# Latest

**URL:** https://discuss.elastic.co/latest.md?page=572

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 573

---

## [I have a problem with deployment of a dockerized Django/Elasticsearch website](https://discuss.elastic.co/t/i-have-a-problem-with-deployment-of-a-dockerized-django-elasticsearch-website/340828)

<div class="topic-metadata">

**Author:** [@Mostafa\_Mohamed](https://discuss.elastic.co/u/Mostafa_Mohamed)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 10:48am UTC](https://discuss.elastic.co/t/i-have-a-problem-with-deployment-of-a-dockerized-django-elasticsearch-website/340828 "2023-08-15T10:48:19Z")

</div>

I have a dockerized web application that contains 3 containers (Django/ PostgreSQL/Elasticsearch), The indices of the Elasticsearch are indexed depending on the Django database models using a library called Django-Elasti…

---

## [Erro ao executar o logstash](https://discuss.elastic.co/t/erro-ao-executar-o-logstash/340664)

<div class="topic-metadata">

**Author:** [@Gustavo](https://discuss.elastic.co/u/Gustavo)\
**Replies:** 14\
**Last updated:** [August 14, 2023, 6:24pm UTC](https://discuss.elastic.co/t/erro-ao-executar-o-logstash/340664 "2023-08-14T18:24:15Z")

</div>

This error persists and I don't know how to solve it anymore. Can someone help me. Follow my .conf files input { file { path =\> "C:/Elastic/logstash-8.9.0/config/logs.log" start\_position =\> "beginning" } } filter …

---

## [Can ILM policy be created on an existing set of indexes?](https://discuss.elastic.co/t/can-ilm-policy-be-created-on-an-existing-set-of-indexes/340809)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 12:42pm UTC](https://discuss.elastic.co/t/can-ilm-policy-be-created-on-an-existing-set-of-indexes/340809 "2023-08-15T12:42:39Z")

</div>

Currently, i am have a FluentD daemon writing app logs to Elasticsearch. The index names have the naming convention "logstash-(date)" e.g. logstash-2023-08-15. Is it possible to create an ILM policy that applies to thes…

---

## [Privileges to run Kibana rules manually](https://discuss.elastic.co/t/privileges-to-run-kibana-rules-manually/340718)

<div class="topic-metadata">

**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 12:42pm UTC](https://discuss.elastic.co/t/privileges-to-run-kibana-rules-manually/340718 "2023-08-15T12:42:16Z")

</div>

I've created a dedicated space for one of our development teams where they can create alert rules of type "Elasticsearch query" themselves. Therefore I also set up a role granting permissions for operating on those rules…

---

## [\_source field storage (\_source Field Overview)](https://discuss.elastic.co/t/source-field-storage-source-field-overview/340729)

<div class="topic-metadata">

**Author:** [@ksaimohan2k](https://discuss.elastic.co/u/ksaimohan2k)\
**Replies:** 8\
**Last updated:** [August 15, 2023, 11:47am UTC](https://discuss.elastic.co/t/source-field-storage-source-field-overview/340729 "2023-08-15T11:47:17Z")

</div>

Hello, We just want to have a clear understanding of the \_source field. Is it going to be indexed or stored? if it is stored where it is going to be stored. As an experiment, we disabled the \_source using PUT index\_nam…

---

## [How to automate search template creation?](https://discuss.elastic.co/t/how-to-automate-search-template-creation/338840)

<div class="topic-metadata">

**Author:** [@Prashant\_S](https://discuss.elastic.co/u/Prashant_S)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 9:41am UTC](https://discuss.elastic.co/t/how-to-automate-search-template-creation/338840 "2023-08-15T09:41:18Z")

</div>

I am using search templates. How to manage the versioning of my templates and execute them . I am exposing search templates via microservice backed by springboot . Thanks

---

## [Cannot stop winlogbeat service](https://discuss.elastic.co/t/cannot-stop-winlogbeat-service/340653)

<div class="topic-metadata">

**Author:** [@Ptak](https://discuss.elastic.co/u/Ptak)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 8:53am UTC](https://discuss.elastic.co/t/cannot-stop-winlogbeat-service/340653 "2023-08-15T08:53:01Z")

</div>

Hello all, I'm facing the following issue: I cannot stop the winlogbeat service either automatically or manually. The service can be stopped only after clicking "End Task" in the Task Manager. I did test the same Ansibl…

---

## [Ingesting Data using Agent (SQL Input Integration)](https://discuss.elastic.co/t/ingesting-data-using-agent-sql-input-integration/340820)

<div class="topic-metadata">

**Author:** [@ksaimohan2k](https://discuss.elastic.co/u/ksaimohan2k)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 8:58am UTC](https://discuss.elastic.co/t/ingesting-data-using-agent-sql-input-integration/340820 "2023-08-15T08:58:29Z")

</div>

We just tried to ingest SQL data into Elasticsearch using Agent (SQL Input Integration). What I observed is that it stores the same set of data repeatedly. For Example, if I have 5 rows in the SQL table, the first time…

---

## [HIBP integration](https://discuss.elastic.co/t/hibp-integration/340815)

<div class="topic-metadata">

**Author:** [@viera120](https://discuss.elastic.co/u/viera120)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 7:32am UTC](https://discuss.elastic.co/t/hibp-integration/340815 "2023-08-15T07:32:45Z")

</div>

What’s the recommended way to integrate “have I been pwnd” API into elastic? The idea here is to have an index with email IDs in it and to generate alerts based on API calls to HIBP…real time breach monitoring. Search …

---

## [ILM policies based on the age of records in an index](https://discuss.elastic.co/t/ilm-policies-based-on-the-age-of-records-in-an-index/340814)

<div class="topic-metadata">

**Author:** [@Zips6203](https://discuss.elastic.co/u/Zips6203)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 7:34am UTC](https://discuss.elastic.co/t/ilm-policies-based-on-the-age-of-records-in-an-index/340814 "2023-08-15T07:34:01Z")

</div>

Hello everyone, I wanted to discuss the possibility of an implementation with the help of ILM policies. I am currently storing application metrices (flat JSON) into an Elasticsearch index. Only the records that have be…

---

## [Issues connecting to JIRA account after source configuration](https://discuss.elastic.co/t/issues-connecting-to-jira-account-after-source-configuration/340808)

<div class="topic-metadata">

**Author:** [@gggra](https://discuss.elastic.co/u/gggra)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 6:20am UTC](https://discuss.elastic.co/t/issues-connecting-to-jira-account-after-source-configuration/340808 "2023-08-15T06:20:58Z")

</div>

I am facing the setup issue in workplace search setup. JIRA is not letting log in when selecting "Connect JIRA". It always display the page "Hmm... We're having trouble logging you in." Can anyone advise ? Thanks.

---

## [Remove obsolete fleet Server policies on the same host](https://discuss.elastic.co/t/remove-obsolete-fleet-server-policies-on-the-same-host/340804)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 4:11am UTC](https://discuss.elastic.co/t/remove-obsolete-fleet-server-policies-on-the-same-host/340804 "2023-08-15T04:11:51Z")

</div>

Hi, guess as i am still a new user my question might be "stupid". But give it a try. I have 3 entries in "fleet" for "fleet server policy" on the same host. Guessthis is due some problems setting it up. only one of th…

---

## [How to know where the Elastic Search Hits are coming from](https://discuss.elastic.co/t/how-to-know-where-the-elastic-search-hits-are-coming-from/340800)

<div class="topic-metadata">

**Author:** [@es2learn](https://discuss.elastic.co/u/es2learn)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 3:41am UTC](https://discuss.elastic.co/t/how-to-know-where-the-elastic-search-hits-are-coming-from/340800 "2023-08-15T03:41:16Z")

</div>

Is there any way to configure the Elasticsearch so that we get to know that the requests are coming from a service or kibana or external sources, API calls etc.,

---

## [Error pulling image configuration: download failed after attempts=6: net/http: TLS handshake timeout](https://discuss.elastic.co/t/error-pulling-image-configuration-download-failed-after-attempts-6-net-http-tls-handshake-timeout/339341)

<div class="topic-metadata">

**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\
**Replies:** 5\
**Last updated:** [August 15, 2023, 2:01am UTC](https://discuss.elastic.co/t/error-pulling-image-configuration-download-failed-after-attempts-6-net-http-tls-handshake-timeout/339341 "2023-08-15T02:01:25Z")

</div>

Running docker pull logstash:8.8.1 works but running docker pull docker.elastic.co/logstash/logstash:8.8.1 does not Is there a redirect on Elastic side that I'm missing, I've whitelisted a few but feel like I'm still mi…

---

## [Kibana - Security Pop Up](https://discuss.elastic.co/t/kibana-security-pop-up/340593)

<div class="topic-metadata">

**Author:** [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\
**Replies:** 3\
**Last updated:** [August 15, 2023, 12:41am UTC](https://discuss.elastic.co/t/kibana-security-pop-up/340593 "2023-08-15T00:41:53Z")

</div>

Hey Elastic Community team, I hope this message finds you well. I've been facing a recurring issue with the Kibana UI, specifically related to the persistent pop-up stating "Your data is not secure." Despite clicking th…

---

## [Elastic Cloud APM - agent configuration](https://discuss.elastic.co/t/elastic-cloud-apm-agent-configuration/340792)

<div class="topic-metadata">

**Author:** [@SaEd](https://discuss.elastic.co/u/SaEd)\
**Replies:** 0\
**Last updated:** [August 15, 2023, 12:38am UTC](https://discuss.elastic.co/t/elastic-cloud-apm-agent-configuration/340792 "2023-08-15T00:38:45Z")

</div>

Hello, I'm trying to debug an issue we see in production where the server the elastic agent is running on seem to freeze. During this period all windows services stop responding and admins lose the ability to login forc…

---

## [Kibana URL Drilldown {{rison context.panel.filters}}](https://discuss.elastic.co/t/kibana-url-drilldown-rison-context-panel-filters/340787)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 10:42pm UTC](https://discuss.elastic.co/t/kibana-url-drilldown-rison-context-panel-filters/340787 "2023-08-14T22:42:08Z")

</div>

My experience with the Go To Dashboard has worked flawlessly. But now I need to venture into Go to URL so I can pass in additional variables into the URL like embed=true & auth\_provider\_hint=anonymous1 My issue is with …

---

## [Password reset require for elasticsearch 7.17.7](https://discuss.elastic.co/t/password-reset-require-for-elasticsearch-7-17-7/340780)

<div class="topic-metadata">

**Author:** [@sohag](https://discuss.elastic.co/u/sohag)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 10:19pm UTC](https://discuss.elastic.co/t/password-reset-require-for-elasticsearch-7-17-7/340780 "2023-08-14T22:19:39Z")

</div>

Hi Please help me to resolve the below issue. I lost my Elasticsearch password of user elastic . Now i am trying to reset the password but error is like below- curl -XPOST "http://localhost:9200/\_security/user/ela…

---

## [Inconsistent Autocomplete Suggestions in Kibana Dashboard Filter/Control](https://discuss.elastic.co/t/inconsistent-autocomplete-suggestions-in-kibana-dashboard-filter-control/340781)

<div class="topic-metadata">

**Author:** [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 9:28pm UTC](https://discuss.elastic.co/t/inconsistent-autocomplete-suggestions-in-kibana-dashboard-filter-control/340781 "2023-08-14T21:28:58Z")

</div>

Hello Elastic Community Team, I'm currently working on a Kibana dashboard and have encountered an issue with the autocomplete suggestions in one of the dashboard's filter/controls. The problem is that while selecting t…

---

## [Painless Script runtime error: dynamic method \[java.util.ArrayList, entrySet/0\] not found](https://discuss.elastic.co/t/painless-script-runtime-error-dynamic-method-java-util-arraylist-entryset-0-not-found/340775)

<div class="topic-metadata">

**Author:** [@Anni](https://discuss.elastic.co/u/Anni)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 7:26pm UTC](https://discuss.elastic.co/t/painless-script-runtime-error-dynamic-method-java-util-arraylist-entryset-0-not-found/340775 "2023-08-14T19:26:45Z")

</div>

I am getting "dynamic method \[java.util.ArrayList, entrySet/0\] not found" error while running the painless script in watchers. Here is the simplified version of the code. I tried to recreate the issue in dev tools but I…

---

## [Help with visualizations, multiple indexes, and a common field](https://discuss.elastic.co/t/help-with-visualizations-multiple-indexes-and-a-common-field/340753)

<div class="topic-metadata">

**Author:** [@icsy7867](https://discuss.elastic.co/u/icsy7867)\
**Replies:** 6\
**Last updated:** [August 14, 2023, 5:58pm UTC](https://discuss.elastic.co/t/help-with-visualizations-multiple-indexes-and-a-common-field/340753 "2023-08-14T17:58:58Z")

</div>

I am having some confusion on how to properly do this. Most of my "database" experience comes from relational databases. So my mind immediately goes to inner/outer joins, which I know is not applicable here. I have re…

---

## [Using NGINX as a Load Balancer](https://discuss.elastic.co/t/using-nginx-as-a-load-balancer/340773)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 4:33pm UTC](https://discuss.elastic.co/t/using-nginx-as-a-load-balancer/340773 "2023-08-14T16:33:03Z")

</div>

I created an Elasticsearch Cluster with 3 Elasticsearch nodes. All nodes are of type master. They are configured to maintain high availability, one node receives data and replicates it to the other two. For load balanc…

---

## [EQL date difference function](https://discuss.elastic.co/t/eql-date-difference-function/339420)

<div class="topic-metadata">

**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 4:30pm UTC](https://discuss.elastic.co/t/eql-date-difference-function/339420 "2023-08-14T16:30:27Z")

</div>

Is there a way how to get diff of two dates in EQL? I checked the EQL functions docs, but neither subtract() nor number() seem to work on datetime fields. I know I can probably achieve what I need with ingest pipeline or…

---

## [Kibana map point-to-point connection](https://discuss.elastic.co/t/kibana-map-point-to-point-connection/340772)

<div class="topic-metadata">

**Author:** [@Hannah\_Zhang](https://discuss.elastic.co/u/Hannah_Zhang)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 4:30pm UTC](https://discuss.elastic.co/t/kibana-map-point-to-point-connection/340772 "2023-08-14T16:30:04Z")

</div>

Kibana guide states that "A point-to-point connection plots aggregated data paths between the source and the destination. Thicker, darker lines symbolize more connections between a source and destination, and thinner, li…

---

## [Registering Wasabi as Snapshot repository for ECE cluster](https://discuss.elastic.co/t/registering-wasabi-as-snapshot-repository-for-ece-cluster/339297)

<div class="topic-metadata">

**Author:** [@kkumari](https://discuss.elastic.co/u/kkumari)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 3:47pm UTC](https://discuss.elastic.co/t/registering-wasabi-as-snapshot-repository-for-ece-cluster/339297 "2023-08-14T15:47:04Z")

</div>

How do I register Wasabi as Snapshot repository for my ECE cluster?

---

## [Rollup vs Transform](https://discuss.elastic.co/t/rollup-vs-transform/340537)

<div class="topic-metadata">

**Author:** [@ajitesh](https://discuss.elastic.co/u/ajitesh)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 3:23pm UTC](https://discuss.elastic.co/t/rollup-vs-transform/340537 "2023-08-14T15:23:09Z")

</div>

I have a use case where I have a nested aggregation query, now I want to ingest the data for all the aggregation results into a new index. I was going through the Elasticsearch documents and found out that Aggregation do…

---

## [Stability issues when uploading Databricks tables to Elasticsearch indices (circuit\_breaking\_exception)](https://discuss.elastic.co/t/stability-issues-when-uploading-databricks-tables-to-elasticsearch-indices-circuit-breaking-exception/340637)

<div class="topic-metadata">

**Author:** [@landlord\_matt](https://discuss.elastic.co/u/landlord_matt)\
**Replies:** 6\
**Last updated:** [August 14, 2023, 3:00pm UTC](https://discuss.elastic.co/t/stability-issues-when-uploading-databricks-tables-to-elasticsearch-indices-circuit-breaking-exception/340637 "2023-08-14T15:00:11Z")

</div>

Hi! We recently got switched from a large (8 node, 21 GB JVM heap memory) cluster to a smaller (3 node, 9 GB JVM heap memory) cluster and now we getting errors while trying to reupload our Elasticsearch indices. It occa…

---

## [Multi\_search with fuzziness](https://discuss.elastic.co/t/multi-search-with-fuzziness/340765)

<div class="topic-metadata">

**Author:** [@LUCAS\_CARVALHO\_GOMES](https://discuss.elastic.co/u/LUCAS_CARVALHO_GOMES)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 2:54pm UTC](https://discuss.elastic.co/t/multi-search-with-fuzziness/340765 "2023-08-14T14:54:31Z")

</div>

Hi guys. I'm new to Elastic, so my question may sound dull, but here we go. I'm trying to make a query that searches for a phrase in different fields. I'm aware that the fuzziness param doesn't work for phrases (test p…

---

## [Is it possible to add multiple clusters for elastic agents?](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-clusters-for-elastic-agents/340762)

<div class="topic-metadata">

**Author:** [@burhankaraman](https://discuss.elastic.co/u/burhankaraman)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 2:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-clusters-for-elastic-agents/340762 "2023-08-14T14:26:45Z")

</div>

We have 2 elasticsearch clusters 3 elasticsearch nodes each. Both clusters have bi-directional cross-cluster replication with each other. If the first cluster goes down is there a way for elastic agent to automatically s…

---

## [Create Helmcharts for Metricbeats](https://discuss.elastic.co/t/create-helmcharts-for-metricbeats/340761)

<div class="topic-metadata">

**Author:** [@jhmcd2](https://discuss.elastic.co/u/jhmcd2)\
**Replies:** 0\
**Last updated:** [August 14, 2023, 2:21pm UTC](https://discuss.elastic.co/t/create-helmcharts-for-metricbeats/340761 "2023-08-14T14:21:55Z")

</div>

Hello. I have a bit of a problem. I need to be able to create a set of Helm charts for Metricbeat and Packetbeat. Now, that is easy, I am mainly using Kompose to convert the docker-compose.yml file over. However, in b…

[Previous page](https://discuss.elastic.co/latest.md?page=571)

[Next page](https://discuss.elastic.co/latest.md?page=573)
