# Latest **URL:** https://discuss.elastic.co/latest.md?page=790 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 791 --- ## [Query multiple conditions of an array property](https://discuss.elastic.co/t/query-multiple-conditions-of-an-array-property/325068)
**Author:** [@thomas.schroeder](https://discuss.elastic.co/u/thomas.schroeder)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 10:40pm UTC](https://discuss.elastic.co/t/query-multiple-conditions-of-an-array-property/325068 "2023-02-08T22:40:42Z")
Hey everyone, I have a document which describes when an entry was/is valid. The entry can be valid for multiple time periods but these can never overlap. Now I want to query only documents which have been changed it's a… --- ## [Connector error](https://discuss.elastic.co/t/connector-error/325062)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 2\ **Last updated:** [February 8, 2023, 9:52pm UTC](https://discuss.elastic.co/t/connector-error/325062 "2023-02-08T21:52:31Z")
Hi! I get this error: "\[DEPTH\_ZERO\_SELF\_SIGNED\_CERT\] self signed certificate" on local Elastic Stack infrastructure when I want to use a connector with "https" address. Any help, please? --- ## [Failed to connect to backoff(elasticsearch(http://localhost:9200))](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/325065)
**Author:** [@fnbk](https://discuss.elastic.co/u/fnbk)\ **Replies:** 1\ **Last updated:** [February 8, 2023, 9:27pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-localhost-9200/325065 "2023-02-08T21:27:53Z")
I setup Elasticsearch version 8.6.1 the default way which generates self signed certificates so that the Elasticsearch endpoint uses https (https://localhost:9200). I installed the elastic-agent as a windows service usi… --- ## [How do I setup APM all on one machine?](https://discuss.elastic.co/t/how-do-i-setup-apm-all-on-one-machine/324922)
**Author:** [@fnbk](https://discuss.elastic.co/u/fnbk)\ **Replies:** 4\ **Last updated:** [February 8, 2023, 9:26pm UTC](https://discuss.elastic.co/t/how-do-i-setup-apm-all-on-one-machine/324922 "2023-02-08T21:26:48Z")
I would like to have my application and the observability tools (logging, tracing, monitoring) installed all on one machine. But with the current ELK stack (8.6.1) with APM integration does not seem to support this. Is … --- ## [Changed field in filebeat but not working in logstash](https://discuss.elastic.co/t/changed-field-in-filebeat-but-not-working-in-logstash/324925)
**Author:** [@yc99](https://discuss.elastic.co/u/yc99)\ **Replies:** 1\ **Last updated:** [February 8, 2023, 9:16pm UTC](https://discuss.elastic.co/t/changed-field-in-filebeat-but-not-working-in-logstash/324925 "2023-02-08T21:16:42Z")
I changed the source from access to admin and restarted the filebeat service, when I use grok to filter only the admin source, it is empty, but if using grok to filter only the access, it working. It should be source adm… --- ## [ELK Migartion to 8x](https://discuss.elastic.co/t/elk-migartion-to-8x/324539)
**Author:** [@p\_vimal](https://discuss.elastic.co/u/p_vimal)\ **Replies:** 1\ **Last updated:** [February 8, 2023, 8:26pm UTC](https://discuss.elastic.co/t/elk-migartion-to-8x/324539 "2023-02-08T20:26:48Z")
Hello, Current ELK stack version details: Elasticsearch: 7.17.8 Kibana: 7.17.8 Logstash: 7.17.8 Could you please help me out with the steps for upgrading ELK stack into multi-tier architecture cluster when we upgra… --- ## [Can't Add Terms Query to a Search Template](https://discuss.elastic.co/t/cant-add-terms-query-to-a-search-template/325038)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 3\ **Last updated:** [February 8, 2023, 8:37pm UTC](https://discuss.elastic.co/t/cant-add-terms-query-to-a-search-template/325038 "2023-02-08T20:37:31Z")
I have started work on a search template and hit a snag when trying to add a terms query to the template. Here is the template definition: POST \_scripts/establishments\_search { "script": { "lang": "mustache", … --- ## [Redis Module Connection By using Different User rather than redis default user](https://discuss.elastic.co/t/redis-module-connection-by-using-different-user-rather-than-redis-default-user/323410)
**Author:** [@Gopal\_Nipane](https://discuss.elastic.co/u/Gopal_Nipane)\ **Replies:** 1\ **Last updated:** [February 8, 2023, 8:06pm UTC](https://discuss.elastic.co/t/redis-module-connection-by-using-different-user-rather-than-redis-default-user/323410 "2023-02-08T20:06:16Z")
Can we mention username in metricbeat redis module ie. /etc/metricbeat/modules.d/redis.yml? I tried two approches to add username in module.hosts field: hosts: \["redis://username:password@localhost:6379"\] in modu… --- ## [Append elements to array avoiding duplicates](https://discuss.elastic.co/t/append-elements-to-array-avoiding-duplicates/325059)
**Author:** [@Sergio\_Serra](https://discuss.elastic.co/u/Sergio_Serra)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 7:35pm UTC](https://discuss.elastic.co/t/append-elements-to-array-avoiding-duplicates/325059 "2023-02-08T19:35:55Z")
Hello everyone, Is there a performant way to append elements to an array avoiding duplicates basically making it work like a Set instead of a List ? This is the script i'm using, but this will duplicate entries in the … --- ## [JDBC Pipeline Log data question](https://discuss.elastic.co/t/jdbc-pipeline-log-data-question/325058)
**Author:** [@nbrenke](https://discuss.elastic.co/u/nbrenke)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 7:34pm UTC](https://discuss.elastic.co/t/jdbc-pipeline-log-data-question/325058 "2023-02-08T19:34:56Z")
I have several pipelines that run on a timed basis. They are all JDBC pipelines that ingest data from a SQL database. I am looking to see if it's possible to have the output to the logs state the time the ingest starte… --- ## [There are two types of Flattened Field Types, is that correct?](https://discuss.elastic.co/t/there-are-two-types-of-flattened-field-types-is-that-correct/325057)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 7:34pm UTC](https://discuss.elastic.co/t/there-are-two-types-of-flattened-field-types-is-that-correct/325057 "2023-02-08T19:34:33Z")
I am learning about Flattened Field Types for index mappings. Can someone confirm if my findings are correct? There are two types of flattened field types. 1. Explicitly Flattened Field Types - This documentation is a… --- ## [Understand kubernetes monitoring best practices](https://discuss.elastic.co/t/understand-kubernetes-monitoring-best-practices/325054)
**Author:** [@Bahubali\_Shetti](https://discuss.elastic.co/u/Bahubali_Shetti)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 7:29pm UTC](https://discuss.elastic.co/t/understand-kubernetes-monitoring-best-practices/325054 "2023-02-08T19:29:53Z")
Great overview on what K8S Monitoring/Observability means and some best practices --- ## [How to fetch out the array values](https://discuss.elastic.co/t/how-to-fetch-out-the-array-values/325001)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 6\ **Last updated:** [February 8, 2023, 6:01pm UTC](https://discuss.elastic.co/t/how-to-fetch-out-the-array-values/325001 "2023-02-08T18:01:49Z")
Hi, I have below sample data { "logtype":"demo" ,"operation":"demoStatus", "Stats":\[ { "apiName":"a", "failedCount":0, "successCount":0 }, { "apiName":"b", "failedCount":0, "… --- ## [For Java APM, is the STW time (Garbage Collector) taken into account in the latency measurement?](https://discuss.elastic.co/t/for-java-apm-is-the-stw-time-garbage-collector-taken-into-account-in-the-latency-measurement/325043)
**Author:** [@netamego](https://discuss.elastic.co/u/netamego)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 4:16pm UTC](https://discuss.elastic.co/t/for-java-apm-is-the-stw-time-garbage-collector-taken-into-account-in-the-latency-measurement/325043 "2023-02-08T16:16:21Z")
Hi, We have java APM instrumenting our production workload. In kibana we have latency graph (inside Transactions dashboard) and I don't know if this latency meassuremente take in account Java STW time (Garbage Collector… --- ## [Question for Logging Cluster - is 3master, 2data node is good?](https://discuss.elastic.co/t/question-for-logging-cluster-is-3master-2data-node-is-good/324445)
**Author:** [@ggalihpp-jubelio](https://discuss.elastic.co/u/ggalihpp-jubelio)\ **Replies:** 5\ **Last updated:** [February 8, 2023, 5:15pm UTC](https://discuss.elastic.co/t/question-for-logging-cluster-is-3master-2data-node-is-good/324445 "2023-02-08T17:15:17Z")
Hi everyone, So we tried to move to ECK, and want to execute it perfectly or at least the right way... My use case is for logging and APM, Indexing around 7000ish/s Search rate 50-100/s Now we have an ECK cluster co… --- ## [Elasticsearch 8.5.1 Won't Build. Failed to Apply SpotlessPlugin](https://discuss.elastic.co/t/elasticsearch-8-5-1-wont-build-failed-to-apply-spotlessplugin/324476)
**Author:** [@alxdaly](https://discuss.elastic.co/u/alxdaly)\ **Replies:** 2\ **Last updated:** [February 8, 2023, 5:07pm UTC](https://discuss.elastic.co/t/elasticsearch-8-5-1-wont-build-failed-to-apply-spotlessplugin/324476 "2023-02-08T17:07:27Z")
I am trying to build an instance of elasticsearch 8.5.1 in a linux environment. I have had to modify the gradle files to point to my company's artifact repositories. When I try to run any ./gradlew commands, I get the er… --- ## [How to only get the highest score of a token graphs multiple sub-queries](https://discuss.elastic.co/t/how-to-only-get-the-highest-score-of-a-token-graphs-multiple-sub-queries/325046)
**Author:** [@Nicolas\_Labrot](https://discuss.elastic.co/u/Nicolas_Labrot)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 4:47pm UTC](https://discuss.elastic.co/t/how-to-only-get-the-highest-score-of-a-token-graphs-multiple-sub-queries/325046 "2023-02-08T16:47:30Z")
Hello, For example, is indexed "european union" with an hunspell english filter. The filter generates the following tokens token: european / position: 0 token: union / position: 1 token: ion / position: 1 If I do a … --- ## [Is there is alternative for HTTP plugin in ECK version?](https://discuss.elastic.co/t/is-there-is-alternative-for-http-plugin-in-eck-version/325045)
**Author:** [@kinkkong](https://discuss.elastic.co/u/kinkkong)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 4:28pm UTC](https://discuss.elastic.co/t/is-there-is-alternative-for-http-plugin-in-eck-version/325045 "2023-02-08T16:28:06Z")
We are migrating our platform to Kubernetes, one of the features that we currently use in ELK is the logstash HTTP plugin. Unfortunately, this will be no the case in Kubernetes. Is there an alternative plugin, or ingest … --- ## [Azure Function's log streams from Azure Event Hub can't be consumed by Filebeat](https://discuss.elastic.co/t/azure-functions-log-streams-from-azure-event-hub-cant-be-consumed-by-filebeat/325044)
**Author:** [@dfgh012316](https://discuss.elastic.co/u/dfgh012316)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 4:25pm UTC](https://discuss.elastic.co/t/azure-functions-log-streams-from-azure-event-hub-cant-be-consumed-by-filebeat/325044 "2023-02-08T16:25:19Z")
I enable azure module to streams azure platformlog to Elasticsearch. When I collected the logs of azure postgreSQL and aks, everything worked fine, but when I used the same method to collect the logs of azure function, … --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/325023)
**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\ **Replies:** 3\ **Last updated:** [February 8, 2023, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch/325023 "2023-02-08T15:58:42Z")
Hi Team, Is there any major changes and Features in the elasticsearch V7.14 to 8.5.3 Thanks&Regards, SM --- ## [Add description to my logstas index based on another csv field](https://discuss.elastic.co/t/add-description-to-my-logstas-index-based-on-another-csv-field/325002)
**Author:** [@Miriam](https://discuss.elastic.co/u/Miriam)\ **Replies:** 3\ **Last updated:** [February 8, 2023, 3:58pm UTC](https://discuss.elastic.co/t/add-description-to-my-logstas-index-based-on-another-csv-field/325002 "2023-02-08T15:58:21Z")
I have my index created using logstah config file. Reading from log file following information: id, iduser,datetimInit, dateTimeends 0001 210 2023-02-03 04:45:16.78 2023-02-03 04:46:16.78 0002 1003 2023-02-03 08:45:16.7… --- ## [Expose the http service only for ingest nodes in ECK 2.6.1](https://discuss.elastic.co/t/expose-the-http-service-only-for-ingest-nodes-in-eck-2-6-1/324990)
**Author:** [@screwyy](https://discuss.elastic.co/u/screwyy)\ **Replies:** 2\ **Last updated:** [February 8, 2023, 3:55pm UTC](https://discuss.elastic.co/t/expose-the-http-service-only-for-ingest-nodes-in-eck-2-6-1/324990 "2023-02-08T15:55:05Z")
Hello, I have a cluster in k8s deployed with ECK 2.6.1 which has 2 ingest nodes. How can I control that data sent to the ingest nodes for pre-indexing instead of the whole cluster ? I see in the custom resource that h… --- ## [Add human readable field with lookup](https://discuss.elastic.co/t/add-human-readable-field-with-lookup/325032)
**Author:** [@tonelk](https://discuss.elastic.co/u/tonelk)\ **Replies:** 1\ **Last updated:** [February 8, 2023, 3:53pm UTC](https://discuss.elastic.co/t/add-human-readable-field-with-lookup/325032 "2023-02-08T15:53:43Z")
Hi, I want to add the human readable description of error codes in my data. I've tried this processors: - add\_fields: when: equals: cisco\_code: "106015" fields: cisco\_description: 'Den… --- ## [Rank based on rarity of a field value](https://discuss.elastic.co/t/rank-based-on-rarity-of-a-field-value/323546)
**Author:** [@pheeria](https://discuss.elastic.co/u/pheeria)\ **Replies:** 3\ **Last updated:** [February 8, 2023, 3:09pm UTC](https://discuss.elastic.co/t/rank-based-on-rarity-of-a-field-value/323546 "2023-02-08T15:09:34Z")
Hi :vulcan\_salute: I'd like to know how can I rank lower items, which have fields that are frequently appearing among the results. Say, we have a similar result set: "name": "Red T-Shirt" "store": "Zara" "name": "Yel… --- ## [Recovering data from a persistent queue page file](https://discuss.elastic.co/t/recovering-data-from-a-persistent-queue-page-file/325029)
**Author:** [@peter\_west](https://discuss.elastic.co/u/peter_west)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 2:10pm UTC](https://discuss.elastic.co/t/recovering-data-from-a-persistent-queue-page-file/325029 "2023-02-08T14:10:59Z")
Is there any means by which you can reprocess data from a page file into an Elasticsearch index? My instincts tell me not because the likelihood is that the page file will probably have a partial record at the start so … --- ## [Limit user to single dashboard?](https://discuss.elastic.co/t/limit-user-to-single-dashboard/324962)
**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\ **Replies:** 2\ **Last updated:** [February 8, 2023, 2:04pm UTC](https://discuss.elastic.co/t/limit-user-to-single-dashboard/324962 "2023-02-08T14:04:37Z")
Trying to limit a given user to only see a single dashboard. I have easily configured my system (single-node 7.17.8 ELK cluster on basic license) to have this user see only all dashboards, but I want to limit to only one… --- ## [Does elasticsearch support listening on a non root path for the URL?](https://discuss.elastic.co/t/does-elasticsearch-support-listening-on-a-non-root-path-for-the-url/324939)
**Author:** [@ghettosamson](https://discuss.elastic.co/u/ghettosamson)\ **Replies:** 2\ **Last updated:** [February 8, 2023, 2:04pm UTC](https://discuss.elastic.co/t/does-elasticsearch-support-listening-on-a-non-root-path-for-the-url/324939 "2023-02-08T14:04:37Z")
I have my elasticsearch deployed as a Docker container on AWS, sitting behind an Application Load Balancer. The container is listening on port 9200 as usual, but I'm using path based routing for all my micro-services beh… --- ## [Sum of a field in a parent node and grouping by a field in a child node](https://discuss.elastic.co/t/sum-of-a-field-in-a-parent-node-and-grouping-by-a-field-in-a-child-node/324948)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 4\ **Last updated:** [February 8, 2023, 1:46pm UTC](https://discuss.elastic.co/t/sum-of-a-field-in-a-parent-node-and-grouping-by-a-field-in-a-child-node/324948 "2023-02-08T13:46:55Z")
I'm trying to get the sum of a field in a parent node while aggregating on a field of a child node. For example, this is what I've setup: PUT order POST order/\_mapping { "properties": { "order\_items": { "t… --- ## [Netflow data not appears in Elastic search/Kibana](https://discuss.elastic.co/t/netflow-data-not-appears-in-elastic-search-kibana/324952)
**Author:** [@canifer](https://discuss.elastic.co/u/canifer)\ **Replies:** 5\ **Last updated:** [February 8, 2023, 1:33pm UTC](https://discuss.elastic.co/t/netflow-data-not-appears-in-elastic-search-kibana/324952 "2023-02-08T13:33:31Z")
Hello, I Countered a problem when using Filebeat to forward Netflow data into Elasticsearch, I'm using filebeat 8.5.2 installed on Centos Stream 9, to send netflow data to Elastic Stack 8.5.2. The problem is, why the … --- ## [Kibana deprecated scripted fields](https://discuss.elastic.co/t/kibana-deprecated-scripted-fields/324657)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [February 8, 2023, 1:33pm UTC](https://discuss.elastic.co/t/kibana-deprecated-scripted-fields/324657 "2023-02-08T13:33:16Z")
Hi, My current setup uses scripted fields for the node name in the Metricbeat index. The goal is to be able to open a specific monitoring dashboard for that VM. As I see, this was deprecated from 7.13, but I'm not sure … [Previous page](https://discuss.elastic.co/latest.md?page=789) [Next page](https://discuss.elastic.co/latest.md?page=791)