# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1492

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1493

---

## [Index pattern options alternatives](https://discuss.elastic.co/t/index-pattern-options-alternatives/283450)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 1:25pm UTC](https://discuss.elastic.co/t/index-pattern-options-alternatives/283450 "2021-09-06T13:25:50Z")

</div>

I tried Installing filebeat 7.14 in kubernetes on a new elastic cluster. In the old cluster I had over 5000 fields in the filebeat index pattern, which made it impossible to add new fields. In the new index in the new cl…

---

## [Convert Elasticsearch Date/Time field from UTC To Local Time?](https://discuss.elastic.co/t/convert-elasticsearch-date-time-field-from-utc-to-local-time/283441)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 9\
**Last updated:** [September 6, 2021, 1:11pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-date-time-field-from-utc-to-local-time/283441 "2021-09-06T13:11:52Z")

</div>

I am getting 12 Hours difference in Date. I want to set that date format to local time that is GMT+5. And I have set kibana default time period to Browser. Any one can help me how to set is as local time.

---

## [How to get all Field names with filter(or query) criteria on ElasticSearch?](https://discuss.elastic.co/t/how-to-get-all-field-names-with-filter-or-query-criteria-on-elasticsearch/283435)

<div class="topic-metadata">

**Author:** [@jinssssun](https://discuss.elastic.co/u/jinssssun)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 12:40pm UTC](https://discuss.elastic.co/t/how-to-get-all-field-names-with-filter-or-query-criteria-on-elasticsearch/283435 "2021-09-06T12:40:09Z")

</div>

PUT /test-product { "mappings": { "properties": { "profile": { "type": "nested" }, "product": { "type": "nested" } } } } i have a index that name's 'test-product' POS…

---

## [Sort data so that my exact match will be on top and then semi exact match with most words snd so on](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338)

<div class="topic-metadata">

**Author:** [@Jaymin](https://discuss.elastic.co/u/Jaymin)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 12:30pm UTC](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338 "2021-09-06T12:30:48Z")

</div>

I am using query\_string for searching my data. and wanted to sort my data such that exact match should be on top and less matched words would follow exact match. For Instance, { "size": 100, //"explain":true, "qu…

---

## [What does Output Errors mean in Beats monitoring in Kibana?](https://discuss.elastic.co/t/what-does-output-errors-mean-in-beats-monitoring-in-kibana/283365)

<div class="topic-metadata">

**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\
**Replies:** 5\
**Last updated:** [September 6, 2021, 11:56am UTC](https://discuss.elastic.co/t/what-does-output-errors-mean-in-beats-monitoring-in-kibana/283365 "2021-09-06T11:56:16Z")

</div>

Hello, In the Stack Monitoring page in Kibana, in the beats section, there is a column called Output Errors. What is this about? I can't see errors in the logs of the remote beats that are being monitored. If it is abo…

---

## [What is the difference between logstash and kibana pipelines?](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-and-kibana-pipelines/283420)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 11:55am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-logstash-and-kibana-pipelines/283420 "2021-09-06T11:55:52Z")

</div>

Hi! I have always used logstash but I would like to know if it could be replaced by kibana pipelines or if using kibana pipelines has any limitations thanks in advance!

---

## [Database file changed error](https://discuss.elastic.co/t/database-file-changed-error/281903)

<div class="topic-metadata">

**Author:** [@acezeus](https://discuss.elastic.co/u/acezeus)\
**Replies:** 13\
**Last updated:** [September 6, 2021, 11:38am UTC](https://discuss.elastic.co/t/database-file-changed-error/281903 "2021-09-06T11:38:42Z")

</div>

hello, i installed the elastic search for the first time along with kibana. everything was working fine until i switched off my pc for the day and started it the next morning. now when i try to start elasticsearch by ty…

---

## [Installation seems to hang](https://discuss.elastic.co/t/installation-seems-to-hang/281116)

<div class="topic-metadata">

**Author:** [@D-Groenewegen](https://discuss.elastic.co/u/D-Groenewegen)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 11:12am UTC](https://discuss.elastic.co/t/installation-seems-to-hang/281116 "2021-09-06T11:12:31Z")

</div>

Dear all, I hope you'll forgive me for my utter noobness. With the help of Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[7.14\] | Elastic, I tried installing ES for Linux. When I got to step…

---

## [Replace the kibana logo?](https://discuss.elastic.co/t/replace-the-kibana-logo/27547)

<div class="topic-metadata">

**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\
**Replies:** 60\
**Last updated:** [September 6, 2021, 10:33am UTC](https://discuss.elastic.co/t/replace-the-kibana-logo/27547 "2021-09-06T10:33:23Z")

</div>

Does anyone know if it is possible to replace the kibana logo with my company's logo? Only for corporate use.

---

## [Distance feature relevance score behaviour with boost \> 1](https://discuss.elastic.co/t/distance-feature-relevance-score-behaviour-with-boost-1/283386)

<div class="topic-metadata">

**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\
**Replies:** 0\
**Last updated:** [September 5, 2021, 9:00pm UTC](https://discuss.elastic.co/t/distance-feature-relevance-score-behaviour-with-boost-1/283386 "2021-09-05T21:00:30Z")

</div>

Hello, I am confused about the calculation of relevance scores with distance\_feature. In the documentation it says that: The distance\_feature query calculates a document’s relevance score as follows: relevance score …

---

## [Unable to test output with Filebeat to Elasticsearch](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654)

<div class="topic-metadata">

**Author:** [@jhaos](https://discuss.elastic.co/u/jhaos)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 9:38am UTC](https://discuss.elastic.co/t/unable-to-test-output-with-filebeat-to-elasticsearch/282654 "2021-09-06T09:38:56Z")

</div>

Hi there, I'm trying to send the logs from Filebeat to Elasticsearch but I'm stuck with a problem regarding credentials or certification. I have the following configuration in filebeat.yml filebeat.modules: -…

---

## [How to manage high level client connection to Elasticsearch](https://discuss.elastic.co/t/how-to-manage-high-level-client-connection-to-elasticsearch/283410)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 9:31am UTC](https://discuss.elastic.co/t/how-to-manage-high-level-client-connection-to-elasticsearch/283410 "2021-09-06T09:31:17Z")

</div>

I wonder how to manage connection when using RestHighlevelClient in Java. The old connection is automatically disconnected. So I know that i need to connect and close when i need it. Is this right? So what is I to be ma…

---

## [Date filter plugin doesn't take the timezone into account when using ISO8601](https://discuss.elastic.co/t/date-filter-plugin-doesnt-take-the-timezone-into-account-when-using-iso8601/283306)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 9:14am UTC](https://discuss.elastic.co/t/date-filter-plugin-doesnt-take-the-timezone-into-account-when-using-iso8601/283306 "2021-09-06T09:14:37Z")

</div>

Hi, I'm trying to normalize some timestamps into UTC from CEST, so far I've had no issues whatsoever except for when the parsed timestamp is already in ISO8601. At first, I wasn't sure whether the date-filter-plugin was…

---

## [Find all indices belonging to box type hot](https://discuss.elastic.co/t/find-all-indices-belonging-to-box-type-hot/283415)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 9:00am UTC](https://discuss.elastic.co/t/find-all-indices-belonging-to-box-type-hot/283415 "2021-09-06T09:00:55Z")

</div>

Is there an easy way to find all indices belonging to box type hot? I know that I can run GET /\_nodes/box\_type:hot to get all the nodes, and then maybe run a second step to find which node an index belong to, but I’m tr…

---

## [Min aggregation issue](https://discuss.elastic.co/t/min-aggregation-issue/283171)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 3\
**Last updated:** [September 6, 2021, 8:46am UTC](https://discuss.elastic.co/t/min-aggregation-issue/283171 "2021-09-06T08:46:24Z")

</div>

If a min aggregation is used inside a terms aggregation, the result doesn't contain any buckets for the terms aggregation, as long as no mapping exists for the min aggregation field (e.g. there is no value for that field…

---

## [Query and sort inside nested object](https://discuss.elastic.co/t/query-and-sort-inside-nested-object/283404)

<div class="topic-metadata">

**Author:** [@Are](https://discuss.elastic.co/u/Are)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 8:29am UTC](https://discuss.elastic.co/t/query-and-sort-inside-nested-object/283404 "2021-09-06T08:29:51Z")

</div>

Edit: see step-by-step and deeper explanation in post below. I am trying to sort my search results based on a field inside a nested object. Running ES 7.9. The mapping of the nested object looks like this: { "metaDate…

---

## [How can I set X-Opaque-Id while using restHighLevelClient?](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-while-using-resthighlevelclient/283390)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:58am UTC](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-while-using-resthighlevelclient/283390 "2021-09-06T07:58:06Z")

</div>

Hi everyone. Can I set X-Opaque-Id while using restHighLevelClient so that I can trace it in the slow log. And if so, how to set? Any advice is helpful. best regards.

---

## [Server Up Time (Windows)](https://discuss.elastic.co/t/server-up-time-windows/281027)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:50am UTC](https://discuss.elastic.co/t/server-up-time-windows/281027 "2021-09-06T07:50:05Z")

</div>

Hi, Is there a way of returning the current up time values of a windows server. (Would it be the same approach for other os's if this were required). If have googled around but not been able to find anything, so any u…

---

## [Sheduled Tasks](https://discuss.elastic.co/t/sheduled-tasks/281024)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:48am UTC](https://discuss.elastic.co/t/sheduled-tasks/281024 "2021-09-06T07:48:43Z")

</div>

Is it possible to identify the state of a scheduled task. Not reading the event log and seeing if something has been written recently. I need to go the scheduled task and see what its actual state is. Is this possible…

---

## [Only one Logstash pipeline doesn't have uuid and appear in the Standalone Cluster](https://discuss.elastic.co/t/only-one-logstash-pipeline-doesnt-have-uuid-and-appear-in-the-standalone-cluster/283417)

<div class="topic-metadata">

**Author:** [@Musketeer7](https://discuss.elastic.co/u/Musketeer7)\
**Replies:** 0\
**Last updated:** [September 6, 2021, 7:44am UTC](https://discuss.elastic.co/t/only-one-logstash-pipeline-doesnt-have-uuid-and-appear-in-the-standalone-cluster/283417 "2021-09-06T07:44:26Z")

</div>

Hello everyone Firstly I should mention that I already know about the whole xpack.monitoring.cluster\_uuid thing that was fixed in this PR. However this doesn't seem to be the case here. I have a production cluster, wh…

---

## [Elastic agent (metricbeat logs): Cannot index event publisher.Event](https://discuss.elastic.co/t/elastic-agent-metricbeat-logs-cannot-index-event-publisher-event/282364)

<div class="topic-metadata">

**Author:** [@Gomeisa](https://discuss.elastic.co/u/Gomeisa)\
**Replies:** 11\
**Last updated:** [September 6, 2021, 7:37am UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-logs-cannot-index-event-publisher-event/282364 "2021-09-06T07:37:14Z")

</div>

Hi, I have recently installed a fleet-managed Elastic Agent on my servers. my metricbeat\_monitor-json.log is flooded with this message: {"log.level":"warn","@timestamp":"2021-08-24T15:26:57.009+0430","log.logger":"ela…

---

## [Utilisateur kibana règle de fonctionnement](https://discuss.elastic.co/t/utilisateur-kibana-regle-de-fonctionnement/283285)

<div class="topic-metadata">

**Author:** [@Greg\_Spr](https://discuss.elastic.co/u/Greg_Spr)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 7:26am UTC](https://discuss.elastic.co/t/utilisateur-kibana-regle-de-fonctionnement/283285 "2021-09-06T07:26:42Z")

</div>

Bonjour, Je suis actuellement sur la version 7.9.2 Basic et je cherche a mettre en place une gestion de filtrage par utilisateur. Je m'explique, est ce qu'il est possible de mettre des règles pour un utilisateur sur la…

---

## [Is there a way to just post a command using the low level or nest .net clients?](https://discuss.elastic.co/t/is-there-a-way-to-just-post-a-command-using-the-low-level-or-nest-net-clients/283392)

<div class="topic-metadata">

**Author:** [@astanton1978](https://discuss.elastic.co/u/astanton1978)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 7:07am UTC](https://discuss.elastic.co/t/is-there-a-way-to-just-post-a-command-using-the-low-level-or-nest-net-clients/283392 "2021-09-06T07:07:03Z")

</div>

I dont see an appropriate category or tags for either of those .net clients, and the GitHub repo for them says to ask questions here, so sorry if this is the wrong category. I need to create an index mapping with some a…

---

## [Using Nest in AWS Lambda](https://discuss.elastic.co/t/using-nest-in-aws-lambda/283340)

<div class="topic-metadata">

**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\
**Replies:** 1\
**Last updated:** [September 6, 2021, 6:59am UTC](https://discuss.elastic.co/t/using-nest-in-aws-lambda/283340 "2021-09-06T06:59:38Z")

</div>

Has anyone used Nest with AWS Lambda? How did you deal with cold starts? The size of dlls affects performance and Nests library is large, the version we're using is 4 megabytes. Is there a light weight version of the NE…

---

## [Using Scroll Api causes Out of Memory errors](https://discuss.elastic.co/t/using-scroll-api-causes-out-of-memory-errors/283388)

<div class="topic-metadata">

**Author:** [@lakshmiteja\_salapu](https://discuss.elastic.co/u/lakshmiteja_salapu)\
**Replies:** 8\
**Last updated:** [September 6, 2021, 6:54am UTC](https://discuss.elastic.co/t/using-scroll-api-causes-out-of-memory-errors/283388 "2021-09-06T06:54:06Z")

</div>

I am trying to use scroll for getting over 41 million documents (156 GB) but it fails with out of memory error after getting 410000 documents Using batch size of 5000 documents and 30s - scroll time (also tried changing…

---

## [Nested aggregation referencing outer aggregation](https://discuss.elastic.co/t/nested-aggregation-referencing-outer-aggregation/283164)

<div class="topic-metadata">

**Author:** [@Jakob](https://discuss.elastic.co/u/Jakob)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 6:29am UTC](https://discuss.elastic.co/t/nested-aggregation-referencing-outer-aggregation/283164 "2021-09-06T06:29:14Z")

</div>

I am learning about aggregations by looking at the "kibana\_sample\_data\_flights" index and I'm trying to find how many flights have the same weather on departure and arrival. Here is what I have so far: GET /kibana\_samp…

---

## [How to reduce the memory usage of filebeat](https://discuss.elastic.co/t/how-to-reduce-the-memory-usage-of-filebeat/283401)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 6:05am UTC](https://discuss.elastic.co/t/how-to-reduce-the-memory-usage-of-filebeat/283401 "2021-09-06T06:05:20Z")

</div>

I am using filebeat to collect log files. I'm using filebeat to collect log files, and on one of my servers, filebeat's memory usage is high. I would like to limit the memory usage of filebeat. I have set up queue.mem …

---

## [Cannot start transform job - Cannot set after key in the composite aggregation \[\_transform\]](https://discuss.elastic.co/t/cannot-start-transform-job-cannot-set-after-key-in-the-composite-aggregation-transform/283013)

<div class="topic-metadata">

**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\
**Replies:** 4\
**Last updated:** [September 6, 2021, 6:02am UTC](https://discuss.elastic.co/t/cannot-start-transform-job-cannot-set-after-key-in-the-composite-aggregation-transform/283013 "2021-09-06T06:02:40Z")

</div>

Hi, We would like to setup transform job to create statistics - how many devices are connected per hour. In our code we have added for every request, deviceId and clientId to labels data \[labels.deviceId, labels.clientI…

---

## [\[mTLS\]\[filebeat-logstash\]\[beat-input-plugin\] Client certificate hostname verification](https://discuss.elastic.co/t/mtls-filebeat-logstash-beat-input-plugin-client-certificate-hostname-verification/282973)

<div class="topic-metadata">

**Author:** [@LotusD](https://discuss.elastic.co/u/LotusD)\
**Replies:** 6\
**Last updated:** [September 6, 2021, 5:58am UTC](https://discuss.elastic.co/t/mtls-filebeat-logstash-beat-input-plugin-client-certificate-hostname-verification/282973 "2021-09-06T05:58:31Z")

</div>

Dear All, I'm trying to set up mTLS between filebeat (client) and logstash (server). I refer to the documents Secure communication with Logstash | Filebeat Reference \[7.14\] | Elastic Filebeat config: output.logstash…

---

## [Why does es upgrade index data synchronously？](https://discuss.elastic.co/t/why-does-es-upgrade-index-data-synchronously/283226)

<div class="topic-metadata">

**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\
**Replies:** 12\
**Last updated:** [September 6, 2021, 5:50am UTC](https://discuss.elastic.co/t/why-does-es-upgrade-index-data-synchronously/283226 "2021-09-06T05:50:32Z")

</div>

When I upgrade from 5.x to 7.x, I find that I cannot upgrade directly and need to reindex all index data. Why not update the index data automatically during the upgrade?

[Previous page](https://discuss.elastic.co/latest.md?page=1491)

[Next page](https://discuss.elastic.co/latest.md?page=1493)
