# Latest **URL:** https://discuss.elastic.co/latest.md?page=1638 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1639 --- ## [Import JSON with nested fields](https://discuss.elastic.co/t/import-json-with-nested-fields/275010)
**Author:** [@aamrankw](https://discuss.elastic.co/u/aamrankw)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 11:06am UTC](https://discuss.elastic.co/t/import-json-with-nested-fields/275010 "2021-06-07T11:06:23Z")
Hello all, I would like your support in defining a proper filter for importing the following JSON object: { "status": "ok", "message-type": "work-list", "message-version": "1.0.0", "message": { … --- ## [Unable to update mappings for Date fields in order to prepare for migration from 6.x to 7.x](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138)
**Author:** [@Raja\_Kolluri](https://discuss.elastic.co/u/Raja_Kolluri)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 11:04am UTC](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138 "2021-06-07T11:04:32Z")
Hi, i am trying to migrate Elasticsearch from 6.x to 7.x version. "Indices" Tab in Upgrade Assistant 7.0 page in Kibana shows below warning message for most of my indices, This index has date fields with deprecated f… --- ## [Fleet-Server for arm64](https://discuss.elastic.co/t/fleet-server-for-arm64/274900)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:02am UTC](https://discuss.elastic.co/t/fleet-server-for-arm64/274900 "2021-06-07T11:02:00Z")
For all you aarch64/arm64 loving people out there, I ported fleet-server to arm64. If you are running a raspberry pi elastic cluster and are trying out the bleeding edge releases, the last 7.13.x release left you out in… --- ## [Heartbeat remote error: tls: handshake failure](https://discuss.elastic.co/t/heartbeat-remote-error-tls-handshake-failure/274999)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 10:55am UTC](https://discuss.elastic.co/t/heartbeat-remote-error-tls-handshake-failure/274999 "2021-06-07T10:55:26Z")
Dear team, I recently enabled TLS on http and wanted to configure heartbeat to communicate with els on HTTPS. I have done following configuration: # ----------------------------------- ElasticSearch connection --------… --- ## [Elastic agents and existing beats](https://discuss.elastic.co/t/elastic-agents-and-existing-beats/274972)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:54am UTC](https://discuss.elastic.co/t/elastic-agents-and-existing-beats/274972 "2021-06-07T10:54:49Z")
If i have a server with winlog beat and filebeat iis module, can i install the elastic agent on this with the same integrations or do i need to uninstall the current set of beats? --- ## [Filebeat - Non-zero metrics in the last 30s](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/275114)
**Author:** [@sacher](https://discuss.elastic.co/u/sacher)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:46am UTC](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/275114 "2021-06-07T10:46:08Z")
The file update has not been detected, but the file has been updated and the ES index has not been written. log 2021-06-04T12:39:30.519Z INFO instance/beat.go:304 Setup Beat: filebeat; Version: 7.12.1 2021-06-04T12:39:… --- ## [Disable autosize warning](https://discuss.elastic.co/t/disable-autosize-warning/275127)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 10:17am UTC](https://discuss.elastic.co/t/disable-autosize-warning/275127 "2021-06-07T10:17:39Z")
Kibana version : 7.10 Elasticsearch version : 7.10 APM Server version : 7.10 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Windows elastic agent does not run](https://discuss.elastic.co/t/windows-elastic-agent-does-not-run/274606)
**Author:** [@Enrique\_Pedroza](https://discuss.elastic.co/u/Enrique_Pedroza)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 8:59am UTC](https://discuss.elastic.co/t/windows-elastic-agent-does-not-run/274606 "2021-06-07T08:59:00Z")
I have installed elastic fleet agent in windows machine. It works fine but to run it as a service at boot it gives error and do not launch. If i manually run it woks, the problem is the windows service. At the moment of… --- ## [Create scripted field showing time differences](https://discuss.elastic.co/t/create-scripted-field-showing-time-differences/275134)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 10:36am UTC](https://discuss.elastic.co/t/create-scripted-field-showing-time-differences/275134 "2021-06-07T10:36:02Z")
Hi everyone, I am running Elastic Stack 7.9 with a basic license. In my data I have two date fields and I want to create a scripted field that writes the difference in a nice format. I easily get the difference by just … --- ## [Performance of 'Update by query' for frequent runs with at most 1 object returned](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122)
**Author:** [@hariso](https://discuss.elastic.co/u/hariso)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:06am UTC](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122 "2021-06-07T10:06:51Z")
How does UBQ perform when it's being run frequently, and where at most one object will be updated? I have a cluster with a significant number of indexes and quite some documents (a few billions in total). In certain proc… --- ## [Error with](https://discuss.elastic.co/t/error-with/274054)
**Author:** [@Denden](https://discuss.elastic.co/u/Denden)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 9:50am UTC](https://discuss.elastic.co/t/error-with/274054 "2021-06-07T09:50:54Z")
Hello there, I have a single ELK node, and I have some error that I can't find soutions. One of them is : illegal\_argument\_exception at shard 0index metricbeat-7.11.2-2021.05.26node ugebynP7RImmkUP5TCeGEA Typ… --- ## [Transform api gives unsupported aggregation type \[multi\_terms\]](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 9:25am UTC](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616 "2021-06-07T09:25:58Z")
Below is my query for getting distinct values of the fields. { "size": 0, "aggs": { "unique\_pair": { "multi\_terms": { "terms": \[ { "field": "username" }, {… --- ## [Google Workplace no new events](https://discuss.elastic.co/t/google-workplace-no-new-events/275121)
**Author:** [@ab52](https://discuss.elastic.co/u/ab52)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 9:15am UTC](https://discuss.elastic.co/t/google-workplace-no-new-events/275121 "2021-06-07T09:15:08Z")
Hi All, i have configure filebeat to grab the data from Google, but after a period of time it will stop grabbing the data from Google. If i restart the filebeat process ( Centos7.6 : Filebeat v 7.11.2-1 ) new events wil… --- ## [How to set the default Sort Field and Sort Order in App Search Reference UI](https://discuss.elastic.co/t/how-to-set-the-default-sort-field-and-sort-order-in-app-search-reference-ui/274973)
**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 9:11am UTC](https://discuss.elastic.co/t/how-to-set-the-default-sort-field-and-sort-order-in-app-search-reference-ui/274973 "2021-06-07T09:11:20Z")
Hi Team, I have created the Search UI using the reference UI from app search, but in this, the default Sort Field is set to Relevance, I need to override this field with one of my fields as I need to see the data in the… --- ## [Unusual disk read spike during ES migration](https://discuss.elastic.co/t/unusual-disk-read-spike-during-es-migration/273625)
**Author:** [@suryart](https://discuss.elastic.co/u/suryart)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 9:07am UTC](https://discuss.elastic.co/t/unusual-disk-read-spike-during-es-migration/273625 "2021-06-07T09:07:10Z")
We have 4 ES machines running on AWS under a VPC behind an LB which are currently working without any issues. We wanted to migrate these 4 ES machines from this older VPC to the newer VPC behind a new LB. So, we followe… --- ## [Range query](https://discuss.elastic.co/t/range-query/275116)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:13am UTC](https://discuss.elastic.co/t/range-query/275116 "2021-06-07T08:13:21Z")
i am using the below range query to read data from elasticsearch using spark and in kibana i have set Asia/Riyadh Timezone for date formatting. .set("es.query","""{ "query": { "range": { "@timestamp": { "gte": "now… --- ## [Unable to open kibana ui](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 8:12am UTC](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117 "2021-06-07T08:12:52Z")
this is my kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are bo… --- ## [Elassandra 6.2.3 to Elasticsearch 7.7.1 data migration process](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 14\ **Last updated:** [June 7, 2021, 8:10am UTC](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100 "2021-06-07T08:10:23Z")
I want to migrate the data from Elassandra 6.2.3 cluster to Elasticsearch 7.7.1 cluster. Let's suppose that Elasticsearch 7.7.1 has the same index schemas, templates and aliases. (Except maybe changes related to breakin… --- ## [Elasticsearch Conflict Error](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104 "2021-06-07T07:50:05Z")
Below is my query and code for delete\_by\_query. While code is running after some time i get Elasticsearch conflict error. What do i do wrong? How can i solve this ? body\_val = { "query": { "bool": … --- ## [Indices is not deleting after 60 days of retention](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 7:43am UTC](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106 "2021-06-07T07:43:40Z")
Using ELK 7.11 Following are the indicies that should be deleted health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open log-pb-flow-20… --- ## [Lifecycle Policy doesn't delete documents correctly](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 7:31am UTC](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105 "2021-06-07T07:31:47Z")
Good morning! I set up a lifecycle policy as follows last week, in the hope that documents older than 3 days would be deleted but it hasn't worked, can you tell me why? My intention is to store the data for only that lo… --- ## [Timestamp](https://discuss.elastic.co/t/timestamp/274734)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 12\ **Last updated:** [June 7, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734 "2021-06-07T07:25:33Z")
Hello Expert, If i would like to insert old data for example last year data in ES, could I change the timestamp as date of last year? If No, then what is the solution to insert the data which correspondence the time? T… --- ## [Configuration issue](https://discuss.elastic.co/t/configuration-issue/274839)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 6:48am UTC](https://discuss.elastic.co/t/configuration-issue/274839 "2021-06-07T06:48:19Z")
I am running in my cluster 3 master nodes, two data nodes and three client nodes. I am facing an issue that we are not able to create new indexes in Elastic. I can see lot's of exceptions in the elastic search. It sta… --- ## [Kibana Elasticsearch -\> after 7 Days elastic user pw changed](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180)
**Author:** [@CleanerOne](https://discuss.elastic.co/u/CleanerOne)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:47am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180 "2021-06-07T06:47:34Z")
Hello Community Hello dear community, I have a problem ... I did Kibana and Elasticsearch after this tutorial installed in an AKS (Azure Kubernetes cluster). everything runs well until after 7 days the setup thinks… --- ## [Timeouts in cluster management requests ES 7.11.2 leading to nodes in the cluster freezing](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882)
**Author:** [@parapar](https://discuss.elastic.co/u/parapar)\ **Replies:** 7\ **Last updated:** [June 7, 2021, 6:44am UTC](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882 "2021-06-07T06:44:57Z")
Hi, I opened this bug https://github.com/elastic/elasticsearch/issues/72853, but the elastic team did not consider it a bug. My situation is quite similar to this other Kibana ticket https://github.com/elastic/kibana/is… --- ## [Mix HTTPS & HTTP nodes in the same cluster](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 6:38am UTC](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987 "2021-06-07T06:38:50Z")
Using ELK 7.13.0 - Plat. licence - xpack security - on k8s - elastic Helm charts. We run a 2 clients nodes / X data nodes / 3 master nodes cluster, with security (transport TLS) without https. Everything is OK. Since I… --- ## [Migration from single to multi-index increased searchRate and overall search time](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102)
**Author:** [@code\_merchant](https://discuss.elastic.co/u/code_merchant)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:27am UTC](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102 "2021-06-07T06:27:58Z")
Earlier, we had only 1 index of storing all the data of the cluster of around 400GB. We migrated from that architecture to a new one that has monthly indices each of size around 30 GB (recommended index size in ES). Afte… --- ## [In elasticsearch audit, for data/write/bulk event, what is the target index?](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 6:20am UTC](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001 "2021-06-07T06:20:08Z")
I'm trying to debug a winlogbeat ingest, I'm seeing data/write/bulk events for the host and user in the audit logs, but it doesn't show the target index name. That seems like a useful audit item. I'm trying to get winl… --- ## [Why log are not show in elastic?](https://discuss.elastic.co/t/why-log-are-not-show-in-elastic/274857)
**Author:** [@Salim\_Adnan](https://discuss.elastic.co/u/Salim_Adnan)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 5:01am UTC](https://discuss.elastic.co/t/why-log-are-not-show-in-elastic/274857 "2021-06-07T05:01:47Z")
--- ## [Only give access to create and manage alias and not update setting/mapping](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 12:29pm UTC](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868 "2021-06-03T12:29:17Z")
Is it possible to have access create and mange alias only and not other things like template etc which comes with manage role ? \*\*create\_index\*\* = Privilege to create an index or data stream. A create index request may … [Previous page](https://discuss.elastic.co/latest.md?page=1637) [Next page](https://discuss.elastic.co/latest.md?page=1639)