# Latest **URL:** https://discuss.elastic.co/latest.md?page=1851 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1852 --- ## [How to convert this update script to PHP?](https://discuss.elastic.co/t/how-to-convert-this-update-script-to-php/263628)
**Author:** [@OB1290](https://discuss.elastic.co/u/OB1290)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 3:48pm UTC](https://discuss.elastic.co/t/how-to-convert-this-update-script-to-php/263628 "2021-02-08T15:48:15Z")
I'm having trouble converting this request to php : POST candidates/\_update/a23OcncBXBMGOH6pwXge { "script": { "source": """ if (ctx.\_source.containsKey('file')) { ctx.\_source.file.add(\['filename':par… --- ## [Nested object aggregation performance issues](https://discuss.elastic.co/t/nested-object-aggregation-performance-issues/263625)
**Author:** [@brusko](https://discuss.elastic.co/u/brusko)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 3:45pm UTC](https://discuss.elastic.co/t/nested-object-aggregation-performance-issues/263625 "2021-02-08T15:45:04Z")
Hi everyone, I'm challenged with a problem where I use nested objects. Given I have a document structure that looks like the following { "mappings": { "properties": { "id": { "type": "integ… --- ## [Docs.deleted docs are missing after reindexing](https://discuss.elastic.co/t/docs-deleted-docs-are-missing-after-reindexing/263619)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 3:44pm UTC](https://discuss.elastic.co/t/docs-deleted-docs-are-missing-after-reindexing/263619 "2021-02-08T15:44:40Z")
We are in the process of reindexing data from one cluster another cluster. We are observing docs.deleted is 0 which is different from the old cluster. We tried curl -X POST "localhost:9200/\_refresh?pretty" , but no use. … --- ## [Elasticsearch.Net - ECCN](https://discuss.elastic.co/t/elasticsearch-net-eccn/263342)
**Author:** [@Joanna](https://discuss.elastic.co/u/Joanna)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-net-eccn/263342 "2021-02-08T15:44:07Z")
Can you provide me ECCN for Elasticsearch.Net? Any info? --- ## [Rollup Job Visualisation - Top Ranking Items](https://discuss.elastic.co/t/rollup-job-visualisation-top-ranking-items/263099)
**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\ **Replies:** 5\ **Last updated:** [February 8, 2021, 3:43pm UTC](https://discuss.elastic.co/t/rollup-job-visualisation-top-ranking-items/263099 "2021-02-08T15:43:23Z")
Hi dear Elastic and Kibana Users, i am having issues running a visualisation for the top tiers when going against a rollup dataset. This issue happens in a pie diagramm aswell as a top list. The results vary when chang… --- ## [Crating visualization with two arrays in a table](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054)
**Author:** [@leinad](https://discuss.elastic.co/u/leinad)\ **Replies:** 4\ **Last updated:** [February 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054 "2021-02-08T15:22:28Z")
Hi , I am trying to create a table with values from two arrays arr1\[str1,str2,str30 arr2\[val1,val2,val3\] desired table should be as str1 - val1 str2 - val2 str3 - val3 and i have multiple such arrays in the json … --- ## [Not able to start elastic Service](https://discuss.elastic.co/t/not-able-to-start-elastic-service/263347)
**Author:** [@pnrao.83](https://discuss.elastic.co/u/pnrao.83)\ **Replies:** 5\ **Last updated:** [February 8, 2021, 2:40pm UTC](https://discuss.elastic.co/t/not-able-to-start-elastic-service/263347 "2021-02-08T14:40:35Z")
Hi Team, i am trying to configure and use elastic search and Kibana. But i was stuck at starting the elastic service in my Oracle Linux Machine. Please find the below logs and yaml file and help: cat /var/log/elasticse… --- ## [About filebeat upgrade 7.6.2 to 7.10.2](https://discuss.elastic.co/t/about-filebeat-upgrade-7-6-2-to-7-10-2/263196)
**Author:** [@ZPerling](https://discuss.elastic.co/u/ZPerling)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 2:38pm UTC](https://discuss.elastic.co/t/about-filebeat-upgrade-7-6-2-to-7-10-2/263196 "2021-02-08T14:38:14Z")
I want to fix bug with filebeat kubernetes auto discover, so upgrade filbeat from 7.6.2 to 7.10.2, but I found some problem, the log events output to kafka speed is very slower at the new version, I do not know how to fi… --- ## [Packetbeat - Cannot add kubernetes metadata](https://discuss.elastic.co/t/packetbeat-cannot-add-kubernetes-metadata/263615)
**Author:** [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 2:36pm UTC](https://discuss.elastic.co/t/packetbeat-cannot-add-kubernetes-metadata/263615 "2021-02-08T14:36:36Z")
Hi. I am trying to configure packetbeat 1.10.1 in order to get kubernetes metadata in a kubernetes cluster v. 1.18.3 but I am not able to get it. This is the configuration that I have applied: - add\_cloud\_meta… --- ## [Logstash Events forward](https://discuss.elastic.co/t/logstash-events-forward/263614)
**Author:** [@suraj.ghorp](https://discuss.elastic.co/u/suraj.ghorp)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 2:30pm UTC](https://discuss.elastic.co/t/logstash-events-forward/263614 "2021-02-08T14:30:46Z")
Hi Team, Logastash pulling logs from cloud based WAF on windows system and we wanted to forward the logs towards Linux based SIEM forwarder. please hep to configure the config file. --- ## [Compare wildcard string to cell value and replace in canvas expression](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234)
**Author:** [@fuzzyWedgie](https://discuss.elastic.co/u/fuzzyWedgie)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 2:07pm UTC](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234 "2021-02-08T14:07:37Z")
How can I replace all cell values in a table in canvas if it matches a wildcard string ? I want to normalize some values in the table in a way that if a table cell contains "test abc" I want the cell value to be repla… --- ## [How much storage for persistent volume for dedicated master nodes in Kubernetes?](https://discuss.elastic.co/t/how-much-storage-for-persistent-volume-for-dedicated-master-nodes-in-kubernetes/263590)
**Author:** [@Pikabanga](https://discuss.elastic.co/u/Pikabanga)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 1:16pm UTC](https://discuss.elastic.co/t/how-much-storage-for-persistent-volume-for-dedicated-master-nodes-in-kubernetes/263590 "2021-02-08T13:16:58Z")
Hi! I'm wondering how much persistent storage is required for master nodes if we have a cluster with dedicated master nodes and data nodes? I am assuming the master nodes don't require as much data as the data nodes? --- ## [Add\_resource\_metadata.namespace.include\_annotations doesn't work anymore in 7.10.x?](https://discuss.elastic.co/t/add-resource-metadata-namespace-include-annotations-doesnt-work-anymore-in-7-10-x/261878)
**Author:** [@lobachpavel](https://discuss.elastic.co/u/lobachpavel)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 11:59am UTC](https://discuss.elastic.co/t/add-resource-metadata-namespace-include-annotations-doesnt-work-anymore-in-7-10-x/261878 "2021-02-08T11:59:14Z")
While migrating from filebeat 7.6.0 to 7.10.x we discovered that we can not pull kubernetes namespace annotations into events anymore , here is the minimal example config: filebeat.yml: | filebeat.autodisc… --- ## [Span#setLabel(String, Number) doesn't work](https://discuss.elastic.co/t/span-setlabel-string-number-doesnt-work/263283)
**Author:** [@dmitry\_first](https://discuss.elastic.co/u/dmitry_first)\ **Replies:** 9\ **Last updated:** [February 8, 2021, 11:59am UTC](https://discuss.elastic.co/t/span-setlabel-string-number-doesnt-work/263283 "2021-02-08T11:59:03Z")
APM Agent language and version: java and apm agent library = 1.20.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: gradle Description of the problem including expected versus act… --- ## [\[Logstash\] Aggregate Filter Plugin with Nested Fields](https://discuss.elastic.co/t/logstash-aggregate-filter-plugin-with-nested-fields/263591)
**Author:** [@jeduguim](https://discuss.elastic.co/u/jeduguim)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 11:45am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-plugin-with-nested-fields/263591 "2021-02-08T11:45:48Z")
Hi, I'm trying to use aggregate filter plugin with nested fields on a logstash config file. But I have a nested field inside other nested field. Is it possible to do in logstash? Maybe with multiple aggregate filters? My… --- ## [Snapshot failing for 1 shard](https://discuss.elastic.co/t/snapshot-failing-for-1-shard/263446)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 11:44am UTC](https://discuss.elastic.co/t/snapshot-failing-for-1-shard/263446 "2021-02-08T11:44:46Z")
Hi Guys, I am using SLM to create snapshots but its failing to snapshot 1 of the shards consistently. The shard is 120GB in size but I have been able to snapshot such large shards for other indices successfully. I can't… --- ## [Kibana Bulk Create API Fails To Overwrite on 7.10 returning 409](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 5\ **Last updated:** [February 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123 "2021-02-08T11:21:20Z")
I have been using various scripts to create dashboards and visualizations from a template successfully on 7.5. When I try the same script on 7.10 it fails, and every visualization returns a 409 conflict error. I'm post… --- ## [\[7.10.2\] Alerting avec plusieurs instances de kibana qui reste en PENDING](https://discuss.elastic.co/t/7-10-2-alerting-avec-plusieurs-instances-de-kibana-qui-reste-en-pending/263414)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 11:13am UTC](https://discuss.elastic.co/t/7-10-2-alerting-avec-plusieurs-instances-de-kibana-qui-reste-en-pending/263414 "2021-02-08T11:13:20Z")
Bonjour, Je reste toujours sans solutions pource thread, malgré un passage en 7.10.2 donc je m'y suis repenché, j'ai créé un nouveau déploiement tout neuf sur cloud.elastic.co, et effectivement, ca marche: je crée une … --- ## [Harvester not harvesting Autodiscover](https://discuss.elastic.co/t/harvester-not-harvesting-autodiscover/263392)
**Author:** [@Alexis\_Oviedo](https://discuss.elastic.co/u/Alexis_Oviedo)\ **Replies:** 4\ **Last updated:** [February 8, 2021, 11:10am UTC](https://discuss.elastic.co/t/harvester-not-harvesting-autodiscover/263392 "2021-02-08T11:10:24Z")
I'm trying to use filebeat docker but it's not harvesting files. Autodiscover seems to work because found the logs I want but it's not harvesting them. This is my filebeat.yml: filebeat.autodiscover: providers: - t… --- ## [How to obtain the current ECCN for Elasticsearch.Net](https://discuss.elastic.co/t/how-to-obtain-the-current-eccn-for-elasticsearch-net/263562)
**Author:** [@Joanna](https://discuss.elastic.co/u/Joanna)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 10:43am UTC](https://discuss.elastic.co/t/how-to-obtain-the-current-eccn-for-elasticsearch-net/263562 "2021-02-08T10:43:44Z")
How to obtain the current ECCN for Elasticsearch.Net? --- ## [Limit in fetching documents through rest API](https://discuss.elastic.co/t/limit-in-fetching-documents-through-rest-api/263551)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 10:32am UTC](https://discuss.elastic.co/t/limit-in-fetching-documents-through-rest-api/263551 "2021-02-08T10:32:10Z")
Hi All, I'm trying to fetch documents from elasticsearch using rest api but it looks like i can pull down only limited set of documents, below is the query i'm using and i'm getting very limited documents eventhough my … --- ## [Strigo UN/PW](https://discuss.elastic.co/t/strigo-un-pw/263572)
**Author:** [@dave.campbell](https://discuss.elastic.co/u/dave.campbell)\ **Replies:** 2\ **Last updated:** [February 8, 2021, 10:10am UTC](https://discuss.elastic.co/t/strigo-un-pw/263572 "2021-02-08T10:10:59Z")
I have just started the Elastic Search training and have set up the Labs. When I copy and paste the Public DNS as asked to I get a request for UN and PW. There is no mention of this in the training. --- ## [Beats Developer Guide \[master\] is out of date, creating new beat fails](https://discuss.elastic.co/t/beats-developer-guide-master-is-out-of-date-creating-new-beat-fails/263156)
**Author:** [@jackemuk-es](https://discuss.elastic.co/u/jackemuk-es)\ **Replies:** 5\ **Last updated:** [February 8, 2021, 10:10am UTC](https://discuss.elastic.co/t/beats-developer-guide-master-is-out-of-date-creating-new-beat-fails/263156 "2021-02-08T10:10:23Z")
There are errors in the documentation to get started with creating your own beats. If you search in the history, they have been around for some time and haven't been updated. This makes it extremely difficult to create a… --- ## [Logstash doesn't auto reconnect to another node ES cluster](https://discuss.elastic.co/t/logstash-doesnt-auto-reconnect-to-another-node-es-cluster/263568)
**Author:** [@lenjeti](https://discuss.elastic.co/u/lenjeti)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 9:41am UTC](https://discuss.elastic.co/t/logstash-doesnt-auto-reconnect-to-another-node-es-cluster/263568 "2021-02-08T09:41:19Z")
We have a 3 node elasticsearch cluster set up. The logstash ouput config looks like this: output { elasticsearch { hosts =\> \["node1:9200", "node2:9200", "node3:9200" … --- ## [Elasticsearch join query](https://discuss.elastic.co/t/elasticsearch-join-query/263567)
**Author:** [@diya5](https://discuss.elastic.co/u/diya5)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-join-query/263567 "2021-02-08T09:36:11Z")
I have two indices. One indices "indications" which have some set of values. Other is "projects". In this indices i will add indications value like " indication = oncology". Now i want to show all indications. Which i… --- ## [Search for fields with dot in name](https://discuss.elastic.co/t/search-for-fields-with-dot-in-name/260692)
**Author:** [@sudpaw](https://discuss.elastic.co/u/sudpaw)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 9:35am UTC](https://discuss.elastic.co/t/search-for-fields-with-dot-in-name/260692 "2021-02-08T09:35:19Z")
Hi, We are migrating from Es6.8 to latest ES7. We are using Re-index. While testing we came across a doc with a malformed fieldname. (the mapping does not allow for the field, but it is there). Example: { "id": "1… --- ## [Filebeat only operating at 10%-15% of expected Performance](https://discuss.elastic.co/t/filebeat-only-operating-at-10-15-of-expected-performance/262865)
**Author:** [@svbernem](https://discuss.elastic.co/u/svbernem)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 6:56am UTC](https://discuss.elastic.co/t/filebeat-only-operating-at-10-15-of-expected-performance/262865 "2021-02-08T06:56:34Z")
Hi, I have invested quite some time profiling configurations of filebeat (7.6.2) in the past few days, since it is currently running very slow. My test dataset consists of ~2GB ndjson files, at 10 MB per file, with ~6 m… --- ## [Custom UI Changes on local machine(server machine) is not reflecting on external IP](https://discuss.elastic.co/t/custom-ui-changes-on-local-machine-server-machine-is-not-reflecting-on-external-ip/262458)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 14\ **Last updated:** [February 8, 2021, 9:15am UTC](https://discuss.elastic.co/t/custom-ui-changes-on-local-machine-server-machine-is-not-reflecting-on-external-ip/262458 "2021-02-08T09:15:14Z")
Hi Team, I made custom logo changes in these files "template.js", security.chunk.4.js" and "core.entry.js" and generated the file (gz and br) with npx. \[Steps from this post - https://discuss.elastic.co/t/custom-logo-k… --- ## [Elastic Cloud Integration with FusionAuth](https://discuss.elastic.co/t/elastic-cloud-integration-with-fusionauth/263323)
**Author:** [@vexana](https://discuss.elastic.co/u/vexana)\ **Replies:** 7\ **Last updated:** [February 8, 2021, 8:51am UTC](https://discuss.elastic.co/t/elastic-cloud-integration-with-fusionauth/263323 "2021-02-08T08:51:26Z")
Hi Everyone, I am trying to using FusionAuth (https://fusionauth.io/) as IdP (OpenID or SAML) to my elastic stack running on Elastic Cloud. Here is my elasticsearch.yaml configuration: xpack: security: authc: … --- ## [Synthetic monitoring using a pod](https://discuss.elastic.co/t/synthetic-monitoring-using-a-pod/261631)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 5\ **Last updated:** [February 8, 2021, 8:45am UTC](https://discuss.elastic.co/t/synthetic-monitoring-using-a-pod/261631 "2021-02-08T08:45:09Z")
Hi Team, I am running my ECK stack on a managed kubernetes clusters with no access to login into any of the kube nodes, now with this implementation currently i wont be able to run docker container in the same namespace… [Previous page](https://discuss.elastic.co/latest.md?page=1850) [Next page](https://discuss.elastic.co/latest.md?page=1852)