# Latest **URL:** https://discuss.elastic.co/latest.md?page=1752 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1753 --- ## [Failed to get report](https://discuss.elastic.co/t/failed-to-get-report/269040)
**Author:** [@111456](https://discuss.elastic.co/u/111456)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 9:52am UTC](https://discuss.elastic.co/t/failed-to-get-report/269040 "2021-04-02T09:52:08Z")
my problem： my yml: server.port: 5601 server.name: "kibana" server.host: "0.0.0.0" elasticsearch.hosts: \["http://192.168.8.142:9200", "http://192.168.8.143:9200", "http://192.168.8.144:9200"\] k… --- ## [Slower Query Response Times - Intermittent](https://discuss.elastic.co/t/slower-query-response-times-intermittent/266634)
**Author:** [@israni.amit](https://discuss.elastic.co/u/israni.amit)\ **Replies:** 6\ **Last updated:** [April 2, 2021, 9:41am UTC](https://discuss.elastic.co/t/slower-query-response-times-intermittent/266634 "2021-04-02T09:41:46Z")
Hi there, We recently noticed that some of the queries were having high response times like 12-15 seconds compared to others which were in miliseconds. We have a query layer (Spring Boot App) which uses RestHighLevelCl… --- ## [Recherche et auto-complete](https://discuss.elastic.co/t/recherche-et-auto-complete/267093)
**Author:** [@jfchaput](https://discuss.elastic.co/u/jfchaput)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 9:22am UTC](https://discuss.elastic.co/t/recherche-et-auto-complete/267093 "2021-04-02T09:22:13Z")
Bonjour, Je vous fait pars d'un enjeu qui me préoccupe, afin de vous donner plus de détails je vous explique le contexte afin de comprendre les défis auquels je fait face. Je suis dévelopeur d'une application web qui e… --- ## [ElasticSearch WARN after installing kibana](https://discuss.elastic.co/t/elasticsearch-warn-after-installing-kibana/268428)
**Author:** [@kylesu](https://discuss.elastic.co/u/kylesu)\ **Replies:** 10\ **Last updated:** [April 2, 2021, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-warn-after-installing-kibana/268428 "2021-04-02T09:07:47Z")
After installing kibana,when i operate(GET/POST/DELETE and so on) Elastic Search with High Level Rest Clinet comes up this warning: Each request comes up with one warning,i have 500 millions documents to process every … --- ## [Logstash pipeline order](https://discuss.elastic.co/t/logstash-pipeline-order/269057)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-pipeline-order/269057 "2021-04-02T08:34:54Z")
Hello All, Is there any order of logstash pipelines config: I've below pipelines: \[root@gzp-p-qv-logst-3 pipeline\]# ls -larth total 60K drwxr-xr-x. 3 logstash logstash 42 Oct 11 2019 .. -rw-r--r--. 1 root root … --- ## [Ingest-attachment sometimes recognizes files as empty](https://discuss.elastic.co/t/ingest-attachment-sometimes-recognizes-files-as-empty/268238)
**Author:** [@dimaPust](https://discuss.elastic.co/u/dimaPust)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 8:32am UTC](https://discuss.elastic.co/t/ingest-attachment-sometimes-recognizes-files-as-empty/268238 "2021-04-02T08:32:10Z")
Hello, I am using elasticsearch:7.9.0 with the ingest-attachment plugin for indexing docx files, created in an external editor. However, sometimes files are indexed as 'empty', for example next file: { \_index: 'loc… --- ## [Adding objects to an Array filed in Elastic Search index using Java High level Rest Client](https://discuss.elastic.co/t/adding-objects-to-an-array-filed-in-elastic-search-index-using-java-high-level-rest-client/268418)
**Author:** [@dekay14](https://discuss.elastic.co/u/dekay14)\ **Replies:** 7\ **Last updated:** [April 2, 2021, 8:14am UTC](https://discuss.elastic.co/t/adding-objects-to-an-array-filed-in-elastic-search-index-using-java-high-level-rest-client/268418 "2021-04-02T08:14:27Z")
I am trying to add a list or a single object to a Array field on a Elastic Search Index, the index is as shown below: "\_index" : "class\_index", "\_id" : "1234", "\_source" : { "externalId" : … --- ## [Question about threadpools](https://discuss.elastic.co/t/question-about-threadpools/268888)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 13\ **Last updated:** [April 2, 2021, 8:08am UTC](https://discuss.elastic.co/t/question-about-threadpools/268888 "2021-04-02T08:08:31Z")
Hi, It's a simple question but I couldn't be sure and couldn't find anything that specifies this. When using Kibana on discover page what operation is used on elasticsearch to show logs? Is it Get or Search? --- ## [How to add podip on add\_kubernetes\_metadata processor?](https://discuss.elastic.co/t/how-to-add-podip-on-add-kubernetes-metadata-processor/269006)
**Author:** [@dadayoo](https://discuss.elastic.co/u/dadayoo)\ **Replies:** 6\ **Last updated:** [April 2, 2021, 7:45am UTC](https://discuss.elastic.co/t/how-to-add-podip-on-add-kubernetes-metadata-processor/269006 "2021-04-02T07:45:05Z")
Hi I'm running filebeat daemonset on my k8s cluster have try different config scenario but do not get the pod ip data here is my config processors: - add\_kubernetes\_metadata: default\_indexers.enabled: tr… --- ## [How can you enrich and add fields to the correlation event upon rule trigger?](https://discuss.elastic.co/t/how-can-you-enrich-and-add-fields-to-the-correlation-event-upon-rule-trigger/268314)
**Author:** [@fuzzyWedgie](https://discuss.elastic.co/u/fuzzyWedgie)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 7:43am UTC](https://discuss.elastic.co/t/how-can-you-enrich-and-add-fields-to-the-correlation-event-upon-rule-trigger/268314 "2021-04-02T07:43:03Z")
Hi, When correlating events I want to do enrichment lookups and add extra fields to the correlation event (signal). Also we would like to be able to add fields to the correlation event from the source events that cause… --- ## [I want to insert elasticsearch with multi time with range](https://discuss.elastic.co/t/i-want-to-insert-elasticsearch-with-multi-time-with-range/269088)
**Author:** [@gmcom2011](https://discuss.elastic.co/u/gmcom2011)\ **Replies:** 0\ **Last updated:** [April 2, 2021, 7:05am UTC](https://discuss.elastic.co/t/i-want-to-insert-elasticsearch-with-multi-time-with-range/269088 "2021-04-02T07:05:52Z")
If I have database table 100,000++ record and I want to insert to elasticsearch multi time. How to use logstash insert to elasticserch 1,000 records per request? example round 1 input record 1 - 1000 round 2 input … --- ## [Aggregation size](https://discuss.elastic.co/t/aggregation-size/269067)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 7:01am UTC](https://discuss.elastic.co/t/aggregation-size/269067 "2021-04-02T07:01:11Z")
Hi all and sorry for my poor english I have tons of data with different field value 'fastCategory', but whe i do an aggragation on fastCategory, I found just 10 aggregation? Why that? POST statistic/\_search { "aggs"… --- ## [How to get a specific cluster setting?](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [April 2, 2021, 6:40am UTC](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081 "2021-04-02T06:40:27Z")
I know that I can get the cluster settings with this: GET \_cluster/settings What I don’t know is how I can get a specific setting, especially when it‘s at the default and so it doesn’t show up on the GET. For example,… --- ## [Can’t filter Rollup index results](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 8\ **Last updated:** [April 2, 2021, 5:41am UTC](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775 "2021-04-02T05:41:57Z")
I have a rollup index with some values, e.g. customer. I've created a Kibana dashboard from it. When I try to filter the dashboard with customer : some-customer, I get an error. When I do a custom query, I can filter by … --- ## [Is the multiline codec supposed to work with the JDBC input plugin?](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852)
**Author:** [@ehanft](https://discuss.elastic.co/u/ehanft)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 10:06pm UTC](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852 "2021-04-01T22:06:08Z")
I been having a hard time processing log files stored in an Oracle database table. The logs are stored as CLOB, but converted to VARCHAR2 using a pipelined table function. This works great with the JDBC input plugin in L… --- ## [Kibana Dashboard - Did this ever get fixed?](https://discuss.elastic.co/t/kibana-dashboard-did-this-ever-get-fixed/268282)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 4\ **Last updated:** [April 1, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-dashboard-did-this-ever-get-fixed/268282 "2021-04-01T21:47:39Z")
Hi - I am trying to find out if this ever got fixed. I just tried under 7.12 and I get the same result but perhaps there is a switch or option I need to add? Thanks John --- ## [Elasticsearch & elasticflow](https://discuss.elastic.co/t/elasticsearch-elasticflow/269062)
**Author:** [@atamc3rb3r](https://discuss.elastic.co/u/atamc3rb3r)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-elasticflow/269062 "2021-04-01T21:12:41Z")
Dear community, I have decided to install the Elasticflow version 5.0.1 on my ubuntu server 20.04 LTS and integrate it with the current installed Elasticsearch 7.10. I did it step by step based on below documentation. … --- ## [ARM docker image](https://discuss.elastic.co/t/arm-docker-image/268588)
**Author:** [@Jesper\_Veldhuizen](https://discuss.elastic.co/u/Jesper_Veldhuizen)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 7:53pm UTC](https://discuss.elastic.co/t/arm-docker-image/268588 "2021-04-01T19:53:21Z")
Hi guys! Is there any news on ARM docker images for Enterprise Search? Or any suggestions on how to run Enterprise Search on a M1 mac? I managed to get the container up and running once (emulation it by 'platform: linux… --- ## [Filter elements based on array constant or array environment variable](https://discuss.elastic.co/t/filter-elements-based-on-array-constant-or-array-environment-variable/269074)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 7:41pm UTC](https://discuss.elastic.co/t/filter-elements-based-on-array-constant-or-array-environment-variable/269074 "2021-04-01T19:41:53Z")
Hi guys, How can I use an array constant in Logstash's filter? In my .env file I have a constant BLACKLIST=192.168.3.131, 10.0.0.1 if \[id.orig\_h\] in \[${BLACKLIST}\] { drop {} } How can we declare… --- ## [Kibana Alerts - Action on Recovered contains no context.group](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-contains-no-context-group/268946)
**Author:** [@JMisset88](https://discuss.elastic.co/u/JMisset88)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 7:20pm UTC](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-contains-no-context-group/268946 "2021-04-01T19:20:19Z")
Hi, We recently upgraded from Elastic 7.10.0 to 7.12.0. Mainly because I saw the new Alerting/Action functionality to only send an Alert on a Status Change (instead of on an interval). This is a very nice feature, howev… --- ## [A custom role which contains all privileges is not updated after changing to read only role](https://discuss.elastic.co/t/a-custom-role-which-contains-all-privileges-is-not-updated-after-changing-to-read-only-role/268147)
**Author:** [@thiton](https://discuss.elastic.co/u/thiton)\ **Replies:** 13\ **Last updated:** [April 1, 2021, 7:12pm UTC](https://discuss.elastic.co/t/a-custom-role-which-contains-all-privileges-is-not-updated-after-changing-to-read-only-role/268147 "2021-04-01T19:12:54Z")
Please help to configure how a custom role which contains all privileges is not updated after changing to read only role. Steps to reproduce: First, create a custom role which contains all privileges curl -XPUT http:… --- ## [Kibana query filter by result of another saved search object field data](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656)
**Author:** [@singyim817](https://discuss.elastic.co/u/singyim817)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:27pm UTC](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656 "2021-04-01T18:27:20Z")
Hi, I am migrating the log reports from direct search with oracle SQL to Kibana, and I am creating the dashboard to show the existing log reports. May I know is it possible to get the result like the following query a… --- ## [Watcher, hits array empty](https://discuss.elastic.co/t/watcher-hits-array-empty/268909)
**Author:** [@dvyu](https://discuss.elastic.co/u/dvyu)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:31pm UTC](https://discuss.elastic.co/t/watcher-hits-array-empty/268909 "2021-04-01T17:31:28Z")
Hello, I am trying to use ctx fields in watcher action but some of them is empty My watcher is: { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { … --- ## [S3 input getting stuck and not deleting SQS messages](https://discuss.elastic.co/t/s3-input-getting-stuck-and-not-deleting-sqs-messages/267090)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 5:28pm UTC](https://discuss.elastic.co/t/s3-input-getting-stuck-and-not-deleting-sqs-messages/267090 "2021-04-01T17:28:50Z")
Hi, I'm with filebeat 7.10.0 on Ubuntu. I've configured filebeat to retrieve files from S3 bucket alike: filebeat.inputs: - type: s3 enabled: true queue\_url: "https://sqs.us-west-2.amazonaws.com/… --- ## [Logstash listening](https://discuss.elastic.co/t/logstash-listening/269063)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 5:28pm UTC](https://discuss.elastic.co/t/logstash-listening/269063 "2021-04-01T17:28:06Z")
Hi! Assuming filebeat -\> ELK are on different machines. On the filebeat output i have to specify the IP address of the Logstash host. However I can´t see any option to bind my server IP address to Logstash. All the tut… --- ## [Watcher add field to payload](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008)
**Author:** [@tomaszgorka](https://discuss.elastic.co/u/tomaszgorka)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:16pm UTC](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008 "2021-04-01T17:16:20Z")
Hi, I have a watcher that takes people's data as input. If someone is below 21 yo it triggers the watcher and fires an index action. However I now need to add an additional field to the payload, which is "watchername" an… --- ## [Detection rules CLI](https://discuss.elastic.co/t/detection-rules-cli/268867)
**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:05pm UTC](https://discuss.elastic.co/t/detection-rules-cli/268867 "2021-04-01T17:05:20Z")
Traceback (most recent call last): File "/usr/lib64/python3.8/runpy.py", line 194, in \_run\_module\_as\_main return \_run\_code(code, main\_globals, None, File "/usr/lib64/python3.8/runpy.py", line 87, in \_run\_code … --- ## [Jira Action sending broken links on detection jobs](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809)
**Author:** [@Balor](https://discuss.elastic.co/u/Balor)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:01pm UTC](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809 "2021-04-01T17:01:21Z")
Hello Elastic discuss, Am on: ECE 2.9.0 Elastic 7.12. I have been using the Detection API to add actions to certain Detection jobs. I am using a Jira connector. Am seeing this sort of behaviour in the action messag… --- ## [Post URL does not appear to be portable across environments](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 4:52pm UTC](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052 "2021-04-01T16:52:13Z")
I am using the following snippet to download CSV reports in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing query file: $filename" … --- ## [Logstash SQS input to accept sqs url](https://discuss.elastic.co/t/logstash-sqs-input-to-accept-sqs-url/269059)
**Author:** [@rachel.takeuchi](https://discuss.elastic.co/u/rachel.takeuchi)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 4:45pm UTC](https://discuss.elastic.co/t/logstash-sqs-input-to-accept-sqs-url/269059 "2021-04-01T16:45:51Z")
I'm using a third party that generates AWS credentials, a bucket and a queue for me to read logs from. I don't have the ability to change the permissions they've supplied to these credentials and unfortunately these cred… [Previous page](https://discuss.elastic.co/latest.md?page=1751) [Next page](https://discuss.elastic.co/latest.md?page=1753)