# Latest **URL:** https://discuss.elastic.co/latest.md?page=1825 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1826 --- ## [Elasticsearch seach using wildcard, range and terms](https://discuss.elastic.co/t/elasticsearch-seach-using-wildcard-range-and-terms/264811)
**Author:** [@lalitesh](https://discuss.elastic.co/u/lalitesh)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-seach-using-wildcard-range-and-terms/264811 "2021-02-22T09:28:15Z")
I am trying to write a search DSL query on a Elasticsearch ( Version 7.1 ) index that has fields like, product\_name, exported\_at and category\_id. From the document I understand that I would need to use the wildcard, ran… --- ## [Way aren't Event details under security using the same query as you put in Elasticsearch indices](https://discuss.elastic.co/t/way-arent-event-details-under-security-using-the-same-query-as-you-put-in-elasticsearch-indices/265044)
**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 9:04am UTC](https://discuss.elastic.co/t/way-arent-event-details-under-security-using-the-same-query-as-you-put-in-elasticsearch-indices/265044 "2021-02-22T09:04:01Z")
I have a soc-filebeat alias whit filter on filebeat-7.11.1-\* and use soc-\* for Elasticsearch indices in settings. And have created a user that have full access to soc-. All dashboards are OK under Security network and … --- ## [Logstash input plugin jdbc schedule issue on k8s](https://discuss.elastic.co/t/logstash-input-plugin-jdbc-schedule-issue-on-k8s/263535)
**Author:** [@Dongsheng\_XI](https://discuss.elastic.co/u/Dongsheng_XI)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 9:01am UTC](https://discuss.elastic.co/t/logstash-input-plugin-jdbc-schedule-issue-on-k8s/263535 "2021-02-22T09:01:14Z")
our team is using logstash to sync data between MySQL and ElasticSearch, I am following How to keep Elasticsearch synchronized with a relational database using Logstash and JDBC to set up my pipeline. when the logstash i… --- ## [Metricbeat DNS error in kubernetes Cluster](https://discuss.elastic.co/t/metricbeat-dns-error-in-kubernetes-cluster/263303)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 8\ **Last updated:** [February 22, 2021, 8:47am UTC](https://discuss.elastic.co/t/metricbeat-dns-error-in-kubernetes-cluster/263303 "2021-02-22T08:47:37Z")
I have installed metric beat using helm chart and I am getting following DNS error. 2021-02-04T21:27:38.074Z WARN \[transport\] transport/tcp.go:52 DNS lookup failure "k8s-rke-cluster1-node2": lookup k8s-rke-cluster1-node… --- ## [How to send Jaeger traces to Elastic Cloud](https://discuss.elastic.co/t/how-to-send-jaeger-traces-to-elastic-cloud/264820)
**Author:** [@srneodani](https://discuss.elastic.co/u/srneodani)\ **Replies:** 5\ **Last updated:** [February 22, 2021, 8:44am UTC](https://discuss.elastic.co/t/how-to-send-jaeger-traces-to-elastic-cloud/264820 "2021-02-22T08:44:47Z")
I have Jaeger working inside Kubernetes and I would like to know if it is possible to send the traces to Elastic Cloud, but I have not found much information about it, almost all the examples were with local elastic inst… --- ## [Filebeat 2 log sources](https://discuss.elastic.co/t/filebeat-2-log-sources/264827)
**Author:** [@grazia0912](https://discuss.elastic.co/u/grazia0912)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 8:40am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827 "2021-02-22T08:40:11Z")
Hi, i'm currently working with Filebeat and i would like to know if there is a way Filebeat gets logs from 1 remote Windows server then if the the server is down it will get logs automatically from a different server. I … --- ## [Aggregation bucket sum + max group by time with filtering](https://discuss.elastic.co/t/aggregation-bucket-sum-max-group-by-time-with-filtering/264718)
**Author:** [@Tim4](https://discuss.elastic.co/u/Tim4)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 8:14am UTC](https://discuss.elastic.co/t/aggregation-bucket-sum-max-group-by-time-with-filtering/264718 "2021-02-22T08:14:23Z")
Hi, I'm in need of some help. Let's start of with some sample data: Datetime \_\_\_\_\_\_\_\_\_\_\_\_| User | Mbps 18/02/2021 12:00:00 | a \_\_\_ | 10 18/02/2021 12:00:00 | b \_\_\_ | 5 18/02/2021 12:20:00 | a … --- ## [Elasticsearch bulk operation: insert if not existing, otherwise update or add a nested element](https://discuss.elastic.co/t/elasticsearch-bulk-operation-insert-if-not-existing-otherwise-update-or-add-a-nested-element/265034)
**Author:** [@corlee](https://discuss.elastic.co/u/corlee)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-operation-insert-if-not-existing-otherwise-update-or-add-a-nested-element/265034 "2021-02-22T07:50:24Z")
In elasticsearch 7.11.0 I have products as described. { "\_index" : "products", "\_type" : "\_doc", "\_id" : "1234567890123", "\_source" : { "ean" : "1234567890123", "title" : "Very nice product", "mercha… --- ## [Quickstart Deploy an Elasticsearch cluster get stuck in unknown Health & ApplyingChanges Phase](https://discuss.elastic.co/t/quickstart-deploy-an-elasticsearch-cluster-get-stuck-in-unknown-health-applyingchanges-phase/264791)
**Author:** [@scollector65](https://discuss.elastic.co/u/scollector65)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 7:21am UTC](https://discuss.elastic.co/t/quickstart-deploy-an-elasticsearch-cluster-get-stuck-in-unknown-health-applyingchanges-phase/264791 "2021-02-22T07:21:14Z")
I just started ECK and I try Quickstart docs. https://www.elastic.co/guide/en/cloud-on-k8s/1.4/k8s-deploy-eck.html https://www.elastic.co/guide/en/cloud-on-k8s/1.4/k8s-deploy-elasticsearch.html but my elasticsearch ge… --- ## [JSON file input to Filebeat sending data to Logstash and then to Azure Data Explorer](https://discuss.elastic.co/t/json-file-input-to-filebeat-sending-data-to-logstash-and-then-to-azure-data-explorer/264800)
**Author:** [@omkarg81](https://discuss.elastic.co/u/omkarg81)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 7:39am UTC](https://discuss.elastic.co/t/json-file-input-to-filebeat-sending-data-to-logstash-and-then-to-azure-data-explorer/264800 "2021-02-22T07:39:39Z")
I'm trying to send a single line JSON input file to Filebeat which should read and send in the data over to Logstash which should then forward or dump it to Azure Data Explorer cluster-table. Somehow, when the Filebeat … --- ## [Create search request from available json unit test](https://discuss.elastic.co/t/create-search-request-from-available-json-unit-test/264952)
**Author:** [@Rohit\_Sharma](https://discuss.elastic.co/u/Rohit_Sharma)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 6:58am UTC](https://discuss.elastic.co/t/create-search-request-from-available-json-unit-test/264952 "2021-02-22T06:58:27Z")
Hi, I'm new to elastic search. I need to write unit test where I need to create search request object and search response object. I have search response and search request available in JSON. My search request contain… --- ## [Is Xpack related to "master\_not\_discovered\_exception"? 503](https://discuss.elastic.co/t/is-xpack-related-to-master-not-discovered-exception-503/264539)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 6:48am UTC](https://discuss.elastic.co/t/is-xpack-related-to-master-not-discovered-exception-503/264539 "2021-02-22T06:48:01Z")
Hello everyone! I have a single-node cluster running which I have enabled the Xpack security on. I'd like to add a node to this cluster, but I get "master\_not\_discovered\_exception". I have set the discovery.seed\_hosts as… --- ## [Foreign "fields" in JSON document in Kibana Discover](https://discuss.elastic.co/t/foreign-fields-in-json-document-in-kibana-discover/265024)
**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 6:44am UTC](https://discuss.elastic.co/t/foreign-fields-in-json-document-in-kibana-discover/265024 "2021-02-22T06:44:46Z")
Hi, my setup: .log file --\> filebeat --\> logstash --\> elasticsearch \<-- kibana sample of .log file content: { "@timestamp":"2021-02-22T09:40:32.533+07:00", "@version":"1", "message":"mappingReloadDTreeEr… --- ## [\[Heartbeat\]: add retry logic into http/tcp check](https://discuss.elastic.co/t/heartbeat-add-retry-logic-into-http-tcp-check/264328)
**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 6:25am UTC](https://discuss.elastic.co/t/heartbeat-add-retry-logic-into-http-tcp-check/264328 "2021-02-22T06:25:51Z")
Hello Beats friends, Wondering if current heartbeat supports retry in http/tcp check? Current Heartbeat ails me since looks like there's no retry logic in http/tcp check. As far as I can find, only icmp support retry … --- ## [Kibana to access data from multiple Elastic Search Clusters](https://discuss.elastic.co/t/kibana-to-access-data-from-multiple-elastic-search-clusters/265027)
**Author:** [@Sudarshan\_Reddy](https://discuss.elastic.co/u/Sudarshan_Reddy)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-to-access-data-from-multiple-elastic-search-clusters/265027 "2021-02-22T05:28:41Z")
Hi, we are building dashboard for test results . Same test cases execute in multiple k8s clusters ( we organized as devus1, qaus1, produs1,prodeu1 ,prodanz1 ) . each environment we have seperate elastic search instance r… --- ## [java.net.SocketTimeoutException: 30,000 milliseconds timeout on connection http-outgoing-12](https://discuss.elastic.co/t/java-net-sockettimeoutexception-30-000-milliseconds-timeout-on-connection-http-outgoing-12/264657)
**Author:** [@vands](https://discuss.elastic.co/u/vands)\ **Replies:** 0\ **Last updated:** [February 18, 2021, 7:58am UTC](https://discuss.elastic.co/t/java-net-sockettimeoutexception-30-000-milliseconds-timeout-on-connection-http-outgoing-12/264657 "2021-02-18T07:58:17Z")
Hi All, Facing the below issue while fetching bulk records using high level rest client builder . java.net.SocketTimeoutException: 30,000 milliseconds timeout on connection http-outgoing-12 . Do I need to change any c… --- ## [How to enable shards allocation of node that was disabled the shards allocation](https://discuss.elastic.co/t/how-to-enable-shards-allocation-of-node-that-was-disabled-the-shards-allocation/264790)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 5:23am UTC](https://discuss.elastic.co/t/how-to-enable-shards-allocation-of-node-that-was-disabled-the-shards-allocation/264790 "2021-02-22T05:23:03Z")
I disabled shards allocation using curl -XPUT “http://username:password@host:port/\_cluster/settings” -d '{ "transient" :{ "cluster.routing.allocation.exclude.\_ip" : "X.X.X.X" } }' command. Then again enabled usin… --- ## [Can it be supported to be configured by user that dropping @timestamp and @metadata fields of filebeat event before sent to kafka?](https://discuss.elastic.co/t/can-it-be-supported-to-be-configured-by-user-that-dropping-timestamp-and-metadata-fields-of-filebeat-event-before-sent-to-kafka/264849)
**Author:** [@mover](https://discuss.elastic.co/u/mover)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 5:17am UTC](https://discuss.elastic.co/t/can-it-be-supported-to-be-configured-by-user-that-dropping-timestamp-and-metadata-fields-of-filebeat-event-before-sent-to-kafka/264849 "2021-02-22T05:17:37Z")
currently, the @timestamp and @metadata fields of filebeat event can not be dropped before sending to kafka. why? dropping or retainning these fields before sent to kafka can be controlled by user? --- ## [Reduce metricbeat storage data](https://discuss.elastic.co/t/reduce-metricbeat-storage-data/262125)
**Author:** [@tvander](https://discuss.elastic.co/u/tvander)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 5:02am UTC](https://discuss.elastic.co/t/reduce-metricbeat-storage-data/262125 "2021-02-22T05:02:05Z")
Hi, I'm collecting 2 days of metricbeat data on my servers, its 20go per day, i let the default configuration and i need it this way to get precise real time information, But i also want to get information on my last 6… --- ## [How i can store field in kibana](https://discuss.elastic.co/t/how-i-can-store-field-in-kibana/263950)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 4:41am UTC](https://discuss.elastic.co/t/how-i-can-store-field-in-kibana/263950 "2021-02-22T04:41:51Z")
How i can store field in kibana? --- ## [Metricbeat on 200 PCs](https://discuss.elastic.co/t/metricbeat-on-200-pcs/265025)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 4:32am UTC](https://discuss.elastic.co/t/metricbeat-on-200-pcs/265025 "2021-02-22T04:32:25Z")
With default settings (like sending data every 10s), 200 PCs with Metricbeat, how much data is going to be sent and how many GBs per day do you think will be collected? Will my network traffic become slow since a lot of … --- ## [Exiting: 1 error: error loading config file: invalid config: yaml: line 91: did not find expected '-' indicator](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-91-did-not-find-expected-indicator/264996)
**Author:** [@Wahyu\_Nugroho](https://discuss.elastic.co/u/Wahyu_Nugroho)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 4:30am UTC](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-91-did-not-find-expected-indicator/264996 "2021-02-22T04:30:33Z")
Please help me. This is my filebeat.yml : ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. The… --- ## [Elastic node not connecting to master](https://discuss.elastic.co/t/elastic-node-not-connecting-to-master/265026)
**Author:** [@jelbatn](https://discuss.elastic.co/u/jelbatn)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 4:26am UTC](https://discuss.elastic.co/t/elastic-node-not-connecting-to-master/265026 "2021-02-22T04:26:08Z")
I have the following configuration for a multi node elastic cluster. both nodes are running part of a docker swarm. here is the docker yaml config elasticsearch: image: {imagerepo}/elasticsearch:0.0.7-6892bb5 … --- ## [Increase size limit - Python ElasticSearch](https://discuss.elastic.co/t/increase-size-limit-python-elasticsearch/264830)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 7\ **Last updated:** [February 22, 2021, 4:02am UTC](https://discuss.elastic.co/t/increase-size-limit-python-elasticsearch/264830 "2021-02-22T04:02:16Z")
Hi, I'm currently writing a python script to extract out my elasticsearch documents and the following are my ES parameters that involves the sizing response = es.search(index= es\_index\_list,scroll='5m', size='10000', b… --- ## [Agent support for OS windows server and red hat](https://discuss.elastic.co/t/agent-support-for-os-windows-server-and-red-hat/262276)
**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 3:59am UTC](https://discuss.elastic.co/t/agent-support-for-os-windows-server-and-red-hat/262276 "2021-02-22T03:59:54Z")
Hello Community, what about support agents on these servers: Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Linux Redhat desde 5.11 and 6.8 hope your comments, Regards. --- ## [Does Index/Shard size affects the performance of search/insert/update query?](https://discuss.elastic.co/t/does-index-shard-size-affects-the-performance-of-search-insert-update-query/264878)
**Author:** [@Nikunj210903](https://discuss.elastic.co/u/Nikunj210903)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 3:59am UTC](https://discuss.elastic.co/t/does-index-shard-size-affects-the-performance-of-search-insert-update-query/264878 "2021-02-22T03:59:07Z")
Does Index/Shard size affects the performance of search/create/update query? So suppose I have 2 indexes. In one index I have 2 GB data and in another index I have 10 GB data. If I fire same search/insert/update query on… --- ## [In rollover, Is it possible to update the document of old indexes?](https://discuss.elastic.co/t/in-rollover-is-it-possible-to-update-the-document-of-old-indexes/264512)
**Author:** [@Nikunj210903](https://discuss.elastic.co/u/Nikunj210903)\ **Replies:** 16\ **Last updated:** [February 22, 2021, 3:57am UTC](https://discuss.elastic.co/t/in-rollover-is-it-possible-to-update-the-document-of-old-indexes/264512 "2021-02-22T03:57:41Z")
Hello community.I have implemented rollover feature of elastic search. It will create a new index every day. Below is my question Is it possible to update the document of old indexes ? I have read somewhere that old in… --- ## [Collect disk IO and network metrics from ESXi and AIX OS](https://discuss.elastic.co/t/collect-disk-io-and-network-metrics-from-esxi-and-aix-os/262173)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 3:53am UTC](https://discuss.elastic.co/t/collect-disk-io-and-network-metrics-from-esxi-and-aix-os/262173 "2021-02-22T03:53:21Z")
Hello, Is there a way to collect disk IO and network metrics from ESX and AIX OS just like we have diskio and network metricset available in the metricbeat system module? Any workaround available? Thanks --- ## [ECS Logging for PHP / Question](https://discuss.elastic.co/t/ecs-logging-for-php-question/265006)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 3:48am UTC](https://discuss.elastic.co/t/ecs-logging-for-php-question/265006 "2021-02-22T03:48:20Z")
Hi guys, Im trying to ship my application events to my elasticsearch platform. My app and elk are running on different servers (ping reachable). I already have the php library working on a little example script taken f… --- ## [Test and Dev Migration Best Practice](https://discuss.elastic.co/t/test-and-dev-migration-best-practice/264774)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 2:43am UTC](https://discuss.elastic.co/t/test-and-dev-migration-best-practice/264774 "2021-02-22T02:43:12Z")
Hi All, Does anyone have and good references for how people are handing the cycle of refreshes from production instances in the cloud back to Dev and Test instances on developer laptops. We are keen to keep dev/test la… [Previous page](https://discuss.elastic.co/latest.md?page=1824) [Next page](https://discuss.elastic.co/latest.md?page=1826)