# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1436

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1437

---

## [Migrating ML jobs to production environment?](https://discuss.elastic.co/t/migrating-ml-jobs-to-production-environment/286531)

<div class="topic-metadata">

**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 11:36am UTC](https://discuss.elastic.co/t/migrating-ml-jobs-to-production-environment/286531 "2021-10-13T11:36:46Z")

</div>

From 2018 Moving ML jobs and their data it was not possible, but now is it possible? looking at this However when i go to stack management -\> machine learning (jobs list) there is no option to export, or even in the …

---

## [Can't connect hosts to the Fleet Server](https://discuss.elastic.co/t/cant-connect-hosts-to-the-fleet-server/286450)

<div class="topic-metadata">

**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\
**Replies:** 17\
**Last updated:** [October 13, 2021, 11:26am UTC](https://discuss.elastic.co/t/cant-connect-hosts-to-the-fleet-server/286450 "2021-10-13T11:26:17Z")

</div>

Hi all! I need your help! I have a self-hosted ELK (not cloud) I've enrolled the Fleet Server for SIEM using this manual for a self-managed server with default parameters in elastic-agent.yml I need to connect hosts …

---

## [Kibana standard security and reverse proxy requires login multiple times](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404)

<div class="topic-metadata">

**Author:** [@mrybinski](https://discuss.elastic.co/u/mrybinski)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 11:23am UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404 "2021-10-13T11:23:14Z")

</div>

Hello! I'm using basic Elastic Stack version 7.15 (Elasticsearch, Kibana, Logstash, Filebeat). To access Kibana I use IIS's URL Rewrite and reverse proxy. I wanted to deal with security warning by setting up minimal sec…

---

## [Elastic cluster,set up security,password setup all collide-native authentication](https://discuss.elastic.co/t/elastic-cluster-set-up-security-password-setup-all-collide-native-authentication/286448)

<div class="topic-metadata">

**Author:** [@Netanelp](https://discuss.elastic.co/u/Netanelp)\
**Replies:** 6\
**Last updated:** [October 13, 2021, 11:08am UTC](https://discuss.elastic.co/t/elastic-cluster-set-up-security-password-setup-all-collide-native-authentication/286448 "2021-10-13T11:08:49Z")

</div>

Hey guys, I will start with my main goal here, trying to move my elastic cluster to use native security/authentication. I've recently taken over a project involving an elastic cluster(Gold plan) trying to make it work …

---

## [Tree node clustrering master\_not\_discovered\_exception issue](https://discuss.elastic.co/t/tree-node-clustrering-master-not-discovered-exception-issue/286604)

<div class="topic-metadata">

**Author:** [@Ali\_Panahian](https://discuss.elastic.co/u/Ali_Panahian)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 10:35am UTC](https://discuss.elastic.co/t/tree-node-clustrering-master-not-discovered-exception-issue/286604 "2021-10-13T10:35:37Z")

</div>

i have tree node cluster of ES, the issue is: when i stop one node the other nodes work fine and discover master node and everything works fine, but when is stop 2 node, the last one return master\_not\_discovered\_except…

---

## [Upgrade ES to 6.8 and Graylog to 4.0](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586)

<div class="topic-metadata">

**Author:** [@vivir](https://discuss.elastic.co/u/vivir)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 9:03am UTC](https://discuss.elastic.co/t/upgrade-es-to-6-8-and-graylog-to-4-0/286586 "2021-10-13T09:03:26Z")

</div>

I’m currently using graylog 3.3 and I’d like to upgrade to version 4.0. It looks like I need to upgrade Elasticsearch first ( currently using version 5.6). I’ve done research online but I can’t seem to find how to re-i…

---

## [Json Parsing](https://discuss.elastic.co/t/json-parsing/286277)

<div class="topic-metadata">

**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\
**Replies:** 7\
**Last updated:** [October 13, 2021, 9:21am UTC](https://discuss.elastic.co/t/json-parsing/286277 "2021-10-13T09:21:29Z")

</div>

i have event coming in my logstash as a json {"key1": "value1", "key2": "value2", "key3": {"key4": "value4"}} I wanted too put that event inside a key data like {"data" : { "key1": "value1", "ke…

---

## [Rsyslog, Logstash parse Error when incoming log is too big](https://discuss.elastic.co/t/rsyslog-logstash-parse-error-when-incoming-log-is-too-big/286513)

<div class="topic-metadata">

**Author:** [@Sequa](https://discuss.elastic.co/u/Sequa)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 2:01pm UTC](https://discuss.elastic.co/t/rsyslog-logstash-parse-error-when-incoming-log-is-too-big/286513 "2021-10-12T14:01:30Z")

</div>

Hello, I have build a syslog server with web gui for this is use the ELK-Stack and configured Rsyslog. Everything is good and it works but when clients send log files that are more than 7999 characters long, I get the fo…

---

## [Grok pattern](https://discuss.elastic.co/t/grok-pattern/286575)

<div class="topic-metadata">

**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 8:54am UTC](https://discuss.elastic.co/t/grok-pattern/286575 "2021-10-13T08:54:36Z")

</div>

I have to parse this log- 05-10-21T13:17:20.457741775|lapideployment-547944bff7-4f2qr|1|iuser|20|0|25.090g|1.378g|68160|S|0.0|1.1|116:20.87|java|265 I am using pattern-%{TIMESTAMP\_ISO8601:timestamp}|%{DATA:pod}| It is…

---

## [Configuration parameter details \[cluster.initial\_master\_nodes\]](https://discuss.elastic.co/t/configuration-parameter-details-cluster-initial-master-nodes/286541)

<div class="topic-metadata">

**Author:** [@mrchile](https://discuss.elastic.co/u/mrchile)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 8:49am UTC](https://discuss.elastic.co/t/configuration-parameter-details-cluster-initial-master-nodes/286541 "2021-10-13T08:49:50Z")

</div>

This is an excerpt from the official documentation and I would like to know. By cluster, I mean a combination of virtual machines on which one instance of elastic is installed. Node is a new instance of a virtual machine…

---

## [Unable to search for a Special Character using query\_string](https://discuss.elastic.co/t/unable-to-search-for-a-special-character-using-query-string/286596)

<div class="topic-metadata">

**Author:** [@paramzvik](https://discuss.elastic.co/u/paramzvik)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 8:42am UTC](https://discuss.elastic.co/t/unable-to-search-for-a-special-character-using-query-string/286596 "2021-10-13T08:42:35Z")

</div>

Hi Developers, I am getting zero data after querying for a special character. Can some one help me with this. The query I am using is as follows. "query\_string" : { "query" : ""+"", "fields" : \[ "\_\_title" \], "defau…

---

## [Need to schedule a query](https://discuss.elastic.co/t/need-to-schedule-a-query/286360)

<div class="topic-metadata">

**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 7:03am UTC](https://discuss.elastic.co/t/need-to-schedule-a-query/286360 "2021-10-13T07:03:27Z")

</div>

Hi Experts, I want to schedule a query in kibana . Is any possibility to do that? will share you my query. PUT index/\_delete\_by\_query { "query":{"range":{"createdon":{"lt":"now-1d","format" : "yyyy-MM-dd HH:mm:ss"}…

---

## [Date histogram data precalculation](https://discuss.elastic.co/t/date-histogram-data-precalculation/286574)

<div class="topic-metadata">

**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 6:58am UTC](https://discuss.elastic.co/t/date-histogram-data-precalculation/286574 "2021-10-13T06:58:24Z")

</div>

Hi, is there a way to perform operations on the data before creating the aggregation? In my example the aggregation is created and then the aggregate data is multiplied \* 10. I have to multiply the data and than aggrega…

---

## [Logstash plugin install error](https://discuss.elastic.co/t/logstash-plugin-install-error/286571)

<div class="topic-metadata">

**Author:** [@nigel.wadsworth](https://discuss.elastic.co/u/nigel.wadsworth)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 6:19am UTC](https://discuss.elastic.co/t/logstash-plugin-install-error/286571 "2021-10-13T06:19:18Z")

</div>

Hi there. I have an on-prem Elastic stack implementation that needed the logstash github plugin. This isn't installed by default, and my stack is in an OT zone so is locked from the internet. To get round this, I foll…

---

## [Date histogram filter different math operations](https://discuss.elastic.co/t/date-histogram-filter-different-math-operations/286569)

<div class="topic-metadata">

**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 6:10am UTC](https://discuss.elastic.co/t/date-histogram-filter-different-math-operations/286569 "2021-10-13T06:10:57Z")

</div>

Hi, how can I create a date histogram where I have this source datas: { "\_index" : "test-data-2021-6-24", "\_type" : "\_doc", "\_id" : "wB0PDnwBqyyjw7qp6Ih\_", "\_score" : 1.0, "\_…

---

## [Logstash Process](https://discuss.elastic.co/t/logstash-process/285886)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 5:32am UTC](https://discuss.elastic.co/t/logstash-process/285886 "2021-10-13T05:32:26Z")

</div>

Hello Team, Just wanted to understand from logstash processes point , if I configure multiple pipelines on a single node(machine) will all the pipelines run under the single process (my understanding is it will run on s…

---

## [How to use Java apm agent recording flag in spring cloud?](https://discuss.elastic.co/t/how-to-use-java-apm-agent-recording-flag-in-spring-cloud/286568)

<div class="topic-metadata">

**Author:** [@rotihaw282](https://discuss.elastic.co/u/rotihaw282)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 5:24am UTC](https://discuss.elastic.co/t/how-to-use-java-apm-agent-recording-flag-in-spring-cloud/286568 "2021-10-13T05:24:22Z")

</div>

Hi, I need clarification on how to disable the java APM agent in the spring cloud. I am running java microservices with a single server and multiple apps. I tried with recording=false, enable=false It won't work for me…

---

## [Getting timestamp inside timestamp](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511)

<div class="topic-metadata">

**Author:** [@Prasang-Biyani](https://discuss.elastic.co/u/Prasang-Biyani)\
**Replies:** 12\
**Last updated:** [October 13, 2021, 5:28am UTC](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511 "2021-10-13T05:28:05Z")

</div>

Hi Everyone, I am new to the Logstash, so please forgive me for asking silly question. I am trying to convert timestamp from the log file into @timestamp. Here is my logstash conf file. input { udp { port…

---

## [Kibana: Readiness probe failed: HTTP probe failed with statuscode: 503](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493)

<div class="topic-metadata">

**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 5:19am UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493 "2021-10-13T05:19:29Z")

</div>

Hi All, I have created Elasticsearch/kibana using eck operator. Although kibana pod is running, I see that readiness probe is failed i.e Readiness probe failed: HTTP probe failed with statuscode: 503. What could be reas…

---

## [Possible values for "Phase" field for elasticSearch resource](https://discuss.elastic.co/t/possible-values-for-phase-field-for-elasticsearch-resource/286455)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 5:01am UTC](https://discuss.elastic.co/t/possible-values-for-phase-field-for-elasticsearch-resource/286455 "2021-10-13T05:01:21Z")

</div>

After an Elasticsearch instance is created, I do a kubectl get Elasticsearch to get the status and I get the following output: NAME HEALTH NODES VERSION PHASE AGE quickstart green 3 7.11.2 Ready…

---

## [Elasticsearch ram size](https://discuss.elastic.co/t/elasticsearch-ram-size/286449)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 11\
**Last updated:** [October 13, 2021, 4:47am UTC](https://discuss.elastic.co/t/elasticsearch-ram-size/286449 "2021-10-13T04:47:28Z")

</div>

Hi Team, I have installed Elasticsearch on windows 2016 server for the first time with hardware configuration of 16GB ram, 64 - bit OS, 8 core. Now I want set the heap size of the elastic cluster. What heap size shoul…

---

## [Persistent queue corruption](https://discuss.elastic.co/t/persistent-queue-corruption/286412)

<div class="topic-metadata">

**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 3:59am UTC](https://discuss.elastic.co/t/persistent-queue-corruption/286412 "2021-10-13T03:59:32Z")

</div>

Hi, I had a disk saturation on a logstash 5.6.8 installation I got to remove the "checkpoint.head" (0 bytes size) file to restart the pipeline Now I have theses files in queue dir : -rw-r--r-- 1 logstash logstash 262…

---

## [Deleted the winlog index by mistake](https://discuss.elastic.co/t/deleted-the-winlog-index-by-mistake/286565)

<div class="topic-metadata">

**Author:** [@Marcelle\_Lic](https://discuss.elastic.co/u/Marcelle_Lic)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 3:49am UTC](https://discuss.elastic.co/t/deleted-the-winlog-index-by-mistake/286565 "2021-10-13T03:49:57Z")

</div>

I deleted my winlogbeat index by mistake and I have been trying hard to reindex the events but no luck for the last few weeks, either I get Root-error or code 404 or Invalid index name, an alias exists with the same na…

---

## [Elasticsearch giving creating index, cause \[auto(bulk api)\]](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560)

<div class="topic-metadata">

**Author:** [@Aashish\_Goyal](https://discuss.elastic.co/u/Aashish_Goyal)\
**Replies:** 9\
**Last updated:** [October 13, 2021, 2:57am UTC](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560 "2021-10-13T02:57:05Z")

</div>

I am facing issues that old indices are getting created automatically, as I am using fluentd as a log shipper to Elasticsearch. I am facing this issue since 2 days, dig very much for this but no result till now. I delete…

---

## [The best way to export specific data to lucene file like snapshot file](https://discuss.elastic.co/t/the-best-way-to-export-specific-data-to-lucene-file-like-snapshot-file/286557)

<div class="topic-metadata">

**Author:** [@lec\_ssmi](https://discuss.elastic.co/u/lec_ssmi)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 2:18am UTC](https://discuss.elastic.co/t/the-best-way-to-export-specific-data-to-lucene-file-like-snapshot-file/286557 "2021-10-13T02:18:08Z")

</div>

I want to export some data according to specific condititons. But the rest api has a bad performance. In order to export the file as soon as possible, I can use snapshot. But snapshot can only be exported incrementally,…

---

## [Index size increased after reindexing](https://discuss.elastic.co/t/index-size-increased-after-reindexing/286482)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 1:56am UTC](https://discuss.elastic.co/t/index-size-increased-after-reindexing/286482 "2021-10-13T01:56:40Z")

</div>

After the completion of reindex process,the size of new index is very big compare to original index.Although i force\_merge the index nothing happened. Original index size was 101.7gb and new index is 140gb around.We've …

---

## [Set password during deployment elasticsearch for my app](https://discuss.elastic.co/t/set-password-during-deployment-elasticsearch-for-my-app/286548)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 4\
**Last updated:** [October 13, 2021, 1:53am UTC](https://discuss.elastic.co/t/set-password-during-deployment-elasticsearch-for-my-app/286548 "2021-10-13T01:53:04Z")

</div>

I am running my app as a container that need to access Elasticsearch deployed as container also, so in my app settings yaml i have to enter credentials and url for elastic that will be deployed also in docker. How can i…

---

## [Search query duration record](https://discuss.elastic.co/t/search-query-duration-record/286271)

<div class="topic-metadata">

**Author:** [@KiddoATOM](https://discuss.elastic.co/u/KiddoATOM)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 1:12am UTC](https://discuss.elastic.co/t/search-query-duration-record/286271 "2021-10-13T01:12:32Z")

</div>

Hi. I have a problem in an ES cluster, where due to heavy search queries the cluster stops responding. I want to adjust the global search timeout and we wanted to know if there was a way to obtain the duration of each se…

---

## [Elasticsearch: Duplicate Documents](https://discuss.elastic.co/t/elasticsearch-duplicate-documents/286478)

<div class="topic-metadata">

**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 1:10am UTC](https://discuss.elastic.co/t/elasticsearch-duplicate-documents/286478 "2021-10-13T01:10:38Z")

</div>

Hi everyone, I have an occasional problem that sometimes there are several duplicate documents generated. This is part of our CI and it should upload data to elastic with details about our build failure. After analysi…

---

## [How to find Mapping conflict?](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 12:54am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497 "2021-10-13T00:54:17Z")

</div>

We upgraded cluster from 7.12 to 7.15 new index created metricbeat-7.15.0 but now in index pattern it says I have mapping conflict in older version there was a field type=conflict but no longer. how do I find which fi…

[Previous page](https://discuss.elastic.co/latest.md?page=1435)

[Next page](https://discuss.elastic.co/latest.md?page=1437)
