# Latest **URL:** https://discuss.elastic.co/latest.md?page=813 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 814 --- ## [I am getting below error while setting elastic search](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 9\ **Last updated:** [January 20, 2023, 1:50pm UTC](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019 "2023-01-20T13:50:20Z")
I am installing 8.5.3 elastic. after yml file change I am double clicking elasticsearch.bat file and service is not starting looks like. \[2023-01-12T14:38:25,268\]\[INFO \]\[o.e.n.Node \] \[node-1\] node name \[… --- ## [Unable to authenticate user \[elastic\] for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/323593)
**Author:** [@vidvar](https://discuss.elastic.co/u/vidvar)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 1:03pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/323593 "2023-01-20T13:03:56Z")
Hello @warkolm Since few weeks, all of sudden, getting below while I am trying to curl to one of my elastic nodes. And latest data is not getting updated in Kibana dashboards. Elastic search version is 7.8.0. curl --u… --- ## [Can not create index pattern Uncaught TypeError: Cannot read properties of null](https://discuss.elastic.co/t/can-not-create-index-pattern-uncaught-typeerror-cannot-read-properties-of-null/323592)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 12:54pm UTC](https://discuss.elastic.co/t/can-not-create-index-pattern-uncaught-typeerror-cannot-read-properties-of-null/323592 "2023-01-20T12:54:41Z")
Hi everyone, i use Version: 6.3.2, when i try to create a new index pattern i see this error: Any ideas? --- ## [Read-Only User With Save Query Priviieges](https://discuss.elastic.co/t/read-only-user-with-save-query-priviieges/323591)
**Author:** [@bigverm23](https://discuss.elastic.co/u/bigverm23)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 12:53pm UTC](https://discuss.elastic.co/t/read-only-user-with-save-query-priviieges/323591 "2023-01-20T12:53:39Z")
I would like a read-only Dashboard user to be able to save a query, how can enable that? I cant seem to make it work but it's essential to our processes internally. --- ## [Could or Should?](https://discuss.elastic.co/t/could-or-should/322473)
**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\ **Replies:** 3\ **Last updated:** [January 20, 2023, 12:19pm UTC](https://discuss.elastic.co/t/could-or-should/322473 "2023-01-20T12:19:14Z")
Sorry, the title is a bit tongue-in-cheek :unamused: I have a dashboard which shows test results. The tests are IP related and I use the IP address to identify if the destination address is a Proxy Server or NOT. (I h… --- ## [Privileged containers should be avoided](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382)
**Author:** [@ddhote](https://discuss.elastic.co/u/ddhote)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 11:52am UTC](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382 "2023-01-20T11:52:44Z")
Hello Team, We have Elasticsearch containers in AKS where initial container has "Privileged= True" which is against our security policy. But, init container is failing with "Privileged=False", can someone please help ho… --- ## [TSVB aggregation impossible](https://discuss.elastic.co/t/tsvb-aggregation-impossible/323586)
**Author:** [@NickLudd](https://discuss.elastic.co/u/NickLudd)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 11:05am UTC](https://discuss.elastic.co/t/tsvb-aggregation-impossible/323586 "2023-01-20T11:05:03Z")
Hi all, I have created a TSVB visualization that represents thousands of operations(count aggregation & math aggregation grouped by filter) and a specific error(count aggregation filtered by query string), in a single c… --- ## [Alert recovery not triggering connector action](https://discuss.elastic.co/t/alert-recovery-not-triggering-connector-action/323584)
**Author:** [@RaJiska](https://discuss.elastic.co/u/RaJiska)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 11:01am UTC](https://discuss.elastic.co/t/alert-recovery-not-triggering-connector-action/323584 "2023-01-20T11:01:11Z")
Hi, I am trying to have Kibana send active and recovered alerts into an index, however only active alerts get sent there while recovered alert do not generate an entry inside the index. The following configuration is u… --- ## [Indexing Kibana visualization](https://discuss.elastic.co/t/indexing-kibana-visualization/323568)
**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\ **Replies:** 5\ **Last updated:** [January 20, 2023, 9:57am UTC](https://discuss.elastic.co/t/indexing-kibana-visualization/323568 "2023-01-20T09:57:21Z")
Is there any method through which we can directly create a bar-graph with supplied data in spring code in kibana. Without using any kibana interface. --- ## [Grey out "elastic-agent" in login items in Ventura](https://discuss.elastic.co/t/grey-out-elastic-agent-in-login-items-in-ventura/323578)
**Author:** [@jadi](https://discuss.elastic.co/u/jadi)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 9:49am UTC](https://discuss.elastic.co/t/grey-out-elastic-agent-in-login-items-in-ventura/323578 "2023-01-20T09:49:02Z")
Hey guys, Anyone managed to hide/grey out the "elastic-agent" that appears in login items in macOS Ventura? I created a service management profile with the bundleID "co.elastic.elastic-agent" but it's still doesn't wor… --- ## [Différence entre le Grok Debugger et le grok dans le filter](https://discuss.elastic.co/t/difference-entre-le-grok-debugger-et-le-grok-dans-le-filter/323507)
**Author:** [@martel](https://discuss.elastic.co/u/martel)\ **Replies:** 3\ **Last updated:** [January 20, 2023, 9:30am UTC](https://discuss.elastic.co/t/difference-entre-le-grok-debugger-et-le-grok-dans-le-filter/323507 "2023-01-20T09:30:15Z")
Bonjour, Je ne trouve pas la bonne manière de faire remplacer ce @timestamp par celui qui se trouve dans mon message. Le principe est simple 1 log = 1 ligne, c'est au format JSON {"startTime":"2023-01-17 14:17:50.238"… --- ## [Reading APM and Uptime data in C#](https://discuss.elastic.co/t/reading-apm-and-uptime-data-in-c/323575)
**Author:** [@basavaraja\_c\_n](https://discuss.elastic.co/u/basavaraja_c_n)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 9:20am UTC](https://discuss.elastic.co/t/reading-apm-and-uptime-data-in-c/323575 "2023-01-20T09:20:15Z")
I want to read the uptime and APM services data in a C# Application, Not seeing any api's exposed or i am not getting how to read? Any clue?? --- ## [Data loss without my consent](https://discuss.elastic.co/t/data-loss-without-my-consent/323319)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 8:52am UTC](https://discuss.elastic.co/t/data-loss-without-my-consent/323319 "2023-01-20T08:52:41Z")
Hello, I have a logstash script that takes files as input and sends them to an according elasticsearch index. Said script is run at 1am every night as a scheduled task, which worked in the beginning.But now, every time … --- ## [About built in dashboard](https://discuss.elastic.co/t/about-built-in-dashboard/323512)
**Author:** [@mr\_ph](https://discuss.elastic.co/u/mr_ph)\ **Replies:** 3\ **Last updated:** [January 20, 2023, 8:28am UTC](https://discuss.elastic.co/t/about-built-in-dashboard/323512 "2023-01-20T08:28:48Z")
Hi team, I am using ELK 8.5.3 and I have multiple servers and I am using metricbeat system module to collect the metrics and the dashboards were doing good. But I want group my servers. Is it possible to group the monit… --- ## [Winlogbeat performance](https://discuss.elastic.co/t/winlogbeat-performance/323571)
**Author:** [@MarcoVu](https://discuss.elastic.co/u/MarcoVu)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 8:11am UTC](https://discuss.elastic.co/t/winlogbeat-performance/323571 "2023-01-20T08:11:05Z")
So i have some Windows Event collector servers which collects events from workstations, and decided to send all collected events to Elasticsearch with Winlogbeat (8.4.1 version), but regardless of any of settings that i … --- ## [Kibana is extremely slow](https://discuss.elastic.co/t/kibana-is-extremely-slow/323485)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 6\ **Last updated:** [January 20, 2023, 8:00am UTC](https://discuss.elastic.co/t/kibana-is-extremely-slow/323485 "2023-01-20T08:00:48Z")
Hi everyone, I am trying to set up elk in my system but I am noticing that kibana is very very slow, from researches that I did, it could be that I have too many shards, but I really don't know how to deal with them. i… --- ## [Elastic index template and ilm policy configuracion reset by no reason](https://discuss.elastic.co/t/elastic-index-template-and-ilm-policy-configuracion-reset-by-no-reason/323566)
**Author:** [@Samuel\_Ruiz](https://discuss.elastic.co/u/Samuel_Ruiz)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 7:38am UTC](https://discuss.elastic.co/t/elastic-index-template-and-ilm-policy-configuracion-reset-by-no-reason/323566 "2023-01-20T07:38:41Z")
Hey. We have a docker cluster deploy of various nodes of elasticsearch (7.17.6) and a kibana node (7.17.6). In addition we have two Wazuh nodes, master-worker. This ELK-Wazuh implementation don't let us update the cluste… --- ## [Unable to use 2 fie log and 2 different index for them](https://discuss.elastic.co/t/unable-to-use-2-fie-log-and-2-different-index-for-them/323563)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 5:39am UTC](https://discuss.elastic.co/t/unable-to-use-2-fie-log-and-2-different-index-for-them/323563 "2023-01-20T05:39:21Z")
below is my filebeat it is working fine for 1 log location and 1 index but i want to use 2 file log location and 2 diifferent index 1 index for 1 log path. how can we do this filebeat.inputs: type: log enabled: true … --- ## [Discard non-letter characters during Completion Suggestor indexing](https://discuss.elastic.co/t/discard-non-letter-characters-during-completion-suggestor-indexing/323561)
**Author:** [@vikk](https://discuss.elastic.co/u/vikk)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 3:58am UTC](https://discuss.elastic.co/t/discard-non-letter-characters-during-completion-suggestor-indexing/323561 "2023-01-20T03:58:31Z")
Here's my index: PUT autocomplete-food { "mappings": { "properties": { "suggest": { "type": "completion" } } } } Adding a document to this index: PUT autocomplete-food/\_doc/1?refresh { … --- ## [How to get enrollment token when re-install Elasticsearch to Windows](https://discuss.elastic.co/t/how-to-get-enrollment-token-when-re-install-elasticsearch-to-windows/323314)
**Author:** [@oga](https://discuss.elastic.co/u/oga)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 3:36am UTC](https://discuss.elastic.co/t/how-to-get-enrollment-token-when-re-install-elasticsearch-to-windows/323314 "2023-01-20T03:36:08Z")
When installing Elasticsarch8.6 on Windows, after runnning elasticsearch.bat I forgot to write down the enrollment token. To get the enrollment token,delete the elasticsearch directory and unzip the elasticsearch an… --- ## [In Docker swarm environment, Kibana not running](https://discuss.elastic.co/t/in-docker-swarm-environment-kibana-not-running/323559)
**Author:** [@hzdtony](https://discuss.elastic.co/u/hzdtony)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 2:35am UTC](https://discuss.elastic.co/t/in-docker-swarm-environment-kibana-not-running/323559 "2023-01-20T02:35:36Z")
My docker swarm have two node, follow as I has deploy elk in my dokcer swarm In the docker swarm, depends\_on not avaiable. so beyond control service start order. As a result kibana\_system user unable create.… --- ## [Vulnerabilities Related to Java (in January 2023.)](https://discuss.elastic.co/t/vulnerabilities-related-to-java-in-january-2023/323557)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 2:33am UTC](https://discuss.elastic.co/t/vulnerabilities-related-to-java-in-january-2023/323557 "2023-01-20T02:33:39Z")
Oracle released "Critical Patch Updates, Security Alerts and Bulletins" in January 2023. These include vulnerabilities involving Java. Is there any official word on the impact on Elastic products? cf. --- ## [How to do Calculation in Elasticsearch Query](https://discuss.elastic.co/t/how-to-do-calculation-in-elasticsearch-query/323496)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 5\ **Last updated:** [January 20, 2023, 1:39am UTC](https://discuss.elastic.co/t/how-to-do-calculation-in-elasticsearch-query/323496 "2023-01-20T01:39:44Z")
Hi there, to continue discussion below, I decided to create a new topic. please read the topic below first so you can understand it. OK, so the next question is how if i use elasticsearch query to calculate expire dat… --- ## [Bool query with boost for should clause](https://discuss.elastic.co/t/bool-query-with-boost-for-should-clause/323555)
**Author:** [@seeminglee](https://discuss.elastic.co/u/seeminglee)\ **Replies:** 1\ **Last updated:** [January 20, 2023, 1:33am UTC](https://discuss.elastic.co/t/bool-query-with-boost-for-should-clause/323555 "2023-01-20T01:33:55Z")
How can you add boost to specific part of a should query. For example: { "query": { "bool": { "should": \[ {"term":{"fruit.keyword":"apple"}}, {"term":{"fruit.keyword":"banana"}}, {"te… --- ## [Reindexing the data from an existing index to new index with Completion fields](https://discuss.elastic.co/t/reindexing-the-data-from-an-existing-index-to-new-index-with-completion-fields/323471)
**Author:** [@Vaibhav\_Sinha](https://discuss.elastic.co/u/Vaibhav_Sinha)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 4:53am UTC](https://discuss.elastic.co/t/reindexing-the-data-from-an-existing-index-to-new-index-with-completion-fields/323471 "2023-01-19T04:53:38Z")
Hey Team, I need some help reindexing the data from an existing Index (keyword/string-based fields) to a new index with fields of type Completion. I have created the new index to be used for Completion Suggesters with … --- ## [Custom code for pagination in Logstash](https://discuss.elastic.co/t/custom-code-for-pagination-in-logstash/323474)
**Author:** [@anik-27](https://discuss.elastic.co/u/anik-27)\ **Replies:** 2\ **Last updated:** [January 19, 2023, 11:00pm UTC](https://discuss.elastic.co/t/custom-code-for-pagination-in-logstash/323474 "2023-01-19T23:00:08Z")
Hello there ! I am fetching some data using the vRealize api, I want to add pagination using the custom code. which programming language can I use and how can I achieve this ? Can someone please help me with this ! --- ## [Elastic fleet server fails to install after 8.6.0](https://discuss.elastic.co/t/elastic-fleet-server-fails-to-install-after-8-6-0/323063)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 6\ **Last updated:** [January 19, 2023, 10:39pm UTC](https://discuss.elastic.co/t/elastic-fleet-server-fails-to-install-after-8-6-0/323063 "2023-01-19T22:39:23Z")
"Fleet Server - Waiting on fleet-server input to be added to default policy","ecs.version":"1.6.0"} {"log.level":"info","@timestamp":"2023-01-12T12:57:55.988-0800","log.origin":{"file.name":"cmd/enroll\_cmd.go","file.lin… --- ## [My cluster frequently has shards on initializing\_shards](https://discuss.elastic.co/t/my-cluster-frequently-has-shards-on-initializing-shards/323446)
**Author:** [@Lohanna\_Sarah](https://discuss.elastic.co/u/Lohanna_Sarah)\ **Replies:** 12\ **Last updated:** [January 19, 2023, 9:57pm UTC](https://discuss.elastic.co/t/my-cluster-frequently-has-shards-on-initializing-shards/323446 "2023-01-19T21:57:03Z")
My cluster frequently has shards in the initializing\_shards state. The cluster is running on ks8. Exists any fix that I could do to fix it? The data nodes are restarted at least once a day --- ## [Fleet server stuck upgrading 8.5.3 -\> 8.6.0](https://discuss.elastic.co/t/fleet-server-stuck-upgrading-8-5-3-8-6-0/323204)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 8:01pm UTC](https://discuss.elastic.co/t/fleet-server-stuck-upgrading-8-5-3-8-6-0/323204 "2023-01-19T20:01:33Z")
Our fleet server runs on our kibana server, with about 20 agents connected. We upgrade our Elastic cluster from 8.5.3 to 8.6.0 and the upgrade popped up in the fleet UI just fine. Selected the fleet server for the upgra… --- ## [Elastic Search for Frequent Location Updates](https://discuss.elastic.co/t/elastic-search-for-frequent-location-updates/323542)
**Author:** [@nsarvesh](https://discuss.elastic.co/u/nsarvesh)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 7:32pm UTC](https://discuss.elastic.co/t/elastic-search-for-frequent-location-updates/323542 "2023-01-19T19:32:03Z")
Hi Team, We are planning to build a calendar application with Location-based Search Capabilities. We want to store the user availability and the geolocation. Eg: { User: "foo" day: "Jan-19-2022… [Previous page](https://discuss.elastic.co/latest.md?page=812) [Next page](https://discuss.elastic.co/latest.md?page=814)