# Latest **URL:** https://discuss.elastic.co/latest.md?page=1592 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1593 --- ## [Aggregations to show all values with filter](https://discuss.elastic.co/t/aggregations-to-show-all-values-with-filter/277591)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 7:48pm UTC](https://discuss.elastic.co/t/aggregations-to-show-all-values-with-filter/277591 "2021-07-01T19:48:37Z")
Hello, I am trying to get all aggregations on specific field with filter same as exclude facet in solr If I run below query GET /measurement/\_search { "query": { "query\_string": { "query": "\*" } }, … --- ## [Elastic has a large number os rejections search](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097)
**Author:** [@guimap](https://discuss.elastic.co/u/guimap)\ **Replies:** 8\ **Last updated:** [July 1, 2021, 6:31pm UTC](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097 "2021-07-01T18:31:10Z")
Hi guys Recently my elasticsearch are returning 429 HTTP code for all \_search requests, after few search, i noticed that has a large number of rejected search in my threads node\_name name active rejected … --- ## [Filebeat Error on Widows Machine](https://discuss.elastic.co/t/filebeat-error-on-widows-machine/277562)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 5:49pm UTC](https://discuss.elastic.co/t/filebeat-error-on-widows-machine/277562 "2021-07-01T17:49:51Z")
How do I troubleshoot the following error? PS C:\\Program Files\\Filebeat\> .\\filebeat.exe -e 2021-07-01T12:20:50.286+0100 ERROR \[syslog\] syslog/input.go:155 Error starting the servererrorlisten tcp 127.0.… --- ## [Creating Index for different Systems is problematic](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516)
**Author:** [@Saumyadipta\_Sarkar](https://discuss.elastic.co/u/Saumyadipta_Sarkar)\ **Replies:** 9\ **Last updated:** [July 1, 2021, 5:19pm UTC](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516 "2021-07-01T17:19:09Z")
When I create an Index in Kibana and Search specific logs using query its giving me correct response. But Then if I want to open the URL composed with queries from any other system then its asking me to create an Index a… --- ## [How to interact with .NET NEST object methods from powershell?](https://discuss.elastic.co/t/how-to-interact-with-net-nest-object-methods-from-powershell/276568)
**Author:** [@dreic](https://discuss.elastic.co/u/dreic)\ **Replies:** 7\ **Last updated:** [July 1, 2021, 4:53pm UTC](https://discuss.elastic.co/t/how-to-interact-with-net-nest-object-methods-from-powershell/276568 "2021-07-01T16:53:05Z")
How to call method of .NET object in powershell (Elasticsearch NEST .NET client). This is basic example of .NET code for NEST client and I am trying to write PS equivalent but I am failing in setting object value. Is thi… --- ## [Inrepolation logstash 7.11.1](https://discuss.elastic.co/t/inrepolation-logstash-7-11-1/277571)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 4:28pm UTC](https://discuss.elastic.co/t/inrepolation-logstash-7-11-1/277571 "2021-07-01T16:28:09Z")
I haw been logstash version 6.X and my logstash output S3 worked. I use prefix at output: prefix =\> “dillinger-stat-message/%{+YYYY.MM.dd}/%{host\[name\]}/%{source}” when I migrate to logstash version 7.11.1(docker, file… --- ## [1 of 21 shards failed](https://discuss.elastic.co/t/1-of-21-shards-failed/276797)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 13\ **Last updated:** [July 1, 2021, 4:27pm UTC](https://discuss.elastic.co/t/1-of-21-shards-failed/276797 "2021-07-01T16:27:51Z")
Привет товарищи! Ни у кого не вываливалось подобное сообщение в Кибане (1 of 21 shards failed)? Оно возникает когда включаю визуализацию 3х таблиц с логами nginx с выборкой за +-3 часа (не только с ним проблема) и когда … --- ## [Filebeat make update fails for new custom module](https://discuss.elastic.co/t/filebeat-make-update-fails-for-new-custom-module/277578)
**Author:** [@Jerry\_Tian](https://discuss.elastic.co/u/Jerry_Tian)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 4:20pm UTC](https://discuss.elastic.co/t/filebeat-make-update-fails-for-new-custom-module/277578 "2021-07-01T16:20:21Z")
I followed the instructions from here: Creating a New Filebeat Module | Beats Developer Guide \[master\] | Elastic. make create-module MODULE={module} make create-fileset MODULE={module} FILESET={fileset} make create-fiel… --- ## [Unable to push documents and index patterns in indexes in kibana plugin using core api](https://discuss.elastic.co/t/unable-to-push-documents-and-index-patterns-in-indexes-in-kibana-plugin-using-core-api/277508)
**Author:** [@kibanaPluginDev](https://discuss.elastic.co/u/kibanaPluginDev)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 3:38pm UTC](https://discuss.elastic.co/t/unable-to-push-documents-and-index-patterns-in-indexes-in-kibana-plugin-using-core-api/277508 "2021-07-01T15:38:52Z")
I am unable to push the documents in the newly created index and add new fields to it using the kibana core API . Although I was able to do it with the dev tool. i want to implement this feature in my plugin to add docum… --- ## [Authentications zero successes - SIEM](https://discuss.elastic.co/t/authentications-zero-successes-siem/276707)
**Author:** [@fabinho1314](https://discuss.elastic.co/u/fabinho1314)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 3:25pm UTC](https://discuss.elastic.co/t/authentications-zero-successes-siem/276707 "2021-07-01T15:25:02Z")
Hi there, I deployed with azure the solution "Elasticsearch (Self-Managed)" and im getting an odd error. When i go to the SIEM part \> Hosts \> Authentications, it only returns fails and zero successes as per the image b… --- ## [Dynamic custom fields with numeric and date range queries](https://discuss.elastic.co/t/dynamic-custom-fields-with-numeric-and-date-range-queries/277574)
**Author:** [@nbiondic](https://discuss.elastic.co/u/nbiondic)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 3:14pm UTC](https://discuss.elastic.co/t/dynamic-custom-fields-with-numeric-and-date-range-queries/277574 "2021-07-01T15:14:51Z")
We have a requirement to support custom search fields for our users. Each user should have an ability to create their own fields which can than be searched through by using our built-in filtering mechanism Our initial i… --- ## [How to create a user defined data table visualization](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 3:06pm UTC](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540 "2021-07-01T15:06:26Z")
Hi I have been using Kibana dashboard to monitor my Raspberry Pi devices health. Each raspberry pi sends its health log to elasticsearch and from their I have dashboard which then have multiple visualization to monitor … --- ## [How to create a master list of devices and compare with the input logs to show in Kibana](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 2:59pm UTC](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569 "2021-07-01T14:59:43Z")
Hi I have 20 Raspberry Pi devices installed. They all are uploading data to elasticsearch and I can see the online devices in kibana dashboard. But along with online, I also want to see the list of device name which are… --- ## [Индексы](https://discuss.elastic.co/t/topic/277567)
**Author:** [@\_LA](https://discuss.elastic.co/u/_LA)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 2:58pm UTC](https://discuss.elastic.co/t/topic/277567 "2021-07-01T14:58:26Z")
Подскажите пожалуйста, как и где в эластике посмотреть уже имеющуюся взаимосвязь индексов со всеми полями? --- ## [Creating custom module for filebeat](https://discuss.elastic.co/t/creating-custom-module-for-filebeat/277566)
**Author:** [@Jerry\_Tian](https://discuss.elastic.co/u/Jerry_Tian)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 2:53pm UTC](https://discuss.elastic.co/t/creating-custom-module-for-filebeat/277566 "2021-07-01T14:53:05Z")
I was watching this webinar Build Your Own Filebeat Module | Elastic to learn how to create my own module. I wanted to test the pipeline.json file that I wrote for a custom log file but I'm not sure how to do it. In the … --- ## [Slow Performance of Elastic Search with Spark](https://discuss.elastic.co/t/slow-performance-of-elastic-search-with-spark/277101)
**Author:** [@Hardik\_Aggarwal](https://discuss.elastic.co/u/Hardik_Aggarwal)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 2:48pm UTC](https://discuss.elastic.co/t/slow-performance-of-elastic-search-with-spark/277101 "2021-07-01T14:48:46Z")
I am trying to read the data from Elastic Search into a dataframe using Java ES-Spark-connector.. Now when I try to execute a query for example count() on the dataframe, the performance is dismal. For a 3Gb data it takes… --- ## [How to ignore URL when searching using ElasticSearch？](https://discuss.elastic.co/t/how-to-ignore-url-when-searching-using-elasticsearch/277443)
**Author:** [@bobfang1992](https://discuss.elastic.co/u/bobfang1992)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:27pm UTC](https://discuss.elastic.co/t/how-to-ignore-url-when-searching-using-elasticsearch/277443 "2021-07-01T14:27:54Z")
Hi，I have a set of documents which may contains some texts, but may have URLs inside them: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam tincidunt metus a convallis imperdiet. Praesent interdum magna u… --- ## [Need a script field tag to calculate time difference](https://discuss.elastic.co/t/need-a-script-field-tag-to-calculate-time-difference/277438)
**Author:** [@vikram.sablok](https://discuss.elastic.co/u/vikram.sablok)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:27pm UTC](https://discuss.elastic.co/t/need-a-script-field-tag-to-calculate-time-difference/277438 "2021-07-01T14:27:05Z")
\-(minus) this will give me overall time taken for a request. I can use this field to show average time over a period of time. --- ## [Data Table - Display count as a metric and split it by filters](https://discuss.elastic.co/t/data-table-display-count-as-a-metric-and-split-it-by-filters/277259)
**Author:** [@prashu421](https://discuss.elastic.co/u/prashu421)\ **Replies:** 4\ **Last updated:** [July 1, 2021, 2:25pm UTC](https://discuss.elastic.co/t/data-table-display-count-as-a-metric-and-split-it-by-filters/277259 "2021-07-01T14:25:10Z")
Hello, I am working with Kibana through Elasticsearch version 7.4 (AWS Elasticsearch Service), and hoping to build a data table that looks similar to this - Before splitting the count by pipeline id, I am trying to c… --- ## [Difference range query between numeric type and range type](https://discuss.elastic.co/t/difference-range-query-between-numeric-type-and-range-type/277527)
**Author:** [@kr\_junhodo](https://discuss.elastic.co/u/kr_junhodo)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:21pm UTC](https://discuss.elastic.co/t/difference-range-query-between-numeric-type-and-range-type/277527 "2021-07-01T14:21:17Z")
i Think this article says that range type is better way for range query. example 1) doc mapping : start\_date(date) and end\_date(date) query description : start\_date \< criteria && criteria \< end\_date via range query … --- ## [Ingest pipeline add field with date in the future](https://discuss.elastic.co/t/ingest-pipeline-add-field-with-date-in-the-future/277489)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 2:11pm UTC](https://discuss.elastic.co/t/ingest-pipeline-add-field-with-date-in-the-future/277489 "2021-07-01T14:11:16Z")
Via an ingest pipeline using a processor such as a script (similar to this) or another processor is it simple to add a field with the date x days (a field on the ingested doc) after its ingested. Such that a doc field:… --- ## [Watcher rule query on the same row data](https://discuss.elastic.co/t/watcher-rule-query-on-the-same-row-data/277463)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:06pm UTC](https://discuss.elastic.co/t/watcher-rule-query-on-the-same-row-data/277463 "2021-07-01T14:06:53Z")
I have a use case where i fetch set of records from elastic search in my Webhook watcher rule. The retrieved records contains two column (say x & y), In the watcher rule body i would like to loop the data and include on… --- ## [Importing dashboard and index pattern on ECK](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 2:02pm UTC](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341 "2021-07-01T14:02:51Z")
Hey there, I am currently playing around on ECK on minikube on macOS and I was wondering how to load previously saved Saved Objects. The idea I had was to create a pod, mount the .ndjson and push it with curl to the ki… --- ## [Is it possible to connect Workplace Search with outlook mailboxes?](https://discuss.elastic.co/t/is-it-possible-to-connect-workplace-search-with-outlook-mailboxes/277520)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-workplace-search-with-outlook-mailboxes/277520 "2021-07-01T14:02:27Z")
Hello, I'm going to start a project for which I have several data sources to index : Sharepoint Online, Salesforce, Custom Database, and Outlook mailboxes. Is there a connector for Outlook ? And is it possible to manage… --- ## [Programmatically rename (re-title) Kibana index patterns](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 1:40pm UTC](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398 "2021-07-01T13:40:38Z")
I've developed a set of Kibana dashboards that use about a dozen index patterns with the following structure: product\_x-table\_name-\* where product\_x is a fixed string and table\_name has a dozen or so values. Example in… --- ## [Elasticsearch cannot up because /org/freedesktop/PolicyKit1/AuthenticationAgent Blocked](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464)
**Author:** [@kemalkolcuoglu](https://discuss.elastic.co/u/kemalkolcuoglu)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464 "2021-07-01T13:18:11Z")
Hello Everyone, Cluster version: 7.7.0 OS Version: Centos 7.9 Java Version: Java 8 We have an issue with Elasticsearch when we try to up the service. journalctl -xe output: Jun 30 08:59:10 elk-master-2 systemd\[1\]: … --- ## [ES 7.11 Heap Out of memory error](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478)
**Author:** [@tmathew](https://discuss.elastic.co/u/tmathew)\ **Replies:** 4\ **Last updated:** [July 1, 2021, 1:01pm UTC](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478 "2021-07-01T13:01:04Z")
Hi ! We upgraded from 2.4 to 7.11, we are having below issues all around the ES. ES data nodes are going down alternatively, and it is due to Heap Out of memory issues. Today morning we did re-indexing around 100k/s a… --- ## [How to fetch Kibana APi logs in Dashboard using Powershell](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369)
**Author:** [@Sahithi\_V](https://discuss.elastic.co/u/Sahithi_V)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 12:34pm UTC](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369 "2021-07-01T12:34:43Z")
Recently part of automation we are trying to fetch kibana dashboard apis through any script lang ie Python /powershell . Tried to fetch with Rest APis, but through unable to connect. Server of Elastic search looks somet… --- ## [Function from filter block](https://discuss.elastic.co/t/function-from-filter-block/277547)
**Author:** [@Velly](https://discuss.elastic.co/u/Velly)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 11:46am UTC](https://discuss.elastic.co/t/function-from-filter-block/277547 "2021-07-01T11:46:10Z")
Hello! I am a new user of ELK. I am trying to understand how works SIEM parser «1». In filter block I see: filter { load\_source\_mapper\_filters(mcsevt). Mcs is service of agent that picks up Windows logs. I don’t un… --- ## [Cirrus Search setting with elastic search in mediawiki , not showing auto suggest when typing in search engine](https://discuss.elastic.co/t/cirrus-search-setting-with-elastic-search-in-mediawiki-not-showing-auto-suggest-when-typing-in-search-engine/277546)
**Author:** [@Pooja\_Sharma](https://discuss.elastic.co/u/Pooja_Sharma)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 11:38am UTC](https://discuss.elastic.co/t/cirrus-search-setting-with-elastic-search-in-mediawiki-not-showing-auto-suggest-when-typing-in-search-engine/277546 "2021-07-01T11:38:29Z")
Hi iam using, MediaWiki1.35.1 \[PHP\]7.4.15 \[Elasticsearch\] 6.5.4 Iam geeting result from my search engine.But ,not showing auto suggest when typing in search engine. In console iam able to see error {"error":{"code":… [Previous page](https://discuss.elastic.co/latest.md?page=1591) [Next page](https://discuss.elastic.co/latest.md?page=1593)