# Latest **URL:** https://discuss.elastic.co/latest.md?page=1846 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1847 --- ## [Fetch the data from multiple indexes and create one report](https://discuss.elastic.co/t/fetch-the-data-from-multiple-indexes-and-create-one-report/263867)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 12:18pm UTC](https://discuss.elastic.co/t/fetch-the-data-from-multiple-indexes-and-create-one-report/263867 "2021-02-10T12:18:48Z")
Hi Team, I have 3 different index with one transaction\_id as common in all, i am generation report with fields from all 3 indices at every midnight for transactions of last 3 days. I have different fields in all indice… --- ## [Showing \`error.log\` field in Observability Logs? (Currently it just shows \`message\` field, so it is very inconvenient to look at errors!)](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 4\ **Last updated:** [February 10, 2021, 12:14pm UTC](https://discuss.elastic.co/t/showing-error-log-field-in-observability-logs-currently-it-just-shows-message-field-so-it-is-very-inconvenient-to-look-at-errors/263319 "2021-02-10T12:14:41Z")
Hi thanks for elastic stack! I wonder how can I show error.log field in Observability Logs? Currently it just shows message field, so it is very inconvenient to look at errors! When doing tail -f mylogfile, of course we … --- ## [Best way of setting up \`service.name\` && any other fields that I should set up?](https://discuss.elastic.co/t/best-way-of-setting-up-service-name-any-other-fields-that-i-should-set-up/262700)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 12:12pm UTC](https://discuss.elastic.co/t/best-way-of-setting-up-service-name-any-other-fields-that-i-should-set-up/262700 "2021-02-10T12:12:29Z")
Hi thanks for this product! I wonder how should I set up the service.name? What is the most recommended way to setup it for any kubernetes pod (e.g. a Spring java app, a Nginx, a Kafka...) (Because I see here saying tha… --- ## [How to store boolean value or empty-able value in Index Connector of Kibana Alerts?](https://discuss.elastic.co/t/how-to-store-boolean-value-or-empty-able-value-in-index-connector-of-kibana-alerts/263481)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-store-boolean-value-or-empty-able-value-in-index-connector-of-kibana-alerts/263481 "2021-02-10T12:10:45Z")
Hi thanks for the lib! I see the {{state.isTriggered}} is a boolean. However, I cannot write down that format: If I use "{{state.isTriggered}}", then the document fail to index, because boolean fields cannot accept st… --- ## [Filebeat Pod not working properly](https://discuss.elastic.co/t/filebeat-pod-not-working-properly/263641)
**Author:** [@yimengael](https://discuss.elastic.co/u/yimengael)\ **Replies:** 3\ **Last updated:** [February 10, 2021, 11:28am UTC](https://discuss.elastic.co/t/filebeat-pod-not-working-properly/263641 "2021-02-10T11:28:33Z")
Hi Filebeat experts, I deployed Filebeat on my Kubernetes cluster using deamon set. I have many nodes in my cluster. In each node of my cluster, I have a Filebeat pods that is running and collecting all the pods logs on… --- ## [When I restart the pod and move the worker node, filebeat does not start collecting logs](https://discuss.elastic.co/t/when-i-restart-the-pod-and-move-the-worker-node-filebeat-does-not-start-collecting-logs/263490)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 3\ **Last updated:** [February 10, 2021, 11:17am UTC](https://discuss.elastic.co/t/when-i-restart-the-pod-and-move-the-worker-node-filebeat-does-not-start-collecting-logs/263490 "2021-02-10T11:17:53Z")
The log of the pod of azure kubernetes system is collected from the worker node. Log collection does not start when the pod reboots and moves the worker node. Is there any good workaround? --- ## [ILM phase don't delete indexes (els 7.9)](https://discuss.elastic.co/t/ilm-phase-dont-delete-indexes-els-7-9/263704)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 11:08am UTC](https://discuss.elastic.co/t/ilm-phase-dont-delete-indexes-els-7-9/263704 "2021-02-10T11:08:06Z")
My ILM policy PUT \_ilm/policy/delete-after-7-days { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { "priority": 100 } … --- ## [Dynamic Nested Key Value List Aggregation](https://discuss.elastic.co/t/dynamic-nested-key-value-list-aggregation/263841)
**Author:** [@alparslan](https://discuss.elastic.co/u/alparslan)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 10:52am UTC](https://discuss.elastic.co/t/dynamic-nested-key-value-list-aggregation/263841 "2021-02-10T10:52:47Z")
Hi, I have "inputParams" object with dynamic key value pair with the following structure. My purpose is visualizing the "inputParams" field according to key. Keys are not known. It can be change according to process. … --- ## [Logs are not getting logged continuously](https://discuss.elastic.co/t/logs-are-not-getting-logged-continuously/263081)
**Author:** [@Bilal\_Malik](https://discuss.elastic.co/u/Bilal_Malik)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 10:31am UTC](https://discuss.elastic.co/t/logs-are-not-getting-logged-continuously/263081 "2021-02-10T10:31:46Z")
Hi, Elastic search is showing very strange behavior from yesterday, it was working perfectly, but now it is missing logs after every ten minutes. It just logs for 5 minutes then shows a gap for the next 10 minutes. Plea… --- ## [ES 7.8.0 plugin development - onIndexModule questions](https://discuss.elastic.co/t/es-7-8-0-plugin-development-onindexmodule-questions/263848)
**Author:** [@Tom\_Elias](https://discuss.elastic.co/u/Tom_Elias)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 10:16am UTC](https://discuss.elastic.co/t/es-7-8-0-plugin-development-onindexmodule-questions/263848 "2021-02-10T10:16:15Z")
Hello, I am currently developing a plugin for Elasticsearch and trying out the new dense\_vector data type. what i'm currently trying to do is register a PostIndexOperationListener and IndexOperationEventListener object… --- ## [Nested query max value](https://discuss.elastic.co/t/nested-query-max-value/263569)
**Author:** [@sivanzakay](https://discuss.elastic.co/u/sivanzakay)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 10:04am UTC](https://discuss.elastic.co/t/nested-query-max-value/263569 "2021-02-10T10:04:15Z")
For a set of documents like this: { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 3, "relation" : "eq" }, "ma… --- ## [Filebeat: failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-temporary-bulk-send-failure/263515)
**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 10:07am UTC](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-temporary-bulk-send-failure/263515 "2021-02-10T10:07:08Z")
Hi, I have setup a few hosts at home & and am slowly teaching myself elastic. Problem at the moment is filebeat 7.10.2 are having trouble sending to my elasticsearch instance. Below is the snippet I'm seeing from one o… --- ## [Elastic APM](https://discuss.elastic.co/t/elastic-apm/263846)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 9:33am UTC](https://discuss.elastic.co/t/elastic-apm/263846 "2021-02-10T09:33:32Z")
Can we use Elatsic APM in opensource ELK stack? --- ## [Unable to see transactions with APM when used with apollo-server-express](https://discuss.elastic.co/t/unable-to-see-transactions-with-apm-when-used-with-apollo-server-express/263821)
**Author:** [@Sim\_Singh](https://discuss.elastic.co/u/Sim_Singh)\ **Replies:** 4\ **Last updated:** [February 10, 2021, 9:31am UTC](https://discuss.elastic.co/t/unable-to-see-transactions-with-apm-when-used-with-apollo-server-express/263821 "2021-02-10T09:31:34Z")
APM Agent language and version: "elastic-apm-node": "^3.10.0", Using with: "apollo-server-express": "^2.18.2", "express": "^4.17.1", This is a first time setup for this particular type of app. As suggested by Apollo… --- ## [How to do static field in visualization](https://discuss.elastic.co/t/how-to-do-static-field-in-visualization/263834)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 6\ **Last updated:** [February 10, 2021, 9:28am UTC](https://discuss.elastic.co/t/how-to-do-static-field-in-visualization/263834 "2021-02-10T09:28:18Z")
In kibana visualization , for example in last 15 minute the kibana visulization shows that user x has count 10 then after 15 minutes if a user is not using computer then it should show count 0 and yes it should also show… --- ## [Parsing json logs issue](https://discuss.elastic.co/t/parsing-json-logs-issue/263638)
**Author:** [@doogle](https://discuss.elastic.co/u/doogle)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 9:26am UTC](https://discuss.elastic.co/t/parsing-json-logs-issue/263638 "2021-02-10T09:26:52Z")
Hi All, I am rather new to all of this and I have been tasked to get logging working in our environment. We have a smoothwall firewall that we use for webfiltering. I have manged to get most of the logs parsed, however … --- ## [Running tasks get terminated when cluster is upgraded from 6.6.2 to 7.10.2 using full cluster restart upgrade approach](https://discuss.elastic.co/t/running-tasks-get-terminated-when-cluster-is-upgraded-from-6-6-2-to-7-10-2-using-full-cluster-restart-upgrade-approach/263668)
**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\ **Replies:** 7\ **Last updated:** [February 10, 2021, 9:26am UTC](https://discuss.elastic.co/t/running-tasks-get-terminated-when-cluster-is-upgraded-from-6-6-2-to-7-10-2-using-full-cluster-restart-upgrade-approach/263668 "2021-02-10T09:26:39Z")
Hi I tried to upgrade my elasticsearch cluster running version 6.6.2 to version 7.10.2 using full cluster restart upgrade approach. Before performing upgrade, I had some tasks running as can be seen in the following ou… --- ## [Search Error - All Shards failed](https://discuss.elastic.co/t/search-error-all-shards-failed/263817)
**Author:** [@Hyun\_Choi](https://discuss.elastic.co/u/Hyun_Choi)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 8:28am UTC](https://discuss.elastic.co/t/search-error-all-shards-failed/263817 "2021-02-10T08:28:22Z")
After parsing JSON log with the filter I used below filter { if \[type\] == "vizql\_cpp" or \[type\] == "vizql\_tabprotosrv" { json { source =\> "message" } mutate { rename =\>… --- ## [Start from zero with a new cluster](https://discuss.elastic.co/t/start-from-zero-with-a-new-cluster/263843)
**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 8:12am UTC](https://discuss.elastic.co/t/start-from-zero-with-a-new-cluster/263843 "2021-02-10T08:12:14Z")
Hi all, I've been working with this ELK solution for a few years and I can't restart all the nodes in a cluster to ... start from zero with a new cluster 1st - Delete all stored data I can delete indexes ... (from com… --- ## [Common properties on docs](https://discuss.elastic.co/t/common-properties-on-docs/263412)
**Author:** [@Faycal](https://discuss.elastic.co/u/Faycal)\ **Replies:** 4\ **Last updated:** [February 10, 2021, 8:09am UTC](https://discuss.elastic.co/t/common-properties-on-docs/263412 "2021-02-10T08:09:44Z")
Hello all, i'm new on this community. I have an index of "hits" and for each document we have two parameters: user genre example: doc1 user:john genre:rock doc2 user:john genre:rap doc3 user:bruce genre:ro… --- ## [\[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out](https://discuss.elastic.co/t/error-data-elasticsearch-timeouterror-request-timed-out/263830)
**Author:** [@tushar1092](https://discuss.elastic.co/u/tushar1092)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 8:01am UTC](https://discuss.elastic.co/t/error-data-elasticsearch-timeouterror-request-timed-out/263830 "2021-02-10T08:01:01Z")
I am trying to install Kibana on my windows machine, it keeps giving me error. I have also tried to delete all Kibana task - curl -XDELETE http://localhost:9200/.kibana\* But still getting this error. Below are the logs.… --- ## [Xpack from msi](https://discuss.elastic.co/t/xpack-from-msi/262279)
**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\ **Replies:** 6\ **Last updated:** [February 10, 2021, 7:57am UTC](https://discuss.elastic.co/t/xpack-from-msi/262279 "2021-02-10T07:57:18Z")
please help me fix this installed my search using msi version elasticsearch-7.10.2 Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack se… --- ## [State tracker file update - JDBC input plugin](https://discuss.elastic.co/t/state-tracker-file-update-jdbc-input-plugin/263268)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 7:28am UTC](https://discuss.elastic.co/t/state-tracker-file-update-jdbc-input-plugin/263268 "2021-02-10T07:28:27Z")
Would like to know when the state tracker file get's updated. We are using the jdbc input plugin and modified date from the table has been used as the state tracker field. Would like to know when the state tracker files… --- ## [ELastic credentials not working for Elasticsearch Endpoints of elastic cloud deployement](https://discuss.elastic.co/t/elastic-credentials-not-working-for-elasticsearch-endpoints-of-elastic-cloud-deployement/263837)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 7:01am UTC](https://discuss.elastic.co/t/elastic-credentials-not-working-for-elasticsearch-endpoints-of-elastic-cloud-deployement/263837 "2021-02-10T07:01:10Z")
Hi, I am using free trial of Elastic cloud for a POC purpose. I have created one test-observability-v1 deployment. I have got ES endpoints, Kibana end points and APM end points affet deployement. Also there one e… --- ## [Elastic clould price calculator. RAM size?](https://discuss.elastic.co/t/elastic-clould-price-calculator-ram-size/263742)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 6:11am UTC](https://discuss.elastic.co/t/elastic-clould-price-calculator-ram-size/263742 "2021-02-10T06:11:32Z")
Hi folks, i am trying to use the this calculator: https://cloud.elastic.co/pricing and trying to size my cloud cluster and compare it to my current on prem cluster. I know from the documentation that it is recomended t… --- ## [I want to create Snapshots of indices on External Hard Drive](https://discuss.elastic.co/t/i-want-to-create-snapshots-of-indices-on-external-hard-drive/263801)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 5\ **Last updated:** [February 10, 2021, 5:46am UTC](https://discuss.elastic.co/t/i-want-to-create-snapshots-of-indices-on-external-hard-drive/263801 "2021-02-10T05:46:18Z")
Hi , I have created NFS location in my cluster that is accessible from all the nodes. I checked it through terminal, The Repository has read and write both permissions. But when i create a repository from kibana termi… --- ## [Logstash is creating data streams instead of indices in ES](https://discuss.elastic.co/t/logstash-is-creating-data-streams-instead-of-indices-in-es/263824)
**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 4:41am UTC](https://discuss.elastic.co/t/logstash-is-creating-data-streams-instead-of-indices-in-es/263824 "2021-02-10T04:41:31Z")
elasticsearch { host =\> "localhost" index\_type =\> "logs-%{\[kubernetes\]\[labels\]\[app\]}" } I am using above configuration in logstash Helm chat values.yml file for OKD setup. filebeat -\>logstash -\>ES Some logs … --- ## [Filebeat - apport.log: permission denied](https://discuss.elastic.co/t/filebeat-apport-log-permission-denied/263048)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 4:28am UTC](https://discuss.elastic.co/t/filebeat-apport-log-permission-denied/263048 "2021-02-10T04:28:04Z")
Hi, I'm trying to configure and run Filebeat for one of the training topics related to Lab 4.2: Extracting Events and am getting the below error: 2021-02-02T21:46:53.121Z ERROR log/input.go:519 Harveste… --- ## [Issue with Endpoint agent](https://discuss.elastic.co/t/issue-with-endpoint-agent/261610)
**Author:** [@trixrahbit](https://discuss.elastic.co/u/trixrahbit)\ **Replies:** 6\ **Last updated:** [February 10, 2021, 12:30am UTC](https://discuss.elastic.co/t/issue-with-endpoint-agent/261610 "2021-02-10T00:30:18Z")
I finally got everything setup for my stack but the endpoints are generating a "Failed to download or validate user artifacts error. " I cant seem to find anything on this. Could anyone point me in the right direction? … --- ## [Can I add custom SVGs as symbols on ElasticSearch Kibana Maps?](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309)
**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 11:43pm UTC](https://discuss.elastic.co/t/can-i-add-custom-svgs-as-symbols-on-elasticsearch-kibana-maps/263309 "2021-02-09T23:43:17Z")
Hi all, We have a map view taking a GeoJSON feed and plotting points according to long/lat. It works really well, but the out of the box symbols provided don't match our data use-case (weather events etc). I'm capable… [Previous page](https://discuss.elastic.co/latest.md?page=1845) [Next page](https://discuss.elastic.co/latest.md?page=1847)