# Latest **URL:** https://discuss.elastic.co/latest.md?page=1769 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1770 --- ## [Unable to create account for E;astic Cloud Managed Services on Microsoft Azure](https://discuss.elastic.co/t/unable-to-create-account-for-e-astic-cloud-managed-services-on-microsoft-azure/267988)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-create-account-for-e-astic-cloud-managed-services-on-microsoft-azure/267988 "2021-03-23T15:36:54Z")
We are trying to create an Account for Elastic Cloud Managed Services on Azure. The Create Account option redirects us to the Elastic.co site. How do we create an Elastic Cloud Managed Service instance on Azure Cloud? … --- ## [Painless Script - Access Interval Variable](https://discuss.elastic.co/t/painless-script-access-interval-variable/268000)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 3:15pm UTC](https://discuss.elastic.co/t/painless-script-access-interval-variable/268000 "2021-03-23T15:15:05Z")
Using Scripted Fields, I'm trying to do some math and I need to divide the current interval / 1000. Interval is dynamic as we zoom in and out of graphs, could be per minute, per 5 minutes, for hour, etc. In TSVB, Bucke… --- ## [Cannot get Beats to monitor with Metricbeat](https://discuss.elastic.co/t/cannot-get-beats-to-monitor-with-metricbeat/266293)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 9\ **Last updated:** [March 23, 2021, 3:04pm UTC](https://discuss.elastic.co/t/cannot-get-beats-to-monitor-with-metricbeat/266293 "2021-03-23T15:04:57Z")
Hi Elastic 7.11.1 I have configured metricbeat, and I have got rid of this legacy monitoring, but I cannot seem to get rid of this message: I click onto "Monitor with Metricbeat" I have done: metricbeat modules en… --- ## [Mapping conflict](https://discuss.elastic.co/t/mapping-conflict/268088)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 2:58pm UTC](https://discuss.elastic.co/t/mapping-conflict/268088 "2021-03-23T14:58:20Z")
Im having this error: And Im not sure how to fully fix this issue. Ive been able to specify it when I create the mapping for a future index but it doesnt seem to work this time around. --- ## [Index default pipeline](https://discuss.elastic.co/t/index-default-pipeline/268103)
**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 2:47pm UTC](https://discuss.elastic.co/t/index-default-pipeline/268103 "2021-03-23T14:47:54Z")
I would like to create an ingest pipeline that will create a field called "free\_ratio". The pipeline has to be applied on current ".monitoring-es" index. The definition of the pipeline is following: { "free\_ratio" : … --- ## [Some considerations about Kibana 7.11](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 2:40pm UTC](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099 "2021-03-23T14:40:15Z")
Hello, We updated to Elastic 7.11.2 last week and I need to tell you about some functionalities that are sub-optimal.. We can no longer right-click on a lot of stuff... Not on dashboard right click open in another pag… --- ## [Can a Filter be Applied with "OR" Logic?](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 2:37pm UTC](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959 "2021-03-23T14:37:52Z")
I'm trying to mimic the functionality of another search engine. The functionality I want is that when a user selects a filter it first limits a search, as expected. However, I want to still return all possible aggregatio… --- ## [Unexpected match when using edgeNgram filter](https://discuss.elastic.co/t/unexpected-match-when-using-edgengram-filter/268105)
**Author:** [@matt4](https://discuss.elastic.co/u/matt4)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 2:15pm UTC](https://discuss.elastic.co/t/unexpected-match-when-using-edgengram-filter/268105 "2021-03-23T14:15:27Z")
I encountered some unexpected matches when I set up a field with an analyzer that contains an edgeNgram filter. This is how I set up the mappings and the settings: PUT test-index { "mappings": { "properties": { … --- ## [Data in Dashboard Kibana](https://discuss.elastic.co/t/data-in-dashboard-kibana/268066)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:50pm UTC](https://discuss.elastic.co/t/data-in-dashboard-kibana/268066 "2021-03-23T13:50:55Z")
Hello, I currently have a graylog server on which I installed kibana to better visualize the data I would like to create a dashboard on which we could see the users who make the most AD connection errors As you can se… --- ## [Documents not being replicated to replica shards](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093)
**Author:** [@zeljko-bal](https://discuss.elastic.co/u/zeljko-bal)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:46pm UTC](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093 "2021-03-23T13:46:23Z")
Hi, I have a problem where for the same query executed multiple times, for some indices in my cluster, I get alternating different results (two sets of results alternating between each other with each subsequent request… --- ## [Elastic: ilm-history-3-000004 index created with wrong number\_of\_replicas according to template](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 12\ **Last updated:** [March 23, 2021, 1:39pm UTC](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071 "2021-03-23T13:39:09Z")
Elastic 7.11.1 Today, two of my elastic hosts (where there is 0 replicas), somehow created this index with number\_of\_replicas=1 yellow open ilm-history-3-000004 That is why it is in yellow state. When I look index … --- ## [Elasticsearch security with a multiple Helm charts cluster](https://discuss.elastic.co/t/elasticsearch-security-with-a-multiple-helm-charts-cluster/268081)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-with-a-multiple-helm-charts-cluster/268081 "2021-03-23T13:24:14Z")
We are running elasticsearch on kubernetes, via official elastic Helm chart. As per elastic recommandation, we run 3 Helm releases with dedicated role: master data client Usually, I deploy master release first, then d… --- ## [Create global index pattern for specific fields across all indexes](https://discuss.elastic.co/t/create-global-index-pattern-for-specific-fields-across-all-indexes/266675)
**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 1:15pm UTC](https://discuss.elastic.co/t/create-global-index-pattern-for-specific-fields-across-all-indexes/266675 "2021-03-23T13:15:51Z")
Hello, I'm trying to create a "\*" index pattern to use it in my controls for all kind of index, i'll explain myself : We have 4 generic data fields names application.environment, application.scope, application.name, ap… --- ## [Unable to revive connection: http://localhost:9200/](https://discuss.elastic.co/t/unable-to-revive-connection-http-localhost-9200/267983)
**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 1:02pm UTC](https://discuss.elastic.co/t/unable-to-revive-connection-http-localhost-9200/267983 "2021-03-23T13:02:02Z")
I'm going through a new install of ELK. Trying to keep things simple and as default as possible. I'm running ElasticSearch and Kibana on the same host. Once I get ES working with Kibana I was going to work on tightening … --- ## [Performance impact of increasing position\_increment\_gap](https://discuss.elastic.co/t/performance-impact-of-increasing-position-increment-gap/268070)
**Author:** [@ssephillip](https://discuss.elastic.co/u/ssephillip)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 12:45pm UTC](https://discuss.elastic.co/t/performance-impact-of-increasing-position-increment-gap/268070 "2021-03-23T12:45:08Z")
Hi everyone, for my current task it would help me to have a large position\_increment\_gap on some fields. These fields may each contain 100 values or more. My question is: How (severely) does increasing position\_increm… --- ## [How can we create this type of kibana dashboards with multiple tabs?](https://discuss.elastic.co/t/how-can-we-create-this-type-of-kibana-dashboards-with-multiple-tabs/268072)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 12:22pm UTC](https://discuss.elastic.co/t/how-can-we-create-this-type-of-kibana-dashboards-with-multiple-tabs/268072 "2021-03-23T12:22:58Z")
Hello.How can I create this type of dashboard in kibana with multiple tabs ? --- ## [Suggesters with autcomplete on match\_phrase\_prefix](https://discuss.elastic.co/t/suggesters-with-autcomplete-on-match-phrase-prefix/267978)
**Author:** [@BIRENDRA](https://discuss.elastic.co/u/BIRENDRA)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 12:18pm UTC](https://discuss.elastic.co/t/suggesters-with-autcomplete-on-match-phrase-prefix/267978 "2021-03-23T12:18:27Z")
Hi Team, I want to create suggester with autocomplete feature. Currently, suggestions are coming on prefix which i need to change. For example: I have machine name as ROV Magnum 001. My current suggester is working fine… --- ## [Logstash Kusto - No timestamp getting generated automatically as earlier](https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084)
**Author:** [@omkarg81](https://discuss.elastic.co/u/omkarg81)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 11:16am UTC](https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084 "2021-03-23T11:16:28Z")
I have a Winlogbeat --\> Logstash --\> Azure Data Explorer logging system, but somehow, since last few days, the debug logs that I have activated on logstash is showing that the tmp file written by ADX before the logs are … --- ## [PLEASE HELP! Problem with tribe node not discovering index](https://discuss.elastic.co/t/please-help-problem-with-tribe-node-not-discovering-index/267810)
**Author:** [@new\_user1](https://discuss.elastic.co/u/new_user1)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 11:07am UTC](https://discuss.elastic.co/t/please-help-problem-with-tribe-node-not-discovering-index/267810 "2021-03-23T11:07:17Z")
I have a number of clusters running elasticsearch 5.2 and a tribe cluster for cross-cluster search which is all hosted on GCP. I also have an alias setup on the one index on one of the clusters. In the process of makin… --- ## [Merge document by condition](https://discuss.elastic.co/t/merge-document-by-condition/268046)
**Author:** [@ku\_kon](https://discuss.elastic.co/u/ku_kon)\ **Replies:** 6\ **Last updated:** [March 23, 2021, 9:36am UTC](https://discuss.elastic.co/t/merge-document-by-condition/268046 "2021-03-23T09:36:24Z")
Hi, I have document : {"match\_id": xxx, userid: yyy, "bonus": zzz} I want to result like: {"match\_id" : xxx, users: \[{"userid": user1, bonos: bonus1}, {"userid": user2, bonos: bonus2}\]} Please help me. Thank you . --- ## [Drop fields not working in filebeat](https://discuss.elastic.co/t/drop-fields-not-working-in-filebeat/268058)
**Author:** [@none96](https://discuss.elastic.co/u/none96)\ **Replies:** 3\ **Last updated:** [March 23, 2021, 9:25am UTC](https://discuss.elastic.co/t/drop-fields-not-working-in-filebeat/268058 "2021-03-23T09:25:57Z")
I'm trying to remove fields by using the drop fields, the syntax is as follows : but it doesn't seem to work, any idea why? --- ## [Kibana on graylog](https://discuss.elastic.co/t/kibana-on-graylog/267981)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 9:20am UTC](https://discuss.elastic.co/t/kibana-on-graylog/267981 "2021-03-23T09:20:51Z")
Hello, I currently use graylog as a SIEM. So I have ElasticSearch install on the same sermer. All my elasticsearch data are in /mnt/graylog/elasticsearch/nodes/0/indices. I would like to install kibana on this same se… --- ## [Severity override range](https://discuss.elastic.co/t/severity-override-range/268064)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 9:19am UTC](https://discuss.elastic.co/t/severity-override-range/268064 "2021-03-23T09:19:50Z")
Hi, I'm running ELK stack version 7.11.2. I want to ingest AWS GuardDuty alerts, these have severities defined: https://docs.aws.amazon.com/guardduty/latest/ug/guardduty\_findings.html basically values between 1.0 and… --- ## [Percent Mode in Line graph is not displaying correctly for 2 lines by filter split](https://discuss.elastic.co/t/percent-mode-in-line-graph-is-not-displaying-correctly-for-2-lines-by-filter-split/267908)
**Author:** [@nada.nasser](https://discuss.elastic.co/u/nada.nasser)\ **Replies:** 3\ **Last updated:** [March 23, 2021, 9:17am UTC](https://discuss.elastic.co/t/percent-mode-in-line-graph-is-not-displaying-correctly-for-2-lines-by-filter-split/267908 "2021-03-23T09:17:07Z")
I am trying to display to lines in graph each with filter condition, when i change y-axis mode to percent values are presented as in SS one of the lines is on 100% value all along where data is not. Any clue or something… --- ## [Problem with filebeat prozessors](https://discuss.elastic.co/t/problem-with-filebeat-prozessors/267996)
**Author:** [@UweW](https://discuss.elastic.co/u/UweW)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 9:06am UTC](https://discuss.elastic.co/t/problem-with-filebeat-prozessors/267996 "2021-03-23T09:06:31Z")
Hi, I run filebeat with a few moduled enabled like cef, cisco and fortinet. In the modules input area I add an tag related to the customer. Later in the processors part of filebeat.yml I use this tag to set correct org… --- ## [Exiting: error loading config file: stat metricbeat.yml: no such file or directory](https://discuss.elastic.co/t/exiting-error-loading-config-file-stat-metricbeat-yml-no-such-file-or-directory/268015)
**Author:** [@Jude\_Lindale](https://discuss.elastic.co/u/Jude_Lindale)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 9:00am UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-stat-metricbeat-yml-no-such-file-or-directory/268015 "2021-03-23T09:00:00Z")
So I was having problems with metricbeat so I uninstalled it and the reinstalled metricbeat-7.11.2-amd64.deb and when I got to configure it in /etc/metricbeat the metricbeat.yml config file is not there. Please help. --- ## [APM integration with Istio service mesh using w3c tracecontext](https://discuss.elastic.co/t/apm-integration-with-istio-service-mesh-using-w3c-tracecontext/267600)
**Author:** [@Agzem](https://discuss.elastic.co/u/Agzem)\ **Replies:** 3\ **Last updated:** [March 23, 2021, 8:51am UTC](https://discuss.elastic.co/t/apm-integration-with-istio-service-mesh-using-w3c-tracecontext/267600 "2021-03-23T08:51:36Z")
Kibana version: 7.10.2 Elasticsearch version: 7.10.2 APM Server version: 7.10.2 APM Agent language and version: java - 1.20.0 Browser version: Chrome, latest Original install method (e.g. download page, yum, deb, fr… --- ## [Packetbeat getting high number of internal logs](https://discuss.elastic.co/t/packetbeat-getting-high-number-of-internal-logs/268054)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 8:11am UTC](https://discuss.elastic.co/t/packetbeat-getting-high-number-of-internal-logs/268054 "2021-03-23T08:11:52Z")
Hi, I can see that packetbeat is giving a high number of logs from internal ip's like (255.255.255.255) larger than the server ip itself! I only need the data related to the the server ip only, I don't know if somebody… --- ## [How can we run filebeat on openwrt?](https://discuss.elastic.co/t/how-can-we-run-filebeat-on-openwrt/267745)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 6:58am UTC](https://discuss.elastic.co/t/how-can-we-run-filebeat-on-openwrt/267745 "2021-03-23T06:58:47Z")
Hii.Can someone tell me that how can we install and run filebeat on openwrt? --- ## [ECE snapshot repository](https://discuss.elastic.co/t/ece-snapshot-repository/267541)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 6:35am UTC](https://discuss.elastic.co/t/ece-snapshot-repository/267541 "2021-03-23T06:35:19Z")
Hi, In my private cloud I want to install ECE and plan to implement snapshot repository. My clarification is - Is MinIO the only supported software for snapshot repository in private cloud for ECE. Does a shared stor… [Previous page](https://discuss.elastic.co/latest.md?page=1768) [Next page](https://discuss.elastic.co/latest.md?page=1770)