# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1614

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1615

---

## [Apply fuzzy match only on short search arguments?](https://discuss.elastic.co/t/apply-fuzzy-match-only-on-short-search-arguments/276427)

<div class="topic-metadata">

**Author:** [@rocketman0739](https://discuss.elastic.co/u/rocketman0739)\
**Replies:** 0\
**Last updated:** [June 19, 2021, 12:31am UTC](https://discuss.elastic.co/t/apply-fuzzy-match-only-on-short-search-arguments/276427 "2021-06-19T00:31:37Z")

</div>

I'm having a problem getting the “too complex to determinize” exception. The index is running a synonym graph filter. The problem happens when I send a longish query which 1) includes several words that have synonyms, an…

---

## [Data Analysis with Kibana lab issue](https://discuss.elastic.co/t/data-analysis-with-kibana-lab-issue/276418)

<div class="topic-metadata">

**Author:** [@StashLogs](https://discuss.elastic.co/u/StashLogs)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 9:47pm UTC](https://discuss.elastic.co/t/data-analysis-with-kibana-lab-issue/276418 "2021-06-18T21:47:56Z")

</div>

Hi! In lab 5.3 - Map Customizations, point 7 directs me to download a file using a link. "Click here to download the vector layer. " In the on demand course, the link is missing. Can someone help? thanks!

---

## [How to present table, based on multiline xml fields](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357)

<div class="topic-metadata">

**Author:** [@rubic](https://discuss.elastic.co/u/rubic)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357 "2021-06-18T09:16:40Z")

</div>

Hi, I'm struggling with creating simple table in lens, which could present my data from ingested, multiline xml file. Basically I don't need to apply any aggregations. I'm wondering if there is any kind of solution? My…

---

## [Cloudwatch-output-plugin multiple metrics in same pipeline](https://discuss.elastic.co/t/cloudwatch-output-plugin-multiple-metrics-in-same-pipeline/276419)

<div class="topic-metadata">

**Author:** [@Ahmed\_ElHaw](https://discuss.elastic.co/u/Ahmed_ElHaw)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 7:48pm UTC](https://discuss.elastic.co/t/cloudwatch-output-plugin-multiple-metrics-in-same-pipeline/276419 "2021-06-18T19:48:28Z")

</div>

I have managed to get my head around sending one metric to Cloudwatch using output plugin. Now while I understand it aggregates, I am using it to send 1 minute metrics and matching that on CloudWatch so I'm good. The qu…

---

## [Unable to allocate shards in ILM cold phase](https://discuss.elastic.co/t/unable-to-allocate-shards-in-ilm-cold-phase/273789)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 9\
**Last updated:** [June 18, 2021, 6:26pm UTC](https://discuss.elastic.co/t/unable-to-allocate-shards-in-ilm-cold-phase/273789 "2021-06-18T18:26:49Z")

</div>

hi, I have a 2 node cluster running 7.10.2. I have defined ILM policy to move index from hot-warm-cold phases. However the transition from warm to cold phase is not happening. I have not explicitly set any node roles. S…

---

## [High search latency after upgrading from es 6.8 to 7.12.1](https://discuss.elastic.co/t/high-search-latency-after-upgrading-from-es-6-8-to-7-12-1/276346)

<div class="topic-metadata">

**Author:** [@frank\_thyes](https://discuss.elastic.co/u/frank_thyes)\
**Replies:** 3\
**Last updated:** [June 18, 2021, 5:29pm UTC](https://discuss.elastic.co/t/high-search-latency-after-upgrading-from-es-6-8-to-7-12-1/276346 "2021-06-18T17:29:42Z")

</div>

Since we upgraded our elasticsearch cluster from version 6.8.0 to 7.12.1, consisting of 6 data nodes and 3 master nodes, the search latency is three times higher than on the previous version Are there any known issues? …

---

## [Metricbeat - Socket summary TCP established filtered by port](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902)

<div class="topic-metadata">

**Author:** [@IT\_Sniper](https://discuss.elastic.co/u/IT_Sniper)\
**Replies:** 8\
**Last updated:** [June 18, 2021, 4:41pm UTC](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902 "2021-06-18T16:41:30Z")

</div>

Hello everyone, I have a ELK stack server which receives metrics from several servers, but one of them has a specific application that listens on port TCP/8443. Im aware of the system module of Metricbeats, which suppor…

---

## [ElasticsearchStatusException\[Unable to parse response body\]; nested: ResponseException\[method \[POST\]](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-nested-responseexception-method-post/276321)

<div class="topic-metadata">

**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-nested-responseexception-method-post/276321 "2021-06-18T15:22:42Z")

</div>

Hello, I am new to ES and I am getting below exception and our ES(7.12.1) instance is on kubernetes. ElasticsearchStatusException\[Unable to parse response body\]; nested: ResponseException\[method \[POST\], host \[http://es.…

---

## [Http\_endpoint only accepts JSON, even with a different content\_type](https://discuss.elastic.co/t/http-endpoint-only-accepts-json-even-with-a-different-content-type/276329)

<div class="topic-metadata">

**Author:** [@jhbigler](https://discuss.elastic.co/u/jhbigler)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 3:14pm UTC](https://discuss.elastic.co/t/http-endpoint-only-accepts-json-even-with-a-different-content-type/276329 "2021-06-18T15:14:02Z")

</div>

We would like to use filebeat to accept data from Apache Nifi in the form of a POST request, run it through some processors and send it to Elasticsearch. The documentation on the http\_endpoint seems to suggest that the h…

---

## [Is static lookup supported in tsvb?](https://discuss.elastic.co/t/is-static-lookup-supported-in-tsvb/276400)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 3:10pm UTC](https://discuss.elastic.co/t/is-static-lookup-supported-in-tsvb/276400 "2021-06-18T15:10:18Z")

</div>

Hello, I'm using Kibana version 7.13.2, I'm formatting a field say currency using "Static Lookup", where I map currency value "EUR" to "Europe". I want to view the formatted field value in the TSVB table, but I'm n…

---

## [Kibana - Index pattern issue](https://discuss.elastic.co/t/kibana-index-pattern-issue/275604)

<div class="topic-metadata">

**Author:** [@seeds17](https://discuss.elastic.co/u/seeds17)\
**Replies:** 3\
**Last updated:** [June 18, 2021, 1:54pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-issue/275604 "2021-06-18T13:54:32Z")

</div>

After install mongodb filebeat to ELK (check logstah no error) Kibana \> idex patterns when click pattern new\* file , i can't find anything (blank). there's no fields. Pls advice?

---

## [Gauge ommiting value if value is large](https://discuss.elastic.co/t/gauge-ommiting-value-if-value-is-large/276393)

<div class="topic-metadata">

**Author:** [@Adrian3](https://discuss.elastic.co/u/Adrian3)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 1:36pm UTC](https://discuss.elastic.co/t/gauge-ommiting-value-if-value-is-large/276393 "2021-06-18T13:36:36Z")

</div>

For example, for "stuff" gauge below if the value is 1'323'2323'232 instead of 0.11, the value 1'323'2323'232 is partially hidden behind the gauge. Is there a method to enable the value to be visible if the gauge val…

---

## [No se muestran documentos en un espacio distinto al de por defecto](https://discuss.elastic.co/t/no-se-muestran-documentos-en-un-espacio-distinto-al-de-por-defecto/276387)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/no-se-muestran-documentos-en-un-espacio-distinto-al-de-por-defecto/276387 "2021-06-18T13:35:41Z")

</div>

Buenas tardes! Estoy intentando averiguar por qué ha ocurrido y cómo solucionarlo, pero no consigo dar con la tecla.. Os comento: He creado un espacio adicional en kibana con la intención de crear un dashboard que pudi…

---

## [Documents are not displayed in a space other than the default space](https://discuss.elastic.co/t/documents-are-not-displayed-in-a-space-other-than-the-default-space/276388)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/documents-are-not-displayed-in-a-space-other-than-the-default-space/276388 "2021-06-18T13:35:23Z")

</div>

Good afternoon! I am trying to find out why it happened and how to solve it, but I can not find the key. Let me tell you: I have created an additional space in kibana with the intention of creating a dashboard that cou…

---

## [Able to parse \[18/Jun/2021:15:42:25 +0530\] but still getting \_dateparsefailure in kibana](https://discuss.elastic.co/t/able-to-parse-18-jun-202142-25-0530-but-still-getting-dateparsefailure-in-kibana/276377)

<div class="topic-metadata">

**Author:** [@Saurabh\_Nigudkar](https://discuss.elastic.co/u/Saurabh_Nigudkar)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 1:10pm UTC](https://discuss.elastic.co/t/able-to-parse-18-jun-202142-25-0530-but-still-getting-dateparsefailure-in-kibana/276377 "2021-06-18T13:10:29Z")

</div>

Below is my block which i have used every thing is getting parse even date is getting parse but getting \_dateparsefailure so unable to understand what is the exact issue match\_extended =\> { "message" =\> \[ { pattern …

---

## [Kibana need to restart after a period of inactivity](https://discuss.elastic.co/t/kibana-need-to-restart-after-a-period-of-inactivity/276020)

<div class="topic-metadata">

**Author:** [@BastianELK](https://discuss.elastic.co/u/BastianELK)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 12:57pm UTC](https://discuss.elastic.co/t/kibana-need-to-restart-after-a-period-of-inactivity/276020 "2021-06-18T12:57:45Z")

</div>

Hi all, I have a problem on Kibana. I started Kibana as a service and everything works well. After a period of inactivity (so every morning), when I try to logged on Kibana, the application restart and I have to wait …

---

## [help me please ](https://discuss.elastic.co/t/help-me-please/276342)

<div class="topic-metadata">

**Author:** [@parai](https://discuss.elastic.co/u/parai)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 12:54pm UTC](https://discuss.elastic.co/t/help-me-please/276342 "2021-06-18T12:54:50Z")

</div>

Good morning. I am using elasticsearch 7.10 and kibana 7.10. I'm having some issues with scattering column values in kibana. I am new to elk. The following contents were worked on kibana dev tool. Contents of the is…

---

## [Issues with Fleet Server (Elastic Agent Setup) in local Elasticsearch deployment with self signed certificates](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151)

<div class="topic-metadata">

**Author:** [@SMT\_Mas](https://discuss.elastic.co/u/SMT_Mas)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 12:52pm UTC](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151 "2021-06-18T12:52:37Z")

</div>

Hello, I'm trying to install Elastic Agent with a local ELK Environment and have no luck because of Fleet Server issues. Server Info: ELK on version 7.13.1 with self-signed certificates running in Docker containers o…

---

## [Kibana Use Date Interval without using Date Histogram](https://discuss.elastic.co/t/kibana-use-date-interval-without-using-date-histogram/276286)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 3\
**Last updated:** [June 18, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-use-date-interval-without-using-date-histogram/276286 "2021-06-18T12:40:38Z")

</div>

Hi All, I'm trying to create a visualization, where I have a date field as the columns of a table. I want to have the columns be by week, but don't want to use a date histogram, and instead want to use the dates as inte…

---

## [Encountered a retryable error. Will Retry with exponential backoff code=\>403](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403/276382)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 11:27am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403/276382 "2021-06-18T11:27:46Z")

</div>

Hello, we have recently swapped to use api keys and created api key for logstash monitoring. As written here: Configuring Security in Logstash | Logstash Reference \[7.9\] | Elastic POST /\_security/api\_key { "name": "…

---

## [Logstash Infinite Loop while indexing](https://discuss.elastic.co/t/logstash-infinite-loop-while-indexing/276380)

<div class="topic-metadata">

**Author:** [@Adabi\_Raihan](https://discuss.elastic.co/u/Adabi_Raihan)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 11:17am UTC](https://discuss.elastic.co/t/logstash-infinite-loop-while-indexing/276380 "2021-06-18T11:17:40Z")

</div>

Hi Everyone !, So what I'm going to do is indexing .log data with grok using logstash, but in the middle of indexing, it's suddenly stopped. I am already using --debug flag to see what's going on, and it keeps loop this…

---

## [Metricbeat elasticsearch-xpack not reliably sending data to monitoring cluster](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 14\
**Last updated:** [June 18, 2021, 10:51am UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842 "2021-06-18T10:51:47Z")

</div>

I've installed metricbeat to ship monitoring metrics from my elastic cluster to a separate cluster, but from what I can see, despite the period of collection being 10s, it's hardly ever sending any actual data: Does …

---

## [Elastic does not allocate indices equally](https://discuss.elastic.co/t/elastic-does-not-allocate-indices-equally/275903)

<div class="topic-metadata">

**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\
**Replies:** 6\
**Last updated:** [June 18, 2021, 9:30am UTC](https://discuss.elastic.co/t/elastic-does-not-allocate-indices-equally/275903 "2021-06-18T09:30:51Z")

</div>

Hello, I have an issue with Elastic allocation decider. Sometimes Elastic allocates new indices to nodes which are quite full for no reason. On the other nodes there is a plenty of space and it allocates indices on the …

---

## [London Information Retrieval Meetup (ONLINE) - June 2021](https://discuss.elastic.co/t/london-information-retrieval-meetup-online-june-2021/276363)

<div class="topic-metadata">

**Author:** [@lizbiella](https://discuss.elastic.co/u/lizbiella)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 9:27am UTC](https://discuss.elastic.co/t/london-information-retrieval-meetup-online-june-2021/276363 "2021-06-18T09:27:26Z")

</div>

Hi folks, At Sease, we are pleased to announce the ninth London Information Retrieval Meetup (ONLINE), a free evening meetup aimed to Information Retrieval passionates and professionals who are curious to explore and d…

---

## [Anomalie Detection : besoin d'aide svp](https://discuss.elastic.co/t/anomalie-detection-besoin-daide-svp/276354)

<div class="topic-metadata">

**Author:** [@ydr175020221](https://discuss.elastic.co/u/ydr175020221)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 8:58am UTC](https://discuss.elastic.co/t/anomalie-detection-besoin-daide-svp/276354 "2021-06-18T08:58:32Z")

</div>

Bonjour, J'essaie désespérément de créer un job ML pertinent pour répondre à la question suivante : Comment identifier un écart pour un utilisateur en se basant sur les éléments comme : Country, City, ... Exemple si u…

---

## [Aggregation performance](https://discuss.elastic.co/t/aggregation-performance/276198)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 5\
**Last updated:** [June 18, 2021, 8:22am UTC](https://discuss.elastic.co/t/aggregation-performance/276198 "2021-06-18T08:22:45Z")

</div>

hello, Can anyone please advice how to improve a query performance? the bool filter takes 50ms. filter dates: last 7 days total search documents : 20075 total index documents : 79m searched indices: 1 …

---

## [Kibana Spaces & Export Objects](https://discuss.elastic.co/t/kibana-spaces-export-objects/276349)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [June 18, 2021, 8:53am UTC](https://discuss.elastic.co/t/kibana-spaces-export-objects/276349 "2021-06-18T08:53:46Z")

</div>

Hi there, as sysadmin I would like secure and therefore export Kibana related objects locally. I have 2 questions. Example: the cluster has 10 spaces. I can go to each space and manually say 'Export n objects'. But i…

---

## [\[Filebeat System\] Syslog dashboard ECS showing no results found](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103)

<div class="topic-metadata">

**Author:** [@ShabariNath](https://discuss.elastic.co/u/ShabariNath)\
**Replies:** 3\
**Last updated:** [June 18, 2021, 8:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103 "2021-06-18T08:47:52Z")

</div>

\*\*filebeat.yml file \*\* \*\*###################### Filebeat Configuration Example #########################\*\* \*\*# This file is an example configuration file highlighting only the most common\*\* \*\*# options. The filebeat.re…

---

## [Not able to view json data in available fields for message json](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932)

<div class="topic-metadata">

**Author:** [@Harshad\_Solanki](https://discuss.elastic.co/u/Harshad_Solanki)\
**Replies:** 13\
**Last updated:** [June 18, 2021, 8:43am UTC](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932 "2021-06-18T08:43:32Z")

</div>

In my Kibana dashboard I have below json data "message": "{ "time": "2021-06-15T08:57:20+00:00", "remote\_addr": "1.2.3.4", "the\_real\_ip": "10..2.3.4", "remote\_user": "", "time\_local": "15/Jun/2021:08:57:20 +0000", "body…

---

## [LS not reading jdbc input for large dataset. Order By Clause is a Issue in Microsoft SQL](https://discuss.elastic.co/t/ls-not-reading-jdbc-input-for-large-dataset-order-by-clause-is-a-issue-in-microsoft-sql/276352)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 0\
**Last updated:** [June 18, 2021, 8:27am UTC](https://discuss.elastic.co/t/ls-not-reading-jdbc-input-for-large-dataset-order-by-clause-is-a-issue-in-microsoft-sql/276352 "2021-06-18T08:27:19Z")

</div>

Hi All I know this question has been asked earlier as well, but this issue is still there. But there was no clear statement on the solution, so i am asking again. input : jdbc-input-plugin jdbc driver: MSSQL Underne…

[Previous page](https://discuss.elastic.co/latest.md?page=1613)

[Next page](https://discuss.elastic.co/latest.md?page=1615)
