# Latest **URL:** https://discuss.elastic.co/latest.md?page=1448 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1449 --- ## [Création d'un nouvel index pour indexer des emails et leurs contenus](https://discuss.elastic.co/t/creation-dun-nouvel-index-pour-indexer-des-emails-et-leurs-contenus/285882)
**Author:** [@Yathus](https://discuss.elastic.co/u/Yathus)\ **Replies:** 8\ **Last updated:** [October 5, 2021, 12:41pm UTC](https://discuss.elastic.co/t/creation-dun-nouvel-index-pour-indexer-des-emails-et-leurs-contenus/285882 "2021-10-05T12:41:17Z")
Bonjour, Par le passé nous avons utilisé ES de maniere assez simple, nos index sont composés d'un seul type de document et un champ "content". Là je cherche à indexer des emails (Sujet, Corps, Expediteur, Date) et le c… --- ## [Message "Invalid JSON" when inserting a Grok pattern in a Processor for an Ingest Node Pipeline](https://discuss.elastic.co/t/message-invalid-json-when-inserting-a-grok-pattern-in-a-processor-for-an-ingest-node-pipeline/285884)
**Author:** [@ArieTwigt](https://discuss.elastic.co/u/ArieTwigt)\ **Replies:** 0\ **Last updated:** [October 5, 2021, 6:22am UTC](https://discuss.elastic.co/t/message-invalid-json-when-inserting-a-grok-pattern-in-a-processor-for-an-ingest-node-pipeline/285884 "2021-10-05T06:22:56Z")
With the Grok Debugger I managed to create the right Grok pattern for the message I would like to parse. When trying to add the following Grok pattern in the Processor for the Ingest Node Pipeline, I get an error message… --- ## [Application URL not working after upgrade from 7.8 to 7.14.2](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 1\ **Last updated:** [October 5, 2021, 12:35pm UTC](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840 "2021-10-05T12:35:04Z")
Hello, I am encountering following two issues: I get 'Application Not Found No application was found at this URL. Try going back or choosing an app from the menu.' when trying to access dashboards. See attached Co… --- ## [Fvh highlighter problem with inverted proximity search](https://discuss.elastic.co/t/fvh-highlighter-problem-with-inverted-proximity-search/285916)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 0\ **Last updated:** [October 5, 2021, 12:31pm UTC](https://discuss.elastic.co/t/fvh-highlighter-problem-with-inverted-proximity-search/285916 "2021-10-05T12:31:11Z")
Hi, I use Elasticsearch 7.9.3, I configured 2 text fileds, one of them is for exact search. Mapping: "text\_html": { "type": "text", "term\_vector": "with\_positions\_offsets", "store": true, "a… --- ## [Manually add geo point to server logs](https://discuss.elastic.co/t/manually-add-geo-point-to-server-logs/285793)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 5\ **Last updated:** [October 5, 2021, 11:46am UTC](https://discuss.elastic.co/t/manually-add-geo-point-to-server-logs/285793 "2021-10-05T11:46:55Z")
How do I add the location of our servers as a geo-point that can be used with Kibana Maps to the logs of that server? For example: Let's say a log has agent.name "AgentExample01", then I would match on that, and add la… --- ## [Unable to store .security index in s3 bucket](https://discuss.elastic.co/t/unable-to-store-security-index-in-s3-bucket/283734)
**Author:** [@Vaidesh](https://discuss.elastic.co/u/Vaidesh)\ **Replies:** 3\ **Last updated:** [October 5, 2021, 11:22am UTC](https://discuss.elastic.co/t/unable-to-store-security-index-in-s3-bucket/283734 "2021-10-05T11:22:32Z")
While taking back up of .security-7 index to S3 bucket getting below error, kindly help. "failures" : \[ { "index" : ".security-7", "index\_uuid" : ".security-7", "shard\_id" : 0, "rea… --- ## [Term does not return the exact results](https://discuss.elastic.co/t/term-does-not-return-the-exact-results/285909)
**Author:** [@Tung\_Doan](https://discuss.elastic.co/u/Tung_Doan)\ **Replies:** 0\ **Last updated:** [October 5, 2021, 11:11am UTC](https://discuss.elastic.co/t/term-does-not-return-the-exact-results/285909 "2021-10-05T11:11:04Z")
I have the following nested schema: dataCollectorInfo.files.indexedData.objects.measures.properties.unit "\_source": { "dataCollectorInfo": { "files": { "indexedData": { "objects": { "measures": { "p… --- ## [Fuzzy queries on Elastic App Search](https://discuss.elastic.co/t/fuzzy-queries-on-elastic-app-search/285900)
**Author:** [@aguiro05](https://discuss.elastic.co/u/aguiro05)\ **Replies:** 1\ **Last updated:** [October 5, 2021, 10:09am UTC](https://discuss.elastic.co/t/fuzzy-queries-on-elastic-app-search/285900 "2021-10-05T10:09:35Z")
Hi everyone, I was wondering if it's possible to use fuzzy queries (Fuzzy Queries) on Elastic App Search. I'm using the python client. A possible solution could be querying DSL from the python client. Is there any way t… --- ## [Error after upgrading to 7.15](https://discuss.elastic.co/t/error-after-upgrading-to-7-15/285890)
**Author:** [@Mads\_Lundegaard](https://discuss.elastic.co/u/Mads_Lundegaard)\ **Replies:** 7\ **Last updated:** [October 5, 2021, 9:13am UTC](https://discuss.elastic.co/t/error-after-upgrading-to-7-15/285890 "2021-10-05T09:13:49Z")
I am getting errors after I upgraded my client from 7.13.4 to 7.15. I suspect this is due to incompatible versions between server and client, but I am not sure. I tried upgrading the server, running in AWS but could not … --- ## [Boolean comparison using Lens formula](https://discuss.elastic.co/t/boolean-comparison-using-lens-formula/285872)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [October 5, 2021, 8:23am UTC](https://discuss.elastic.co/t/boolean-comparison-using-lens-formula/285872 "2021-10-05T08:23:57Z")
Hello, I was wondering if this is possible using Lens formula to return a boolean true or false value? Toy example: 101 \>= 100 would return true Or maybe there is another way to achieve this result? Thanks in advanc… --- ## [Internal Server Error](https://discuss.elastic.co/t/internal-server-error/283612)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [October 5, 2021, 8:19am UTC](https://discuss.elastic.co/t/internal-server-error/283612 "2021-10-05T08:19:44Z")
Hello dear friends :slight\_smile: I have a problem. First thing I want to do is: I want to backup the indexes I created before, so I created some folders in "C:\\ "and added them to my elasticsearch.yml file.Then I restar… --- ## [ECK Snapshot option outside Kubernetes cluster](https://discuss.elastic.co/t/eck-snapshot-option-outside-kubernetes-cluster/285867)
**Author:** [@surajbisht](https://discuss.elastic.co/u/surajbisht)\ **Replies:** 1\ **Last updated:** [October 5, 2021, 8:06am UTC](https://discuss.elastic.co/t/eck-snapshot-option-outside-kubernetes-cluster/285867 "2021-10-05T08:06:12Z")
Hi, What are the snapshots backup options for ECK/ELK deployed on hosted kubernetes cluster? Is it possible for use external ftp or http server to store snapshots oustide kubernetes cluster? Thanks, Suraj --- ## [How to fingerprint with a removed field?](https://discuss.elastic.co/t/how-to-fingerprint-with-a-removed-field/284282)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 6\ **Last updated:** [October 5, 2021, 8:02am UTC](https://discuss.elastic.co/t/how-to-fingerprint-with-a-removed-field/284282 "2021-10-05T08:02:56Z")
Hello friends, I want to put a field in a @metadata variable and use this field for fingerprinting later in logstash conf file. Is it possible for me to do this?Does anyone have an idea? I made some attempts but no resu… --- ## [Scrollbar not present in timelion legend](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 2\ **Last updated:** [October 5, 2021, 7:23am UTC](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051 "2021-10-05T07:23:44Z")
Hi, I am facing an issue in timelion legend scrollbar. I create a timelion visualization with some trend lines. I create 70 legend dynamically but scroll bar is not displaying to scroll all legend. So all legends ar… --- ## [Logstash did not show any log/message](https://discuss.elastic.co/t/logstash-did-not-show-any-log-message/285888)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 0\ **Last updated:** [October 5, 2021, 7:22am UTC](https://discuss.elastic.co/t/logstash-did-not-show-any-log-message/285888 "2021-10-05T07:22:13Z")
Hi, I am making a logstash connection to mariadb. Earlier it was working pefectly. But now when I run a .conf file manually, is start and nothing happen after it, neither close nor execute. And also did not give any … --- ## [Why Elasticsearch send more data between the cluster nodes](https://discuss.elastic.co/t/why-elasticsearch-send-more-data-between-the-cluster-nodes/285046)
**Author:** [@ravindrababua](https://discuss.elastic.co/u/ravindrababua)\ **Replies:** 6\ **Last updated:** [October 5, 2021, 6:36am UTC](https://discuss.elastic.co/t/why-elasticsearch-send-more-data-between-the-cluster-nodes/285046 "2021-10-05T06:36:01Z")
We have observed ELK sending the data with in the cluster nodes, we are not sending large data as a input to Elasticsearch. when the data is tool large it throws circuit break exception and cluster goes to YELLOW, but i… --- ## [Cross Cluster Search feature on free/Basic ECK](https://discuss.elastic.co/t/cross-cluster-search-feature-on-free-basic-eck/285865)
**Author:** [@surajbisht](https://discuss.elastic.co/u/surajbisht)\ **Replies:** 1\ **Last updated:** [October 5, 2021, 3:28am UTC](https://discuss.elastic.co/t/cross-cluster-search-feature-on-free-basic-eck/285865 "2021-10-05T03:28:17Z")
Is Cross Cluster Search feature supported on free/basic ECK version Thanks, Suraj --- ## [Does watcher input uses script](https://discuss.elastic.co/t/does-watcher-input-uses-script/285868)
**Author:** [@Munavir\_Chavody](https://discuss.elastic.co/u/Munavir_Chavody)\ **Replies:** 0\ **Last updated:** [October 5, 2021, 3:11am UTC](https://discuss.elastic.co/t/does-watcher-input-uses-script/285868 "2021-10-05T03:11:06Z")
I'm getting dynamic execution circuit breaking error for many watchers in our environment saying that the input search query failed to compile. What is the reason for the same. How can we avoid such errors at all? Erro… --- ## [Enable Elastic Security prebuilt rules and ML jobs](https://discuss.elastic.co/t/enable-elastic-security-prebuilt-rules-and-ml-jobs/285061)
**Author:** [@bil\_15](https://discuss.elastic.co/u/bil_15)\ **Replies:** 4\ **Last updated:** [October 4, 2021, 10:27pm UTC](https://discuss.elastic.co/t/enable-elastic-security-prebuilt-rules-and-ml-jobs/285061 "2021-10-04T22:27:27Z")
Hello! I'd like to know if there is ability to enable Elastic Security prebuilt rules and ML jobs they require to work properly via API. I didn't managed to find any info on this, so perhaps this functionality is not a… --- ## [Split a json array and then split on each object](https://discuss.elastic.co/t/split-a-json-array-and-then-split-on-each-object/285846)
**Author:** [@devtough](https://discuss.elastic.co/u/devtough)\ **Replies:** 7\ **Last updated:** [October 4, 2021, 10:20pm UTC](https://discuss.elastic.co/t/split-a-json-array-and-then-split-on-each-object/285846 "2021-10-04T22:20:21Z")
I would like to configure Logstash so that given a JSON input of \[ { "record": "a", "actions": \[ { "id": 1 }, { "id": 2 } \] }, { "record": "b", "actions": \[ { "id": 3 }, { "id": 4 } \] } \] it outputs {record: "a"… --- ## [Contains an unknown parameter \[\_routing\]](https://discuss.elastic.co/t/contains-an-unknown-parameter-routing/285856)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 0\ **Last updated:** [October 4, 2021, 9:49pm UTC](https://discuss.elastic.co/t/contains-an-unknown-parameter-routing/285856 "2021-10-04T21:49:56Z")
Here is my config file for logstash to connect aws Elasticsearch. It works correctly without "routing" input { file { path =\> "C:/Users/manjur.gani/Desktop/ES/test45.csv" start\_position=\>"beginning" } } filte… --- ## [Document Scoring](https://discuss.elastic.co/t/document-scoring/285850)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 0\ **Last updated:** [October 4, 2021, 8:41pm UTC](https://discuss.elastic.co/t/document-scoring/285850 "2021-10-04T20:41:19Z")
I know you can boost a fields score when running query (with the ^ symbol), but I am wondering if you can boost a fields score on/during ingestion when the data is initially coming into Elastic (via ingest pipelines or p… --- ## [Alert on logs error](https://discuss.elastic.co/t/alert-on-logs-error/285772)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 6\ **Last updated:** [October 4, 2021, 7:44pm UTC](https://discuss.elastic.co/t/alert-on-logs-error/285772 "2021-10-04T19:44:32Z")
Hi all. I have scripts that run every night to back up gitlab and and at the end it logs a file with the result of that backup. The logs are sent to our Elastic cloud account and from there I want to create an alert wh… --- ## [Improving log ingestion speed and faster elasticsearch indexing](https://discuss.elastic.co/t/improving-log-ingestion-speed-and-faster-elasticsearch-indexing/285841)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 5\ **Last updated:** [October 4, 2021, 7:23pm UTC](https://discuss.elastic.co/t/improving-log-ingestion-speed-and-faster-elasticsearch-indexing/285841 "2021-10-04T19:23:37Z")
Hello, I currently have a single node set up (a single machine where E-L-K is installed ) where a couple of gzip files are being ingested , each of these files would be of ~600MB and has several thousand lines of logs… --- ## [How to sort percentage bar by date?](https://discuss.elastic.co/t/how-to-sort-percentage-bar-by-date/285764)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [October 4, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-sort-percentage-bar-by-date/285764 "2021-10-04T18:34:10Z")
Hi All, I'm using v 7.11.1 I have this data structure in elastic: { "\_index" : "testcases", "\_type" : "\_doc", "\_id" : "ub0ll3sB2oqJ9931yhZw", "\_score" : 1.0, "\_source" : { "buildVersion" : "1.1.1.1", "testcase"… --- ## [How to replace logstash read time with log timing?](https://discuss.elastic.co/t/how-to-replace-logstash-read-time-with-log-timing/285834)
**Author:** [@Pradeep\_Kumar2](https://discuss.elastic.co/u/Pradeep_Kumar2)\ **Replies:** 9\ **Last updated:** [October 4, 2021, 6:25pm UTC](https://discuss.elastic.co/t/how-to-replace-logstash-read-time-with-log-timing/285834 "2021-10-04T18:25:56Z")
Hi, I am trying to configure logstash file which will replace the logstash read timestamp or system time with actual log time. In the kibana discover dashboard logs are displayed with logstash read time. How to replace … --- ## [How best to visually represent attempted (and not-attempted) combinations?](https://discuss.elastic.co/t/how-best-to-visually-represent-attempted-and-not-attempted-combinations/285692)
**Author:** [@cgmelastic](https://discuss.elastic.co/u/cgmelastic)\ **Replies:** 4\ **Last updated:** [October 4, 2021, 5:27pm UTC](https://discuss.elastic.co/t/how-best-to-visually-represent-attempted-and-not-attempted-combinations/285692 "2021-10-04T17:27:20Z")
In a game I'm playing, there is a recipe book type thing. The ingredients for a recipe are known but not the specific quantity of each ingredient required to create the recipe, only a minimum and maximum value for each. … --- ## [APM service map showing less data in more time](https://discuss.elastic.co/t/apm-service-map-showing-less-data-in-more-time/285795)
**Author:** [@multimaster](https://discuss.elastic.co/u/multimaster)\ **Replies:** 2\ **Last updated:** [October 4, 2021, 4:27pm UTC](https://discuss.elastic.co/t/apm-service-map-showing-less-data-in-more-time/285795 "2021-10-04T16:27:03Z")
Hi, We have APM set up for a series of Java services and we have found a rather curious behavior. For some timespan, the service map of a particular service shows some relations with other monitorized services, this is… --- ## [How to generate Rules for anomaly detection ML?](https://discuss.elastic.co/t/how-to-generate-rules-for-anomaly-detection-ml/285707)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 4\ **Last updated:** [October 4, 2021, 3:49pm UTC](https://discuss.elastic.co/t/how-to-generate-rules-for-anomaly-detection-ml/285707 "2021-10-04T15:49:11Z")
When I go to Kibana-\>Alerts and Actions I only see Alerts and Connectors and not Rules, I want to create a rule/generate alerts for anomaly detection(ML job) but I do not see Rules or anomaly detection alert, how do I en… --- ## [FileBeat: decode\_json\_fields processor max\_depth option not working](https://discuss.elastic.co/t/filebeat-decode-json-fields-processor-max-depth-option-not-working/285836)
**Author:** [@Denis\_Baryshev](https://discuss.elastic.co/u/Denis_Baryshev)\ **Replies:** 0\ **Last updated:** [October 4, 2021, 3:40pm UTC](https://discuss.elastic.co/t/filebeat-decode-json-fields-processor-max-depth-option-not-working/285836 "2021-10-04T15:40:37Z")
Plz review [Previous page](https://discuss.elastic.co/latest.md?page=1447) [Next page](https://discuss.elastic.co/latest.md?page=1449)