# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1685

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1686

---

## [Prometheus Elasticsearch exporter for receiving CCR stats](https://discuss.elastic.co/t/prometheus-elasticsearch-exporter-for-receiving-ccr-stats/272487)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 7:14am UTC](https://discuss.elastic.co/t/prometheus-elasticsearch-exporter-for-receiving-ccr-stats/272487 "2021-05-11T07:14:39Z")

</div>

Is there any Prometheus Elasticsearch exporter for receiving CCR stats? I don't see such. Is this planned ?

---

## [Anomaly detection / ML Setup](https://discuss.elastic.co/t/anomaly-detection-ml-setup/272378)

<div class="topic-metadata">

**Author:** [@tsp](https://discuss.elastic.co/u/tsp)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 7:14am UTC](https://discuss.elastic.co/t/anomaly-detection-ml-setup/272378 "2021-05-11T07:14:12Z")

</div>

When setting up the ML within the Anomaly detection (Stack 11.1.2) , it says the following: At least one index matching logs-pattern-\* has a field called event.dataset without the correct type. Here is a sample record: …

---

## [Elasticsearch cluster have millions of pending tasks](https://discuss.elastic.co/t/elasticsearch-cluster-have-millions-of-pending-tasks/272349)

<div class="topic-metadata">

**Author:** [@fengxiaobai](https://discuss.elastic.co/u/fengxiaobai)\
**Replies:** 14\
**Last updated:** [May 11, 2021, 5:33am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-have-millions-of-pending-tasks/272349 "2021-05-11T05:33:57Z")

</div>

i have a es cluster , 7.4 version . There are a lot of pending tasks around 8 a.m. every day。 pending task list info： 639479 "source": "ilm-execute-cluster-state-steps", 82666 "source": "ilm-move-to-step"…

---

## [Need curl/kibana command which returns "same ids" which are present in 2 different indexes](https://discuss.elastic.co/t/need-curl-kibana-command-which-returns-same-ids-which-are-present-in-2-different-indexes/272529)

<div class="topic-metadata">

**Author:** [@Rinku\_Gulia](https://discuss.elastic.co/u/Rinku_Gulia)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 4:43am UTC](https://discuss.elastic.co/t/need-curl-kibana-command-which-returns-same-ids-which-are-present-in-2-different-indexes/272529 "2021-05-11T04:43:58Z")

</div>

We have a requirement where we are generating 2 indexes one is open index ,another is closed index. we want to know if same data/id exists in both of them( we are inserting bulk data through one job and at the same time…

---

## [After enabling xPack ssl I am now receiving an error with monitoring failed to flush export bulks](https://discuss.elastic.co/t/after-enabling-xpack-ssl-i-am-now-receiving-an-error-with-monitoring-failed-to-flush-export-bulks/272630)

<div class="topic-metadata">

**Author:** [@cheeks5281](https://discuss.elastic.co/u/cheeks5281)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 4:30am UTC](https://discuss.elastic.co/t/after-enabling-xpack-ssl-i-am-now-receiving-an-error-with-monitoring-failed-to-flush-export-bulks/272630 "2021-05-11T04:30:13Z")

</div>

the yaml with my basic auth was working before on my ElasticSearch/Kibana 7.1 cluster. Within my pod for the data nodes I have I am now seeing the following message org.elasticsearch.xpack.monitoring.exporter.ExportExce…

---

## [Data type long error](https://discuss.elastic.co/t/data-type-long-error/272631)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 4:22am UTC](https://discuss.elastic.co/t/data-type-long-error/272631 "2021-05-11T04:22:53Z")

</div>

Hi, ELK version: 7.10.0 I have a request, which is to import the ip2location csv data into elasticsearch and then use program (c# or python) to search the ip range and return the country info. The data were not able t…

---

## [Watcher: Password changes to ::es\_redacted::](https://discuss.elastic.co/t/watcher-password-changes-to/272628)

<div class="topic-metadata">

**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 3:56am UTC](https://discuss.elastic.co/t/watcher-password-changes-to/272628 "2021-05-11T03:56:51Z")

</div>

Hello, Hope you all are doing great! Thought I'd bring this concern which I've been experiencing - When I add auth category in actions of watcher - after I hit save watch button password changes to "::es\_redacted::" W…

---

## [Howto ingest from application logs and modules?](https://discuss.elastic.co/t/howto-ingest-from-application-logs-and-modules/272627)

<div class="topic-metadata">

**Author:** [@lachlan.simpson](https://discuss.elastic.co/u/lachlan.simpson)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 3:42am UTC](https://discuss.elastic.co/t/howto-ingest-from-application-logs-and-modules/272627 "2021-05-11T03:42:24Z")

</div>

We have a system from which we would like to collect the regular system modules. filebeat modules enable system and done. Great. Nothing is out of place. But we have another application that requires an independent ent…

---

## [Wildcards+fuzzy in one query](https://discuss.elastic.co/t/wildcards-fuzzy-in-one-query/272620)

<div class="topic-metadata">

**Author:** [@abdess](https://discuss.elastic.co/u/abdess)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 2:46am UTC](https://discuss.elastic.co/t/wildcards-fuzzy-in-one-query/272620 "2021-05-11T02:46:32Z")

</div>

I'm new to Elasticsearch and have 2 Questions: Q1) The following query return this result(pic): Query: { "query": { "query\_string": { "query": "china~" } } } Result: {…

---

## [Filebeat log.json file](https://discuss.elastic.co/t/filebeat-log-json-file/272528)

<div class="topic-metadata">

**Author:** [@shifenglim](https://discuss.elastic.co/u/shifenglim)\
**Replies:** 6\
**Last updated:** [May 11, 2021, 2:41am UTC](https://discuss.elastic.co/t/filebeat-log-json-file/272528 "2021-05-11T02:41:22Z")

</div>

My application team tried an experiment for filebeat, They deleted the log file that filebeat was harvesting and each time the log file is deleted, in the directory, a file in the path /data/registry/filebeat/log.json k…

---

## [How to create by fields sending data through elasticsearch](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [May 11, 2021, 2:40am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615 "2021-05-11T02:40:54Z")

</div>

I know sending by through logstash, creating a grok pattern within the pippeline configuration follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is …

---

## [How to start Elasticsearch database from exist volume on docker](https://discuss.elastic.co/t/how-to-start-elasticsearch-database-from-exist-volume-on-docker/272543)

<div class="topic-metadata">

**Author:** [@overbid](https://discuss.elastic.co/u/overbid)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 1:51am UTC](https://discuss.elastic.co/t/how-to-start-elasticsearch-database-from-exist-volume-on-docker/272543 "2021-05-11T01:51:36Z")

</div>

I'm trying to install via docker compose in 3 machines on AWS EC2. My compose file is version: "3.8" services: es01: image: docker.elastic.co/elasticsearch/elasticsearch:7.12.1 container\_name: es01 environ…

---

## [How do i create a visualisation/dashboard with all data from yesterday](https://discuss.elastic.co/t/how-do-i-create-a-visualisation-dashboard-with-all-data-from-yesterday/272623)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 1:04am UTC](https://discuss.elastic.co/t/how-do-i-create-a-visualisation-dashboard-with-all-data-from-yesterday/272623 "2021-05-11T01:04:57Z")

</div>

how do i create a visualisation/dashboard with all data from yesterday? So in the date picker it will always default to yesterday whenever I look at the visualisation or the dashboard.

---

## [Setting custom date format from kibana for index template](https://discuss.elastic.co/t/setting-custom-date-format-from-kibana-for-index-template/272611)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 6\
**Last updated:** [May 11, 2021, 12:54am UTC](https://discuss.elastic.co/t/setting-custom-date-format-from-kibana-for-index-template/272611 "2021-05-11T00:54:13Z")

</div>

I there a was to include a date format in an index template mapping using Kibaba? I can select from the standard ones but I there is no option for entering a custom format. Noe of the standard formats seem to support d…

---

## [Logstash AWS code 403](https://discuss.elastic.co/t/logstash-aws-code-403/272499)

<div class="topic-metadata">

**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\
**Replies:** 4\
**Last updated:** [May 11, 2021, 12:35am UTC](https://discuss.elastic.co/t/logstash-aws-code-403/272499 "2021-05-11T00:35:02Z")

</div>

Hey, I'm trying to push documents from local to elastic server in AWS, and when trying to do so I get 403 error and logstash keeps on trying to establish connection with the server like so: \[2021-05-09T11:09:52,707\]\[TR…

---

## [Logstash created Index || index.lifecycle.rollover\_alias is empty or not defined](https://discuss.elastic.co/t/logstash-created-index-index-lifecycle-rollover-alias-is-empty-or-not-defined/272240)

<div class="topic-metadata">

**Author:** [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:31pm UTC](https://discuss.elastic.co/t/logstash-created-index-index-lifecycle-rollover-alias-is-empty-or-not-defined/272240 "2021-05-10T23:31:37Z")

</div>

Hi Elastic Team, I have Indices in my Elastic cluster created from logstash based on date regex. And these indices can be deleted after 3 days. but below error comes up for all indices. \*\*\*Index lifecycle error illega…

---

## [Index vs Update for partial updates](https://discuss.elastic.co/t/index-vs-update-for-partial-updates/272590)

<div class="topic-metadata">

**Author:** [@bogdanjsx](https://discuss.elastic.co/u/bogdanjsx)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:23pm UTC](https://discuss.elastic.co/t/index-vs-update-for-partial-updates/272590 "2021-05-10T23:23:28Z")

</div>

Hello! I'm having a hard time deciding on the Index vs Update APIs for a particular use case. Let's say I have an index with documents containing a name field, which nests a string translated in different languages/loc…

---

## [Multiple Date format in mapping fails](https://discuss.elastic.co/t/multiple-date-format-in-mapping-fails/272616)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:22pm UTC](https://discuss.elastic.co/t/multiple-date-format-in-mapping-fails/272616 "2021-05-10T23:22:08Z")

</div>

Hi all, There is provision for multiple date format in elasticsearch. But whenever I try my multiple date format in console, it fails to parse and no data is displayed. PUT brs\_total { "mappings": { "properties"…

---

## [Can I press enter in a Kibana Search and not do a search it just moves the text to a new line](https://discuss.elastic.co/t/can-i-press-enter-in-a-kibana-search-and-not-do-a-search-it-just-moves-the-text-to-a-new-line/272618)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:05pm UTC](https://discuss.elastic.co/t/can-i-press-enter-in-a-kibana-search-and-not-do-a-search-it-just-moves-the-text-to-a-new-line/272618 "2021-05-10T23:05:26Z")

</div>

Can I press enter in a Kibana Search and not do a search it just moves the text to a new line? So my data appears like this, that is not one big long text in one line and rather 4 different lines: eventType:DeviceReque…

---

## [Storage rate for a specefic machine](https://discuss.elastic.co/t/storage-rate-for-a-specefic-machine/272043)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 7\
**Last updated:** [May 10, 2021, 11:03pm UTC](https://discuss.elastic.co/t/storage-rate-for-a-specefic-machine/272043 "2021-05-10T23:03:11Z")

</div>

Hello everyobody, I have a production cluster where I have some windows machines connected to my ELK Cluster, and for some monitoring reasons, I would like to know how many data collected from each machine for eample fo…

---

## [Elasticsearch with NEST: How can I score matches of multiple keywords much higher than single matches?](https://discuss.elastic.co/t/elasticsearch-with-nest-how-can-i-score-matches-of-multiple-keywords-much-higher-than-single-matches/272226)

<div class="topic-metadata">

**Author:** [@WestCoastWondering](https://discuss.elastic.co/u/WestCoastWondering)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-with-nest-how-can-i-score-matches-of-multiple-keywords-much-higher-than-single-matches/272226 "2021-05-10T23:01:45Z")

</div>

Hi there, Our users often type in a list of keywords, hoping for a good match from within the "Title" field, the primary field in many of our indices. Using the multimatch query, we get decent results for single keywor…

---

## [When do you really need full text search capabilities? Need help understanding tradeoffs](https://discuss.elastic.co/t/when-do-you-really-need-full-text-search-capabilities-need-help-understanding-tradeoffs/272613)

<div class="topic-metadata">

**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\
**Replies:** 3\
**Last updated:** [May 10, 2021, 11:00pm UTC](https://discuss.elastic.co/t/when-do-you-really-need-full-text-search-capabilities-need-help-understanding-tradeoffs/272613 "2021-05-10T23:00:12Z")

</div>

Should we add Elastic for our very simple searches on metadata fields that have a few words (\<10) such as titles? Does this constitute requiring "Full Text Search"? We have a database w/ postgres to store all our metada…

---

## [Failed to create service Error response from daemon network cannot be used with services and invalidargument containerspec](https://discuss.elastic.co/t/failed-to-create-service-error-response-from-daemon-network-cannot-be-used-with-services-and-invalidargument-containerspec/272605)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 0\
**Last updated:** [May 10, 2021, 6:13pm UTC](https://discuss.elastic.co/t/failed-to-create-service-error-response-from-daemon-network-cannot-be-used-with-services-and-invalidargument-containerspec/272605 "2021-05-10T18:13:32Z")

</div>

Hi All, Below are 2 errors im getting 1. Creating service monitoring\_kibana failed to create service monitoring\_kibana: Error response from daemon: rpc error: code = InvalidArgument desc = ContainerSpec: image referen…

---

## [Kibana can't cancel long-running queries — "action \[cluster:admin/tasks/cancel\[n\]\] is unauthorized for user \[\_async\_search\]"](https://discuss.elastic.co/t/kibana-cant-cancel-long-running-queries-action-cluster-admin-tasks-cancel-n-is-unauthorized-for-user-async-search/272225)

<div class="topic-metadata">

**Author:** [@smokris](https://discuss.elastic.co/u/smokris)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 9:11pm UTC](https://discuss.elastic.co/t/kibana-cant-cancel-long-running-queries-action-cluster-admin-tasks-cancel-n-is-unauthorized-for-user-async-search/272225 "2021-05-10T21:11:53Z")

</div>

I'm seeing a lot of exceptions like this while making changes to Kibana Dashboards: ElasticsearchSecurityException\[action \[cluster:admin/tasks/cancel\[n\]\] is unauthorized for user \[\_async\_search\], this action is granted…

---

## [Alerts an Action 7.12 not working](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 8:16pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806 "2021-05-10T20:16:23Z")

</div>

Hi, I have create some alerts for ML jobs, and is not sending mails, I have tested the send email action and it works, I have set the alerts to the lowest level of anomaly score, both bucket and record (on separated aler…

---

## [Nodejs missing transaction trace](https://discuss.elastic.co/t/nodejs-missing-transaction-trace/272551)

<div class="topic-metadata">

**Author:** [@Max\_Lee](https://discuss.elastic.co/u/Max_Lee)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 7:17pm UTC](https://discuss.elastic.co/t/nodejs-missing-transaction-trace/272551 "2021-05-10T19:17:02Z")

</div>

Kibana version: v7.12.1 Elasticsearch version: v7.12.1 APM Server version: v7.12.1 APM Agent language and version: nodejs : 12 fastify : 2.11.0 mongoose : 5.11.1 elastic-apm-node : 3.14.0 ioredis : 4.14.1 Bro…

---

## [Logstash conf output to elasticsearch with document\_id set only indexes one record](https://discuss.elastic.co/t/logstash-conf-output-to-elasticsearch-with-document-id-set-only-indexes-one-record/272604)

<div class="topic-metadata">

**Author:** [@andcur](https://discuss.elastic.co/u/andcur)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 5:41pm UTC](https://discuss.elastic.co/t/logstash-conf-output-to-elasticsearch-with-document-id-set-only-indexes-one-record/272604 "2021-05-10T17:41:37Z")

</div>

Hi, I am using logstash to populate data from SQL server to elastic. When I specify document\_id (as below) I only get one document in my index. If I do not specify that document\_id field should be taken from PolicyId,…

---

## [Apollo-server-express with Typescript Unknown route](https://discuss.elastic.co/t/apollo-server-express-with-typescript-unknown-route/272586)

<div class="topic-metadata">

**Author:** [@yulrizka](https://discuss.elastic.co/u/yulrizka)\
**Replies:** 2\
**Last updated:** [May 10, 2021, 5:16pm UTC](https://discuss.elastic.co/t/apollo-server-express-with-typescript-unknown-route/272586 "2021-05-10T17:16:33Z")

</div>

APM Agent language and version: "elastic-apm-node": "^3.14.0", with "apollo-server-express": "^2.0.4", "graphql": "^15.5.0", I managed to get the integration working between the graphql server and APM. But it seems t…

---

## [Unable to update index rollover](https://discuss.elastic.co/t/unable-to-update-index-rollover/272595)

<div class="topic-metadata">

**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 5:04pm UTC](https://discuss.elastic.co/t/unable-to-update-index-rollover/272595 "2021-05-10T17:04:17Z")

</div>

Hello there, I am trying to modify the rollover conditions of a handful of indexes in my ES cluster. Elasticsearch version: 7.11.2 Winlogbeat version: 7.11.2 In order to do so I am using the following query: curl -u…

---

## [APM service map behavior is different with opentracing](https://discuss.elastic.co/t/apm-service-map-behavior-is-different-with-opentracing/272129)

<div class="topic-metadata">

**Author:** [@jialipassion](https://discuss.elastic.co/u/jialipassion)\
**Replies:** 3\
**Last updated:** [May 10, 2021, 4:57pm UTC](https://discuss.elastic.co/t/apm-service-map-behavior-is-different-with-opentracing/272129 "2021-05-10T16:57:27Z")

</div>

I am using elastic-apm-node agent to create distributed tracing. Here is my services structures. I have 3 micro services. producer, kafka, consumer The call sequence is producer -\> kafka -\> consumer I am not using a…

[Previous page](https://discuss.elastic.co/latest.md?page=1684)

[Next page](https://discuss.elastic.co/latest.md?page=1686)
