# Latest **URL:** https://discuss.elastic.co/latest.md?page=437 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 438 --- ## [Script for getting a date field and searching in a nested object both in the same object](https://discuss.elastic.co/t/script-for-getting-a-date-field-and-searching-in-a-nested-object-both-in-the-same-object/350597)
**Author:** [@metopas1991](https://discuss.elastic.co/u/metopas1991)\ **Replies:** 0\ **Last updated:** [January 8, 2024, 2:43pm UTC](https://discuss.elastic.co/t/script-for-getting-a-date-field-and-searching-in-a-nested-object-both-in-the-same-object/350597 "2024-01-08T14:43:49Z")
Hello there, I am using elasticsearch 8.11 and have an index shown below: PUT /topics/ { "settings": { "index.mapping.total\_fields.limit": 2000, "number\_of\_shards": 1, "analysis": { "filter": { … --- ## [Docker SIEM install](https://discuss.elastic.co/t/docker-siem-install/349661)
**Author:** [@Mike\_Kirby](https://discuss.elastic.co/u/Mike_Kirby)\ **Replies:** 1\ **Last updated:** [January 8, 2024, 2:14pm UTC](https://discuss.elastic.co/t/docker-siem-install/349661 "2024-01-08T14:14:35Z")
I am at the beginning of a new ELK SIEM installation and am looking to verify a couple of items. When creating the SIEM in docker the documentation does not say to pull the Logstash component. Is there a reason for th… --- ## [Elastic repository problem?](https://discuss.elastic.co/t/elastic-repository-problem/350370)
**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\ **Replies:** 6\ **Last updated:** [January 8, 2024, 2:05pm UTC](https://discuss.elastic.co/t/elastic-repository-problem/350370 "2024-01-08T14:05:22Z")
Hi, I'm currently upgrade ELK stack tot the lastest version. Yesterday I started with data nodes and master. I notice the link was very slow and at the end of the day, I had to relaunch the download few times to end it… --- ## [How many users can access Elasticsearch and Kibana at the same time?](https://discuss.elastic.co/t/how-many-users-can-access-elasticsearch-and-kibana-at-the-same-time/350392)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 8\ **Last updated:** [January 8, 2024, 1:55pm UTC](https://discuss.elastic.co/t/how-many-users-can-access-elasticsearch-and-kibana-at-the-same-time/350392 "2024-01-08T13:55:27Z")
Hi, I am running a Elasticsearch and Kibana(V8.10) instance on a single windows server which has 8vCPU and 32gb of RAM. I would like to get a rough idea on how much load can the Elastic and Kibana instance can handle a… --- ## [Python 3.10 with zope5 integration to Elastic APM - Python help needed](https://discuss.elastic.co/t/python-3-10-with-zope5-integration-to-elastic-apm-python-help-needed/348472)
**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\ **Replies:** 6\ **Last updated:** [January 8, 2024, 1:41pm UTC](https://discuss.elastic.co/t/python-3-10-with-zope5-integration-to-elastic-apm-python-help-needed/348472 "2024-01-08T13:41:54Z")
hi @basepi, We have upgraded our tech stack to python 3.10 and zope5. The elastic APM agent am using is elastic-apm agent ==6.19.0. Can you help me here, where does my client call fits in , tried not able to get the UR… --- ## [I am trying to Install SYSLOG input plugin in Logstash which I installed in EC2 Ubuntu Linux but nto able to do this](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443)
**Author:** [@Subrato1](https://discuss.elastic.co/u/Subrato1)\ **Replies:** 3\ **Last updated:** [January 8, 2024, 12:35pm UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443 "2024-01-08T12:35:55Z")
Setup I followed for Installation: Step to install : 1- Go to root : sudo su - 2- Download and install the Public Signing Key: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /… --- ## [File beat High Availability to avoid data loss and avoid duplicates records](https://discuss.elastic.co/t/file-beat-high-availability-to-avoid-data-loss-and-avoid-duplicates-records/349358)
**Author:** [@amjad](https://discuss.elastic.co/u/amjad)\ **Replies:** 11\ **Last updated:** [January 8, 2024, 12:32pm UTC](https://discuss.elastic.co/t/file-beat-high-availability-to-avoid-data-loss-and-avoid-duplicates-records/349358 "2024-01-08T12:32:39Z")
Dear Elastic Community, My main concern is to ensure high availability, avoiding duplicated results. Is it possible to have two Filebeats in two different server to cover for each other in case one of them fails, ensuri… --- ## [Need help in how to show popup in elastic dashboard and also is it possible to call external api's](https://discuss.elastic.co/t/need-help-in-how-to-show-popup-in-elastic-dashboard-and-also-is-it-possible-to-call-external-apis/350432)
**Author:** [@Ashigha\_JR](https://discuss.elastic.co/u/Ashigha_JR)\ **Replies:** 7\ **Last updated:** [January 8, 2024, 11:20am UTC](https://discuss.elastic.co/t/need-help-in-how-to-show-popup-in-elastic-dashboard-and-also-is-it-possible-to-call-external-apis/350432 "2024-01-08T11:20:40Z")
Hi, Need to show popup in the elastic dashboard while clicking on any link/button. While clicking on link/button we need to call one external api to show the information in the popup. Is any feature available in elastic … --- ## [LogStash filter for matching timestamp example: \[2024-01-04 23:00:00,931\]](https://discuss.elastic.co/t/logstash-filter-for-matching-timestamp-example-2024-01-04-2300-931/350549)
**Author:** [@criss79](https://discuss.elastic.co/u/criss79)\ **Replies:** 2\ **Last updated:** [January 8, 2024, 10:07am UTC](https://discuss.elastic.co/t/logstash-filter-for-matching-timestamp-example-2024-01-04-2300-931/350549 "2024-01-08T10:07:02Z")
Hi guys, I am having difficulties to match this timestamp format for a log entry that looks like this: \[timestamp\] \[Loglevel\] message Log entry example: \[2024-01-04 23:00:00,931\] \[INFO\] Multi\_Language.UserInfoContain… --- ## [Query slower with ES 5 compared with ES 7](https://discuss.elastic.co/t/query-slower-with-es-5-compared-with-es-7/350563)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 1\ **Last updated:** [January 8, 2024, 10:05am UTC](https://discuss.elastic.co/t/query-slower-with-es-5-compared-with-es-7/350563 "2024-01-08T10:05:33Z")
Hi experts! We recently migrated from a ES 5 to a 7 version. We observed that some of our original queries became slower than before. An example of query : GET /\[index\_name\]/\_search?search\_type=dfs\_query\_then\_fetch {… --- ## [Kibana Generate PDF function Returns Internal Server Error](https://discuss.elastic.co/t/kibana-generate-pdf-function-returns-internal-server-error/350455)
**Author:** [@mbathann](https://discuss.elastic.co/u/mbathann)\ **Replies:** 3\ **Last updated:** [January 8, 2024, 10:03am UTC](https://discuss.elastic.co/t/kibana-generate-pdf-function-returns-internal-server-error/350455 "2024-01-08T10:03:48Z")
Hi Guys, Kindly assist I have encountered an issue with KIbana, when i try to generate PDF reports, it returns internal Server error, please see error log message below, I'm new to elastic. Kibana reporting error ":\["e… --- ## [Delete by query deletes only 1000 documents, then quits](https://discuss.elastic.co/t/delete-by-query-deletes-only-1000-documents-then-quits/350529)
**Author:** [@d8d4a522fb1d394d9705](https://discuss.elastic.co/u/d8d4a522fb1d394d9705)\ **Replies:** 7\ **Last updated:** [January 8, 2024, 9:14am UTC](https://discuss.elastic.co/t/delete-by-query-deletes-only-1000-documents-then-quits/350529 "2024-01-08T09:14:41Z")
I am using the following the api to delete documents older than 60 days: POST /index\_name/\_delete\_by\_query?conflicts=proceed { "query": { "range": { "@timestamp": {"lte": "now-60d/d"} } } } My inde… --- ## [Partial ELK component upgrade](https://discuss.elastic.co/t/partial-elk-component-upgrade/350559)
**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\ **Replies:** 1\ **Last updated:** [January 8, 2024, 8:52am UTC](https://discuss.elastic.co/t/partial-elk-component-upgrade/350559 "2024-01-08T08:52:53Z")
Hi All, Currently I have run a vulnerability scan and it produces the following information: Users should upgrade to Kibana version 8.11.1 If the Elasticsearch, Logstash and Kibana that I currently use use version 8.… --- ## [Getting incomplete request body in Elasticsearch audit log](https://discuss.elastic.co/t/getting-incomplete-request-body-in-elasticsearch-audit-log/350543)
**Author:** [@ashishshukla](https://discuss.elastic.co/u/ashishshukla)\ **Replies:** 2\ **Last updated:** [January 8, 2024, 8:41am UTC](https://discuss.elastic.co/t/getting-incomplete-request-body-in-elasticsearch-audit-log/350543 "2024-01-08T08:41:57Z")
I have executed few security APIs , for those I am getting incomplete request body in Elasticsearch Audit log. Below are the example: Query 1: POST /\_security/oauth2/token { "grant\_type": "refresh\_token", "refresh\_… --- ## [I'm trying to build new integration](https://discuss.elastic.co/t/im-trying-to-build-new-integration/349866)
**Author:** [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\ **Replies:** 9\ **Last updated:** [January 8, 2024, 8:17am UTC](https://discuss.elastic.co/t/im-trying-to-build-new-integration/349866 "2024-01-08T08:17:29Z")
hello, i'm trying to create new integration for collecting k6 metrics via rest api. I just don't understand how can i test my integration i mean i'm trying to connect k6 but idk how can i see it? is there a command for t… --- ## [Dashboards in ndjson format](https://discuss.elastic.co/t/dashboards-in-ndjson-format/349128)
**Author:** [@Jean\_BARBIER](https://discuss.elastic.co/u/Jean_BARBIER)\ **Replies:** 6\ **Last updated:** [January 8, 2024, 8:15am UTC](https://discuss.elastic.co/t/dashboards-in-ndjson-format/349128 "2024-01-08T08:15:21Z")
Hello, In the package auditbeat-oss-8.11.2-linux-x86\_64, the dashboards can be found, but they are in json format. Since kibana 7.3 the import format is ndjson. Is there a way to find them in ndjson format ? regards --- ## [Invalid NEST response built from a unsuccessful () low level call on POST: /logs-%2A/\_search?typed\_keys=true](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post-logs-2a-search-typed-keys-true/350452)
**Author:** [@Sunil\_Bisht](https://discuss.elastic.co/u/Sunil_Bisht)\ **Replies:** 3\ **Last updated:** [January 8, 2024, 8:09am UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post-logs-2a-search-typed-keys-true/350452 "2024-01-08T08:09:34Z")
\# Audit trail of this API call: - \[1\] ProductCheckOnStartup: Took: 00:00:03.0728820 - \[2\] ProductCheckFailure: Node: https://\*\*\*\*\*\*\*.aws.found.io:9243/ Took: 00:00:03.0531380 # OriginalException: Elasticsearch.Net.Ela… --- ## [Synthetics alerts and rules error](https://discuss.elastic.co/t/synthetics-alerts-and-rules-error/350108)
**Author:** [@jevonsnotes](https://discuss.elastic.co/u/jevonsnotes)\ **Replies:** 3\ **Last updated:** [January 8, 2024, 8:04am UTC](https://discuss.elastic.co/t/synthetics-alerts-and-rules-error/350108 "2024-01-08T08:04:05Z")
it occur an error when i click this Error Error: Cannot read properties of undefined (reading 'ui') at p (http://192.168.10.20:5601/68312/bundles/plugin/triggersActionsUi/1.0.0/triggersActionsUi.chunk.12.js:3:89… --- ## [Which installation is better for production](https://discuss.elastic.co/t/which-installation-is-better-for-production/350500)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 5\ **Last updated:** [January 8, 2024, 5:30am UTC](https://discuss.elastic.co/t/which-installation-is-better-for-production/350500 "2024-01-08T05:30:20Z")
hi, I want to run ELK 8.11 on production environment on oracle linux VMs, Which type of installation is preferred for production environment? RPM based or Archive based? Also, can we use another user apart from "root" … --- ## [In Docker can we use 2 Logstash push log in to one elastic seach?](https://discuss.elastic.co/t/in-docker-can-we-use-2-logstash-push-log-in-to-one-elastic-seach/350542)
**Author:** [@2\_3\_0\_8](https://discuss.elastic.co/u/2_3_0_8)\ **Replies:** 0\ **Last updated:** [January 8, 2024, 3:34am UTC](https://discuss.elastic.co/t/in-docker-can-we-use-2-logstash-push-log-in-to-one-elastic-seach/350542 "2024-01-08T03:34:35Z")
Hi I want to know it can make it ? In Docker can we use 2 or more Logstash push log in to one elastic seach in one VM? if i have many gateway api (1VM for 1 gateway) for my plane i need to use 1 VM to create many logst… --- ## [Use index to judge data,but not found](https://discuss.elastic.co/t/use-index-to-judge-data-but-not-found/350446)
**Author:** [@yunke\_yin](https://discuss.elastic.co/u/yunke_yin)\ **Replies:** 4\ **Last updated:** [January 8, 2024, 1:45am UTC](https://discuss.elastic.co/t/use-index-to-judge-data-but-not-found/350446 "2024-01-08T01:45:23Z")
please help me. I got many data of the same type. In some cases, the known data must exist, but I need to further confirm which index the data is under. I chose to judge in the following way, but cannot found then throw… --- ## [Changing an existing field type](https://discuss.elastic.co/t/changing-an-existing-field-type/350538)
**Author:** [@m4hjub](https://discuss.elastic.co/u/m4hjub)\ **Replies:** 2\ **Last updated:** [January 8, 2024, 1:12am UTC](https://discuss.elastic.co/t/changing-an-existing-field-type/350538 "2024-01-08T01:12:34Z")
Hello, I have a requirement to change a field type from String to float. What's the best method without reindexing? In the past we changed the field type, reindexed and had to wait for all the old index with old field t… --- ## [Slow ANN Hybrid search](https://discuss.elastic.co/t/slow-ann-hybrid-search/349837)
**Author:** [@steve\_lee](https://discuss.elastic.co/u/steve_lee)\ **Replies:** 5\ **Last updated:** [January 8, 2024, 12:42am UTC](https://discuss.elastic.co/t/slow-ann-hybrid-search/349837 "2024-01-08T00:42:35Z")
Hi, I have implemented vector hybrid search using ES dense\_vector field and KNN option in the search API. I have two index with vector field with 512 dimension embeddings (dot\_product). Each index have about 10 milli… --- ## [Elasticsearch shows float types as string in output](https://discuss.elastic.co/t/elasticsearch-shows-float-types-as-string-in-output/350535)
**Author:** [@Ata\_Zangene](https://discuss.elastic.co/u/Ata_Zangene)\ **Replies:** 2\ **Last updated:** [January 7, 2024, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-shows-float-types-as-string-in-output/350535 "2024-01-07T18:08:53Z")
I have a sample schema like this "coordinate": { "properties": { "geo": { "type": "geo\_point" }, "latitude": { "type": "float" }, "longitude": { "type": "float" … --- ## [Unable to create an enrollment token. Elasticsearch node HTTP layer SSL configuration is not configured with a keystore](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-is-not-configured-with-a-keystore/350527)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [January 7, 2024, 2:41pm UTC](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-is-not-configured-with-a-keystore/350527 "2024-01-07T14:41:13Z")
Hi Team, I am upgrading elasticsearch from 7.17.0 to 8.11 on ubuntu 22.04 I have completed elasticsearch installation and x-pack while I am creating token for cluster it is showing below error Error: Unable to create … --- ## [Drill down o kibana table based on field's value](https://discuss.elastic.co/t/drill-down-o-kibana-table-based-on-fields-value/349643)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [January 7, 2024, 10:21am UTC](https://discuss.elastic.co/t/drill-down-o-kibana-table-based-on-fields-value/349643 "2024-01-07T10:21:35Z")
I have a data table in my dashboard and the table is split based on a field whose values are names of different cities and table will show the count of different cities. Is it possible to drill down based on the city's n… --- ## [Custom UDP logs are only listening on ipv6](https://discuss.elastic.co/t/custom-udp-logs-are-only-listening-on-ipv6/350497)
**Author:** [@phirestalker](https://discuss.elastic.co/u/phirestalker)\ **Replies:** 7\ **Last updated:** [January 7, 2024, 7:06am UTC](https://discuss.elastic.co/t/custom-udp-logs-are-only-listening-on-ipv6/350497 "2024-01-07T07:06:00Z")
I set up some custom UDP port integrations. I noticed that a lot of logs were not coming in, so I did netstat on the host. It turns out that it is only listening on ipv6. How can I set it to listen on both or only ipv4? --- ## [Problem with loading dashboards - Data too large](https://discuss.elastic.co/t/problem-with-loading-dashboards-data-too-large/350437)
**Author:** [@PustyB](https://discuss.elastic.co/u/PustyB)\ **Replies:** 3\ **Last updated:** [January 7, 2024, 4:52am UTC](https://discuss.elastic.co/t/problem-with-loading-dashboards-data-too-large/350437 "2024-01-07T04:52:38Z")
I've been having a problem lately with my elastica stack that was installed on kubernetes. Well, when trying to visualize myself data in kiban when I select a longer period of time (more data) it pops up this error: Req… --- ## [Can you modify web scraper extraction rules for reserved field name: body\_content?](https://discuss.elastic.co/t/can-you-modify-web-scraper-extraction-rules-for-reserved-field-name-body-content/350513)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 0\ **Last updated:** [January 6, 2024, 4:21pm UTC](https://discuss.elastic.co/t/can-you-modify-web-scraper-extraction-rules-for-reserved-field-name-body-content/350513 "2024-01-06T16:21:27Z")
By default, body\_content grabs content that's irrelevant for my use case. Instead of creating a new field with custom extraction rules, I'd rather edit the rules for body\_content to avoid creating unused fields in my doc… --- ## [Don't see transactions for backend](https://discuss.elastic.co/t/dont-see-transactions-for-backend/350377)
**Author:** [@Andrii29](https://discuss.elastic.co/u/Andrii29)\ **Replies:** 1\ **Last updated:** [January 6, 2024, 12:48pm UTC](https://discuss.elastic.co/t/dont-see-transactions-for-backend/350377 "2024-01-06T12:48:16Z")
Hello, I am .NET developer at ASP NET Core project. My task is to connect my backend and frontend services to APM and see them in Kibana. I am using Elastic APM .NET Agent: . The project is using .NET 6. So the problem… [Previous page](https://discuss.elastic.co/latest.md?page=436) [Next page](https://discuss.elastic.co/latest.md?page=438)