# Latest **URL:** https://discuss.elastic.co/latest.md?page=1878 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1879 --- ## [Errors ("type" : "security\_exception") in running ElasticSearch](https://discuss.elastic.co/t/errors-type-security-exception-in-running-elasticsearch/262004)
**Author:** [@SMH](https://discuss.elastic.co/u/SMH)\ **Replies:** 5\ **Last updated:** [January 24, 2021, 2:17am UTC](https://discuss.elastic.co/t/errors-type-security-exception-in-running-elasticsearch/262004 "2021-01-24T02:17:33Z")
Hi, I have some difficulties when I run the elasticsearch on Windows. I wonder if you could help me in this process to solve the error. My Java version is: java version "1.8.0\_271" I installed elasticsearch, successf… --- ## [Reporting error forbidden kibana](https://discuss.elastic.co/t/reporting-error-forbidden-kibana/261873)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [January 23, 2021, 9:47pm UTC](https://discuss.elastic.co/t/reporting-error-forbidden-kibana/261873 "2021-01-23T21:47:35Z")
Hi, I got the error "reporting error forbidden kibana" when I'm trying to download the CSV file from Kibana... I did kibana configurations in https://www.elastic.co/guide/en/kibana/current/secure-reporting.html but I g… --- ## [Custom mapping in apm index](https://discuss.elastic.co/t/custom-mapping-in-apm-index/261988)
**Author:** [@Smrithin\_N\_S](https://discuss.elastic.co/u/Smrithin_N_S)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 8:04pm UTC](https://discuss.elastic.co/t/custom-mapping-in-apm-index/261988 "2021-01-23T20:04:46Z")
I have a deployment in cloud elastic using for apm: apm metrics are being pushed from Nodejs(fastify framwork). I need to add a custom property mapping to the transaction index. I am able to add the mapping using PUT … --- ## [License Expiry issue in Elasticsearch 7.10.2](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982)
**Author:** [@Pritheka](https://discuss.elastic.co/u/Pritheka)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 6:11pm UTC](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982 "2021-01-23T18:11:16Z")
I installed 'Elasticsearch-7.10.2' recently. When i run it, i get the below error in the logs. \[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[LAPTOP-05GRP0LP\] blocking \[cluster:monitor/nodes/stats\] operation due to expired … --- ## [Is there a way to do a project transform in Vega-Lite?](https://discuss.elastic.co/t/is-there-a-way-to-do-a-project-transform-in-vega-lite/261992)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 3:04pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-do-a-project-transform-in-vega-lite/261992 "2021-01-23T15:04:55Z")
Hi all, I'm having difficult to transform the data in Vega-Lite, and saw a project transform in the Vega documentation that is not in Vega-Lite. 1- Is it possible to use, is there some workaround? 2- Can I use my Vega… --- ## [Exclure des champs d'une source et de l'indexation](https://discuss.elastic.co/t/exclure-des-champs-dune-source-et-de-lindexation/261986)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 3\ **Last updated:** [January 23, 2021, 2:21pm UTC](https://discuss.elastic.co/t/exclure-des-champs-dune-source-et-de-lindexation/261986 "2021-01-23T14:21:52Z")
Bonjour, Petite question pour confirmer, j'ai un elasticsearch 2.3.1 et 7.9.2, en 2.3.1 j'envoi un json via un PUT /macollection/1 { "a" : "1" , b , : "2", c : "3" d : { "aa" : "1… --- ## [ElasticSearch Stream NEW INCOMING documents to clients](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763)
**Author:** [@schubec](https://discuss.elastic.co/u/schubec)\ **Replies:** 6\ **Last updated:** [January 23, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763 "2021-01-23T13:18:16Z")
Hi! I have this usecase: I receive ca 500 documents of cars (brand, model, color, airbag yes/no, etc.) per second and I am storing these in ElasticSearch. It works perfectly. Then, I have a webclient, which searches f… --- ## [Can you run filebeat as an Deployment/Satefulset/Pod?](https://discuss.elastic.co/t/can-you-run-filebeat-as-an-deployment-satefulset-pod/261895)
**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 11:05am UTC](https://discuss.elastic.co/t/can-you-run-filebeat-as-an-deployment-satefulset-pod/261895 "2021-01-23T11:05:52Z")
In am currently setting up a workflow that requires a kubernetes filebeat instance that is running as a Deployment, StatefulSet or Pod. Basic idea: copy file to directory -\> filebeat reads file -\> logstash parse -\> etc… --- ## [ECK operator sizing](https://discuss.elastic.co/t/eck-operator-sizing/261868)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 11:03am UTC](https://discuss.elastic.co/t/eck-operator-sizing/261868 "2021-01-23T11:03:45Z")
elastic-operator pod was in CrashLoopBackOff on an EKS cluster of 125 worker node and 84 namespaces it was OOMKilled after deleting manually to come out of crashloop, default memory request is 128M, making it 256M also … --- ## [\[Winlogbeat 7.10.1 dashboards\]: could not locate some index pattern fields](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 9:27am UTC](https://discuss.elastic.co/t/winlogbeat-7-10-1-dashboards-could-not-locate-some-index-pattern-fields/261984 "2021-01-23T09:27:20Z")
Hello, I am using Elasticsearch, kibana, logstash, and winlogbeat, all version 7.10.1 I configured winlogbeat and run: .\\winlogbeat.exe setup -e and I had no error in my winlogbeat logs, but in kibana there are some da… --- ## [Configure APM agent to disable sending metrics for specific endpoint](https://discuss.elastic.co/t/configure-apm-agent-to-disable-sending-metrics-for-specific-endpoint/261957)
**Author:** [@joaoantao](https://discuss.elastic.co/u/joaoantao)\ **Replies:** 2\ **Last updated:** [January 23, 2021, 8:57am UTC](https://discuss.elastic.co/t/configure-apm-agent-to-disable-sending-metrics-for-specific-endpoint/261957 "2021-01-23T08:57:10Z")
Is is possible to disable specific endpoints an application, eg: healthcheck endpoints from sending metrics in the agent? What should be a best practice? Thank you. APM Server version: v 7.10.2 APM Agent language and… --- ## [How to dump the index and posting list?](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977)
**Author:** [@ralgo](https://discuss.elastic.co/u/ralgo)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 7:01am UTC](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977 "2021-01-23T07:01:11Z")
I am writing an analysis plugin for elasticsearch, which maps a sentence to a prefix array. e.g. "EVA EGG京" will be mapped to term array \[E, EV, EVA, E, EG, EGG, 京\]. However, when I search one of \[E，EV，EVA，E, EG，EGG\], t… --- ## [Take incremental snapshot with curator](https://discuss.elastic.co/t/take-incremental-snapshot-with-curator/261975)
**Author:** [@k.naderlu](https://discuss.elastic.co/u/k.naderlu)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 6:05am UTC](https://discuss.elastic.co/t/take-incremental-snapshot-with-curator/261975 "2021-01-23T06:05:08Z")
Hi, I want to take an incremental snapshot in curator v5.8, how I can do this? how I can do this with an action file? --- ## [Update field Object using UpdateQuery](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973)
**Author:** [@cmcruzata](https://discuss.elastic.co/u/cmcruzata)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 5:09am UTC](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973 "2021-01-23T05:09:42Z")
Hi, I need to create an update query to update the relation inside the index, given the relation ID: @Entity @Document(indexName = "employees", shards = 3) public class Employee { @Id @GeneratedV… --- ## [Setting id field in client request and also using date name processor](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968)
**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 1:05am UTC](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968 "2021-01-23T01:05:03Z")
Hi all, I had a question about sending id field in the client request and also using the date name processor to create indices based on a field value. So here is my use case , I want to produce daily indices based on a… --- ## [Download Kibana Report from outside Kibana](https://discuss.elastic.co/t/download-kibana-report-from-outside-kibana/260582)
**Author:** [@ssarnava](https://discuss.elastic.co/u/ssarnava)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 11:00pm UTC](https://discuss.elastic.co/t/download-kibana-report-from-outside-kibana/260582 "2021-01-22T23:00:31Z")
Hi, I am using ELK 7.9.0 version. I am able to generate dashboard report from Kibana and can download that report from inside Kibana. But my requirement is little different. I have to trigger CSV dashboard report genera… --- ## [Filebeat AWS s3 input -- SQS required?](https://discuss.elastic.co/t/filebeat-aws-s3-input-sqs-required/261963)
**Author:** [@klutch27](https://discuss.elastic.co/u/klutch27)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 10:55pm UTC](https://discuss.elastic.co/t/filebeat-aws-s3-input-sqs-required/261963 "2021-01-22T22:55:21Z")
I have log files in s3, and I'd like to use filebeat to ship them to logstash. I'm not using AWS SQS, so I have no queue\_url. Is it possible for me to consume log files from my s3 bucket, without using SQS? I was hoping… --- ## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/261871)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 10:05pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/261871 "2021-01-22T22:05:01Z")
Hello Team, I have been getting this issue no matter what. I have applied mutate (convert,rename) json but still get the following issue. "reason"=\>"Could not dynamically add mapping for field \[app.kubernetes.io/name\].… --- ## [Subset match query](https://discuss.elastic.co/t/subset-match-query/261847)
**Author:** [@Josue-Salas](https://discuss.elastic.co/u/Josue-Salas)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 10:03pm UTC](https://discuss.elastic.co/t/subset-match-query/261847 "2021-01-22T22:03:42Z")
Hi everyone, Thanks for reading. Here's my problem. I have the following documents: "course #1": { "requirements": \[ { "name": "AWS EC2 certification", "type": "certification" … --- ## [Elasticsearch service - Kibana link results in 404](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 5\ **Last updated:** [January 22, 2021, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862 "2021-01-22T20:43:47Z")
A few hours ago, my kibana session expired or I got kicked out. Now when I click the link from the deployment page on clould.elastic.co, I end up with a raw 404. A callback error? I have been having a bunch of problem… --- ## [Can't get filebeat log data into Elasticsearch](https://discuss.elastic.co/t/cant-get-filebeat-log-data-into-elasticsearch/261943)
**Author:** [@thnk2wn](https://discuss.elastic.co/u/thnk2wn)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 6:50pm UTC](https://discuss.elastic.co/t/cant-get-filebeat-log-data-into-elasticsearch/261943 "2021-01-22T18:50:45Z")
I'm trying out file beats but can't seem to get the data into Elasticsearch. I don't see issues on the filebeat side but don't see the data in Elasticsearch. My demo repo is at https://github.com/thnk2wn/elastic-logging-… --- ## [How to split value in different coloum in data table](https://discuss.elastic.co/t/how-to-split-value-in-different-coloum-in-data-table/261624)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 6\ **Last updated:** [January 22, 2021, 6:32pm UTC](https://discuss.elastic.co/t/how-to-split-value-in-different-coloum-in-data-table/261624 "2021-01-22T18:32:00Z")
Hi, I am using ELK 7.10v. I have a use case where I want to show " Total brokerage amout of clients monthly wise." I have 3 fields :- client\_id, time and brokerage . I want my data table to look like this: Client… --- ## [Logstash ruby filter math on very large numbers](https://discuss.elastic.co/t/logstash-ruby-filter-math-on-very-large-numbers/261950)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 6:26pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-math-on-very-large-numbers/261950 "2021-01-22T18:26:18Z")
Hello, I am trying to do some math on some very large numbers in logstash and it appears that the .to\_f is not large enough as its giving me very inaccurate information. is there anything larger than a float I can use? … --- ## [Large shards are not moving from old ES version nodes to new ES version nodes](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864)
**Author:** [@163satish](https://discuss.elastic.co/u/163satish)\ **Replies:** 7\ **Last updated:** [January 22, 2021, 6:19pm UTC](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864 "2021-01-22T18:19:57Z")
I have 6.8 cluster which is being upgraded to 7.6 cluster. Shard relocation on all the shards which are smaller in size is completed which is basically moving from 6.8 to 7.6 data nodes. The large shards for some of the … --- ## [Planned change of license to SSPL](https://discuss.elastic.co/t/planned-change-of-license-to-sspl/261279)
**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 5:50pm UTC](https://discuss.elastic.co/t/planned-change-of-license-to-sspl/261279 "2021-01-22T17:50:52Z")
I think the planned change from Apache 2 to SSPL for ES and Kibana will not just motivate myself to seriously look for other solutions. (see https://www.elastic.co/blog/licensing-change) SSPL seems to be extremely rest… --- ## [Error while starting kibana plugin examples in kibana version 7.10.0](https://discuss.elastic.co/t/error-while-starting-kibana-plugin-examples-in-kibana-version-7-10-0/261780)
**Author:** [@rajarshi\_h](https://discuss.elastic.co/u/rajarshi_h)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 5:10pm UTC](https://discuss.elastic.co/t/error-while-starting-kibana-plugin-examples-in-kibana-version-7-10-0/261780 "2021-01-22T17:10:08Z")
Hi, I am not able to run the example kibana plugins that are available on the open source kibana repository for version 7.10.0 using the command "yarn start --run-examples" and I am getting the error that "Definition of… --- ## [Elasticsearch NEST query not behaving like the equivalent query in Kibana Dev Tools](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867)
**Author:** [@jonsagara](https://discuss.elastic.co/u/jonsagara)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 5:05pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867 "2021-01-22T17:05:13Z")
I'm trying to construct a query against my index that will use function\_score to boost records where fields have certain values. In Kibana Dev Tools, I have the following query that returns 3 hits as expected: GET /myin… --- ## [Creating job: anomaly in the event rate of beats](https://discuss.elastic.co/t/creating-job-anomaly-in-the-event-rate-of-beats/261889)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 4:38pm UTC](https://discuss.elastic.co/t/creating-job-anomaly-in-the-event-rate-of-beats/261889 "2021-01-22T16:38:52Z")
Hello, I would like to create a job to detect when there is anomaly in the number of event send by beats, mostly to detect if one of the beat stop sending logs to my ELK cluster (and to detect the name of the machine wh… --- ## [Geolocation configuration in logstash](https://discuss.elastic.co/t/geolocation-configuration-in-logstash/261937)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:56pm UTC](https://discuss.elastic.co/t/geolocation-configuration-in-logstash/261937 "2021-01-22T15:56:33Z")
I configured my logstash to parse the logs. I now want to configure geolocation. Is there a unique configuration for geolocation? If so, I need help. Here is my logstash setup below. How to complete with the geolocati… --- ## [How to Get Elasticsearch Indexed data to App Search](https://discuss.elastic.co/t/how-to-get-elasticsearch-indexed-data-to-app-search/261887)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 2\ **Last updated:** [January 22, 2021, 3:48pm UTC](https://discuss.elastic.co/t/how-to-get-elasticsearch-indexed-data-to-app-search/261887 "2021-01-22T15:48:00Z")
Hi Team, We have an Elasticsearch Cluster deployed in our local and we have huge amount of data in it. Now we want to use the App Search Functionalities on the existing Elasticsearch indices. But I can see we can only… [Previous page](https://discuss.elastic.co/latest.md?page=1877) [Next page](https://discuss.elastic.co/latest.md?page=1879)