# Latest **URL:** https://discuss.elastic.co/latest.md?page=1499 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1500 --- ## [ElasticSearch version 7.14.0 can't highlight with search\_as\_you\_type datatype subfield](https://discuss.elastic.co/t/elasticsearch-version-7-14-0-cant-highlight-with-search-as-you-type-datatype-subfield/283005)
**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-version-7-14-0-cant-highlight-with-search-as-you-type-datatype-subfield/283005 "2021-09-01T13:17:05Z")
Here is my example to reproduce the problem: PUT mytest { "mappings": { "properties": { "title": { "type": "keyword", "fields": { "autocomplete": { "type": "search\_as\_y… --- ## [Scripted field returns null on querying for logs](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072)
**Author:** [@NavinKu10](https://discuss.elastic.co/u/NavinKu10)\ **Replies:** 5\ **Last updated:** [September 1, 2021, 12:52pm UTC](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072 "2021-09-01T12:52:57Z")
Hi community. I am a newbie in Kibana and Elastic search. I am using scripted fields to search for logs containing certains strings and then visualize them. I have written my script in Painless. Here is the line that is… --- ## [Filebeat unable to send the data to Elastic search](https://discuss.elastic.co/t/filebeat-unable-to-send-the-data-to-elastic-search/282927)
**Author:** [@miqdaadp](https://discuss.elastic.co/u/miqdaadp)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 12:14pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-the-data-to-elastic-search/282927 "2021-09-01T12:14:55Z")
Hello, I am trying to send the data from server via Filebeat to Elastic search . Trying to see the data on kibana but i cannot see the data on Kibana. It says no Data. When i started the filebeat service its started … --- ## [Mapping](https://discuss.elastic.co/t/mapping/281242)
**Author:** [@Hind](https://discuss.elastic.co/u/Hind)\ **Replies:** 4\ **Last updated:** [September 1, 2021, 11:44am UTC](https://discuss.elastic.co/t/mapping/281242 "2021-09-01T11:44:32Z")
Bonjour, j'ai une petite question. j'utilise logstash pour importer un fichier csv vers elasticsearch, comment pourrais-je créer mon propre mapping ? Je trouve souvent des tutos qui montrent comment le faire mais juste… --- ## [Packetbeat Processors - Dropping fields from nested objects in an array](https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988)
**Author:** [@yotamgod](https://discuss.elastic.co/u/yotamgod)\ **Replies:** 3\ **Last updated:** [September 1, 2021, 11:21am UTC](https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988 "2021-09-01T11:21:30Z")
I recently started working with Packetbeat. For my use-case, I only need some specific fields (to the point where if I could, I would completely rewrite the mapping, but am leaving that as a last resort). I tried remov… --- ## [Can not achive namespace annotations from OKD (kubernetes)](https://discuss.elastic.co/t/can-not-achive-namespace-annotations-from-okd-kubernetes/283032)
**Author:** [@hollden](https://discuss.elastic.co/u/hollden)\ **Replies:** 0\ **Last updated:** [September 1, 2021, 11:18am UTC](https://discuss.elastic.co/t/can-not-achive-namespace-annotations-from-okd-kubernetes/283032 "2021-09-01T11:18:44Z")
Good day! I'am trying to collect namespace annotations from OKD cluster without any success, while namespace labels is colleted perfectly. Node annotations are not getting either. My config: filebeatConfig: fileb… --- ## [TSVB Variable Name Markdown Syntax](https://discuss.elastic.co/t/tsvb-variable-name-markdown-syntax/281352)
**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\ **Replies:** 4\ **Last updated:** [September 1, 2021, 11:17am UTC](https://discuss.elastic.co/t/tsvb-variable-name-markdown-syntax/281352 "2021-09-01T11:17:49Z")
Hi, I'm trying to create a TSVB visualization using Markdown to show values and some text. My problem appears when accessing label names while using date fields in a Terms aggregation because it overwrites the label. Is… --- ## [Logstash Pipeline CSV Date Filter Issue](https://discuss.elastic.co/t/logstash-pipeline-csv-date-filter-issue/282994)
**Author:** [@piotr.krupinski](https://discuss.elastic.co/u/piotr.krupinski)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 10:40am UTC](https://discuss.elastic.co/t/logstash-pipeline-csv-date-filter-issue/282994 "2021-09-01T10:40:53Z")
Hello, I have an issue with pipeline which should fetch data from CSV file. When I'm adding a "Data" to filter section because I need to have it in Elastic as a date it does not want to work. The config is below: inpu… --- ## [Sending output to two indices](https://discuss.elastic.co/t/sending-output-to-two-indices/282909)
**Author:** [@proxymoxy](https://discuss.elastic.co/u/proxymoxy)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 10:24am UTC](https://discuss.elastic.co/t/sending-output-to-two-indices/282909 "2021-09-01T10:24:12Z")
Hi, I am in the process of implementing Filebeat/Elasticsearch (not using logstash) to index my logs and create some graphics in Kibana. I have set up the system module in Filebeat which works fine and sends the logs to… --- ## [Is there any solution for just checking the file availability？](https://discuss.elastic.co/t/is-there-any-solution-for-just-checking-the-file-availability/282668)
**Author:** [@lpf86731782](https://discuss.elastic.co/u/lpf86731782)\ **Replies:** 6\ **Last updated:** [September 1, 2021, 9:44am UTC](https://discuss.elastic.co/t/is-there-any-solution-for-just-checking-the-file-availability/282668 "2021-09-01T09:44:05Z")
the system receives a bunch of files daily, monitoring the file availability and size is important for the service quality. No need to check the file content though. Is there any proper way to achieve this with ELK? --- ## [Newbie qn: ingesting netflow](https://discuss.elastic.co/t/newbie-qn-ingesting-netflow/283000)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 9:38am UTC](https://discuss.elastic.co/t/newbie-qn-ingesting-netflow/283000 "2021-09-01T09:38:42Z")
Hi all, I'm a newbie in ELK, and would like to send Netflow data to ElasticSearch via Filebeat (both on the same server). I'm starting to read all the documentation and configuration guides, but I'm a bit confused about… --- ## [Unexpected "Nesting" for Single Property on IndexRequests Failing](https://discuss.elastic.co/t/unexpected-nesting-for-single-property-on-indexrequests-failing/282930)
**Author:** [@rionmonster](https://discuss.elastic.co/u/rionmonster)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 8:49am UTC](https://discuss.elastic.co/t/unexpected-nesting-for-single-property-on-indexrequests-failing/282930 "2021-09-01T08:49:48Z")
Hi all, I recently started using Elasticsearch and I was a bit baffled when I tried to create an IndexRequest to one of my indices using the following payload and receiving a limit of mapping depth exceeded message: "st… --- ## [Combine Exact/phrase search and \* to get results starting with firstname lastname\* - Robert will\*](https://discuss.elastic.co/t/combine-exact-phrase-search-and-to-get-results-starting-with-firstname-lastname-robert-will/282962)
**Author:** [@lakshmiteja\_salapu](https://discuss.elastic.co/u/lakshmiteja_salapu)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 8:48am UTC](https://discuss.elastic.co/t/combine-exact-phrase-search-and-to-get-results-starting-with-firstname-lastname-robert-will/282962 "2021-09-01T08:48:05Z")
I want to search for Robert Will\* and expecting results that include Robert willow , Robert wills But I am getting documents that contain Robert Smith with street address 18 willow street Question 1) How to get resul… --- ## [How to serialize SearchRequest?](https://discuss.elastic.co/t/how-to-serialize-searchrequest/282793)
**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\ **Replies:** 6\ **Last updated:** [September 1, 2021, 8:33am UTC](https://discuss.elastic.co/t/how-to-serialize-searchrequest/282793 "2021-09-01T08:33:57Z")
Hi, I'm new to elastic search, I need to log SearchRequest and use them later for testing/analysis purpose, what's the best practice to serialize/deserialize a SearchRequest in Java? Thanks! --- ## [\[Elastic APM\] transaction(xxx, xxx, custom) was discarded! The page was hidden during the transaction!](https://discuss.elastic.co/t/elastic-apm-transaction-xxx-xxx-custom-was-discarded-the-page-was-hidden-during-the-transaction/282671)
**Author:** [@Sibi\_John](https://discuss.elastic.co/u/Sibi_John)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 7:36am UTC](https://discuss.elastic.co/t/elastic-apm-transaction-xxx-xxx-custom-was-discarded-the-page-was-hidden-during-the-transaction/282671 "2021-09-01T07:36:40Z")
Hi, We are trying to capture a long running custom transaction where the user might be inactive for a while, switch tabs/windows etc. We could not see these logs on kibana. so we turned on the debug log level and in suc… --- ## [Error establishing direct connection to mongo node at \[ip:port\]. Error output: no reachable servers](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-at-ip-port-error-output-no-reachable-servers/282434)
**Author:** [@devopshulk](https://discuss.elastic.co/u/devopshulk)\ **Replies:** 3\ **Last updated:** [September 1, 2021, 6:59am UTC](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-at-ip-port-error-output-no-reachable-servers/282434 "2021-09-01T06:59:26Z")
Hi, I am using MongoDB with a replica set. When I am trying to create a metricbeat MongoDB module am not sure How to give a URL. I don't understand how to solve it. when uncommenting the ssl.verification\_mode: 'none' th… --- ## [How to integrate elasticsearch with service now for auto ticketing](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-service-now-for-auto-ticketing/282996)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 0\ **Last updated:** [September 1, 2021, 6:49am UTC](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-service-now-for-auto-ticketing/282996 "2021-09-01T06:49:32Z")
Hi Team, I have setup of a ELK with 3 node cluster. I want to integrate elastic with service now for auto ticketing. What will be the possible ways to do this? For this service now Integration can we use basic au… --- ## [Logstash filter file issue](https://discuss.elastic.co/t/logstash-filter-file-issue/282993)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 0\ **Last updated:** [September 1, 2021, 6:25am UTC](https://discuss.elastic.co/t/logstash-filter-file-issue/282993 "2021-09-01T06:25:17Z")
My winlogbeat new version is not parsing. new version is 7.14.0 and old version is same filter files is parse. --- ## [GEO data losing definition after changing index name](https://discuss.elastic.co/t/geo-data-losing-definition-after-changing-index-name/282917)
**Author:** [@john12](https://discuss.elastic.co/u/john12)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 5:17am UTC](https://discuss.elastic.co/t/geo-data-losing-definition-after-changing-index-name/282917 "2021-09-01T05:17:21Z")
Hello , i was having geo data with no problems and visualize it on maps, after changing the index name then it not appeared as geo data. would u help me solve this? --- ## [Making a new field indexable on a index under rollover policy](https://discuss.elastic.co/t/making-a-new-field-indexable-on-a-index-under-rollover-policy/282931)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 3\ **Last updated:** [September 1, 2021, 2:07am UTC](https://discuss.elastic.co/t/making-a-new-field-indexable-on-a-index-under-rollover-policy/282931 "2021-09-01T02:07:13Z")
Hi, We have an index under rollover policy/index template for which we need to update the mapping to make a field searchable (initially set up to index: false but now needed). What would be the right process? I'm thin… --- ## [データ登録時にIPアドレスの範囲をチェックする方法](https://discuss.elastic.co/t/ip/282866)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 3\ **Last updated:** [September 1, 2021, 1:50am UTC](https://discuss.elastic.co/t/ip/282866 "2021-09-01T01:50:39Z")
logstash→Elasticsearchというルートで、IPアドレスフィールドを保持するドキュメントを登録しています。登録時にIPアドレスをチェックし、指定の範囲内であればフラグを付与したいのですが可能でしょうか？LogstashもしくはIngestノードにて可能ではないかと思うのですが、情報が見当たらず投稿させて頂きました。ご教示いただけますでしょうか。 --- ## [Watcherで連続データに対する検知をする方法](https://discuss.elastic.co/t/watcher/282482)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 1:50am UTC](https://discuss.elastic.co/t/watcher/282482 "2021-09-01T01:50:15Z")
認証ログなどで、特定アカウントでログイン認証が連続で3回失敗した場合にアラートを発報するという仕組みをwatcherで実装したいです。 例) 発報する場合 UserA OK UserB NG UserC OK UserB NG UserB NG →発報あり(UserBは3回連続して失敗しているため) 例)発報なし UserA OK UserB NG UserC OK UserB NG UserB OK Use… --- ## [Simple full search](https://discuss.elastic.co/t/simple-full-search/282939)
**Author:** [@Chen\_Shacham](https://discuss.elastic.co/u/Chen_Shacham)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 12:46am UTC](https://discuss.elastic.co/t/simple-full-search/282939 "2021-09-01T00:46:04Z")
Hi I am using REST api to search my index. How can i use search api to look for phrase: "My name" in all fields? --- ## [Cross Cluster Replication query](https://discuss.elastic.co/t/cross-cluster-replication-query/282906)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 12:45am UTC](https://discuss.elastic.co/t/cross-cluster-replication-query/282906 "2021-09-01T00:45:15Z")
Hi, For CCR when a leader index is created in cluster A will replica be created in cluster A as well as cluster B or only cluster B considering replicas set to 1. Regards, Bryce Fernandes. --- ## [TSVB - Sum of value for unique records](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967)
**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 12:29am UTC](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967 "2021-09-01T00:29:39Z")
Is there anyway I can filter unique records and then find the sum of value for those unique records? Data example: Order# - TotalMRC O101 - $120 O101 - $120(duplicate record) O102 - $130 O103 - $120 Expected resul… --- ## [How to make alerts with telegram bot?](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794)
**Author:** [@sevenout](https://discuss.elastic.co/u/sevenout)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794 "2021-08-31T22:48:10Z")
hi guys, i'm learning Elasticsearch but i stumble in this problem. i want to send an alert from elastic to telegram. In short this is the result that i expect: i use webhook connector and this is the config b… --- ## [Metric beat does not install any module (error: line 101)](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951)
**Author:** [@potap75](https://discuss.elastic.co/u/potap75)\ **Replies:** 5\ **Last updated:** [August 31, 2021, 10:27pm UTC](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951 "2021-08-31T22:27:26Z")
Prod ELK v 7.11. monitoring cluster 7.11 Installed Metricbeat 7.13 on Logstash node to collect metrics. Have been following the steps in this guide: https://www.elastic.co/guide/en/logstash/7.11/monitoring-with-metricbe… --- ## [Is there a converter from a search in kibana to query language?](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 10:15pm UTC](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954 "2021-08-31T22:15:52Z")
I would like to know if there is any program or some type of converter from a search to a query language in kibana --- ## [Migrating indices after adding warm and cold nodes to an existing cluster](https://discuss.elastic.co/t/migrating-indices-after-adding-warm-and-cold-nodes-to-an-existing-cluster/282830)
**Author:** [@benvl](https://discuss.elastic.co/u/benvl)\ **Replies:** 3\ **Last updated:** [August 31, 2021, 10:15pm UTC](https://discuss.elastic.co/t/migrating-indices-after-adding-warm-and-cold-nodes-to-an-existing-cluster/282830 "2021-08-31T22:15:22Z")
Hi all, following situation : we have an existing 7.12 ES cluster in Elastic Cloud, with 2 hot data nodes. Multiple indices exist which were following an hot-warm-cold ILM policy and are already in a hot, warm or cold p… --- ## [Filter out signals that are produced too often by one user](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553)
**Author:** [@lina1](https://discuss.elastic.co/u/lina1)\ **Replies:** 3\ **Last updated:** [August 31, 2021, 9:49pm UTC](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553 "2021-08-31T21:49:19Z")
Hi all, I am working for a software company and we use Elasticsearch and Kibana to monitor the signals that our clients send. For that we implemented signals, that include a UserID and unique errorcodes. The problem is… [Previous page](https://discuss.elastic.co/latest.md?page=1498) [Next page](https://discuss.elastic.co/latest.md?page=1500)