# Latest **URL:** https://discuss.elastic.co/latest.md?page=1976 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1977 --- ## [Use case for App Search?](https://discuss.elastic.co/t/use-case-for-app-search/255436)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 6:00pm UTC](https://discuss.elastic.co/t/use-case-for-app-search/255436 "2020-11-25T18:00:16Z")
While setting up and reading online documentation of Elasticsearch, I came over App Search. Since I have never used App Search before I wanted to give it a try by running Elasticsearch and App Search in Docker containers… --- ## [Dashboard Time Frame Not Affecting Pie Chart or Table Visualizations](https://discuss.elastic.co/t/dashboard-time-frame-not-affecting-pie-chart-or-table-visualizations/256198)
**Author:** [@biker2o](https://discuss.elastic.co/u/biker2o)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:42pm UTC](https://discuss.elastic.co/t/dashboard-time-frame-not-affecting-pie-chart-or-table-visualizations/256198 "2020-11-25T17:42:10Z")
How can I have the DatePicker on a Dashboard filter data in Pie Charts and Data Tables? Please view attached images. Example below: There has been no data in the last 15 minutes, so this entire dashboard should be empty… --- ## [Public Key protection by authorized urls or ip like google maps api?](https://discuss.elastic.co/t/public-key-protection-by-authorized-urls-or-ip-like-google-maps-api/254035)
**Author:** [@dholakianivid](https://discuss.elastic.co/u/dholakianivid)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 5:41pm UTC](https://discuss.elastic.co/t/public-key-protection-by-authorized-urls-or-ip-like-google-maps-api/254035 "2020-11-25T17:41:45Z")
Anyway or plans to protect public key usage for a particular url?. Like google maps api key can be limited for URL's or IP addresses to protect search UI exposing public key in headers. --- ## [Anyway to filter based on fields always in query\_suggestion?](https://discuss.elastic.co/t/anyway-to-filter-based-on-fields-always-in-query-suggestion/254031)
**Author:** [@dholakianivid](https://discuss.elastic.co/u/dholakianivid)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 5:40pm UTC](https://discuss.elastic.co/t/anyway-to-filter-based-on-fields-always-in-query-suggestion/254031 "2020-11-25T17:40:53Z")
I am working off search ui project but the way I see the documentation is limited to one query field in query suggestion api. If the user is not allowed to see all the documents in the engine it can become a problem. Any… --- ## [AWS Elasticsearch 7.7 : Query index for one field to match a subset of chars in another text field in a document? Can it be done?](https://discuss.elastic.co/t/aws-elasticsearch-7-7-query-index-for-one-field-to-match-a-subset-of-chars-in-another-text-field-in-a-document-can-it-be-done/256509)
**Author:** [@yoyomonkey](https://discuss.elastic.co/u/yoyomonkey)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 5:30pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-7-7-query-index-for-one-field-to-match-a-subset-of-chars-in-another-text-field-in-a-document-can-it-be-done/256509 "2020-11-25T17:30:09Z")
Hi everyone, I hope someone can guide me with some guides or links on this please . I have an index with two fields of interest : adapterid and country and I am trying to write a query without going thorugh every permu… --- ## [Only getting node and node\_stats metricsets from elasticsearch module](https://discuss.elastic.co/t/only-getting-node-and-node-stats-metricsets-from-elasticsearch-module/256585)
**Author:** [@chapterthree](https://discuss.elastic.co/u/chapterthree)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:16pm UTC](https://discuss.elastic.co/t/only-getting-node-and-node-stats-metricsets-from-elasticsearch-module/256585 "2020-11-25T17:16:40Z")
I seem to only be getting the node and node\_stats metricsets when I enable the elasticsearch-xpack.yml module. Any ideas why? I have tried with and without the xpack.enabled: true setting. --- ## [ELI5: Elasticsearch, Kibana and Logstash (and Beats)](https://discuss.elastic.co/t/eli5-elasticsearch-kibana-and-logstash-and-beats/256694)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 5:15pm UTC](https://discuss.elastic.co/t/eli5-elasticsearch-kibana-and-logstash-and-beats/256694 "2020-11-25T17:15:38Z")
Im having some issues understanding the components. Elasticsearch: Used for indexing and searching thru logs. Pretty straight forward. Kibana: Used as a GUI. Pretty straight forward. Logstash: Is this a syslog? Does t… --- ## [JSON Filter Making Events Disappear](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 5:08pm UTC](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199 "2020-11-25T17:08:21Z")
I've been using the same filter configuration across multiple upgrades of Logstash. After upgrading to 7.10.0, the JSON filter now makes events...disappear. Events are sent to Logstash via filebeat (running v 7.10.0). … --- ## [NEST: customize creation of HttpClient](https://discuss.elastic.co/t/nest-customize-creation-of-httpclient/256687)
**Author:** [@jonsagara](https://discuss.elastic.co/u/jonsagara)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 4:29pm UTC](https://discuss.elastic.co/t/nest-customize-creation-of-httpclient/256687 "2020-11-25T16:29:57Z")
Hello, There is a known issue with targeting net5.0 on Azure App Service and trying to connect to Elasticsearch on a virtual machine connected to via an Azure VNet. The main ticket is here: The issue is essentially t… --- ## [ILM trying to rollover old index](https://discuss.elastic.co/t/ilm-trying-to-rollover-old-index/256573)
**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 4:06pm UTC](https://discuss.elastic.co/t/ilm-trying-to-rollover-old-index/256573 "2020-11-25T16:06:42Z")
Hello, I have a single-node ES setup that's receiving data from Filebeat running on a separate server. Since I have Filebeat shipping data from different log sources, I went through the process of manually creating an i… --- ## [Visualization doesn't follow time picker vlues in the dashboard](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-vlues-in-the-dashboard/256560)
**Author:** [@Agenobarb](https://discuss.elastic.co/u/Agenobarb)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 3:53pm UTC](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-vlues-in-the-dashboard/256560 "2020-11-25T15:53:41Z")
Time-based visualization (Line type) doesn't follow the time picker values in the dashboard - regardless what time interval I select in the time picker has no impact on the visualization. Please take a look at the screen… --- ## [Elasticsearch job to end messages with beginning messages, merge, then reindex](https://discuss.elastic.co/t/elasticsearch-job-to-end-messages-with-beginning-messages-merge-then-reindex/256541)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-job-to-end-messages-with-beginning-messages-merge-then-reindex/256541 "2020-11-25T15:44:21Z")
The system I'm running is currently matching beginning messages with end messages then sending them to logstash for further processing. This is done through a web of python code. I was wondering if this could be accompl… --- ## [Timelion 7.10 Error : Syntax Error](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 4\ **Last updated:** [November 25, 2020, 3:31pm UTC](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016 "2020-11-25T15:31:04Z")
Hi, Recently upgraded ELK to try v7.10. I am getting an error in Timelion: Timelion request error: undefined SyntaxError: {"type":"incompleteFunction","function":"es","location":{"min":0,"max":3},"text":".es"} This… --- ## [DATE format not persisting from meta tag](https://discuss.elastic.co/t/date-format-not-persisting-from-meta-tag/255724)
**Author:** [@Eric\_Morgan](https://discuss.elastic.co/u/Eric_Morgan)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 3:29pm UTC](https://discuss.elastic.co/t/date-format-not-persisting-from-meta-tag/255724 "2020-11-25T15:29:43Z")
Hey! I've recently set up Site Search for our publication site. Having page dates in search results is great but the automatically grabbed date was in a format that was hard to read. I updated the tag on our site to be … --- ## [Swiftype Jquery Autocomplete](https://discuss.elastic.co/t/swiftype-jquery-autocomplete/256376)
**Author:** [@KennytheCoder](https://discuss.elastic.co/u/KennytheCoder)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 3:26pm UTC](https://discuss.elastic.co/t/swiftype-jquery-autocomplete/256376 "2020-11-25T15:26:00Z")
I'm using the jquery autocomplete component with Site Search. I'm looking for a way to only initiate the autocomplete after the user has entered X number (in this case 3) characters. Any ideas if there is a property or… --- ## [ARRAYS AS "AND"](https://discuss.elastic.co/t/arrays-as-and/255824)
**Author:** [@Oleg\_Hmelevschi](https://discuss.elastic.co/u/Oleg_Hmelevschi)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 3:23pm UTC](https://discuss.elastic.co/t/arrays-as-and/255824 "2020-11-25T15:23:50Z")
Hi, In the filters doc is mentionned: Within each array, its items are applied using an "OR" condition. How can i do to have the "AND" condition? For ex if if want all document with Washington AND Idaho? "filters":… --- ## [Intervals wildcard 128 expansion limit](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390)
**Author:** [@prasad.deshpande](https://discuss.elastic.co/u/prasad.deshpande)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/intervals-wildcard-128-expansion-limit/256390 "2020-11-25T14:57:23Z")
Hi, I'm trying out intervals wildcard queries. But in the process, depending on the term I'm hitting the 128 expansion limit. I know that this is a hard limit imposed by Lucene. But my question is if I have to get past … --- ## [Something went wrong on start http://localhost:5601](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272)
**Author:** [@kaibox-git](https://discuss.elastic.co/u/kaibox-git)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 2:51pm UTC](https://discuss.elastic.co/t/something-went-wrong-on-start-http-localhost-5601/256272 "2020-11-25T14:51:26Z")
Windows 10 Google Chrome 86.0.4240.193 Elasticsearch just installed, ver 7.10 as a service. Kibana ver.7.10 When I go to http://localhost:5601 Clicking on button "Clear your session" has no effect. Page is reloa… --- ## [Kibana filter by sort and uniq value](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-filter-by-sort-and-uniq-value/256659 "2020-11-25T14:44:57Z")
Hello, At the discover navigation page, I would like to do a search (KQL) by creating a filter that will find a pattern for a specific field, sort all values and produce unique values. Is this possible? If yes, how? th… --- ## [Grok increase CPU usage to 700+%](https://discuss.elastic.co/t/grok-increase-cpu-usage-to-700/256633)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 2:42pm UTC](https://discuss.elastic.co/t/grok-increase-cpu-usage-to-700/256633 "2020-11-25T14:42:28Z")
Hello team, we have implemented a following GROK multi pattern match but when we deploy the pipeline for this component it raises CPU from 100 to 700%. Is there a way how to improve its performance? One way would be t… --- ## [CPU usage for logstash hits over 300%](https://discuss.elastic.co/t/cpu-usage-for-logstash-hits-over-300/255174)
**Author:** [@powerinside](https://discuss.elastic.co/u/powerinside)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 2:28pm UTC](https://discuss.elastic.co/t/cpu-usage-for-logstash-hits-over-300/255174 "2020-11-25T14:28:00Z")
Hello everybody, I am trying to parse logs using multiple grok filters. I have noticed that if i add following pattern, CPU usage for logstash hits over 300%. I have a couple of grok patterns for nginx logs as well wit… --- ## [Control Visualization alternative](https://discuss.elastic.co/t/control-visualization-alternative/256660)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:25pm UTC](https://discuss.elastic.co/t/control-visualization-alternative/256660 "2020-11-25T14:25:24Z")
Hi, We want to add interactive inputs to kibana dashboard, the feature that Control Visualization provides. But there is a warning which says this is Experimental(which states can be removed and its not stable as other … --- ## [User\_agent filter regexes.yaml location](https://discuss.elastic.co/t/user-agent-filter-regexes-yaml-location/256625)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 2:11pm UTC](https://discuss.elastic.co/t/user-agent-filter-regexes-yaml-location/256625 "2020-11-25T14:11:21Z")
Hi, I am looking to use the user\_agent filter in logstash. In the guide (https://www.elastic.co/guide/en/logstash/current/plugins-filters-useragent.html#plugins-filters-useragent-regexes) it states If not specified, t… --- ## [Transform: Sum doesn't add up](https://discuss.elastic.co/t/transform-sum-doesnt-add-up/256622)
**Author:** [@kaijun](https://discuss.elastic.co/u/kaijun)\ **Replies:** 15\ **Last updated:** [November 25, 2020, 2:09pm UTC](https://discuss.elastic.co/t/transform-sum-doesnt-add-up/256622 "2020-11-25T14:09:20Z")
I have an existing index datalog.gl\_sep20 and I want to transform to a new index based on some fields and do a sum aggregation based on "count" field. This is how I do it: curl -X PUT "localhost:9200/\_transform/transfor… --- ## [ECK: cannot delete or create kibana after update](https://discuss.elastic.co/t/eck-cannot-delete-or-create-kibana-after-update/256667)
**Author:** [@Benoit\_V](https://discuss.elastic.co/u/Benoit_V)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 1:56pm UTC](https://discuss.elastic.co/t/eck-cannot-delete-or-create-kibana-after-update/256667 "2020-11-25T13:56:43Z")
Hello, after updating ECK to version 1.3, I started updating my cluster. First, ElasticSearch, from 7.6 to 7.10, all went well. I then wanted to update Kibana, from 7.6 to 7.10, but the deployment was not being update… --- ## [Client requested protocol tlsv1 is not enabled or supported in server context](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/256610)
**Author:** [@adnanahmed](https://discuss.elastic.co/u/adnanahmed)\ **Replies:** 4\ **Last updated:** [November 25, 2020, 1:54pm UTC](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/256610 "2020-11-25T13:54:42Z")
Hi, we are using ELK stack version 7.9.0 , when we try to connect logstash with elastic it give us error . 'client requested protocol tlsv1 is not enabled or supported in server context' when we specify following … --- ## [Suggester not returning and hits](https://discuss.elastic.co/t/suggester-not-returning-and-hits/255231)
**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 1:49pm UTC](https://discuss.elastic.co/t/suggester-not-returning-and-hits/255231 "2020-11-25T13:49:28Z")
Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubuntu1~16.04.1-b1… --- ## [Using Collapse in elastic low level client with Hibernate Search](https://discuss.elastic.co/t/using-collapse-in-elastic-low-level-client-with-hibernate-search/256616)
**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 1:47pm UTC](https://discuss.elastic.co/t/using-collapse-in-elastic-low-level-client-with-hibernate-search/256616 "2020-11-25T13:47:00Z")
Using Collapse in elastic low level client with Hibernate Search. How to use Collapse in Java Code as it is working in query search in browser with Collapse on field but with elastic low level client with Hibernate Sear… --- ## [Logstash remove after split](https://discuss.elastic.co/t/logstash-remove-after-split/256608)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 1:45pm UTC](https://discuss.elastic.co/t/logstash-remove-after-split/256608 "2020-11-25T13:45:40Z")
Hi Team, I have configured a logstash http which receives JSON data. As part of the logstash filter I split a json field/value of array into 5 different key values. i.e., original Field commits : { author : TJ email… --- ## [Docker Elasticsearch Kibana Issues with Elastic-Agent sending data](https://discuss.elastic.co/t/docker-elasticsearch-kibana-issues-with-elastic-agent-sending-data/256581)
**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 1:42pm UTC](https://discuss.elastic.co/t/docker-elasticsearch-kibana-issues-with-elastic-agent-sending-data/256581 "2020-11-25T13:42:56Z")
I want to use docker to host Elasticsearch and Kibana. I have that working with xpac. I will include my yml files below. I want to enable the elastic-agent on my host computer to ingest logs. This is just a small dev env… [Previous page](https://discuss.elastic.co/latest.md?page=1975) [Next page](https://discuss.elastic.co/latest.md?page=1977)