# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1737

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1738

---

## [Multiple pipelines](https://discuss.elastic.co/t/multiple-pipelines/269867)

<div class="topic-metadata">

**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\
**Replies:** 0\
**Last updated:** [April 12, 2021, 11:07am UTC](https://discuss.elastic.co/t/multiple-pipelines/269867 "2021-04-12T11:07:31Z")

</div>

hi, I have multiple inputs and I want to parse and enrich them by the project GitHub - Cargill/OpenSIEM-Logstash-Parsing: SIEM Logstash parsing for more than hundred technologies so how can I do that thanks

---

## [Painless - New Calculated field as a .keyword extension](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632)

<div class="topic-metadata">

**Author:** [@Raynb](https://discuss.elastic.co/u/Raynb)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 10:52am UTC](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632 "2021-04-12T10:52:22Z")

</div>

In our data we have a page field with URLs and some come in as /blog/really-good-content/ and others come as /blog/really-good-content (the lack of trailing slash) So in Painless I've made a scipted field to merge these…

---

## [How to understand "Strings longer than the ignore\_above setting will not be indexed or stored."?](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859)

<div class="topic-metadata">

**Author:** [@light\_chen](https://discuss.elastic.co/u/light_chen)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 10:41am UTC](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859 "2021-04-12T10:41:12Z")

</div>

I want to verify whether my understanding about the meaning that the glossary "not be indexed" and "not be stored" is right. I suppose "not be indexed" means that the terms analysed from the original field value will n…

---

## [Aggregation with java High Level Rest Client](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699)

<div class="topic-metadata">

**Author:** [@adelDz](https://discuss.elastic.co/u/adelDz)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 10:30am UTC](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699 "2021-04-12T10:30:38Z")

</div>

Hello, How to convert this Query Sql with java High Level Rest Client // select count(\*) from Customer group by Last\_Name, First\_Name, City Thank you in advance

---

## [REST calls from frontend](https://discuss.elastic.co/t/rest-calls-from-frontend/269788)

<div class="topic-metadata">

**Author:** [@elasticuser7](https://discuss.elastic.co/u/elasticuser7)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 10:09am UTC](https://discuss.elastic.co/t/rest-calls-from-frontend/269788 "2021-04-12T10:09:26Z")

</div>

Since ES provides a REST api, with all the powerful frontend frameworks out there, it will be tempting to make ES REST calls directly from the frontend. Would it be recommended to make such client-side ES calls especial…

---

## [Elastic search : Can query include kind of a subquery or subqueries using multiple indices?](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443)

<div class="topic-metadata">

**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443 "2021-04-12T10:01:21Z")

</div>

I have index1 with geo-point data, index2 with polygons. Index2 has multiple polygon rows for given say id value. I would like to find all geo-points from index1 that are inside any of the polygons from index2 having sa…

---

## [Need to restart filebeat time to time](https://discuss.elastic.co/t/need-to-restart-filebeat-time-to-time/269845)

<div class="topic-metadata">

**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 9:56am UTC](https://discuss.elastic.co/t/need-to-restart-filebeat-time-to-time/269845 "2021-04-12T09:56:36Z")

</div>

Hi i have issue on filebeat Logs are not showing every 6hours(approximately) in Kibana dashboard. After restarting the filebeat ,Kibana dashboard gets logs again .my filebeat needs to restart around every 6 hours to kee…

---

## [Filebeat setup error Request Time-out](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821)

<div class="topic-metadata">

**Author:** [@Leon2](https://discuss.elastic.co/u/Leon2)\
**Replies:** 3\
**Last updated:** [April 12, 2021, 9:30am UTC](https://discuss.elastic.co/t/filebeat-setup-error-request-time-out/269821 "2021-04-12T09:30:09Z")

</div>

Hi I'm struggeling in setting up filebeat to work with elastic cloud instance. all I'm trying to do is enabling a module( without changing any config, yet) and uplouding dashboard setting from filebeat to elastic cloud …

---

## [Dynamic sync between Mongo to Elastic search with Kafka and Logstash spring application](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799)

<div class="topic-metadata">

**Author:** [@mikaell](https://discuss.elastic.co/u/mikaell)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 9:24am UTC](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799 "2021-04-12T09:24:37Z")

</div>

Greetings! in this sequence we want to talk about Data base Connectivity especially the dynamic sync between mongo and elastic search with the aid of Apache Kafka and Logstash for ingesting document beside that we want …

---

## [Trace logs in APM does not shows log due to sourceId=logs](https://discuss.elastic.co/t/trace-logs-in-apm-does-not-shows-log-due-to-sourceid-logs/269568)

<div class="topic-metadata">

**Author:** [@lancer\_enkor](https://discuss.elastic.co/u/lancer_enkor)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 9:16am UTC](https://discuss.elastic.co/t/trace-logs-in-apm-does-not-shows-log-due-to-sourceid-logs/269568 "2021-04-12T09:16:11Z")

</div>

Kibana version: 7.8.0 Elasticsearch version: 7.8.0 APM Server version: 7.8.0 APM Agent language and version: Java&Js latest Browser version: Latest Chrome Original install method (e.g. download page, yum, deb, from …

---

## [Unable to receive whitelist acceptance email from Elastic Monitoring](https://discuss.elastic.co/t/unable-to-receive-whitelist-acceptance-email-from-elastic-monitoring/269580)

<div class="topic-metadata">

**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 8:57am UTC](https://discuss.elastic.co/t/unable-to-receive-whitelist-acceptance-email-from-elastic-monitoring/269580 "2021-04-12T08:57:00Z")

</div>

Hello, I have set up a Machine Learning job with a watcher and assigned an email address to receive these. Reading through documentaion i can see that i need to add this to the Email Monitoring Whitelist, which i have …

---

## [디스크 최고 활성 시간 수집 방법 문의](https://discuss.elastic.co/t/topic/269854)

<div class="topic-metadata">

**Author:** [@jongpyo.lee](https://discuss.elastic.co/u/jongpyo.lee)\
**Replies:** 0\
**Last updated:** [April 12, 2021, 8:56am UTC](https://discuss.elastic.co/t/topic/269854 "2021-04-12T08:56:24Z")

</div>

안녕하세요. Metricbeat 에서 디스크 최고 활성 시간을 수집하려고 합니다. Windows 성능 모니터의 속성에서 PhysicalDisk(\_Total)% Disk Time 카운터를 추가하여 데이터를 확인해보려고 했습니다. 하지만 Kibana 에서 값을 출력해보니 원하는 데이터 값이 출력 되지 않습니다. 현재 저희가 사용하고자 하는 필드가 최고 활성시간을 수집하기 위한 …

---

## [PHP functions and URLS?](https://discuss.elastic.co/t/php-functions-and-urls/269155)

<div class="topic-metadata">

**Author:** [@EwertTheDragon](https://discuss.elastic.co/u/EwertTheDragon)\
**Replies:** 6\
**Last updated:** [April 12, 2021, 8:14am UTC](https://discuss.elastic.co/t/php-functions-and-urls/269155 "2021-04-12T08:14:39Z")

</div>

I am not sure if I have set things up correctly, but I am only getting traces of mysql queries, not php functions. It is helpful, but would help even more if I knew which functions are called etc. Also, the applicati…

---

## [How to disable the result container in autocomplete?](https://discuss.elastic.co/t/how-to-disable-the-result-container-in-autocomplete/269847)

<div class="topic-metadata">

**Author:** [@Przemyslaw\_Wywigacz](https://discuss.elastic.co/u/Przemyslaw_Wywigacz)\
**Replies:** 0\
**Last updated:** [April 12, 2021, 7:45am UTC](https://discuss.elastic.co/t/how-to-disable-the-result-container-in-autocomplete/269847 "2021-04-12T07:45:15Z")

</div>

Hey :slight\_smile: How to change the behavior of autocomplete after hitting enter? I'd like to redirect for search page with typed phrase in url. #swiftype

---

## [Space consumption after reindex](https://discuss.elastic.co/t/space-consumption-after-reindex/269618)

<div class="topic-metadata">

**Author:** [@speechkey](https://discuss.elastic.co/u/speechkey)\
**Replies:** 3\
**Last updated:** [April 12, 2021, 7:25am UTC](https://discuss.elastic.co/t/space-consumption-after-reindex/269618 "2021-04-12T07:25:27Z")

</div>

Hi folks we are trying to migrate from 5.5.1 to 7.10.2. After upgrade to 6.8 I'm trying to reindex indices which were created on 5.5.1. curl -sq -X POST "http://elasticsearch:9200/\_reindex?pretty" -H 'Content-Type: app…

---

## [Hiding Multi-Field Display In Discover](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 7:24am UTC](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720 "2021-04-12T07:24:46Z")

</div>

Is it possible to hide the display of multi-fields in Discover for Kibana 7.12? I like the capability, but it really clutters up the display of data for regular users.

---

## [Send alert when transform has stopped](https://discuss.elastic.co/t/send-alert-when-transform-has-stopped/269790)

<div class="topic-metadata">

**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 6:59am UTC](https://discuss.elastic.co/t/send-alert-when-transform-has-stopped/269790 "2021-04-12T06:59:48Z")

</div>

Hi, Is it possible to trigger an alert when a transform has stopped either by a user or from when it has failed? One option would be to check if no new entries appear in the transform index however it is expected that …

---

## [How to get JVM Memory used with metricbeat jolokia module](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828)

<div class="topic-metadata">

**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 6:49am UTC](https://discuss.elastic.co/t/how-to-get-jvm-memory-used-with-metricbeat-jolokia-module/267828 "2021-04-12T06:49:33Z")

</div>

I'm trying to use Jolokia + metricbeat to gather Info about the JVM Memory. I did everything like described in the docs but it won't work. https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-jo…

---

## [Elastic search reindexing stuck at 52000 docs while the source has more docs](https://discuss.elastic.co/t/elastic-search-reindexing-stuck-at-52000-docs-while-the-source-has-more-docs/269831)

<div class="topic-metadata">

**Author:** [@Nissha](https://discuss.elastic.co/u/Nissha)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 5:33am UTC](https://discuss.elastic.co/t/elastic-search-reindexing-stuck-at-52000-docs-while-the-source-has-more-docs/269831 "2021-04-12T05:33:39Z")

</div>

I am trying to reindex a source index which has 500k documents with new mapping but the reindexing gets stuck at 52000 docs and doesn't proceed. It worked perfectly for another index which had 190k docs. Kindly help me w…

---

## [Scripted fields defined in kibana - when executed?](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814)

<div class="topic-metadata">

**Author:** [@Marcin\_Kolny](https://discuss.elastic.co/u/Marcin_Kolny)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 4:24am UTC](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814 "2021-04-12T04:24:30Z")

</div>

Hi, I couldn't find the details in the documentation, so I hope somebody here will be able to help; I'm curious when the scripted field defined in Kibana is executed? Is it executed on each query, or does Elasticsearch …

---

## [Golang logstash?](https://discuss.elastic.co/t/golang-logstash/269610)

<div class="topic-metadata">

**Author:** [@wshek](https://discuss.elastic.co/u/wshek)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 2:51pm UTC](https://discuss.elastic.co/t/golang-logstash/269610 "2021-04-08T14:51:45Z")

</div>

Enable golang for your logstash pipe This is not a rewrite its an extensible idea. Has anyone come across this type idea before? I have used Elasticstack for quite some time now. I can tell you unequivocally that th…

---

## [Filebeat Module Suggestion](https://discuss.elastic.co/t/filebeat-module-suggestion/268426)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 1:33am UTC](https://discuss.elastic.co/t/filebeat-module-suggestion/268426 "2021-04-12T01:33:10Z")

</div>

Hi Elasticsearch Developers, This is kind of suggestion post, I want to integrate Versa-Network Logs into Elasticsearch. and it would be much easier if you include that module in Filebeat. Too much fields for ecs map…

---

## [What will happen if I install ELK stack with the unsupported version?](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659)

<div class="topic-metadata">

**Author:** [@BTH.S3](https://discuss.elastic.co/u/BTH.S3)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 1:32am UTC](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659 "2021-04-12T01:32:49Z")

</div>

I've noticed that installed Elasticsearch cluster and Kibana was installed on Ubuntu 20.04 LTS. (By one of my colleague) with unsupported version 6.2.4 (from the Elastic Support Matrix | Elasticsearch). But he said the …

---

## [java.nio.channels.OverlappingFileLockException: null](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676)

<div class="topic-metadata">

**Author:** [@yangyong](https://discuss.elastic.co/u/yangyong)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 1:30am UTC](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676 "2021-04-12T01:30:26Z")

</div>

some problems happened when i install es on my mac. es version: 7.12.0 what should i do? reboot machine? but it seems no effect~~! :sweat\_smile: \[2021-04-09T15:46:17,351\]\[INFO \]\[o.e.x.s.a.s.FileRolesStore\] \[MacdeMa…

---

## [How do I use multiple conditions in condition script watcher](https://discuss.elastic.co/t/how-do-i-use-multiple-conditions-in-condition-script-watcher/269677)

<div class="topic-metadata">

**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\
**Replies:** 0\
**Last updated:** [April 9, 2021, 8:07am UTC](https://discuss.elastic.co/t/how-do-i-use-multiple-conditions-in-condition-script-watcher/269677 "2021-04-09T08:07:17Z")

</div>

If I create a watcher and I have a condition that looks like this: "condition": { "script": { "source": "return 5 / 100 \* 100 \> 5", "lang": "painless" } } it returns false (0). while when I have …

---

## [Updating mapping for CCR replica](https://discuss.elastic.co/t/updating-mapping-for-ccr-replica/269804)

<div class="topic-metadata">

**Author:** [@oskars](https://discuss.elastic.co/u/oskars)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 12:54am UTC](https://discuss.elastic.co/t/updating-mapping-for-ccr-replica/269804 "2021-04-12T00:54:22Z")

</div>

Hi ! We are looking to buy platinium license to use CCR functionality. We are stuck with old elastic version 6.8. (no way to upgrade). In our setup replication is needed for failover with hot indice (all data i sync t…

---

## [Log\_file\_path](https://discuss.elastic.co/t/log-file-path/267727)

<div class="topic-metadata">

**Author:** [@christos\_zivlas](https://discuss.elastic.co/u/christos_zivlas)\
**Replies:** 9\
**Last updated:** [April 12, 2021, 12:29am UTC](https://discuss.elastic.co/t/log-file-path/267727 "2021-04-12T00:29:09Z")

</div>

Hi i am using filebeat on windows to get some application logs. Messages are harvest using a wildcard path. messages coming in do not contain the path of the log, is there a way to place such a field in the log message?

---

## [Stale data until elasticsearch is restarted](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480)

<div class="topic-metadata">

**Author:** [@rwxr\_xr\_x](https://discuss.elastic.co/u/rwxr_xr_x)\
**Replies:** 3\
**Last updated:** [April 12, 2021, 12:24am UTC](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480 "2021-04-12T00:24:16Z")

</div>

Hello, I can't seem to find any posts about this. I have a cluster with one node, with "cluster health: yellow (60 of 115)". I'm using ES 7.10.2 From an application I send: POST http://ESURL/ALIAS\_NAME/\_doc/OBJECT\_ID …

---

## [Logstash Grok Filter Error Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \[A-Za-z0-9\_-\], '\\"', \\"'\\", \[A-Za-z\_\], \\"-\\", \[0-9\], \\"\[\\", \\"{\\"](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808)

<div class="topic-metadata">

**Author:** [@baklavadeseni](https://discuss.elastic.co/u/baklavadeseni)\
**Replies:** 3\
**Last updated:** [April 11, 2021, 11:42pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808 "2021-04-11T23:42:26Z")

</div>

Hello Logstash Community, I am trying to parse text below. I was able to filter it in grokdebug site. But however i can't filter in logstash. It throws this. "LogStash::ConfigurationError", :message=\>"Expected one of \[…

---

## [Metricbeat - mysql module - galera\_status metricset](https://discuss.elastic.co/t/metricbeat-mysql-module-galera-status-metricset/267508)

<div class="topic-metadata">

**Author:** [@AlexanderN](https://discuss.elastic.co/u/AlexanderN)\
**Replies:** 5\
**Last updated:** [April 11, 2021, 8:57pm UTC](https://discuss.elastic.co/t/metricbeat-mysql-module-galera-status-metricset/267508 "2021-04-11T20:57:02Z")

</div>

Hello! First time poster searching for an answer to a problem that google isn't helpful with. I am using Metricbeat with the mysql module to send metrics from my "5.7.30-log" mysql server with the "galera\_status" metri…

[Previous page](https://discuss.elastic.co/latest.md?page=1736)

[Next page](https://discuss.elastic.co/latest.md?page=1738)
