# Latest **URL:** https://discuss.elastic.co/latest.md?page=1439 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1440 --- ## [Need support to restore backup from one instance to another in elastic cloud](https://discuss.elastic.co/t/need-support-to-restore-backup-from-one-instance-to-another-in-elastic-cloud/285892)
**Author:** [@skp](https://discuss.elastic.co/u/skp)\ **Replies:** 3\ **Last updated:** [October 12, 2021, 5:36am UTC](https://discuss.elastic.co/t/need-support-to-restore-backup-from-one-instance-to-another-in-elastic-cloud/285892 "2021-10-12T05:36:20Z")
Hi Team, I need to restore the backup from one instance to another if i give below command its not able to find the snapshot in other instance by the way they have the same repository and restore within the same instanc… --- ## [Find elements in array of nested dictionaries](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431)
**Author:** [@niato](https://discuss.elastic.co/u/niato)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 4:21am UTC](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431 "2021-10-12T04:21:02Z")
I'm struggling to find a way to get documents meeting specific criteria in an index that looks like this: { "products": \[ { "name": "product 1", "defects": { "packaging": { "desc": ".… --- ## [Logstash write to kafka's nonexistent topic, but no errors/warns in debug log](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193)
**Author:** [@silbertmonaphia](https://discuss.elastic.co/u/silbertmonaphia)\ **Replies:** 12\ **Last updated:** [October 12, 2021, 3:50am UTC](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193 "2021-10-12T03:50:11Z")
Description: Logstash writes event to kafka, but I forgot to create topic on kafka. And then I check logstash logs, but I can't find any error or warn messages in logs. Is this a bug of logstash 5.5 that logstash isn't … --- ## [Filebeat文件注册表无法更新，日志无法收集](https://discuss.elastic.co/t/filebeat/286429)
**Author:** [@StruggleYang](https://discuss.elastic.co/u/StruggleYang)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 3:42am UTC](https://discuss.elastic.co/t/filebeat/286429 "2021-10-12T03:42:59Z")
filebeat注册表一直出现如下日志 2021-10-12T03:11:29.199Z ERROR registrar/registrar.go:374 Writing of registry returned error: rename /usr/share/filebeat/data/registry/filebeat/data.json.new /usr/share/filebeat/data/re… --- ## [Elapsed time filter is not calculating the time correctly](https://discuss.elastic.co/t/elapsed-time-filter-is-not-calculating-the-time-correctly/286418)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 3:12am UTC](https://discuss.elastic.co/t/elapsed-time-filter-is-not-calculating-the-time-correctly/286418 "2021-10-12T03:12:00Z")
Hi, I am using an elapsed time plugin, as per the documentation the elapsed-time is calculated in seconds. I am calculating the values on a unique field basis "seq". Here is what i am getting, In the snapshot the second… --- ## [Track Application-level Events?](https://discuss.elastic.co/t/track-application-level-events/286419)
**Author:** [@dekim](https://discuss.elastic.co/u/dekim)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 1:49am UTC](https://discuss.elastic.co/t/track-application-level-events/286419 "2021-10-12T01:49:47Z")
We currently have a set of microservice. We would like to log all HTTP Requests using the Elastic Common Schema (ECS). Since Elastic propose a SIEM (known as Elastic SIEM), would it make sense to display these data in … --- ## [Elastic search 6.8.1 - missing indices](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364)
**Author:** [@Dan7](https://discuss.elastic.co/u/Dan7)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 12:22am UTC](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364 "2021-10-12T00:22:58Z")
Good day, I have an Elasticsearch 6.8.1 single node cluster running inside a kubernetes statefulset to index documents that I need to look after and I noticed that the snapshot path.repo had not been setup previously. S… --- ## [How to achieve hierarchical facets without using swift dependencies](https://discuss.elastic.co/t/how-to-achieve-hierarchical-facets-without-using-swift-dependencies/286413)
**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 8:38pm UTC](https://discuss.elastic.co/t/how-to-achieve-hierarchical-facets-without-using-swift-dependencies/286413 "2021-10-11T20:38:46Z")
am following below example to develop with React App search UI. I want to call search Api when user click on 1st level category to get the 2nd level categories but the Api connector doesn't have a method to call search… --- ## [\[.kibana\_task\_manager\] Action failed with 'Request timed out'](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389)
**Author:** [@DenisSermyagin](https://discuss.elastic.co/u/DenisSermyagin)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 8:17pm UTC](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389 "2021-10-11T20:17:49Z")
Hello! I have deployed Elasticsearch and kibana versions 7.13.4. I encountered this error: {"type":"log","@timestamp":"2021-10-11T15:41:58+00:00","tags":\["info","savedobjects-service"\],"pid":948,"message":"\[.kibana\_ta… --- ## [Json v/s ndjson in Kibana](https://discuss.elastic.co/t/json-v-s-ndjson-in-kibana/285879)
**Author:** [@Rakhi](https://discuss.elastic.co/u/Rakhi)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 8:11pm UTC](https://discuss.elastic.co/t/json-v-s-ndjson-in-kibana/285879 "2021-10-11T20:11:05Z")
In our case the ndjson files are checked into git repository and deployed from there into Kibana. But whenever we make changes to the Kibana dashboards -\> we export the ndjson -\> and manually handpick and then merge the… --- ## [Cumulative running total for field independant of search range](https://discuss.elastic.co/t/cumulative-running-total-for-field-independant-of-search-range/286406)
**Author:** [@d\_s\_9](https://discuss.elastic.co/u/d_s_9)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 7:23pm UTC](https://discuss.elastic.co/t/cumulative-running-total-for-field-independant-of-search-range/286406 "2021-10-11T19:23:55Z")
Hi all, I'm indexing time series documents containing a timestamp as well as an integer value which i want to have a running total for, starting from the first indexed document and adding all of the supplied values of t… --- ## [Error for logstash.conf](https://discuss.elastic.co/t/error-for-logstash-conf/286400)
**Author:** [@Johnny\_Cash\_Cow](https://discuss.elastic.co/u/Johnny_Cash_Cow)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 6:44pm UTC](https://discuss.elastic.co/t/error-for-logstash-conf/286400 "2021-10-11T18:44:47Z")
The only non-commented out line of my logstash.conf is: path.config: "C:/ELK/logstash-7.15.0-windows-x86\_64/logstash-7.15.0/config/logstash-sample.conf" My only non commented out section is of my pipeline.yml: - pip… --- ## [How do I read the traceparent in angular when using the apm-run-angular library?](https://discuss.elastic.co/t/how-do-i-read-the-traceparent-in-angular-when-using-the-apm-run-angular-library/285631)
**Author:** [@fakeelasticjr](https://discuss.elastic.co/u/fakeelasticjr)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 6:18pm UTC](https://discuss.elastic.co/t/how-do-i-read-the-traceparent-in-angular-when-using-the-apm-run-angular-library/285631 "2021-10-11T18:18:29Z")
We're using APM with an Angular application. We're using the apm-run-angular library. Somewhere in this library it adds a "traceparent" header to the XHR requests We'd like to get access to the "traceparent" header t… --- ## [Yet, another Firewall question](https://discuss.elastic.co/t/yet-another-firewall-question/286078)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 6:13pm UTC](https://discuss.elastic.co/t/yet-another-firewall-question/286078 "2021-10-11T18:13:13Z")
I am running Stack 7.13.4 on Windows 10 with McAfee Small Business Security (a Firewall among other things) I have two nodes of Elasticsearch and One of Kibana on this one machine. I have opened TCP/UDP ports 9200, 92… --- ## [User Experience - Javascript errors](https://discuss.elastic.co/t/user-experience-javascript-errors/285656)
**Author:** [@Jugsofbeer](https://discuss.elastic.co/u/Jugsofbeer)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 6:07pm UTC](https://discuss.elastic.co/t/user-experience-javascript-errors/285656 "2021-10-11T18:07:57Z")
Hi, After using the simple javascript library and 6 lines of code to instrument a few test pages, I got the data flowing ... but I havent yet seen javascript console error come through like in the examples. Am i missin… --- ## [Filebeat multi line stopped working](https://discuss.elastic.co/t/filebeat-multi-line-stopped-working/286397)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 5:55pm UTC](https://discuss.elastic.co/t/filebeat-multi-line-stopped-working/286397 "2021-10-11T17:55:50Z")
Hi, I have been using the filebeat for sometime with multiline pattern. Everything was working fine last week it stopped working. I was using 7.14.1 for filebeat but now i've tried 7.6.2 and 7.15 both. I've been trying… --- ## [Indexing Multipolyon with Elasticearch](https://discuss.elastic.co/t/indexing-multipolyon-with-elasticearch/286265)
**Author:** [@Faradandy](https://discuss.elastic.co/u/Faradandy)\ **Replies:** 5\ **Last updated:** [October 11, 2021, 5:50pm UTC](https://discuss.elastic.co/t/indexing-multipolyon-with-elasticearch/286265 "2021-10-11T17:50:56Z")
Hi there, I'm using Elasticsearch 7.15 with GDAL 3.3.1 and trying to index the UK Land Registry Dataset. I currently have these data stored in a PSQL table and am trying to use ogr2ogr to create the ES index. I've def… --- ## [Refresh\_interval less than 1 per second?](https://discuss.elastic.co/t/refresh-interval-less-than-1-per-second/286069)
**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\ **Replies:** 7\ **Last updated:** [October 11, 2021, 5:46pm UTC](https://discuss.elastic.co/t/refresh-interval-less-than-1-per-second/286069 "2021-10-11T17:46:17Z")
Hi guys, We are syncing data from Couchbase into Elasticsearch via CBES connector and have up to ~550ms delay from CBES inserting data into ES. Afterwards it takes up to 2 seconds for data to become searchable in ES. D… --- ## [Yellow Cluster Health - Missing Replica Shards](https://discuss.elastic.co/t/yellow-cluster-health-missing-replica-shards/285859)
**Author:** [@David\_Reck](https://discuss.elastic.co/u/David_Reck)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 5:43pm UTC](https://discuss.elastic.co/t/yellow-cluster-health-missing-replica-shards/285859 "2021-10-11T17:43:07Z")
Hello everyone, I am continually having new indexes get created with a yellow status. When I do a \_cluster/allocation/explain I get this back { "index" : "vnext-signalrhub-2021.10.05", "shard" : 0, "primary" : f… --- ## [Elasticsearch Data Recovery](https://discuss.elastic.co/t/elasticsearch-data-recovery/286009)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-data-recovery/286009 "2021-10-11T17:33:28Z")
Hi, We had an incident where all master nodes failed. After they were auto-replaced the old data nodes did not reconnect to the master due to state mismatch. While we were able to clear down the state so the nodes could… --- ## [Logstash- Create different logfiles for different pipeline](https://discuss.elastic.co/t/logstash-create-different-logfiles-for-different-pipeline/286370)
**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 5:14pm UTC](https://discuss.elastic.co/t/logstash-create-different-logfiles-for-different-pipeline/286370 "2021-10-11T17:14:52Z")
Hi, I am using logstash log4j2.properties configuration for log controlling e.g. log rotation, log preservation, controlling file name for logging, location of logs etc. Based on below discussion I used to configure lo… --- ## [DNS filter, how to save IP to a separate field](https://discuss.elastic.co/t/dns-filter-how-to-save-ip-to-a-separate-field/286391)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 5:06pm UTC](https://discuss.elastic.co/t/dns-filter-how-to-save-ip-to-a-separate-field/286391 "2021-10-11T17:06:28Z")
Hi, I'm using the DNS filter in my Logstash conf and I would like to store the IP address that the filter is resolving to a separate field. I tried using the add\_field parameter but its not working. I end up storing the… --- ## [Timestamp ISSUE](https://discuss.elastic.co/t/timestamp-issue/286170)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 4:54pm UTC](https://discuss.elastic.co/t/timestamp-issue/286170 "2021-10-11T16:54:01Z")
Hello every body, I have a stand allone architecture. Logs are sent from syslog\_ng server to logstash - \> Elasticsearch -\> kibana. I have a probleme with the timestamp as the capture below shows The logs are received … --- ## [Terms query routing optimization](https://discuss.elastic.co/t/terms-query-routing-optimization/286390)
**Author:** [@Ragav\_Kb](https://discuss.elastic.co/u/Ragav_Kb)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 4:21pm UTC](https://discuss.elastic.co/t/terms-query-routing-optimization/286390 "2021-10-11T16:21:39Z")
My search is going to look something as below. For most cases the number of items in userId is expected to be between 100 to 200 atmost, although on some cases it may go up to 1000. Is there anything to consider in gene… --- ## [Change or disable the elastic-agent grpc.port during fleet server setup in docker container](https://discuss.elastic.co/t/change-or-disable-the-elastic-agent-grpc-port-during-fleet-server-setup-in-docker-container/286388)
**Author:** [@Yustas](https://discuss.elastic.co/u/Yustas)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 3:42pm UTC](https://discuss.elastic.co/t/change-or-disable-the-elastic-agent-grpc-port-during-fleet-server-setup-in-docker-container/286388 "2021-10-11T15:42:08Z")
Hello. I want run two fleet-agent 7.15 on same host. Becouse one must run in fleet-server mode and other with different policy for retrive syslog events from remoute source. I use docker-compose to cnfigure agents and… --- ## [I want to preferentially display records for which product images are set](https://discuss.elastic.co/t/i-want-to-preferentially-display-records-for-which-product-images-are-set/286378)
**Author:** [@ruby501a](https://discuss.elastic.co/u/ruby501a)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 3:28pm UTC](https://discuss.elastic.co/t/i-want-to-preferentially-display-records-for-which-product-images-are-set/286378 "2021-10-11T15:28:19Z")
I have an App Search engine that has product data registered. Records with product images have their URLs stored, and records without them have nulls stored. Of these, I want to preferentially display the records for wh… --- ## [Search\_phase\_execution\_exception](https://discuss.elastic.co/t/search-phase-execution-exception/286336)
**Author:** [@prashanth\_sri](https://discuss.elastic.co/u/prashanth_sri)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 3:27pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception/286336 "2021-10-11T15:27:07Z")
hi all , i have 15 nodes in my Elasticsearch cluster, and each shards have 10GB , currently we have (1 shard+2 replicas ) ,we are using 6.18 elastic version , we are try ing to access data from api , but when i am runni… --- ## [Confusion, dot-notation vs. sub-objects](https://discuss.elastic.co/t/confusion-dot-notation-vs-sub-objects/286199)
**Author:** [@anton-johansson](https://discuss.elastic.co/u/anton-johansson)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 3:15pm UTC](https://discuss.elastic.co/t/confusion-dot-notation-vs-sub-objects/286199 "2021-10-11T15:15:40Z")
We're a bit confused about the specification regarding dot-notation vs. sub-objects. If you look in the documentation, it is specified as dot-notation, see here: This is implemented as dot-notation in the Java/Log4j2-i… --- ## [Metadata \_tier value after rollover](https://discuss.elastic.co/t/metadata-tier-value-after-rollover/286117)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 3:13pm UTC](https://discuss.elastic.co/t/metadata-tier-value-after-rollover/286117 "2021-10-11T15:13:23Z")
Hey there, Is there a way to change the Metadata \_tier value after that an ILM is executed? If an index starts with \_tier set to data\_hot and then it is moved to a warm node, can I change the Metadata automatically? I… --- ## [How to read local0 files in unix using filebeat](https://discuss.elastic.co/t/how-to-read-local0-files-in-unix-using-filebeat/286181)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 3:02pm UTC](https://discuss.elastic.co/t/how-to-read-local0-files-in-unix-using-filebeat/286181 "2021-10-11T15:02:28Z")
Hello Everyone, I have some applications writing the logs to local0.info & local4.info file in UNIX servers. I have to read the log content from above files using filebeat.yml and send the same to Logstash. We can't r… [Previous page](https://discuss.elastic.co/latest.md?page=1438) [Next page](https://discuss.elastic.co/latest.md?page=1440)