# Latest **URL:** https://discuss.elastic.co/latest.md?page=427 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 428 --- ## [Workplace Search Reference Custom Index](https://discuss.elastic.co/t/workplace-search-reference-custom-index/351191)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 13\ **Last updated:** [January 18, 2024, 8:52pm UTC](https://discuss.elastic.co/t/workplace-search-reference-custom-index/351191 "2024-01-18T20:52:07Z")
Hi All, I was wondering if anyone knows if there is a way to get a custom index as an Organizational Source within Workplace Search? Background, I have an Enterprise Search web crawler setup to index a website into an … --- ## [How to filter based on a pair of matching geopoints within a radius?](https://discuss.elastic.co/t/how-to-filter-based-on-a-pair-of-matching-geopoints-within-a-radius/350265)
**Author:** [@mike\_mivance](https://discuss.elastic.co/u/mike_mivance)\ **Replies:** 5\ **Last updated:** [January 18, 2024, 8:31pm UTC](https://discuss.elastic.co/t/how-to-filter-based-on-a-pair-of-matching-geopoints-within-a-radius/350265 "2024-01-18T20:31:34Z")
Hi All, I am trying to match based on two geopoints (origin and destination) within a radius so that if both the query geopoints are within their respective radiuses, they will be included in the results. For instance, i… --- ## [Convert string LLA to Geo-Point](https://discuss.elastic.co/t/convert-string-lla-to-geo-point/351376)
**Author:** [@michael\_c\_michael](https://discuss.elastic.co/u/michael_c_michael)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 7:47pm UTC](https://discuss.elastic.co/t/convert-string-lla-to-geo-point/351376 "2024-01-18T19:47:14Z")
I have a string field that is in Latitude, Longitude, Altitude. In the pipeline, I am taking the location in x, y, z in ECEF coordinates and converting to LLA: - pipeline.id: entity-state-processing config.str… --- ## [Grouping hosts in infrastructure by custom key or tags](https://discuss.elastic.co/t/grouping-hosts-in-infrastructure-by-custom-key-or-tags/336707)
**Author:** [@rubal033](https://discuss.elastic.co/u/rubal033)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 7:41pm UTC](https://discuss.elastic.co/t/grouping-hosts-in-infrastructure-by-custom-key-or-tags/336707 "2024-01-18T19:41:18Z")
Hi Is there any way to group host with name while monitoring infrastructure with elastic-agent? Currently agent name is same as hostname under fleet and if we keep hostname same for more than 1 host to group them under … --- ## [I'm having a problem in Kibana every time I open a space in elastic](https://discuss.elastic.co/t/im-having-a-problem-in-kibana-every-time-i-open-a-space-in-elastic/351374)
**Author:** [@Leomar.V](https://discuss.elastic.co/u/Leomar.V)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 6:16pm UTC](https://discuss.elastic.co/t/im-having-a-problem-in-kibana-every-time-i-open-a-space-in-elastic/351374 "2024-01-18T18:16:30Z")
--- ## [Codec multiline grok pattern for Logstash](https://discuss.elastic.co/t/codec-multiline-grok-pattern-for-logstash/351334)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 6\ **Last updated:** [January 18, 2024, 5:55pm UTC](https://discuss.elastic.co/t/codec-multiline-grok-pattern-for-logstash/351334 "2024-01-18T17:55:10Z")
Hey, so i am parsing multiline logs using Logstash. I need consider each log line will start with {"offset": currently it is printing into single line that's why it is coming in one message only We are not using file… --- ## [Is it possible to mount a part of memory as a tmpfs filesystem and store the vector files there?](https://discuss.elastic.co/t/is-it-possible-to-mount-a-part-of-memory-as-a-tmpfs-filesystem-and-store-the-vector-files-there/351369)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 4:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-mount-a-part-of-memory-as-a-tmpfs-filesystem-and-store-the-vector-files-there/351369 "2024-01-18T16:23:43Z")
Hi all, I have been struggling for a while to keep an Elasticsearch cluster performant for vectors search, while indexing new data. I am researching different strategies on how to keep the index up-to-date, while being … --- ## [Logstash.input.imap error SSL](https://discuss.elastic.co/t/logstash-input-imap-error-ssl/349772)
**Author:** [@drissm](https://discuss.elastic.co/u/drissm)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 3:51pm UTC](https://discuss.elastic.co/t/logstash-input-imap-error-ssl/349772 "2024-01-18T15:51:22Z")
Hello, i have a logstash v8.11.3 with input.imap plugin v3.2.1. Here is my pipeline and the ssl error i have input { imap { host =\> "myhost" password =\> "mypassword" port =\> 993 user =\> "myemail@mydoma… --- ## [Calculating Windows User Session Duration](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362)
**Author:** [@pcharles1](https://discuss.elastic.co/u/pcharles1)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 3:05pm UTC](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362 "2024-01-18T15:05:28Z")
I need to calculate Windows user session duration times using winlogbeat event codes like 4624 (login) and 4634 (logout) & create a visualization to display each user's duration. I'm using a heatmap visualization. I foun… --- ## [Generate multiple alerts from elastic query](https://discuss.elastic.co/t/generate-multiple-alerts-from-elastic-query/351113)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 10\ **Last updated:** [January 18, 2024, 3:03pm UTC](https://discuss.elastic.co/t/generate-multiple-alerts-from-elastic-query/351113 "2024-01-18T15:03:19Z")
I want to generate an alert whenever a pod is restarted in kubernetes. I am planning to use kubernetes.container.status.restarts to identify whether pods are restarted or not. I would like to have a single elasticsear… --- ## [Arabic decode](https://discuss.elastic.co/t/arabic-decode/351027)
**Author:** [@abdullah144](https://discuss.elastic.co/u/abdullah144)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 2:44pm UTC](https://discuss.elastic.co/t/arabic-decode/351027 "2024-01-18T14:44:37Z")
Hi , when I log some data in Arabic is came like this on Kibana : "شــريك" how can I let the Kibana convert it to Arabic direct? Thanks, --- ## [Drop event in procesor result in no records](https://discuss.elastic.co/t/drop-event-in-procesor-result-in-no-records/351352)
**Author:** [@Ruben\_Bahntje](https://discuss.elastic.co/u/Ruben_Bahntje)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 1:29pm UTC](https://discuss.elastic.co/t/drop-event-in-procesor-result-in-no-records/351352 "2024-01-18T13:29:07Z")
I am using Fleet to configure agent policies for windows servers. I configure to get several security events 4624, 4625, 4771 and drop events when LogonType = 3 I ve configure procesor like this: drop\_event: when: … --- ## [Automating Sophos Central Agent Policies Integration via Python](https://discuss.elastic.co/t/automating-sophos-central-agent-policies-integration-via-python/351349)
**Author:** [@bl4ck-m33k4t](https://discuss.elastic.co/u/bl4ck-m33k4t)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 1:21pm UTC](https://discuss.elastic.co/t/automating-sophos-central-agent-policies-integration-via-python/351349 "2024-01-18T13:21:58Z")
Hi everyone, I'm currently working on automating the deployment of Sophos Central Agent policies using Python. My goal is to create policies and add integrations programmatically. However, I'm facing challenges with the… --- ## [Legacy index templates deprecation](https://discuss.elastic.co/t/legacy-index-templates-deprecation/351356)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 12:40pm UTC](https://discuss.elastic.co/t/legacy-index-templates-deprecation/351356 "2024-01-18T12:40:43Z")
Hi everyone, I have a question about legacy index templates. I know that are deprecated since Elasticsearch v7.9, but in what future Elasticsearch version will be definitively removed, so that only composable resp. comp… --- ## [Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’](https://discuss.elastic.co/t/response-to-preflight-request-doesn-t-pass-access-control-check-no-access-control-allow-origin/348244)
**Author:** [@alexander3](https://discuss.elastic.co/u/alexander3)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 11:25am UTC](https://discuss.elastic.co/t/response-to-preflight-request-doesn-t-pass-access-control-check-no-access-control-allow-origin/348244 "2024-01-18T11:25:34Z")
Hi, I am in a process of learning how to use Elastic, Kibana and a simple create-react-app project with OpenTelemetry to monitor a react application. After setting up Elastic, Kibana and instrumenting OpenTelemetry I am … --- ## [While configuring the elastic search cluster with two elk nodes. i am getting the error](https://discuss.elastic.co/t/while-configuring-the-elastic-search-cluster-with-two-elk-nodes-i-am-getting-the-error/349947)
**Author:** [@Jaladanki\_Varaprasad](https://discuss.elastic.co/u/Jaladanki_Varaprasad)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 11:22am UTC](https://discuss.elastic.co/t/while-configuring-the-elastic-search-cluster-with-two-elk-nodes-i-am-getting-the-error/349947 "2024-01-18T11:22:08Z")
mote\_cluster\_client, data, data\_cold\] \[2023-12-26T11:21:03,744\]\[ERROR\]\[o.e.b.Elasticsearch \] \[elk-node-2\] fatal exception while booting Elasticsearch org.elasticsearch.ElasticsearchSecurityException: failed to loa… --- ## [Can't deploy elastic cluster with ECK](https://discuss.elastic.co/t/cant-deploy-elastic-cluster-with-eck/351345)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:56am UTC](https://discuss.elastic.co/t/cant-deploy-elastic-cluster-with-eck/351345 "2024-01-18T09:56:06Z")
Hello! I try to deploy Elasticsearch using ECK. But I have problem with Persistence Volume. My elastic manifest kind: Elasticsearch metadata: name: opencti-elastic spec: version: 8.11.4 volumeClaimDeletePolicy:… --- ## [Merge Data Streams from Integrations](https://discuss.elastic.co/t/merge-data-streams-from-integrations/351346)
**Author:** [@longansoju](https://discuss.elastic.co/u/longansoju)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 10:02am UTC](https://discuss.elastic.co/t/merge-data-streams-from-integrations/351346 "2024-01-18T10:02:13Z")
My setup is consists Fleet Management together with Tenable Integration. The issue with this is Tenable's Integration comes with multiple data streams. The two that I'm focusing on are asset and vulnerability. I wan… --- ## [Set number of replicas to 0 for all indices and index templates](https://discuss.elastic.co/t/set-number-of-replicas-to-0-for-all-indices-and-index-templates/351078)
**Author:** [@georgms](https://discuss.elastic.co/u/georgms)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 9:53am UTC](https://discuss.elastic.co/t/set-number-of-replicas-to-0-for-all-indices-and-index-templates/351078 "2024-01-18T09:53:46Z")
We're running an Elastic Cloud APM setup for a small application. As this is not critical data we're deliberately using only a single zone across all tier. We are aware of the potential consequences of downtime or data l… --- ## [How to set a specific bin folder for Elasticsearch 7.14](https://discuss.elastic.co/t/how-to-set-a-specific-bin-folder-for-elasticsearch-7-14/351344)
**Author:** [@sbottura](https://discuss.elastic.co/u/sbottura)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:51am UTC](https://discuss.elastic.co/t/how-to-set-a-specific-bin-folder-for-elasticsearch-7-14/351344 "2024-01-18T09:51:44Z")
Hello, I have two different instances of elasticsearch on the same disk on a virtual machine and I am currently using elasticsearch 7.14.1. I just discovered, however, that when elasticsearch 7.14.1 is running, it uses … --- ## [Duplicate Documents Generated by Kibana for ICMP Monitor Down and Recovery Statuses](https://discuss.elastic.co/t/duplicate-documents-generated-by-kibana-for-icmp-monitor-down-and-recovery-statuses/351258)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 9:42am UTC](https://discuss.elastic.co/t/duplicate-documents-generated-by-kibana-for-icmp-monitor-down-and-recovery-statuses/351258 "2024-01-18T09:42:31Z")
Hello, I've been experiencing an issue where Kibana's monitoring is generating duplicate documents for both 'down' and 'recovery' statuses across all hosts. Below, I have provided the configuration of the rule and addit… --- ## [Elastic enterprise search - BadGatewayError \[502\] 'The instance rejected the connection.'](https://discuss.elastic.co/t/elastic-enterprise-search-badgatewayerror-502-the-instance-rejected-the-connection/351341)
**Author:** [@MarieD](https://discuss.elastic.co/u/MarieD)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:37am UTC](https://discuss.elastic.co/t/elastic-enterprise-search-badgatewayerror-502-the-instance-rejected-the-connection/351341 "2024-01-18T09:37:07Z")
Hi everyone, We've been using Elasticsearch through App Search. We've been getting the following error from time to time (~3% of our requests): elastic\_enterprise\_search.exceptions.BadGatewayError: \[502\] {'ok': False,… --- ## [🎉 What’s new in Elastic 8.12](https://discuss.elastic.co/t/what-s-new-in-elastic-8-12/351339)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:27am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-12/351339 "2024-01-18T09:27:59Z")
:tada: What’s new in Elastic 8.12 Learn about Elastic 8.12 which includes the GA of the Elastic AI Assistant for Observability, update to Apache Lucene 9.9 with scalar quantization, new machine learning capabilities, CSP… --- ## [Show all values when breakdown](https://discuss.elastic.co/t/show-all-values-when-breakdown/351337)
**Author:** [@EladB](https://discuss.elastic.co/u/EladB)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:26am UTC](https://discuss.elastic.co/t/show-all-values-when-breakdown/351337 "2024-01-18T09:26:31Z")
Hi ; im using Elastic 8 as i search my http logs for an application and go to "Breakdown" it always presents only 3 top values and "other" . i know i can change in the search the "edit visualisation" button from 3 top … --- ## [Can you help me see how my code should be implemented?](https://discuss.elastic.co/t/can-you-help-me-see-how-my-code-should-be-implemented/351330)
**Author:** [@ivanz](https://discuss.elastic.co/u/ivanz)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:12am UTC](https://discuss.elastic.co/t/can-you-help-me-see-how-my-code-should-be-implemented/351330 "2024-01-18T09:12:56Z")
Now there is a requirement as follows: A piece of data has four fields: article\_id, year, title, and version. If multiple articles share an article\_id, the one with the highest version in the hit data will be returned d… --- ## [problem on highlighting (sentence cutting)](https://discuss.elastic.co/t/problem-on-highlighting-sentence-cutting/351189)
**Author:** [@minwei.deng](https://discuss.elastic.co/u/minwei.deng)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 9:02am UTC](https://discuss.elastic.co/t/problem-on-highlighting-sentence-cutting/351189 "2024-01-18T09:02:59Z")
Hello, I've a problem on highlighting. When I search for the keyword "éolienne", Elastic highlights l' instead of the l'éolienne. (see picture problem\_highlight.png) The complete sentene is : """Daulitz, Domaine de La… --- ## [Misspelled words or Typo Mistakes handling in Elastic Search without fuzziness](https://discuss.elastic.co/t/misspelled-words-or-typo-mistakes-handling-in-elastic-search-without-fuzziness/351083)
**Author:** [@Mohandass](https://discuss.elastic.co/u/Mohandass)\ **Replies:** 15\ **Last updated:** [January 18, 2024, 8:45am UTC](https://discuss.elastic.co/t/misspelled-words-or-typo-mistakes-handling-in-elastic-search-without-fuzziness/351083 "2024-01-18T08:45:13Z")
Hi All, We are working on an ecommerce product with Next JS and Python API driven project. In this we have implemented Elasticsearch Rest based API calls from React JS. We are facing a problem as below, Spelling Mista… --- ## [How to Implement Flexible Value Filters for a Field in Elastic App Search?](https://discuss.elastic.co/t/how-to-implement-flexible-value-filters-for-a-field-in-elastic-app-search/351291)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 8:59am UTC](https://discuss.elastic.co/t/how-to-implement-flexible-value-filters-for-a-field-in-elastic-app-search/351291 "2024-01-18T08:59:44Z")
Hello, We're currently facing a challenge with a client who requires a filter for their App Search search query. We've already consulted the Elastic documentation and have implemented a value filter. However, our issue… --- ## [OneDrive connector set up natively, but no ability to edit advanced sync settings](https://discuss.elastic.co/t/onedrive-connector-set-up-natively-but-no-ability-to-edit-advanced-sync-settings/351275)
**Author:** [@AlAnsari](https://discuss.elastic.co/u/AlAnsari)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 8:51am UTC](https://discuss.elastic.co/t/onedrive-connector-set-up-natively-but-no-ability-to-edit-advanced-sync-settings/351275 "2024-01-18T08:51:54Z")
I've wanted to test elastic connectors to check the viability of their use with my organisation. I sent up an azure ad service, gave it Microsoft Graph API permissions, then pointed to it in the configurations of the na… --- ## [Scale Logstash config for more than 20,000 messages per minute?](https://discuss.elastic.co/t/scale-logstash-config-for-more-than-20-000-messages-per-minute/350552)
**Author:** [@Trung\_Nguyen](https://discuss.elastic.co/u/Trung_Nguyen)\ **Replies:** 14\ **Last updated:** [January 18, 2024, 8:35am UTC](https://discuss.elastic.co/t/scale-logstash-config-for-more-than-20-000-messages-per-minute/350552 "2024-01-18T08:35:09Z")
Hi I'm using rsyslog as a syslog server to get the log from the Firewall and network devices, then it send log to Logstash (on the same host) to do the filter then push to Elastic (on other host). If I forward around 1… [Previous page](https://discuss.elastic.co/latest.md?page=426) [Next page](https://discuss.elastic.co/latest.md?page=428)