# Latest **URL:** https://discuss.elastic.co/latest.md?page=1539 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1540 --- ## [Suggestion for wildcard field type](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [August 5, 2021, 6:14pm UTC](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553 "2021-08-05T18:14:22Z")
Hello, We need to do a lot of (front) wildcard queries on certain fields. One such field is url.original. Currently this is mapped in ECS as keyword. I'm wondering if this could be changed to wildcard field type? For e… --- ## [Unknown field 'DisablePAFXFAST' in struct literal of type sarama.GSSAPIConfig](https://discuss.elastic.co/t/unknown-field-disablepafxfast-in-struct-literal-of-type-sarama-gssapiconfig/280579)
**Author:** [@jpfreyen](https://discuss.elastic.co/u/jpfreyen)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 6:11pm UTC](https://discuss.elastic.co/t/unknown-field-disablepafxfast-in-struct-literal-of-type-sarama-gssapiconfig/280579 "2021-08-05T18:11:27Z")
I inherited a fairly old beats plugin project using filebeat 7.10. Its import() in main is defined as: package main import ( "os" "github.com/elastic/beats/v7/filebeat/beater" inputs "github.c… --- ## [Enhanced Table Plugin Installation Error](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481)
**Author:** [@marija.timovska.iw](https://discuss.elastic.co/u/marija.timovska.iw)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 6:03pm UTC](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481 "2021-08-05T18:03:10Z")
@fbaligand Hello I am in need of your assistance regarding the run of enhanced-table plugin in development mode. When I use the to yarn kbn bootstrap command I get this error. --- ## [Loading Vega-lite schema + data from local](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249)
**Author:** [@sohenrane](https://discuss.elastic.co/u/sohenrane)\ **Replies:** 6\ **Last updated:** [August 5, 2021, 5:22pm UTC](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249 "2021-08-05T17:22:31Z")
{ "$schema": "file:///C:/Users/custom4me/Downloads/ELK/v5.json", "title": "Event counts from MAIN index", "data": { "url": "file:///C:/Users/custom4me/Downloads/ELK/seattle-weather.csv" } } How to load from local … --- ## [Making nested , flattened fields searchable](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 5:21pm UTC](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570 "2021-08-05T17:21:54Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Dynamic index name with ILM](https://discuss.elastic.co/t/dynamic-index-name-with-ilm/280563)
**Author:** [@DoctorRobot](https://discuss.elastic.co/u/DoctorRobot)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 4:48pm UTC](https://discuss.elastic.co/t/dynamic-index-name-with-ilm/280563 "2021-08-05T16:48:24Z")
Hi, I currently have this setup which works fine: --- apiVersion: beat.k8s.elastic.co/v1beta1 kind: Beat metadata: name: filebeat namespace: elasticsearch ... setup: ilm: enabled: false template: name: … --- ## [Getting Issue while query Elasticsearch having kstem with edge gram in filter](https://discuss.elastic.co/t/getting-issue-while-query-elasticsearch-having-kstem-with-edge-gram-in-filter/280555)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 4:04pm UTC](https://discuss.elastic.co/t/getting-issue-while-query-elasticsearch-having-kstem-with-edge-gram-in-filter/280555 "2021-08-05T16:04:43Z")
Pass complete addressline1 as input with match query unable to find the record because of kstem. We have kstem, lower, edge gram and synonym filter applied on addressline1 field, While creating the index. for an exampl… --- ## [Can you put Logstash behind Nginx proxy?](https://discuss.elastic.co/t/can-you-put-logstash-behind-nginx-proxy/279665)
**Author:** [@droplet](https://discuss.elastic.co/u/droplet)\ **Replies:** 12\ **Last updated:** [August 5, 2021, 3:51pm UTC](https://discuss.elastic.co/t/can-you-put-logstash-behind-nginx-proxy/279665 "2021-08-05T15:51:25Z")
Hello, Can you put Logstash behind Nginx proxy the same way you put Kibana behind an nginx proxy to use a custom domain with SSL? All this while also using HTTP Basic authentication with Nginx? ElasticSearch, Kibana, a… --- ## [How to create Hyperlinked visualization in kibana](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053)
**Author:** [@Rana\_M\_Zubair](https://discuss.elastic.co/u/Rana_M_Zubair)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 3:31pm UTC](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053 "2021-08-05T15:31:50Z")
I want to create a type of drilled down dashboard. Like a main dashboard in which I want to create hyperlinked visualization, the link of which will take me to the more detailed dashboard. My Findings: There is a markd… --- ## [Processors in Endpoint/Elastic-Agent](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 3:28pm UTC](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889 "2021-08-05T15:28:52Z")
Hello, We are testing Elastic-Agent and found that the streams configuration we can add "processors" that take care of adding custom fields for things like Filebeats/Metricbeats. This is a useful feature but we cannot f… --- ## [Debugging elasticsearch plugins](https://discuss.elastic.co/t/debugging-elasticsearch-plugins/280550)
**Author:** [@alinux](https://discuss.elastic.co/u/alinux)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 3:23pm UTC](https://discuss.elastic.co/t/debugging-elasticsearch-plugins/280550 "2021-08-05T15:23:16Z")
Hi, i need to made some custom changes on repository-s3 plugin. In Intellij I started elasticsearch in debug mode with gradle command ./gradlew run --debug-jvm after elasticsearch is runnig there no plugins are loaded… --- ## [Extract Day, Month and year from Today using painless script](https://discuss.elastic.co/t/extract-day-month-and-year-from-today-using-painless-script/280431)
**Author:** [@hiteshmakky](https://discuss.elastic.co/u/hiteshmakky)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 2:45pm UTC](https://discuss.elastic.co/t/extract-day-month-and-year-from-today-using-painless-script/280431 "2021-08-05T14:45:32Z")
Hi Friends, I am new to the EKL stack. I am trying to calculate MTD sales from data set. We have three columns Product Code Date (dd-MM-yyyy format) Sales All I am trying to do is calculate MTD sales for e.g. If tod… --- ## [Issue setting up minimal security for elasticsearch](https://discuss.elastic.co/t/issue-setting-up-minimal-security-for-elasticsearch/280341)
**Author:** [@Aztal-Samoht](https://discuss.elastic.co/u/Aztal-Samoht)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 3:05pm UTC](https://discuss.elastic.co/t/issue-setting-up-minimal-security-for-elasticsearch/280341 "2021-08-05T15:05:52Z")
I have been following the instruction for setting up the minimal security features on ELK stack and keep running into the same problem. when I try to run the command ./kibana-keystore.bat add elasticsearch.password I … --- ## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/280423)
**Author:** [@Gotze\_des\_Pobels](https://discuss.elastic.co/u/Gotze_des_Pobels)\ **Replies:** 4\ **Last updated:** [August 5, 2021, 2:31pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/280423 "2021-08-05T14:31:08Z")
Im not able to connect Kibana with elasticsearch. Both running in seperate docker containers in plesk obsidian. Elasticsearch is running and a GET request to "mydomain.com:9200/\_cluster/health?pretty" is giving me foll… --- ## [Map Tile Server and Authentication](https://discuss.elastic.co/t/map-tile-server-and-authentication/280321)
**Author:** [@nick\_cgi](https://discuss.elastic.co/u/nick_cgi)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 2:23pm UTC](https://discuss.elastic.co/t/map-tile-server-and-authentication/280321 "2021-08-05T14:23:36Z")
Is it possible to utilise any sort of authentication with an external map tile server? The end goal is simply: Kibana, with a custom tile server The tile server to be protected in some fashion I have evaluated multip… --- ## [Conditions with environment variables](https://discuss.elastic.co/t/conditions-with-environment-variables/280462)
**Author:** [@Loulou](https://discuss.elastic.co/u/Loulou)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 12:39pm UTC](https://discuss.elastic.co/t/conditions-with-environment-variables/280462 "2021-08-05T12:39:02Z")
Hi, I am trying to have a different input for filebeat if a certain environment variable is set: - type: log enabled: ${VAR} paths: - MyPath1 - type: log enabled: not ${VAR} paths: - MyPath2 I know the… --- ## [LOGSTASH - MULTILINE XML IN LOG](https://discuss.elastic.co/t/logstash-multiline-xml-in-log/280528)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:37am UTC](https://discuss.elastic.co/t/logstash-multiline-xml-in-log/280528 "2021-08-05T11:37:32Z")
Hi to all I'm trying to parse xml info that it is in a log file, I tried with different configs, without luck, the actual one is this, but I tried with TIMESTAMP too, and join lines without sense codec =\> multiline{ c… --- ## [Swiftype Help with "from" filter](https://discuss.elastic.co/t/swiftype-help-with-from-filter/280441)
**Author:** [@mjordan](https://discuss.elastic.co/u/mjordan)\ **Replies:** 1\ **Last updated:** [August 5, 2021, 11:25am UTC](https://discuss.elastic.co/t/swiftype-help-with-from-filter/280441 "2021-08-05T11:25:22Z")
Hello, I'm attempting to use the "from" filter to look for pages that have a value present. "filter requires values parameter." is the error I'm seeing. "{"auth\_token":"xxxxxx","q":"","fetch\_fields":null,"per\_page":16… --- ## [\[ANNOUNCEMENT\] - FSCrawler 2.7 released](https://discuss.elastic.co/t/announcement-fscrawler-2-7-released/280525)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:16am UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-7-released/280525 "2021-08-05T11:16:24Z")
The FSCrawler team is pleased to announce the FSCrawler 2.7 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.7: wget https://repo1.maven.org/maven2… --- ## [How to connect Neo4j from logstash using JDBC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524)
**Author:** [@vivek\_Jagadeesan](https://discuss.elastic.co/u/vivek_Jagadeesan)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:11am UTC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524 "2021-08-05T11:11:53Z")
Hi All, Could anyone help me on how to connect the neo4j from logstash using JDBC? My sample config: input { jdbc { jdbc\_driver\_library =\> "/usr/share/java/neo4j-jdbc-driver-4.0.2.jar" jdbc\_driver\_class =\> "org.neo4… --- ## [Slow/Not Indexing in Elasticsearch via Logstash](https://discuss.elastic.co/t/slow-not-indexing-in-elasticsearch-via-logstash/280523)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:10am UTC](https://discuss.elastic.co/t/slow-not-indexing-in-elasticsearch-via-logstash/280523 "2021-08-05T11:10:16Z")
We have Elasticsearch 7.11.1 and Logstash 7.11.2. We have a scenario of indexing data from Logstash to ES. We use a java application that does some data processing and posts data to the Logstash HTTP endpoint. Normally e… --- ## [Kibana unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/278184)
**Author:** [@Trueman](https://discuss.elastic.co/u/Trueman)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 10:12am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/278184 "2021-08-05T10:12:24Z")
Hello! Continuing the topic Failed to establish trust communication between es01, es02 and kibana I set just the intermediate certificate in kibana part of the configuration: ELASTICSEARCH\_SSL\_CERTIFICATEAUTHORITIES: $C… --- ## [Failed to establish trust communication between es01, es02 and kibana](https://discuss.elastic.co/t/failed-to-establish-trust-communication-between-es01-es02-and-kibana/277654)
**Author:** [@Trueman](https://discuss.elastic.co/u/Trueman)\ **Replies:** 7\ **Last updated:** [August 5, 2021, 9:58am UTC](https://discuss.elastic.co/t/failed-to-establish-trust-communication-between-es01-es02-and-kibana/277654 "2021-08-05T09:58:29Z")
Hello, I'm trying to configure TLS between es01, es02 and kibana (docker containers) with certificates from certificate chain \[CA\_cert - Intermediate\_cert - Server\_cert\]. Below you can see the excerpt of the yml file whe… --- ## [Syslog date in ingest node pipeline ahead](https://discuss.elastic.co/t/syslog-date-in-ingest-node-pipeline-ahead/279345)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 9:39am UTC](https://discuss.elastic.co/t/syslog-date-in-ingest-node-pipeline-ahead/279345 "2021-08-05T09:39:07Z")
Hi, I am experiencing a strange thing with the date in the syslog log in filebeat. I am using the default ingest node pipeline (logs-system.syslog-0.12.7) which creates a new timestamp based on the system.syslog.timesta… --- ## [Filebeat stops sending data to Logstash and hence Elasticsearch after a few hundred thousand documents, works again on restarting Filebeat container](https://discuss.elastic.co/t/filebeat-stops-sending-data-to-logstash-and-hence-elasticsearch-after-a-few-hundred-thousand-documents-works-again-on-restarting-filebeat-container/279984)
**Author:** [@sanjogmehta](https://discuss.elastic.co/u/sanjogmehta)\ **Replies:** 4\ **Last updated:** [August 5, 2021, 9:27am UTC](https://discuss.elastic.co/t/filebeat-stops-sending-data-to-logstash-and-hence-elasticsearch-after-a-few-hundred-thousand-documents-works-again-on-restarting-filebeat-container/279984 "2021-08-05T09:27:15Z")
I am a new to Elastic stack and I am using Filebeat AWS module's vpcflow to fetch data from S3 through SQS. It works fine for a few hundred thousand documents, but after that I don't see any new document in Elasticsearch… --- ## [Negative CPU Usage on default dashboard "\[Elastic Agent\] Agent metrics"](https://discuss.elastic.co/t/negative-cpu-usage-on-default-dashboard-elastic-agent-agent-metrics/279762)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [August 5, 2021, 9:25am UTC](https://discuss.elastic.co/t/negative-cpu-usage-on-default-dashboard-elastic-agent-agent-metrics/279762 "2021-08-05T09:25:03Z")
Hello, Added a few Elastic agents to my Elastic Cloud trial and after 24 hours, I noticed negative CPU Usages on the builtin "\[Elastic Agent\] Agent metrics" dashboard.. After checking the configuration, the TSVB vis… --- ## [Can Logstash Base64 decode then parse json from a cloudfront log?](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 9:06am UTC](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367 "2021-08-05T09:06:05Z")
Hello, we are using AWS's image resizer Serverless Image Handler | Implementations | AWS Solutions To get an image, you need to base64 encode a json object such as {"bucket":"my-s3-bucket","key":"path/to/your/image.jpg… --- ## [ECE Fundamentals Lab 2 Step 4 - Access Cloud UI Error](https://discuss.elastic.co/t/ece-fundamentals-lab-2-step-4-access-cloud-ui-error/280446)
**Author:** [@reuben.james](https://discuss.elastic.co/u/reuben.james)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 8:56am UTC](https://discuss.elastic.co/t/ece-fundamentals-lab-2-step-4-access-cloud-ui-error/280446 "2021-08-05T08:56:37Z")
When I attempt to access the Cloud UI externally after setup it fails for both http/https. Access via the terminal on localhost addresses (name/IP) work fine/index.html is accessible. Access via Browser on Public DNS a… --- ## [Delay in response after using function\_score for sorting of documents according to field match](https://discuss.elastic.co/t/delay-in-response-after-using-function-score-for-sorting-of-documents-according-to-field-match/280113)
**Author:** [@AshuCh](https://discuss.elastic.co/u/AshuCh)\ **Replies:** 0\ **Last updated:** [July 31, 2021, 6:09am UTC](https://discuss.elastic.co/t/delay-in-response-after-using-function-score-for-sorting-of-documents-according-to-field-match/280113 "2021-07-31T06:09:55Z")
When using function\_score to sort the document on base of score response is taking too much time to come it's in minutes. The problem is I need sorting according to fields. When using boost not getting the relevant data. … --- ## [Use another document's value for script\_score computation](https://discuss.elastic.co/t/use-another-documents-value-for-script-score-computation/280511)
**Author:** [@SatyaAditya](https://discuss.elastic.co/u/SatyaAditya)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 8:44am UTC](https://discuss.elastic.co/t/use-another-documents-value-for-script-score-computation/280511 "2021-08-05T08:44:39Z")
Hi, Is there a way to use a different document's field value in the script\_Score query? My use-case is I have a query which is asked by multiple users and count of the query asked by the user in this way { "… [Previous page](https://discuss.elastic.co/latest.md?page=1538) [Next page](https://discuss.elastic.co/latest.md?page=1540)