# Latest **URL:** https://discuss.elastic.co/latest.md?page=1640 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1641 --- ## [What is network.host](https://discuss.elastic.co/t/what-is-network-host/274426)
**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\ **Replies:** 3\ **Last updated:** [June 5, 2021, 3:19pm UTC](https://discuss.elastic.co/t/what-is-network-host/274426 "2021-06-05T15:19:51Z")
Hello Everyone i am new to elastic search while configuring i found one parameter network.host in elasticsearch.yml file while exploring abt this some one said use 0.0.0.0 to make ur elastic search accessible to publi… --- ## [Modify index naming in ILM](https://discuss.elastic.co/t/modify-index-naming-in-ilm/272451)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 2:27pm UTC](https://discuss.elastic.co/t/modify-index-naming-in-ilm/272451 "2021-06-05T14:27:45Z")
Hello guys, Is it possible to modify index naming in clustered environnement when using Automatic rollover in ES / Kibaba (7.11.2), I used myindex-000001 on monthly basis/max size conditions and would prefer myindex-(yy… --- ## [Filebeat is able to collect events of a pod when deployed in a node but unable to collect events when the same pod is deployed in a different node](https://discuss.elastic.co/t/filebeat-is-able-to-collect-events-of-a-pod-when-deployed-in-a-node-but-unable-to-collect-events-when-the-same-pod-is-deployed-in-a-different-node/275034)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 2:20pm UTC](https://discuss.elastic.co/t/filebeat-is-able-to-collect-events-of-a-pod-when-deployed-in-a-node-but-unable-to-collect-events-when-the-same-pod-is-deployed-in-a-different-node/275034 "2021-06-05T14:20:44Z")
I am using filebeat v7.12.0 to collect events from kubernetes pods. Filebeat is able to collect events from a certain pod when deployed in a node but fails to collect events when the same pod is deployed in a different n… --- ## [Search box with ajax results, query with wildcard (but also allow 1-2 typos)](https://discuss.elastic.co/t/search-box-with-ajax-results-query-with-wildcard-but-also-allow-1-2-typos/275032)
**Author:** [@kiko](https://discuss.elastic.co/u/kiko)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 1:44pm UTC](https://discuss.elastic.co/t/search-box-with-ajax-results-query-with-wildcard-but-also-allow-1-2-typos/275032 "2021-06-05T13:44:24Z")
Hi I'm trying to create a search box that returns results from Elastic on keypress. The problem is with the documentation warning not to use both fuzzy and wildcard in a query. Is there an other way to use wildcard and … --- ## [Gauge chart with maximum range as the total number of documents](https://discuss.elastic.co/t/gauge-chart-with-maximum-range-as-the-total-number-of-documents/275015)
**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\ **Replies:** 1\ **Last updated:** [June 5, 2021, 12:48pm UTC](https://discuss.elastic.co/t/gauge-chart-with-maximum-range-as-the-total-number-of-documents/275015 "2021-06-05T12:48:09Z")
I want to create a Gauge chart, consider I have a field named state and I want to represent the maximum range as total number of records and one value in the field state is closed, Now I want to represent it as the perce… --- ## [Logstash doesn't delete nested fileds from json field](https://discuss.elastic.co/t/logstash-doesnt-delete-nested-fileds-from-json-field/275022)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 10:25am UTC](https://discuss.elastic.co/t/logstash-doesnt-delete-nested-fileds-from-json-field/275022 "2021-06-05T10:25:03Z")
Hello there. I have an issue. In my logs there is raw string that contains json. I apply the json Logstash filter to it to get json-structured field. json { source =\> "response\_body" target =\> "respons… --- ## [Unable to grant an API Key, request does not contain an authorization header](https://discuss.elastic.co/t/unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/274956)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 7\ **Last updated:** [June 5, 2021, 8:48am UTC](https://discuss.elastic.co/t/unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/274956 "2021-06-05T08:48:05Z")
I have configured the ELK SIEM in Security Onion setup but while adding new rules (security\>detection\>manage detection rules\>create new rule\> create and activate rule) I am facing subjected error- I can confirm prereq… --- ## [Last Event not uploaded to kibana](https://discuss.elastic.co/t/last-event-not-uploaded-to-kibana/275017)
**Author:** [@a\_k2](https://discuss.elastic.co/u/a_k2)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 8:11am UTC](https://discuss.elastic.co/t/last-event-not-uploaded-to-kibana/275017 "2021-06-05T08:11:58Z")
Logstash config input { file { path =\> "C:/elk/\*.log" start\_position =\> beginning sincedb\_path =\> "NUL" codec =\> multiline { pattern =\> "^%{TIMESTAMP\_ISO8601:timestamp} " negate =\> true what =\> previous auto\_f… --- ## [Fleet-Server for arm64](https://discuss.elastic.co/t/fleet-server-for-arm64/275013)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 6:28am UTC](https://discuss.elastic.co/t/fleet-server-for-arm64/275013 "2021-06-05T06:28:21Z")
For all you aarch64/arm64 loving people out there, I ported fleet-server to arm64. If you are running a raspberry pi elastic cluster and are trying out the bleeding edge releases, the last 7.13.x release left you out in… --- ## [TSVB table - Filter ratio - color rules](https://discuss.elastic.co/t/tsvb-table-filter-ratio-color-rules/274943)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 4:54am UTC](https://discuss.elastic.co/t/tsvb-table-filter-ratio-color-rules/274943 "2021-06-05T04:54:41Z")
Hi Everyone, Not sure if this is a bug or a limitation, I'm trying to set colour rules on a TSVB Table where the columns use Filter Ratio. I've used a custom format of 0.00%. As can be seen, it's just using the c… --- ## [Default module mapping has too many fields by default](https://discuss.elastic.co/t/default-module-mapping-has-too-many-fields-by-default/274651)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 9\ **Last updated:** [June 4, 2021, 11:29pm UTC](https://discuss.elastic.co/t/default-module-mapping-has-too-many-fields-by-default/274651 "2021-06-04T23:29:34Z")
I'm using the Zeek module in filebeat to ingest logs. By default, the module imports around 5000 fields into kibana and I'm wondering if it's best practice to cut that list down or not. I'm noticing my dashboard is runn… --- ## [Updating Fleet Integrations on Policies](https://discuss.elastic.co/t/updating-fleet-integrations-on-policies/274986)
**Author:** [@josh13564](https://discuss.elastic.co/u/josh13564)\ **Replies:** 2\ **Last updated:** [June 4, 2021, 10:34pm UTC](https://discuss.elastic.co/t/updating-fleet-integrations-on-policies/274986 "2021-06-04T22:34:48Z")
Just curious if I need to delete the integration and re-add it on policies after updating an integration. Found this: Best workflow to update integrations - Elastic Stack / Kibana - Discuss the Elastic Stack But no answ… --- ## [Grok Pattern/Expression for Multiline log from kibana (icingabeat index)](https://discuss.elastic.co/t/grok-pattern-expression-for-multiline-log-from-kibana-icingabeat-index/273059)
**Author:** [@shailesh](https://discuss.elastic.co/u/shailesh)\ **Replies:** 4\ **Last updated:** [June 4, 2021, 10:30pm UTC](https://discuss.elastic.co/t/grok-pattern-expression-for-multiline-log-from-kibana-icingabeat-index/273059 "2021-06-04T22:30:00Z")
Hello Team - I am trying to process some data from icinagbeat index from Kibana- so that i can visualize the output from icinagbeat - for that reason i am writing the Grok pattern - but the problem is when i write the pa… --- ## [Logstash with heavy Syslog input](https://discuss.elastic.co/t/logstash-with-heavy-syslog-input/275007)
**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 10:28pm UTC](https://discuss.elastic.co/t/logstash-with-heavy-syslog-input/275007 "2021-06-04T22:28:19Z")
Hi friends, I have a SIEM system that sends 10,000 events per second to Logstash over Syslog TCP. It seems there is a bottleneck on logstash and i get only 1500 events per second. Is there a nice solution for that? A… --- ## [Calculated positional field based on \_score](https://discuss.elastic.co/t/calculated-positional-field-based-on-score/274887)
**Author:** [@jcater](https://discuss.elastic.co/u/jcater)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 10:15pm UTC](https://discuss.elastic.co/t/calculated-positional-field-based-on-score/274887 "2021-06-04T22:15:28Z")
I need to add a position/ordinal field to my Elasticsearch search results, relative to a sort by \_score, regardless of how the actual results are sorted. I'm using the term "field" loosely... I just need access to some … --- ## [Retrieving the APM transaction properties and its types in DSL Query - Elasticsearch](https://discuss.elastic.co/t/retrieving-the-apm-transaction-properties-and-its-types-in-dsl-query-elasticsearch/275006)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 0\ **Last updated:** [June 4, 2021, 8:22pm UTC](https://discuss.elastic.co/t/retrieving-the-apm-transaction-properties-and-its-types-in-dsl-query-elasticsearch/275006 "2021-06-04T20:22:10Z")
I am attempting to create a model class in my asp.net core web app project that contains the list of properties of an APM transaction. Whenever I run the command: GET apm-\*-transaction/\_search { "query": { "match"… --- ## [Error does not display in APM Errors](https://discuss.elastic.co/t/error-does-not-display-in-apm-errors/274779)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 5\ **Last updated:** [June 4, 2021, 8:13pm UTC](https://discuss.elastic.co/t/error-does-not-display-in-apm-errors/274779 "2021-06-04T20:13:33Z")
I have a asp.net core web app (mvc) application that writes logs using serilog. Whenever run I the application and perform operations and a certain operation that will cause an Error, that error will get recorded into Di… --- ## [Logstash Kinesis Plugin - with\_kinesisEndpoint - Undefined Method](https://discuss.elastic.co/t/logstash-kinesis-plugin-with-kinesisendpoint-undefined-method/274922)
**Author:** [@cosruss](https://discuss.elastic.co/u/cosruss)\ **Replies:** 2\ **Last updated:** [June 4, 2021, 8:00pm UTC](https://discuss.elastic.co/t/logstash-kinesis-plugin-with-kinesisendpoint-undefined-method/274922 "2021-06-04T20:00:14Z")
Trying to use the Logstash Kinesis Plugin with a custom endpoint. In the config, I've got the following line: additional\_settings =\> {"kinesisEndpoint" =\> "https://\"} but I'm getting a strange error… --- ## [Update Existing Log Via Logstash](https://discuss.elastic.co/t/update-existing-log-via-logstash/274796)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 17\ **Last updated:** [June 4, 2021, 6:49pm UTC](https://discuss.elastic.co/t/update-existing-log-via-logstash/274796 "2021-06-04T18:49:05Z")
I want to update an existing document in Elasticsearch based on certain conditions. However, I am facing some errors. Here is my filter plugin configuration filter { json { source =\> "message" } if \[baseValueUnitA… --- ## [Phrase proximity with simple\_query\_string and NEST](https://discuss.elastic.co/t/phrase-proximity-with-simple-query-string-and-nest/275002)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 6:33pm UTC](https://discuss.elastic.co/t/phrase-proximity-with-simple-query-string-and-nest/275002 "2021-06-04T18:33:20Z")
I'm using the simple\_query\_string with the tilde ~ operator to specify proximity between words in a phrase, and it works. The simple query has other functions that match doesn't provide. { "simple\_qu… --- ## [How can you correlate logs with APM?](https://discuss.elastic.co/t/how-can-you-correlate-logs-with-apm/274775)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 7\ **Last updated:** [June 4, 2021, 5:41pm UTC](https://discuss.elastic.co/t/how-can-you-correlate-logs-with-apm/274775 "2021-06-04T17:41:12Z")
I have an application that will write logs to elasticsearch using serilog. I configured the APM server using docker-compose. Once I start the application up and perform an operation (navigate through pages in the browser… --- ## [How to extract response and key-values value from response time string of apache logs](https://discuss.elastic.co/t/how-to-extract-response-and-key-values-value-from-response-time-string-of-apache-logs/274991)
**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 4:02pm UTC](https://discuss.elastic.co/t/how-to-extract-response-and-key-values-value-from-response-time-string-of-apache-logs/274991 "2021-06-04T16:02:19Z")
My logs are as follows : ::ffff:10.67.0.179 - - \[23/Feb/2021:13:55:18 +0000\] "GET /files/77570035-bc7e-4be7-9554-e2164dd9397e.otf HTTP/1.1" 200 211 "-" "-" "c37004e0-75de-11eb-b6d4-cb790f9fe1ad" "40.324 ms" "serviceName… --- ## [Clustering algorithms in ElasticSearch](https://discuss.elastic.co/t/clustering-algorithms-in-elasticsearch/274859)
**Author:** [@Sarra](https://discuss.elastic.co/u/Sarra)\ **Replies:** 6\ **Last updated:** [June 4, 2021, 3:57pm UTC](https://discuss.elastic.co/t/clustering-algorithms-in-elasticsearch/274859 "2021-06-04T15:57:47Z")
Hi everyone! Last month, I worked on Elasticsearch to create relevant dashboards . And now I'm actually working with "scikit-learn" library on python to cluster my dataset ( using k-means). I wanted to know if it was p… --- ## [Configuration problem](https://discuss.elastic.co/t/configuration-problem/274358)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 20\ **Last updated:** [June 4, 2021, 12:12am UTC](https://discuss.elastic.co/t/configuration-problem/274358 "2021-06-04T00:12:43Z")
I have cloud elastic activated. I want to set up my environment in following way: \[beats - on prem\] ----\> \[logstash-on prem\] ------\> \[elastic cloud\] So, basically install beats on servers, send logs to logstash on prem… --- ## [Getting lots of Errors on dashboard visuals "EsError"](https://discuss.elastic.co/t/getting-lots-of-errors-on-dashboard-visuals-eserror/274245)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 5\ **Last updated:** [June 4, 2021, 2:41pm UTC](https://discuss.elastic.co/t/getting-lots-of-errors-on-dashboard-visuals-eserror/274245 "2021-06-04T14:41:45Z")
I keep getting these errors on my dashboard and they appear relatively often. When I hover over it, it only says \[esaggs\] \> EsError . When I look at network/console in inspector, I get {"statusCode":404,"error":"Not … --- ## [\[Feedback wanted\] New time comparison feature in APM 7.13](https://discuss.elastic.co/t/feedback-wanted-new-time-comparison-feature-in-apm-7-13/274146)
**Author:** [@casper](https://discuss.elastic.co/u/casper)\ **Replies:** 3\ **Last updated:** [June 4, 2021, 2:39pm UTC](https://discuss.elastic.co/t/feedback-wanted-new-time-comparison-feature-in-apm-7-13/274146 "2021-06-04T14:39:42Z")
Hello community :wave: The entire team is excited to introduce time comparison into the APM Service overview in 7.13 and we'd love to hear what you think of it? Here's a short summary of what it's all about; Time c… --- ## [How to apply custom shard selection algorithm in Elasticsearch?](https://discuss.elastic.co/t/how-to-apply-custom-shard-selection-algorithm-in-elasticsearch/274994)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 0\ **Last updated:** [June 4, 2021, 2:18pm UTC](https://discuss.elastic.co/t/how-to-apply-custom-shard-selection-algorithm-in-elasticsearch/274994 "2021-06-04T14:18:54Z")
I came across some papers where custom shard selection algorithms like ReDDE, Sushi, and Rank-S are applied instead of default ones. One of them is here. How can we apply a custom shard selection algorithm in Elasticsear… --- ## [Conditional parsing for the logs using logstash](https://discuss.elastic.co/t/conditional-parsing-for-the-logs-using-logstash/274892)
**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\ **Replies:** 3\ **Last updated:** [June 4, 2021, 2:11pm UTC](https://discuss.elastic.co/t/conditional-parsing-for-the-logs-using-logstash/274892 "2021-06-04T14:11:52Z")
I am able to parse the logs and send to elk but I have this requirement and would request some suggestions on it . Application and Access logs are being written to the stdout of K8 cluster. I am able to setup logshippe… --- ## [Not able to see user login in kibana](https://discuss.elastic.co/t/not-able-to-see-user-login-in-kibana/274845)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 3\ **Last updated:** [June 4, 2021, 1:33pm UTC](https://discuss.elastic.co/t/not-able-to-see-user-login-in-kibana/274845 "2021-06-04T13:33:55Z")
My kibana and elasticsearch version is 7.9.2 I added elasticsearch.username: and elasticsearch.password: in kibana.yml and docker-compse.yaml file. And I also added xpack.security.enabled: true in kibana.yml and elastic… --- ## [Disaster recovery in elasticsearch](https://discuss.elastic.co/t/disaster-recovery-in-elasticsearch/274984)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 1:29pm UTC](https://discuss.elastic.co/t/disaster-recovery-in-elasticsearch/274984 "2021-06-04T13:29:39Z")
hi everyone I hope this message finds you well, so in elasticsearch I have 3 nodes, 2 masters nodes and a data node, so if the 2 masters nodes fail can I find all data in the third data node ? regards [Previous page](https://discuss.elastic.co/latest.md?page=1639) [Next page](https://discuss.elastic.co/latest.md?page=1641)