# Latest **URL:** https://discuss.elastic.co/latest.md?page=1440 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1441 --- ## [How to move nested key value to root level and then rename elements root name?](https://discuss.elastic.co/t/how-to-move-nested-key-value-to-root-level-and-then-rename-elements-root-name/286059)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 3:01pm UTC](https://discuss.elastic.co/t/how-to-move-nested-key-value-to-root-level-and-then-rename-elements-root-name/286059 "2021-10-11T15:01:26Z")
How to move nested key value to root level and then rename elements root name I have 4 core cpu and below is a sample of details for 2 cpu core from the source. { "\_source": { "cpu\_usage": { "sys/host-info/… --- ## [How to read the log file in a path using regular expression in filebeat](https://discuss.elastic.co/t/how-to-read-the-log-file-in-a-path-using-regular-expression-in-filebeat/286377)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 2:58pm UTC](https://discuss.elastic.co/t/how-to-read-the-log-file-in-a-path-using-regular-expression-in-filebeat/286377 "2021-10-11T14:58:55Z")
Hello Everyone, I have stuck with an issue to collect/read the logs from a path using regular expression using filebeat. Could some one help me with my issue. Context: I have some servers where the logs are being writt… --- ## [Support SLM (Snapshot Lifecycle management) for license 7.10.2 Elashticsearch](https://discuss.elastic.co/t/support-slm-snapshot-lifecycle-management-for-license-7-10-2-elashticsearch/286354)
**Author:** [@ttttien](https://discuss.elastic.co/u/ttttien)\ **Replies:** 6\ **Last updated:** [October 11, 2021, 2:58pm UTC](https://discuss.elastic.co/t/support-slm-snapshot-lifecycle-management-for-license-7-10-2-elashticsearch/286354 "2021-10-11T14:58:27Z")
Hello everyone, I would like to know that Elasticsearch version 7.10.2 supports or not for SLM (Snapshot Lifecycle Management) in open versions (not enterprise) ? And how can I get the link of the information about that… --- ## [Observability Technology Preview - Feedback](https://discuss.elastic.co/t/observability-technology-preview-feedback/286062)
**Author:** [@dgieselaar](https://discuss.elastic.co/u/dgieselaar)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 2:50pm UTC](https://discuss.elastic.co/t/observability-technology-preview-feedback/286062 "2021-10-11T14:50:42Z")
Got any feedback about the Alerting functionality that was demo'ed during ElasticOn's Observability Technology Preview? Feel free to leave your thoughts here. --- ## [Connect Remote Cluster with Security](https://discuss.elastic.co/t/connect-remote-cluster-with-security/285941)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 2:26pm UTC](https://discuss.elastic.co/t/connect-remote-cluster-with-security/285941 "2021-10-11T14:26:14Z")
My local cluster has already set up transport and ssl security. Now I am going to connect a remote cluster which has its own ca.crt file. How can I make the local and remote clusters to trust each other? Here is the err… --- ## [Label leader lines on pie charts](https://discuss.elastic.co/t/label-leader-lines-on-pie-charts/286365)
**Author:** [@Mathias\_Christian\_Cl](https://discuss.elastic.co/u/Mathias_Christian_Cl)\ **Replies:** 6\ **Last updated:** [October 11, 2021, 2:24pm UTC](https://discuss.elastic.co/t/label-leader-lines-on-pie-charts/286365 "2021-10-11T14:24:35Z")
Hi, I am using Elastic 7.14 and I am trying to create a pie chart which also shows lines from the pie chart to the percentage values. If one slice of the pie is large enough, it is okay to display the value, but if not … --- ## [Unable to change the elastic-agent grpc.port during fleet server setup](https://discuss.elastic.co/t/unable-to-change-the-elastic-agent-grpc-port-during-fleet-server-setup/286314)
**Author:** [@rrivers](https://discuss.elastic.co/u/rrivers)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 2:19pm UTC](https://discuss.elastic.co/t/unable-to-change-the-elastic-agent-grpc-port-during-fleet-server-setup/286314 "2021-10-11T14:19:46Z")
I'm trying to install fleet server 7.15 on an Ubuntu 20.04 machine but I'm running into a port conflict since 127.0.0.1:6789 is already in use by another application. I found a post that suggested running ./elastic-age… --- ## [How to install elastic/kibana/logstash in custom path?](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 12:52pm UTC](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366 "2021-10-11T12:52:41Z")
I need to install Elasticsearch in /opt/elasticsearch, kibana and logstash like this. And then autostart via systemctl. So, I tried like this Install Elasticsearch with RPM | Elasticsearch Reference \[6.2\] | Elastic I e… --- ## [7.15.0 kibana rpm hash mismatch](https://discuss.elastic.co/t/7-15-0-kibana-rpm-hash-mismatch/286237)
**Author:** [@mtaormina](https://discuss.elastic.co/u/mtaormina)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 2:12pm UTC](https://discuss.elastic.co/t/7-15-0-kibana-rpm-hash-mismatch/286237 "2021-10-11T14:12:32Z")
I'm getting a hash mismatch on the 64-bit RPM download for kibana 7.15.0 at https://artifacts.elastic.co/downloads/kibana/kibana-7.15.0-x86\_64.rpm. The SHA512 file says: 1de33aa9a653837d41afe52517e66ae5cc68866020e797939e… --- ## [Kibana visualizations - Apply operations on value returned by a metric](https://discuss.elastic.co/t/kibana-visualizations-apply-operations-on-value-returned-by-a-metric/286356)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:48pm UTC](https://discuss.elastic.co/t/kibana-visualizations-apply-operations-on-value-returned-by-a-metric/286356 "2021-10-11T13:48:41Z")
I have a visualization where I have a metric field that contains the sum of durations (in millisecond), I want to show it in (hh:mm:ss) form, is that possible? --- ## [Details/Insights on how switching the index behind an alias works](https://discuss.elastic.co/t/details-insights-on-how-switching-the-index-behind-an-alias-works/286146)
**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 12:42pm UTC](https://discuss.elastic.co/t/details-insights-on-how-switching-the-index-behind-an-alias-works/286146 "2021-10-11T12:42:44Z")
I would like to get some insight information about how an alias switch works. Our scenario We observed a scenario in our cluster (only 3 nodes) where we did an alias switch and still queried the old data from the old in… --- ## [ELK stack basic license query for use](https://discuss.elastic.co/t/elk-stack-basic-license-query-for-use/286342)
**Author:** [@jaykansagara](https://discuss.elastic.co/u/jaykansagara)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 11:56am UTC](https://discuss.elastic.co/t/elk-stack-basic-license-query-for-use/286342 "2021-10-11T11:56:41Z")
Hi, Currently we are using ELK stack oss version. We are not take any charges from our client like for number of users. We just take charges of our service only. Now I want to know that, If I give basic version of ELK … --- ## [How to test the result of a query and take an action based on that result?](https://discuss.elastic.co/t/how-to-test-the-result-of-a-query-and-take-an-action-based-on-that-result/286362)
**Author:** [@mfilipelopes](https://discuss.elastic.co/u/mfilipelopes)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 11:47am UTC](https://discuss.elastic.co/t/how-to-test-the-result-of-a-query-and-take-an-action-based-on-that-result/286362 "2021-10-11T11:47:58Z")
Hi. Is there a way to test the result of a query and take an action based on that result? I need to do the following: For new coming documents, make a search on a index X to see if that document already exists and if … --- ## [Size mapper plugin - how to see it in Kibana?](https://discuss.elastic.co/t/size-mapper-plugin-how-to-see-it-in-kibana/286247)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 11:19am UTC](https://discuss.elastic.co/t/size-mapper-plugin-how-to-see-it-in-kibana/286247 "2021-10-11T11:19:39Z")
I am going to try that again, since there where already some topics about it: I have installed: Mapper Size Plugin | Elasticsearch Plugins and Integrations \[7.15\] | Elastic on my 7.13.2 cluster and I have created a new … --- ## [Java API Client Documentation](https://discuss.elastic.co/t/java-api-client-documentation/286132)
**Author:** [@blueJ](https://discuss.elastic.co/u/blueJ)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 11:17am UTC](https://discuss.elastic.co/t/java-api-client-documentation/286132 "2021-10-11T11:17:41Z")
Hey everyone, could You help me to find documentation for Java API Client (this beta solution that replaces Java High Level REST Client)? I mean something like the official oracle java libraries documentation? Kind reg… --- ## [RFC-5424 log parsing](https://discuss.elastic.co/t/rfc-5424-log-parsing/286129)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 6\ **Last updated:** [October 11, 2021, 10:59am UTC](https://discuss.elastic.co/t/rfc-5424-log-parsing/286129 "2021-10-11T10:59:10Z")
Hi, I have logs that I'm sending to Logstash from SentinelOne in an RFC-5424 format(this is the way they called it) that I wasn't sure how to handle. I began by dividing the fields using Grok and now my issue is how to… --- ## [Measure web page load times](https://discuss.elastic.co/t/measure-web-page-load-times/286232)
**Author:** [@Xabi](https://discuss.elastic.co/u/Xabi)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 9:57am UTC](https://discuss.elastic.co/t/measure-web-page-load-times/286232 "2021-10-11T09:57:45Z")
Hi, I have a heartbeat agent monitoring some web: type: http urls: \["http://myweb.com"\] schedule: "@every 60s" id: MyId name: MyName and with kibana I monitor the media of "monitor.duration.us" . Is this the bes… --- ## [Whether the sub-metrics page of the service can be more friendly?](https://discuss.elastic.co/t/whether-the-sub-metrics-page-of-the-service-can-be-more-friendly/286291)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [October 9, 2021, 2:17am UTC](https://discuss.elastic.co/t/whether-the-sub-metrics-page-of-the-service-can-be-more-friendly/286291 "2021-10-09T02:17:02Z")
Whether it is possible to add memory.total, memory used by service, and cpu and cpu.total used by service on the page. My services are all running on containers. I am not sure about the actual memory and CPU capacity of… --- ## [Elastic agents reporting error: status code: 429, fleet-server returned an error: MaxLimit](https://discuss.elastic.co/t/elastic-agents-reporting-error-status-code-429-fleet-server-returned-an-error-maxlimit/286348)
**Author:** [@chippey5](https://discuss.elastic.co/u/chippey5)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 8:46am UTC](https://discuss.elastic.co/t/elastic-agents-reporting-error-status-code-429-fleet-server-returned-an-error-maxlimit/286348 "2021-10-11T08:46:10Z")
Hi, Lately we've been receving a lot of Could not communicate with fleet-server Checking API will retry, error: status code: 429, fleet-server returned an error: MaxLimit, message: exceeded the max limit messages from o… --- ## [Conditional coloring Kibana canvas](https://discuss.elastic.co/t/conditional-coloring-kibana-canvas/286037)
**Author:** [@Kadhem](https://discuss.elastic.co/u/Kadhem)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 8:56am UTC](https://discuss.elastic.co/t/conditional-coloring-kibana-canvas/286037 "2021-10-11T08:56:39Z")
Hi, I'm want to change the color of the bars here depending on the value of "Primary channel " . i may have 12 values in "Primary channel" . the graph is displayed in real time so the color changing must be updated ( i… --- ## [How to reduce fuzziness in App search & reduce irrelevant search results?](https://discuss.elastic.co/t/how-to-reduce-fuzziness-in-app-search-reduce-irrelevant-search-results/285675)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-to-reduce-fuzziness-in-app-search-reduce-irrelevant-search-results/285675 "2021-10-11T08:36:33Z")
HI, We get lots of extra results in we search for a particular key word which might not be a direct match and causes the results to be irrelevant, For example, If I search for "whale" , i get "whale", "whale\_test" as… --- ## [Best way to index hierarchical types](https://discuss.elastic.co/t/best-way-to-index-hierarchical-types/286242)
**Author:** [@lovrodoe](https://discuss.elastic.co/u/lovrodoe)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 8:03am UTC](https://discuss.elastic.co/t/best-way-to-index-hierarchical-types/286242 "2021-10-11T08:03:22Z")
Let's say I have hierarchical types such as in example below: base\_type child\_type1 child\_type3 child\_type2 child\_type1 and child\_type2 inherit metadata properties from base\_type. child\_type3 has all pr… --- ## [Indexing strategy for hierarchical types](https://discuss.elastic.co/t/indexing-strategy-for-hierarchical-types/286343)
**Author:** [@lovrodoe](https://discuss.elastic.co/u/lovrodoe)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 7:58am UTC](https://discuss.elastic.co/t/indexing-strategy-for-hierarchical-types/286343 "2021-10-11T07:58:09Z")
Hello, I wrote a post on Friday (here) and since I didn't get a reply, I'll give it another go with a different question. Just a quick summary (check my previous post for a more detailed explanation): Currently on Elas… --- ## [Kibana monitor to execute job if hit disk space (self healing)](https://discuss.elastic.co/t/kibana-monitor-to-execute-job-if-hit-disk-space-self-healing/286339)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 7:02am UTC](https://discuss.elastic.co/t/kibana-monitor-to-execute-job-if-hit-disk-space-self-healing/286339 "2021-10-11T07:02:14Z")
Hi can I know is it possible to elk stack to call a script or Jenkins job if it his 50 percents of disk space. Can share what i can start research on --- ## [Remove the registry of a concrete input](https://discuss.elastic.co/t/remove-the-registry-of-a-concrete-input/286338)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 6:53am UTC](https://discuss.elastic.co/t/remove-the-registry-of-a-concrete-input/286338 "2021-10-11T06:53:27Z")
hello ! i have a filebeat with two inputs with differents tags and outputs. i want to remove only the registry of one of them. is there any way or parameter to remove the registry or or set the entry to read from the b… --- ## [Different index output using ingest pipeline](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 7\ **Last updated:** [October 11, 2021, 5:57am UTC](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325 "2021-10-11T05:57:43Z")
Hello, I'm trying to use ingest pipeline to get different index output. Here's my case: I have fluentd to hit input on Elasticsearch, fluentd make index input on Elasticsearch named as "app-write", I want to filter from… --- ## [Elasticsearch-certutil http](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230)
**Author:** [@karpaz](https://discuss.elastic.co/u/karpaz)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 5:25am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230 "2021-10-11T05:25:12Z")
Hello everyone, I figured out that when generating http certificates by tool ./bin/elasticsearch-certutil http than it didn't work when I have password protected \*.pem/\*.key files. It does generate certs only if it's us… --- ## [Get "readiness probe failed" error when deploy to K8S](https://discuss.elastic.co/t/get-readiness-probe-failed-error-when-deploy-to-k8s/286333)
**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 5:11am UTC](https://discuss.elastic.co/t/get-readiness-probe-failed-error-when-deploy-to-k8s/286333 "2021-10-11T05:11:05Z")
I am trying to deploy Elasticsearch cluster to AWS EKS. I have this spec: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: datasource spec: version: 7.14.0 nodeSets: - name: node … --- ## [Beats load balancer feature vs F5 Load balancer](https://discuss.elastic.co/t/beats-load-balancer-feature-vs-f5-load-balancer/286332)
**Author:** [@Ismaeel\_Enjreny](https://discuss.elastic.co/u/Ismaeel_Enjreny)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 5:10am UTC](https://discuss.elastic.co/t/beats-load-balancer-feature-vs-f5-load-balancer/286332 "2021-10-11T05:10:53Z")
Beats (Filebeat and Heartbeat) provide a way to do load balancing when they send data to output (to Logstash or Elasticsearch), the configuration include the following points: hosts: \["localhost:5044", "localhost:5045"\]… --- ## [How to call Explain with a NEST SearchDescriptor object?](https://discuss.elastic.co/t/how-to-call-explain-with-a-nest-searchdescriptor-object/286327)
**Author:** [@chm](https://discuss.elastic.co/u/chm)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 4:04am UTC](https://discuss.elastic.co/t/how-to-call-explain-with-a-nest-searchdescriptor-object/286327 "2021-10-11T04:04:30Z")
I'm running a search calling Nest's SearchAsync with a SearchDescriptor object. I want to be able to reuse that SearchDescriptor object in a call to the Explain API with a particular document id, to see why that doc was/… [Previous page](https://discuss.elastic.co/latest.md?page=1439) [Next page](https://discuss.elastic.co/latest.md?page=1441)