# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1488

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1489

---

## [Ranking Evaluation API Inquiry](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648)

<div class="topic-metadata">

**Author:** [@Ahmed\_Elsheikh](https://discuss.elastic.co/u/Ahmed_Elsheikh)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648 "2021-09-08T11:24:26Z")

</div>

After reading about Ranking Evaluation API, and I am planning to use it in my search engine project, however, the following points were not clear to me Does it enhance search results as per query per user (set of users…

---

## [Connecting React to elasticsearch API without using AppSearch (Enterprise Search)](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472)

<div class="topic-metadata">

**Author:** [@juslin03](https://discuss.elastic.co/u/juslin03)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 11:06am UTC](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472 "2021-09-08T11:06:19Z")

</div>

Hello everyone. I'm working on a feature that my boss asked me to do but I'm having some trouble. The goal is to connect our React application (generated with Search UI) directly with ElasticSearch without going throug…

---

## [Elastic APM support with Sitecore](https://discuss.elastic.co/t/elastic-apm-support-with-sitecore/282916)

<div class="topic-metadata">

**Author:** [@Bharat\_Lahori](https://discuss.elastic.co/u/Bharat_Lahori)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 10:40am UTC](https://discuss.elastic.co/t/elastic-apm-support-with-sitecore/282916 "2021-09-08T10:40:51Z")

</div>

Dear Team, I am new to Elastic APM. Can we monitor Sitecore 9.x through Elastic APM? Regards, Bharat

---

## [How can i stop a cluster on ECK](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974)

<div class="topic-metadata">

**Author:** [@w\_Aaron](https://discuss.elastic.co/u/w_Aaron)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 10:12am UTC](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974 "2021-09-08T10:12:02Z")

</div>

I changed the cluster yaml file nodeSet.config.count value to 0 In my cluster,When i kubectl describe es xxxx\_es\_id ,the logs info is:"es26f861-fa5d-410a-acb1-b9281f6814ae" is invalid: spec.nodeSets: Required value: Elas…

---

## [Yum Repo not working?](https://discuss.elastic.co/t/yum-repo-not-working/283639)

<div class="topic-metadata">

**Author:** [@Marco\_Lazzarotto](https://discuss.elastic.co/u/Marco_Lazzarotto)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 9:38am UTC](https://discuss.elastic.co/t/yum-repo-not-working/283639 "2021-09-08T09:38:22Z")

</div>

I have a Spacewalk running on CentOS which I have to replace with Katello. I've added https://artifacts.elastic.co/packages/7.x/yum as a repo to Katello (exactly as on Spacewalk), but when I try to sync with that reposi…

---

## [Sending logs to ElasticSearch directly](https://discuss.elastic.co/t/sending-logs-to-elasticsearch-directly/283640)

<div class="topic-metadata">

**Author:** [@adm3](https://discuss.elastic.co/u/adm3)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 9:42am UTC](https://discuss.elastic.co/t/sending-logs-to-elasticsearch-directly/283640 "2021-09-08T09:42:38Z")

</div>

I'm trying to send logs directly to elasticsearch from Velocirpator, but I'm getting the below error when enabled xpack security features. below is my elastic config file ---------------------------------- Security -----…

---

## [Host details](https://discuss.elastic.co/t/host-details/283616)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 7:08am UTC](https://discuss.elastic.co/t/host-details/283616 "2021-09-08T07:08:50Z")

</div>

Hi i am using 6.8 metricbeat and server is 7.12 . a. add host metricset and got error , so enable add\_host\_metadata : ~ b . as per documentation . add\_host\_metadata it should collect "host":{ "architecture":"x86…

---

## [ES and KIBANA not keeping up with Suricata logs](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636)

<div class="topic-metadata">

**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 9:29am UTC](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636 "2021-09-08T09:29:31Z")

</div>

Hi. I implemented a Suricata server with Filebeat to send logs to elasticsearch. The logs are then displayed in Kibana via the Filebeat Suricata module. My problem is when I enable flow logging in the meericata log fil…

---

## [Filebeat Hints based not grabbing logs](https://discuss.elastic.co/t/filebeat-hints-based-not-grabbing-logs/283634)

<div class="topic-metadata">

**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 9:02am UTC](https://discuss.elastic.co/t/filebeat-hints-based-not-grabbing-logs/283634 "2021-09-08T09:02:13Z")

</div>

Hello I set up Elastic Cloud on Kubernetes on a Managed Azure Redhat Openshift Cluster 4.6 My initial configuration with hints based autodiscover and a default config was working fine. It grabbed all logs and I could d…

---

## [Elastic can't connect remote cluster](https://discuss.elastic.co/t/elastic-cant-connect-remote-cluster/283003)

<div class="topic-metadata">

**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 8:47am UTC](https://discuss.elastic.co/t/elastic-cant-connect-remote-cluster/283003 "2021-09-08T08:47:09Z")

</div>

Verison elasticsearch: 7.13.1 cluster-one and cluster-two have same config. apiVersion: apps/v1 kind: StatefulSet metadata: name: elasticsearch labels: app: elasticsearch spec: selector: matchLabels: …

---

## [Updation and deletion of fields from ingest attachment arrays](https://discuss.elastic.co/t/updation-and-deletion-of-fields-from-ingest-attachment-arrays/283619)

<div class="topic-metadata">

**Author:** [@Reghu\_Shanker](https://discuss.elastic.co/u/Reghu_Shanker)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 8:06am UTC](https://discuss.elastic.co/t/updation-and-deletion-of-fields-from-ingest-attachment-arrays/283619 "2021-09-08T08:06:01Z")

</div>

Hi, I have documents with multiple attachments in each of them. I am using ingest attachment processor to extract data and store it in elastic search document. These attachments are stored in ingest attachment arrays.…

---

## [Pie Chart with Filters Aggregation ..what is my path (Sorry, I really haven't got a clue)?](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246)

<div class="topic-metadata">

**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\
**Replies:** 9\
**Last updated:** [September 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246 "2021-09-08T07:35:43Z")

</div>

The Test area within my organisation has implemented ELK. The main purpose is to capture, analyse and visualise logs produced by an in-house load tool. There are also other 'applications' which feed logs. I have mainl…

---

## [Apm server after starting automatically stopped in windows](https://discuss.elastic.co/t/apm-server-after-starting-automatically-stopped-in-windows/283535)

<div class="topic-metadata">

**Author:** [@Pavan\_Naidu](https://discuss.elastic.co/u/Pavan_Naidu)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 7:34am UTC](https://discuss.elastic.co/t/apm-server-after-starting-automatically-stopped-in-windows/283535 "2021-09-08T07:34:13Z")

</div>

Fresh install apm server on windows ?

---

## [Help with complex DSL query/filter/grouping](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 7:31am UTC](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608 "2021-09-08T07:31:47Z")

</div>

Hi all, I have 2 seperate queries and am trying to find a way to filter and only return documents matching both queries. Query01 = event.provider : "Microsoft-Windows-Sysmon" and event.code:"3" and destination.port:(…

---

## [How to load apm metrics data in Observability Metrics UI?](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 7:16am UTC](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617 "2021-09-08T07:16:39Z")

</div>

I saw that kibana provides metrics, but it only loads metricsbeat index by default. I am a little curious. Since the apm server also collects metrics, how can I generate graphics from this part of the data?

---

## [Disk space not reducing after snapshot deletion](https://discuss.elastic.co/t/disk-space-not-reducing-after-snapshot-deletion/283301)

<div class="topic-metadata">

**Author:** [@arun\_sharma2](https://discuss.elastic.co/u/arun_sharma2)\
**Replies:** 7\
**Last updated:** [September 8, 2021, 6:59am UTC](https://discuss.elastic.co/t/disk-space-not-reducing-after-snapshot-deletion/283301 "2021-09-08T06:59:01Z")

</div>

Deleted snapshot of the indices but still the disk space is not reducing .

---

## [Property mapping elasticsearch](https://discuss.elastic.co/t/property-mapping-elasticsearch/283580)

<div class="topic-metadata">

**Author:** [@woal\_idal](https://discuss.elastic.co/u/woal_idal)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 6:57am UTC](https://discuss.elastic.co/t/property-mapping-elasticsearch/283580 "2021-09-08T06:57:52Z")

</div>

When trying to read certain fields from ElasticSearch, I noticed that if I do not include a text attribute then it will not map the variable name to the field. It will read null for that specific field. Lets say I have a…

---

## [App Search Filter Array limitation](https://discuss.elastic.co/t/app-search-filter-array-limitation/282330)

<div class="topic-metadata">

**Author:** [@SriAkash](https://discuss.elastic.co/u/SriAkash)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 6:53am UTC](https://discuss.elastic.co/t/app-search-filter-array-limitation/282330 "2021-09-08T06:53:28Z")

</div>

I need to query App Search only for selected documents. I am aware of search API filter options Search API filters and hence I am using filters, say id. The challenge here is: App Search has a limitation of 1024 values …

---

## [Unable to setup Beats on my local system](https://discuss.elastic.co/t/unable-to-setup-beats-on-my-local-system/283614)

<div class="topic-metadata">

**Author:** [@Adhi](https://discuss.elastic.co/u/Adhi)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 6:51am UTC](https://discuss.elastic.co/t/unable-to-setup-beats-on-my-local-system/283614 "2021-09-08T06:51:09Z")

</div>

Hello, I'm having trouble seting up both filebeat and metricbeat agent in my local system. Im currently using the 14 days free cloud trail version, I have followed the steps given. So whenever I ran setup command, im …

---

## [Combine separated JSON logs in k8s](https://discuss.elastic.co/t/combine-separated-json-logs-in-k8s/283510)

<div class="topic-metadata">

**Author:** [@Dennis\_Haseloff](https://discuss.elastic.co/u/Dennis_Haseloff)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 6:49am UTC](https://discuss.elastic.co/t/combine-separated-json-logs-in-k8s/283510 "2021-09-08T06:49:01Z")

</div>

Hi all, We are using a filebeat daemon set with autodisocover to scrape all container logs which are all in the JSON logstash format. Using docker container runtime, the docker json-file driver splits bigger logs into 1…

---

## [APM agent could not connect to APM server](https://discuss.elastic.co/t/apm-agent-could-not-connect-to-apm-server/283576)

<div class="topic-metadata">

**Author:** [@ramm](https://discuss.elastic.co/u/ramm)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 6:44am UTC](https://discuss.elastic.co/t/apm-agent-could-not-connect-to-apm-server/283576 "2021-09-08T06:44:58Z")

</div>

Hi, I have installed APM Java agent(elastic-apm-agent-1.25.0) and instrumented IBM Websphere JVM, however I see the following error in the agent log 2021-09-07 15:40:58,900 \[elastic-apm-server-reporter\] ERROR co.elastic…

---

## [Add output kafka Idempotent](https://discuss.elastic.co/t/add-output-kafka-idempotent/283594)

<div class="topic-metadata">

**Author:** [@Icedroid](https://discuss.elastic.co/u/Icedroid)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 6:30am UTC](https://discuss.elastic.co/t/add-output-kafka-idempotent/283594 "2021-09-08T06:30:11Z")

</div>

I need output to kafka for at most once . Can I create a pull request to beats output kafka as follow: if config.Idempotent { k.Producer.Idempotent = config.Idempotent k.Net.MaxOpenRequests = 1 k.Producer.Require…

---

## [Wrong result in tsvb](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 6:29am UTC](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552 "2021-09-08T06:29:02Z")

</div>

i am trying to get uptime . i have created Gauge TSVB aggregation and it shows - days but i can see data , if i have same in data table attached is the screen shot

---

## [Change snapshot directory](https://discuss.elastic.co/t/change-snapshot-directory/283055)

<div class="topic-metadata">

**Author:** [@Cihan\_Tunali](https://discuss.elastic.co/u/Cihan_Tunali)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 6:22am UTC](https://discuss.elastic.co/t/change-snapshot-directory/283055 "2021-09-08T06:22:40Z")

</div>

Hello I am using a shared folder to store snapshots which is a nfs. I need to change NFS directory but I dont want to lose existing backups. I copied existing data to new folder and added that new folder as new reposito…

---

## [Updating Logstash Keystore Key-Values Externally](https://discuss.elastic.co/t/updating-logstash-keystore-key-values-externally/283611)

<div class="topic-metadata">

**Author:** [@nitvakhare](https://discuss.elastic.co/u/nitvakhare)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 5:52am UTC](https://discuss.elastic.co/t/updating-logstash-keystore-key-values-externally/283611 "2021-09-08T05:52:43Z")

</div>

Hi, I wanted to know that if there is any option to update the existing key-value pair in the Logstash keystore externally. I am storing 'username' and 'password' fields in this keystore manually for now. But, I want to…

---

## [Corrupted Kibana Saved Object](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 5:27am UTC](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521 "2021-09-08T05:27:43Z")

</div>

Hey, Can anyone please tell me how to check the corrupted saved object of kibana? Context: I'm intended to upgrade kibana. If any kibana saved object is corrupt then upgrade fails, so its workaround is to manually find …

---

## [Error in Netty pipeline: java.io.IOException: Connection reset by peer](https://discuss.elastic.co/t/error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/283606)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 5:04am UTC](https://discuss.elastic.co/t/error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/283606 "2021-09-08T05:04:23Z")

</div>

Dear community, in my logstash 7.8.1 logs I get this error message quite a lot: \[2021-09-07T08:36:56,031\]\[ERROR\]\[logstash.inputs.tcp \]\[main\] Error in Netty pipeline: java.io.IOException: Connection reset by peer It on…

---

## [Filter to change the field name to be more user friendly](https://discuss.elastic.co/t/filter-to-change-the-field-name-to-be-more-user-friendly/283543)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 4:38am UTC](https://discuss.elastic.co/t/filter-to-change-the-field-name-to-be-more-user-friendly/283543 "2021-09-08T04:38:16Z")

</div>

Hello, I have a log line for diskusage such as disk-usage: \[1\]=76% \[2\]=26% \[3\]=26% \[4\]=24% \[5\]=24% \[6\]=28% i used dissect and kv to get the values as needed . { "@timestamp" =\> 2021-09-06T08:22:46.944Z, …

---

## [Configure Email using watcher](https://discuss.elastic.co/t/configure-email-using-watcher/283498)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 3:37am UTC](https://discuss.elastic.co/t/configure-email-using-watcher/283498 "2021-09-08T03:37:19Z")

</div>

Hi, I want to setup email alerting on cluster using watcher. I have done this before on single node cluster and worked fine. Have query regarding the setup on multi node cluster. Do i have to update the email settings …

---

## [Clarify behavior of FunctionScoreQuery when there are more than \`size\` matches to the \`query\`](https://discuss.elastic.co/t/clarify-behavior-of-functionscorequery-when-there-are-more-than-size-matches-to-the-query/283596)

<div class="topic-metadata">

**Author:** [@alexklibisz](https://discuss.elastic.co/u/alexklibisz)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 2:25am UTC](https://discuss.elastic.co/t/clarify-behavior-of-functionscorequery-when-there-are-more-than-size-matches-to-the-query/283596 "2021-09-08T02:25:21Z")

</div>

I'm running into an issue with the FunctionScoreQuery and would appreciate some clarification of the query behavior. Say I'm running a function\_score query with size=100. The actual query matches 101 documents. How many…

[Previous page](https://discuss.elastic.co/latest.md?page=1487)

[Next page](https://discuss.elastic.co/latest.md?page=1489)
