# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1479

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1480

---

## [Does Elastic APM support Quarkus?](https://discuss.elastic.co/t/does-elastic-apm-support-quarkus/284167)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 9:40am UTC](https://discuss.elastic.co/t/does-elastic-apm-support-quarkus/284167 "2021-09-14T09:40:22Z")

</div>

Hello, Does Elastic APM support Quarkus? Grtz Willem

---

## [How to design schema for boosting/ranking logic?](https://discuss.elastic.co/t/how-to-design-schema-for-boosting-ranking-logic/284149)

<div class="topic-metadata">

**Author:** [@abhinavkulkarni](https://discuss.elastic.co/u/abhinavkulkarni)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 9:39am UTC](https://discuss.elastic.co/t/how-to-design-schema-for-boosting-ranking-logic/284149 "2021-09-14T09:39:51Z")

</div>

Hi, Let us say, I am indexing a bunch of podcasts in my Elasticsearch cluster: Podcast: - \_id (keyword) - email (keyword) - webLink (keyword) - rssLink (keyword) - shortDescription (te…

---

## [Lens page showing blank](https://discuss.elastic.co/t/lens-page-showing-blank/284007)

<div class="topic-metadata">

**Author:** [@savan820](https://discuss.elastic.co/u/savan820)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 9:15am UTC](https://discuss.elastic.co/t/lens-page-showing-blank/284007 "2021-09-14T09:15:35Z")

</div>

Lens page showing blank the request pass: "http://localhost:5601/app/lens#/?\_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))"

---

## [London Information Retrieval Meetup (HYBRID) - 15th Sept 2021](https://discuss.elastic.co/t/london-information-retrieval-meetup-hybrid-15th-sept-2021/284165)

<div class="topic-metadata">

**Author:** [@lizbiella](https://discuss.elastic.co/u/lizbiella)\
**Replies:** 0\
**Last updated:** [September 14, 2021, 9:10am UTC](https://discuss.elastic.co/t/london-information-retrieval-meetup-hybrid-15th-sept-2021/284165 "2021-09-14T09:10:49Z")

</div>

We are so happy to announce the tenth London Information Retrieval Meetup, a free evening meetup aimed to Information Retrieval passionates and professionals who are curious to explore and discuss the latest trends in th…

---

## [Windows filebeat is not shipping logs](https://discuss.elastic.co/t/windows-filebeat-is-not-shipping-logs/281966)

<div class="topic-metadata">

**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 8:58am UTC](https://discuss.elastic.co/t/windows-filebeat-is-not-shipping-logs/281966 "2021-09-14T08:58:07Z")

</div>

Hello, I have elk stack installed on my ubuntu and everything works fine. I installed filebeat on windows 8.1 to transfer the log file to elasticsearch (found on ubuntu) and faced with a problem. When starting the fil…

---

## [Logstash s3 output plugin not working properly](https://discuss.elastic.co/t/logstash-s3-output-plugin-not-working-properly/284159)

<div class="topic-metadata">

**Author:** [@vishakha.tyagi.blaze](https://discuss.elastic.co/u/vishakha.tyagi.blaze)\
**Replies:** 0\
**Last updated:** [September 14, 2021, 8:53am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-not-working-properly/284159 "2021-09-14T08:53:24Z")

</div>

So we are trying to use Logstash to send out some logs to s3 and its not working for some reason. This is the code we are using. output { amazon\_es { hosts =\> \["xxxx"\] …

---

## [Failed to put mappings on indices \[\[\[account\_address\_01112020/M\_Yx-7TTTOeBgtJ-ckrHbw\]\]\], type \[\_doc\] java.lang.IllegalArgumentException: mapper \[quater\] of different type, current\_type \[keyword\], merged\_type \[text\]](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-account-address-01112020-m-yx-7tttoebgtj-ckrhbw-type-doc-java-lang-illegalargumentexception-mapper-quater-of-different-type-current-type-keyword-merged-type-text/284116)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 8:37am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-account-address-01112020-m-yx-7tttoebgtj-ckrhbw-type-doc-java-lang-illegalargumentexception-mapper-quater-of-different-type-current-type-keyword-merged-type-text/284116 "2021-09-14T08:37:54Z")

</div>

Hi, I am having a problem as below. What could be the reason of this specific problem which was occured only two hours during the day first time and do not know how to repeat the same problem. It occured and does not r…

---

## [Problem installing ruby gem active\_support](https://discuss.elastic.co/t/problem-installing-ruby-gem-active-support/283466)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 8:33am UTC](https://discuss.elastic.co/t/problem-installing-ruby-gem-active-support/283466 "2021-09-14T08:33:57Z")

</div>

Hi all, Some specs: Logstash 7.13.1 Ruby 2.5.0 activesupport 6.1.4.1 I'd like to use some active\_support functionality in my ruby filters that I list in my logstash config files. I'm having a problem however with my…

---

## [How I can use the highlighter in react app](https://discuss.elastic.co/t/how-i-can-use-the-highlighter-in-react-app/283494)

<div class="topic-metadata">

**Author:** [@Drsaud](https://discuss.elastic.co/u/Drsaud)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 8:04am UTC](https://discuss.elastic.co/t/how-i-can-use-the-highlighter-in-react-app/283494 "2021-09-14T08:04:16Z")

</div>

Hi, I want to ask how to apply the highlighter in my react app because when I tried it says its not parameter, I try it on my get req axios .get( \`http://localhost:9200/ncar\_index/ncar/\_search?q=${e…

---

## [User Prioritization | Indexing workload Prioritization](https://discuss.elastic.co/t/user-prioritization-indexing-workload-prioritization/284061)

<div class="topic-metadata">

**Author:** [@Chinnu](https://discuss.elastic.co/u/Chinnu)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:52am UTC](https://discuss.elastic.co/t/user-prioritization-indexing-workload-prioritization/284061 "2021-09-14T07:52:51Z")

</div>

Hello, I am also looking for some documentation on prioritization among Users and Tokens in Cluster. Also, is there some kind of priority that we can set between indexing-load and querying-load ? Reason for asking thi…

---

## [Which Mappings settings can help improve indexing speed?](https://discuss.elastic.co/t/which-mappings-settings-can-help-improve-indexing-speed/283981)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:50am UTC](https://discuss.elastic.co/t/which-mappings-settings-can-help-improve-indexing-speed/283981 "2021-09-14T07:50:18Z")

</div>

Hello, I'm trying to improve the indexing performance on my cluster and everything listed in the tune for indexing speed document was already checked. Currently the indexing is done using Logstash with the elasticsearc…

---

## [What is the right way to query nested fields](https://discuss.elastic.co/t/what-is-the-right-way-to-query-nested-fields/283949)

<div class="topic-metadata">

**Author:** [@eylon\_koren](https://discuss.elastic.co/u/eylon_koren)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:36am UTC](https://discuss.elastic.co/t/what-is-the-right-way-to-query-nested-fields/283949 "2021-09-14T07:36:48Z")

</div>

Hi ! I am providing accessibility to search on ES using my own UI which uses query string. Selecting query string is essential, beacuse the users might not be familier with advance quering in ES, And I would like to ke…

---

## [Logstash persistent queue settings](https://discuss.elastic.co/t/logstash-persistent-queue-settings/284144)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [September 14, 2021, 6:35am UTC](https://discuss.elastic.co/t/logstash-persistent-queue-settings/284144 "2021-09-14T06:35:32Z")

</div>

Using logstash 7.13 We are running logstash on linux server which has 4 cpu(s) 15gb of ram of 100gb of ssd. We are using persistent queue settings in logstash but we actually can't sure is this right configuration or c…

---

## [Reindexing is slow process](https://discuss.elastic.co/t/reindexing-is-slow-process/281766)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [September 14, 2021, 6:33am UTC](https://discuss.elastic.co/t/reindexing-is-slow-process/281766 "2021-09-14T06:33:43Z")

</div>

Running ELK stack 7.13.2 Reindexing is a slow process it takes one day or more than one day. we have 10 indices of 101.4gb reindexing this size of data is costlier even though we close the logstash but nothing happened…

---

## [Watcherで特定のフィールドの値ごとに集計して件数超過で通知する方法](https://discuss.elastic.co/t/watcher/282658)

<div class="topic-metadata">

**Author:** [@a-naga](https://discuss.elastic.co/u/a-naga)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 6:12am UTC](https://discuss.elastic.co/t/watcher/282658 "2021-09-14T06:12:24Z")

</div>

ElasticsearchにIPフィールドを含むログデータがindexされていく状態で、 以下のようなWatcher定義を検討しています。 過去10分間のログを対象に、IPフィールドのIPアドレス毎に同一IPアドレスの件数を集計し、 5件以上出ている全てのIPアドレスのドキュメント内容をメールで通知する Watcherでこのような条件が可能かどうか、良い方法があればご教示いただきたいです。

---

## [How to restore backup of linux in windows?](https://discuss.elastic.co/t/how-to-restore-backup-of-linux-in-windows/283874)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 6:06am UTC](https://discuss.elastic.co/t/how-to-restore-backup-of-linux-in-windows/283874 "2021-09-14T06:06:19Z")

</div>

I have a backup of the Linux index and the ELK stack version is 7.2.0 and I want to restore that backup on Windows. Windows ELK stack version is 7.11.0. I don't know how to backup on different OS. Any way to backup on Wi…

---

## [Linux-Endpoint-security State changed to DEGRADED-Artifact endpoint-trustlist-linux-v1 is unavailablee](https://discuss.elastic.co/t/linux-endpoint-security-state-changed-to-degraded-artifact-endpoint-trustlist-linux-v1-is-unavailablee/282061)

<div class="topic-metadata">

**Author:** [@pedimave](https://discuss.elastic.co/u/pedimave)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 5:21am UTC](https://discuss.elastic.co/t/linux-endpoint-security-state-changed-to-degraded-artifact-endpoint-trustlist-linux-v1-is-unavailablee/282061 "2021-09-14T05:21:33Z")

</div>

I have installed Elastic 7.14 and testing Endoint Security over fleet with Linux Machines (Debian 10). All seems that is working but after few minutes appear the message : State changed to DEGRADED with all of them. Af…

---

## [How to monitor/discover modification of documents?](https://discuss.elastic.co/t/how-to-monitor-discover-modification-of-documents/283629)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 4:58am UTC](https://discuss.elastic.co/t/how-to-monitor-discover-modification-of-documents/283629 "2021-09-14T04:58:43Z")

</div>

Dears, ELK version: 7.7.0 Is there any way to monitor/discover modification of documents in the ELK? Any idea? Best Regards, Dan

---

## [Logstash api endpoints are not accessible outside the logstash container](https://discuss.elastic.co/t/logstash-api-endpoints-are-not-accessible-outside-the-logstash-container/284135)

<div class="topic-metadata">

**Author:** [@vijayebpzr](https://discuss.elastic.co/u/vijayebpzr)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 4:49am UTC](https://discuss.elastic.co/t/logstash-api-endpoints-are-not-accessible-outside-the-logstash-container/284135 "2021-09-14T04:49:49Z")

</div>

We deployed the ELK stack in kubernetes cluster and everything is working fine. Now we are trying to monitor logstash from kibana stack monitoring using metricbeat. We could see that logstash section is not visible in st…

---

## [How to prevent automatic deletion of indices](https://discuss.elastic.co/t/how-to-prevent-automatic-deletion-of-indices/283965)

<div class="topic-metadata">

**Author:** [@asan](https://discuss.elastic.co/u/asan)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 4:45am UTC](https://discuss.elastic.co/t/how-to-prevent-automatic-deletion-of-indices/283965 "2021-09-14T04:45:32Z")

</div>

hi After checking history of my logs in Discovery i found out that my logs just stored for 2 weeks and after that history of my logs is deleted. i didn't set up any policy in Index Lifecycle Policies. how can i fix thi…

---

## [How to know the node is unable to work by master node](https://discuss.elastic.co/t/how-to-know-the-node-is-unable-to-work-by-master-node/284134)

<div class="topic-metadata">

**Author:** [@Hungming\_Chiu](https://discuss.elastic.co/u/Hungming_Chiu)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 3:31am UTC](https://discuss.elastic.co/t/how-to-know-the-node-is-unable-to-work-by-master-node/284134 "2021-09-14T03:31:08Z")

</div>

Hi there , I would like to know whether the master node enable to find out the node only breath (with ping response), actually it cannot work anymore. Thank you. B.rgds

---

## [Parsing SQL queries using ruby; any recommended gem package?](https://discuss.elastic.co/t/parsing-sql-queries-using-ruby-any-recommended-gem-package/284132)

<div class="topic-metadata">

**Author:** [@SHINRA](https://discuss.elastic.co/u/SHINRA)\
**Replies:** 0\
**Last updated:** [September 14, 2021, 2:44am UTC](https://discuss.elastic.co/t/parsing-sql-queries-using-ruby-any-recommended-gem-package/284132 "2021-09-14T02:44:08Z")

</div>

Hi, I'm new to Ruby language and I thought I could still do a simple task of normalizing + parsing SQL query using some third party library; but I had no luck finding any that works to my intention. Here's what I'm try…

---

## [Invalid interval specified, must be non-null and non-empty](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878)

<div class="topic-metadata">

**Author:** [@jcalonso](https://discuss.elastic.co/u/jcalonso)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 1:03am UTC](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878 "2021-09-14T01:03:43Z")

</div>

Hi there, I been trying to run the following query on a rollup index, but cant get around the interval error. This is my query: GET /rollup-24hours/\_search { "size": 0, "aggs": { "by\_period": { "aggs": …

---

## [Issues with ILM rollover](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 5\
**Last updated:** [September 13, 2021, 11:59pm UTC](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120 "2021-09-13T23:59:43Z")

</div>

version 7.14 I have some indexes that are not rolling over when I expect them to: policy says: \` "max\_primary\_shard\_size": "1gb", and the stats show Storage Size 1.2gb and Primaries 1. Perhaps significantly there …

---

## [Append-Only Index for Life](https://discuss.elastic.co/t/append-only-index-for-life/284054)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 11:46pm UTC](https://discuss.elastic.co/t/append-only-index-for-life/284054 "2021-09-13T23:46:57Z")

</div>

We currently write audit logs and metrics to an elasticsearch index. I'm trying to find a way to prevent a VM admin user from logging into the VM that runs elasticsearch and being able to delete or update audit log docu…

---

## [How to display count of all attributes in Kibana visualization](https://discuss.elastic.co/t/how-to-display-count-of-all-attributes-in-kibana-visualization/283233)

<div class="topic-metadata">

**Author:** [@Sam\_Chats](https://discuss.elastic.co/u/Sam_Chats)\
**Replies:** 6\
**Last updated:** [September 13, 2021, 10:54pm UTC](https://discuss.elastic.co/t/how-to-display-count-of-all-attributes-in-kibana-visualization/283233 "2021-09-13T22:54:18Z")

</div>

My data has about 50 different attributes. I have created a dashboard in Kibana to display value distributions of some of these attributes based on the date filter at the top. I want to create one more visualization to s…

---

## [How to match lines in unstructured log starting with specific string](https://discuss.elastic.co/t/how-to-match-lines-in-unstructured-log-starting-with-specific-string/284112)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 7:18pm UTC](https://discuss.elastic.co/t/how-to-match-lines-in-unstructured-log-starting-with-specific-string/284112 "2021-09-13T19:18:35Z")

</div>

I have a very big unstructured file. Firstly, I want to parse all lines that starts with ABC or CDE and store them as one document in Elasticsearch. One file should be one document in index, so @message should look like …

---

## [Warning metricCollector (net5.0 Windows)](https://discuss.elastic.co/t/warning-metriccollector-net5-0-windows/281233)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 6\
**Last updated:** [September 13, 2021, 9:34pm UTC](https://discuss.elastic.co/t/warning-metriccollector-net5-0-windows/281233 "2021-09-13T21:34:54Z")

</div>

Good morning, I have a service in .NetCore 5.0 and windows (IIS) and I'm using the package of elasticAllApm and now in production I have seen the next warning: \[Warning\] {"MetricsCollector"} Failed reading "CgroupMetri…

---

## [Aggregating transaction data for payments](https://discuss.elastic.co/t/aggregating-transaction-data-for-payments/283713)

<div class="topic-metadata">

**Author:** [@Fenix](https://discuss.elastic.co/u/Fenix)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 8:19pm UTC](https://discuss.elastic.co/t/aggregating-transaction-data-for-payments/283713 "2021-09-13T20:19:13Z")

</div>

I want to know how many payments in my environment are of a given status, at a given time broken down by direction, and protocol. In our case, a payment is a collection of transactions (docs) with the same paymentId. Th…

---

## [Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/283809)

<div class="topic-metadata">

**Author:** [@plaroche0](https://discuss.elastic.co/u/plaroche0)\
**Replies:** 5\
**Last updated:** [September 13, 2021, 7:55pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/283809 "2021-09-13T19:55:37Z")

</div>

I have filebeat installed on a Syncplify server. It will send a couple of logs to ES and then nothing else. The service says it is still running. If I restart the service I get a couple more logs and then nothing unless …

[Previous page](https://discuss.elastic.co/latest.md?page=1478)

[Next page](https://discuss.elastic.co/latest.md?page=1480)
