# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1532

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1533

---

## [8.x prerelease, yum error](https://discuss.elastic.co/t/8-x-prerelease-yum-error/281016)

<div class="topic-metadata">

**Author:** [@stsm](https://discuss.elastic.co/u/stsm)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 8:40am UTC](https://discuss.elastic.co/t/8-x-prerelease-yum-error/281016 "2021-08-11T08:40:22Z")

</div>

https://artifacts.elastic.co/packages/8.x-prerelease/yum/repodata/repomd.xml: \[E rrno 14\] HTTPS Error 404 - Not Found .repo file content \[kibana-8.x\] …

---

## [Using the same APM Server for Multiple Environments](https://discuss.elastic.co/t/using-the-same-apm-server-for-multiple-environments/280920)

<div class="topic-metadata">

**Author:** [@happyinteger](https://discuss.elastic.co/u/happyinteger)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 9:53am UTC](https://discuss.elastic.co/t/using-the-same-apm-server-for-multiple-environments/280920 "2021-08-11T09:53:35Z")

</div>

Hello, I'm just wondering that is it possible to use one APM server for multiple environments like dev, test, staging. I'm not sure that it's the best practice but for non-prod environments I want to use one common APM …

---

## [Webcrawler does crawl relative url's in the same domain (incorrect protocol deny reason)](https://discuss.elastic.co/t/webcrawler-does-crawl-relative-urls-in-the-same-domain-incorrect-protocol-deny-reason/280189)

<div class="topic-metadata">

**Author:** [@markn](https://discuss.elastic.co/u/markn)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 9:49am UTC](https://discuss.elastic.co/t/webcrawler-does-crawl-relative-urls-in-the-same-domain-incorrect-protocol-deny-reason/280189 "2021-08-11T09:49:51Z")

</div>

Hi, our domain to crawl is https://www.unive.nl We run the Enterprise Search on Elastic Cloud (Azure, Netherlands) The full urls are crawled nicely. Example: Fraudebeleid - Univé Log message: Time crawler.url.deny\_…

---

## [Logstash Ruby Script - Access Fields While Avoiding Concurrency Issues](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 4\
**Last updated:** [August 11, 2021, 9:43am UTC](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956 "2021-08-11T09:43:27Z")

</div>

I have a CSV file and what im trying to do is after filtering a bit the data, to output them in a another csv file but i have to check that im not writing SAME info. So i have a Ruby script to check for if a KEY is alrea…

---

## [Match entities where field with specific value does not exists](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902)

<div class="topic-metadata">

**Author:** [@farkasaba](https://discuss.elastic.co/u/farkasaba)\
**Replies:** 7\
**Last updated:** [August 11, 2021, 9:18am UTC](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902 "2021-08-11T09:18:44Z")

</div>

Hello there, I have my documents indexed in the following format: { ... "special\_id"=1, "phase"="create" }, { ... "special\_id"=1, "phase"="update" }, { ... "special\_id"=2, "phase"="update" }, { ... "special\_id"=3, "pha…

---

## [Integrate docker registry to ECE for upgrade per deployment](https://discuss.elastic.co/t/integrate-docker-registry-to-ece-for-upgrade-per-deployment/281010)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 8:01am UTC](https://discuss.elastic.co/t/integrate-docker-registry-to-ece-for-upgrade-per-deployment/281010 "2021-08-11T08:01:42Z")

</div>

Hi I wonder how I can integrate my private docker repository which was set up on the first host (with internet access) with ECE. If I wanted to upgrade particular deployment I need to load docker images on a few hosts …

---

## [Unable to retrieve version information from Elasticsearch nodes. unable to get local issuer certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-get-local-issuer-certificate/281008)

<div class="topic-metadata">

**Author:** [@auasad](https://discuss.elastic.co/u/auasad)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 7:44am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-get-local-issuer-certificate/281008 "2021-08-11T07:44:16Z")

</div>

Hello community, I have setup an elk stack following the URL; Run in Docker with TLS enabled everything setup successfully with elastic default settings, but I want to configure Letsencrypt SSL for http instead of es0…

---

## [How to get all closed indicies?](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004)

<div class="topic-metadata">

**Author:** [@grrkaan](https://discuss.elastic.co/u/grrkaan)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 7:20am UTC](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004 "2021-08-11T07:20:11Z")

</div>

I have a cluseter and a few open and closed indexes inside.I want to get only closed indexes. GET \_cat/indices?v&s=status this query getting all indicies. I need a GET \_cat/indices?v&s=status:'close' like this query. I…

---

## [cosineSimilarity를 이용한 유사 문서 조회 쿼리 관련 문의드립니다.](https://discuss.elastic.co/t/cosinesimilarity/280996)

<div class="topic-metadata">

**Author:** [@ankj0905](https://discuss.elastic.co/u/ankj0905)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 7:03am UTC](https://discuss.elastic.co/t/cosinesimilarity/280996 "2021-08-11T07:03:23Z")

</div>

cosineSimilarity를 이용한 유사 문서 조회 쿼리 관련 문의드립니다. 현제 특정 문서를 조회하여 인덱싱된 벡터 값을 찾아 다시 아래의 쿼리에 벡터 값을 담아 유사 문서를 조회하고 있습니다. A 값과 유사한 결과를 위해 총 2번의 요청 작업을 진행하고 있습니다. { "query": { "script\_score": { "query": { "m…

---

## [Enriching data from nested field query](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993)

<div class="topic-metadata">

**Author:** [@amamdouh](https://discuss.elastic.co/u/amamdouh)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 6:39am UTC](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993 "2021-08-11T06:39:35Z")

</div>

Hi there.., I'm trying to setup an enrich policy that matches a nested field and then returns the parent object, but couldn't find a way so far.. My index mapping looks like this: { "lkp\_persons": { "mappings…

---

## [Logstash jdbc plugin for windows authentication using kerberos in linux](https://discuss.elastic.co/t/logstash-jdbc-plugin-for-windows-authentication-using-kerberos-in-linux/280991)

<div class="topic-metadata">

**Author:** [@akshaybhuradia](https://discuss.elastic.co/u/akshaybhuradia)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 6:23am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-for-windows-authentication-using-kerberos-in-linux/280991 "2021-08-11T06:23:55Z")

</div>

For kerberos authentication username and password is not required. But plugin make username as required parameter. I have tried diiferent ways but not able to connect to MS Sql Server OS Version : RHEL 8.3 with x64 L…

---

## [Monitoring the logstash postfix queue](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986)

<div class="topic-metadata">

**Author:** [@KaPBaJIOJI](https://discuss.elastic.co/u/KaPBaJIOJI)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 5:16am UTC](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986 "2021-08-11T05:16:30Z")

</div>

Hi all, mb its stupid idei, but i want monitoring postfix queue . I write in file "data", "hostname", "count", how can I transfer this data to elastic? at the moment, i am parse postfix logs, thanks to GitHub - whyscre…

---

## [Upgrade elk from 6.3.2 to 7.14](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982)

<div class="topic-metadata">

**Author:** [@praseeb\_kdas](https://discuss.elastic.co/u/praseeb_kdas)\
**Replies:** 3\
**Last updated:** [August 11, 2021, 5:27am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982 "2021-08-11T05:27:41Z")

</div>

We are planning to upgrade our ELK 6.3.2 to 7.14,can we know the steps which we need to perform so there wont any data loss for us.

---

## [New nodes failing to join cluster](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 5:11am UTC](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980 "2021-08-11T05:11:39Z")

</div>

I have two nodes that have been out of the cluster for some time and I have just tried to bring them back in. Both fail in the same manner: connection timed out. Tcpdump running on one of the cluster members shows the …

---

## [Auditbeat not updating usernames and process data in file\_integrity module](https://discuss.elastic.co/t/auditbeat-not-updating-usernames-and-process-data-in-file-integrity-module/280983)

<div class="topic-metadata">

**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 4:54am UTC](https://discuss.elastic.co/t/auditbeat-not-updating-usernames-and-process-data-in-file-integrity-module/280983 "2021-08-11T04:54:13Z")

</div>

Hi, I have installed Auditbeat which is working fine. However, when I try to query data related to user creating, deleting files which uses the file\_integrity module, it shows records/documents without the user.names in…

---

## [How to specify pipelines.yml file path](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923)

<div class="topic-metadata">

**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\
**Replies:** 7\
**Last updated:** [August 11, 2021, 3:20am UTC](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923 "2021-08-11T03:20:18Z")

</div>

I'm working on Logstash setup in a legacy system with no owners in the organisation. Using ps, i found the process executing the logstash service: /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headl…

---

## [Character limit in fields longer then 1024 (truncated with ellipsis)](https://discuss.elastic.co/t/character-limit-in-fields-longer-then-1024-truncated-with-ellipsis/280415)

<div class="topic-metadata">

**Author:** [@GiladanoN](https://discuss.elastic.co/u/GiladanoN)\
**Replies:** 4\
**Last updated:** [August 11, 2021, 2:03am UTC](https://discuss.elastic.co/t/character-limit-in-fields-longer-then-1024-truncated-with-ellipsis/280415 "2021-08-11T02:03:33Z")

</div>

Hi/ i'm having an issue with certain logs fields being longer than 1024 chars. When searching for the relevant log it comes up, but the relevant field is truncated, and the remainder of the text is replaced with an ell…

---

## [How to import CSV files, where couple of fields have multiline content](https://discuss.elastic.co/t/how-to-import-csv-files-where-couple-of-fields-have-multiline-content/280453)

<div class="topic-metadata">

**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\
**Replies:** 5\
**Last updated:** [August 11, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-import-csv-files-where-couple-of-fields-have-multiline-content/280453 "2021-08-11T02:00:43Z")

</div>

Hello, how to accurately import CSV where lines contain fields with multiline content? Default separator is comma, but multiline content is surrounded with double-quotes. For example: Summary,Issue key,Issue id,Parent …

---

## [How to change color for bar chart](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809)

<div class="topic-metadata">

**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\
**Replies:** 2\
**Last updated:** [August 10, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809 "2021-08-10T02:00:48Z")

</div>

Hi team, I want to change the color for each column a color code As image : I used kibana ver 7.13 Thanks

---

## [Logstash http poller - PKIX path building failed](https://discuss.elastic.co/t/logstash-http-poller-pkix-path-building-failed/280966)

<div class="topic-metadata">

**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 1:38am UTC](https://discuss.elastic.co/t/logstash-http-poller-pkix-path-building-failed/280966 "2021-08-11T01:38:09Z")

</div>

Hello community. I need your help again! I'm using http poller plugin requesting an url https but have the error: "pkix path building failed sun.security.provider.certpath.suncertpathbuilderexception: unable to find va…

---

## [ERROR WHEN INSTALLING ELASTIC.APM.AspNetCore IN VISUAL STUDIO 2019](https://discuss.elastic.co/t/error-when-installing-elastic-apm-aspnetcore-in-visual-studio-2019/280948)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 1\
**Last updated:** [August 11, 2021, 12:42am UTC](https://discuss.elastic.co/t/error-when-installing-elastic-apm-aspnetcore-in-visual-studio-2019/280948 "2021-08-11T00:42:21Z")

</div>

Hi I am trying to install the Elastic APM.AspNetCore package, but I get the following error: Severity Code Description Project File Line Suppression State Error Could not install package 'Elastic.Apm.AspNetCore 1.11.0'…

---

## [Updating arrays on elastic App Search](https://discuss.elastic.co/t/updating-arrays-on-elastic-app-search/280692)

<div class="topic-metadata">

**Author:** [@Tiago\_Zwierzykowski](https://discuss.elastic.co/u/Tiago_Zwierzykowski)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 12:26am UTC](https://discuss.elastic.co/t/updating-arrays-on-elastic-app-search/280692 "2021-08-11T00:26:20Z")

</div>

I would like to know how to update arrays on Elastic App Search. { "Id":1, "Keywords": { \[ "test1", "test2", "test3" \] } } Like on the example above I would like to change the 3rd item on the array to "test4".

---

## [Can Elastic Security read existing non default pre-existing indices?](https://discuss.elastic.co/t/can-elastic-security-read-existing-non-default-pre-existing-indices/280935)

<div class="topic-metadata">

**Author:** [@rconroy](https://discuss.elastic.co/u/rconroy)\
**Replies:** 7\
**Last updated:** [August 10, 2021, 11:49pm UTC](https://discuss.elastic.co/t/can-elastic-security-read-existing-non-default-pre-existing-indices/280935 "2021-08-10T23:49:22Z")

</div>

Hello We've been using ES for some time and have a number of indices that contain all the data we want to capture from windows hosts and other data sources such as firewalls etc... The reality is that I've already captu…

---

## [Exception: Key found in event is not documented!](https://discuss.elastic.co/t/exception-key-found-in-event-is-not-documented/280658)

<div class="topic-metadata">

**Author:** [@Jerry\_Tian](https://discuss.elastic.co/u/Jerry_Tian)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 11:36pm UTC](https://discuss.elastic.co/t/exception-key-found-in-event-is-not-documented/280658 "2021-08-10T23:36:35Z")

</div>

I am at step 5 of the testing phase in creating a custom filebeat module as detailed here Creating a New Filebeat Module | Beats Developer Guide \[master\] | Elastic. However, I failed the test with the following short te…

---

## [Adding modules to Fleet agent](https://discuss.elastic.co/t/adding-modules-to-fleet-agent/280721)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 4\
**Last updated:** [August 10, 2021, 11:30pm UTC](https://discuss.elastic.co/t/adding-modules-to-fleet-agent/280721 "2021-08-10T23:30:43Z")

</div>

Hi, I have Elastic Cloud 7.14.0, using Fleet and an Agent on a Centos 7 server. Works great. I want to enable modules that aren't necessarily a click-and-configure in the Fleet UI. Can i modify some file locally on th…

---

## [Help! I can't filter out docs with bad ids in reindex](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968)

<div class="topic-metadata">

**Author:** [@tasslehawf](https://discuss.elastic.co/u/tasslehawf)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 11:28pm UTC](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968 "2021-08-10T23:28:40Z")

</div>

Our index has a number of docs with bad ids. They were set by this script during a previous reindex: def lowerCaseAuthor = ctx.author\_string != null ? ctx.author\_string.toLowerCase() : null; def lowerCasePub = ctx.publi…

---

## [Questions On Setting Up A Production Ready Elastic Stack](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 11:17pm UTC](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973 "2021-08-10T23:17:23Z")

</div>

Hello, After working with the elastic stack as a proof of concept and setting it up accordingly our business is ready to move onto a production level stack. We just had some questions before making the jump. We are hop…

---

## [Create ILM Rollover on existing index](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814)

<div class="topic-metadata">

**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Replies:** 5\
**Last updated:** [August 10, 2021, 11:02pm UTC](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814 "2021-08-10T23:02:52Z")

</div>

Hi, I have an existing index that grows too big and I see perf going down (the index is 85Gb for the moment). I created an IL policy, and now trying to create an index template to apply the policy on. Given the existi…

---

## [Logstash filter: aggregate nested arrays](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965)

<div class="topic-metadata">

**Author:** [@me.mohammed](https://discuss.elastic.co/u/me.mohammed)\
**Replies:** 7\
**Last updated:** [August 10, 2021, 10:47pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965 "2021-08-10T22:47:50Z")

</div>

I'm trying to fetch data from MySQL and push it to ElasticSearch using LogStash, although I'm having trouble creating a config file for LogStash that suits my need I'm trying to achieve this result { "products":\[ …

---

## [DLQ not enabled for logstasha](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940)

<div class="topic-metadata">

**Author:** [@Krrish\_Raj1](https://discuss.elastic.co/u/Krrish_Raj1)\
**Replies:** 9\
**Last updated:** [August 10, 2021, 9:33pm UTC](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940 "2021-08-10T21:33:28Z")

</div>

I have two events: test\_start and test\_end When I receive test\_start event, I clone one more event from it test\_attempt and index it in elasticsearch. Then when test\_end event arrives, I extract document id and index …

[Previous page](https://discuss.elastic.co/latest.md?page=1531)

[Next page](https://discuss.elastic.co/latest.md?page=1533)
