# Latest **URL:** https://discuss.elastic.co/latest.md?page=1467 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1468 --- ## [Use ILM to reduce the size of an existing index](https://discuss.elastic.co/t/use-ilm-to-reduce-the-size-of-an-existing-index/284709)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 10:57am UTC](https://discuss.elastic.co/t/use-ilm-to-reduce-the-size-of-an-existing-index/284709 "2021-09-22T10:57:37Z")
I have an index that has grown too much and am trying to understand if the index lifecycle management can help me with this problem. The index is approaching the size of 50 GB. From what I have read, I could use ilm to … --- ## [Need to gather the host logs , filebeat running as a container](https://discuss.elastic.co/t/need-to-gather-the-host-logs-filebeat-running-as-a-container/284000)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 12\ **Last updated:** [September 22, 2021, 10:44am UTC](https://discuss.elastic.co/t/need-to-gather-the-host-logs-filebeat-running-as-a-container/284000 "2021-09-22T10:44:40Z")
Hello Team, I am new to ELK and Filebeat. I have ELK stack running on one server using docker-compose. I have Filebeat running on another server as docker container 7.14.1. I have configured filebeat-docker.yml and I… --- ## [Kibana embeded](https://discuss.elastic.co/t/kibana-embeded/282853)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 10:36am UTC](https://discuss.elastic.co/t/kibana-embeded/282853 "2021-09-22T10:36:57Z")
I have a kibana instance embedded in an iframe for ease of use in an secondary application but everytime my users log in they get a popup saying "Unable to update the UI setting" "the server requires a client certificate… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/284752)
**Author:** [@Olal](https://discuss.elastic.co/u/Olal)\ **Replies:** 7\ **Last updated:** [September 22, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/284752 "2021-09-22T10:32:19Z")
Hello there , I need help I am getting Error : Kibana server is not ready yet . When I check my Kibana.yml logs . I get this: {"type":"log","@timestamp":"2021-09-21T19:59:32+03:00","tags":\["error","savedobjects-servic… --- ## [Searching in Logs using wildcards does not work](https://discuss.elastic.co/t/searching-in-logs-using-wildcards-does-not-work/284846)
**Author:** [@Glenn\_Glashagen](https://discuss.elastic.co/u/Glenn_Glashagen)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 10:21am UTC](https://discuss.elastic.co/t/searching-in-logs-using-wildcards-does-not-work/284846 "2021-09-22T10:21:57Z")
Hey all, I'm trying to search for a logline within the Logtailing tab(part of the Observer features): read 24FPS, detection 24FPS, track 24FPS (0) I can find this logline by using the query: message: track however, if… --- ## [Unable to discard hostfs/etc/sv/monit/.kube/ path on my PKS environment](https://discuss.elastic.co/t/unable-to-discard-hostfs-etc-sv-monit-kube-path-on-my-pks-environment/284843)
**Author:** [@oguz\_y](https://discuss.elastic.co/u/oguz_y)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 10:07am UTC](https://discuss.elastic.co/t/unable-to-discard-hostfs-etc-sv-monit-kube-path-on-my-pks-environment/284843 "2021-09-22T10:07:04Z")
I am using Pivotal Kubernetes clusters on vmware and collecting logs on Splunk. I installed auditbeat and tried to exclude hostfs/etc/sv/monit/.kube/ path but never managed to discard it at file\_integrity module. I tried… --- ## [What is the difference b/w Reindexing and Split index](https://discuss.elastic.co/t/what-is-the-difference-b-w-reindexing-and-split-index/284687)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 10:00am UTC](https://discuss.elastic.co/t/what-is-the-difference-b-w-reindexing-and-split-index/284687 "2021-09-22T10:00:13Z")
Just reading something about elasticsearch how it route documents,i saw a term called Split API.What is the use Split API,we have reindex api we have clone api.Want to know the difference between in all this could not un… --- ## [How to index a .json file located inside a persistent volume on a kubernetes cluster to Elasticsearch](https://discuss.elastic.co/t/how-to-index-a-json-file-located-inside-a-persistent-volume-on-a-kubernetes-cluster-to-elasticsearch/284830)
**Author:** [@Jad\_Sakr](https://discuss.elastic.co/u/Jad_Sakr)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 9:53am UTC](https://discuss.elastic.co/t/how-to-index-a-json-file-located-inside-a-persistent-volume-on-a-kubernetes-cluster-to-elasticsearch/284830 "2021-09-22T09:53:33Z")
I have a code that collects data and dumps it in a .json file. In this file, every line is a json object. I was following this guide https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html to run Elastic on kube… --- ## [Elastalert-kibana plugin error](https://discuss.elastic.co/t/elastalert-kibana-plugin-error/284800)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 9:35am UTC](https://discuss.elastic.co/t/elastalert-kibana-plugin-error/284800 "2021-09-22T09:35:52Z")
While installing the elastalert-kibana plugin .i am facing an error C:\\kibana-7.14.1-windows-x86\_64\\bin\>kibana-plugin install file:///d:/elastalert-kibana-plugin-1.1.0-7.2.0.zip Found previous install attempt. Deleting… --- ## [ARM64 support](https://discuss.elastic.co/t/arm64-support/284825)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 9:32am UTC](https://discuss.elastic.co/t/arm64-support/284825 "2021-09-22T09:32:45Z")
Hi there, I wish to know if the arm64 support is now in General Availabilty and supported for production environment. Best regards, Alessio --- ## [Copy value of @timestamp to another field](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 9:26am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634 "2021-09-22T09:26:03Z")
Hello, I am trying to copy the value of @timestamp to new field timestamp keeping the same format. Is that possible ? Do you have any suggestion ? Thank you. Mustapha --- ## [Request memory constant increase untill it hits circuit breaker request limit. No drop if we stop queries](https://discuss.elastic.co/t/request-memory-constant-increase-untill-it-hits-circuit-breaker-request-limit-no-drop-if-we-stop-queries/284689)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 9:14am UTC](https://discuss.elastic.co/t/request-memory-constant-increase-untill-it-hits-circuit-breaker-request-limit-no-drop-if-we-stop-queries/284689 "2021-09-22T09:14:52Z")
Hi All, We noticed that the aggregation query we use to rollup data in a python script is causing our elasticsearch cluster request What we have isolated is that the queries consume memory which is not freed up even w… --- ## [Advance Watcher Script](https://discuss.elastic.co/t/advance-watcher-script/284824)
**Author:** [@Ravishankar\_Rai](https://discuss.elastic.co/u/Ravishankar_Rai)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 9:13am UTC](https://discuss.elastic.co/t/advance-watcher-script/284824 "2021-09-22T09:13:34Z")
Hi All, I am implementing the uptime alerts for the heartbeat index and my requirement is as below. I want to send an alert to the corresponding monitor mail id from the same index with trigger time =2m when monitor.st… --- ## [How Set Cluster Name for HighLevel Rest Client](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 11\ **Last updated:** [September 22, 2021, 9:03am UTC](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794 "2021-09-22T09:03:41Z")
Hi , I am using 7.3.2 version of Elasticsearch ,here I am using HighLevel Rest Client , here how can I set the clustername for which I have changed the default "Elasticsearch" . 1.Do I need to change the cluster Name … --- ## [How do I aggregate based on these fields?](https://discuss.elastic.co/t/how-do-i-aggregate-based-on-these-fields/284821)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 9:02am UTC](https://discuss.elastic.co/t/how-do-i-aggregate-based-on-these-fields/284821 "2021-09-22T09:02:54Z")
Hi all, I'm trying to come up with a query that results in a table that is similar to: SourceCity | dstCity | dstCountry | dstCountryISO | total sum of flows | total data transferred cityA | cityB | countryB | CB | 15… --- ## [如何去掉kibana显示中json中的\\](https://discuss.elastic.co/t/kibana-json/284820)
**Author:** [@chengxiaobai](https://discuss.elastic.co/u/chengxiaobai)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 8:58am UTC](https://discuss.elastic.co/t/kibana-json/284820 "2021-09-22T08:58:36Z")
图1 为kibana中json显示内容。 图2 为日志原始格式。 目前想在kibana中查看message的信息（需要去掉\\）,请问怎么处理。 我尝试过json反序列化，并没有作用。请指教。。 --- ## [AzureAD and Kibana \[MFA\]](https://discuss.elastic.co/t/azuread-and-kibana-mfa/284310)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 8:24am UTC](https://discuss.elastic.co/t/azuread-and-kibana-mfa/284310 "2021-09-22T08:24:39Z")
Hi, I recently saw an answer about an AzureAD integration with Kibana. I have a question about it. (SSO / Azure AD setup - #2 by forloop) If I make the integration with AzureAD and ELK (on-premises enviroment) and I a… --- ## [Letters in request headers' key are lowercase or uppercase in different version of apm agent and why?](https://discuss.elastic.co/t/letters-in-request-headers-key-are-lowercase-or-uppercase-in-different-version-of-apm-agent-and-why/284448)
**Author:** [@hanming](https://discuss.elastic.co/u/hanming)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/letters-in-request-headers-key-are-lowercase-or-uppercase-in-different-version-of-apm-agent-and-why/284448 "2021-09-22T08:00:15Z")
Kibana version : 6.8.11 Elasticsearch version : 6.8.11 APM Server version : 6.8.11 APM Agent language and version : Java 1.25.0 & 1.21.0 Description of the problem including expected versus actual behavior. Please in… --- ## [Basic auth header kibana not working](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 7:52am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910 "2021-09-22T07:52:51Z")
I have everything enabled that i can find, which by the way is very difficult to find what i need at times with the elastic docs. I want to pass the Authorization: header with base64 encoded correct credentials for user… --- ## [Enterprise Search 7.x - Docker Compose example](https://discuss.elastic.co/t/enterprise-search-7-x-docker-compose-example/239782)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 11:02am UTC](https://discuss.elastic.co/t/enterprise-search-7-x-docker-compose-example/239782 "2020-07-03T11:02:21Z")
Here is a simple way to start Enterprise Search (App Search and Workplace Search) with docker-compose. Elasticsearch File: docker-compose-elasticsearch.yml --- version: '3' services: elasticsearch: image: $IMG\_E… --- ## [How to split an array index in Kibana?](https://discuss.elastic.co/t/how-to-split-an-array-index-in-kibana/284377)
**Author:** [@carlos\_gomez\_gomez](https://discuss.elastic.co/u/carlos_gomez_gomez)\ **Replies:** 7\ **Last updated:** [September 22, 2021, 7:33am UTC](https://discuss.elastic.co/t/how-to-split-an-array-index-in-kibana/284377 "2021-09-22T07:33:19Z")
Hi everyone. I have an index in my Kiabana that is an array. These index is an array becouse the length of this coud be diference each time. I need to split the array for use in the control visualization. If I create… --- ## [Why term query not returning the document that contains the exact term in 7.3.2](https://discuss.elastic.co/t/why-term-query-not-returning-the-document-that-contains-the-exact-term-in-7-3-2/284540)
**Author:** [@Lee\_Copper](https://discuss.elastic.co/u/Lee_Copper)\ **Replies:** 5\ **Last updated:** [September 22, 2021, 7:24am UTC](https://discuss.elastic.co/t/why-term-query-not-returning-the-document-that-contains-the-exact-term-in-7-3-2/284540 "2021-09-22T07:24:44Z")
I have a order\_no with value '100000076268946605' in my index. The following term query does not return me the document with order\_no '100000076268946605': { "query": { "term": { "order\_no": { … --- ## [How to APM data](https://discuss.elastic.co/t/how-to-apm-data/284795)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 4:03am UTC](https://discuss.elastic.co/t/how-to-apm-data/284795 "2021-09-22T04:03:29Z")
I want to get information about apm transactions through es ... Are there any examples of how to use http requests or elastic/go-elasticsearchto get data? --- ## [How to aggregation by tree(Bar Chart)](https://discuss.elastic.co/t/how-to-aggregation-by-tree-bar-chart/284531)
**Author:** [@ruif0](https://discuss.elastic.co/u/ruif0)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 7:18am UTC](https://discuss.elastic.co/t/how-to-aggregation-by-tree-bar-chart/284531 "2021-09-22T07:18:45Z")
My data look like this: { "type":"Error", "server":\["Country1/State1/City1",null\] } { "type":"Error", "server":\["Country1/State2/City2",null\] } { "type":"Error", "server":\["Country2/State3/City3",null\] } I want… --- ## [Shards of an index present only in one node in a multinode cluster](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805)
**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 7:18am UTC](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805 "2021-09-22T07:18:37Z")
Hi, I have a multinode Elasticsearch setup with one master node and two data nodes. I created an index with number of shards as 2 and number of replicas as 1 and inserted the data in the index. However I see that both … --- ## [error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable:](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/284803)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 7:05am UTC](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/284803 "2021-09-22T07:05:29Z")
I am using the docker configuration on the server. I am not that much familiar with docker. Before docker, it is working fine but now it is not working and throwing an error. elasticsearch - Attempted to resurrect conne… --- ## [Change height rows in Kibana table](https://discuss.elastic.co/t/change-height-rows-in-kibana-table/284036)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 7:01am UTC](https://discuss.elastic.co/t/change-height-rows-in-kibana-table/284036 "2021-09-22T07:01:21Z")
Hi there, I have a question. Is it possible to change the height of the rows of a table in Kibana? The purpose of this configuration is to watch all the data and not to see the three points at the end of the row instea… --- ## [Alerts are sometimes triggered](https://discuss.elastic.co/t/alerts-are-sometimes-triggered/284723)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 6:52am UTC](https://discuss.elastic.co/t/alerts-are-sometimes-triggered/284723 "2021-09-22T06:52:03Z")
Hi all. After configuring some alerts on the different logs shown in the "Observability \> Logs \> Steam" menu, I don't understand why the emails are not sent every time the term that should trigger the alert is found amo… --- ## [Link to local document in kibana discover](https://discuss.elastic.co/t/link-to-local-document-in-kibana-discover/284212)
**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 6:36am UTC](https://discuss.elastic.co/t/link-to-local-document-in-kibana-discover/284212 "2021-09-22T06:36:42Z")
how can I get a working link for a local file ingested?. I have file.url and real.path when I put http://{{rawvalue}} at the link template I get http://c/install/Pdfs/file.pdf or file//C:/install/Pdfs/file.pdf bo… --- ## [ECK operator on OpenShift does not take the created self-signed certificate after updating Elasticsearch instance yaml file](https://discuss.elastic.co/t/eck-operator-on-openshift-does-not-take-the-created-self-signed-certificate-after-updating-elasticsearch-instance-yaml-file/284619)
**Author:** [@Inad.mammdov](https://discuss.elastic.co/u/Inad.mammdov)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 6:33am UTC](https://discuss.elastic.co/t/eck-operator-on-openshift-does-not-take-the-created-self-signed-certificate-after-updating-elasticsearch-instance-yaml-file/284619 "2021-09-22T06:33:17Z")
I have created a self-signed cert on our side, created the secret form the certs and added under spec: http: tls: certificate, but operator does not update the pod, so that elastic pod runs its own cert. Could you please… [Previous page](https://discuss.elastic.co/latest.md?page=1466) [Next page](https://discuss.elastic.co/latest.md?page=1468)