# Latest **URL:** https://discuss.elastic.co/latest.md?page=1567 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1568 --- ## [Missing org.elasticsearch.test:logger-usage:7.10.2](https://discuss.elastic.co/t/missing-org-elasticsearch-test7-10-2/278893)
**Author:** [@p4paul](https://discuss.elastic.co/u/p4paul)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 9:48am UTC](https://discuss.elastic.co/t/missing-org-elasticsearch-test7-10-2/278893 "2021-07-19T09:48:13Z")
It seems a few Jars are missing in mavenCentral.... To start with: org.elasticsearch.test:logger-usage:7.10.2 I was trying to build a esplugin for Elastic 7.10.2 Error: Execution failed for task ':loggerUsageCheck'. … --- ## [Index in certain set of nodes](https://discuss.elastic.co/t/index-in-certain-set-of-nodes/278920)
**Author:** [@Roman\_Kagan](https://discuss.elastic.co/u/Roman_Kagan)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:45am UTC](https://discuss.elastic.co/t/index-in-certain-set-of-nodes/278920 "2021-07-19T09:45:34Z")
Hello: I have 5 nodes cluster - would it be possible to set the primary and replicas to be on certain nodes and not others. For example, I'd like to achieve that index-1 would be on node-a, node-b and node-c and NOT on… --- ## [TimeValue - number\_format\_exception - Java client](https://discuss.elastic.co/t/timevalue-number-format-exception-java-client/279015)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:36am UTC](https://discuss.elastic.co/t/timevalue-number-format-exception-java-client/279015 "2021-07-19T09:36:43Z")
I have a search request using PointInTimeBuilder: PointInTimeBuilder pointInTimeBuilder = new PointInTimeBuilder("id..."); pointInTimeBuilder.setKeepAlive(TimeValue.timeValueSeconds(66)); The keep\_alive value is 66 sec… --- ## [How to add http response header in Elasticsearch](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981)
**Author:** [@yupengj](https://discuss.elastic.co/u/yupengj)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981 "2021-07-19T09:12:23Z")
I encountered three security-related issues when using elasticserrch version 7.6.1. Thank you for your help. How does elasticserrch configure http response headers, such as X-Content-Type-Options, X-XSS-Protection, Con… --- ## [Useragent information](https://discuss.elastic.co/t/useragent-information/277786)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 8:56am UTC](https://discuss.elastic.co/t/useragent-information/277786 "2021-07-19T08:56:04Z")
Hi, i had parsed netflow via filebeat 7.7.0 and send it to logstash 7.6.2 then elasticsearch 7.6.2, but i see the agent field is only about filebeat, not the client device information. "agent" =\> { "i… --- ## [Date type changed to text after upgrading from elastic and kiban 6.4.1 to 7.8.0](https://discuss.elastic.co/t/date-type-changed-to-text-after-upgrading-from-elastic-and-kiban-6-4-1-to-7-8-0/277803)
**Author:** [@karim.zahar](https://discuss.elastic.co/u/karim.zahar)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 8:07am UTC](https://discuss.elastic.co/t/date-type-changed-to-text-after-upgrading-from-elastic-and-kiban-6-4-1-to-7-8-0/277803 "2021-07-19T08:07:38Z")
hello, I have developed a java springboot batch that collect data from middleware logs and insert it to elastic index, the index is created by the batch with some fields that have date type (datein, dateout...). After … --- ## [Exiting: Index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/276274)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 5\ **Last updated:** [July 19, 2021, 7:57am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/276274 "2021-07-19T07:57:08Z")
While running filebeat setup -e I'm getting this error. Can anyone help me? @Marius\_Iversen 2021-06-17T01:04:54.187-0700 INFO instance/beat.go:665 Home path: \[/usr/share/filebeat\] Config path: \[/etc/filebeat\] Data path… --- ## [Performance issue in Azure](https://discuss.elastic.co/t/performance-issue-in-azure/279026)
**Author:** [@Kai\_Shen](https://discuss.elastic.co/u/Kai_Shen)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 7:24am UTC](https://discuss.elastic.co/t/performance-issue-in-azure/279026 "2021-07-19T07:24:08Z")
Hi, a customer is running into performance issues on Azure. His environment: 3 nodes cluster, 8 GB RAM each. 1 index (around 10 fields), 4 GB storage for this index, so very small. Here are his observations: A query i… --- ## [What is the best way to store unique values of a field](https://discuss.elastic.co/t/what-is-the-best-way-to-store-unique-values-of-a-field/278548)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 7:28am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-store-unique-values-of-a-field/278548 "2021-07-19T07:28:51Z")
Hi, I have a raw data index, every document has the fields: device, country, browser, utm and many more... I need a way to extract the unique values of each field and store all of them in an index lets call it 'lookups… --- ## [Query for specific pair of fields in Elastic](https://discuss.elastic.co/t/query-for-specific-pair-of-fields-in-elastic/279025)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 7:28am UTC](https://discuss.elastic.co/t/query-for-specific-pair-of-fields-in-elastic/279025 "2021-07-19T07:28:20Z")
Hello, I have two documents: POST query\_test/\_doc { "field": \[ { "field1": "Pam", "field2": "Beesly" }, { "field1": "Jim", "field2": "Halpert" } \] } POST query\_test/\_doc { … --- ## [Forward azure logs with syslog?](https://discuss.elastic.co/t/forward-azure-logs-with-syslog/279022)
**Author:** [@JaVa](https://discuss.elastic.co/u/JaVa)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 6:57am UTC](https://discuss.elastic.co/t/forward-azure-logs-with-syslog/279022 "2021-07-19T06:57:59Z")
Sorry for the dumb questions (newbie here) but is there any way of forwarding azure logs from Logstash to another SIEM product? I configured our ELK stack to receive Azure events from the cloud with Logstash azure module… --- ## [Not able to get Floating value in Kibana](https://discuss.elastic.co/t/not-able-to-get-floating-value-in-kibana/279021)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 6:57am UTC](https://discuss.elastic.co/t/not-able-to-get-floating-value-in-kibana/279021 "2021-07-19T06:57:20Z")
Hello All , I am trying to display one SQL column value TIME\_DIFF in Kibana. which is shown below. But it is displaying in Kibana as shown below . I am trying to convert this using mutate , \> filter { \> mutate { … --- ## [Filebeat: How can I add tags to module input in filebeat?](https://discuss.elastic.co/t/filebeat-how-can-i-add-tags-to-module-input-in-filebeat/276781)
**Author:** [@connectgeeks](https://discuss.elastic.co/u/connectgeeks)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 6:38am UTC](https://discuss.elastic.co/t/filebeat-how-can-i-add-tags-to-module-input-in-filebeat/276781 "2021-07-19T06:38:36Z")
I'm using filebeat module and want to use tag so that I can process different input files based on tags. How can I achieve that ? Below tags doesn't seems to work. modules.d/elasticsearch.yml - module: elasticsearch … --- ## [Deploy Agents on Multiple Servers](https://discuss.elastic.co/t/deploy-agents-on-multiple-servers/278830)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 6:30am UTC](https://discuss.elastic.co/t/deploy-agents-on-multiple-servers/278830 "2021-07-19T06:30:40Z")
I have to deploy winlogbeat agent on 250 windows servers, what would be the best and efficient way of doing this? --- ## [How to Deploy Agents on Multiple Servers](https://discuss.elastic.co/t/how-to-deploy-agents-on-multiple-servers/279018)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 6:29am UTC](https://discuss.elastic.co/t/how-to-deploy-agents-on-multiple-servers/279018 "2021-07-19T06:29:37Z")
Hello team, I have installed beat agents on single machine and I want to get them installed (filebeat) on 500 windows and 200 linux machine. I don't want to login to each and every machine and install them. I want to r… --- ## [Elasticsearch storage problem](https://discuss.elastic.co/t/elasticsearch-storage-problem/277850)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 5\ **Last updated:** [July 19, 2021, 5:27am UTC](https://discuss.elastic.co/t/elasticsearch-storage-problem/277850 "2021-07-19T05:27:27Z")
Hi guys, I am facing this problem from time to time, would like to know where does this come from and how can I get rid of this completely. the problem stays a few minutes u d after that goes away and can access my ES i… --- ## [Combination of APM, RUM agent and Opentelemetry agents](https://discuss.elastic.co/t/combination-of-apm-rum-agent-and-opentelemetry-agents/278887)
**Author:** [@Stanislav\_Samek](https://discuss.elastic.co/u/Stanislav_Samek)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 3:08am UTC](https://discuss.elastic.co/t/combination-of-apm-rum-agent-and-opentelemetry-agents/278887 "2021-07-19T03:08:57Z")
Hi, it's possible to combine Elastic RUM agent, Elastic APM server and Opentelemetry? I have a case where Elastic RUM agent (frontend) is sending data directly to APM server and Opentelemetry agents (backend) are sendin… --- ## [Index.final\_pipeline not working as expected](https://discuss.elastic.co/t/index-final-pipeline-not-working-as-expected/276195)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 2:19am UTC](https://discuss.elastic.co/t/index-final-pipeline-not-working-as-expected/276195 "2021-07-19T02:19:46Z")
Hello, I have a filebeat that uses a module with a ingest pipeline, since I still need to make some transformations I'm trying to use another ingest pipeline with the setting index.final\_pipeline in the index settings. … --- ## [Can we create alias for other aliases?](https://discuss.elastic.co/t/can-we-create-alias-for-other-aliases/278994)
**Author:** [@im-pratham](https://discuss.elastic.co/u/im-pratham)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:11am UTC](https://discuss.elastic.co/t/can-we-create-alias-for-other-aliases/278994 "2021-07-19T02:11:38Z")
How can i create alias with other aliases? Is this possible? --- ## [Removal of Facebook authentication](https://discuss.elastic.co/t/removal-of-facebook-authentication/279004)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 1:09am UTC](https://discuss.elastic.co/t/removal-of-facebook-authentication/279004 "2021-07-19T01:09:33Z")
Unfortunately we have had to remove Facebook authentication for our forums. Facebook has told us; As a reminder, your app is currently in violation of Developer Policy 3.2: “Only incentivize a person to log into your … --- ## [Increase in response time for aggregations in 7.10.1](https://discuss.elastic.co/t/increase-in-response-time-for-aggregations-in-7-10-1/276295)
**Author:** [@rgopalan](https://discuss.elastic.co/u/rgopalan)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 12:54am UTC](https://discuss.elastic.co/t/increase-in-response-time-for-aggregations-in-7-10-1/276295 "2021-07-19T00:54:56Z")
Hi, We recently upgraded our ElasticSearch cluster from 7.7 to 7.10.1 and we are seeing an increase in the response time. One query that uses aggregations has seen the response time increase by 1-1.5s. Setup \* 3 Mast… --- ## [Functionbeat ignores default region - only deploys to us-east-1 (AWS)](https://discuss.elastic.co/t/functionbeat-ignores-default-region-only-deploys-to-us-east-1-aws/276002)
**Author:** [@Phuurl](https://discuss.elastic.co/u/Phuurl)\ **Replies:** 4\ **Last updated:** [July 18, 2021, 7:59pm UTC](https://discuss.elastic.co/t/functionbeat-ignores-default-region-only-deploys-to-us-east-1-aws/276002 "2021-07-18T19:59:38Z")
Hey, Trying to deploy the latest Functionbeat version (7.13.x), and it appears that Functionbeat is ignoring the AWS\_DEFAULT\_REGION environment variable when deploying - it always deploys to North Virginia (us-east-1) i… --- ## [Kibana Circuit breaker exception -Data too large, data for \[\\]](https://discuss.elastic.co/t/kibana-circuit-breaker-exception-data-too-large-data-for-http-request/278959)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [July 18, 2021, 7:24pm UTC](https://discuss.elastic.co/t/kibana-circuit-breaker-exception-data-too-large-data-for-http-request/278959 "2021-07-18T19:24:42Z")
Hi all, One of my Kibana instances crashes everytime with below message: {"statusCode":401,"error":"Unauthorized","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\\] would be \[104… --- ## [Writing DSL Query to find documents for dyanmic fields in the index](https://discuss.elastic.co/t/writing-dsl-query-to-find-documents-for-dyanmic-fields-in-the-index/278985)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 1\ **Last updated:** [July 18, 2021, 4:35pm UTC](https://discuss.elastic.co/t/writing-dsl-query-to-find-documents-for-dyanmic-fields-in-the-index/278985 "2021-07-18T16:35:06Z")
Hi All, I want to write a DSL Query that will fetch results from fields. GET condition/\_search { "query": { "range" : { "tag.value" : { "gte" : "operational.threshold", … --- ## [Metricbeat issue](https://discuss.elastic.co/t/metricbeat-issue/278743)
**Author:** [@raj\_mouriya](https://discuss.elastic.co/u/raj_mouriya)\ **Replies:** 2\ **Last updated:** [July 18, 2021, 2:20pm UTC](https://discuss.elastic.co/t/metricbeat-issue/278743 "2021-07-18T14:20:30Z")
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to https://localhost:5601/api/status fails: fail to execute the HTTP GET request: Get "https://localhost:5601/api/status": dial tcp \[:… --- ## [Unknown issue with Elastic snapshots](https://discuss.elastic.co/t/unknown-issue-with-elastic-snapshots/278442)
**Author:** [@kcarsey](https://discuss.elastic.co/u/kcarsey)\ **Replies:** 1\ **Last updated:** [July 18, 2021, 1:49pm UTC](https://discuss.elastic.co/t/unknown-issue-with-elastic-snapshots/278442 "2021-07-18T13:49:27Z")
I will provide a bit of backstory information here as I think it could be relevant. I run several ec2 Elastic clusters in AWS, all being backed up by snapshot to aws s3. I have recently created two new clusters in us-e… --- ## [S3 bucket size holding the snapshots is 2-2.5x of the total disk used of the cluster](https://discuss.elastic.co/t/s3-bucket-size-holding-the-snapshots-is-2-2-5x-of-the-total-disk-used-of-the-cluster/278944)
**Author:** [@MitParekh](https://discuss.elastic.co/u/MitParekh)\ **Replies:** 3\ **Last updated:** [July 17, 2021, 8:01pm UTC](https://discuss.elastic.co/t/s3-bucket-size-holding-the-snapshots-is-2-2-5x-of-the-total-disk-used-of-the-cluster/278944 "2021-07-17T20:01:49Z")
Hi, I have a cluster (ES 7.11.1) with 6 nodes and the total disk used is roughly ~4.5TB. I store logging data in it using data streams. My data stream patterns are like abc-lmn-xyz. The data retention period is 14 days. … --- ## [Composite aggregation on runtime field in 6.2](https://discuss.elastic.co/t/composite-aggregation-on-runtime-field-in-6-2/278990)
**Author:** [@strutdepot-discsn](https://discuss.elastic.co/u/strutdepot-discsn)\ **Replies:** 0\ **Last updated:** [July 18, 2021, 1:15pm UTC](https://discuss.elastic.co/t/composite-aggregation-on-runtime-field-in-6-2/278990 "2021-07-18T13:15:09Z")
I have "city", "state" and "country" fields in the index and need to calculate the document count by each city. The index contains more than 2 million documents. This was my first stab at it: get students/\_search { "… --- ## [Expected \[SRART\_OBJECT\] but found \[START\_ARRAY\]](https://discuss.elastic.co/t/expected-srart-object-but-found-start-array/278667)
**Author:** [@Eran1](https://discuss.elastic.co/u/Eran1)\ **Replies:** 4\ **Last updated:** [July 18, 2021, 12:23pm UTC](https://discuss.elastic.co/t/expected-srart-object-but-found-start-array/278667 "2021-07-18T12:23:13Z")
Hi, I'm using python to connect to elastic as following: import urllib3 from elasticsearch import Elasticsearch from elasticsearch.connection import create\_ssl\_context import configparser def get\_es\_session(es\_u… --- ## [Could Update/Get/Delete an document on an alias accociated to multiple indexes?](https://discuss.elastic.co/t/could-update-get-delete-an-document-on-an-alias-accociated-to-multiple-indexes/278986)
**Author:** [@light\_chen](https://discuss.elastic.co/u/light_chen)\ **Replies:** 1\ **Last updated:** [July 18, 2021, 12:02pm UTC](https://discuss.elastic.co/t/could-update-get-delete-an-document-on-an-alias-accociated-to-multiple-indexes/278986 "2021-07-18T12:02:25Z")
In order to reduce the size of index (I hear that it is better to keep the size lower than 25~30GB per index), I split the data into several indexes using Rollover API. Then I create two alias, in my expectation, the on… [Previous page](https://discuss.elastic.co/latest.md?page=1566) [Next page](https://discuss.elastic.co/latest.md?page=1568)