# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1700

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1701

---

## [Google\_workspace poll loads of data](https://discuss.elastic.co/t/google-workspace-poll-loads-of-data/268255)

<div class="topic-metadata">

**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\
**Replies:** 10\
**Last updated:** [May 1, 2021, 7:41pm UTC](https://discuss.elastic.co/t/google-workspace-poll-loads-of-data/268255 "2021-05-01T19:41:11Z")

</div>

Hi, Using filebeat 7.12 and 7.11.2 google\_workspace does not respect the var.initial\_interval so it polls huge amount of data and also polls it multiple times confirmed from Google API dashboard too. \> |2021-03-24T20:3…

---

## [File system backup instead of snapshot](https://discuss.elastic.co/t/file-system-backup-instead-of-snapshot/271882)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 1\
**Last updated:** [May 1, 2021, 6:25pm UTC](https://discuss.elastic.co/t/file-system-backup-instead-of-snapshot/271882 "2021-05-01T18:25:44Z")

</div>

I'm planning to use single node cluster of Elasticsearch. I would like to know if we can take file system level backup if the Elasticsearch is proposing one node one path?

---

## [Correctly set up index analyzer and search analyzer](https://discuss.elastic.co/t/correctly-set-up-index-analyzer-and-search-analyzer/271803)

<div class="topic-metadata">

**Author:** [@Guido\_Cioni](https://discuss.elastic.co/u/Guido_Cioni)\
**Replies:** 2\
**Last updated:** [May 1, 2021, 5:52pm UTC](https://discuss.elastic.co/t/correctly-set-up-index-analyzer-and-search-analyzer/271803 "2021-05-01T17:52:02Z")

</div>

Hi, I'm trying to set up a simple analyzer to search for question/answers into our elastic search cluster. We need to have the option to use english language analyzer (with the default stopwords) together with custom sy…

---

## [How to get the Elastic Certified Engineer badge?](https://discuss.elastic.co/t/how-to-get-the-elastic-certified-engineer-badge/271850)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [May 1, 2021, 4:17pm UTC](https://discuss.elastic.co/t/how-to-get-the-elastic-certified-engineer-badge/271850 "2021-05-01T16:17:58Z")

</div>

Hello, I saw that some people have the Elastic Certified badge on this forum, I've got certified last month but I didn't find a way to show the certification badge. How can I get this badge? The emails I have configur…

---

## [Definition of node roles](https://discuss.elastic.co/t/definition-of-node-roles/271859)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 4\
**Last updated:** [May 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/definition-of-node-roles/271859 "2021-05-01T14:33:41Z")

</div>

Hello, What is the meaning this node role? cdfhilmrstw

---

## [Unable to access kibana](https://discuss.elastic.co/t/unable-to-access-kibana/271715)

<div class="topic-metadata">

**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\
**Replies:** 3\
**Last updated:** [May 1, 2021, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana/271715 "2021-05-01T14:09:50Z")

</div>

Im unable to access my kibana from my elastic cloud or my direct login endpoint to kibana, im seeing the next errors: From elastic cloud and then launch kibana If i try to access from here I get The proble…

---

## [Compress Elasticsearch Index after x days](https://discuss.elastic.co/t/compress-elasticsearch-index-after-x-days/269430)

<div class="topic-metadata">

**Author:** [@Harsh\_Sharma](https://discuss.elastic.co/u/Harsh_Sharma)\
**Replies:** 3\
**Last updated:** [April 11, 2021, 12:03pm UTC](https://discuss.elastic.co/t/compress-elasticsearch-index-after-x-days/269430 "2021-04-11T12:03:51Z")

</div>

Hi All, I'm using ELK version 6.5.8. Using curator retention period of ES index are maintaining i.e. 7 days. Here is a requirement where I want to keep 3 days data in index & data more than 3 days should compress & got…

---

## [Elastic Password with Docker and TLS](https://discuss.elastic.co/t/elastic-password-with-docker-and-tls/271812)

<div class="topic-metadata">

**Author:** [@lucasbasquerotto](https://discuss.elastic.co/u/lucasbasquerotto)\
**Replies:** 4\
**Last updated:** [May 1, 2021, 12:35pm UTC](https://discuss.elastic.co/t/elastic-password-with-docker-and-tls/271812 "2021-05-01T12:35:27Z")

</div>

Hi, I'm trying to setup an elasticsearch service running inside a docker container, first in my local machine to make everything work right before I try to deploy remotely. The problem is that I set the ELASTIC\_PASSWORD …

---

## [Does it support the collection of UDP traffic on the specified port number?](https://discuss.elastic.co/t/does-it-support-the-collection-of-udp-traffic-on-the-specified-port-number/270521)

<div class="topic-metadata">

**Author:** [@angelyouyou](https://discuss.elastic.co/u/angelyouyou)\
**Replies:** 4\
**Last updated:** [May 1, 2021, 7:05am UTC](https://discuss.elastic.co/t/does-it-support-the-collection-of-udp-traffic-on-the-specified-port-number/270521 "2021-05-01T07:05:54Z")

</div>

Does it support the collection of UDP traffic on the specified port number?

---

## [Filebeat Not Using Provided Credentials File w/ GCP Module](https://discuss.elastic.co/t/filebeat-not-using-provided-credentials-file-w-gcp-module/271801)

<div class="topic-metadata">

**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\
**Replies:** 3\
**Last updated:** [May 1, 2021, 6:39am UTC](https://discuss.elastic.co/t/filebeat-not-using-provided-credentials-file-w-gcp-module/271801 "2021-05-01T06:39:19Z")

</div>

Version: 7.12.1 I am getting the following when trying to enable the GCP module, using audit, firewall, and vpcflow filesets using var.credentials\_file: /etc/filebeat/filebeat/creds.json : Exiting: Failed to start craw…

---

## [No kibana plugins found in archive](https://discuss.elastic.co/t/no-kibana-plugins-found-in-archive/271851)

<div class="topic-metadata">

**Author:** [@vel1024](https://discuss.elastic.co/u/vel1024)\
**Replies:** 2\
**Last updated:** [May 1, 2021, 5:53am UTC](https://discuss.elastic.co/t/no-kibana-plugins-found-in-archive/271851 "2021-05-01T05:53:31Z")

</div>

Hi, I'm trying to install kibana-xlsx-import plugins https://github.com/Orange-OpenSource/kibana-xlsx-import , but i got this error. How to solve this problem? OS : Windows 10 Elasticsearch, Kibana : 7.12.0 Docker…

---

## [Error Java heap space](https://discuss.elastic.co/t/error-java-heap-space/271837)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [May 1, 2021, 1:02am UTC](https://discuss.elastic.co/t/error-java-heap-space/271837 "2021-05-01T01:02:20Z")

</div>

I created an ElasticSearch server, but today it stopped and in the log it reported that the error was: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[main-node\] fatal error in thread \[elasticsearch\[main-node\]\[sea…

---

## [Kibana Grouping](https://discuss.elastic.co/t/kibana-grouping/271718)

<div class="topic-metadata">

**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\
**Replies:** 4\
**Last updated:** [April 30, 2021, 10:26pm UTC](https://discuss.elastic.co/t/kibana-grouping/271718 "2021-04-30T22:26:12Z")

</div>

My use case calls for counting all documents in an index pattern across days. I am grouping by timestamp field by minutes that is being ingested in milliseconds. So simply trying to group milliseconds into minutes. I ge…

---

## [Endpoint Security Integration not working localhost](https://discuss.elastic.co/t/endpoint-security-integration-not-working-localhost/271807)

<div class="topic-metadata">

**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 8:27pm UTC](https://discuss.elastic.co/t/endpoint-security-integration-not-working-localhost/271807 "2021-04-30T20:27:46Z")

</div>

I am using elastic-agent 7.12.1 and elasticsearch/kibana docker 7.12.1. Everything is running as https://0.0.0.0 Setup is here if needed: Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/.README.md at master · …

---

## [Using rate() function in Kibana Lenses](https://discuss.elastic.co/t/using-rate-function-in-kibana-lenses/271790)

<div class="topic-metadata">

**Author:** [@Ronaldo\_Lanhellas](https://discuss.elastic.co/u/Ronaldo_Lanhellas)\
**Replies:** 6\
**Last updated:** [April 30, 2021, 7:54pm UTC](https://discuss.elastic.co/t/using-rate-function-in-kibana-lenses/271790 "2021-04-30T19:54:39Z")

</div>

I'm collecting metrics from kubernetes nodes using this api: kubectl get --raw /api/v1/nodes/$1/proxy/metrics/cadvisor And this returns the metrics in Prometheus format. So, I'm sending this to Logstash and making some…

---

## [Is it possible to get en.json file in Kibana? || Есть ли возможность получить en.json файл в Kibana?](https://discuss.elastic.co/t/is-it-possible-to-get-en-json-file-in-kibana-en-json-kibana/269890)

<div class="topic-metadata">

**Author:** [@111462](https://discuss.elastic.co/u/111462)\
**Replies:** 2\
**Last updated:** [April 30, 2021, 7:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-en-json-file-in-kibana-en-json-kibana/269890 "2021-04-30T19:23:58Z")

</div>

On the server, the directory / usr / share / kibana / x-pack / plugins / translations / translations contains the localization files for Japanese and Chinese. After localization into Russian, Kibana turned into Aliexpre…

---

## [Field not showing in "Available fields" unless I un-check "Hide missing fields"](https://discuss.elastic.co/t/field-not-showing-in-available-fields-unless-i-un-check-hide-missing-fields/271826)

<div class="topic-metadata">

**Author:** [@Jody\_McIvor](https://discuss.elastic.co/u/Jody_McIvor)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 6:54pm UTC](https://discuss.elastic.co/t/field-not-showing-in-available-fields-unless-i-un-check-hide-missing-fields/271826 "2021-04-30T18:54:30Z")

</div>

Hi Everyone! I'm newish to the forums but have been running multiple stacks for my workplace for a couple years now, although my comfort level is still pretty low when it comes to usage, I can build/deploy ELK stacks bli…

---

## [Can we stop ongoing search on kibana](https://discuss.elastic.co/t/can-we-stop-ongoing-search-on-kibana/271677)

<div class="topic-metadata">

**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 6:44pm UTC](https://discuss.elastic.co/t/can-we-stop-ongoing-search-on-kibana/271677 "2021-04-30T18:44:18Z")

</div>

I would like to know if we have option to stop the search. Like if I search for some ip/name anything and if it is taking much time then do we have option to stop from kibana and re-start search. Not from cli but from ki…

---

## [Elastic ILM issue](https://discuss.elastic.co/t/elastic-ilm-issue/269715)

<div class="topic-metadata">

**Author:** [@datama](https://discuss.elastic.co/u/datama)\
**Replies:** 9\
**Last updated:** [April 30, 2021, 6:41pm UTC](https://discuss.elastic.co/t/elastic-ilm-issue/269715 "2021-04-30T18:41:06Z")

</div>

Team, I have setup ILM for hot-warm architecture, getting "action \[indices:admin/aliases\] is unauthorized for API key id of user " error during warm phase. Please advice on how I could resolve, I tried to do a move an…

---

## [Why are Range Queries on Nested Docs Slow?](https://discuss.elastic.co/t/why-are-range-queries-on-nested-docs-slow/271825)

<div class="topic-metadata">

**Author:** [@mserrato](https://discuss.elastic.co/u/mserrato)\
**Replies:** 0\
**Last updated:** [April 30, 2021, 6:43pm UTC](https://discuss.elastic.co/t/why-are-range-queries-on-nested-docs-slow/271825 "2021-04-30T18:43:50Z")

</div>

Hello, I was wondering if I could get some insight and possibly some explanation on some search performance I've noticed when using range queries with nested and non-nested documents. I've been performing some benchmar…

---

## [Kibana server is not ready yet \[self-managed\]](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-self-managed/271734)

<div class="topic-metadata">

**Author:** [@Dylawn](https://discuss.elastic.co/u/Dylawn)\
**Replies:** 2\
**Last updated:** [April 30, 2021, 6:42pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-self-managed/271734 "2021-04-30T18:42:55Z")

</div>

Running these services on one self-hosted Ubuntu VM on Google: elasticsearch - not yet setup to be accessible externally enterprise-search - accessible externally kibana - should be accessible externally but something …

---

## [Kibana visual with changing colour](https://discuss.elastic.co/t/kibana-visual-with-changing-colour/271751)

<div class="topic-metadata">

**Author:** [@tkkchan](https://discuss.elastic.co/u/tkkchan)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 6:19pm UTC](https://discuss.elastic.co/t/kibana-visual-with-changing-colour/271751 "2021-04-30T18:19:40Z")

</div>

Dear All, I am trying to make a visualizatin which looked like this: It's a time-averaged value of a certain parameter. However, I wish to change the colour of tile according to range of the parameter. Could it be do…

---

## [Logstash Nested Object](https://discuss.elastic.co/t/logstash-nested-object/271817)

<div class="topic-metadata">

**Author:** [@MR\_551](https://discuss.elastic.co/u/MR_551)\
**Replies:** 0\
**Last updated:** [April 30, 2021, 5:19pm UTC](https://discuss.elastic.co/t/logstash-nested-object/271817 "2021-04-30T17:19:20Z")

</div>

Hello, We had a node failure on a 3 node cluster and Kibana is refusing to start with the following error. .kibana\_task\_manager index all shards failed That node had the Kibana system index and looks like data got cor…

---

## [Matching multiple topics (sets of keywords)](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618)

<div class="topic-metadata">

**Author:** [@aartur](https://discuss.elastic.co/u/aartur)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 4:56pm UTC](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618 "2021-04-30T16:56:30Z")

</div>

Hello, I'm investigating whether ES is able to order documents wrt. a relevance score for two or more keywords sets, assigning a high score only to documents related strongly to all the keyword sets. Lets say I have in…

---

## [Multiple csv with different columns](https://discuss.elastic.co/t/multiple-csv-with-different-columns/271794)

<div class="topic-metadata">

**Author:** [@dpb\_2000](https://discuss.elastic.co/u/dpb_2000)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 5:04pm UTC](https://discuss.elastic.co/t/multiple-csv-with-different-columns/271794 "2021-04-30T17:04:57Z")

</div>

Hi, I am trying to parse multiple csv with different columns based on autodetect\_column\_names =\> true argument. The main problem is that when I upload the data the columns get repeated and only the columns of the first c…

---

## [Using Group By Keys to apply metric aggregation](https://discuss.elastic.co/t/using-group-by-keys-to-apply-metric-aggregation/271811)

<div class="topic-metadata">

**Author:** [@Craig\_Uss](https://discuss.elastic.co/u/Craig_Uss)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 5:04pm UTC](https://discuss.elastic.co/t/using-group-by-keys-to-apply-metric-aggregation/271811 "2021-04-30T17:04:10Z")

</div>

Is it possible to use an aggregation group\_by attributes in a metric aggregation to determine if the metric should be counted or not? Here is an example: Index of documents: Schema @timestamp - UTC Timestamp c…

---

## [Nanosecond & filebeats & netflow](https://discuss.elastic.co/t/nanosecond-filebeats-netflow/271814)

<div class="topic-metadata">

**Author:** [@dorbye](https://discuss.elastic.co/u/dorbye)\
**Replies:** 0\
**Last updated:** [April 30, 2021, 4:34pm UTC](https://discuss.elastic.co/t/nanosecond-filebeats-netflow/271814 "2021-04-30T16:34:51Z")

</div>

Hello, I've an issue with filebeats and netflow : I use softflowd to send netflow metrics with a nanosecond precision to filebeats But, after decoding filebeats only send with a nanosecond precision : (part of htt…

---

## ["undefined" in synthetics performance breakdown](https://discuss.elastic.co/t/undefined-in-synthetics-performance-breakdown/271225)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 4\
**Last updated:** [April 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/undefined-in-synthetics-performance-breakdown/271225 "2021-04-30T16:19:07Z")

</div>

Hi, I am currently playing around with the synthetics package and found that the performance breakdown shows always "undefined" as title. What is supposed to be shown there? Obviously, when clicking on any of the "u…

---

## [Question about shard balancing](https://discuss.elastic.co/t/question-about-shard-balancing/271796)

<div class="topic-metadata">

**Author:** [@syn](https://discuss.elastic.co/u/syn)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 4:09pm UTC](https://discuss.elastic.co/t/question-about-shard-balancing/271796 "2021-04-30T16:09:51Z")

</div>

hi all, i've a qn.. if node1 has 3 shards. i add node2 and node3 at a later time, will the 3 shards balance out automatically? i.e. 1 shard in each node

---

## [Document deleted after logstash execution](https://discuss.elastic.co/t/document-deleted-after-logstash-execution/271774)

<div class="topic-metadata">

**Author:** [@sourabhjain104](https://discuss.elastic.co/u/sourabhjain104)\
**Replies:** 4\
**Last updated:** [April 30, 2021, 4:04pm UTC](https://discuss.elastic.co/t/document-deleted-after-logstash-execution/271774 "2021-04-30T16:04:54Z")

</div>

Hello, I am using the latest version of ELK (7.11.2) on ubuntu 18.4. I am getting data from postgre using JDBC My logstash.conf file look lile : input { jdbc { jdbc\_connection\_string =\>"jdbc:postgresql://123.0.…

[Previous page](https://discuss.elastic.co/latest.md?page=1699)

[Next page](https://discuss.elastic.co/latest.md?page=1701)
