# Latest **URL:** https://discuss.elastic.co/latest.md?page=1508 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1509 --- ## [Fingerprint & record drop not working as expected](https://discuss.elastic.co/t/fingerprint-record-drop-not-working-as-expected/282513)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 6:35pm UTC](https://discuss.elastic.co/t/fingerprint-record-drop-not-working-as-expected/282513 "2021-08-25T18:35:05Z")
I'm reading lines from a log that, after converting to JSON need to be split based on a field & then I want to generate fingerprint using some fields & drop the event if the fields are not found. But I'm facing issues: … --- ## [Embedded kibana authentication](https://discuss.elastic.co/t/embedded-kibana-authentication/282396)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 5:39pm UTC](https://discuss.elastic.co/t/embedded-kibana-authentication/282396 "2021-08-25T17:39:09Z")
I'm trying to embed kibana to an intranet site our users have access to, I want to do it as close as possible to a seamless no user input authentication. We are using 7.8 and cannot upgrade, we have authentication setup … --- ## [Elasticsearch/Kibana "authentication\_failed"](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-failed/282355)
**Author:** [@IlyaZ](https://discuss.elastic.co/u/IlyaZ)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-failed/282355 "2021-08-25T17:33:38Z")
I am configuring an Elasticsearch/Kibana running under Docker-compose. And I am have some problems with authentication. When running docker-compose build: version: '3.7' services: create\_cert: image: docker.ela… --- ## [Network overview page does not load completely](https://discuss.elastic.co/t/network-overview-page-does-not-load-completely/280582)
**Author:** [@termcap](https://discuss.elastic.co/u/termcap)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 5:26pm UTC](https://discuss.elastic.co/t/network-overview-page-does-not-load-completely/280582 "2021-08-25T17:26:15Z")
I have Elastic Security running on version 7.14. Unfortunately I am unable to get the Elastic Security Network Overview page to load completely. \[Please check the attached screenshot\] The lowest section of the page … --- ## [Pipeline aggs with more than one level depth](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 3:02pm UTC](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502 "2021-08-25T15:02:20Z")
Hi everyone, I'm trying to make an avg\_bucket agg that goes more than one level deep like this ... "aggs": { "group\_by\_implementation\_waiting": { "terms": { "field": "implementation.keyword", … --- ## [Yii2 and nested objects](https://discuss.elastic.co/t/yii2-and-nested-objects/282268)
**Author:** [@Web\_Hildus](https://discuss.elastic.co/u/Web_Hildus)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 4:58pm UTC](https://discuss.elastic.co/t/yii2-and-nested-objects/282268 "2021-08-25T16:58:10Z")
Hi. I'm totally new in ElasticSearch. I'm using "Yii2 Framework" and stalked on. Elastic not works with nested field. Is here specialist in Yii2 & Elasticsearch? Or where I can find the answer? Documents in index are lik… --- ## [Nanoseconds with Logstash and Elasticsearch](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492)
**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\ **Replies:** 7\ **Last updated:** [August 25, 2021, 4:21pm UTC](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492 "2021-08-25T16:21:43Z")
Good Morning! I am a little stuck figuring out how to handle custom time formats with nanosecond precision. The data that I am currently trying to ingest has two different time formats: 1629480840.652062565 and 2021:08:2… --- ## [Aggregate plugin does not add all results](https://discuss.elastic.co/t/aggregate-plugin-does-not-add-all-results/282503)
**Author:** [@josedelrio](https://discuss.elastic.co/u/josedelrio)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:20pm UTC](https://discuss.elastic.co/t/aggregate-plugin-does-not-add-all-results/282503 "2021-08-25T16:20:16Z")
Aggreation plugin overwrites data I am trying to implement an aggregation using a MySQL 5.7 database as source. select u.id as user\_id, u.first\_name as first\_name, u.last\_name as last\_name,t.id as 'tag\_id', t.name as 't… --- ## [LoadBalancer in Kibana](https://discuss.elastic.co/t/loadbalancer-in-kibana/282310)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 4:07pm UTC](https://discuss.elastic.co/t/loadbalancer-in-kibana/282310 "2021-08-25T16:07:42Z")
I have 2 es nodes cluster and have 2kibana nodes and wanted to maintain HA in kibana. What is the best approach inorder to maintain the HA. Do i need go with external loadbalancer for kibana or any settings can be done … --- ## [Elastic cluster sizing estimator : why I am not having 2 data nodes](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:39pm UTC](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378 "2021-08-25T15:39:14Z")
I am trying to estimate my cluster size based on an excel sheet provided by elastic.co in a webinar in 20/05/2021 about "elastic sizing", I filled the daily volume data but I see that it gives me only 1 data not for "Ho… --- ## [Data tier problem - New Indices not allocating in data\_hot](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498 "2021-08-25T15:37:30Z")
Hi, I'm (trying) to implement a hot/warm architecture using the concept of data tiers. I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr. No… --- ## [Need to setup mail alert on Mertricbeat data using ML (Prediction Alert)](https://discuss.elastic.co/t/need-to-setup-mail-alert-on-mertricbeat-data-using-ml-prediction-alert/282442)
**Author:** [@aniket.sonavane](https://discuss.elastic.co/u/aniket.sonavane)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:12pm UTC](https://discuss.elastic.co/t/need-to-setup-mail-alert-on-mertricbeat-data-using-ml-prediction-alert/282442 "2021-08-25T15:12:28Z")
Objective:- Need prediction alert from kibana on metricbeat data? Hi, I've setup metricbeat 100+ servers and data is reporting, also I've created some anomaly jobs to identify anomalies and alert critical anomalies. no… --- ## [Stack Monitoring access](https://discuss.elastic.co/t/stack-monitoring-access/282369)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 3:10pm UTC](https://discuss.elastic.co/t/stack-monitoring-access/282369 "2021-08-25T15:10:50Z")
Hi im trying to set up an user with ABAC for my monitoring cluster, but when i add the role monitoring-user role to my user it just go over my ABAC configuration. Is there any way to give access to stack monitoring with… --- ## [All of a sudden Elastic Search, 100% CPU usage and high memory usage](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:59pm UTC](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915 "2021-08-25T14:59:38Z")
Hello I havent touched any configuration on the Elastic Stack in about a month and all of a sudden, we are seeing the CPU at 100% and the memory usage very high. Im surprised that this has been going on for about 8 hou… --- ## [Logstash jdbc\_static types doesn't work (longtext, tinyint...)](https://discuss.elastic.co/t/logstash-jdbc-static-types-doesnt-work-longtext-tinyint/282497)
**Author:** [@Atesrin](https://discuss.elastic.co/u/Atesrin)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:58pm UTC](https://discuss.elastic.co/t/logstash-jdbc-static-types-doesnt-work-longtext-tinyint/282497 "2021-08-25T14:58:33Z")
Hi, I would like to know if there is some place where I can find some information about the accepted types for jdbc\_static ? From what I see on websites only "varchar" seems accepted, but I have some longtext, tinyint … --- ## [Date field being ignored in new index pattern](https://discuss.elastic.co/t/date-field-being-ignored-in-new-index-pattern/282360)
**Author:** [@bacony0atmeal](https://discuss.elastic.co/u/bacony0atmeal)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 2:39pm UTC](https://discuss.elastic.co/t/date-field-being-ignored-in-new-index-pattern/282360 "2021-08-25T14:39:33Z")
i have an index called "bobGoblin" ... "bobGoblin" has a field called bobTimestamp which shows as a date "type" in the "mapping" ... when i go to make a new index pattern for the bobGoblin index ... The indices which mat… --- ## [Mappings restore errors](https://discuss.elastic.co/t/mappings-restore-errors/282417)
**Author:** [@Leonardo\_De\_Oliveira](https://discuss.elastic.co/u/Leonardo_De_Oliveira)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 2:37pm UTC](https://discuss.elastic.co/t/mappings-restore-errors/282417 "2021-08-25T14:37:35Z")
Hello Folks! I am currently running Elasticsearch v5.5.2 in production, and I am setting up a downsized version in our Staging environment. I used elasticdump v6.67.1 to dump our mappings and a subset of our data which… --- ## [Token input in Logstash](https://discuss.elastic.co/t/token-input-in-logstash/282460)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/token-input-in-logstash/282460 "2021-08-25T14:22:05Z")
We have an API from Genesys to integrate with Elasticsearch through logstash, but the authorization to that api is token system. Is there a way to fetch the token in Logstash. What would be the best approach to integrat… --- ## [Filebeat sidecar with Sonarqube in Kubernetes](https://discuss.elastic.co/t/filebeat-sidecar-with-sonarqube-in-kubernetes/282315)
**Author:** [@Vincent3](https://discuss.elastic.co/u/Vincent3)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-sidecar-with-sonarqube-in-kubernetes/282315 "2021-08-25T14:14:09Z")
Hello, I have a configMap : apiVersion: v1 kind: ConfigMap metadata: name: filebeat-configmap namespace: k8s-mxt-sonarqube data: filebeat.yml: |- filebeat.inputs: - type: container enabled: … --- ## [Understanding ILM policy](https://discuss.elastic.co/t/understanding-ilm-policy/282303)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 3:24am UTC](https://discuss.elastic.co/t/understanding-ilm-policy/282303 "2021-08-25T03:24:40Z")
Hi friends,, It is noted i can set ILM policy in logstash attach to index output { elasticsearch { ilm\_rollover\_alias =\> "custom" ilm\_pattern =\> "000001" ilm\_policy =\> "custom\_policy" … --- ## [Alert on changes](https://discuss.elastic.co/t/alert-on-changes/280790)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:56pm UTC](https://discuss.elastic.co/t/alert-on-changes/280790 "2021-08-25T13:56:35Z")
Hello, i have 1 index which is filled once a day with some values. I have to create an alert only if a value is added which was not present in the day before. how to archive this? any ideas? thanks --- ## [Kibana/ES too slow - Discover view](https://discuss.elastic.co/t/kibana-es-too-slow-discover-view/281990)
**Author:** [@Atesrin](https://discuss.elastic.co/u/Atesrin)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 1:53pm UTC](https://discuss.elastic.co/t/kibana-es-too-slow-discover-view/281990 "2021-08-25T13:53:00Z")
Hi everyone, I try since few weeks to optimize my Kibana/ELK because it's really slow, and I really don't know what can I do more now :(. When I update the Discover view, from one date to another by example, it takes m… --- ## [Kibana Actions not working?](https://discuss.elastic.co/t/kibana-actions-not-working/280772)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/kibana-actions-not-working/280772 "2021-08-25T13:48:30Z")
Alerts status is changing but its not sending action to the index that I have created. I am using index threshold alert. I am also attaching screen shots. --- ## [Search\_after query doesn't return correct results for pagination](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:45pm UTC](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999 "2021-08-25T13:45:03Z")
I have a process that queries the watcher-history indices for a specified time, and the amount of results is over 10000 docs, which is the limit. So I tried to use the search\_after query, after adding a sort value, but t… --- ## [Transaction error rate threshold alert are not editable filed for kibana 7.14](https://discuss.elastic.co/t/transaction-error-rate-threshold-alert-are-not-editable-filed-for-kibana-7-14/281287)
**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:38pm UTC](https://discuss.elastic.co/t/transaction-error-rate-threshold-alert-are-not-editable-filed-for-kibana-7-14/281287 "2021-08-25T13:38:39Z")
I am using elasticserch : 7.14 and Kibana 7.14 I am not able edit alert detail in Transaction error rate threshold: these filed are not edit and showing fixed value. -- 30 % , 5 min and ALL. Environment , IS ABOVE 30… --- ## [Alert checking for 0 documents stopped firing](https://discuss.elastic.co/t/alert-checking-for-0-documents-stopped-firing/282312)
**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:28pm UTC](https://discuss.elastic.co/t/alert-checking-for-0-documents-stopped-firing/282312 "2021-08-25T13:28:17Z")
Hi, We have been running an alert that checks for 0 new documents over a specific time and sends an email. This worked fine but seems to have stopped working right after we updated our stack to 7.13.4. The email functi… --- ## [Get all items](https://discuss.elastic.co/t/get-all-items/282386)
**Author:** [@Nastya.JavaScript\_Ko](https://discuss.elastic.co/u/Nastya.JavaScript_Ko)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:11pm UTC](https://discuss.elastic.co/t/get-all-items/282386 "2021-08-25T13:11:39Z")
Hey! First time I work with elastic. I have a request like this - but it does not return data after August 10th. { "query": { "bool": { "must\_not": \[ { "term": { … --- ## [ILM template and index pattern](https://discuss.elastic.co/t/ilm-template-and-index-pattern/282385)
**Author:** [@Sherabu](https://discuss.elastic.co/u/Sherabu)\ **Replies:** 5\ **Last updated:** [August 25, 2021, 12:27pm UTC](https://discuss.elastic.co/t/ilm-template-and-index-pattern/282385 "2021-08-25T12:27:05Z")
Hi friend, my architecture is filebeat will send data to logstash. Logstash will send data to Kibana and kibana will visualize. My index is like below Myindex-team1 Myindex-team2 Myindex-team3 Yourindex-team1 Yourindex-… --- ## [Include Exim main log](https://discuss.elastic.co/t/include-exim-main-log/282243)
**Author:** [@BaseSL](https://discuss.elastic.co/u/BaseSL)\ **Replies:** 7\ **Last updated:** [August 25, 2021, 9:01am UTC](https://discuss.elastic.co/t/include-exim-main-log/282243 "2021-08-25T09:01:22Z")
Hello, how can I, in the current version, include the Exim log and search entries via Kibana ? About Filebeat I can transfer the log into Kibana, but there the assignment is not correct. So what do I have to set, that … --- ## [Fields, keywords and text](https://discuss.elastic.co/t/fields-keywords-and-text/282422)
**Author:** [@iLemming](https://discuss.elastic.co/u/iLemming)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 11:37am UTC](https://discuss.elastic.co/t/fields-keywords-and-text/282422 "2021-08-25T11:37:40Z")
I'm dealing with a headache where it seems I can't find the correct set of parameters for the analyzer. So here's the problem: I have an index where some fields are type of text and some fields are "type": "keyword". L… [Previous page](https://discuss.elastic.co/latest.md?page=1507) [Next page](https://discuss.elastic.co/latest.md?page=1509)