# Latest **URL:** https://discuss.elastic.co/latest.md?page=1560 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1561 --- ## [Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/279405)
**Author:** [@scriptdil](https://discuss.elastic.co/u/scriptdil)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 3:51pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/279405 "2021-07-22T15:51:37Z")
Hi i am new here. I have been trying to install Elastic search on a second server without success. I cant figure out what is wrong Error Message: Job for elasticsearch.service failed because the control process exited … --- ## [Kibana not starting fatal error is coming up](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390)
**Author:** [@0d153a83fd88577dba87](https://discuss.elastic.co/u/0d153a83fd88577dba87)\ **Replies:** 4\ **Last updated:** [July 22, 2021, 3:38pm UTC](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390 "2021-07-22T15:38:03Z")
log \[15:12:03.239\] \[fatal\]\[root\] Error: Cannot find module '../../../task\_manager/server' Require stack: - /etc/default/kibana-7.13.0-linux-x86\_64/x-pack/plugins/actions/server/cleanup\_failed\_executions/ensure\_schedule… --- ## [Float value is matched as integer](https://discuss.elastic.co/t/float-value-is-matched-as-integer/279406)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 3:22pm UTC](https://discuss.elastic.co/t/float-value-is-matched-as-integer/279406 "2021-07-22T15:22:07Z")
I've indexed the following document: { "\_index": "index\_name", "\_type": "\_doc", "\_id": "ePvEB-X7TNSfKMdwxOcGTw", "\_score": 1.0, "\_source"… --- ## [Boosting per field and index when searching multiple indexes](https://discuss.elastic.co/t/boosting-per-field-and-index-when-searching-multiple-indexes/279287)
**Author:** [@bsharma](https://discuss.elastic.co/u/bsharma)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 3:09pm UTC](https://discuss.elastic.co/t/boosting-per-field-and-index-when-searching-multiple-indexes/279287 "2021-07-22T15:09:27Z")
I am searching multiple indexes. I want to be able to boost specific fields of specific indexes. I could not find a way to specify boost for a field of a index. I found examples in documentation where boosts are specifie… --- ## [Email alert body readable format](https://discuss.elastic.co/t/email-alert-body-readable-format/279344)
**Author:** [@saswatmishra94](https://discuss.elastic.co/u/saswatmishra94)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 6:26am UTC](https://discuss.elastic.co/t/email-alert-body-readable-format/279344 "2021-07-22T06:26:02Z")
Hi All , I have been recently introduced to ELK and been working on it for last 3-4 weeks . This is a totally new integration we are doing . I have gone through lot of articles which helped me a lot in achieving differe… --- ## [Elasticsearch lookup email from different index](https://discuss.elastic.co/t/elasticsearch-lookup-email-from-different-index/279302)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elasticsearch-lookup-email-from-different-index/279302 "2021-07-22T15:03:38Z")
PUT audit/doc { "userid": "some\_guid", "operation": "performed action a" } PUT audit/doc { "userid": "some\_guid", "operation": "performed action b" } PUT audit/doc { "userid": "some\_guid", "operation": "performed action… --- ## [Lumberjack vs TCP for encrypted and compressed communication between logstash instances](https://discuss.elastic.co/t/lumberjack-vs-tcp-for-encrypted-and-compressed-communication-between-logstash-instances/279400)
**Author:** [@Akshay\_Sarvankar](https://discuss.elastic.co/u/Akshay_Sarvankar)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 2:54pm UTC](https://discuss.elastic.co/t/lumberjack-vs-tcp-for-encrypted-and-compressed-communication-between-logstash-instances/279400 "2021-07-22T14:54:06Z")
Hi All, We have implemented Logstash to Logstash communication using TCP output and input in source and destination logstash instances. This communication is encrypted with SSL certificate. As per elastic documention, … --- ## [Best way to parse response from /\_nodes/stats API using java](https://discuss.elastic.co/t/best-way-to-parse-response-from-nodes-stats-api-using-java/279356)
**Author:** [@Praveen\_Atluri](https://discuss.elastic.co/u/Praveen_Atluri)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 2:53pm UTC](https://discuss.elastic.co/t/best-way-to-parse-response-from-nodes-stats-api-using-java/279356 "2021-07-22T14:53:00Z")
I am trying to write a java program which frequently calls the /\_nodes/stats endpoint and other metrics endpoints and plot them. What is the best way to parse the output from above endpoints and extract specific data fro… --- ## [Applying a filter to the last x nested documents in the selected period, to find if one of them match a condition](https://discuss.elastic.co/t/applying-a-filter-to-the-last-x-nested-documents-in-the-selected-period-to-find-if-one-of-them-match-a-condition/279399)
**Author:** [@ChqThomas](https://discuss.elastic.co/u/ChqThomas)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 2:48pm UTC](https://discuss.elastic.co/t/applying-a-filter-to-the-last-x-nested-documents-in-the-selected-period-to-find-if-one-of-them-match-a-condition/279399 "2021-07-22T14:48:40Z")
Hi, I'm trying to retrieve the number of users who bought the product "123" at least once in their last three sales in the selected period. With this data structure : mapping : { "properties": { "user\_id": { … --- ## [ILM policy keeps reverting - disabling delete phase](https://discuss.elastic.co/t/ilm-policy-keeps-reverting-disabling-delete-phase/279317)
**Author:** [@mw77](https://discuss.elastic.co/u/mw77)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 2:33pm UTC](https://discuss.elastic.co/t/ilm-policy-keeps-reverting-disabling-delete-phase/279317 "2021-07-22T14:33:34Z")
Hi Guys, I have create a ILM policy which has around 90 indices attached to it. from the UI I have created a policy and below is the request when I click on show request. I am enabling the delete phase after rollover … --- ## [Filter Script with array](https://discuss.elastic.co/t/filter-script-with-array/279190)
**Author:** [@hdlinh1808](https://discuss.elastic.co/u/hdlinh1808)\ **Replies:** 3\ **Last updated:** [July 22, 2021, 2:29pm UTC](https://discuss.elastic.co/t/filter-script-with-array/279190 "2021-07-22T14:29:42Z")
Hi everyone, I have a question about filter script for array in ES I have documents or schema like this: { "name": "linh", "array": \[ { "ts": 1, … --- ## [\_search filter data: is possible to do this?](https://discuss.elastic.co/t/search-filter-data-is-possible-to-do-this/279387)
**Author:** [@Marcsu](https://discuss.elastic.co/u/Marcsu)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/search-filter-data-is-possible-to-do-this/279387 "2021-07-22T14:27:57Z")
Hi, I'm trying to return only content that do match with a specific field value and not return the rest data of document... I mean, I try to realize a filter over data of document. I'm new in ES. Some idea to do that… --- ## [Gannt chart in Kibana using Vega](https://discuss.elastic.co/t/gannt-chart-in-kibana-using-vega/279241)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 5\ **Last updated:** [July 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/gannt-chart-in-kibana-using-vega/279241 "2021-07-22T14:23:20Z")
Goog Morning. I need to create a Gannt chart using Kibana. I know the first way to do that is using the Visualization section, introducing a Vega code. I need to visualize these fields from an Elastic Search Index: Robo… --- ## [Get The id of the ES document created by FSCrawler](https://discuss.elastic.co/t/get-the-id-of-the-es-document-created-by-fscrawler/278939)
**Author:** [@Francois\_Saab](https://discuss.elastic.co/u/Francois_Saab)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 2:20pm UTC](https://discuss.elastic.co/t/get-the-id-of-the-es-document-created-by-fscrawler/278939 "2021-07-22T14:20:57Z")
When FSCrawler sends a document to ES, i need to associate the \_id of the doc created by FSCrawler with an internal ID in our DB. How to get the \_id of the doc created by FSCrawler each time a new document is being inde… --- ## [Send splunk log using logstash](https://discuss.elastic.co/t/send-splunk-log-using-logstash/279376)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 2\ **Last updated:** [July 22, 2021, 2:05pm UTC](https://discuss.elastic.co/t/send-splunk-log-using-logstash/279376 "2021-07-22T14:05:16Z")
hi eeveryone, i have a splunk server, and i want to migrate splunk's log using logstash to my elasticsearch's server. is it possible? and how it is? --- ## [SQL Permissions for Monitoring Microsoft SQL Server using Metricbeat](https://discuss.elastic.co/t/sql-permissions-for-monitoring-microsoft-sql-server-using-metricbeat/279294)
**Author:** [@mroughton](https://discuss.elastic.co/u/mroughton)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/sql-permissions-for-monitoring-microsoft-sql-server-using-metricbeat/279294 "2021-07-22T14:02:30Z")
I am looking to implement monitoring Microsoft SQL Server using Metricbeat. What are the minimum SQL user permissions needed for performance and transaction log metric sets? --- ## [Advantages of using redis](https://discuss.elastic.co/t/advantages-of-using-redis/279216)
**Author:** [@111387](https://discuss.elastic.co/u/111387)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 1:58pm UTC](https://discuss.elastic.co/t/advantages-of-using-redis/279216 "2021-07-22T13:58:49Z")
Look at some documentation when building the ELK. Sometimes install Redis in front of Logstash. Even though Logstash provides a buffer, is there any advantage to installing Logstash in front? If Redis is present but n… --- ## [Unable to use TSVB visualization even after specifying index](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 5\ **Last updated:** [July 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311 "2021-07-22T13:47:19Z")
I'm trying out TSVB viz on kibana, and the visualization doesnt work as expected . Are there any rules to creating a TSVB viz ? like use a particular date format or visualize only a certain data pattern ? --- ## [Logstash upsert across multiple indexes](https://discuss.elastic.co/t/logstash-upsert-across-multiple-indexes/279307)
**Author:** [@jpchev](https://discuss.elastic.co/u/jpchev)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/logstash-upsert-across-multiple-indexes/279307 "2021-07-22T13:39:51Z")
hi there, I need to import data in elasticsearch with an upsert logic, for this I use the following logstash plugin output { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "myindex-{+YYYY.MM.dd}" doc… --- ## [Possible to have {{context.hits}} return as an array?](https://discuss.elastic.co/t/possible-to-have-context-hits-return-as-an-array/277583)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 1:35pm UTC](https://discuss.elastic.co/t/possible-to-have-context-hits-return-as-an-array/277583 "2021-07-22T13:35:33Z")
Dear all =) I would like to have {{context.hits}} as a JSON array, so I have tried different things. If I put the following in a Kibana rule body {"documents":"{{context.hits}}"} then all the documents are stored as … --- ## [Autocomplete best match is not first in results](https://discuss.elastic.co/t/autocomplete-best-match-is-not-first-in-results/279186)
**Author:** [@net](https://discuss.elastic.co/u/net)\ **Replies:** 3\ **Last updated:** [July 22, 2021, 1:35pm UTC](https://discuss.elastic.co/t/autocomplete-best-match-is-not-first-in-results/279186 "2021-07-22T13:35:02Z")
When I search for "charles sta" the first result in the list is "U.S. Dept. of State, Office of Logistics Management, Charleston" and the second result is "Charles Stark Draper Laboratory, Inc. (CSDL)" The second result… --- ## [\_grokparsefailure but grok debugger looks good](https://discuss.elastic.co/t/grokparsefailure-but-grok-debugger-looks-good/279269)
**Author:** [@baumi](https://discuss.elastic.co/u/baumi)\ **Replies:** 17\ **Last updated:** [July 22, 2021, 1:14pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-grok-debugger-looks-good/279269 "2021-07-22T13:14:39Z")
Hello everyone, I need some help with my grok pattern, because Logstash is not able to parse it. Kibana and other grok debuggers are able to parse the logs. Sample Log: Mar 10 00:59:50\\t1.1.1.1\\ttest@static\\t0/0/0/000… --- ## [How to read the body (json data) of the request in a custom plugin](https://discuss.elastic.co/t/how-to-read-the-body-json-data-of-the-request-in-a-custom-plugin/279375)
**Author:** [@shadowfox38](https://discuss.elastic.co/u/shadowfox38)\ **Replies:** 2\ **Last updated:** [July 22, 2021, 12:37pm UTC](https://discuss.elastic.co/t/how-to-read-the-body-json-data-of-the-request-in-a-custom-plugin/279375 "2021-07-22T12:37:17Z")
I am trying to create a custom plugin which needs to read the body of the request (by body i mean json data that is sent along with the request) so i should be able to read the json data of a request like POST myendpoi… --- ## [How to export forecast data into a destination index](https://discuss.elastic.co/t/how-to-export-forecast-data-into-a-destination-index/279380)
**Author:** [@StephaneB](https://discuss.elastic.co/u/StephaneB)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 12:30pm UTC](https://discuss.elastic.co/t/how-to-export-forecast-data-into-a-destination-index/279380 "2021-07-22T12:30:42Z")
Hello, I'm currently using API to create job, datafeed and associated forecast in order to determine if some predicted values will exceed a specific threshold in the next weeks: if no value exceeds the threshold then … --- ## [Fleet enrollment Ok but doesnt appear on security administration page](https://discuss.elastic.co/t/fleet-enrollment-ok-but-doesnt-appear-on-security-administration-page/279192)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 2\ **Last updated:** [July 22, 2021, 12:28pm UTC](https://discuss.elastic.co/t/fleet-enrollment-ok-but-doesnt-appear-on-security-administration-page/279192 "2021-07-22T12:28:02Z")
Hi there, I cannot find why some servers appears on the security admin page and others not. Can someone point me to the right direction to sort this out? Follow the fleet agent screen: Security Admin page: Also… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.13.2 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-13-2-released/279379)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [July 22, 2021, 12:26pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-13-2-released/279379 "2021-07-22T12:26:07Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.13.2 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elas… --- ## [Is there a way invoke shell script or python script as part of filebeat output or processor](https://discuss.elastic.co/t/is-there-a-way-invoke-shell-script-or-python-script-as-part-of-filebeat-output-or-processor/279252)
**Author:** [@naresh\_b](https://discuss.elastic.co/u/naresh_b)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 12:24pm UTC](https://discuss.elastic.co/t/is-there-a-way-invoke-shell-script-or-python-script-as-part-of-filebeat-output-or-processor/279252 "2021-07-22T12:24:59Z")
As part of LSF accounting file monitoring, need some processing(parsing job\_finish event) for each event entry using LSF API (python or c). Want to keep this agent as simple as possible, hence considering to use only fil… --- ## [How to parse smile serialized files (files with .dat) (files with snap-\* and meta-\* prefixes)](https://discuss.elastic.co/t/how-to-parse-smile-serialized-files-files-with-dat-files-with-snap-and-meta-prefixes/278621)
**Author:** [@shadowfox38](https://discuss.elastic.co/u/shadowfox38)\ **Replies:** 17\ **Last updated:** [July 22, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-parse-smile-serialized-files-files-with-dat-files-with-snap-and-meta-prefixes/278621 "2021-07-22T11:54:27Z")
When Elastic search snapshot deletes fail in between, some dangling indexes are left, which increase the size of the repository. I wanted to find such indexes by referring to the snapshot metadata files. I need help in … --- ## [Field expansion for \[\*\] matches too many fields, limit: 1024, got: 1998](https://discuss.elastic.co/t/field-expansion-for-matches-too-many-fields-limit-1024-got-1998/279168)
**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 10:27am UTC](https://discuss.elastic.co/t/field-expansion-for-matches-too-many-fields-limit-1024-got-1998/279168 "2021-07-22T10:27:12Z")
Hello, We have recently moved from AWS ES 5.x to 7.10. While performing search operation I go get the above error. In total my fields are between 2500 to 4000 for now. I know these values are not good, but this somehow … --- ## [Unable to Fetch data from rollups collector - OFFLINE INSTALL](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector-offline-install/278953)
**Author:** [@Karevavery](https://discuss.elastic.co/u/Karevavery)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 10:20am UTC](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector-offline-install/278953 "2021-07-22T10:20:16Z")
Hi, my kibana service is showing logged warnings and I cannot access the webpage either. error log stating: Cannot read property ‘id’ of undefined\\n at id (/usr/share/kibana/x-pack/legacy/plugins/rollup/server/usage/col… [Previous page](https://discuss.elastic.co/latest.md?page=1559) [Next page](https://discuss.elastic.co/latest.md?page=1561)