# Latest

**URL:** https://discuss.elastic.co/latest.md?page=806

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 807

---

## [Number of Nested objects](https://discuss.elastic.co/t/number-of-nested-objects/324050)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 5:18pm UTC](https://discuss.elastic.co/t/number-of-nested-objects/324050 "2023-01-26T17:18:41Z")

</div>

Hi, Looking for a way to get the number of nested objects, for querying, sorting etc. For example: PUT my-index-000001 { "mappings": { "properties": { "some\_id": {"type": "long"}, "user": { "…

---

## [Access global document count from inside bucket script](https://discuss.elastic.co/t/access-global-document-count-from-inside-bucket-script/324040)

<div class="topic-metadata">

**Author:** [@bpax51](https://discuss.elastic.co/u/bpax51)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 3:48pm UTC](https://discuss.elastic.co/t/access-global-document-count-from-inside-bucket-script/324040 "2023-01-26T15:48:42Z")

</div>

Hello guys, I'm new to Elasticsearch and already having fun with aggregations but I'm facing an issue that I couldn't figure out. I have the following query, that will search my index within a date range, give me a lis…

---

## [Kibana markdown - clickable location for an image linked to URL](https://discuss.elastic.co/t/kibana-markdown-clickable-location-for-an-image-linked-to-url/323967)

<div class="topic-metadata">

**Author:** [@Buddha](https://discuss.elastic.co/u/Buddha)\
**Replies:** 3\
**Last updated:** [January 26, 2023, 3:39pm UTC](https://discuss.elastic.co/t/kibana-markdown-clickable-location-for-an-image-linked-to-url/323967 "2023-01-26T15:39:05Z")

</div>

Hello, I am seeing an issue with my current deployment of version 8.6.0 where a linked image is only clickable in a small portion at bottom. When editing the visual, the behaviour was correct where I was able to click …

---

## [Trying to get Jenkins Open Telemetry plugin data into APM, 404 error](https://discuss.elastic.co/t/trying-to-get-jenkins-open-telemetry-plugin-data-into-apm-404-error/324027)

<div class="topic-metadata">

**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 3:38pm UTC](https://discuss.elastic.co/t/trying-to-get-jenkins-open-telemetry-plugin-data-into-apm-404-error/324027 "2023-01-26T15:38:39Z")

</div>

Hi, I'm getting this error from my GCP Cloud Armor logs: https://xxx-apm.xxx.com/opentelemetry.proto.collector.trace.v1.TraceService/Export I see this in the Jenkins logs: OpenTelemetry SDK initialized: SDK \[config: …

---

## [Logstash configuration to IBM MQ using TLS and Cipher](https://discuss.elastic.co/t/logstash-configuration-to-ibm-mq-using-tls-and-cipher/323995)

<div class="topic-metadata">

**Author:** [@JHE](https://discuss.elastic.co/u/JHE)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 7:43am UTC](https://discuss.elastic.co/t/logstash-configuration-to-ibm-mq-using-tls-and-cipher/323995 "2023-01-26T07:43:45Z")

</div>

Hi, I'm trying to connect logstash to IBM MQ using jms input. It's OK for an non secured connection. However I didn't find any example to configure a TLS connection and to specify a cipher suites. Here bellow my confi…

---

## [Kibana Action failed with 'search\_phase\_execution\_exception](https://discuss.elastic.co/t/kibana-action-failed-with-search-phase-execution-exception/324024)

<div class="topic-metadata">

**Author:** [@darinka.mandarinka](https://discuss.elastic.co/u/darinka.mandarinka)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 2:27pm UTC](https://discuss.elastic.co/t/kibana-action-failed-with-search-phase-execution-exception/324024 "2023-01-26T14:27:31Z")

</div>

I have Elasticsearh, Kibana, Filebeat in our cluster. In kibana logs I see error Action failed with 'search\_phase\_execution\_exception How I can solve it? I'm new, first time working with this.

---

## [Migrating from ES 5 to ES 8, problems in index](https://discuss.elastic.co/t/migrating-from-es-5-to-es-8-problems-in-index/323454)

<div class="topic-metadata">

**Author:** [@Anibal\_Ardid](https://discuss.elastic.co/u/Anibal_Ardid)\
**Replies:** 4\
**Last updated:** [January 26, 2023, 2:17pm UTC](https://discuss.elastic.co/t/migrating-from-es-5-to-es-8-problems-in-index/323454 "2023-01-26T14:17:51Z")

</div>

Hi ! I have this json that i use to index { "settings":{ "number\_of\_shards":1, "number\_of\_replicas":0, "index.mapping.total\_fields.limit":100000, "analysis":{ "filter":{ …

---

## [Zscaler logs mapped to ECS](https://discuss.elastic.co/t/zscaler-logs-mapped-to-ecs/323963)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 1:40pm UTC](https://discuss.elastic.co/t/zscaler-logs-mapped-to-ecs/323963 "2023-01-26T13:40:54Z")

</div>

I'm working on ingesting zscaler zia logs and I'm trying to understand the mapping. I'm looking at the following websites: Zscaler Internet Access | Elastic docs for what happens inside Elastic/Kibana and NSS Feed Out…

---

## [In ES 7.0, when using sequence numbers based recovery,primary and replica shard will be inconsistent](https://discuss.elastic.co/t/in-es-7-0-when-using-sequence-numbers-based-recovery-primary-and-replica-shard-will-be-inconsistent/324006)

<div class="topic-metadata">

**Author:** [@warriorswin](https://discuss.elastic.co/u/warriorswin)\
**Replies:** 3\
**Last updated:** [January 26, 2023, 1:29pm UTC](https://discuss.elastic.co/t/in-es-7-0-when-using-sequence-numbers-based-recovery-primary-and-replica-shard-will-be-inconsistent/324006 "2023-01-26T13:29:15Z")

</div>

add data=A node1 primary data=A seqNo=1 No persistence node2 replica data=A seqNo=1 Persistence node1,node2 shutdown node1 restart and add data=B node1 primary data=B seqNo=1 node2 restart When using sequence numb…

---

## [Role to ingesting for custom user](https://discuss.elastic.co/t/role-to-ingesting-for-custom-user/324020)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 12:34pm UTC](https://discuss.elastic.co/t/role-to-ingesting-for-custom-user/324020 "2023-01-26T12:34:36Z")

</div>

Hi everyone, i want to know what exactly roles required for ingesting if i want to create custom user only for ingesting? fyi, i'm using elastic v7.13 i've been read this page but i'm so confused. what privileges that…

---

## [ES\_TMPDIR not setting all temporary files](https://discuss.elastic.co/t/es-tmpdir-not-setting-all-temporary-files/324019)

<div class="topic-metadata">

**Author:** [@lquenti](https://discuss.elastic.co/u/lquenti)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 12:00pm UTC](https://discuss.elastic.co/t/es-tmpdir-not-setting-all-temporary-files/324019 "2023-01-26T12:00:42Z")

</div>

Hi all, I am currently trying to set up elasticsearch with a read-only config directory within a docker based on the elasticsearch image. After thoroughly reading the docs, the only related Option I found was the ES\_TMP…

---

## [Can i sort my documents by date several conditions?](https://discuss.elastic.co/t/can-i-sort-my-documents-by-date-several-conditions/324015)

<div class="topic-metadata">

**Author:** [@Volodymyr\_Dzhuryn](https://discuss.elastic.co/u/Volodymyr_Dzhuryn)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 11:55am UTC](https://discuss.elastic.co/t/can-i-sort-my-documents-by-date-several-conditions/324015 "2023-01-26T11:55:34Z")

</div>

I have index with document which have two field with dates "match\_date\_time" and "created\_at". I need query for getting documents sorted by next criteria 1. \[ASC order\] articles with future match date and time (sorted …

---

## [Not enough nodes to allocate all shard replicas](https://discuss.elastic.co/t/not-enough-nodes-to-allocate-all-shard-replicas/323360)

<div class="topic-metadata">

**Author:** [@michielswaanen](https://discuss.elastic.co/u/michielswaanen)\
**Replies:** 11\
**Last updated:** [January 26, 2023, 11:40am UTC](https://discuss.elastic.co/t/not-enough-nodes-to-allocate-all-shard-replicas/323360 "2023-01-26T11:40:18Z")

</div>

Hey all, My Elasticsearch deployment is showing the following health issue: I tried to fix the issue by following the suggested guide. I scaled our deployment up by increasing the availability zones (from 1 to 2), l…

---

## [Delete index](https://discuss.elastic.co/t/delete-index/324016)

<div class="topic-metadata">

**Author:** [@mezzetto\_mezzetto](https://discuss.elastic.co/u/mezzetto_mezzetto)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 11:19am UTC](https://discuss.elastic.co/t/delete-index/324016 "2023-01-26T11:19:17Z")

</div>

Hi all, I'm newbie on elastic. I've a custom installation an I need to free storage space; I've a rollover policy that creates a new index after 30 days or if it reach 50GB; I have 14 index, if I try to close a very old …

---

## [Change Elasticsearch and Kibana communication certificate](https://discuss.elastic.co/t/change-elasticsearch-and-kibana-communication-certificate/324000)

<div class="topic-metadata">

**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 10:46am UTC](https://discuss.elastic.co/t/change-elasticsearch-and-kibana-communication-certificate/324000 "2023-01-26T10:46:49Z")

</div>

Hi All, Our certificates which are assign to Elasticsearch and Kibana are expired and seem like self sign certs are there, so I would appreciate that if anyone can guide how to do that? We have 3 ES and 1 Kibana server…

---

## [Using --run-examples doesn't show all examples](https://discuss.elastic.co/t/using-run-examples-doesnt-show-all-examples/323881)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 3\
**Last updated:** [January 26, 2023, 10:08am UTC](https://discuss.elastic.co/t/using-run-examples-doesnt-show-all-examples/323881 "2023-01-26T10:08:25Z")

</div>

Hi, I am running kibana in dev mode, with --run-examples But it doesn't show all examples... shows only 3 examples (hello world, 3rd part integration, user profile components) I want to see the embeddable example Tha…

---

## [Log files are not cleared from the registry when harvested Kubernetes container is restarted](https://discuss.elastic.co/t/log-files-are-not-cleared-from-the-registry-when-harvested-kubernetes-container-is-restarted/322827)

<div class="topic-metadata">

**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\
**Replies:** 4\
**Last updated:** [January 26, 2023, 10:00am UTC](https://discuss.elastic.co/t/log-files-are-not-cleared-from-the-registry-when-harvested-kubernetes-container-is-restarted/322827 "2023-01-26T10:00:13Z")

</div>

Background: we are running Filebeat as a DaemonSet in a self-managed Microk8s Kubernetes cluster. I noticed extreme CPU usage and failures/delays with delivering logs after a while. More details in this Slack thread but …

---

## [Storing APM data in custom/specific indices](https://discuss.elastic.co/t/storing-apm-data-in-custom-specific-indices/246381)

<div class="topic-metadata">

**Author:** [@axw](https://discuss.elastic.co/u/axw)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 9:51am UTC](https://discuss.elastic.co/t/storing-apm-data-in-custom-specific-indices/246381 "2023-01-26T09:51:51Z")

</div>

If you'd like to split your APM indices by the service, you can use the advice from this topic. You can change the index name by setting either output.elasticsearch.index or output.elasticsearch.indices. These configura…

---

## [Elasticsearch and Kibana Zero SSL Certificate Issue](https://discuss.elastic.co/t/elasticsearch-and-kibana-zero-ssl-certificate-issue/324004)

<div class="topic-metadata">

**Author:** [@ali.sharjeel](https://discuss.elastic.co/u/ali.sharjeel)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-zero-ssl-certificate-issue/324004 "2023-01-26T09:10:59Z")

</div>

Hi Team! I am trying to install ZeroSSL certificate on Elasticsearch and Kibana node with the domain (www.secure-unified.tk). I have obtained the certificate from the ZeroSSL and got three files (private.key, certificate…

---

## [Just 1 docker swarm node is visible in Kibana](https://discuss.elastic.co/t/just-1-docker-swarm-node-is-visible-in-kibana/324002)

<div class="topic-metadata">

**Author:** [@albert2022](https://discuss.elastic.co/u/albert2022)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 8:55am UTC](https://discuss.elastic.co/t/just-1-docker-swarm-node-is-visible-in-kibana/324002 "2023-01-26T08:55:56Z")

</div>

Hi, We configured a cluster using the docker swarm based on the following yml file: version: '3.8' services: node-master: deploy: replicas: 1 placement: constraints: - node.labels.e…

---

## [Full-text search is faster if queries are sent constantly](https://discuss.elastic.co/t/full-text-search-is-faster-if-queries-are-sent-constantly/323955)

<div class="topic-metadata">

**Author:** [@athlonIIx2](https://discuss.elastic.co/u/athlonIIx2)\
**Replies:** 3\
**Last updated:** [January 26, 2023, 8:55am UTC](https://discuss.elastic.co/t/full-text-search-is-faster-if-queries-are-sent-constantly/323955 "2023-01-26T08:55:48Z")

</div>

Please help me understand my case, as I am new to Elasticsearch. I use Elasticsearch on a single node to make full-text search queries from a Python API. The problem is that searching time may vary from seconds to tens…

---

## [Is the logstash-plugins artifacts link correct?](https://discuss.elastic.co/t/is-the-logstash-plugins-artifacts-link-correct/323999)

<div class="topic-metadata">

**Author:** [@AlanChan](https://discuss.elastic.co/u/AlanChan)\
**Replies:** 0\
**Last updated:** [January 26, 2023, 8:16am UTC](https://discuss.elastic.co/t/is-the-logstash-plugins-artifacts-link-correct/323999 "2023-01-26T08:16:13Z")

</div>

Looking if package named: logstash-output-influxdb exists at https://artifacts.elastic.co/downloads/logstash-plugins/logstash-output-influxdb/logstash-output-influxdb-7.6.2.zip Net::OpenTimeout: execution expired …

---

## [Metricbeat to monitor specific docker containers by name/image](https://discuss.elastic.co/t/metricbeat-to-monitor-specific-docker-containers-by-name-image/323986)

<div class="topic-metadata">

**Author:** [@Yungxin\_Shin](https://discuss.elastic.co/u/Yungxin_Shin)\
**Replies:** 5\
**Last updated:** [January 26, 2023, 8:30am UTC](https://discuss.elastic.co/t/metricbeat-to-monitor-specific-docker-containers-by-name-image/323986 "2023-01-26T08:30:56Z")

</div>

Hello everyone, I am currently using Metricbeat to monitor my Docker containers and it is working well with my current configuration. metricbeat.modules: - module: docker metricsets: - container - cpu…

---

## [\[MAPS\] Activate wheel scroll zoom in maps Kibana 7.14.1](https://discuss.elastic.co/t/maps-activate-wheel-scroll-zoom-in-maps-kibana-7-14-1/323822)

<div class="topic-metadata">

**Author:** [@MADPACISA](https://discuss.elastic.co/u/MADPACISA)\
**Replies:** 2\
**Last updated:** [January 26, 2023, 7:56am UTC](https://discuss.elastic.co/t/maps-activate-wheel-scroll-zoom-in-maps-kibana-7-14-1/323822 "2023-01-26T07:56:41Z")

</div>

Hi, Im trying to activate the wheel scroll zoom in maps, i have kibana 7.14.1, there exist a file where i can activate it or how can i do it?

---

## [Kibana Dashboard](https://discuss.elastic.co/t/kibana-dashboard/323970)

<div class="topic-metadata">

**Author:** [@suj0](https://discuss.elastic.co/u/suj0)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 7:55am UTC](https://discuss.elastic.co/t/kibana-dashboard/323970 "2023-01-26T07:55:09Z")

</div>

Is there any way I can use the selected date and time range from date picker in the filter KQL

---

## [Visualization link output from watcher alert](https://discuss.elastic.co/t/visualization-link-output-from-watcher-alert/323960)

<div class="topic-metadata">

**Author:** [@Umar\_Farooq1](https://discuss.elastic.co/u/Umar_Farooq1)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 7:50am UTC](https://discuss.elastic.co/t/visualization-link-output-from-watcher-alert/323960 "2023-01-26T07:50:54Z")

</div>

Hi there, I have many advanced based watchers setup which looks for various queries. when it alerts, we usually get our alerts on slack. I was wondering how can i add a link to it which will show me the specific data po…

---

## [Support of IAM for Elasticsearch Input plugin](https://discuss.elastic.co/t/support-of-iam-for-elasticsearch-input-plugin/323982)

<div class="topic-metadata">

**Author:** [@vijayalakshmi\_chanum](https://discuss.elastic.co/u/vijayalakshmi_chanum)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 7:49am UTC](https://discuss.elastic.co/t/support-of-iam-for-elasticsearch-input-plugin/323982 "2023-01-26T07:49:04Z")

</div>

Do we have support for passing IAM credentials for logstash using Elasticsearch input plugin?

---

## [Elasticsearch templates](https://discuss.elastic.co/t/elasticsearch-templates/323984)

<div class="topic-metadata">

**Author:** [@cybersirp](https://discuss.elastic.co/u/cybersirp)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-templates/323984 "2023-01-26T07:38:04Z")

</div>

I notice that starting from elasticsearch 8.x everything has changed in relation to working with templates and I am very confused and I would like a Samaritan to help me solve this problem. curl -s -H "Content-type: app…

---

## [Exception in fleet server and unable to receive logs](https://discuss.elastic.co/t/exception-in-fleet-server-and-unable-to-receive-logs/323991)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 1\
**Last updated:** [January 26, 2023, 6:00am UTC](https://discuss.elastic.co/t/exception-in-fleet-server-and-unable-to-receive-logs/323991 "2023-01-26T06:00:26Z")

</div>

Hi Team, I am trying to make the fleet server up however getting error in file and I am unable to decode it. Can someone please help? {"log.level":"error","service.name":"fleet-server","service.name":"fleet-server","fl…

---

## [It looks like you have instances that aren't connected to an Elasticsearch cluster](https://discuss.elastic.co/t/it-looks-like-you-have-instances-that-arent-connected-to-an-elasticsearch-cluster/323057)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 7\
**Last updated:** [January 26, 2023, 3:34am UTC](https://discuss.elastic.co/t/it-looks-like-you-have-instances-that-arent-connected-to-an-elasticsearch-cluster/323057 "2023-01-26T03:34:15Z")

</div>

Hello World! per the above screenshot, it appears like there are 2 (two) clusters, in reality there is only 1 (one) the "standalone cluster" is using a separate set of metricbeat vs the "elasticsearch" cluster, and …

[Previous page](https://discuss.elastic.co/latest.md?page=805)

[Next page](https://discuss.elastic.co/latest.md?page=807)
