# Latest **URL:** https://discuss.elastic.co/latest.md?page=1929 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1930 --- ## [Term query with keyword mapping](https://discuss.elastic.co/t/term-query-with-keyword-mapping/259173)
**Author:** [@klapvee](https://discuss.elastic.co/u/klapvee)\ **Replies:** 1\ **Last updated:** [December 20, 2020, 1:17pm UTC](https://discuss.elastic.co/t/term-query-with-keyword-mapping/259173 "2020-12-20T13:17:36Z")
Hi, a very simple mappping: { "mappings": { "chat": { "properties": { "checksum": { "type": "keyword" }, "created": { "type": "date", "store": true… --- ## [Search for DB Queries in APM UI](https://discuss.elastic.co/t/search-for-db-queries-in-apm-ui/259077)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 1\ **Last updated:** [December 20, 2020, 12:21pm UTC](https://discuss.elastic.co/t/search-for-db-queries-in-apm-ui/259077 "2020-12-20T12:21:59Z")
Hey, can I somehow search for Transactions with DB Queries in the APM UI? I tried: span.destination.service.name span.destination.service.resource span.destination.service.type span.type span.action Nothing worked… --- ## [IPv6 endpoint for S3 repository](https://discuss.elastic.co/t/ipv6-endpoint-for-s3-repository/259164)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 5\ **Last updated:** [December 20, 2020, 10:17am UTC](https://discuss.elastic.co/t/ipv6-endpoint-for-s3-repository/259164 "2020-12-20T10:17:53Z")
How do I use an IPv6 endpoint for an S3 repository? Using a hostname that resolves to an IPv6 address and an IPv4 address results in: { "error": { "root\_cause": \[ { "type": "repository\_verification\_… --- ## [Logs including emojis](https://discuss.elastic.co/t/logs-including-emojis/258946)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 6\ **Last updated:** [December 20, 2020, 9:29am UTC](https://discuss.elastic.co/t/logs-including-emojis/258946 "2020-12-20T09:29:07Z")
Hello everyone! is there a way to parse this log with emojis? Could it be shown in kibana or logstash output? I do not have a clue how to parse the emojis in logstash pipeline. "emoji\_code":"🌸" Can someone please help … --- ## [Pattern for this log](https://discuss.elastic.co/t/pattern-for-this-log/259184)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 6\ **Last updated:** [December 20, 2020, 9:24am UTC](https://discuss.elastic.co/t/pattern-for-this-log/259184 "2020-12-20T09:24:36Z")
Hello everyone! Can someone please help me with writing a grok pattern for this log line? I am not able to seperate its fields. {"name":"test","test\_arr":\[{"key\_word":"ok","test\_code":"👌","h\_code":"1234.png"}\],"create\_d… --- ## [Cannot resolve method 'index' in 'RestClient'](https://discuss.elastic.co/t/cannot-resolve-method-index-in-restclient/259188)
**Author:** [@Murigipudi\_Revanth](https://discuss.elastic.co/u/Murigipudi_Revanth)\ **Replies:** 2\ **Last updated:** [December 20, 2020, 8:23am UTC](https://discuss.elastic.co/t/cannot-resolve-method-index-in-restclient/259188 "2020-12-20T08:23:50Z")
Hello, I'm using ElasticSearch 7.10 and trying to index a very sample document following the documentation from here - https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/java-rest-high-document-index… --- ## [Dec 20th, 2020: \[EN\] Exploratory data visualization with Kibana](https://discuss.elastic.co/t/dec-20th-2020-en-exploratory-data-visualization-with-kibana/258243)
**Author:** [@raya](https://discuss.elastic.co/u/raya)\ **Replies:** 0\ **Last updated:** [December 20, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2020-en-exploratory-data-visualization-with-kibana/258243 "2020-12-20T08:00:19Z")
Русская версия Practitioners in the field of data visualizations distinguish between the explanatory data visualizations (using graphical tools to convey information) from exploratory. To quote Google definitions (the m… --- ## [High CPU Utilization](https://discuss.elastic.co/t/high-cpu-utilization/259174)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 20, 2020, 6:29am UTC](https://discuss.elastic.co/t/high-cpu-utilization/259174 "2020-12-20T06:29:51Z")
Hi, we have a single node cluster for elasticsearch running in elastic cloud. for the past two days the cpu utilization is 100%. what might be the issue here ?? please help :slightly\_smiling\_face: --- ## [Dec 7th, 2020: \[EN\] Using Rally as a data import/export tool](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820)
**Author:** [@Laurent\_Huet](https://discuss.elastic.co/u/Laurent_Huet)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 8:50pm UTC](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820 "2020-12-19T20:50:51Z")
French version This post will show you how you can use Rally to export data from one cluster to another. The idea is to extract the whole data from one or more indices in a (big) flat file and reuse it later to easily … --- ## [Increased node timeouts after 7.7.0 to 7.10.1 upgrade](https://discuss.elastic.co/t/increased-node-timeouts-after-7-7-0-to-7-10-1-upgrade/258888)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 2\ **Last updated:** [December 19, 2020, 7:58pm UTC](https://discuss.elastic.co/t/increased-node-timeouts-after-7-7-0-to-7-10-1-upgrade/258888 "2020-12-19T19:58:52Z")
We have a largish production cluster that is experiencing a high number of node timeouts (on our hot indexing nodes) since we upgraded to 7.10.1 (from 7.7.0). Prior to the upgrade, we did not experience these timeouts. O… --- ## [Elastic search is not working into ubuntu 18.04](https://discuss.elastic.co/t/elastic-search-is-not-working-into-ubuntu-18-04/259169)
**Author:** [@Balwinder\_Singh](https://discuss.elastic.co/u/Balwinder_Singh)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 7:16pm UTC](https://discuss.elastic.co/t/elastic-search-is-not-working-into-ubuntu-18-04/259169 "2020-12-19T19:16:21Z")
Dear All, Please help me to sort out below mention problem. Dec 17 21:05:14 zammad091212020-Virtual-Machine systemd\[1\]: Starting Elasticsearch... Dec 17 21:06:29 zammad091212020-Virtual-Machine systemd\[1\]: elasticsear… --- ## [Removing ongoing duplicates](https://discuss.elastic.co/t/removing-ongoing-duplicates/259157)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 3:36pm UTC](https://discuss.elastic.co/t/removing-ongoing-duplicates/259157 "2020-12-19T15:36:14Z")
This is what I need however I would like do it on input due parsing jsons. What I mean this tutorial show how do it post-factum, but I would like do it every time I recieve new data basing for example on data from last… --- ## [Missing fields in Kibana](https://discuss.elastic.co/t/missing-fields-in-kibana/256519)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 11:16am UTC](https://discuss.elastic.co/t/missing-fields-in-kibana/256519 "2020-12-19T11:16:40Z")
OS : Centos 7.4, ELK Version: 7.6.2 I am trying to count how many hosts are configured in the ELK stack and for some reason beat.hostname.keyword is not pulling any data. If i use the default metric without any other f… --- ## [Query to search multiple values in a single field with wildcard startswith condition](https://discuss.elastic.co/t/query-to-search-multiple-values-in-a-single-field-with-wildcard-startswith-condition/259155)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 0\ **Last updated:** [December 19, 2020, 9:52am UTC](https://discuss.elastic.co/t/query-to-search-multiple-values-in-a-single-field-with-wildcard-startswith-condition/259155 "2020-12-19T09:52:50Z")
Diseases: “fever, headache, cold cough” Diseases:” fever, infection” Diseases:” fever,covid\_19” I want to find out the (diseases:” fever,covid\_19”) with in a must with wildcard condition starts with. I have tried wit… --- ## [How to make input processor process all data?](https://discuss.elastic.co/t/how-to-make-input-processor-process-all-data/259067)
**Author:** [@dukeyang](https://discuss.elastic.co/u/dukeyang)\ **Replies:** 2\ **Last updated:** [December 19, 2020, 6:56am UTC](https://discuss.elastic.co/t/how-to-make-input-processor-process-all-data/259067 "2020-12-19T06:56:59Z")
In my application, there are multiple logs that need to process, I want every log has its own processors. BUT processors under specific input only process data collected by this input; - type: log paths: - ./data… --- ## [How to Program APPs in ELK?](https://discuss.elastic.co/t/how-to-program-apps-in-elk/259141)
**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 5:02am UTC](https://discuss.elastic.co/t/how-to-program-apps-in-elk/259141 "2020-12-19T05:02:27Z")
Hi everyone, I just got familiar with ELK , My question is how I can program APPs in ELK (I think most of it is in Kibana) what programming language should I know and how can I learn programming APPs in Kibana and ELK… --- ## [Accessing two various indexes in canvas datatable](https://discuss.elastic.co/t/accessing-two-various-indexes-in-canvas-datatable/259134)
**Author:** [@Alfar](https://discuss.elastic.co/u/Alfar)\ **Replies:** 2\ **Last updated:** [December 19, 2020, 4:45am UTC](https://discuss.elastic.co/t/accessing-two-various-indexes-in-canvas-datatable/259134 "2020-12-19T04:45:21Z")
I want to populate a data table in canvas with this kind of query SELECT student\_id,name,address,department\_id FROM student WHERE department\_id IN ( SELECT department\_id FROM department WHERE department\_name ="Engine… --- ## [Host.os is missing in generated template when host is expected in a custom schema using ECS Tooling 1.6 and 1.7](https://discuss.elastic.co/t/host-os-is-missing-in-generated-template-when-host-is-expected-in-a-custom-schema-using-ecs-tooling-1-6-and-1-7/258786)
**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\ **Replies:** 4\ **Last updated:** [December 18, 2020, 11:46pm UTC](https://discuss.elastic.co/t/host-os-is-missing-in-generated-template-when-host-is-expected-in-a-custom-schema-using-ecs-tooling-1-6-and-1-7/258786 "2020-12-18T23:46:18Z")
Hi, I am using ECS Tooling (1.6 and 1.7) to generate template, adding "host" to a custom schema "Link". Added host.yml as following. In the resulted template.json, while host.geo exists, host.os is missing. After I c… --- ## [How to delete documents older than 10 days - cant use daily indices](https://discuss.elastic.co/t/how-to-delete-documents-older-than-10-days-cant-use-daily-indices/259119)
**Author:** [@Jana\_P](https://discuss.elastic.co/u/Jana_P)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 11:13pm UTC](https://discuss.elastic.co/t/how-to-delete-documents-older-than-10-days-cant-use-daily-indices/259119 "2020-12-18T23:13:14Z")
Hello, I'm trying to figure out how to delete documents older than 10 days. It sounds simple (curator etc.) - but my situation is quite complicated - I have 3 nodes cluster for DEV logs from about 30 environments. So … --- ## [Watcher not letting me pull a timestamp from a log and use it to search from there](https://discuss.elastic.co/t/watcher-not-letting-me-pull-a-timestamp-from-a-log-and-use-it-to-search-from-there/258636)
**Author:** [@cah-cborders](https://discuss.elastic.co/u/cah-cborders)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 7:51pm UTC](https://discuss.elastic.co/t/watcher-not-letting-me-pull-a-timestamp-from-a-log-and-use-it-to-search-from-there/258636 "2020-12-14T19:51:20Z")
I'm trying to set up a Watcher in Kibana that will let me find an log with the message "Exit Status 1", then use the timestamp from that log to chain a new search and go back 20 logs or so from there so I can kind of cre… --- ## [Canvas Group By Month with Chronological order](https://discuss.elastic.co/t/canvas-group-by-month-with-chronological-order/259066)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [December 18, 2020, 9:35pm UTC](https://discuss.elastic.co/t/canvas-group-by-month-with-chronological-order/259066 "2020-12-18T21:35:12Z")
Hello, I'm trying for some time to create a graph in canvas of unique users per month, ordered chronologically (oldest month of last year first). Whatever ESSQL query I'm trying, it seems to always order alphabetically. … --- ## [Configuring Uptime Alerting to Send Out Email](https://discuss.elastic.co/t/configuring-uptime-alerting-to-send-out-email/259115)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 9:34pm UTC](https://discuss.elastic.co/t/configuring-uptime-alerting-to-send-out-email/259115 "2020-12-18T21:34:24Z")
I have set up a handful of Uptime and have enabled Status Alerting to report when the monitor itself is down but what I want to do next is to alert when the response code is not equal to 200 in the case of a server ping … --- ## [How to create alert in watcher advance? for the basic metrics of CPU, MEMORY](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/257705)
**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 9:04pm UTC](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/257705 "2020-12-18T21:04:15Z")
How do I add more fields in the message of my alert by watcher --- ## [Is there a way to show alerts as thresholds in visualizations?](https://discuss.elastic.co/t/is-there-a-way-to-show-alerts-as-thresholds-in-visualizations/257726)
**Author:** [@Matheus\_Webler](https://discuss.elastic.co/u/Matheus_Webler)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 8:46pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-show-alerts-as-thresholds-in-visualizations/257726 "2020-12-18T20:46:17Z")
Hello there! I really enjoy the new alerting tools on Kibana, but it is not optimal the way I need to maintain thresholds that are shown in dashboards/visualizations and alerts separately. It is really helpful to see at… --- ## [Elasticsearch bucket\_script agg](https://discuss.elastic.co/t/elasticsearch-bucket-script-agg/259138)
**Author:** [@Alexkl](https://discuss.elastic.co/u/Alexkl)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-bucket-script-agg/259138 "2020-12-18T20:23:03Z")
Hello, There is something i don't understand. I want to get a daily hit ratio calculated on the hit/miss stored in a particular field on my index. I tried to reproduce the doc example adding an extra agg. When i try … --- ## [Correct way to setup the beats index patterns?](https://discuss.elastic.co/t/correct-way-to-setup-the-beats-index-patterns/258360)
**Author:** [@jclemons7](https://discuss.elastic.co/u/jclemons7)\ **Replies:** 5\ **Last updated:** [December 18, 2020, 8:12pm UTC](https://discuss.elastic.co/t/correct-way-to-setup-the-beats-index-patterns/258360 "2020-12-18T20:12:41Z")
Hello and thanks in advance for the guidance. I've been trying to figure this out on my own for a while, but I'm not having any luck so I thought I'd just finally ask. What is the CORRECT way to setup the indexes for t… --- ## [Amazon\_s3\_exception: Access Denied Service: Amazon S3; Status Code: 403;](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 5\ **Last updated:** [December 18, 2020, 8:11pm UTC](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267 "2020-12-18T20:11:30Z")
I have a 3 node ec2 dev cluster. I'm trying to setup a snapshot repository for elasticsearch to s3 but I'm getting the following error. AWS command line works for me but setting up through elasticsearch is not. any ide… --- ## [Scripted field add a value of 1 for every match](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 15\ **Last updated:** [December 18, 2020, 8:06pm UTC](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746 "2020-12-18T20:06:33Z")
Hello, New to the Elastic Stack and trying to get familiar with it. I'm not sure if this should be done on the ingest pipeline or visualization (I haven't had luck on either) but attempting to solve this with a scripte… --- ## [Startup Type missing data](https://discuss.elastic.co/t/startup-type-missing-data/258049)
**Author:** [@mjsteckiel](https://discuss.elastic.co/u/mjsteckiel)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 8:02pm UTC](https://discuss.elastic.co/t/startup-type-missing-data/258049 "2020-12-18T20:02:17Z")
Hey all, We have been looking into the Windows Service metricset, and have found that none of the services are coming through with Startup Type data. We are following the metricset configuration - and there doesn't even… --- ## [Server 1 down again](https://discuss.elastic.co/t/server-1-down-again/259136)
**Author:** [@holgus103](https://discuss.elastic.co/u/holgus103)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 7:19pm UTC](https://discuss.elastic.co/t/server-1-down-again/259136 "2020-12-18T19:19:02Z")
Hi everyone, I was doing the Elastic Engineer I course and today ran into some downtime with Strigo, I was able to confirm that the initial issue was fixed and I can start my environment again but now server1 is not ava… [Previous page](https://discuss.elastic.co/latest.md?page=1928) [Next page](https://discuss.elastic.co/latest.md?page=1930)