# Latest **URL:** https://discuss.elastic.co/latest.md?page=828 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 829 --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/322736)
**Author:** [@themainguru](https://discuss.elastic.co/u/themainguru)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 10:59pm UTC](https://discuss.elastic.co/t/logstash-configuration/322736 "2023-01-09T22:59:24Z")
Hello All, I am using a docker image of sebp/elk. I have setup an EC2 Ubuntu machine. This is a vanilla installation. I have a rails app on another server. I want to push logs from rails to logstash. I am not sure wher… --- ## [Elasticsearch-java dependency on httpclient](https://discuss.elastic.co/t/elasticsearch-java-dependency-on-httpclient/322770)
**Author:** [@bbunton](https://discuss.elastic.co/u/bbunton)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 10:33pm UTC](https://discuss.elastic.co/t/elasticsearch-java-dependency-on-httpclient/322770 "2023-01-09T22:33:45Z")
I have been working with Elasticsearch as a developer for a couple of years now and have successfully written some NiFi services that use the now deprecated Java API that uses port 9300 to query/retrieve/delete records t… --- ## [Indexing multiple csv files into one index with nested fields](https://discuss.elastic.co/t/indexing-multiple-csv-files-into-one-index-with-nested-fields/322687)
**Author:** [@ivandreev1618](https://discuss.elastic.co/u/ivandreev1618)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 10:25pm UTC](https://discuss.elastic.co/t/indexing-multiple-csv-files-into-one-index-with-nested-fields/322687 "2023-01-09T22:25:10Z")
I want to load data from multiple CSV files(Users, Scores, Messages) into one index via logstash. All CSV files have the same "userId" field that connects data in it. My goal is to have User-Index as a result, that has… --- ## [Understanding metrics filters](https://discuss.elastic.co/t/understanding-metrics-filters/322648)
**Author:** [@Dustin527](https://discuss.elastic.co/u/Dustin527)\ **Replies:** 11\ **Last updated:** [January 9, 2023, 10:15pm UTC](https://discuss.elastic.co/t/understanding-metrics-filters/322648 "2023-01-09T22:15:23Z")
Hi I am having trouble understanding the proper way to use metrics filter plugin to count the number of fields of a particular type. Say I have a file formatted with a name and age separated by a space e.g.: dustin 40 e… --- ## [Script\_score query with cosineSimularity on alias](https://discuss.elastic.co/t/script-score-query-with-cosinesimularity-on-alias/321700)
**Author:** [@KentLee](https://discuss.elastic.co/u/KentLee)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 10:19pm UTC](https://discuss.elastic.co/t/script-score-query-with-cosinesimularity-on-alias/321700 "2022-12-20T22:19:45Z")
I have an alias created with several different indices and each index has multiple dense\_vector fields. I want to perform a script\_score search on all the dense\_vector field with the cosineSimularity function. For examp… --- ## [Logstash syntax error](https://discuss.elastic.co/t/logstash-syntax-error/322754)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 5\ **Last updated:** [January 9, 2023, 8:28pm UTC](https://discuss.elastic.co/t/logstash-syntax-error/322754 "2023-01-09T20:28:20Z")
Hi Team, I have logstash on two servers. It seems its working as index are getting created and logstash service is running from few days but whenever i checked logstash syntax, it shows below error. Is there anything wr… --- ## [Showing Enterprise Search menu in multiple spaces](https://discuss.elastic.co/t/showing-enterprise-search-menu-in-multiple-spaces/321387)
**Author:** [@Steven29](https://discuss.elastic.co/u/Steven29)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 8:12pm UTC](https://discuss.elastic.co/t/showing-enterprise-search-menu-in-multiple-spaces/321387 "2023-01-09T20:12:23Z")
I want to know how to adjust about 'Enterprise Search' menu, When I make a another new spaces. I'm sorry for that I can't bring some captured image. Elasticsearch version is 8.5.0, I make a new spaces and when I chec… --- ## [Switch search index to new index](https://discuss.elastic.co/t/switch-search-index-to-new-index/321611)
**Author:** [@Arunadevi](https://discuss.elastic.co/u/Arunadevi)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 8:11pm UTC](https://discuss.elastic.co/t/switch-search-index-to-new-index/321611 "2023-01-09T20:11:24Z")
Hi, use case: I have an my-index and restored(renamed) restored-my-index , currently my enterprise search engine searches from the my-index Question: Is it possible to switch search from my-index to restored-my-index w… --- ## [App Search: how to best index a site that doesn't crawl well - Confluence wiki for example](https://discuss.elastic.co/t/app-search-how-to-best-index-a-site-that-doesnt-crawl-well-confluence-wiki-for-example/313195)
**Author:** [@tonyfam](https://discuss.elastic.co/u/tonyfam)\ **Replies:** 16\ **Last updated:** [January 9, 2023, 7:44pm UTC](https://discuss.elastic.co/t/app-search-how-to-best-index-a-site-that-doesnt-crawl-well-confluence-wiki-for-example/313195 "2023-01-09T19:44:07Z")
I'm very new to search and elastic, and I would like to close a large gap in my understanding. I'm reading your docs, done the tutorials, but I feel like I'm missing something basic. So I'm working on a niche tech sup… --- ## [Unexpected exception while running Enterprise Search: Error: Read timed out at](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102)
**Author:** [@Nids\_Rai](https://discuss.elastic.co/u/Nids_Rai)\ **Replies:** 20\ **Last updated:** [January 9, 2023, 7:40pm UTC](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102 "2023-01-09T19:40:54Z")
Getting read timeout error while setting up, Appsearch in ECK cluster. Elastic is up and running fine. The LOG : \[2022-06-14T06:10:00.351+00:00\]\[7\]\[2000\]\[app-server\]\[INFO\]: \[db\_lock\] \[installation\] Status: \[Failed\] Cr… --- ## [How delete platinum license?](https://discuss.elastic.co/t/how-delete-platinum-license/322742)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 6:38pm UTC](https://discuss.elastic.co/t/how-delete-platinum-license/322742 "2023-01-09T18:38:36Z")
hi! how can i remove the platinum license and enable the basic license? I tried POST /\_license/start\_trial?acknowledge=true but after 30 days the platinum license still remains... and tried xpack.license.self\_gen… --- ## [Dutation field type - days to weeks error](https://discuss.elastic.co/t/dutation-field-type-days-to-weeks-error/320996)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 4\ **Last updated:** [December 12, 2022, 9:11pm UTC](https://discuss.elastic.co/t/dutation-field-type-days-to-weeks-error/320996 "2022-12-12T21:11:15Z")
using a horizontal lens vis and a duration metric to human readable duration metrics, there appears to be a conversion miscalculation between days to weeks. the attached except shows the x axis increasing by 2.3 days un… --- ## [Java ElasticsearchClient ping timeout](https://discuss.elastic.co/t/java-elasticsearchclient-ping-timeout/322749)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 5:51pm UTC](https://discuss.elastic.co/t/java-elasticsearchclient-ping-timeout/322749 "2023-01-09T17:51:11Z")
Hi, We are caching the created connection, and use ping often to ensure that the connection is still valid and would like it to fail quickly if not so we can create a new one. With the Java High Level REST Client we ca… --- ## [Can i increase performance on one host?](https://discuss.elastic.co/t/can-i-increase-performance-on-one-host/322748)
**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 5:50pm UTC](https://discuss.elastic.co/t/can-i-increase-performance-on-one-host/322748 "2023-01-09T17:50:16Z")
I have one host with a lot of memory, cpus and disk. and I have static database of 700gb and 217M records, with only one client querying. can I increase the search speed?. now I get connection timeout sometimes. --- ## [No advice defined by class ExecutorInstrumentation.ExecutorRunnableInstrumentation.AdviceClass](https://discuss.elastic.co/t/no-advice-defined-by-class-executorinstrumentation-executorrunnableinstrumentation-adviceclass/322644)
**Author:** [@Chetan\_Kokil](https://discuss.elastic.co/u/Chetan_Kokil)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 5:48pm UTC](https://discuss.elastic.co/t/no-advice-defined-by-class-executorinstrumentation-executorrunnableinstrumentation-adviceclass/322644 "2023-01-09T17:48:38Z")
We are trying to use the elastic APM Agent with some customizations on it. it works fine with 1.26.2 but when we try to upgrade it to the 1.27.0 or above it starts throwing the above error and the agent doesnt work not t… --- ## [APM Agent | Java Application on Windows](https://discuss.elastic.co/t/apm-agent-java-application-on-windows/321290)
**Author:** [@srii](https://discuss.elastic.co/u/srii)\ **Replies:** 5\ **Last updated:** [January 9, 2023, 4:52pm UTC](https://discuss.elastic.co/t/apm-agent-java-application-on-windows/321290 "2023-01-09T16:52:35Z")
I've set up an ELK stack on Docker which I primarily use for ingestion and analysis of logs produced by a Java application. The logs are fed to ES by LogStash (file input) which works well. I have also added --javaagent … --- ## [Syslog client doesn't send to Logstash](https://discuss.elastic.co/t/syslog-client-doesnt-send-to-logstash/322618)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 6\ **Last updated:** [January 9, 2023, 4:52pm UTC](https://discuss.elastic.co/t/syslog-client-doesnt-send-to-logstash/322618 "2023-01-09T16:52:03Z")
Hello, Hello, I would like to get some advice for this configuration: Send rsyslog to my logstash. I tested both configurations without success. One moment it worked after restarting the pipeline nothing. $ModLoad i… --- ## [ML Unsupervised question](https://discuss.elastic.co/t/ml-unsupervised-question/322437)
**Author:** [@alex\_su](https://discuss.elastic.co/u/alex_su)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 4:40pm UTC](https://discuss.elastic.co/t/ml-unsupervised-question/322437 "2023-01-09T16:40:45Z")
Hi, as i know es provide ml to detect unusual event, like "Unusual Windows Username" and another exapmle is " Unusual Hour for a User to Logon". I have question about unusual meaning as belows. how to build this ml ? … --- ## [Unable to run Endpoint 8.4 on a Ubuntu 20.04 host hardened with CIS Level 2](https://discuss.elastic.co/t/unable-to-run-endpoint-8-4-on-a-ubuntu-20-04-host-hardened-with-cis-level-2/318559)
**Author:** [@dapster](https://discuss.elastic.co/u/dapster)\ **Replies:** 16\ **Last updated:** [January 9, 2023, 3:57pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-8-4-on-a-ubuntu-20-04-host-hardened-with-cis-level-2/318559 "2023-01-09T15:57:38Z")
Hi, I am encountering difficulties to properly run Endpoint (deployed thanks to Fleet Server) on a Ubuntu 20.04 host (hardened with CIS Level 2 and I suspect the issue to be related to system hardening). When I run ela… --- ## [Custom Log integration multiple pipelines](https://discuss.elastic.co/t/custom-log-integration-multiple-pipelines/322485)
**Author:** [@searchtastic](https://discuss.elastic.co/u/searchtastic)\ **Replies:** 7\ **Last updated:** [January 9, 2023, 3:43pm UTC](https://discuss.elastic.co/t/custom-log-integration-multiple-pipelines/322485 "2023-01-09T15:43:39Z")
I have a custom integration setup with Elastic agent. At the moment I have a directory with several log files containing quite different data. I can't use the same pipeline so I would like to reference another pipeline.… --- ## [Will synthetic tests be added to other languages?](https://discuss.elastic.co/t/will-synthetic-tests-be-added-to-other-languages/322739)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 3:25pm UTC](https://discuss.elastic.co/t/will-synthetic-tests-be-added-to-other-languages/322739 "2023-01-09T15:25:07Z")
I have checked in the documentation that the current syntax only includes js and ts, and whether I will consider adding other language versions, such as python, in the future --- ## [Best Practices for Adding New Logs?](https://discuss.elastic.co/t/best-practices-for-adding-new-logs/322743)
**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 3:01pm UTC](https://discuss.elastic.co/t/best-practices-for-adding-new-logs/322743 "2023-01-09T15:01:22Z")
Does anyone have a good process for adding a new system to monitor into Elastic? We're deploying the Elastic Agent to the servers now, so now I've got to come up with a standard process to discover data and determine be… --- ## [Best Optimization for wildcard queries](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 2:30pm UTC](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738 "2023-01-09T14:30:09Z")
Hello, I am working with elasticsearch on audit log data. I wanted to know what are the best optimizations and tokenizer/analyzer/term usages for optimizing elastic for wildcard queries. I have looked at n-grams and the… --- ## [Continuous transform not working as expected](https://discuss.elastic.co/t/continuous-transform-not-working-as-expected/321834)
**Author:** [@Dominik\_Solc](https://discuss.elastic.co/u/Dominik_Solc)\ **Replies:** 3\ **Last updated:** [January 9, 2023, 2:20pm UTC](https://discuss.elastic.co/t/continuous-transform-not-working-as-expected/321834 "2023-01-09T14:20:43Z")
Hello, I have problem that my continuous transform doesn't update as the index, which it takes data from, is getting new and new data. The original index, let's name it playwright-test-runs-data (as i have it named), i… --- ## [Define Multiple Conditions in an Alert](https://discuss.elastic.co/t/define-multiple-conditions-in-an-alert/322652)
**Author:** [@jlucas](https://discuss.elastic.co/u/jlucas)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 1:49pm UTC](https://discuss.elastic.co/t/define-multiple-conditions-in-an-alert/322652 "2023-01-09T13:49:41Z")
Is it possible to define multiple conditions in an alert? Based on this documentation (Alerting | Kibana Guide \[8.5\] | Elastic) it doesn't appear to. I would like to trigger an alert when 2 conditions are met. I want to … --- ## [CORS error while adding ServiceNow ITSM connector](https://discuss.elastic.co/t/cors-error-while-adding-servicenow-itsm-connector/321042)
**Author:** [@rakeshl](https://discuss.elastic.co/u/rakeshl)\ **Replies:** 0\ **Last updated:** [December 12, 2022, 2:40pm UTC](https://discuss.elastic.co/t/cors-error-while-adding-servicenow-itsm-connector/321042 "2022-12-12T14:40:12Z")
I have installed ECK with kibana 8.5.3. I have used logstash to forward the logs to ELK stack. I am able to see the logs in kibana. Now, I am trying to integrate elastic to ServiceNow ITSM for creating incidents for the … --- ## [Elasticsearch cosine similarity query question](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729)
**Author:** [@ward](https://discuss.elastic.co/u/ward)\ **Replies:** 3\ **Last updated:** [January 9, 2023, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729 "2023-01-09T13:22:23Z")
Hi there, I'm currently working on a face recognition project using Elasticsearch. I can't seem to get a working query for matching two datasets with each other. My most recent attempt is shown below the mapping. I was h… --- ## [Replicating data between an Elastic Cluster Nodes](https://discuss.elastic.co/t/replicating-data-between-an-elastic-cluster-nodes/322737)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 1:08pm UTC](https://discuss.elastic.co/t/replicating-data-between-an-elastic-cluster-nodes/322737 "2023-01-09T13:08:53Z")
Hi New to Elastic here and would like to get help with some inquiries. Scenario: 1- Let's assume that I have a cluster of (2) master nodes, is it possible to configure each node to hold its own data? In other words, N… --- ## [Filebeat and updating existing docs](https://discuss.elastic.co/t/filebeat-and-updating-existing-docs/320781)
**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\ **Replies:** 30\ **Last updated:** [January 9, 2023, 12:57pm UTC](https://discuss.elastic.co/t/filebeat-and-updating-existing-docs/320781 "2023-01-09T12:57:04Z")
Hi, I'm trying to update documents when they exists.. it is possible with filebeat? Logstash has that functionality... output { elasticsearch { doc\_as\_upsert =\> true document\_id =\> "%{fingerprint}" The fing… --- ## [Kibana and Azure Application Gateway](https://discuss.elastic.co/t/kibana-and-azure-application-gateway/322731)
**Author:** [@bruun963](https://discuss.elastic.co/u/bruun963)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 12:05pm UTC](https://discuss.elastic.co/t/kibana-and-azure-application-gateway/322731 "2023-01-09T12:05:10Z")
Hi, First time testing a ECK deployment on Azure Kubernetes Service with the Application Gateway as an ingress controller. But somehow the health probes are unable to connect to the Kibana pod. There's no response. If … [Previous page](https://discuss.elastic.co/latest.md?page=827) [Next page](https://discuss.elastic.co/latest.md?page=829)