# Latest **URL:** https://discuss.elastic.co/latest.md?page=1490 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1491 --- ## [ElasticSearch script query incorrect values](https://discuss.elastic.co/t/elasticsearch-script-query-incorrect-values/283547)
**Author:** [@me.mohammed](https://discuss.elastic.co/u/me.mohammed)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 2:32pm UTC](https://discuss.elastic.co/t/elasticsearch-script-query-incorrect-values/283547 "2021-09-07T14:32:01Z")
Hello everyone, I'm trying to apply this query GET rdbms\_sync\_idx/\_search { "query":{ "nested":{ "path":"bogoDeals", "query":{ "bool":{ "filter":\[ … --- ## [How to read Different field names with same field value - Elasticsearch](https://discuss.elastic.co/t/how-to-read-different-field-names-with-same-field-value-elasticsearch/283314)
**Author:** [@woal\_idal](https://discuss.elastic.co/u/woal_idal)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 2:08pm UTC](https://discuss.elastic.co/t/how-to-read-different-field-names-with-same-field-value-elasticsearch/283314 "2021-09-07T14:08:32Z")
I have to separate index patterns that will have their own unique fields. For instance in index1 it will contain a field property CorrelationId index2 it will contain a field property UniqueCorrelationId these two fie… --- ## [Kibana embed dashboard: Error authentification](https://discuss.elastic.co/t/kibana-embed-dashboard-error-authentification/283436)
**Author:** [@Abdoul\_Kande](https://discuss.elastic.co/u/Abdoul_Kande)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 2:24pm UTC](https://discuss.elastic.co/t/kibana-embed-dashboard-error-authentification/283436 "2021-09-07T14:24:14Z")
Hello, I have a problem in my kibana authentification. I use an embed dashboard for sharing to some others peoples. But the problem is they cant authenticate when they use chrome. the brower reload and redirect to th… --- ## [How do I get past the 500 record limitation?](https://discuss.elastic.co/t/how-do-i-get-past-the-500-record-limitation/283319)
**Author:** [@a24](https://discuss.elastic.co/u/a24)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 2:18pm UTC](https://discuss.elastic.co/t/how-do-i-get-past-the-500-record-limitation/283319 "2021-09-07T14:18:45Z")
I am brand new to kibana, how do I load more than the 500 record limit? I read somewhere in a post to go to settings. I have no clue where settings even is. I think I am on version 7.8.1. --- ## [Filebeat : how to exclude lines](https://discuss.elastic.co/t/filebeat-how-to-exclude-lines/282306)
**Author:** [@thomas7467](https://discuss.elastic.co/u/thomas7467)\ **Replies:** 6\ **Last updated:** [September 7, 2021, 2:17pm UTC](https://discuss.elastic.co/t/filebeat-how-to-exclude-lines/282306 "2021-09-07T14:17:55Z")
Hi, Using ELK 7.14.0 release. I'm trying to excludes lines from IIS access log files. I've tried several methods but It still will not work. I've done that previously with logstash, but I prefer use a simplified archi… --- ## [Enterprise search installation gives API key error](https://discuss.elastic.co/t/enterprise-search-installation-gives-api-key-error/283541)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 2:04pm UTC](https://discuss.elastic.co/t/enterprise-search-installation-gives-api-key-error/283541 "2021-09-07T14:04:32Z")
Hi, I'm trying to install Elastic Enterprise Search on my system. I have added necessary settings in elasticsearch.yml, enterprise-search.yml and kibana.yml. But when i run, ENT\_SEARCH\_DEFAULT\_PASSWORD=PASSWORD bin/e… --- ## [Using dense\_vector field in appsearch engine](https://discuss.elastic.co/t/using-dense-vector-field-in-appsearch-engine/283536)
**Author:** [@sureshj](https://discuss.elastic.co/u/sureshj)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 2:03pm UTC](https://discuss.elastic.co/t/using-dense-vector-field-in-appsearch-engine/283536 "2021-09-07T14:03:13Z")
I want to use fields of type dense\_vector in an engine. It appears it is supported on elastic search but not on app search (Enterprise search). The documentation at Schema API | Elastic App Search Documentation \[7.14\] … --- ## [Preset time ranges for dashboard or canvas](https://discuss.elastic.co/t/preset-time-ranges-for-dashboard-or-canvas/283057)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 1:59pm UTC](https://discuss.elastic.co/t/preset-time-ranges-for-dashboard-or-canvas/283057 "2021-09-07T13:59:14Z")
Hello, I've managed to create a very useful dashboard and canvas but I'm having problems with the time selection. I know the time selection in Kibana has a high degree of flexibility, but I'm creating a dashboard for us… --- ## [How to get the completness of each column by group](https://discuss.elastic.co/t/how-to-get-the-completness-of-each-column-by-group/283542)
**Author:** [@MichaelG](https://discuss.elastic.co/u/MichaelG)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 1:51pm UTC](https://discuss.elastic.co/t/how-to-get-the-completness-of-each-column-by-group/283542 "2021-09-07T13:51:49Z")
I'm trying to get the completeness of every column grouped by a categorical field that know to be 100% complete. Currently I'm able to get the completeness for any given column, grouped by the grouping field like this: … --- ## [Skip\_newline no effect in filestream parsers.multiline](https://discuss.elastic.co/t/skip-newline-no-effect-in-filestream-parsers-multiline/282913)
**Author:** [@kenix](https://discuss.elastic.co/u/kenix)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 1:48pm UTC](https://discuss.elastic.co/t/skip-newline-no-effect-in-filestream-parsers-multiline/282913 "2021-09-07T13:48:28Z")
Context: docker.elastic.co/beats/filebeat-oss:7.14.0 image mac os latest Filebeat settings: filebeat.inputs: - type: filestream enabled: true paths: - /usr/var/log/foo.log parsers: - multiline: type… --- ## [FSCrawler not able to connect to elastic search](https://discuss.elastic.co/t/fscrawler-not-able-to-connect-to-elastic-search/283530)
**Author:** [@Reghu\_Shanker](https://discuss.elastic.co/u/Reghu_Shanker)\ **Replies:** 6\ **Last updated:** [September 7, 2021, 1:38pm UTC](https://discuss.elastic.co/t/fscrawler-not-able-to-connect-to-elastic-search/283530 "2021-09-07T13:38:05Z")
Hi, I have an AWS Elastic Search Instance. I am trying to us FSCrawler along with it. My elastic search version is 7.10 and FSCrawler is fscrawler-es7-2.7.zip I am getting the following error: 17:51:21,439 e\[33mWARN e… --- ## [Doesn't match any of the locations specified by path.repo because this setting is empty"](https://discuss.elastic.co/t/doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/283527)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 4\ **Last updated:** [September 7, 2021, 1:06pm UTC](https://discuss.elastic.co/t/doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/283527 "2021-09-07T13:06:03Z")
Hello friends i have a problem. I can't backup indices. my elasticsearch.yml file: # ----------------------------------- Paths ------------------------------------ # # Path to directory where to store the data (separat… --- ## [CORS Error while using the Elastic Enterprise Search](https://discuss.elastic.co/t/cors-error-while-using-the-elastic-enterprise-search/263601)
**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\ **Replies:** 12\ **Last updated:** [September 7, 2021, 12:50pm UTC](https://discuss.elastic.co/t/cors-error-while-using-the-elastic-enterprise-search/263601 "2021-09-07T12:50:59Z")
Hi, I have deployed the Enterprise Search using docker and when I am trying to access it, using react-js client(@elastic/search-ui-app-search-connector). I am getting CORS Error as the URL for both are different. Just … --- ## [How to assign \_score value to some other field using script\_fields](https://discuss.elastic.co/t/how-to-assign-score-value-to-some-other-field-using-script-fields/283531)
**Author:** [@voldemort02](https://discuss.elastic.co/u/voldemort02)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 12:43pm UTC](https://discuss.elastic.co/t/how-to-assign-score-value-to-some-other-field-using-script-fields/283531 "2021-09-07T12:43:45Z")
I would like to inject \_score in my \_source on runtime. I used this script but it is not working "script\_fields": { "\_score": { "script": { "lang": "painless", "source": "\_score.value" }… --- ## [Index Speed Capped but Missing ASA logs](https://discuss.elastic.co/t/index-speed-capped-but-missing-asa-logs/283307)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 12:15pm UTC](https://discuss.elastic.co/t/index-speed-capped-but-missing-asa-logs/283307 "2021-09-07T12:15:24Z")
Our current set up is Elasticsearch, Filebeat, and Kibana on the same server for dev purposes (hoping to move to 3 nodes & gold licensing next year) - We are using the cisco.yml module in filebeat to receive ASA … --- ## [Is it possible to have calculation on aggregation](https://discuss.elastic.co/t/is-it-possible-to-have-calculation-on-aggregation/283359)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 12:07pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-calculation-on-aggregation/283359 "2021-09-07T12:07:56Z")
Hi i have a requirement wherein on host metric i want , mount point , total, used\_bytes, used\_pct in tsvb but it is not showing in table timeseries option I did a workaround by having multiple max of metric total, … --- ## [Threshold Rule type - not able to send more than three field values in email action](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/283525)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 12:02pm UTC](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/283525 "2021-09-07T12:02:44Z")
Continuing the discussion from Threshold Rule type - not able to send more than three field values in email action: Waiting for a reply for this issue. --- ## [Pulse Secure integration](https://discuss.elastic.co/t/pulse-secure-integration/283501)
**Author:** [@tkarczewski](https://discuss.elastic.co/u/tkarczewski)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 11:24am UTC](https://discuss.elastic.co/t/pulse-secure-integration/283501 "2021-09-07T11:24:56Z")
Hi, How to create integration for Pulse Secure Connect? --- ## [Creating Table Visualization with 3 indices](https://discuss.elastic.co/t/creating-table-visualization-with-3-indices/281571)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 11:16am UTC](https://discuss.elastic.co/t/creating-table-visualization-with-3-indices/281571 "2021-09-07T11:16:03Z")
Hi, I'm trying to create a data table with multiple terms aggregations from each index. I've created an index-pattern that matches against the 3 indices that I want to search across, but whenever I create a terms agg fo… --- ## [Fingerprint duplicate hash for different events](https://discuss.elastic.co/t/fingerprint-duplicate-hash-for-different-events/282462)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 10:51am UTC](https://discuss.elastic.co/t/fingerprint-duplicate-hash-for-different-events/282462 "2021-09-07T10:51:11Z")
Hi, I have a strange issue which came to light after starting to use datastreams (and thus create events instead of updates). The following fingerprint config we have in logstash: ### Add a fingerprint to… --- ## [ECK Install repository-s3 plugin](https://discuss.elastic.co/t/eck-install-repository-s3-plugin/283514)
**Author:** [@Fleming7612](https://discuss.elastic.co/u/Fleming7612)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 10:30am UTC](https://discuss.elastic.co/t/eck-install-repository-s3-plugin/283514 "2021-09-07T10:30:38Z")
Hi there, I'd downloaded repository-s3-7.12.jar but i don't know how to install it. Any suggestion would be appreciated. Best wishes --- ## [Is it possible to cumulative\_sum over the metric of a moving interval?](https://discuss.elastic.co/t/is-it-possible-to-cumulative-sum-over-the-metric-of-a-moving-interval/283519)
**Author:** [@di.lu](https://discuss.elastic.co/u/di.lu)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 10:15am UTC](https://discuss.elastic.co/t/is-it-possible-to-cumulative-sum-over-the-metric-of-a-moving-interval/283519 "2021-09-07T10:15:31Z")
Hiii ES community! I've been stuck on a tricky requirement for quite a while.. So I have a time series data capturing when a user has used what feature as which identity, lie this: | feature | is\_free\_trial | trac… --- ## [Upgrade from Basic license to Gold License](https://discuss.elastic.co/t/upgrade-from-basic-license-to-gold-license/283499)
**Author:** [@David\_Dennis](https://discuss.elastic.co/u/David_Dennis)\ **Replies:** 2\ **Last updated:** [September 7, 2021, 10:10am UTC](https://discuss.elastic.co/t/upgrade-from-basic-license-to-gold-license/283499 "2021-09-07T10:10:34Z")
Hi, I will like to seek guidance here. I have an Elasticsearch cluster and Kibana, currently an On-prem deployment. I want to enable Alerting, but the basic license does not provide connectors like Slack, Pagerduty, etc… --- ## [Fast ingest](https://discuss.elastic.co/t/fast-ingest/283518)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 9:52am UTC](https://discuss.elastic.co/t/fast-ingest/283518 "2021-09-07T09:52:36Z")
Hello, I have a project where we are considering using elasticsearch for some very high amount of data around 150billion documents/day is there a way we can ingest that amount of data in a real life scenario? I underst… --- ## [Using fleet agent with proxy](https://discuss.elastic.co/t/using-fleet-agent-with-proxy/283517)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 0\ **Last updated:** [September 7, 2021, 9:51am UTC](https://discuss.elastic.co/t/using-fleet-agent-with-proxy/283517 "2021-09-07T09:51:58Z")
Hi, I am trying to install the elastic agent 7.14.0 on linux. I am behind a proxy so we tried setting the proxy by doing: EXPORT HTTPS\_PROXY=ip:port As I saw Elastic Agent (Fleet Deployment) behind a proxy only I dont… --- ## [TSVB - How to use Annotations: display when a count of field LEVEL exceeds 500](https://discuss.elastic.co/t/tsvb-how-to-use-annotations-display-when-a-count-of-field-level-exceeds-500/281812)
**Author:** [@MWLonKso](https://discuss.elastic.co/u/MWLonKso)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 9:26am UTC](https://discuss.elastic.co/t/tsvb-how-to-use-annotations-display-when-a-count-of-field-level-exceeds-500/281812 "2021-09-07T09:26:47Z")
Hi there. The premise is pretty simple. I'm counting Events that match one of four possible values for a field called Level. In the TSVB I've split the graph using filters. What I'd like to be able to do is to put an Ann… --- ## [Gauge with dynamic Max and Min value](https://discuss.elastic.co/t/gauge-with-dynamic-max-and-min-value/282335)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 9:10am UTC](https://discuss.elastic.co/t/gauge-with-dynamic-max-and-min-value/282335 "2021-09-07T09:10:40Z")
I have Data like this: Max = 10; Min = 5; Value = 8; Is it possible to create a Gauge-Visualisation, where I can define the range (max and min) with my data? --- ## [Kibana sum aggregation not showing the correct values when I use divide in Json Input](https://discuss.elastic.co/t/kibana-sum-aggregation-not-showing-the-correct-values-when-i-use-divide-in-json-input/282473)
**Author:** [@im.manoj](https://discuss.elastic.co/u/im.manoj)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 9:04am UTC](https://discuss.elastic.co/t/kibana-sum-aggregation-not-showing-the-correct-values-when-i-use-divide-in-json-input/282473 "2021-09-07T09:04:38Z")
Hi, I am trying to sum all the values in a column and divide them by 3600. I used Sum Aggregation in order to sum the values in column(totaluptime) then in the Advanced section, I replaced this query, { "script": … --- ## [TSVB two Counts division](https://discuss.elastic.co/t/tsvb-two-counts-division/282331)
**Author:** [@Aaron\_Yu](https://discuss.elastic.co/u/Aaron_Yu)\ **Replies:** 1\ **Last updated:** [September 7, 2021, 8:55am UTC](https://discuss.elastic.co/t/tsvb-two-counts-division/282331 "2021-09-07T08:55:52Z")
Can you help me? How can I draw the line that count2/count1 in this TSVB? --- ## [Index stays at massive size after split](https://discuss.elastic.co/t/index-stays-at-massive-size-after-split/283453)
**Author:** [@rcz](https://discuss.elastic.co/u/rcz)\ **Replies:** 5\ **Last updated:** [September 7, 2021, 8:50am UTC](https://discuss.elastic.co/t/index-stays-at-massive-size-after-split/283453 "2021-09-07T08:50:26Z")
Hi, I had mistakenly made a very large index: 1 shard of 406 GB (1.8b documents). Then I split it into 16 shards hoping to get ~25GB sizes. I think the new index triggered a template, since it also got 1 replica shard… [Previous page](https://discuss.elastic.co/latest.md?page=1489) [Next page](https://discuss.elastic.co/latest.md?page=1491)