# Latest

**URL:** https://discuss.elastic.co/latest.md?page=788

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 789

---

## [Need help for RUM configuration for Angular 1.13](https://discuss.elastic.co/t/need-help-for-rum-configuration-for-angular-1-13/324535)

<div class="topic-metadata">

**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\
**Replies:** 11\
**Last updated:** [February 10, 2023, 12:09am UTC](https://discuss.elastic.co/t/need-help-for-rum-configuration-for-angular-1-13/324535 "2023-02-10T00:09:33Z")

</div>

Hi @basepi & @lwintergerst , Need help on how to configure RUM for AngularJS 1.13 ? Thanks, Dixit

---

## [Elastic Observalibility](https://discuss.elastic.co/t/elastic-observalibility/325095)

<div class="topic-metadata">

**Author:** [@Nakee\_Panpi](https://discuss.elastic.co/u/Nakee_Panpi)\
**Replies:** 2\
**Last updated:** [February 10, 2023, 2:35am UTC](https://discuss.elastic.co/t/elastic-observalibility/325095 "2023-02-10T02:35:13Z")

</div>

I need you guy to help explain me. how could i add fleed server with localhost machine, if can , please guide me to install fleed server with it.

---

## [APM Server upgradation to 7.17.6 is consuming more resources](https://discuss.elastic.co/t/apm-server-upgradation-to-7-17-6-is-consuming-more-resources/319266)

<div class="topic-metadata">

**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\
**Replies:** 17\
**Last updated:** [February 10, 2023, 1:47am UTC](https://discuss.elastic.co/t/apm-server-upgradation-to-7-17-6-is-consuming-more-resources/319266 "2023-02-10T01:47:53Z")

</div>

Hi Elastic Fans... I am in the process of upgrading ElasticAPMServer from 7.14.2 to 7.17.6 Things were working as expected in 7.14.2. To avoid vulnerability checks, we upgraded to 7.16.6 APMServer is managed by operat…

---

## [Create an index with 0 replicas using terraform](https://discuss.elastic.co/t/create-an-index-with-0-replicas-using-terraform/324707)

<div class="topic-metadata">

**Author:** [@james-world](https://discuss.elastic.co/u/james-world)\
**Replies:** 2\
**Last updated:** [February 9, 2023, 11:42pm UTC](https://discuss.elastic.co/t/create-an-index-with-0-replicas-using-terraform/324707 "2023-02-09T23:42:26Z")

</div>

I am trying to use the latest terraform provider, currently 0.5.0 to create an index with no replicas into an existing Azure managed deployment. I can successfully create the index, but I always get 1 replica, even thou…

---

## [Filebeat kafka input message is incomplete and full of Unicode characters](https://discuss.elastic.co/t/filebeat-kafka-input-message-is-incomplete-and-full-of-unicode-characters/324139)

<div class="topic-metadata">

**Author:** [@gfar72](https://discuss.elastic.co/u/gfar72)\
**Replies:** 1\
**Last updated:** [February 9, 2023, 11:19pm UTC](https://discuss.elastic.co/t/filebeat-kafka-input-message-is-incomplete-and-full-of-unicode-characters/324139 "2023-02-09T23:19:18Z")

</div>

Hi Forum We have a filebeat instance that uses the kafka input to read from a topic. The instance is able to connect to the topic, but the output of the "message" key is incomplete, and full of Unicode characters see t…

---

## ["missing authentication credentials for REST request \[/\]"](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/325177)

<div class="topic-metadata">

**Author:** [@vijaybala](https://discuss.elastic.co/u/vijaybala)\
**Replies:** 1\
**Last updated:** [February 9, 2023, 10:48pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/325177 "2023-02-09T22:48:36Z")

</div>

Hi, I'm new to ELK Stack .I'm using 8.6.1 I have configured elasticsearch and kibana, and failed to configure logstash. After shutting down the system and running elasticsearch.bat, and connection to the local port it is…

---

## [Kibana new metric visualization too small and doesn't show full value](https://discuss.elastic.co/t/kibana-new-metric-visualization-too-small-and-doesnt-show-full-value/325077)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 7\
**Last updated:** [February 9, 2023, 10:19pm UTC](https://discuss.elastic.co/t/kibana-new-metric-visualization-too-small-and-doesnt-show-full-value/325077 "2023-02-09T22:19:56Z")

</div>

Hello, I'm currently on version 8.5.1 and can't updated at the moment, I'm trying to creat a dashboard showing some metrics and decided to use the Metric visualization instead of the old Legacy Visualization, but I have…

---

## [Elasticsearch service does not start on Windows](https://discuss.elastic.co/t/elasticsearch-service-does-not-start-on-windows/325165)

<div class="topic-metadata">

**Author:** [@ludovic.denee](https://discuss.elastic.co/u/ludovic.denee)\
**Replies:** 1\
**Last updated:** [February 9, 2023, 9:42pm UTC](https://discuss.elastic.co/t/elasticsearch-service-does-not-start-on-windows/325165 "2023-02-09T21:42:28Z")

</div>

Hi all, In the context of an upgrade of Azure DevOps Server from 2020 to 2022, I needed to upgrade the ES service. from 6 to 7. Update is ok but impossible to start the service. I tried to uninstall and reinstall the …

---

## [Logstash to Elasticsearch connection](https://discuss.elastic.co/t/logstash-to-elasticsearch-connection/325198)

<div class="topic-metadata">

**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 9:39pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-connection/325198 "2023-02-09T21:39:17Z")

</div>

Hello! I have filebeat running on 192.168.035 and ELK on 192.168.0.36 (name of the remote server is not good - " logstash" which can be confusing) I'm runnnig filebeat -e -c filebeat.yml -d "publish" using logstash…

---

## [Changing date format through Logstash](https://discuss.elastic.co/t/changing-date-format-through-logstash/325061)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 4\
**Last updated:** [February 9, 2023, 9:39pm UTC](https://discuss.elastic.co/t/changing-date-format-through-logstash/325061 "2023-02-09T21:39:16Z")

</div>

Hello. We are getting feed from Kafka topic. One of the fields rdt appears in the following format: I need to change the date format to YYYY-MM-dd This was added in the logstash conf file: if "KafkCollect" in …

---

## [Runtime field query performance](https://discuss.elastic.co/t/runtime-field-query-performance/325193)

<div class="topic-metadata">

**Author:** [@vlasami](https://discuss.elastic.co/u/vlasami)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 8:38pm UTC](https://discuss.elastic.co/t/runtime-field-query-performance/325193 "2023-02-09T20:38:27Z")

</div>

Hi, We're evaluating the use runtime fields vs indexed fields (keyword). We have an object field (let's call it X) under which we can have arbitrary amount of fields. Unfortunately we cannot control the sending party, …

---

## [Http filter in Logstash](https://discuss.elastic.co/t/http-filter-in-logstash/325146)

<div class="topic-metadata">

**Author:** [@manikanta](https://discuss.elastic.co/u/manikanta)\
**Replies:** 2\
**Last updated:** [February 9, 2023, 8:28pm UTC](https://discuss.elastic.co/t/http-filter-in-logstash/325146 "2023-02-09T20:28:42Z")

</div>

hey I want to know how to pass a filters output as request body to http filter I am trying to pass output of mutate filter as body to http filter. mutate { remove\_field =\> \[ "@timestamp", "@version"\] } …

---

## [Unable to add multiple hostname while configuring CPU and Memory Alerts](https://discuss.elastic.co/t/unable-to-add-multiple-hostname-while-configuring-cpu-and-memory-alerts/325189)

<div class="topic-metadata">

**Author:** [@soumya201](https://discuss.elastic.co/u/soumya201)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 7:35pm UTC](https://discuss.elastic.co/t/unable-to-add-multiple-hostname-while-configuring-cpu-and-memory-alerts/325189 "2023-02-09T19:35:05Z")

</div>

---

## [Need to know ways of controlling the write to storage account for event hub access](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/325179)

<div class="topic-metadata">

**Author:** [@karthik\_Ravichandran](https://discuss.elastic.co/u/karthik_Ravichandran)\
**Replies:** 2\
**Last updated:** [February 9, 2023, 6:27pm UTC](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/325179 "2023-02-09T18:27:56Z")

</div>

since its writing every 5 seconds from azure event hub to storage , its causing more cost utilization , instead we want to make it delay so that we can reduce the cost of ingesting the events , we are not having any iss…

---

## [Unable to connect logstash 8.6.1 to elastic 6.8.23 with SSL](https://discuss.elastic.co/t/unable-to-connect-logstash-8-6-1-to-elastic-6-8-23-with-ssl/324932)

<div class="topic-metadata">

**Author:** [@Patrick\_Lacson](https://discuss.elastic.co/u/Patrick_Lacson)\
**Replies:** 7\
**Last updated:** [February 9, 2023, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-connect-logstash-8-6-1-to-elastic-6-8-23-with-ssl/324932 "2023-02-09T18:21:06Z")

</div>

I'm able to connect to elasticsearch 6.8.23 with logstash 8.6.1 but when I connect to an SSL enabled elasticsearch (using signed CERTS), I get the 503 error unable to connect. My output config looks like this: It works…

---

## [Show dynamic trend values in Dashboard](https://discuss.elastic.co/t/show-dynamic-trend-values-in-dashboard/325182)

<div class="topic-metadata">

**Author:** [@beijo](https://discuss.elastic.co/u/beijo)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 5:28pm UTC](https://discuss.elastic.co/t/show-dynamic-trend-values-in-dashboard/325182 "2023-02-09T17:28:18Z")

</div>

Hi all, I have documents which include a count field (numbers). I want to implement a dashboard, in which based on the selected timerange, the difference of the first document's count value and the last documents count …

---

## [Elastic agent packet beat integration crash windows](https://discuss.elastic.co/t/elastic-agent-packet-beat-integration-crash-windows/325169)

<div class="topic-metadata">

**Author:** [@lordtmk](https://discuss.elastic.co/u/lordtmk)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 4:02pm UTC](https://discuss.elastic.co/t/elastic-agent-packet-beat-integration-crash-windows/325169 "2023-02-09T16:02:54Z")

</div>

Hello, I tried to add Packet Capture Integration to a Windows Elastic Agent but packetbeat keeps crashing and dont send no logs. I'm in self managed mode with dedicated fleet server. Every other beat or integration wor…

---

## [Update by query with Logstash http output message](https://discuss.elastic.co/t/update-by-query-with-logstash-http-output-message/325180)

<div class="topic-metadata">

**Author:** [@Carlitoz](https://discuss.elastic.co/u/Carlitoz)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 4:56pm UTC](https://discuss.elastic.co/t/update-by-query-with-logstash-http-output-message/325180 "2023-02-09T16:56:04Z")

</div>

I am using Logstash to update by query existing Elasticsearch documents with an additional field that contains aggregate values extracted from Potgresql table. I use elastichsearch output to load one index using document…

---

## [Prefer matching search text in beginning of result using elasticsearch in ElasticSearch Match Query](https://discuss.elastic.co/t/prefer-matching-search-text-in-beginning-of-result-using-elasticsearch-in-elasticsearch-match-query/325178)

<div class="topic-metadata">

**Author:** [@pavel4008](https://discuss.elastic.co/u/pavel4008)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 4:44pm UTC](https://discuss.elastic.co/t/prefer-matching-search-text-in-beginning-of-result-using-elasticsearch-in-elasticsearch-match-query/325178 "2023-02-09T16:44:22Z")

</div>

I have a query and sometimes I can't get to return the most relevant answer: GET /items2/\_search { "query": { "match": { "description": { "query": "query\_value", "fuzzines…

---

## [How is filter processed in query/fetch phases?](https://discuss.elastic.co/t/how-is-filter-processed-in-query-fetch-phases/325174)

<div class="topic-metadata">

**Author:** [@Robin\_Zimmerman](https://discuss.elastic.co/u/Robin_Zimmerman)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 4:18pm UTC](https://discuss.elastic.co/t/how-is-filter-processed-in-query-fetch-phases/325174 "2023-02-09T16:18:05Z")

</div>

I'm trying to understand how a filter is processed by the cluster. In particular, I have a metric that gives me the average time queries spend in the "query phase", and using the "took" time I can get an understanding of…

---

## [Query get documents by giving an array of document ids same order of array](https://discuss.elastic.co/t/query-get-documents-by-giving-an-array-of-document-ids-same-order-of-array/325172)

<div class="topic-metadata">

**Author:** [@Guillaume23](https://discuss.elastic.co/u/Guillaume23)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 4:14pm UTC](https://discuss.elastic.co/t/query-get-documents-by-giving-an-array-of-document-ids-same-order-of-array/325172 "2023-02-09T16:14:42Z")

</div>

Hi, I am a beginner with Elasticsearch and my application is using it for monitoring and search engine.I am currently using ES 5.6.4. I would like to know if it's possible to get documents by giving an array of documen…

---

## [\[bool\] failed to parse field \[filter\]"](https://discuss.elastic.co/t/bool-failed-to-parse-field-filter/325131)

<div class="topic-metadata">

**Author:** [@Test\_Acc](https://discuss.elastic.co/u/Test_Acc)\
**Replies:** 1\
**Last updated:** [February 9, 2023, 3:42pm UTC](https://discuss.elastic.co/t/bool-failed-to-parse-field-filter/325131 "2023-02-09T15:42:37Z")

</div>

Hi i am pretty new to kibana and elastisearch, we upgraded from kibana/elastisearch 7.16.3 to 8.5.2 and since then the dashboard has been less than friendly here is a error that has stumped us ///////////////////////…

---

## [Select all facets](https://discuss.elastic.co/t/select-all-facets/325149)

<div class="topic-metadata">

**Author:** [@athiraaravindan](https://discuss.elastic.co/u/athiraaravindan)\
**Replies:** 4\
**Last updated:** [February 9, 2023, 3:40pm UTC](https://discuss.elastic.co/t/select-all-facets/325149 "2023-02-09T15:40:20Z")

</div>

how can a select all facets values on a page load using the config

---

## [Initializing ELK stack in production environment (AWS EC2)](https://discuss.elastic.co/t/initializing-elk-stack-in-production-environment-aws-ec2/325160)

<div class="topic-metadata">

**Author:** [@st3fus](https://discuss.elastic.co/u/st3fus)\
**Replies:** 0\
**Last updated:** [February 9, 2023, 3:11pm UTC](https://discuss.elastic.co/t/initializing-elk-stack-in-production-environment-aws-ec2/325160 "2023-02-09T15:11:23Z")

</div>

Hey there, just have a general question about initializing ELK stack, I'm launching it with docker, following deviantony/docker-elk guide and his repository. I'm just wondering should i change '0.0.0.0' values for hosts …

---

## [How to completely uninstall ELK?](https://discuss.elastic.co/t/how-to-completely-uninstall-elk/325112)

<div class="topic-metadata">

**Author:** [@usr4](https://discuss.elastic.co/u/usr4)\
**Replies:** 3\
**Last updated:** [February 9, 2023, 2:56pm UTC](https://discuss.elastic.co/t/how-to-completely-uninstall-elk/325112 "2023-02-09T14:56:41Z")

</div>

Hi everyone, I hastily installed ELK and x-pack on a Mac many years ago, the version is 5.6.3. I forgot how it was installed in the first place, now I wanted to uninstall them all clean and install a different version …

---

## [Unable to start APM Java Agent in WAS K8s pods](https://discuss.elastic.co/t/unable-to-start-apm-java-agent-in-was-k8s-pods/323203)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 7\
**Last updated:** [February 9, 2023, 2:52pm UTC](https://discuss.elastic.co/t/unable-to-start-apm-java-agent-in-was-k8s-pods/323203 "2023-02-09T14:52:56Z")

</div>

Kibana version: 8.5.2 Elasticsearch version: 8.5.2 APM Server version: 7.13.0 APM Agent language and version: apm-agent-java:1.12.0 Browser version: Original install method (e.g. download page, yum, deb, from source…

---

## [Can I use grok patterns inside of transform for a watcher?](https://discuss.elastic.co/t/can-i-use-grok-patterns-inside-of-transform-for-a-watcher/325063)

<div class="topic-metadata">

**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\
**Replies:** 3\
**Last updated:** [February 9, 2023, 2:51pm UTC](https://discuss.elastic.co/t/can-i-use-grok-patterns-inside-of-transform-for-a-watcher/325063 "2023-02-09T14:51:36Z")

</div>

I got this transform for a watcher, and it's failing at the "grok" point: "transform": { "script": { "source": """ def finalMessage = "A new workset has been created in a Revit model. \\\\n\\\\n"…

---

## [Index to file (.json)](https://discuss.elastic.co/t/index-to-file-json/324683)

<div class="topic-metadata">

**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\
**Replies:** 2\
**Last updated:** [February 9, 2023, 2:50pm UTC](https://discuss.elastic.co/t/index-to-file-json/324683 "2023-02-09T14:50:53Z")

</div>

Hi, I have a running Elastic node with an index. I'm constantly inserting documents into the index in a process that I can't stop. I need to 'export' the index to a file (e.g., a .json). I've check alternatives to do th…

---

## [Replacing Self-Signed Certificates with Corporate CA Certificates](https://discuss.elastic.co/t/replacing-self-signed-certificates-with-corporate-ca-certificates/324140)

<div class="topic-metadata">

**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\
**Replies:** 6\
**Last updated:** [February 9, 2023, 2:23pm UTC](https://discuss.elastic.co/t/replacing-self-signed-certificates-with-corporate-ca-certificates/324140 "2023-02-09T14:23:21Z")

</div>

I am working on changing over the certificates used for communication between elasticsearch nodes, and for communication between other applications and elasticsearch, from self-signed certificates generated by elasticsea…

---

## [How to use boxplot buckets for plotly?](https://discuss.elastic.co/t/how-to-use-boxplot-buckets-for-plotly/325148)

<div class="topic-metadata">

**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\
**Replies:** 1\
**Last updated:** [February 9, 2023, 2:16pm UTC](https://discuss.elastic.co/t/how-to-use-boxplot-buckets-for-plotly/325148 "2023-02-09T14:16:02Z")

</div>

I want to create a boxplot graph using plotly.js and elasticsearch. Elasticsearch has an inbuild boxplot aggregation that returns this for each trace: { "aggregations": { "load\_time\_boxplot": { "min": 0.0, …

[Previous page](https://discuss.elastic.co/latest.md?page=787)

[Next page](https://discuss.elastic.co/latest.md?page=789)
