# Latest **URL:** https://discuss.elastic.co/latest.md?page=1927 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1928 --- ## [Filebeat data extra Fields not populating in raw logs](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033)
**Author:** [@jkaufmanlr](https://discuss.elastic.co/u/jkaufmanlr)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 5:50pm UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033 "2020-12-21T17:50:04Z")
There are some additional log variables that I want ingesting into my logstash. I have the logs ingesting and can see the Event Hub Beats just fine. But these specific values that I will be able to spot within event hub … --- ## [Magento 2.3.5 p1 - Elastic Search 7.7. /var/www/html/vendor/elasticsearch/elasticsearch/src/Elasticsearch/Connections/Connection.php:632)](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182)
**Author:** [@danielJ](https://discuss.elastic.co/u/danielJ)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 5:37pm UTC](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182 "2020-12-21T17:37:07Z")
Hello Team, I am using Magento 2.3.5p1 using mysql on an AWS EC2 instance with installed Elasticsearch version 7.7. I get the test successful but on the front end the search does not work with there's no item matching y… --- ## [How to know the time when elasticsearch indexed the data](https://discuss.elastic.co/t/how-to-know-the-time-when-elasticsearch-indexed-the-data/258603)
**Author:** [@soufian.eldouqe](https://discuss.elastic.co/u/soufian.eldouqe)\ **Replies:** 9\ **Last updated:** [December 21, 2020, 5:31pm UTC](https://discuss.elastic.co/t/how-to-know-the-time-when-elasticsearch-indexed-the-data/258603 "2020-12-21T17:31:15Z")
Hello, is there any way to know the time that elasticsearch indexed the data ? in others words, when did the index received de data. Thank you --- ## [Elasticsearch returns documents with score 0.0](https://discuss.elastic.co/t/elasticsearch-returns-documents-with-score-0-0/259289)
**Author:** [@haitran](https://discuss.elastic.co/u/haitran)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-documents-with-score-0-0/259289 "2020-12-21T16:40:29Z")
Please help me to understand the scoring logic. Configuration: PUT /my-index-000001 { "mappings": { "dynamic": "false", "properties": { "test": { "type": "text", "fields": { "\_… --- ## [Another dateparse failure](https://discuss.elastic.co/t/another-dateparse-failure/259089)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 4:57pm UTC](https://discuss.elastic.co/t/another-dateparse-failure/259089 "2020-12-21T16:57:41Z")
I cant figure out how to match this: RAW output \[2020-12-17T16:45:45+01:00\] Elasticsearch JSON Dez 18 11:03:58 mon logstash\[23980\]: "log\_timestamp" =\> "2020-12-18T11:03:56+01:00", Dez 18 11:03:58 mon logstash\[239… --- ## [APM Java Agent - manual setup](https://discuss.elastic.co/t/apm-java-agent-manual-setup/258581)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 10\ **Last updated:** [December 21, 2020, 4:47pm UTC](https://discuss.elastic.co/t/apm-java-agent-manual-setup/258581 "2020-12-21T16:47:03Z")
Kibana version : 7.10.0 Elasticsearch version : 7.10.0 APM Server version : 7.10.1 APM Agent language and version : Java - elastic-apm-agent-1.19.0.jar Browser version : Firefox 83.0 Original install method (e.g. do… --- ## [Aggregate by multiple fields and Top 10 count in ElasticSearcch](https://discuss.elastic.co/t/aggregate-by-multiple-fields-and-top-10-count-in-elasticsearcch/259286)
**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 4:33pm UTC](https://discuss.elastic.co/t/aggregate-by-multiple-fields-and-top-10-count-in-elasticsearcch/259286 "2020-12-21T16:33:12Z")
Dear Team, I have query like this GET logstash-sdc-questionrecords/\_search?q=source:website\_portal { "aggs" : { "genres" : { "terms" : { "field" : "question.keyword", "order" : { "\_count" : "desc" }, "size": 10 … --- ## [Test Dependency on elasticsearch-test.jar for plugins](https://discuss.elastic.co/t/test-dependency-on-elasticsearch-test-jar-for-plugins/259283)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 4:03pm UTC](https://discuss.elastic.co/t/test-dependency-on-elasticsearch-test-jar-for-plugins/259283 "2020-12-21T16:03:49Z")
Is there a way a plugin developer can leverage existing ES tests apart from elasticsearch-framework itself. --- ## [Elasticsearch sizing for Production POC](https://discuss.elastic.co/t/elasticsearch-sizing-for-production-poc/259268)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 2:12pm UTC](https://discuss.elastic.co/t/elasticsearch-sizing-for-production-poc/259268 "2020-12-21T14:12:12Z")
Hello everybody, It's the first time that I am going to run a cluster for a production POC and I need some help in the way that I size my machines. Knowing that I am going to have like 15Go of data per day, and knowing… --- ## [Elasticsearch transform role backward compatibility](https://discuss.elastic.co/t/elasticsearch-transform-role-backward-compatibility/259254)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-transform-role-backward-compatibility/259254 "2020-12-21T13:36:16Z")
Hi, I have a 3 nodes elasticsearch cluster with 7.4.2 version. It's look like this version does not support "transform role". I see in elasticsearch version 7.10.1 logs that a module called "transform" is loaded in star… --- ## [How to connect logstash from logstash?](https://discuss.elastic.co/t/how-to-connect-logstash-from-logstash/259258)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 1:33pm UTC](https://discuss.elastic.co/t/how-to-connect-logstash-from-logstash/259258 "2020-12-21T13:33:22Z")
I want to use one logstash send data to multiple logstash services. If I use this setting in k8s, it can work. service.yml apiVersion: v1 kind: Service metadata: labels: app: logstash name: logstash spec: se… --- ## [Convert graphite field name in to tags](https://discuss.elastic.co/t/convert-graphite-field-name-in-to-tags/259257)
**Author:** [@Mario\_Giammarco](https://discuss.elastic.co/u/Mario_Giammarco)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 1:30pm UTC](https://discuss.elastic.co/t/convert-graphite-field-name-in-to-tags/259257 "2020-12-21T13:30:39Z")
Hello, I am a logstash newbie. I have this problem: I receive data from graphite. Data is in this format: computername.cpu.load.cpu0 = 10 I would like to insert this into elastic search: tags=\> \[ computername, cpu,… --- ## [APM Agent for .NET: How can I prevent traces being created for browsers' preflight (OPTIONS) requests?](https://discuss.elastic.co/t/apm-agent-for-net-how-can-i-prevent-traces-being-created-for-browsers-preflight-options-requests/259013)
**Author:** [@michielvoo](https://discuss.elastic.co/u/michielvoo)\ **Replies:** 4\ **Last updated:** [December 21, 2020, 12:51pm UTC](https://discuss.elastic.co/t/apm-agent-for-net-how-can-i-prevent-traces-being-created-for-browsers-preflight-options-requests/259013 "2020-12-21T12:51:59Z")
I have integrated the APM Agent for .NET in an ASP.NET Core application. I have added the HttpDiagnosticsSubscriber in the call to UseElasticApm, so all my controller actions are automatically instrumented. For normal r… --- ## [Watcher Acked automatic](https://discuss.elastic.co/t/watcher-acked-automatic/259253)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 12:56pm UTC](https://discuss.elastic.co/t/watcher-acked-automatic/259253 "2020-12-21T12:56:26Z")
Hi, guys I'd like to know if it's possible to make a watcher where I send a HTTP request and execute the API REST: POST, every time another alert is activated in 'firing'? make like an 'automatic acked' since inside it … --- ## [Custom Rules not working](https://discuss.elastic.co/t/custom-rules-not-working/258421)
**Author:** [@Yuriy\_Tsarenko](https://discuss.elastic.co/u/Yuriy_Tsarenko)\ **Replies:** 7\ **Last updated:** [December 16, 2020, 3:27pm UTC](https://discuss.elastic.co/t/custom-rules-not-working/258421 "2020-12-16T15:27:01Z")
Hello team! If possible, you could help us with setting up custom rules for SIEM. We had the following problem: The main idea is to create a rule according to which we would receive notifications when someone from the… --- ## [Filebeat not reading .out file from filebeat.inputs path](https://discuss.elastic.co/t/filebeat-not-reading-out-file-from-filebeat-inputs-path/258413)
**Author:** [@arjun\_gowda](https://discuss.elastic.co/u/arjun_gowda)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 12:05pm UTC](https://discuss.elastic.co/t/filebeat-not-reading-out-file-from-filebeat-inputs-path/258413 "2020-12-21T12:05:56Z")
Filebeat is not reading .out file from filebeat.inputs path. I want to read the nohup.out files in the log folder. Please help me with the configuration Here's the filebeat.yml. filebeat.inputs: type: log Change to t… --- ## [Elasticsearch Python Cache](https://discuss.elastic.co/t/elasticsearch-python-cache/259246)
**Author:** [@satyamsinghal575](https://discuss.elastic.co/u/satyamsinghal575)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-python-cache/259246 "2020-12-21T11:52:05Z")
I am using elasticsearch primarily for aggregations, then eventually i came across setting the query size to zero, according to my understanding this helps in two ways : payload size is reduced and when we use query in… --- ## [\[OPENDISTRO - Elasticsearch\] Machine learning JOB System Requirements](https://discuss.elastic.co/t/opendistro-elasticsearch-machine-learning-job-system-requirements/259239)
**Author:** [@Flavio1](https://discuss.elastic.co/u/Flavio1)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 11:14am UTC](https://discuss.elastic.co/t/opendistro-elasticsearch-machine-learning-job-system-requirements/259239 "2020-12-21T11:14:05Z")
Hi everybody, Is there any document or table with system requirements to implement elasticsearch opendistro machine learning jobs? Any help will be appreciated. --- ## [Kibana Dashboard for sales team](https://discuss.elastic.co/t/kibana-dashboard-for-sales-team/259052)
**Author:** [@bhavin.shah](https://discuss.elastic.co/u/bhavin.shah)\ **Replies:** 4\ **Last updated:** [December 21, 2020, 10:29am UTC](https://discuss.elastic.co/t/kibana-dashboard-for-sales-team/259052 "2020-12-21T10:29:17Z")
Hi team, I am relatively new on ES and Kibana and my business team needs very specific dashboard as mentioned in below snapshot. We can prepare state of the art dashboards into Kibana where I can get sense of business … --- ## [Search content in English and resultset returns in other languages](https://discuss.elastic.co/t/search-content-in-english-and-resultset-returns-in-other-languages/259070)
**Author:** [@Antonio\_Teixeira](https://discuss.elastic.co/u/Antonio_Teixeira)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 10:26am UTC](https://discuss.elastic.co/t/search-content-in-english-and-resultset-returns-in-other-languages/259070 "2020-12-21T10:26:27Z")
Hello All Im trying to find the best way to receive in the resultset all the results that being made in a language plus the results in another language. For example if i search for black, i want that Elasticsearch retr… --- ## [JournalBeat Stopped Shipping Logs](https://discuss.elastic.co/t/journalbeat-stopped-shipping-logs/259195)
**Author:** [@vamshisiddarth](https://discuss.elastic.co/u/vamshisiddarth)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/journalbeat-stopped-shipping-logs/259195 "2020-12-21T10:22:22Z")
JournalBeat stopped shipping logs on all environments for us from 19th Dec, 2020. We configured our beats services to ship logs from aws instance to elasticsearch through logstash. Our filebeat and metricbeat logs are be… --- ## [Kibana anonymous authentication error](https://discuss.elastic.co/t/kibana-anonymous-authentication-error/259159)
**Author:** [@Valerioq](https://discuss.elastic.co/u/Valerioq)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 10:16am UTC](https://discuss.elastic.co/t/kibana-anonymous-authentication-error/259159 "2020-12-21T10:16:50Z")
Hi, I tried to set anonymous authentication on kibana ver 7.8 following these instructions: But when I insert in my kibana.yml: xpack.security. authc.providers: basic.basic1: order: 0 anonymous.anonymous1: ord… --- ## [How to Reconfigure the setup-password for the elastic cluster, as we are getting the authentication error for all the users](https://discuss.elastic.co/t/how-to-reconfigure-the-setup-password-for-the-elastic-cluster-as-we-are-getting-the-authentication-error-for-all-the-users/259219)
**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-reconfigure-the-setup-password-for-the-elastic-cluster-as-we-are-getting-the-authentication-error-for-all-the-users/259219 "2020-12-21T09:57:57Z")
Enabling xpack.security.enabled to true alone was not enough to start the elasticsearch, as it was giving the error, so we have generated the certificates and deployed it to all the nodes of elastic cluster and kibana us… --- ## [How to config filebeat to collect containerd logs file in K8S?](https://discuss.elastic.co/t/how-to-config-filebeat-to-collect-containerd-logs-file-in-k8s/259237)
**Author:** [@hillbun](https://discuss.elastic.co/u/hillbun)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 9:53am UTC](https://discuss.elastic.co/t/how-to-config-filebeat-to-collect-containerd-logs-file-in-k8s/259237 "2020-12-21T09:53:36Z")
apiVersion: v1 kind: ConfigMap metadata: name: filebeat-inputs namespace: kube-system labels: k8s-app: filebeat data: kubernetes.yml: |- - type: container symlinks: true paths: - '/var/log/containers/\*.log' … --- ## [Timelion query detecting value change](https://discuss.elastic.co/t/timelion-query-detecting-value-change/259236)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 9:49am UTC](https://discuss.elastic.co/t/timelion-query-detecting-value-change/259236 "2020-12-21T09:49:35Z")
Hi, I am using Timelion with a time serie where I need to show occurences when a value changed from X to Y. E.g I have a boolean property and I want to write a timelion query that shows when the value changed from True… --- ## [User Specific Configurable Dashboards](https://discuss.elastic.co/t/user-specific-configurable-dashboards/259229)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 9:27am UTC](https://discuss.elastic.co/t/user-specific-configurable-dashboards/259229 "2020-12-21T09:27:06Z")
Hi Team, I know that if user has write/admin access he/she can edit dashboard Add objects, Remove objects , Apply Filters, Apply Search Queries. But can this be user specific? if user "xyz" make any changes this shoul… --- ## [Shard allocation based on shard size](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 13\ **Last updated:** [December 21, 2020, 8:38am UTC](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817 "2020-12-21T08:38:30Z")
Hi, I was wondering if there is an option to include shard size in the shard allocation decision process. The Disk-based shard allocation settings and the number of shards/node works, and most of or shards are 50G in s… --- ## [Snapshots - restoring an index from a large repository with long term storage (LTO ...)](https://discuss.elastic.co/t/snapshots-restoring-an-index-from-a-large-repository-with-long-term-storage-lto/259198)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 8:18am UTC](https://discuss.elastic.co/t/snapshots-restoring-an-index-from-a-large-repository-with-long-term-storage-lto/259198 "2020-12-21T08:18:36Z")
I have a classic question about snapshots in elasticsearch. I make elasticsearch snapshots to some repository - for example, let it be some Network File System (NFS) or similar. Later this snapshot from this network st… --- ## [Dec 21st, 2020: \[EN\] When neither logging nor code tracing is enough: Log Correlation with APM](https://discuss.elastic.co/t/dec-21st-2020-en-when-neither-logging-nor-code-tracing-is-enough-log-correlation-with-apm/258560)
**Author:** [@Emanuil](https://discuss.elastic.co/u/Emanuil)\ **Replies:** 0\ **Last updated:** [December 21, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2020-en-when-neither-logging-nor-code-tracing-is-enough-log-correlation-with-apm/258560 "2020-12-21T08:00:01Z")
Application Performance Monitoring and logging both provide critical insight into your ecosystem. When paired together for context, they can provide vital clues on how to resolve problems with your applications. This pos… --- ## [Restoring deleted elasticsearch indices](https://discuss.elastic.co/t/restoring-deleted-elasticsearch-indices/259017)
**Author:** [@abi.mc](https://discuss.elastic.co/u/abi.mc)\ **Replies:** 4\ **Last updated:** [December 21, 2020, 7:44am UTC](https://discuss.elastic.co/t/restoring-deleted-elasticsearch-indices/259017 "2020-12-21T07:44:20Z")
In kibana (two node cluster ) following indices got deleted from the file system and now kibana is not accessible : bxexbuIpRXqA0n4VyXiDQA - .security-7 3R2woj\_jRVCf58Q8b9--Yg - .apm-agent-configuration RGR9AneMRx6nnQGH… [Previous page](https://discuss.elastic.co/latest.md?page=1926) [Next page](https://discuss.elastic.co/latest.md?page=1928)