/sort-search-results-when-sorted-by-double-range-or-float-range-field-return-array-index-out-of-bounds-exception/287753)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 10:05am UTC](https://discuss.elastic.co/t/sort-search-results-when-sorted-by-double-range-or-float-range-field-return-array-index-out-of-bounds-exception/287753 "2021-11-16T10:05:15Z")
Hello experts, I'm currently trying to sort search results by double\_range or float\_range field,but return a server error:array\_index\_out\_of\_bounds\_exception,I've included the query and the error output, is this support… --- ## [Nest CleanupRepositoryAsync return body error](https://discuss.elastic.co/t/nest-cleanuprepositoryasync-return-body-error/288796)
**Author:** [@michel.st-louis](https://discuss.elastic.co/u/michel.st-louis)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 9:08am UTC](https://discuss.elastic.co/t/nest-cleanuprepositoryasync-return-body-error/288796 "2021-11-16T09:08:10Z")
I am using nest with c# and when I use the query: Blockquote var response = await IndexClient.Snapshot.CleanupRepositoryAsync(respositoryName); Blockquote it return \`\`\` illegal\_argument\_exception Reason: "reques… --- ## [Jira Server Connector](https://discuss.elastic.co/t/jira-server-connector/286196)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 9:03am UTC](https://discuss.elastic.co/t/jira-server-connector/286196 "2021-11-16T09:03:52Z")
Hi, in the documentation for Workplace Search the newest supported Jira Server version is 8.6.1, which was released in January 2020. The most recent version is 8.19.1, is there an update to the connector planned? We lik… --- ## [Elastic search takes up a lot of virtual memory under Linux](https://discuss.elastic.co/t/elastic-search-takes-up-a-lot-of-virtual-memory-under-linux/289279)
**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 8:37am UTC](https://discuss.elastic.co/t/elastic-search-takes-up-a-lot-of-virtual-memory-under-linux/289279 "2021-11-16T08:37:05Z")
Our Elasticsearch version is 7.10.2. It runs on Linux system. The JVM memory allocation is about 3G, and the node memory is about 8G. It is a three node cluster system. The cluster has eight shard, each of which is about… --- ## [Aggregation with large data set using bucket aggregation](https://discuss.elastic.co/t/aggregation-with-large-data-set-using-bucket-aggregation/288141)
**Author:** [@RAVI\_GOPALANI](https://discuss.elastic.co/u/RAVI_GOPALANI)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 8:01am UTC](https://discuss.elastic.co/t/aggregation-with-large-data-set-using-bucket-aggregation/288141 "2021-11-16T08:01:34Z")
Hi , We are using Elasticsearch to get the top hits based on large volumes of data using bucket aggregation. But we see there is default limit in max\_result\_window attribute of initial 10000 records which will be proce… --- ## [Elastic Agent output to Kafka](https://discuss.elastic.co/t/elastic-agent-output-to-kafka/289068)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 7:32am UTC](https://discuss.elastic.co/t/elastic-agent-output-to-kafka/289068 "2021-11-16T07:32:25Z")
Hi, I would like to know if it's possible to connect Elastic Agents to Logstash through Kafka. Elastic Agent -\> Kafka \<- Logstash -\> Elasticsearch I have already read the documentation and I don't understant what mean… --- ## [Setting \[index.lifecycle.rollover\_alias\] for index \[y\] is empty or not defined](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-y-is-empty-or-not-defined/289053)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 7:13am UTC](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-y-is-empty-or-not-defined/289053 "2021-11-16T07:13:12Z")
I have read the documentation, and the solution to this error is that I need to set an alias for the index. But this index is at the system level, that is, I did not build it. Why do I need to manually set aliases? Sett… --- ## [Elasticsearch thread count leak - threads not closed on index delete](https://discuss.elastic.co/t/elasticsearch-thread-count-leak-threads-not-closed-on-index-delete/289250)
**Author:** [@NelsonBurton](https://discuss.elastic.co/u/NelsonBurton)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 6:38am UTC](https://discuss.elastic.co/t/elasticsearch-thread-count-leak-threads-not-closed-on-index-delete/289250 "2021-11-16T06:38:18Z")
Hi Elasticsearch community, does Elasticsearch cleanly close the per-index threads after deleting an index? ES Version: 7.6.1 I have encountered an issue with my Elasticsearch set up, where the thread count slowly grow… --- ## [How to Resolve In\_flight\_request Data too Large Errors](https://discuss.elastic.co/t/how-to-resolve-in-flight-request-data-too-large-errors/289193)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 6:33am UTC](https://discuss.elastic.co/t/how-to-resolve-in-flight-request-data-too-large-errors/289193 "2021-11-16T06:33:54Z")
Hello, dear community, We are constantly getting this OutOfMemory error with our master-1 machine. \[in\_flight\_requests\] New used memory 4567112664 \[4.2gb\] for data of \[\\] would be larger than configured br… --- ## [Synced Snapshots in S3 don't show up as available in the Repository](https://discuss.elastic.co/t/synced-snapshots-in-s3-dont-show-up-as-available-in-the-repository/289226)
**Author:** [@mattph](https://discuss.elastic.co/u/mattph)\ **Replies:** 3\ **Last updated:** [November 16, 2021, 6:23am UTC](https://discuss.elastic.co/t/synced-snapshots-in-s3-dont-show-up-as-available-in-the-repository/289226 "2021-11-16T06:23:07Z")
I'm new to Elasticsearch and trying to copy an index from a Dev environment to a Test environment. I've installed the S3 Repository plugin in both Dev and Test and configured the repository in Kibana. I setup a policy i… --- ## [KibanaReportsAutomation](https://discuss.elastic.co/t/kibanareportsautomation/289261)
**Author:** [@vish24](https://discuss.elastic.co/u/vish24)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 5:34am UTC](https://discuss.elastic.co/t/kibanareportsautomation/289261 "2021-11-16T05:34:06Z")
I came to know that few people need some automation in generating Kibana reports. Please find the snippet below: This snippet needs a base file so that script edits it and then executes. Some modifications might be ne… --- ## [Metric libbeat.output.write.bytes, libbeat.output.read.bytes, libbeat.output.write.errors and libbeat.output.read.errors shows 0 always](https://discuss.elastic.co/t/metric-libbeat-output-write-bytes-libbeat-output-read-bytes-libbeat-output-write-errors-and-libbeat-output-read-errors-shows-0-always/289260)
**Author:** [@mbhavana](https://discuss.elastic.co/u/mbhavana)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 5:30am UTC](https://discuss.elastic.co/t/metric-libbeat-output-write-bytes-libbeat-output-read-bytes-libbeat-output-write-errors-and-libbeat-output-read-errors-shows-0-always/289260 "2021-11-16T05:30:31Z")
Hello there, i have used REST API "curl -XGET localhost:5066/stats" to get the stats of filebeat.Metrics, libbeat.output.write.bytes, libbeat.output.read.bytes, libbeat.output.write.errors and libbeat.output.read.errors … --- ## [Logstash Nested JSON Parsing and Transforming data](https://discuss.elastic.co/t/logstash-nested-json-parsing-and-transforming-data/289255)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 5:18am UTC](https://discuss.elastic.co/t/logstash-nested-json-parsing-and-transforming-data/289255 "2021-11-16T05:18:58Z")
How would I using the json filter to split the following json document and target / modify the time stamp (event.ts) ? {"peer":"EC2LEBOQ77XSF46QEKYYYNKBTVATU33K","agent\_name":"test-device","event":{"ts":1637034155000,"t… --- ## [Error creating runner from config: metricset 'activemq/(broker, queue, topic)' not found](https://discuss.elastic.co/t/error-creating-runner-from-config-metricset-activemq-broker-queue-topic-not-found/289258)
**Author:** [@Tina\_Rawat](https://discuss.elastic.co/u/Tina_Rawat)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 5:04am UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-metricset-activemq-broker-queue-topic-not-found/289258 "2021-11-16T05:04:47Z")
Hi Team, I've started metricbeat and enabled activemq and jolokia module. I'm getting---- Error : 2021-11-15T16:19:36.032+0800 ERROR \[reload\] cfgfile/list.go:96 Error creating runner from config: 1 error: 3 errors: me… --- ## [ES 7.15 FileBeats Sophos XG module not separating data into variables](https://discuss.elastic.co/t/es-7-15-filebeats-sophos-xg-module-not-separating-data-into-variables/288577)
**Author:** [@Samy\_Weee](https://discuss.elastic.co/u/Samy_Weee)\ **Replies:** 23\ **Last updated:** [November 16, 2021, 4:59am UTC](https://discuss.elastic.co/t/es-7-15-filebeats-sophos-xg-module-not-separating-data-into-variables/288577 "2021-11-16T04:59:55Z")
Following This link to configure sophos Module. www.elastic.co/.../filebeat-module-sophos.html I followed the documentation at www.elastic.co/.../filebeat-module-sophos.html and was able to get the data into ES, issue… --- ## [The load of ES cluster CPU is high, but the utilization rate is not high](https://discuss.elastic.co/t/the-load-of-es-cluster-cpu-is-high-but-the-utilization-rate-is-not-high/289246)
**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 3:37am UTC](https://discuss.elastic.co/t/the-load-of-es-cluster-cpu-is-high-but-the-utilization-rate-is-not-high/289246 "2021-11-16T03:37:54Z")
I have an elk cluster with 3 master nodes, 4 hot data nodes and 4 cold data nodes, and the disks are SSDs. Recently, it was found that the CPU load of the ES cluster is high, but the utilization rate is not high. The fol… --- ## [Stack monitoring with metricbeat procucing too much data? Getting timeouts](https://discuss.elastic.co/t/stack-monitoring-with-metricbeat-procucing-too-much-data-getting-timeouts/287158)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 3:30am UTC](https://discuss.elastic.co/t/stack-monitoring-with-metricbeat-procucing-too-much-data-getting-timeouts/287158 "2021-11-16T03:30:49Z")
Hello. I have a problem that the Stack Monitoring page times out when trying to look at cluster overview at a period of 24h (or "today"). Cluster overview of "last 1 hour" works fine, but longer periods time out. Longer … --- ## [Heartbeat fake timeout](https://discuss.elastic.co/t/heartbeat-fake-timeout/287278)
**Author:** [@guillaumetel10](https://discuss.elastic.co/u/guillaumetel10)\ **Replies:** 5\ **Last updated:** [November 16, 2021, 3:01am UTC](https://discuss.elastic.co/t/heartbeat-fake-timeout/287278 "2021-11-16T03:01:56Z")
Hi, We use hearbeat to monitor a hundred applications. In general it works well, but sometimes some applications are down (only for a single ping) according to the tool. However, this is not the case according to our t… --- ## [Expand limit of chars in field (truncated to 100,000 chars)](https://discuss.elastic.co/t/expand-limit-of-chars-in-field-truncated-to-100-000-chars/289209)
**Author:** [@christiancj](https://discuss.elastic.co/u/christiancj)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 1:22am UTC](https://discuss.elastic.co/t/expand-limit-of-chars-in-field-truncated-to-100-000-chars/289209 "2021-11-16T01:22:18Z")
Hi, I'm facing an issue with one of our fields in Elasticsearch, I'm using FSCrawler to extract content and then ingest in Elasticsearch, however we've few large size files where the content extracted exceed 100,000 c… --- ## [Create track using datastreams](https://discuss.elastic.co/t/create-track-using-datastreams/289097)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 2\ **Last updated:** [November 15, 2021, 11:33pm UTC](https://discuss.elastic.co/t/create-track-using-datastreams/289097 "2021-11-15T23:33:05Z")
Hi, I am trying to create a custom track using an data stream index and it's failing because of the datastream is an hidden index. What's the work around to create this custom track ? Thanks Murali --- ## [Effectively partial update array field in ElasticSearch](https://discuss.elastic.co/t/effectively-partial-update-array-field-in-elasticsearch/288984)
**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 11:22pm UTC](https://discuss.elastic.co/t/effectively-partial-update-array-field-in-elasticsearch/288984 "2021-11-15T23:22:40Z")
Hi elastic experts, I'm wondering if there is a way to effectively partial update an element in an array field? For example, a document has a commands field like this: "commands": \[ { "id": 1000, "content": "a… --- ## [Workplace Search Cloud \> Disable Native login](https://discuss.elastic.co/t/workplace-search-cloud-disable-native-login/289046)
**Author:** [@matt\_elastic](https://discuss.elastic.co/u/matt_elastic)\ **Replies:** 3\ **Last updated:** [November 15, 2021, 10:31pm UTC](https://discuss.elastic.co/t/workplace-search-cloud-disable-native-login/289046 "2021-11-15T22:31:34Z")
Hi Everyone, I've configured saml linked to azure active directory and its working great. I've managed to disable the "login with elastic cloud" option via the deployment config however I can't work out how to disable t… --- ## [Is it ok to delete data (by query) on an index that was force merged to a single segment?](https://discuss.elastic.co/t/is-it-ok-to-delete-data-by-query-on-an-index-that-was-force-merged-to-a-single-segment/289221)
**Author:** [@kirk1](https://discuss.elastic.co/u/kirk1)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 10:23pm UTC](https://discuss.elastic.co/t/is-it-ok-to-delete-data-by-query-on-an-index-that-was-force-merged-to-a-single-segment/289221 "2021-11-15T22:23:32Z")
When our indices are no longer receiving new documents we run a force-merge down to a single segment. We now find ourselves needing to delete a very small percentage of the docs in several of these these single-segment i… --- ## [Machine Learning - Default value for buckets with no documents](https://discuss.elastic.co/t/machine-learning-default-value-for-buckets-with-no-documents/289233)
**Author:** [@bpsullivan3](https://discuss.elastic.co/u/bpsullivan3)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 10:22pm UTC](https://discuss.elastic.co/t/machine-learning-default-value-for-buckets-with-no-documents/289233 "2021-11-15T22:22:08Z")
I am attempting to set up a machine learning job that detects high\_sum of a field for a daily ingest. However, the data I am ingesting is conditional, and we may not actually receive any documents for a given day (most d… --- ## [Set geopoint field from string field correctly for map visualization](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513)
**Author:** [@ccfc1986](https://discuss.elastic.co/u/ccfc1986)\ **Replies:** 10\ **Last updated:** [November 15, 2021, 10:01pm UTC](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513 "2021-11-15T22:01:34Z")
I have the following field in my documents: "COORDINATES" : "-11.661306;-47.506833" I have created a update\_by\_query that takes this field, extracts the lat/lon and sets to my actual geopoint defined field 'GeoLocation… [Previous page](https://discuss.elastic.co/latest.md?page=1387) [Next page](https://discuss.elastic.co/latest.md?page=1389)