# Latest **URL:** https://discuss.elastic.co/latest.md?page=803 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 804 --- ## [Calculating Chronological Contiguous Document Sequences](https://discuss.elastic.co/t/calculating-chronological-contiguous-document-sequences/324240)
**Author:** [@Guy\_Segev](https://discuss.elastic.co/u/Guy_Segev)\ **Replies:** 0\ **Last updated:** [January 30, 2023, 2:57pm UTC](https://discuss.elastic.co/t/calculating-chronological-contiguous-document-sequences/324240 "2023-01-30T14:57:06Z")
Hi, Would appreciate help with the following conundrum: I have an index with time-series events; here are some document examples: { "timestamp": 1, "status": "running" } { "timestamp": 2, "status": "running" } { "ti… --- ## [Adding Fleet Server failed because “x509: certificate signed by unknown authority“](https://discuss.elastic.co/t/adding-fleet-server-failed-because-x509-certificate-signed-by-unknown-authority/323157)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 5\ **Last updated:** [January 30, 2023, 2:52pm UTC](https://discuss.elastic.co/t/adding-fleet-server-failed-because-x509-certificate-signed-by-unknown-authority/323157 "2023-01-30T14:52:52Z")
Hello, I tried to add a fleet server today on a CentOS Server. Because I don’t want to add Agents with the —insecure flag anymore, I followed this documentation step by step: I created the ca.crt that signed the fleet… --- ## [Kafka\_consumer\_lag in Logstash](https://discuss.elastic.co/t/kafka-consumer-lag-in-logstash/324108)
**Author:** [@Ondrej\_S](https://discuss.elastic.co/u/Ondrej_S)\ **Replies:** 2\ **Last updated:** [January 30, 2023, 2:28pm UTC](https://discuss.elastic.co/t/kafka-consumer-lag-in-logstash/324108 "2023-01-30T14:28:23Z")
Hello, Is it possible to get the value or verify value of “kafka\_consumer\_lag” directly in Logstash 7.17? The idea is to verify: if \[kafka\_consumer\_lag\]\[lag\] == 0 In Logstash Output and if yes run http plugin with u… --- ## [Multiple follower pattern for same primary index](https://discuss.elastic.co/t/multiple-follower-pattern-for-same-primary-index/324232)
**Author:** [@Jairam\_Gauns](https://discuss.elastic.co/u/Jairam_Gauns)\ **Replies:** 0\ **Last updated:** [January 30, 2023, 1:30pm UTC](https://discuss.elastic.co/t/multiple-follower-pattern-for-same-primary-index/324232 "2023-01-30T13:30:27Z")
Hi Team, We have multiple follower pattern that match the same time series index from primary. In one of the follower we have a prefix and suffix in another follower pattern. Currently the replication of the new inde… --- ## [Embed Kibana dashboards without using iframe](https://discuss.elastic.co/t/embed-kibana-dashboards-without-using-iframe/324185)
**Author:** [@sebastian.nordin](https://discuss.elastic.co/u/sebastian.nordin)\ **Replies:** 1\ **Last updated:** [January 30, 2023, 1:00pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboards-without-using-iframe/324185 "2023-01-30T13:00:34Z")
Currently we embed Kibana dashboards and visualizations on a Portal overview page in a React app, using the normal share iframe method. We've noticed significant increase in page loading time on portals where more than … --- ## [Upgrade ELK from 7.2.0 to 8.4.3](https://discuss.elastic.co/t/upgrade-elk-from-7-2-0-to-8-4-3/324228)
**Author:** [@rampratap](https://discuss.elastic.co/u/rampratap)\ **Replies:** 2\ **Last updated:** [January 30, 2023, 12:56pm UTC](https://discuss.elastic.co/t/upgrade-elk-from-7-2-0-to-8-4-3/324228 "2023-01-30T12:56:11Z")
I am trying to upgrade from ELK 7.2.0 to 8.4.3 but getting below error , please help or suggest on the compatible version to upgrade to fatal exception while booting Elasticsearch org.elasticsearch.ElasticsearchExceptio… --- ## [Zeek/Bro to ECS Field Mappings](https://discuss.elastic.co/t/zeek-bro-to-ecs-field-mappings/324120)
**Author:** [@3weekwhiskers](https://discuss.elastic.co/u/3weekwhiskers)\ **Replies:** 3\ **Last updated:** [January 30, 2023, 12:41pm UTC](https://discuss.elastic.co/t/zeek-bro-to-ecs-field-mappings/324120 "2023-01-30T12:41:47Z")
Is there a Zeek field to ECS field mapping document? Other than the logtype.yml files which actually do the conversion and renames, I have not been able to find anything. I'm avoiding having to build this mapping from sc… --- ## [Java apm agent doesn't capture text or json body](https://discuss.elastic.co/t/java-apm-agent-doesnt-capture-text-or-json-body/324064)
**Author:** [@mrodal](https://discuss.elastic.co/u/mrodal)\ **Replies:** 5\ **Last updated:** [January 30, 2023, 12:20pm UTC](https://discuss.elastic.co/t/java-apm-agent-doesnt-capture-text-or-json-body/324064 "2023-01-30T12:20:15Z")
Kibana version: 8.6 Elasticsearch version:8.6 APM Server version: 8.6 APM Agent language and version: Java 1.35.0 Browser version: Chrome Original install method (e.g. download page, yum, deb, from source, etc.) and… --- ## [Elasticsearch AbstractElasticsearchRepository. e:Request processing failed; nested exception is org.springframework.dao.DataAccessResourceFailureException: Timeout connecting to \[elasticsearch. Timeout connecting to Springboot Application Error](https://discuss.elastic.co/t/elasticsearch-abstractelasticsearchrepository-e-request-processing-failed-nested-exception-is-org-springframework-dao-dataaccessresourcefailureexception-timeout-connecting-to-elasticsearch-timeout-connecting-to-springboot-application-error/323819)
**Author:** [@my\_space](https://discuss.elastic.co/u/my_space)\ **Replies:** 7\ **Last updated:** [January 30, 2023, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-abstractelasticsearchrepository-e-request-processing-failed-nested-exception-is-org-springframework-dao-dataaccessresourcefailureexception-timeout-connecting-to-elasticsearch-timeout-connecting-to-springboot-application-error/323819 "2023-01-30T11:42:35Z")
Version Spring Data Elasticsearch: 4.0.0.RELEASE Version Elasticsearch Client in build: 7.6.2 Version Elasticsearch Client used: 7.6.2 e:Request processing failed; nested exception is org.springframework.dao.DataAcces… --- ## [Incorrect queries in docs?](https://discuss.elastic.co/t/incorrect-queries-in-docs/323917)
**Author:** [@Mohamed\_Khattab](https://discuss.elastic.co/u/Mohamed_Khattab)\ **Replies:** 2\ **Last updated:** [January 30, 2023, 11:18am UTC](https://discuss.elastic.co/t/incorrect-queries-in-docs/323917 "2023-01-30T11:18:31Z")
I'm copy-pasting a query from this page: Scripted metric aggregation | Elasticsearch Guide \[7.17\] | Elastic the query is { "query": { "match\_all": {} }, "aggs": { "profit": { "scripted\_metric": { … --- ## [How to delete revoked Fleet enrolment tokens](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 4\ **Last updated:** [January 30, 2023, 11:11am UTC](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026 "2023-01-30T11:11:39Z")
Hi, Is there a way to delete revoked Fleet enrolment tokens? Thank you --- ## [Collecting logs using docker.container.labels condition with filebeat:8.5.3](https://discuss.elastic.co/t/collecting-logs-using-docker-container-labels-condition-with-filebeat-8-5-3/324158)
**Author:** [@Viktor\_Herman](https://discuss.elastic.co/u/Viktor_Herman)\ **Replies:** 1\ **Last updated:** [January 30, 2023, 10:48am UTC](https://discuss.elastic.co/t/collecting-logs-using-docker-container-labels-condition-with-filebeat-8-5-3/324158 "2023-01-30T10:48:24Z")
I'm having some problems configuring filebeat to only ingest the logs from the containers that I want. I exhausted all of the resources and documentation doesn't have any examples on this exact issue. Filebeat version is… --- ## [Get just some fields of all elements using curl](https://discuss.elastic.co/t/get-just-some-fields-of-all-elements-using-curl/324184)
**Author:** [@sphawk](https://discuss.elastic.co/u/sphawk)\ **Replies:** 2\ **Last updated:** [January 30, 2023, 9:36am UTC](https://discuss.elastic.co/t/get-just-some-fields-of-all-elements-using-curl/324184 "2023-01-30T09:36:21Z")
Hi people. I need some help. I'm trying to make a query via curl to get some fields of all elements of a shard. I've tried this command: curl -s -H 'Content-Type: application/json' 'http://localhost:9200/video/\_searc… --- ## [Trouble replacing leading/trailing whitespace in nested json](https://discuss.elastic.co/t/trouble-replacing-leading-trailing-whitespace-in-nested-json/324129)
**Author:** [@mark54g](https://discuss.elastic.co/u/mark54g)\ **Replies:** 4\ **Last updated:** [January 30, 2023, 9:33am UTC](https://discuss.elastic.co/t/trouble-replacing-leading-trailing-whitespace-in-nested-json/324129 "2023-01-30T09:33:59Z")
Hey, folks Trying to figure out a clean way to solve this problem I have nested json coming in from an SQS queue, and I've been playing with mocking it up with a static file example and filebeat, which I know is not pe… --- ## [Remove extra options from visualisations](https://discuss.elastic.co/t/remove-extra-options-from-visualisations/324084)
**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\ **Replies:** 1\ **Last updated:** [January 30, 2023, 9:25am UTC](https://discuss.elastic.co/t/remove-extra-options-from-visualisations/324084 "2023-01-30T09:25:00Z")
Is it possible to remove some options that are highlighted ?? --- ## [How can i disable filters in Respective visualizations present in kibana dashboard?](https://discuss.elastic.co/t/how-can-i-disable-filters-in-respective-visualizations-present-in-kibana-dashboard/316751)
**Author:** [@andy4](https://discuss.elastic.co/u/andy4)\ **Replies:** 6\ **Last updated:** [January 30, 2023, 9:18am UTC](https://discuss.elastic.co/t/how-can-i-disable-filters-in-respective-visualizations-present-in-kibana-dashboard/316751 "2023-01-30T09:18:19Z")
multiple visualizations collectively makes up a dashboard and we have interactive filter application feature available through most of the visualization , Now suppose I want to disable filters to be applied on dashboard … --- ## [Gradle assemble error](https://discuss.elastic.co/t/gradle-assemble-error/324198)
**Author:** [@mkkim](https://discuss.elastic.co/u/mkkim)\ **Replies:** 0\ **Last updated:** [January 30, 2023, 8:18am UTC](https://discuss.elastic.co/t/gradle-assemble-error/324198 "2023-01-30T08:18:16Z")
\[kor\] 안녕하세요, 저는 한국인입니다. 저는 엘라스틱서치에 사용자 사전을 이용한 노리 플러그인을 이용하고자 합니다. 다음 링크를 참고해서 사용하고 있었습니다. (https://github.com/jimczi/nori/blob/master/how-to-custom-dict.asciidoc) 하지만 elasticsearch를 git pull한 후 gradle assemble을 할 … --- ## [Error while connecting logstash to elasticsearch : Attempted to resurrect connection to dead ES instance, but got an error](https://discuss.elastic.co/t/error-while-connecting-logstash-to-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/324106)
**Author:** [@abhay14](https://discuss.elastic.co/u/abhay14)\ **Replies:** 8\ **Last updated:** [January 30, 2023, 7:33am UTC](https://discuss.elastic.co/t/error-while-connecting-logstash-to-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/324106 "2023-01-30T07:33:40Z")
logstash | \[2023-01-27T11:56:05,943\]\[INFO \]\[logstash.javapipeline \]\[.monitoring-logstash\] Pipeline started {"pipeline.id"=\>".monitoring-logstash"} logstash | \[2023-01-27T11:56:05,956\]\[… --- ## [Monitor SAP on azure](https://discuss.elastic.co/t/monitor-sap-on-azure/324072)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [January 30, 2023, 5:12am UTC](https://discuss.elastic.co/t/monitor-sap-on-azure/324072 "2023-01-30T05:12:37Z")
It is posible to monitor SAP on azure with beats or extract metrics with logstash? Thanks! --- ## [Is there a slow log (or something similar) for shard refresh durations?](https://discuss.elastic.co/t/is-there-a-slow-log-or-something-similar-for-shard-refresh-durations/324188)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [January 30, 2023, 12:02am UTC](https://discuss.elastic.co/t/is-there-a-slow-log-or-something-similar-for-shard-refresh-durations/324188 "2023-01-30T00:02:07Z")
Hi All, I'm attempting to debug a somewhat strange issue. Where I have a query which runs every 60 seconds to check a set of logs and if there are no logs for 90 seconds then trigger an alert (this is done via a Kibana … --- ## [Shard lock issue](https://discuss.elastic.co/t/shard-lock-issue/324094)
**Author:** [@akihu](https://discuss.elastic.co/u/akihu)\ **Replies:** 10\ **Last updated:** [January 29, 2023, 10:49pm UTC](https://discuss.elastic.co/t/shard-lock-issue/324094 "2023-01-29T22:49:33Z")
Dear Community, Would you happen to have any hints what might be wrong (and how to resolve it) with my elasticsearch cluster. I've cluster with three master nodes and two data nodes. Most of the indices are configured … --- ## [On-premise pricing?](https://discuss.elastic.co/t/on-premise-pricing/324183)
**Author:** [@johber](https://discuss.elastic.co/u/johber)\ **Replies:** 6\ **Last updated:** [January 29, 2023, 8:28pm UTC](https://discuss.elastic.co/t/on-premise-pricing/324183 "2023-01-29T20:28:38Z")
Hello, I'm developing a public e-commerce site. Can it use a self hosted Elasticsearch instance for free, without violating the new license model? --- ## [Logstash & JSON array split](https://discuss.elastic.co/t/logstash-json-array-split/324180)
**Author:** [@Jalpesh1689](https://discuss.elastic.co/u/Jalpesh1689)\ **Replies:** 1\ **Last updated:** [January 29, 2023, 6:16pm UTC](https://discuss.elastic.co/t/logstash-json-array-split/324180 "2023-01-29T18:16:56Z")
Hi Team, We have below array of JSON & want to ingest these JSON into Elasticsearch. We want split this & ingest into 2 rows : \[{ "RequestEventList":\[ { "Instant":"2015-09-28T12:46:50.713Z", "RequestKey":"11bcf87b… --- ## [Apm-agent-go/echo not catch custom span](https://discuss.elastic.co/t/apm-agent-go-echo-not-catch-custom-span/323954)
**Author:** [@ggalihpp-jubelio](https://discuss.elastic.co/u/ggalihpp-jubelio)\ **Replies:** 2\ **Last updated:** [January 29, 2023, 5:31pm UTC](https://discuss.elastic.co/t/apm-agent-go-echo-not-catch-custom-span/323954 "2023-01-29T17:31:30Z")
Hi everyone, I am trying to configure APM agent on top of echo webframework. Everything is working, transaction, PostgreSQL span, etc.. but when tried to create a custom span, its not working here's how I tried to ach… --- ## [Monitoring host with example from docs does not work](https://discuss.elastic.co/t/monitoring-host-with-example-from-docs-does-not-work/324161)
**Author:** [@Toaster2-0](https://discuss.elastic.co/u/Toaster2-0)\ **Replies:** 6\ **Last updated:** [January 29, 2023, 4:55pm UTC](https://discuss.elastic.co/t/monitoring-host-with-example-from-docs-does-not-work/324161 "2023-01-29T16:55:03Z")
Hi, in the Docs is a run command of docker with which you should be able to Monitor the host machine (with the System Module), but It seems to not be working. In a reddit thread nobody seems to be able to give a working… --- ## [Your trial license is expired help](https://discuss.elastic.co/t/your-trial-license-is-expired-help/324173)
**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\ **Replies:** 7\ **Last updated:** [January 29, 2023, 4:05pm UTC](https://discuss.elastic.co/t/your-trial-license-is-expired-help/324173 "2023-01-29T16:05:47Z")
Hi all, Please i use elasticsearch 8.0 version and i have my workspace so yesterday , kibana said Your trial license is expired Please your support i have all my dashbored I am afraid of losing my data and dashboard. … --- ## [Can the size in pixels, vh or other units of a dashboard in an iframe or its visualizations be calculated? How is its size connected with the gridData width and height?](https://discuss.elastic.co/t/can-the-size-in-pixels-vh-or-other-units-of-a-dashboard-in-an-iframe-or-its-visualizations-be-calculated-how-is-its-size-connected-with-the-griddata-width-and-height/322624)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 2\ **Last updated:** [January 29, 2023, 2:19pm UTC](https://discuss.elastic.co/t/can-the-size-in-pixels-vh-or-other-units-of-a-dashboard-in-an-iframe-or-its-visualizations-be-calculated-how-is-its-size-connected-with-the-griddata-width-and-height/322624 "2023-01-29T14:19:31Z")
Is there a way to get a dashboard-in-iframe's height in pixels or other CSS units that can be measured in the browse and its viewport, outside Kibana? Or maybe get the height of individual visualizations based on their g… --- ## [How to add searched value with terms query results](https://discuss.elastic.co/t/how-to-add-searched-value-with-terms-query-results/324174)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 0\ **Last updated:** [January 29, 2023, 11:23am UTC](https://discuss.elastic.co/t/how-to-add-searched-value-with-terms-query-results/324174 "2023-01-29T11:23:39Z")
Hello, I want to do search an index with multiple values. I want to also know which search result comes for which searched value. Can I do this in case of terms query. e.g. GET /\_search { "query": { "terms": { … --- ## [How to read logs in subfolder of main folder filebeat](https://discuss.elastic.co/t/how-to-read-logs-in-subfolder-of-main-folder-filebeat/323888)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 13\ **Last updated:** [January 29, 2023, 4:27am UTC](https://discuss.elastic.co/t/how-to-read-logs-in-subfolder-of-main-folder-filebeat/323888 "2023-01-29T04:27:12Z")
HI, I have one main folder inside this I have 2 folder I am able to read the data of both folder in filebeat but how can be show which log is belong to which subfolder. --- ## [2.4.1 groovy script aggregation make high cpu](https://discuss.elastic.co/t/2-4-1-groovy-script-aggregation-make-high-cpu/323107)
**Author:** [@huasheng\_zeng](https://discuss.elastic.co/u/huasheng_zeng)\ **Replies:** 2\ **Last updated:** [January 29, 2023, 4:04am UTC](https://discuss.elastic.co/t/2-4-1-groovy-script-aggregation-make-high-cpu/323107 "2023-01-29T04:04:25Z")
es version is 2.4.1 query request is {"aggregations":{"0-0":{"aggregations":{"0-1":{"aggregations":{"0-2":{"aggregations":{"1-0":{"aggregations":{"1-1":{"reverse\_nested":{}}},"filters":{"filters":\[{"script":{"script":{… [Previous page](https://discuss.elastic.co/latest.md?page=802) [Next page](https://discuss.elastic.co/latest.md?page=804)