# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1599

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1600

---

## [Not whitelisted in reindex.remote.whitelist error with Docker clusters](https://discuss.elastic.co/t/not-whitelisted-in-reindex-remote-whitelist-error-with-docker-clusters/277253)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 3:39pm UTC](https://discuss.elastic.co/t/not-whitelisted-in-reindex-remote-whitelist-error-with-docker-clusters/277253 "2021-06-28T15:39:28Z")

</div>

I have 2 ES docker clusters. I want to re-index some indexes from the smaller docker es cluster to my larger es docker cluster. When i follow the instructions to reindex i get the "not whitelisted in reindex.remote.wh…

---

## [Yet again a run with on prem package-registry issue](https://discuss.elastic.co/t/yet-again-a-run-with-on-prem-package-registry-issue/276294)

<div class="topic-metadata">

**Author:** [@DartShinigami](https://discuss.elastic.co/u/DartShinigami)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 3:12pm UTC](https://discuss.elastic.co/t/yet-again-a-run-with-on-prem-package-registry-issue/276294 "2021-06-28T15:12:07Z")

</div>

I tried the workaround but with no luck any inside that you could provide me. I'm using kibana and elastic on docker ubuntu 20.04 here is my docker compose file for kibana. kib01: image: docker.elastic.co/kibana/kib…

---

## [Search Rate zero in Kibana monitoring dashboard for Suggestion Queries](https://discuss.elastic.co/t/search-rate-zero-in-kibana-monitoring-dashboard-for-suggestion-queries/277197)

<div class="topic-metadata">

**Author:** [@Rosita\_Andrade](https://discuss.elastic.co/u/Rosita_Andrade)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 10:06am UTC](https://discuss.elastic.co/t/search-rate-zero-in-kibana-monitoring-dashboard-for-suggestion-queries/277197 "2021-06-28T10:06:13Z")

</div>

Hey guys, I have an index where all the queries to it are Suggestion Queries. The Kibana monitoring shows the correct indexing rate but the search rate is always 0. When I checked the stats for the index using the stats …

---

## [How can I build verticalBar chart based on some custom calculation](https://discuss.elastic.co/t/how-can-i-build-verticalbar-chart-based-on-some-custom-calculation/276964)

<div class="topic-metadata">

**Author:** [@vivu007x](https://discuss.elastic.co/u/vivu007x)\
**Replies:** 4\
**Last updated:** [June 28, 2021, 2:38pm UTC](https://discuss.elastic.co/t/how-can-i-build-verticalbar-chart-based-on-some-custom-calculation/276964 "2021-06-28T14:38:13Z")

</div>

Hi, I have created a VerticalBar chart in Kibana. I used the Metrics and Buckets option to choose the index and terms. Say, totalValue is an index with values \[available/offline/suspended\] errorValue is an index w…

---

## [elasticsearch-7.14.0-SNAPSHOT and 7.x branch depend on different versions of lucene](https://discuss.elastic.co/t/elasticsearch-7-14-0-snapshot-and-7-x-branch-depend-on-different-versions-of-lucene/277216)

<div class="topic-metadata">

**Author:** [@rafis](https://discuss.elastic.co/u/rafis)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 1:46pm UTC](https://discuss.elastic.co/t/elasticsearch-7-14-0-snapshot-and-7-x-branch-depend-on-different-versions-of-lucene/277216 "2021-06-28T13:46:54Z")

</div>

Hello, https://snapshots.elastic.co/maven/org/elasticsearch/elasticsearch/7.14.0-SNAPSHOT/elasticsearch-7.14.0-SNAPSHOT.pom depends on lucene 8.9.0-snapshot-ddc238e5df8, but 7.x branch of elasticsearch repository - on 8…

---

## [Does Kibana use python in runtime?](https://discuss.elastic.co/t/does-kibana-use-python-in-runtime/277017)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 12:40pm UTC](https://discuss.elastic.co/t/does-kibana-use-python-in-runtime/277017 "2021-06-28T12:40:04Z")

</div>

We saw that xpack has few py files. Hence if we bundle rpm, rpmbuild expects /usr/bin/python. RHEL seems not having python as they have upgraded to python3. So I just wanted to know whether Kibana use python for runtim…

---

## [Kibana7.13 development problems](https://discuss.elastic.co/t/kibana7-13-development-problems/276975)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 12:36pm UTC](https://discuss.elastic.co/t/kibana7-13-development-problems/276975 "2021-06-28T12:36:33Z")

</div>

Hello all, I hope you are doing well! I have been trying to develop Kibana 7.13 and using yarn 1.22.5 and node v14.16.1. It's been a week since I am trying and nothing's happening. I am using windows 10. somebody aske…

---

## [Long ECS-Logged error.stack\_trace not shown in Kibana-Discover Document-Table](https://discuss.elastic.co/t/long-ecs-logged-error-stack-trace-not-shown-in-kibana-discover-document-table/277222)

<div class="topic-metadata">

**Author:** [@cproinger\_rbigroupit](https://discuss.elastic.co/u/cproinger_rbigroupit)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 12:14pm UTC](https://discuss.elastic.co/t/long-ecs-logged-error-stack-trace-not-shown-in-kibana-discover-document-table/277222 "2021-06-28T12:14:38Z")

</div>

The problem is the following: Our Applications use ECS-Logs (Overview | Elastic Common Schema (ECS) Reference \[1.10\] | Elastic) to be indexed by filebeat. We use the default configuration which uses an "ignore\_above: 102…

---

## [Is there any Kibana API endpoint to get index pattern for the current login user or if there is an existing implementation for it?](https://discuss.elastic.co/t/is-there-any-kibana-api-endpoint-to-get-index-pattern-for-the-current-login-user-or-if-there-is-an-existing-implementation-for-it/276941)

<div class="topic-metadata">

**Author:** [@HemaS](https://discuss.elastic.co/u/HemaS)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 11:57am UTC](https://discuss.elastic.co/t/is-there-any-kibana-api-endpoint-to-get-index-pattern-for-the-current-login-user-or-if-there-is-an-existing-implementation-for-it/276941 "2021-06-28T11:57:04Z")

</div>

I'm developing custom Kibana plugin and I want to get the current logged in user information from my plugin server. It would be great if any Kibana API endpoint is available to get such details.

---

## [Mapping multiple properties to a single one](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 11:21am UTC](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966 "2021-06-28T11:21:18Z")

</div>

Hi, Let's say you have a cluster with application logs. And since multiple applications are sending data to the cluster they have different properties. For example, one application will send a log message in the "messag…

---

## [Different number of hits between DSL Query and KQL](https://discuss.elastic.co/t/different-number-of-hits-between-dsl-query-and-kql/277063)

<div class="topic-metadata">

**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 11:11am UTC](https://discuss.elastic.co/t/different-number-of-hits-between-dsl-query-and-kql/277063 "2021-06-28T11:11:50Z")

</div>

Hello everyone, I was curious about working with DSL queries, so I made some tests and I found something strange. I have a winlogbeat-security index which contains windows security events and I am searching logs with …

---

## [Simple variation of counts - Serial differencing](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118)

<div class="topic-metadata">

**Author:** [@efftee](https://discuss.elastic.co/u/efftee)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 10:48am UTC](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118 "2021-06-28T10:48:14Z")

</div>

Hi Community, The most apparently simplest of things, that you can do in seconds with a pen and paper, but spent hours trying in Kibana and failed so far. It's driving me completely crazy !! Try it and tell me …

---

## [Can't start elasticsearch](https://discuss.elastic.co/t/cant-start-elasticsearch/277086)

<div class="topic-metadata">

**Author:** [@Fatma\_Alzahraa](https://discuss.elastic.co/u/Fatma_Alzahraa)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 10:37am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch/277086 "2021-06-28T10:37:18Z")

</div>

Hello , I installed elasticsearch but can't start and get errors centos 7 jdk version : jdk 11 elasticsearch version : 7.13.2 \[root@server bin\]# systemctl status elasticsearch.service ● elasticsearch.service - Elas…

---

## [org.elasticsearch.hadoop.EsHadoopIllegalStateException: Position for field' not found in row](https://discuss.elastic.co/t/org-elasticsearch-hadoop-eshadoopillegalstateexception-position-for-field-not-found-in-row/274662)

<div class="topic-metadata">

**Author:** [@priamai](https://discuss.elastic.co/u/priamai)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 10:23am UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-eshadoopillegalstateexception-position-for-field-not-found-in-row/274662 "2021-06-28T10:23:14Z")

</div>

Hi there, I have seen this issue before and it seems stills to apply. I am using this version via pyspark: ss = ( SparkSession.builder.appName("ES") .config("spark.driver.memory", "8g") .config( "spark.jars.packa…

---

## [Calculate a list of identical date prefixes for a date range](https://discuss.elastic.co/t/calculate-a-list-of-identical-date-prefixes-for-a-date-range/277199)

<div class="topic-metadata">

**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 10:11am UTC](https://discuss.elastic.co/t/calculate-a-list-of-identical-date-prefixes-for-a-date-range/277199 "2021-06-28T10:11:06Z")

</div>

The background is, I want to use the keyword field to optimize the search of 1 date range, because it is keyword, I need to use prefix search, but if it is 1 date range, I need to calculate 2 date prefixes based on the s…

---

## [Text getting trimmed in Kibana](https://discuss.elastic.co/t/text-getting-trimmed-in-kibana/275607)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 17\
**Last updated:** [June 28, 2021, 9:26am UTC](https://discuss.elastic.co/t/text-getting-trimmed-in-kibana/275607 "2021-06-28T09:26:28Z")

</div>

Hi all, I've uploaded a SCV file of HTTP traffic to ELK. The file has quite large values in URL field. These values may go upto 20 lines. Kibana is not showing the complete values, which is hampering my logs analysis. H…

---

## [The specified log group does not exist. Error when configuring lambda function for cloudwatch logs](https://discuss.elastic.co/t/the-specified-log-group-does-not-exist-error-when-configuring-lambda-function-for-cloudwatch-logs/277193)

<div class="topic-metadata">

**Author:** [@Origin\_Jing](https://discuss.elastic.co/u/Origin_Jing)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 9:26am UTC](https://discuss.elastic.co/t/the-specified-log-group-does-not-exist-error-when-configuring-lambda-function-for-cloudwatch-logs/277193 "2021-06-28T09:26:00Z")

</div>

I'm trying to setup the functionbeat aws example. However, I keep getting "ResourceState: CREATE\_FAILED, ResourceStatusReason: The specified log group does not exist. (Service: AWSLogs; Status Code: 400; Error Code: Reso…

---

## [ILM policy without alias](https://discuss.elastic.co/t/ilm-policy-without-alias/277188)

<div class="topic-metadata">

**Author:** [@francois75](https://discuss.elastic.co/u/francois75)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 8:52am UTC](https://discuss.elastic.co/t/ilm-policy-without-alias/277188 "2021-06-28T08:52:04Z")

</div>

To smoothly transit from Elasticsearch curator to ILM I want to implement a simple ILM policy that change index status according to its age. So I've create a policy and added to existing indices as following: { "inde…

---

## [Logstash ERROR with CVS parsing in a Pod](https://discuss.elastic.co/t/logstash-error-with-cvs-parsing-in-a-pod/277180)

<div class="topic-metadata">

**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 8:41am UTC](https://discuss.elastic.co/t/logstash-error-with-cvs-parsing-in-a-pod/277180 "2021-06-28T08:41:13Z")

</div>

Hey there, I'm currently trying to automatically ingest a CVS when launching a Logstash pod connected to ECK and I have the following error: \[ERROR\] 2021-06-28 07:25:43.494 \[Converge PipelineAction::Create\<main\>\] agent…

---

## [Override geo location for packetbeat](https://discuss.elastic.co/t/override-geo-location-for-packetbeat/277185)

<div class="topic-metadata">

**Author:** [@termcap](https://discuss.elastic.co/u/termcap)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 8:13am UTC](https://discuss.elastic.co/t/override-geo-location-for-packetbeat/277185 "2021-06-28T08:13:26Z")

</div>

Hi, I have enabled geo enrichment according to this document and its working file. Unfortunately, my private network address is not from the private range(its a public range we use internally) and thus the geo locati…

---

## [Drop\_Fields doesn't work - Filebeat](https://discuss.elastic.co/t/drop-fields-doesnt-work-filebeat/277183)

<div class="topic-metadata">

**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 7:58am UTC](https://discuss.elastic.co/t/drop-fields-doesnt-work-filebeat/277183 "2021-06-28T07:58:01Z")

</div>

Hi All, I have configured filebeat to read IIS logs using the IIS module. In the same time, I want to drop unwanted fields to save the space of my ES server. I have enabled the IIS module using below command. .\\filebe…

---

## [Kibana URL links gets altered to security\_global](https://discuss.elastic.co/t/kibana-url-links-gets-altered-to-security-global/277177)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-url-links-gets-altered-to-security-global/277177 "2021-06-28T07:48:59Z")

</div>

Hi all, I'm working on kibana 7.10.2 version. I have some kibana dashboards in Global Tenant. In my project I have an UI associated with Kibana. In my Kibana dashboard URL links redirect correctly. But the same in m…

---

## [Questions related to transforms limitations](https://discuss.elastic.co/t/questions-related-to-transforms-limitations/277158)

<div class="topic-metadata">

**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 7:35am UTC](https://discuss.elastic.co/t/questions-related-to-transforms-limitations/277158 "2021-06-28T07:35:01Z")

</div>

Hello, I am experimenting Transforms and I would to confirm that the limitations below are true: Doc removal detection in source and reflection upon next sync. If a doc is removed at source the value remains in the de…

---

## [Offline Elastic Restore From GCS](https://discuss.elastic.co/t/offline-elastic-restore-from-gcs/276842)

<div class="topic-metadata">

**Author:** [@simonross936](https://discuss.elastic.co/u/simonross936)\
**Replies:** 4\
**Last updated:** [June 28, 2021, 6:50am UTC](https://discuss.elastic.co/t/offline-elastic-restore-from-gcs/276842 "2021-06-28T06:50:43Z")

</div>

I needed to shift a sizeable amount of data from GCS repository. Directly from the Google Console, I downloaded the Elastic snapshots to a local external hard drive. With a fully functioning local Elastic instance, wher…

---

## [Need help to calculate percentage in watcher](https://discuss.elastic.co/t/need-help-to-calculate-percentage-in-watcher/277174)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 0\
**Last updated:** [June 28, 2021, 6:43am UTC](https://discuss.elastic.co/t/need-help-to-calculate-percentage-in-watcher/277174 "2021-06-28T06:43:38Z")

</div>

Hello team, Need your help to configure alert to get 'percentage' using total payload hits. Attached configuration for the same. Kindly help to get 'percentage' count based on 'total hits' from the watcher result. Deta…

---

## [How to run configured pipeline.yml in logstash](https://discuss.elastic.co/t/how-to-run-configured-pipeline-yml-in-logstash/276072)

<div class="topic-metadata">

**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\
**Replies:** 9\
**Last updated:** [June 28, 2021, 6:27am UTC](https://discuss.elastic.co/t/how-to-run-configured-pipeline-yml-in-logstash/276072 "2021-06-28T06:27:41Z")

</div>

I have configured 2 logstash.conf file in pipelines.yml file, pipeline.id: sys\_log\_1 pipeline.workers: 2 path.config: "D:/Elastic/Logstash/7.12.1/config/logstash\_sys\_1.conf" pipeline.id: sys\_log\_2 pipeline.workers: …

---

## [Can I create ingest processor to do some action like append tags or insert an alert to other index when a document match some conditions](https://discuss.elastic.co/t/can-i-create-ingest-processor-to-do-some-action-like-append-tags-or-insert-an-alert-to-other-index-when-a-document-match-some-conditions/276999)

<div class="topic-metadata">

**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 6:13am UTC](https://discuss.elastic.co/t/can-i-create-ingest-processor-to-do-some-action-like-append-tags-or-insert-an-alert-to-other-index-when-a-document-match-some-conditions/276999 "2021-06-28T06:13:50Z")

</div>

Hello everyone, Have a nice day ! I have a problem, Can I create ingest processor to do some action like append tags or insert an alert to other index when a document match some conditions ? Example: I want to get so…

---

## [Coordinating Node Role in Data Ingestion](https://discuss.elastic.co/t/coordinating-node-role-in-data-ingestion/277157)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 4\
**Last updated:** [June 28, 2021, 6:08am UTC](https://discuss.elastic.co/t/coordinating-node-role-in-data-ingestion/277157 "2021-06-28T06:08:05Z")

</div>

Can anybody please help me understand the role of coordinating node with respect to data ingestion. I understand the role of the coordinating nodes in terms of search queries (the scatter and gather phases), But what i…

---

## [Delete data from Indices](https://discuss.elastic.co/t/delete-data-from-indices/276540)

<div class="topic-metadata">

**Author:** [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\
**Replies:** 11\
**Last updated:** [June 28, 2021, 5:33am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540 "2021-06-28T05:33:04Z")

</div>

Hi, I new in ELK. Our previous sysadmin installed and configured the elk server but he getting out of space... I want to know if I can delete data from indices without reconfiguring the entire server or ELK?

---

## [CCR stats. Question about negative values](https://discuss.elastic.co/t/ccr-stats-question-about-negative-values/276916)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 1\
**Last updated:** [June 28, 2021, 5:25am UTC](https://discuss.elastic.co/t/ccr-stats-question-about-negative-values/276916 "2021-06-28T05:25:16Z")

</div>

Hi. I have two ES clusters 7.7.1. Leader cluster include 1 index with 2 primary and 2 replica shards. (total 6) I indexed few documents (the same doc). I see that those documents indexed to the one primary shard, mean…

[Previous page](https://discuss.elastic.co/latest.md?page=1598)

[Next page](https://discuss.elastic.co/latest.md?page=1600)
