# Latest **URL:** https://discuss.elastic.co/latest.md?page=1497 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1498 --- ## [Difference of min and max aggregation for missing values](https://discuss.elastic.co/t/difference-of-min-and-max-aggregation-for-missing-values/283158)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 10:53am UTC](https://discuss.elastic.co/t/difference-of-min-and-max-aggregation-for-missing-values/283158 "2021-09-02T10:53:18Z")
Hi, I'm trying to understand the difference of the min and max aggregation for documents where all field values are missing. Let's imagine the following simple document: PUT /test/\_doc/1 { "name": "A", "number": n… --- ## [ECK Fleet startup failure on ECK on Cloud](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700)
**Author:** [@vaibhavsw](https://discuss.elastic.co/u/vaibhavsw)\ **Replies:** 9\ **Last updated:** [September 2, 2021, 10:27am UTC](https://discuss.elastic.co/t/eck-fleet-startup-failure-on-eck-on-cloud/281700 "2021-09-02T10:27:20Z")
I followed the latest documentation to start a fleet server on Kubernetes, though both Elastic Agent and Fleet Server are throwing below error. cp: cannot stat '/mnt/elastic-internal/elasticsearch-association/vulcan/ela… --- ## [Send openshift metricbeat to remote elasticsearch's custom index](https://discuss.elastic.co/t/send-openshift-metricbeat-to-remote-elasticsearchs-custom-index/283155)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 10:18am UTC](https://discuss.elastic.co/t/send-openshift-metricbeat-to-remote-elasticsearchs-custom-index/283155 "2021-09-02T10:18:27Z")
Can anyone tell me how to send the metricbeat data from from openshift to remote elasticsearch custom index? In regular metricbeat yaml file, we have these config: setup.template.enabled: true setup.template.name: "me… --- ## [Kibana KQL issue, Greater than does not work for event.duration field](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943)
**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 10:01am UTC](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943 "2021-09-02T10:01:32Z")
I am currently on using Kibana v7.13.3. I am ingesting zeek logs into my elastic stack and trying to filter by event duration that exceeds a specific time frame. I have tried using the following basic KQL to filter by: e… --- ## [Wrap text in dashboard table](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107)
**Author:** [@elastic9](https://discuss.elastic.co/u/elastic9)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107 "2021-09-02T09:27:48Z")
I'm currently on Kibana 7.13.3, and was wondering if it was possible to wrap text in tables made in the dashboard. I've got long text entries, and when visualising them in the dashboard tables, they seem to just truncate… --- ## [Fleet of agents healthy but not sending data](https://discuss.elastic.co/t/fleet-of-agents-healthy-but-not-sending-data/282440)
**Author:** [@yzpls](https://discuss.elastic.co/u/yzpls)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 9:23am UTC](https://discuss.elastic.co/t/fleet-of-agents-healthy-but-not-sending-data/282440 "2021-09-02T09:23:10Z")
I have a Fleet of Elastic Agents running on a fresh k8s cluster (running latest ECK). I added a couple integrations via Kibana, like the Kubernetes metrics. But the Kubernetes Dashboards are all empty, and nothing shows … --- ## [Sidekiq ECS based logging - Trace/Log Correlation](https://discuss.elastic.co/t/sidekiq-ecs-based-logging-trace-log-correlation/283147)
**Author:** [@tak1n](https://discuss.elastic.co/u/tak1n)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 9:00am UTC](https://discuss.elastic.co/t/sidekiq-ecs-based-logging-trace-log-correlation/283147 "2021-09-02T09:00:28Z")
Hi :wave: :slight\_smile: Is there some documentation about how to setup Trace - Log correlation for Sidekiq based background jobs. For the Rails API server we are using ECS Logger with following setup: # config/environ… --- ## [Ability to manipulate the slope "m" of linear function used to boost relevance scores](https://discuss.elastic.co/t/ability-to-manipulate-the-slope-m-of-linear-function-used-to-boost-relevance-scores/283144)
**Author:** [@jsandeep316](https://discuss.elastic.co/u/jsandeep316)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 8:37am UTC](https://discuss.elastic.co/t/ability-to-manipulate-the-slope-m-of-linear-function-used-to-boost-relevance-scores/283144 "2021-09-02T08:37:28Z")
Hi there, I have a use case where I need to augment the text based relevance scoring (such as TF-IDF) with a linear function. However, when I went through the Elasticsearch documentation, nowhere does it mention that the… --- ## [Ищу специалиста на Эластике](https://discuss.elastic.co/t/topic/283142)
**Author:** [@drumns](https://discuss.elastic.co/u/drumns)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 8:18am UTC](https://discuss.elastic.co/t/topic/283142 "2021-09-02T08:18:03Z")
Всем добрый день! Нужен специалист по работе Эластика с БэкЭндом Есть ряд задач, нужен специалист по работе Эластика с БэкЭндом, способный их решать. Проект и подробности сброшу откликнувшимся. Не бесплатно, понятное… --- ## [Cardinality agg off by one even after precision increase](https://discuss.elastic.co/t/cardinality-agg-off-by-one-even-after-precision-increase/283096)
**Author:** [@matt.snyder](https://discuss.elastic.co/u/matt.snyder)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 7:50am UTC](https://discuss.elastic.co/t/cardinality-agg-off-by-one-even-after-precision-increase/283096 "2021-09-02T07:50:06Z")
Docs in my index have a unique id field, which I want to count using a cardinality agg. I found that if my result set is 5792 docs or smaller, the cardinality agg is accurate, but if I go to 5793 or larger, the cardinal… --- ## [Output to Mutliple Kafka Brokers](https://discuss.elastic.co/t/output-to-mutliple-kafka-brokers/283136)
**Author:** [@JSelastic](https://discuss.elastic.co/u/JSelastic)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 7:55am UTC](https://discuss.elastic.co/t/output-to-mutliple-kafka-brokers/283136 "2021-09-02T07:55:46Z")
Hi, Our winlogbeat configuration outputs to multiple kafka brokers. We are curious if all of the logs from winlogbeat be sent to all brokers simultaneously or will it only be sent to one broker? Thank you --- ## [Uptime Monitor - An internal server error](https://discuss.elastic.co/t/uptime-monitor-an-internal-server-error/282296)
**Author:** [@Henry943](https://discuss.elastic.co/u/Henry943)\ **Replies:** 4\ **Last updated:** [September 2, 2021, 7:52am UTC](https://discuss.elastic.co/t/uptime-monitor-an-internal-server-error/282296 "2021-09-02T07:52:53Z")
Hi, Kibana uptime monitor showing "An internal server error occurred". And we couldnt view any details in the Kibana uptime monitor. But we could see the nodes document under Discover. And also, in heartbeat indices … --- ## [Prevent duplicates in a data stream](https://discuss.elastic.co/t/prevent-duplicates-in-a-data-stream/283076)
**Author:** [@romathonat](https://discuss.elastic.co/u/romathonat)\ **Replies:** 5\ **Last updated:** [September 2, 2021, 7:40am UTC](https://discuss.elastic.co/t/prevent-duplicates-in-a-data-stream/283076 "2021-09-02T07:40:05Z")
Hello, Is there a way to prevent duplicates in a data stream ? For a given index, specifying the \_id gives us the guarantee that there will be no duplicate with same \_id. For data streams however, it does not work app… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925)
**Author:** [@Alvaro\_Eixea](https://discuss.elastic.co/u/Alvaro_Eixea)\ **Replies:** 6\ **Last updated:** [September 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925 "2021-09-02T07:21:54Z")
Hi, I have upgrade my monolithic server using these guide: Upgrade Elasticsearch, Filebeat and Kibana - Upgrade guide Now ,i have my server broken, kibana show always the message "kibana server is not ready yet" on scr… --- ## [APM-PHP error rate working but not error messages](https://discuss.elastic.co/t/apm-php-error-rate-working-but-not-error-messages/283067)
**Author:** [@beauch35](https://discuss.elastic.co/u/beauch35)\ **Replies:** 0\ **Last updated:** [September 1, 2021, 3:34pm UTC](https://discuss.elastic.co/t/apm-php-error-rate-working-but-not-error-messages/283067 "2021-09-01T15:34:02Z")
Hi, I have setup APM-PHP in our environment and everything seems to be working great except error messages are not showing up. I can see the error rate (see screenshot) but zero messages. Elasticsearch version : 7.11.1 … --- ## [How to delete all the elasticsearch indices, that start with a certain string, based on date ranges](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063)
**Author:** [@JaswantG](https://discuss.elastic.co/u/JaswantG)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 6:03am UTC](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063 "2021-09-02T06:03:05Z")
I am using elasticsearch 2.2.0. I have a requirement wherein I have to delete certain indices, which are created on a day-to-day basis, based on two different dates. (format - abc-xyz-yyyy-mm-dd) For e.g. - There are 1… --- ## [Logstash CSV Output all fields are not working](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985)
**Author:** [@yogicd](https://discuss.elastic.co/u/yogicd)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 5:55am UTC](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985 "2021-09-02T05:55:32Z")
Hello, I am testing to get the all the data in .CSV file and unable to get the all the fields and nested in the.CSV file,My config file as below input { stdin {} beats { port =\> 5044 } } output { csv { #fields … --- ## [Elasticsearch.service: Failed with result 'exit-code'](https://discuss.elastic.co/t/elasticsearch-service-failed-with-result-exit-code/283123)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 5:51am UTC](https://discuss.elastic.co/t/elasticsearch-service-failed-with-result-exit-code/283123 "2021-09-02T05:51:26Z")
My Elasticsearch is not starting, I don't know why I am getting below error. root@i3insight2:~# systemctl status elasticsearch.service â elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/e… --- ## [Complete newbie, but need urgent cleanup](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802)
**Author:** [@TwanVeugelers](https://discuss.elastic.co/u/TwanVeugelers)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 5:45am UTC](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802 "2021-09-02T05:45:41Z")
Hi. I have taken over the monitoring / elastic search from a colleague that left the company. I now see that our D drive is almost reaching its limits and will be full pretty shortly. I'm a full newbie and need to lea… --- ## [How to connect Elastic Cloud with Laravel Scout?](https://discuss.elastic.co/t/how-to-connect-elastic-cloud-with-laravel-scout/283125)
**Author:** [@Tufan\_Cagkan\_Sokmen](https://discuss.elastic.co/u/Tufan_Cagkan_Sokmen)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 5:31am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-cloud-with-laravel-scout/283125 "2021-09-02T05:31:55Z")
Hello, Using that package to manage my scout with elasticsearch. I am using elastic cloud service. But that doesnt connect for any. What should I enter for host information? blabla-central1.gcp.cloud.es.io/myproje… --- ## [Mail log event correlation](https://discuss.elastic.co/t/mail-log-event-correlation/283115)
**Author:** [@mherbert](https://discuss.elastic.co/u/mherbert)\ **Replies:** 11\ **Last updated:** [September 2, 2021, 5:25am UTC](https://discuss.elastic.co/t/mail-log-event-correlation/283115 "2021-09-02T05:25:51Z")
Apologies, I don't know whether this is the correct forum for this question, please bear with me. I have an elasticsearch index containing mail logging events from syslog, however as with postfix the complete transactio… --- ## [Attempted to resurrect connection to dead ES instance in secure ELK](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989)
**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 4:56am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989 "2021-09-02T04:56:48Z")
Hi, I am using version 7.14 for elasticsearch, logstash and kibana . In logstash log I got this error: Sep 01 10:43:09 elastic.sys logstash\[2975\]: \[2021-09-01T10:43:09,352\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]… --- ## [Watcher soporta multiples fuentes](https://discuss.elastic.co/t/watcher-soporta-multiples-fuentes/281871)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 9:00pm UTC](https://discuss.elastic.co/t/watcher-soporta-multiples-fuentes/281871 "2021-08-24T21:00:48Z")
¡Hola a todos!! Espero que estén bien, está preguntándome si se puede tener un Watcher con dos o más fuentes de información por ejemplo: "data": \[ { "name": "max", "url": { "index": "iot… --- ## [Failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864)
**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 2:38am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864 "2021-09-02T02:38:14Z")
When I tried Kibana development, I ran the following commands: yarn es snapshot --license trial yarn start --run-examples Then I encountered an error in Elasticsearch: failed to retrieve password hash for reserved use… --- ## [Threat intelligence module](https://discuss.elastic.co/t/threat-intelligence-module/282766)
**Author:** [@Servando\_Dominguez](https://discuss.elastic.co/u/Servando_Dominguez)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 2:20am UTC](https://discuss.elastic.co/t/threat-intelligence-module/282766 "2021-09-02T02:20:57Z")
Hi there! Alert for a maybe, a stupid question. I want to enable the thread intelligence module from diferent resources. I click enable in Kibana and go to the documentation: My question is, where I put this config/… --- ## [How to use elasticsearch sliced scroll with multiprocessing in python?](https://discuss.elastic.co/t/how-to-use-elasticsearch-sliced-scroll-with-multiprocessing-in-python/283108)
**Author:** [@Prem\_George](https://discuss.elastic.co/u/Prem_George)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 1:36am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-sliced-scroll-with-multiprocessing-in-python/283108 "2021-09-02T01:36:49Z")
I'm pulling data from elastic search using python client scroll id and appending in a dataframe as follows import pandas as pd from elasticsearch import Elasticsearch es = Elasticsearch(\[{'host': 'localhost', 'port': 92… --- ## [Logstash is not able to connect to ELasticsearch](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206)
**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\ **Replies:** 12\ **Last updated:** [September 2, 2021, 1:07am UTC](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206 "2021-09-02T01:07:40Z")
I am trying to run logstash but getting below error: ./logstash -f /etc/logstash/conf.d/abc.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the p… --- ## [Kibana UI refused to connect](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093)
**Author:** [@peter\_murphy](https://discuss.elastic.co/u/peter_murphy)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 10:28pm UTC](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093 "2021-09-01T22:28:57Z")
Hi I'm having trouble accessing the Kibana UI in my browser. I'm sure it's something in the config but I can't tell what. I can successfully curl localhost:9200 on the server but not localhost:5601, and I cannot curl eit… --- ## [Elasticsearch.service has failed (code=exited, status=143)](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072)
**Author:** [@larzu](https://discuss.elastic.co/u/larzu)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072 "2021-09-01T22:17:09Z")
I'm a "bit" lost with this Elasticsearch installation (for Magento). I was following the installation for Centos Install Elasticsearch with RPM | Elasticsearch Guide \[7.14\] | Elastic Unfortunately Elasticsearch is not s… --- ## [PANW Integration - Timezone Offset Problem](https://discuss.elastic.co/t/panw-integration-timezone-offset-problem/282978)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 4\ **Last updated:** [September 1, 2021, 10:09pm UTC](https://discuss.elastic.co/t/panw-integration-timezone-offset-problem/282978 "2021-09-01T22:09:26Z")
Elastic Cluster Version 7.14.0. I am using Elastic-Agent and the PANW integration to ingest Palo Alto Firewall logs. Once ingested the event times are incorrect by the equivalent of the timezone offset. I have found arti… [Previous page](https://discuss.elastic.co/latest.md?page=1496) [Next page](https://discuss.elastic.co/latest.md?page=1498)