# Latest **URL:** https://discuss.elastic.co/latest.md?page=1807 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1808 --- ## [spec.auth.fileRealm rejected by admission webhook in eck-operator 1.4](https://discuss.elastic.co/t/spec-auth-filerealm-rejected-by-admission-webhook-in-eck-operator-1-4/265625)
**Author:** [@Tihomir\_Plachkov](https://discuss.elastic.co/u/Tihomir_Plachkov)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 2:46pm UTC](https://discuss.elastic.co/t/spec-auth-filerealm-rejected-by-admission-webhook-in-eck-operator-1-4/265625 "2021-03-02T14:46:21Z")
master version: 1.16.15-gke.7800 node version: 1.15.12-gke.20 kubectl apply test.yaml Error from server (Elasticsearch.elasticsearch.k8s.elastic.co "elasticsearch-sample" is invalid: auth: Invalid value: "auth": auth… --- ## [ES Continuous Transforms Checkpoint not updating](https://discuss.elastic.co/t/es-continuous-transforms-checkpoint-not-updating/265421)
**Author:** [@sphinx](https://discuss.elastic.co/u/sphinx)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:42pm UTC](https://discuss.elastic.co/t/es-continuous-transforms-checkpoint-not-updating/265421 "2021-03-02T14:42:34Z")
Hi, this is pertaining to ES 7.10.2 with X-Pack. I am trying out transforms because we have a need to have a aggregate table of entities to be queried by downstream applications. we have a set of indices that the tran… --- ## [Two index pattern for same index, need to set different default time filter for each index pattern](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 2:39pm UTC](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829 "2021-03-02T14:39:35Z")
Hi, We have two timestamps in our document, during the index pattern creation we can only choose one timestamp for each index pattern, and that timestamp will affect the Kibana's Discover graph and the upper right corn… --- ## [How to get MonthYear from DateTime using Painless](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 2:23pm UTC](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106 "2021-03-02T14:23:34Z")
Hello team, I wrote a script to get month (string) = doc\['@timstamp'\].value.getMonth(). Year=doc\['@timstamp'\].value.getYear(). Used concatenation montheYear=doc\['@timstamp'\].value.getMonth()+doc\['@timstamp'\].value.get… --- ## [Filebeat Error while parsing lastError field in Azure platform logs](https://discuss.elastic.co/t/filebeat-error-while-parsing-lasterror-field-in-azure-platform-logs/265940)
**Author:** [@jmmcorreia](https://discuss.elastic.co/u/jmmcorreia)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:08pm UTC](https://discuss.elastic.co/t/filebeat-error-while-parsing-lasterror-field-in-azure-platform-logs/265940 "2021-03-02T14:08:45Z")
Hi everyone, I'm trying the filebeat beta feature to pull azure platform logs into ES and I'm hitting ing the following issue: When there is an error message on the APIM logs, the field lastError is being added to the … --- ## [Split string using Painless Scripted field](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:04pm UTC](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956 "2021-03-02T14:04:57Z")
I recently started working on Kibana, had a query regarding scripted field. Can scripted field return multiple value at same time? I have a field named Tags like "Tags": "Release-102;Release-103;version.1.0". I want to c… --- ## [Pink spaces in Elasticsearch field names](https://discuss.elastic.co/t/pink-spaces-in-elasticsearch-field-names/265762)
**Author:** [@awazanak](https://discuss.elastic.co/u/awazanak)\ **Replies:** 4\ **Last updated:** [March 2, 2021, 1:22pm UTC](https://discuss.elastic.co/t/pink-spaces-in-elasticsearch-field-names/265762 "2021-03-02T13:22:39Z")
Set-up Elasticsearch v7.10.0 Python 3.7+ Python script runs once each month to create a monthly index using the bulk insert function in the elasticsearch module. The script uses strings to define the field name during … --- ## [Elasticsearch server crashing](https://discuss.elastic.co/t/elasticsearch-server-crashing/265881)
**Author:** [@JPross](https://discuss.elastic.co/u/JPross)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-server-crashing/265881 "2021-03-02T13:01:27Z")
Hello, We have two Elasticsearch server which are configured as the Master-slave, one server keeps getting crash.We have recently upgraded the Elasticsearch server 5.1 to 7.1.1 on our client, It is giving the following … --- ## [Can ES do a complex aggregation with WHERE and GROUP BY + ORDER BY like in MySQL](https://discuss.elastic.co/t/can-es-do-a-complex-aggregation-with-where-and-group-by-order-by-like-in-mysql/265559)
**Author:** [@Long\_Quanzheng](https://discuss.elastic.co/u/Long_Quanzheng)\ **Replies:** 7\ **Last updated:** [March 2, 2021, 12:45pm UTC](https://discuss.elastic.co/t/can-es-do-a-complex-aggregation-with-where-and-group-by-order-by-like-in-mysql/265559 "2021-03-02T12:45:13Z")
Hi, I have a query like this in MySQL that I am thinking to migrate to ElasticSearch for scalability: SELELCT userID,sum(countA) as sumA,sum(countB) as sumB FROM data\_table WHERE groupID=? AND date BETWEEN ? AND ?… --- ## [Sum aggregation precision](https://discuss.elastic.co/t/sum-aggregation-precision/265946)
**Author:** [@DawidS](https://discuss.elastic.co/u/DawidS)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 12:13pm UTC](https://discuss.elastic.co/t/sum-aggregation-precision/265946 "2021-03-02T12:13:33Z")
Hello, I have a problem with sum fields with 3 decimal places. The Sum of all values is zero, but elastic sum aggregations return a very small number(like -2.837623469531536E-10). I have created a test index and put th… --- ## [Kibana not able to load Map tiles from maptiler](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865)
**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 11:48am UTC](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865 "2021-03-02T11:48:30Z")
I've set up a Maptiler server with a world map as my environment is airgapped. In my Kibana.yml config i have: map.includeElasticMapsService: false map.tilemap.url: "localhost:3650/api/maps/streets/{z}/{x}/{y}.png" map… --- ## [Filebeat won't start](https://discuss.elastic.co/t/filebeat-wont-start/265889)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 11\ **Last updated:** [March 2, 2021, 11:31am UTC](https://discuss.elastic.co/t/filebeat-wont-start/265889 "2021-03-02T11:31:06Z")
I'm trying to link filebeat with logstash, but filebeat suddenly stopped working. When I try systemctl start filebeat, it does not start. If I run systemctl status filebeat, I get the following message. ● filebeat.ser… --- ## [Set vega background color with threshold](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038)
**Author:** [@111439](https://discuss.elastic.co/u/111439)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 11:11am UTC](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038 "2021-03-02T11:11:11Z")
Hello Everybody, I have question with vega visualize (pie chart). I want to set background color on vega visualize by condition using data. {"key": "tier1", "doc\_count": 1}, {"key": "tier2", "doc\_count": 2}, {"key": … --- ## [Disk Metric in Observability \[Elastic Stack 7.11.1\]](https://discuss.elastic.co/t/disk-metric-in-observability-elastic-stack-7-11-1/265913)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 10:39am UTC](https://discuss.elastic.co/t/disk-metric-in-observability-elastic-stack-7-11-1/265913 "2021-03-02T10:39:44Z")
Hi, everyone I have been working with the new version of Elastic Stack (7.11.1) for several days. I would like to know if Elastic team will add Disk metricset in Observability in future versions. Here you are my metric… --- ## [What will happen if elasticsearch all node goes down? Did we loose all data In this case?](https://discuss.elastic.co/t/what-will-happen-if-elasticsearch-all-node-goes-down-did-we-loose-all-data-in-this-case/265923)
**Author:** [@Mangesh\_Mandavgane](https://discuss.elastic.co/u/Mangesh_Mandavgane)\ **Replies:** 4\ **Last updated:** [March 2, 2021, 10:28am UTC](https://discuss.elastic.co/t/what-will-happen-if-elasticsearch-all-node-goes-down-did-we-loose-all-data-in-this-case/265923 "2021-03-02T10:28:14Z")
While reading about Elasticsearch I understood that Nodes have Shards. And we can make configuration for Primary and Replica Shards. If one of node goes down it retrieve data from replica shards which is in another node. … --- ## [License not available](https://discuss.elastic.co/t/license-not-available/265931)
**Author:** [@hayo](https://discuss.elastic.co/u/hayo)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 10:17am UTC](https://discuss.elastic.co/t/license-not-available/265931 "2021-03-02T10:17:33Z")
Hello, I just updated from 7.10.2 to 7.11.1, however when we try to access kibana, we get back: {"statusCode":503,"error":"Service Unavailable","message":"License is not available."} We host the whole ELK stack on the… --- ## [Invitation to participate in a survey about Elasticsearch](https://discuss.elastic.co/t/invitation-to-participate-in-a-survey-about-elasticsearch/265933)
**Author:** [@JieTan](https://discuss.elastic.co/u/JieTan)\ **Replies:** 0\ **Last updated:** [March 2, 2021, 9:57am UTC](https://discuss.elastic.co/t/invitation-to-participate-in-a-survey-about-elasticsearch/265933 "2021-03-02T09:57:03Z")
Dear Elasticsearch contributor, We are doing research on understanding how developers manage a special kind of Technical Debt in Java. We kindly ask 15-20 minutes of your time to fill out our survey. To help you decide… --- ## [Filebeat http endpoint CORS](https://discuss.elastic.co/t/filebeat-http-endpoint-cors/265712)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 9:53am UTC](https://discuss.elastic.co/t/filebeat-http-endpoint-cors/265712 "2021-03-02T09:53:52Z")
Is there any way to setup CORS when using Filebeat http\_endpoint? --- ## [How to backup on-prem Elasticsearch cluster to S3 bucket and restore reverse way](https://discuss.elastic.co/t/how-to-backup-on-prem-elasticsearch-cluster-to-s3-bucket-and-restore-reverse-way/265320)
**Author:** [@rafiqul](https://discuss.elastic.co/u/rafiqul)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 9:19am UTC](https://discuss.elastic.co/t/how-to-backup-on-prem-elasticsearch-cluster-to-s3-bucket-and-restore-reverse-way/265320 "2021-03-02T09:19:05Z")
Hello I have a Elasticsearch cluster installed in my on-premise infrastructure. Also installed repository plug-in by running bin/elasticsearch-plugin install repository-s3 ''' curl -X PUT "localhost:9200/\_snapshot/te… --- ## [ELK fails after enabling : readOnlyRootFilesystem in psp:restricted](https://discuss.elastic.co/t/elk-fails-after-enabling-readonlyrootfilesystem-in-psp-restricted/265711)
**Author:** [@Mayank\_Srivastava](https://discuss.elastic.co/u/Mayank_Srivastava)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 9:07am UTC](https://discuss.elastic.co/t/elk-fails-after-enabling-readonlyrootfilesystem-in-psp-restricted/265711 "2021-03-02T09:07:58Z")
Hi , We are running elasticsearch container in k8s environment with root filesystems in read-only mode (readOnlyRootFilesystem: true). So we tried to enable this and we observed all the three pods of elk fails. we are … --- ## [Ignore ssl\_certificate\_validation in Http filter plugin](https://discuss.elastic.co/t/ignore-ssl-certificate-validation-in-http-filter-plugin/265379)
**Author:** [@d71247](https://discuss.elastic.co/u/d71247)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 8:53am UTC](https://discuss.elastic.co/t/ignore-ssl-certificate-validation-in-http-filter-plugin/265379 "2021-03-02T08:53:29Z")
Hi Team, I have installed logstash7.9.2 in the Linux server. I have created a configuration which will connect to the Ansible-tower rest API using http filter plugin. My question is there a way to disable ssl/tls verif… --- ## [NFS4 best practice fstab/exports options for fs repository](https://discuss.elastic.co/t/nfs4-best-practice-fstab-exports-options-for-fs-repository/265920)
**Author:** [@ArturGrzella](https://discuss.elastic.co/u/ArturGrzella)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 8:34am UTC](https://discuss.elastic.co/t/nfs4-best-practice-fstab-exports-options-for-fs-repository/265920 "2021-03-02T08:34:06Z")
Hello, what are the best practice configurations for NFS server and NFS client in the context of snapshot and restore into fs/NFS4 repos? So, how to configure /etc/exports and /etc/fstab, for example? Thanks in advance … --- ## [How to query array of objects with multiple filters](https://discuss.elastic.co/t/how-to-query-array-of-objects-with-multiple-filters/265921)
**Author:** [@111417](https://discuss.elastic.co/u/111417)\ **Replies:** 0\ **Last updated:** [March 2, 2021, 8:21am UTC](https://discuss.elastic.co/t/how-to-query-array-of-objects-with-multiple-filters/265921 "2021-03-02T08:21:21Z")
As title, The file is roughly as follows: doc01 \[ { "product": "apple", "price": 12 } , { "product": "grave", "price": 18 } \] doc02 \[ { "product": "apple", "price": 15 } , { "product": "banana", "price": 15 } \] doc03… --- ## [Snapshots on NFS4 intermittently reporting PARTIAL](https://discuss.elastic.co/t/snapshots-on-nfs4-intermittently-reporting-partial/265800)
**Author:** [@ArturGrzella](https://discuss.elastic.co/u/ArturGrzella)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 8:16am UTC](https://discuss.elastic.co/t/snapshots-on-nfs4-intermittently-reporting-partial/265800 "2021-03-02T08:16:11Z")
Hi, we have an intermittent issue with snapshots via fs on NFS4. Once a day we close the repository for a backup to tape. After this backup has been taken we delete the data and create a new repository and an initial sn… --- ## [Elasticsearch Cross-Cluster Search with OpenDistro](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-with-opendistro/265916)
**Author:** [@Yustas](https://discuss.elastic.co/u/Yustas)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-with-opendistro/265916 "2021-03-02T08:14:36Z")
Hello. I have one old cluster based on opendistro And new with ELK I try configure Cross Cluster Search. But then try run search from elk to od, get error: \[2021-03-02T07:05:27,713\]\[ERROR\]\[com.amazon.opendistroforel… --- ## [Kibana is way too slow. and failed to load response data](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888)
**Author:** [@nugg](https://discuss.elastic.co/u/nugg)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 4:29am UTC](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888 "2021-03-02T04:29:07Z")
I want to know the reason why kibana is way too slow. when i refresh the dashboard and canvas. I run kibana on 2 cpu core and 4Gi memory pod. I didn't use any custom plugins. what could be the problem? --- ## [Encrypt Communication b/w kibana and elasticsearch](https://discuss.elastic.co/t/encrypt-communication-b-w-kibana-and-elasticsearch/265527)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 13\ **Last updated:** [March 2, 2021, 7:55am UTC](https://discuss.elastic.co/t/encrypt-communication-b-w-kibana-and-elasticsearch/265527 "2021-03-02T07:55:59Z")
I have 8 node of elasticsearch cluster 3 master 3 hot node and 2 warm node.All these node is running on https://ip:9200 i have set following parameter in elasticsearch.yml xpack.security.enabled: true #xpack.security.a… --- ## [Customise score based on Search Results Pagination](https://discuss.elastic.co/t/customise-score-based-on-search-results-pagination/265915)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 0\ **Last updated:** [March 2, 2021, 7:38am UTC](https://discuss.elastic.co/t/customise-score-based-on-search-results-pagination/265915 "2021-03-02T07:38:30Z")
Hi Team, I have some documents in ES and I want results in pagination and for that I'm using From/Offset. But lets suppose I want 5 documents in every page and in each page I want some documents should be at the bottom … --- ## [Is the maximum shard that a single node can bear, is 1000?](https://discuss.elastic.co/t/is-the-maximum-shard-that-a-single-node-can-bear-is-1000/265910)
**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 7:31am UTC](https://discuss.elastic.co/t/is-the-maximum-shard-that-a-single-node-can-bear-is-1000/265910 "2021-03-02T07:31:13Z")
Can this value be resized? When the shard of a single node in our cluster reaches 1000, this node cannot write --- ## [When parsing data I am getting this error](https://discuss.elastic.co/t/when-parsing-data-i-am-getting-this-error/265796)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 7:30am UTC](https://discuss.elastic.co/t/when-parsing-data-i-am-getting-this-error/265796 "2021-03-02T07:30:57Z")
I have a data without columns name and I am giving name of the columns in conf file. I don't know giving this way columns name is correct or not? \[2021-03-01T17:33:34,741\]\[WARN \]\[logstash.filters.csv \]\[main\]\[7c8e4b1… [Previous page](https://discuss.elastic.co/latest.md?page=1806) [Next page](https://discuss.elastic.co/latest.md?page=1808)