# Latest **URL:** https://discuss.elastic.co/latest.md?page=1408 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1409 --- ## [How to track cases in a dashboard?](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:36am UTC](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259 "2021-11-01T10:36:49Z")
Hello there! Is there a way to track cases in a dashboard? Like having a panel for: open cases cases in progress pending cases new cases Tried the tutorial: but i happen not to have the option "add a les" visuali… --- ## [Logstash Kubernetes Operator?](https://discuss.elastic.co/t/logstash-kubernetes-operator/288127)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 10:31am UTC](https://discuss.elastic.co/t/logstash-kubernetes-operator/288127 "2021-11-01T10:31:49Z")
Hi folks, does anyone know if there is or will be a dedicated Logstash Operator in future? From what I can see from the current official Elasticsearch Operator, Logstash is not considered as a component there at all. D… --- ## [Count() with KQL doesn't return desired results](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 9:30am UTC](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121 "2021-11-01T09:30:16Z")
Hi There, I'm using 7.15. My elastic data are records of tests. Each test has status failed or pass. I want to visualize a table like this: Testcase Name | # of failed tests | %of failure from all runs I tried to us… --- ## [Count of Records vs Count using formula](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 9:29am UTC](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914 "2021-11-01T09:29:47Z")
Hi, I'm using version 7.15 I have data that each record is a test results. I'm trying to build this table, that contain failed tests only: Test Name Fail Tests Count Success Rate (%) Test 1 … --- ## [Read XEL file and send to elasticsearch](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 9:12am UTC](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109 "2021-11-01T09:12:14Z")
Hi all, I have some xel files which are a SQL server output. Is there any way to read these files and index them in Elasticsearch. Can beats or logstash read these files? Any help will be so appreciated. Regards --- ## [Waht are the possible datatypes of fileds of an index like keyword, ip , date nanos etc](https://discuss.elastic.co/t/waht-are-the-possible-datatypes-of-fileds-of-an-index-like-keyword-ip-date-nanos-etc/287891)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 8\ **Last updated:** [November 1, 2021, 9:11am UTC](https://discuss.elastic.co/t/waht-are-the-possible-datatypes-of-fileds-of-an-index-like-keyword-ip-date-nanos-etc/287891 "2021-11-01T09:11:01Z")
Waht are the possible datatypes of fileds of an index like keyword, ip , date nanos, etc? guess if field type is keyword then it is is stored in docvalues so we can sort on it? regards shini --- ## [Find word count in text field](https://discuss.elastic.co/t/find-word-count-in-text-field/288120)
**Author:** [@sanjaye218](https://discuss.elastic.co/u/sanjaye218)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 8:44am UTC](https://discuss.elastic.co/t/find-word-count-in-text-field/288120 "2021-11-01T08:44:28Z")
Hi, I am trying to get top 10 words along with word count in text field in multiple documents based on certain filter criteria. I can see termvector but its giving results per document. e.g. document 1 contains comment… --- ## [How to setup https for kibana?](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383)
**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383 "2021-11-01T08:36:08Z")
Hi all, Sorry about my bad English. I'm config https following the guide: I generated a server certificate and private key for Kibana: ./bin/elasticsearch-certutil csr -name kibana-server MY\_IP\_SERVER Kibana setting… --- ## [Index 128 out of bounds for length 128](https://discuss.elastic.co/t/index-128-out-of-bounds-for-length-128/287971)
**Author:** [@shreyanshes103](https://discuss.elastic.co/u/shreyanshes103)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 8:02am UTC](https://discuss.elastic.co/t/index-128-out-of-bounds-for-length-128/287971 "2021-11-01T08:02:11Z")
Hi All ,getting error like this..."caused\_by" : { "type" : "array\_index\_out\_of\_bounds\_exception", "reason" : "Index 128 out of bounds for length 128", "caused\_by" : { "type" : "array\_index\_out\_of\_bounds\_exception", … --- ## [ILM Questions - ILM lifecycle policy defaults on upgrade and applying a policy to existing/old indices](https://discuss.elastic.co/t/ilm-questions-ilm-lifecycle-policy-defaults-on-upgrade-and-applying-a-policy-to-existing-old-indices/288115)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 7:04am UTC](https://discuss.elastic.co/t/ilm-questions-ilm-lifecycle-policy-defaults-on-upgrade-and-applying-a-policy-to-existing-old-indices/288115 "2021-11-01T07:04:49Z")
I have a couple of questions about the management of ILM based on legacy index templates. Previously I have created a number of new index lifecycle policies with custom config for each of the beats being used. These p… --- ## [How to make directory links in Kibana report, and how to make directory links in text element Markdown?](https://discuss.elastic.co/t/how-to-make-directory-links-in-kibana-report-and-how-to-make-directory-links-in-text-element-markdown/288107)
**Author:** [@li\_li](https://discuss.elastic.co/u/li_li)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 6:10am UTC](https://discuss.elastic.co/t/how-to-make-directory-links-in-kibana-report-and-how-to-make-directory-links-in-text-element-markdown/288107 "2021-11-01T06:10:46Z")
I'm new here and I'd like to ask you a question，How to make directory links in Kibana report, and how to make directory links in text element Markdown? Thank！ --- ## [How can I get the count of all indices?](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 7\ **Last updated:** [November 1, 2021, 6:08am UTC](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047 "2021-11-01T06:08:39Z")
And is there a way to configure whether to include the default system indices, whose names start with a dot? --- ## [Showing TPS on line visulaize](https://discuss.elastic.co/t/showing-tps-on-line-visulaize/286898)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 5:22am UTC](https://discuss.elastic.co/t/showing-tps-on-line-visulaize/286898 "2021-11-01T05:22:41Z")
Hi all, In the kibana version 6.5.4, we can create a line visualize which shows tps (count per second) using following setting, so that by choosing any time rang, it shows the same tps value: But, in the kibana ver… --- ## [Showing tps in TSVB in kibana](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 5:19am UTC](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926 "2021-11-01T05:19:27Z")
Hi all, I am using kibana version 7.13.1 TSVB visualize to show TPS (COUNT per Second). the output graph is as following in "Last 15 minutes" in the case of setting "Override index pattern" No and using auto interval (… --- ## [How to send what you want in filebeat](https://discuss.elastic.co/t/how-to-send-what-you-want-in-filebeat/288064)
**Author:** [@root\_linux](https://discuss.elastic.co/u/root_linux)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 4:39am UTC](https://discuss.elastic.co/t/how-to-send-what-you-want-in-filebeat/288064 "2021-11-01T04:39:23Z")
How can I send only those lines which i want from filebeat to logstash --- ## [Query Prefix Numbers and Dates](https://discuss.elastic.co/t/query-prefix-numbers-and-dates/288044)
**Author:** [@elipongr](https://discuss.elastic.co/u/elipongr)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 4:27am UTC](https://discuss.elastic.co/t/query-prefix-numbers-and-dates/288044 "2021-11-01T04:27:09Z")
So hey i am working with customer where we use flowable which has query models where we can write ES Querys. In our case we need to search for all elemets in array which have the numberValue idk lets say 222. However i… --- ## [Minimize elastic search write operations in storage account](https://discuss.elastic.co/t/minimize-elastic-search-write-operations-in-storage-account/288024)
**Author:** [@pindropviolence](https://discuss.elastic.co/u/pindropviolence)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 4:26am UTC](https://discuss.elastic.co/t/minimize-elastic-search-write-operations-in-storage-account/288024 "2021-11-01T04:26:23Z")
Hi , I have set up Elastic Stack with beats and i have been able to monitor the logs without any issues. AZ logs getting streamed via event hubs , beats from multiple subscriptions. Have set up curator jobs to delete … --- ## [Getting this exception : Caused by: org.elasticsearch.repositories.RepositoryException: \[index\_id\] Could not determine repository generation from root blobs when trying a non-root user in dockerfile for Elasticsearch image I am using Elasticsearch 7.10.0](https://discuss.elastic.co/t/getting-this-exception-caused-by-org-elasticsearch-repositories-repositoryexception-index-id-could-not-determine-repository-generation-from-root-blobs-when-trying-a-non-root-user-in-dockerfile-for-elasticsearch-image-i-am-using-elasticsearch-7-10-0/288042)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 0\ **Last updated:** [October 29, 2021, 10:30pm UTC](https://discuss.elastic.co/t/getting-this-exception-caused-by-org-elasticsearch-repositories-repositoryexception-index-id-could-not-determine-repository-generation-from-root-blobs-when-trying-a-non-root-user-in-dockerfile-for-elasticsearch-image-i-am-using-elasticsearch-7-10-0/288042 "2021-10-29T22:30:08Z")
Getting this exception : Caused by: org.Elasticsearch.repositories.RepositoryException: \[index\_id\] Could not determine repository generation from root blobs when trying a non-root user in dockerfile for Elasticsearch ima… --- ## [Troubles with active directory user authentication](https://discuss.elastic.co/t/troubles-with-active-directory-user-authentication/287755)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 10\ **Last updated:** [November 1, 2021, 4:21am UTC](https://discuss.elastic.co/t/troubles-with-active-directory-user-authentication/287755 "2021-11-01T04:21:20Z")
I have trial license Elasticsearch node, and i want to integrate it to use Active directory authentication Here's snippet from my Elasticsearch.yml file xpack: security: enabled: true transport: ssl: … --- ## [Upgrade the cluster from 7.7 to 7.15 version guidance](https://discuss.elastic.co/t/upgrade-the-cluster-from-7-7-to-7-15-version-guidance/287950)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 4:19am UTC](https://discuss.elastic.co/t/upgrade-the-cluster-from-7-7-to-7-15-version-guidance/287950 "2021-11-01T04:19:09Z")
Hi Experts, I have an ELK setup of 7.7 version with 3 nodes of Elasticsearch, 2 kibana and 2 logstash on a windows server 64 bit. A. Below is the existing cluster information:- Configuration of Elasticsearch servers: … --- ## [How do I get my indexes of pdf documents into enterprise search?](https://discuss.elastic.co/t/how-do-i-get-my-indexes-of-pdf-documents-into-enterprise-search/287964)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [October 31, 2021, 2:36am UTC](https://discuss.elastic.co/t/how-do-i-get-my-indexes-of-pdf-documents-into-enterprise-search/287964 "2021-10-31T02:36:58Z")
I have used FSCrawler to index pdf documents. In Elastic 7.15.1 Management / Stack Management / Data / Index Management, I can see all the indexes. How may I now get these indexes into enterprise search/workplace searc… --- ## [Handling Large XML Files](https://discuss.elastic.co/t/handling-large-xml-files/288068)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [October 31, 2021, 11:54pm UTC](https://discuss.elastic.co/t/handling-large-xml-files/288068 "2021-10-31T23:54:03Z")
I have a large XML file that I'm trying to parse. But when I use max\_lines I somehow lose the @timestamp field. Is there a way to use both? input { file { path =\> \[ "C:/temp/TEST/\*.xml" \] start\_position =\> "be… --- ## [Need help sending emails separately with only one watcher running (using forearch)](https://discuss.elastic.co/t/need-help-sending-emails-separately-with-only-one-watcher-running-using-forearch/288026)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 0\ **Last updated:** [October 29, 2021, 5:13pm UTC](https://discuss.elastic.co/t/need-help-sending-emails-separately-with-only-one-watcher-running-using-forearch/288026 "2021-10-29T17:13:35Z")
Hello guys need help in the structure of my watcher, I'm trying to create an alert where a notification is sent by email, but the notifications are going in message form (in the same initial email) and when it reaches 10… --- ## [Logstash Pipeline Config API](https://discuss.elastic.co/t/logstash-pipeline-config-api/288087)
**Author:** [@cryonix\_pod](https://discuss.elastic.co/u/cryonix_pod)\ **Replies:** 2\ **Last updated:** [October 31, 2021, 6:00pm UTC](https://discuss.elastic.co/t/logstash-pipeline-config-api/288087 "2021-10-31T18:00:50Z")
Due to the different flow of traffic I need to change the value of pipeline.workers attribute dynamically. But currently I am using sed and other bash tool to edit the pipeline.yaml file and update the value. Is there a… --- ## [ILM rollover not working on max\_size?](https://discuss.elastic.co/t/ilm-rollover-not-working-on-max-size/287999)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 3\ **Last updated:** [October 31, 2021, 3:14pm UTC](https://discuss.elastic.co/t/ilm-rollover-not-working-on-max-size/287999 "2021-10-31T15:14:31Z")
I have an ILM policy with both max\_age and max\_size specified. Rollover happens as expected about ten minutes after max\_age, but does not seem to happen on max\_size. With max\_size set to 10MB I've seen shard sizes up to … --- ## [How can I parse nested JSON strings to JSON objects?](https://discuss.elastic.co/t/how-can-i-parse-nested-json-strings-to-json-objects/287944)
**Author:** [@dudwell](https://discuss.elastic.co/u/dudwell)\ **Replies:** 6\ **Last updated:** [October 31, 2021, 2:50pm UTC](https://discuss.elastic.co/t/how-can-i-parse-nested-json-strings-to-json-objects/287944 "2021-10-31T14:50:37Z")
Could some possibly provide some guidance on how to parse out an array of JSON strings into individual JSON objects with Logstash json parser??? My logstash filter look as follows... filter { grok { add\_tag =\> \[… --- ## [Metricbeat error for pulling oracle database metrics with an oracle client](https://discuss.elastic.co/t/metricbeat-error-for-pulling-oracle-database-metrics-with-an-oracle-client/288094)
**Author:** [@nsharath](https://discuss.elastic.co/u/nsharath)\ **Replies:** 0\ **Last updated:** [October 31, 2021, 1:46pm UTC](https://discuss.elastic.co/t/metricbeat-error-for-pulling-oracle-database-metrics-with-an-oracle-client/288094 "2021-10-31T13:46:31Z")
We are using the following software stack:- Server : RHEL6 (It has oracle client installed. I tried with both full client and thin client) beat : metricbeat-7.9.3-x86\_64 database : Oracle 19 (not installed locally. RH… --- ## [Bulk IndexRequest Fails](https://discuss.elastic.co/t/bulk-indexrequest-fails/288074)
**Author:** [@madhurir](https://discuss.elastic.co/u/madhurir)\ **Replies:** 3\ **Last updated:** [October 31, 2021, 7:29am UTC](https://discuss.elastic.co/t/bulk-indexrequest-fails/288074 "2021-10-31T07:29:40Z")
I am using version 7.15 and trying to create bulk index request in my dev environment. Though the single indexing works, bulk indexing doesn't. I don't see any exception but I see the following in my IntelliJ logs \[ … --- ## [Looking for a well supported jdbc output plugin](https://discuss.elastic.co/t/looking-for-a-well-supported-jdbc-output-plugin/288071)
**Author:** [@David\_Levine](https://discuss.elastic.co/u/David_Levine)\ **Replies:** 3\ **Last updated:** [October 31, 2021, 12:29am UTC](https://discuss.elastic.co/t/looking-for-a-well-supported-jdbc-output-plugin/288071 "2021-10-31T00:29:34Z")
I'm relatively new to logstash and am hoping some of you might be able to point me in the right direction. I'm looking for a reasonably well supported jdbc output plugin that works against the latest version of logstas… --- ## [Disable dynamic mapping over all nodes](https://discuss.elastic.co/t/disable-dynamic-mapping-over-all-nodes/288062)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [October 30, 2021, 8:54pm UTC](https://discuss.elastic.co/t/disable-dynamic-mapping-over-all-nodes/288062 "2021-10-30T20:54:49Z")
I want to disable dynamic mappings for all indices over all nodes of cluster. how can i do this? [Previous page](https://discuss.elastic.co/latest.md?page=1407) [Next page](https://discuss.elastic.co/latest.md?page=1409)