# Latest **URL:** https://discuss.elastic.co/latest.md?page=1506 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1507 --- ## [Index Boost along with sort not working](https://discuss.elastic.co/t/index-boost-along-with-sort-not-working/282582)
**Author:** [@nileshsoor](https://discuss.elastic.co/u/nileshsoor)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 3:32pm UTC](https://discuss.elastic.co/t/index-boost-along-with-sort-not-working/282582 "2021-08-26T15:32:29Z")
I have a query, which will fired against 2 indices A & B. Results from index A is more important than B. ES version : 7.8.0 Query:: { "query": { "terms": { "id": \["a5af38bf-63ac-4e26-af25-68044ffea298","a5… --- ## [Mtericbeat - error - Failed to connect to elasticsearch](https://discuss.elastic.co/t/mtericbeat-error-failed-to-connect-to-elasticsearch/282323)
**Author:** [@nehasinha1807](https://discuss.elastic.co/u/nehasinha1807)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 4:09pm UTC](https://discuss.elastic.co/t/mtericbeat-error-failed-to-connect-to-elasticsearch/282323 "2021-08-26T16:09:09Z")
I'm new to ELK. here is my doubt - we had installed ELK lite on a linux server(A) and trying to install metricbeat on a different server(B) but my metricbeat is failed to connect to elasticsearch(A). metricbeat i insta… --- ## [Disable Warnings about TLSv1.0, TLSv1.1 and SSLv3](https://discuss.elastic.co/t/disable-warnings-about-tlsv1-0-tlsv1-1-and-sslv3/282375)
**Author:** [@shaheer.siddiqui](https://discuss.elastic.co/u/shaheer.siddiqui)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 3:53pm UTC](https://discuss.elastic.co/t/disable-warnings-about-tlsv1-0-tlsv1-1-and-sslv3/282375 "2021-08-26T15:53:15Z")
I am currently running a ES7.10.2 with XPACK enabled on Linux servers. I was able to configure and run ES with no issues however I keep getting the following warns "Client requested protocol TLSv1 is not enabled or suppo… --- ## [Manual Snapshot restore failed](https://discuss.elastic.co/t/manual-snapshot-restore-failed/282590)
**Author:** [@hassan\_elferga](https://discuss.elastic.co/u/hassan_elferga)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 3:40pm UTC](https://discuss.elastic.co/t/manual-snapshot-restore-failed/282590 "2021-08-26T15:40:54Z")
We are trying a scenario for migrating one ES domain to a new one. We have followed the steps as per the following article https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-managedomains-snapshot… --- ## [Logstash filter for a log record from filebeats](https://discuss.elastic.co/t/logstash-filter-for-a-log-record-from-filebeats/282228)
**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\ **Replies:** 5\ **Last updated:** [August 26, 2021, 3:35pm UTC](https://discuss.elastic.co/t/logstash-filter-for-a-log-record-from-filebeats/282228 "2021-08-26T15:35:57Z")
Hi, I am using ELK stack+filebeats in our project and the application log is integration with filebeats. Filebeat is reading the application log. The log is successfully read by logstash. My question is how to parse the… --- ## [Does it make sense to separate rarely used documents for faster performance?](https://discuss.elastic.co/t/does-it-make-sense-to-separate-rarely-used-documents-for-faster-performance/282550)
**Author:** [@Yoan\_Arnaudov](https://discuss.elastic.co/u/Yoan_Arnaudov)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 3:34pm UTC](https://discuss.elastic.co/t/does-it-make-sense-to-separate-rarely-used-documents-for-faster-performance/282550 "2021-08-26T15:34:38Z")
I'm designing a system which will have ~2M documents and 95% percent of the queries will be targeted against 40-50k documents. Documents in the system have two states bool fields active and inactive. I have ~50k in the… --- ## [Remove duplicate / multiple data records in Elastic](https://discuss.elastic.co/t/remove-duplicate-multiple-data-records-in-elastic/282569)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 3:33pm UTC](https://discuss.elastic.co/t/remove-duplicate-multiple-data-records-in-elastic/282569 "2021-08-26T15:33:08Z")
Hi, due to an error in the program that writes data records to the Elastic, there are now a lot of entries in our Elastic, all with exactly the same value in the "time" attribute. For example, there are 50 data records i… --- ## [Metric count aggregation difference](https://discuss.elastic.co/t/metric-count-aggregation-difference/282575)
**Author:** [@gijo](https://discuss.elastic.co/u/gijo)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/metric-count-aggregation-difference/282575 "2021-08-26T15:27:53Z")
I have a index with source field. It can have two values. For ex: "sourceA" & "sourceB". I am trying to create to metric aggregation panels with source filter. It is possible to create metric aggregation with single f… --- ## [Logstash filter check value without fields](https://discuss.elastic.co/t/logstash-filter-check-value-without-fields/282598)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 0\ **Last updated:** [August 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-filter-check-value-without-fields/282598 "2021-08-26T15:27:24Z")
Below document there are 3 values without fields I need add logstash configuration to pick up 3 values, can you help please? maybe start with loglevel as DEBUG and error N13 to confirm before pick up 3 values below. 70-… --- ## [Double split series possible?](https://discuss.elastic.co/t/double-split-series-possible/282494)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 3:16pm UTC](https://discuss.elastic.co/t/double-split-series-possible/282494 "2021-08-26T15:16:58Z")
Hello all, Please take a look at my above screenshot. The X-Axis has the week (time component). Y-Axis is count of occurrences. I am currently splitting this with a field called 'Responsible Party'. I want to break up… --- ## [Module elasticsearch issue with filed limit](https://discuss.elastic.co/t/module-elasticsearch-issue-with-filed-limit/282592)
**Author:** [@Messias\_2](https://discuss.elastic.co/u/Messias_2)\ **Replies:** 0\ **Last updated:** [August 26, 2021, 2:55pm UTC](https://discuss.elastic.co/t/module-elasticsearch-issue-with-filed-limit/282592 "2021-08-26T14:55:49Z")
Hi, I use metric beat to monitor elasticsearch per docker. metricbeat.config: modules: path: ${path.config}/modules.d/\*.yml # Reload module configs as they change: reload.enabled: false processors: - a… --- ## [Can we Visualize Jenkins stages through Kibana?](https://discuss.elastic.co/t/can-we-visualize-jenkins-stages-through-kibana/281974)
**Author:** [@Harindra\_Balanagired](https://discuss.elastic.co/u/Harindra_Balanagired)\ **Replies:** 9\ **Last updated:** [August 26, 2021, 2:06pm UTC](https://discuss.elastic.co/t/can-we-visualize-jenkins-stages-through-kibana/281974 "2021-08-26T14:06:57Z")
In Jenkins I have 4 stages for each stage it takes some time to finish you can check on 1st image. I want to visualize the same thing on kibana for each stage run time See the 3rd image stage name empty so in k… --- ## [Kibana Server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884)
**Author:** [@jaskaran](https://discuss.elastic.co/u/jaskaran)\ **Replies:** 17\ **Last updated:** [August 26, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884 "2021-08-26T14:25:08Z")
Hi All, I have Kibana and Elasticserach running on one server, everything was working fine from last 1 year and just from past few weeks elasticserach is keep crashing, and now i am not able to access Kibana at all. Bel… --- ## [I want hide date filter from dashboard](https://discuss.elastic.co/t/i-want-hide-date-filter-from-dashboard/282534)
**Author:** [@Satish\_Yadav](https://discuss.elastic.co/u/Satish_Yadav)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 2:12pm UTC](https://discuss.elastic.co/t/i-want-hide-date-filter-from-dashboard/282534 "2021-08-26T14:12:16Z")
--- ## [Unable to install fleet server](https://discuss.elastic.co/t/unable-to-install-fleet-server/282525)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 5\ **Last updated:** [August 26, 2021, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server/282525 "2021-08-26T13:41:43Z")
Hi @scottdfedorov, Since this is a production environment, I tried installing fleet by providing my own certificates and this is the error I see: sudo ./elastic-agent install --url=https://abc:8220 \\ -f \\ --fleet-serve… --- ## [Failing cluster](https://discuss.elastic.co/t/failing-cluster/282474)
**Author:** [@dusatvoj](https://discuss.elastic.co/u/dusatvoj)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 1:41pm UTC](https://discuss.elastic.co/t/failing-cluster/282474 "2021-08-26T13:41:10Z")
Hello, I have a problem with my elasticsearch cluster. (ES 7.14.0) I have virtualized cluster with setup like: elk-node-1 (master, small ssd storage, hot data, ingester, ...) elk-node-2 (warm data, cold data) NumberO… --- ## [Filter Kibana dashboard date range by day of week](https://discuss.elastic.co/t/filter-kibana-dashboard-date-range-by-day-of-week/282394)
**Author:** [@tiago.ferneda](https://discuss.elastic.co/u/tiago.ferneda)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 1:37pm UTC](https://discuss.elastic.co/t/filter-kibana-dashboard-date-range-by-day-of-week/282394 "2021-08-26T13:37:35Z")
Hi, I'm having some trouble in creating a specific elasticsearch query DSL for a Kibana Dashboard. I need to filter data by created date and time. I apllied the solution bellow so we can bring data to our scope, we call… --- ## [Searchable snapshot action - in cold phase restores the index to random data tier instead of only cold data tier](https://discuss.elastic.co/t/searchable-snapshot-action-in-cold-phase-restores-the-index-to-random-data-tier-instead-of-only-cold-data-tier/282154)
**Author:** [@Kannappan\_Somu](https://discuss.elastic.co/u/Kannappan_Somu)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 1:19pm UTC](https://discuss.elastic.co/t/searchable-snapshot-action-in-cold-phase-restores-the-index-to-random-data-tier-instead-of-only-cold-data-tier/282154 "2021-08-26T13:19:46Z")
Searchable snapshot action - in cold phase restores the index to random data tier instead of only cold data tier as the searchable snapshot action ignores all the allocation filters and sets the default one as "index.rou… --- ## [Unable to see fleet page on Kibana](https://discuss.elastic.co/t/unable-to-see-fleet-page-on-kibana/282172)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 1:16pm UTC](https://discuss.elastic.co/t/unable-to-see-fleet-page-on-kibana/282172 "2021-08-26T13:16:45Z")
Hi Everyone, I am new to the ELK stack and trying to setup fleet. On trying to reach the fleet page I get the following error. I set xpack.security.authc.api\_key.to true on all my 3 elastic nodes. On trying to resta… --- ## [PKI pull full dn not just cn](https://discuss.elastic.co/t/pki-pull-full-dn-not-just-cn/282508)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 1:10pm UTC](https://discuss.elastic.co/t/pki-pull-full-dn-not-just-cn/282508 "2021-08-26T13:10:28Z")
So i have a pki realm that passes auth to an ldap realm but the pki realm uses a usernam\_pattern attribute to pull the cn from the pki but i want the whole dn returning and passing to the ldap realm. e.g PKI; CN=VVVVV… --- ## [Modify index.routing.allocation.total\_shards\_per\_node by ILM when going to WARM](https://discuss.elastic.co/t/modify-index-routing-allocation-total-shards-per-node-by-ilm-when-going-to-warm/282551)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 12:53pm UTC](https://discuss.elastic.co/t/modify-index-routing-allocation-total-shards-per-node-by-ilm-when-going-to-warm/282551 "2021-08-26T12:53:45Z")
I have set "index.routing.allocation.total\_shards\_per\_node" :1 in index template for index with 6 primary shards. Because it is index intensive ETL and having shards on different nodes gives best performance results. … --- ## [Cant seem to install plugin with elasticsearch](https://discuss.elastic.co/t/cant-seem-to-install-plugin-with-elasticsearch/282086)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 7\ **Last updated:** [August 26, 2021, 12:52pm UTC](https://discuss.elastic.co/t/cant-seem-to-install-plugin-with-elasticsearch/282086 "2021-08-26T12:52:58Z")
HI , I am having issues with Elasticsearch-plugin command or maybe elasticsearch in general. I have tried countless ways and can't seem to find out the issue. when I install the plugin ./elasticsearch-plugin install r… --- ## [How can I see monitoring on kibana?](https://discuss.elastic.co/t/how-can-i-see-monitoring-on-kibana/281804)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 10\ **Last updated:** [August 26, 2021, 12:43pm UTC](https://discuss.elastic.co/t/how-can-i-see-monitoring-on-kibana/281804 "2021-08-26T12:43:31Z")
I can't see monitoring page on kibana.How to fix it ? kibana version : 7.13.1 kibana.yaml xpack.monitoring.enabled: true xpack.monitoring.kibana.collection.enabled: true kibana show err: I try to install monitoring … --- ## [Unable to refer lang-mustache plug to parse mustache template in custom plugin](https://discuss.elastic.co/t/unable-to-refer-lang-mustache-plug-to-parse-mustache-template-in-custom-plugin/282573)
**Author:** [@Akshayyha\_Krishnamur](https://discuss.elastic.co/u/Akshayyha_Krishnamur)\ **Replies:** 0\ **Last updated:** [August 26, 2021, 12:20pm UTC](https://discuss.elastic.co/t/unable-to-refer-lang-mustache-plug-to-parse-mustache-template-in-custom-plugin/282573 "2021-08-26T12:20:46Z")
This post is with reference to Unable to start Elastic search when i delete jar from lang-mustache and place it in lib I faced the same issue in es 7.9.0 and the fix was to have the lang-mustache jar in modules folder a… --- ## [Can't Join 3rd Node to Cluster](https://discuss.elastic.co/t/cant-join-3rd-node-to-cluster/282413)
**Author:** [@frustrated23](https://discuss.elastic.co/u/frustrated23)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 12:21pm UTC](https://discuss.elastic.co/t/cant-join-3rd-node-to-cluster/282413 "2021-08-26T12:21:49Z")
Hi Everyone, I am trying to setup a 3 node cluster. I am running each ES node in a docker container on a separate physical host. I was able to setup es01 as the initial member, add the second node es02 however when addi… --- ## [Transport data to remote networks via fleet / Beats](https://discuss.elastic.co/t/transport-data-to-remote-networks-via-fleet-beats/282507)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 12:13pm UTC](https://discuss.elastic.co/t/transport-data-to-remote-networks-via-fleet-beats/282507 "2021-08-26T12:13:00Z")
Hi, This is not a question about a specific setup, it's more or less me trying to understand the intended use of Beats / Fleet in distributed setup. In the past I built several setups where I used Logstash to transport… --- ## [Configuring MSSQL transaction on ELK stack hosting on windows machine](https://discuss.elastic.co/t/configuring-mssql-transaction-on-elk-stack-hosting-on-windows-machine/282543)
**Author:** [@AbdulVaseem](https://discuss.elastic.co/u/AbdulVaseem)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 11:37am UTC](https://discuss.elastic.co/t/configuring-mssql-transaction-on-elk-stack-hosting-on-windows-machine/282543 "2021-08-26T11:37:53Z")
Hi All, I need some help in configuring MSSQL hosting on Windows 2012R2. I have ELK running on Windows 10 Pro (standalone) and need to understand how I would need to configure MSSQL transaction logs. --- ## [Elastic Search query](https://discuss.elastic.co/t/elastic-search-query/282562)
**Author:** [@chris.aw](https://discuss.elastic.co/u/chris.aw)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 10:57am UTC](https://discuss.elastic.co/t/elastic-search-query/282562 "2021-08-26T10:57:51Z")
Hi guys! I've come across this UX (as shown below). Just wondering if elastic search can support the same results as well. I believe it is identifying by keywords --- ## [Index not creating](https://discuss.elastic.co/t/index-not-creating/282345)
**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\ **Replies:** 17\ **Last updated:** [August 26, 2021, 10:55am UTC](https://discuss.elastic.co/t/index-not-creating/282345 "2021-08-26T10:55:13Z")
After configuring filter.conf and logstash input index not showing in Kibana. Successfully tested logstash conf files. No errors. Below are the conf files Filter.conf filter { if \[type\] == "signinattempts" { j… --- ## [How to change "timeout" value in Request payload of "\_msearch" query?](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358)
**Author:** [@mgharikrishnan](https://discuss.elastic.co/u/mgharikrishnan)\ **Replies:** 4\ **Last updated:** [August 26, 2021, 10:14am UTC](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358 "2021-08-26T10:14:29Z")
Hi Team, We use Elasticsearch 7.9.1 & Kibana 7.3.2 version in our product. While Kibana dashboard loading, there is a variable "timeout":"30000ms" in the "Request payload" of \_msearch queries. We tried to change this v… [Previous page](https://discuss.elastic.co/latest.md?page=1505) [Next page](https://discuss.elastic.co/latest.md?page=1507)