# Latest **URL:** https://discuss.elastic.co/latest.md?page=1454 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1455 --- ## [Strings shown as Multifields](https://discuss.elastic.co/t/strings-shown-as-multifields/285580)
**Author:** [@KarlosA](https://discuss.elastic.co/u/KarlosA)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 11:14am UTC](https://discuss.elastic.co/t/strings-shown-as-multifields/285580 "2021-09-30T11:14:19Z")
Hello, Using Elasticsearch 7.8.1 the following mapping: "mappings": { "\_routing": { "required": true }, "properties": { "qualified\_host": { … --- ## [Extremely Large Documents: Querying and Dealing with](https://discuss.elastic.co/t/extremely-large-documents-querying-and-dealing-with/284393)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 16\ **Last updated:** [September 30, 2021, 11:19am UTC](https://discuss.elastic.co/t/extremely-large-documents-querying-and-dealing-with/284393 "2021-09-30T11:19:31Z")
We are in a situation where extremely large documents were indexed (to text fields) and our ElasticSearch instance has been going down/crazy recently with out of disk and out of memory. We've also run into HTTP response … --- ## [Metricbeat creates a Standalone Cluster](https://discuss.elastic.co/t/metricbeat-creates-a-standalone-cluster/285492)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 11:15am UTC](https://discuss.elastic.co/t/metricbeat-creates-a-standalone-cluster/285492 "2021-09-30T11:15:00Z")
Hi folks, I have running 3 nodes elastic cluster and 2 nodes of logstash and I use metricbeat to monitor them and filebeat to collect logs. Everything is in 7.13.2 version Currently I am experiencing following issue wh… --- ## [ECS - Exported fields origin of rsa.foo.\*](https://discuss.elastic.co/t/ecs-exported-fields-origin-of-rsa-foo/285554)
**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 10:56am UTC](https://discuss.elastic.co/t/ecs-exported-fields-origin-of-rsa-foo/285554 "2021-09-30T10:56:00Z")
I'm currently implementing 'ECS' for our in house products and I was wondering what the origin or meaning of the 'rsa' fields are? It is unusual in that they span multiple vendors and am wondering what the 'rsa' acronym… --- ## [Reindexing Api is not copying the data](https://discuss.elastic.co/t/reindexing-api-is-not-copying-the-data/285454)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 9:42am UTC](https://discuss.elastic.co/t/reindexing-api-is-not-copying-the-data/285454 "2021-09-30T09:42:19Z")
Using multi-node Elasticsearch version 7.14 I am facing an issue while doing reindexing.I want reindex all the indices given below health status index uuid pri rep docs.coun… --- ## [Enterprise Search Web Crawler fails on authn enabled websites](https://discuss.elastic.co/t/enterprise-search-web-crawler-fails-on-authn-enabled-websites/285096)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 9:37am UTC](https://discuss.elastic.co/t/enterprise-search-web-crawler-fails-on-authn-enabled-websites/285096 "2021-09-30T09:37:46Z")
The web crawler feature worked great for a Apache web site with no authentication. Once I enabled basic authentication, the web crawler failed. Is there a way to use the web crawler on sites that have authentication en… --- ## [Logstash memcached filter plugin can not open more then 4 connection](https://discuss.elastic.co/t/logstash-memcached-filter-plugin-can-not-open-more-then-4-connection/285010)
**Author:** [@ramakrushna.sahu](https://discuss.elastic.co/u/ramakrushna.sahu)\ **Replies:** 5\ **Last updated:** [September 30, 2021, 9:27am UTC](https://discuss.elastic.co/t/logstash-memcached-filter-plugin-can-not-open-more-then-4-connection/285010 "2021-09-30T09:27:35Z")
Hi Team, Need help on logstash Memcached filter plugin. I see the logstash memcached filter plugin can not open more than 4 connections to Memcached server. is there any configuration required for this memcached filte… --- ## [How to create a visualization for node cpu usage of kubernetes](https://discuss.elastic.co/t/how-to-create-a-visualization-for-node-cpu-usage-of-kubernetes/285356)
**Author:** [@Kaushik\_R](https://discuss.elastic.co/u/Kaushik_R)\ **Replies:** 5\ **Last updated:** [September 30, 2021, 8:59am UTC](https://discuss.elastic.co/t/how-to-create-a-visualization-for-node-cpu-usage-of-kubernetes/285356 "2021-09-30T08:59:49Z")
Hi All, I'm trying to create a visualization to capture the node cpu usage of a kubernetes node. i'm trying to use kubernetes.node.cpu.usage.nanocores , kubernetes.node.cpu.usage.nanocores but none is working the outco… --- ## [How to visualise objects fields in a tab like in DISPLAY 1 (see body message)](https://discuss.elastic.co/t/how-to-visualise-objects-fields-in-a-tab-like-in-display-1-see-body-message/285561)
**Author:** [@paulpatou](https://discuss.elastic.co/u/paulpatou)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 8:59am UTC](https://discuss.elastic.co/t/how-to-visualise-objects-fields-in-a-tab-like-in-display-1-see-body-message/285561 "2021-09-30T08:59:18Z")
Hello, I am using logstash to send data into elastic. My goal is to get a visualization in kibana like : "DISPLAY 1" group\_num| name\_group |unique count of id\_document 10 |groupA |2 20 |groupB … --- ## [Transaction\_sample\_rate and error reporting behaviour](https://discuss.elastic.co/t/transaction-sample-rate-and-error-reporting-behaviour/285557)
**Author:** [@Iain\_McKay](https://discuss.elastic.co/u/Iain_McKay)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 8:35am UTC](https://discuss.elastic.co/t/transaction-sample-rate-and-error-reporting-behaviour/285557 "2021-09-30T08:35:24Z")
We have recently enabled transaction\_sample\_rate and are observing that our labels and context are also no longer coming through for the unsampled transactions. We had missed the section of the documentation that actuall… --- ## [Logstash cannot reach Elasticsearch / filebeat security](https://discuss.elastic.co/t/logstash-cannot-reach-elasticsearch-filebeat-security/284733)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 11\ **Last updated:** [September 30, 2021, 8:20am UTC](https://discuss.elastic.co/t/logstash-cannot-reach-elasticsearch-filebeat-security/284733 "2021-09-30T08:20:07Z")
Hello, I am encountering some Problems while trying to secure Filebeat&Logstash. Scenario: I created my own RootCA and signed certificates with it. My Kibana-Webserver for example is signed with this Certificate, but … --- ## [Kibana Visualization Top Hit Counts](https://discuss.elastic.co/t/kibana-visualization-top-hit-counts/285365)
**Author:** [@susmeeta](https://discuss.elastic.co/u/susmeeta)\ **Replies:** 2\ **Last updated:** [September 29, 2021, 12:54pm UTC](https://discuss.elastic.co/t/kibana-visualization-top-hit-counts/285365 "2021-09-29T12:54:21Z")
Hi , We have a scenario where each case is processed multiple times. I am trying to fetch the unique count of cases along with the latest status of each case. To get this i have used Top Hit aggregation to get the lates… --- ## [Query DSL: Aggregation of fields and also value of fields](https://discuss.elastic.co/t/query-dsl-aggregation-of-fields-and-also-value-of-fields/285083)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 3:11pm UTC](https://discuss.elastic.co/t/query-dsl-aggregation-of-fields-and-also-value-of-fields/285083 "2021-09-24T15:11:07Z")
My data structure is as follows username,department,salary bob,finance,2000 joe,HR,2200 chan,finance,3000 bobby,finance,2500 don,HR,1800 I was looking for a Splunk's equivalent command of ... | stats values(salary) b… --- ## [Query DSL: How to use WILDCARD queries on \_id](https://discuss.elastic.co/t/query-dsl-how-to-use-wildcard-queries-on-id/285547)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 7:29am UTC](https://discuss.elastic.co/t/query-dsl-how-to-use-wildcard-queries-on-id/285547 "2021-09-30T07:29:44Z")
How to use WILDCARD queries on \_id While searching for specific type of Watcher runs (triggered\_watches), I was looking for a run of a specific type of watcher which contains a keyword in the \_id. But when I do a wildca… --- ## [IndexNotFoundException during reindexing](https://discuss.elastic.co/t/indexnotfoundexception-during-reindexing/285486)
**Author:** [@Junaid\_Usman](https://discuss.elastic.co/u/Junaid_Usman)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 7:22am UTC](https://discuss.elastic.co/t/indexnotfoundexception-during-reindexing/285486 "2021-09-30T07:22:49Z")
Hi All, Recently we changed the Java JDK library from Oracle to RedHat default OpenJDK. Since this change, whenever I am trying to perform reindexing I am getting the IndexNotFoundException: no such index. Does anyone h… --- ## [Setting Fortigate OID with ELK](https://discuss.elastic.co/t/setting-fortigate-oid-with-elk/285057)
**Author:** [@Jim2](https://discuss.elastic.co/u/Jim2)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 7:15am UTC](https://discuss.elastic.co/t/setting-fortigate-oid-with-elk/285057 "2021-09-30T07:15:49Z")
Hi Sir I want to setting Fortigate bandwidth chart in ELK. And refer the following img that is the chart in my Fortigate. Then I have collect OID in ELK : 1.3.6.1.2.1.2.2.1.10 1.3.6.1.2.1.2.2.1.16 And Setting th… --- ## [Sliced scroll with sort](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874)
**Author:** [@Burak](https://discuss.elastic.co/u/Burak)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 7:05am UTC](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874 "2021-09-30T07:05:05Z")
Hello guys. How does actually Elasticsearch perform sorting under the hood for shard and for index? I can find it neither in documentation or books. I am going to use a sliced scroll with sort but in some cases, I have… --- ## [Coordinates precision](https://discuss.elastic.co/t/coordinates-precision/285434)
**Author:** [@dariusz](https://discuss.elastic.co/u/dariusz)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 7:03am UTC](https://discuss.elastic.co/t/coordinates-precision/285434 "2021-09-30T07:03:46Z")
Hello, What is the precision of the floats for the coordinates in shapes, like Polygon? We tried to store a polygon without intersections with coordinates having 6 decimal digits but we got "Unable to Tessellate shape" … --- ## [No services found in Kibana](https://discuss.elastic.co/t/no-services-found-in-kibana/285139)
**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 6:44am UTC](https://discuss.elastic.co/t/no-services-found-in-kibana/285139 "2021-09-30T06:44:48Z")
Kibana version: 7.15 Elasticsearch version: 7.15 APM Server version: 7.15 APM Agent language and version: Python (5.1.2) Browser version: Firefox 92.0 Original install method (e.g. download page, yum, deb, from sour… --- ## [Отказоустойчивый кластер из 3 нод](https://discuss.elastic.co/t/topic/285349)
**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\ **Replies:** 6\ **Last updated:** [September 30, 2021, 6:39am UTC](https://discuss.elastic.co/t/topic/285349 "2021-09-30T06:39:44Z")
Добрый день. Сделал кластер из 3 нод (1 мастер, остальные дата ноды). С подключенным грейлогом (на 2 нодах, стоит грейлог), третья пустая. При падении одной ноды падает весь кластер. Подскажите, как это исправить? --- ## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/285464)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 6:27am UTC](https://discuss.elastic.co/t/failed-to-execute-action/285464 "2021-09-30T06:27:44Z")
Hi firends i am getting an error like below but there is no error in the first line of my conf file. Does anyone have an idea ? Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exce… --- ## [Metricbeat](https://discuss.elastic.co/t/metricbeat/285124)
**Author:** [@savan820](https://discuss.elastic.co/u/savan820)\ **Replies:** 5\ **Last updated:** [September 30, 2021, 5:31am UTC](https://discuss.elastic.co/t/metricbeat/285124 "2021-09-30T05:31:24Z")
couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at https://localhost:9200: Get "https://localhost:9200": x509: certificate signed by unknown authority\] --- ## [키바나 대시보드에서 필터를 자동으로 지정할 수 있는 방법이 있을까요?](https://discuss.elastic.co/t/topic/284147)
**Author:** [@YJK](https://discuss.elastic.co/u/YJK)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 4:52am UTC](https://discuss.elastic.co/t/topic/284147 "2021-09-30T04:52:12Z")
혹시 키바나 대시보드를 이용할 때 필터를 수동으로 지정하지 않고 자동으로 지정되도록 할 수 있는 방법이 있을까요? 예를 들면 metric data를 활용하여 visualize를 만들고 대시보드에서 그래프 형태로 볼 때, (어떤 방법을 통해 특정 id값을 전달해주면) 대시보드에서 특정 id값을 가진 데이터의 그래프가 자동으로 보이도록 하고 싶습니다. (특정 id값은 정해둘 수 없고 늘 … --- ## [Kibana server is not ready yet with kibana docker](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-kibana-docker/285460)
**Author:** [@tikamafia](https://discuss.elastic.co/u/tikamafia)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 3:00am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-kibana-docker/285460 "2021-09-30T03:00:47Z")
i had the problem "Kibana server is not ready yet" following the official guide. Here is information of my install process: docker compose up: version: '2' services: elasticsearch: container\_name: es01 imag… --- ## [EQL Search by timestamp](https://discuss.elastic.co/t/eql-search-by-timestamp/285474)
**Author:** [@GuillaumeBrun](https://discuss.elastic.co/u/GuillaumeBrun)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 12:49pm UTC](https://discuss.elastic.co/t/eql-search-by-timestamp/285474 "2021-09-29T12:49:42Z")
Hello, My problem is quite simple but I can't find the solution. I'm using Python to make GET calls on index using EQL. I would like to make this search only on the 5 past minutes logs. How can I do it ? Specify somet… --- ## [Failed to migrate index to cold storage because another index with the same name already exists in cold storage](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517)
**Author:** [@techenthusiast](https://discuss.elastic.co/u/techenthusiast)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 1:39am UTC](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517 "2021-09-30T01:39:06Z")
Team, I am getting below issue when i implemented cold storage on an existing Elasticsearch cluster. Failed to migrate index to cold storage because another index with the same name already exists in cold storage. Need… --- ## [POST URL reporting resulting in 'processing'](https://discuss.elastic.co/t/post-url-reporting-resulting-in-processing/285529)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 12:48am UTC](https://discuss.elastic.co/t/post-url-reporting-resulting-in-processing/285529 "2021-09-30T00:48:02Z")
I have been using a self-made script that uses a generated POST URL from Kibana to create and email daily reports from a winlogbeat index. It has been working fine for months but suddenly the report only has 'processing'… --- ## [Portable Kibana dashboard?](https://discuss.elastic.co/t/portable-kibana-dashboard/285531)
**Author:** [@jhettich](https://discuss.elastic.co/u/jhettich)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 12:55am UTC](https://discuss.elastic.co/t/portable-kibana-dashboard/285531 "2021-09-30T00:55:00Z")
As a software vendor, I want to define a dashboard that can be used by multiple clients in their respective Elasticsearch/Kibana deployments. If I create a dashboard manually for one client, and export it as an NDJSON fi… --- ## [ElasticSearch Output Plugin partial update results in entire document substitution](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512)
**Author:** [@samir\_varandas](https://discuss.elastic.co/u/samir_varandas)\ **Replies:** 3\ **Last updated:** [September 29, 2021, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512 "2021-09-29T23:19:32Z")
Hi friends, I am having some trouble with the Elasticsearch Output Plugin, I am trying to perform a partial update on a document inside my Elastic index, I want to update certain fields only (the ones mapped in my event)… --- ## [Heartbeat Synthetics/Browser Monitoring Inline Source with expect](https://discuss.elastic.co/t/heartbeat-synthetics-browser-monitoring-inline-source-with-expect/285518)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [September 29, 2021, 10:59pm UTC](https://discuss.elastic.co/t/heartbeat-synthetics-browser-monitoring-inline-source-with-expect/285518 "2021-09-29T22:59:58Z")
Hi All, I'm trying to a browser monitor that checks to make sure a selector doesn't exist after a button is clicked. I'm using the inline source, but am getting an error about expect not being defined: Code: step('Sav… [Previous page](https://discuss.elastic.co/latest.md?page=1453) [Next page](https://discuss.elastic.co/latest.md?page=1455)