# Latest **URL:** https://discuss.elastic.co/latest.md?page=1824 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1825 --- ## [Help with configurring cross cluster on 2 kubenrtes vms](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759)
**Author:** [@Naomi](https://discuss.elastic.co/u/Naomi)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759 "2021-02-22T14:23:39Z")
I tried to configure a cross cluster for 2 elastic 7.10.2 clusters on 2 different kubenrtes vm I configure a node port for one elastic to enable connection like below: elasticsearch-client NodePort 10.1111.… --- ## [Введение координационных нод в действующий кластер](https://discuss.elastic.co/t/topic/264938)
**Author:** [@technautist](https://discuss.elastic.co/u/technautist)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:21pm UTC](https://discuss.elastic.co/t/topic/264938 "2021-02-22T14:21:46Z")
Добрый день! Имеется: Версия elasticsearch 7.3.2 3 master ноды (16 CPU, 30GB RAM) 23 data ноды (12 CPU, 26GB RAM, 2.5Tb SSD) Общий объём данных порядка 34ТБ Для разгрузки от пользовательских запросов было принято р… --- ## [Script on nested fileds](https://discuss.elastic.co/t/script-on-nested-fileds/263389)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:18pm UTC](https://discuss.elastic.co/t/script-on-nested-fileds/263389 "2021-02-22T14:18:30Z")
hi all and sorry for my poor english . I have an index with this mapping "mappings":{ "properties":{ "\_class":{ "type": "text", "fields":{"keyword":{"type": "keyword", "ignore\_above": … --- ## [Metricbeat configuration file from package repository is always detected as changed and stops auto upgrade process](https://discuss.elastic.co/t/metricbeat-configuration-file-from-package-repository-is-always-detected-as-changed-and-stops-auto-upgrade-process/265077)
**Author:** [@Jorge\_Correa](https://discuss.elastic.co/u/Jorge_Correa)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-file-from-package-repository-is-always-detected-as-changed-and-stops-auto-upgrade-process/265077 "2021-02-22T14:17:23Z")
I'm using metricbeat installed from APT repository in Ubuntu. I've all hosts configured to auto upgrade packages (for example, with rules in unattended-upgrades). However, on every upgrade of metricbeat, even though mino… --- ## [Get Akamai SIEM logs to ELK](https://discuss.elastic.co/t/get-akamai-siem-logs-to-elk/265075)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/get-akamai-siem-logs-to-elk/265075 "2021-02-22T14:11:54Z")
Hi, We want to ingest SIEM logs from akamai to Logstash, then Elasticsearch. To access SIEM logs, we have created akamai API credentials and have gotten SIEM connector details. They include: client\_secret = host = xy… --- ## [Painless processor add field and set name from variable](https://discuss.elastic.co/t/painless-processor-add-field-and-set-name-from-variable/265074)
**Author:** [@ella.danielsson](https://discuss.elastic.co/u/ella.danielsson)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/painless-processor-add-field-and-set-name-from-variable/265074 "2021-02-22T14:11:41Z")
Hi, I'm trying to use a painless script processor to split the content of a field and use the result of the split to add new fields to the document. The problem is that I can't figure out how to set a new field, the nam… --- ## [Filebeat setup. fail to create the Kibana loader](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264283)
**Author:** [@DavidEA](https://discuss.elastic.co/u/DavidEA)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264283 "2021-02-22T14:11:28Z")
Будьте добры, подскажите пожалуйста, не знаю куда уже смотреть. При установке filebeat делаю: filebeat setup -e -E output.logstash.enabled=false -E output.elasticsearch.hosts=\['remote\_ip:9200'\] -E setup.kibana.host=rem… --- ## [Kibana "Goal" Visual - how to make the end of the scale dynamic](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686)
**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 2:04pm UTC](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686 "2021-02-22T14:04:42Z")
Dear Kibana & ES team, We are trying to use the Kibana Goal Visual to represents a proportion of a metrics over its total. E.g. Newly Received Emails / Total of Emails E.g. 16,700 new emails / 100,000 of total emails … --- ## [Unrecognized scale name: "child\_layer\_0\_y" error for facet dual charts](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:59pm UTC](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117 "2021-02-22T13:59:31Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data":{ "url": "data/cars.json" }, "facet":{ "column": { "field":"Origin", "type": "nominal" … --- ## [Upgrade to Kibana 7.11 results in 'Unexpected token \< in JSON at position 0' for eaggs](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707)
**Author:** [@commandline](https://discuss.elastic.co/u/commandline)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707 "2021-02-22T13:53:16Z")
Following an upgrade to 7.11 for elasticsearch and kibana there now appear many Error states on dashboard panels. Inspect shows the response for the request to be { “message”: “Unexpected token \< in JSON at position 0… --- ## [How to create visualization for displaying top requests which has maximum response time in Kibana Holmes](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600)
**Author:** [@mskar](https://discuss.elastic.co/u/mskar)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600 "2021-02-22T13:52:51Z")
Hello, Could you please share how to configure visualization for displaying top requests which has average/maximum response time in Kibana Holmes. Also i couldn't find fields such as reponseTime, bytes or time in the i… --- ## [Snapshot: repository\_verification\_exception](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059 "2021-02-22T13:52:29Z")
Hi! I am trying to do a snapshot for my cluster including 2 nodes. I have a shared file on both of my nodes. node-1 as an NFS server and node-2 as the client. if I add a file to the specified shared directory which is /v… --- ## [File realm users and cluster state size](https://discuss.elastic.co/t/file-realm-users-and-cluster-state-size/265050)
**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/file-realm-users-and-cluster-state-size/265050 "2021-02-22T13:47:37Z")
Hi. Question about file realm authentication in Elasticsearch... My cluster is deployed in Docker and every time I am deploying changes I recreate containers and on each node execute command for adding user to file real… --- ## [Unable to access kibana console](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734 "2021-02-22T13:47:23Z")
Hi Team, We have been using EFK stack in our environment from many months( Elasticserach, kibana verison is 7.4, Xpack security also enabled, used helm method for installation) and able to access the kibana console. No… --- ## [Filter metrics of each gridded cell](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660)
**Author:** [@Matthias3033](https://discuss.elastic.co/u/Matthias3033)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660 "2021-02-22T13:39:24Z")
Hello, I have the following question: I have created a layer with clusters & grids where GPS data is grouped into grid cells. Now I would like to filter these grid cells by counts, i.e. I would like to know how many dat… --- ## [Phrase Suggester Returns Suggestions from Deleted Documents as of 7.0.0](https://discuss.elastic.co/t/phrase-suggester-returns-suggestions-from-deleted-documents-as-of-7-0-0/265068)
**Author:** [@bencody](https://discuss.elastic.co/u/bencody)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/phrase-suggester-returns-suggestions-from-deleted-documents-as-of-7-0-0/265068 "2021-02-22T13:39:20Z")
Issue As of Elasticsearch 7.0.0, the Phrase Suggester returns suggestions of deleted documents. I assume this is a bug. However, the documentation on Suggesters | Elasticsearch Reference \[7.11\] | Elastic does not state… --- ## [\[s3-repository\] path is not accessible on master node](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/264942)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 5\ **Last updated:** [February 22, 2021, 1:15pm UTC](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/264942 "2021-02-22T13:15:01Z")
Hello Team, We are trying to configure the snapshot of indices and store over S3 bucket. But we are facing issue when we are trying to configure repository. We are using 3 node cluster and we instlled the repository-s3 … --- ## [APM 7.11 services missing if no traffic](https://discuss.elastic.co/t/apm-7-11-services-missing-if-no-traffic/264310)
**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 1:00pm UTC](https://discuss.elastic.co/t/apm-7-11-services-missing-if-no-traffic/264310 "2021-02-22T13:00:30Z")
Since upgrading Elasticsearch, Kibana, and APM-server to the the newest version (7.11), on the APM tab under Observability, if there is no traffic on a particular service for the time frame selected, the service no longe… --- ## [Schedule a Job in Elasticsearch](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 9\ **Last updated:** [February 22, 2021, 12:56pm UTC](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032 "2021-02-22T12:56:32Z")
Hi, is it possible to schedule a job in elasticsearch and save it? My requirements are that the team only wants to keep certain messages after xy days to reduce the storage capacity. Can i realize it with rollover, il… --- ## [Can I add dynamic index mapping from Logstash](https://discuss.elastic.co/t/can-i-add-dynamic-index-mapping-from-logstash/264674)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 11:51am UTC](https://discuss.elastic.co/t/can-i-add-dynamic-index-mapping-from-logstash/264674 "2021-02-22T11:51:03Z")
I am creating index dynamically(e.g wallet-tx-customer-%{+YYYY.MM}) from Logstash. For some field I am getting an error mapper \[usd\] cannot be changed from type \[long\] to \[float\] and that event doesn't get indexed. I wa… --- ## [Use Enrich policy and enrich pipeline processor to check secondary index and update a value](https://discuss.elastic.co/t/use-enrich-policy-and-enrich-pipeline-processor-to-check-secondary-index-and-update-a-value/264840)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 11:47am UTC](https://discuss.elastic.co/t/use-enrich-policy-and-enrich-pipeline-processor-to-check-secondary-index-and-update-a-value/264840 "2021-02-22T11:47:43Z")
So i have 2 indexes, A which is periodically updated and contains docs with two fields which are email and reviewed. My second index B has lots of fields including email and reviewed, this index im constantly adding to. … --- ## [Azure Activity Logs in Elastic](https://discuss.elastic.co/t/azure-activity-logs-in-elastic/264856)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 11:28am UTC](https://discuss.elastic.co/t/azure-activity-logs-in-elastic/264856 "2021-02-22T11:28:59Z")
Hi, currently we are tryting to ship logs from azure eventhub to logstash. We use this: Azure Event Hubs plugin | Logstash Reference \[7.11\] | Elastic to forward the logs to elastic cluster. As far as I have learnt from… --- ## [TIme series Visual builder : How to do Math calculations betweent the output of two series?](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414)
**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\ **Replies:** 9\ **Last updated:** [February 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414 "2021-02-22T11:14:46Z")
Hi Team, I am using Time series visual builder: Top N Chart, i am in a scenario where i am doing Math calculation in 5 different series. See below Screenshot: Pic 1: Final Chart Pic 2: Different time series i have cho… --- ## [Can Logstash accepts GraphQL data and convert into json?](https://discuss.elastic.co/t/can-logstash-accepts-graphql-data-and-convert-into-json/265055)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 11:00am UTC](https://discuss.elastic.co/t/can-logstash-accepts-graphql-data-and-convert-into-json/265055 "2021-02-22T11:00:48Z")
I have one endpoint giving data in GarphQL, is it possible to add a codec filter to parse data from GraphQL to JSON ? or is there any way I can covert GraphQL data to Elasticsearch readable format? --- ## [Count of unique events](https://discuss.elastic.co/t/count-of-unique-events/265037)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:51am UTC](https://discuss.elastic.co/t/count-of-unique-events/265037 "2021-02-22T10:51:08Z")
I have 5000 unique events. If I try to unique count with default precision value, I get the wrong value: How can I calculate truly unique values without changing the precision? --- ## [How to filter date field by days and hours separately](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/265046)
**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:40am UTC](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/265046 "2021-02-22T10:40:58Z")
Hi, I want to create a query that returns all the data from last 30 days and only between 09:00 AM - 18:00 PM. My date field contains both the date and the time of the day (For example "time" : "2021-02-06T06:40:55Z"). … --- ## [Windows Events with evtx](https://discuss.elastic.co/t/windows-events-with-evtx/264565)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 10:28am UTC](https://discuss.elastic.co/t/windows-events-with-evtx/264565 "2021-02-22T10:28:47Z")
Hello. I am trying to setup an PoC with Ingesting Windows Evenst to Elastic. Because of company policies I can´t install Winlogbeat in any host, but the host where I have installed Elasticstack I have access to install a… --- ## [Can't merge a non object mapping with an object mapping](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/264066)
**Author:** [@Infoxd](https://discuss.elastic.co/u/Infoxd)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 10:25am UTC](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/264066 "2021-02-22T10:25:43Z")
Hello, When I'm trying to import this json: { "data": { "args": \["v7.0/4529900134935424/feed", { "limit": 100 }\] }, "@timestamp": "2021-02-11T11:07:02.189Z", "@version": "1" } I'm getting this error: can't… --- ## [Accessing field values in script processor](https://discuss.elastic.co/t/accessing-field-values-in-script-processor/265048)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 9:38am UTC](https://discuss.elastic.co/t/accessing-field-values-in-script-processor/265048 "2021-02-22T09:38:32Z")
Hi, I'm studding for the ECE and when reading about script processors to be used in ingestion pipelines I see in the documentation that in order to access the field value I should use the ctx variables You can access th… --- ## [Indices won't close](https://discuss.elastic.co/t/indices-wont-close/262254)
**Author:** [@JuddyBuddy77](https://discuss.elastic.co/u/JuddyBuddy77)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 9:33am UTC](https://discuss.elastic.co/t/indices-wont-close/262254 "2021-02-22T09:33:48Z")
Hello, first post, still learning. Having an issue closing "random" indices, after removing replica shards and using shard allocation awareness. ES 6.8.3, although indices may have been created in ES 5 (I know). Remov… [Previous page](https://discuss.elastic.co/latest.md?page=1823) [Next page](https://discuss.elastic.co/latest.md?page=1825)