# Latest **URL:** https://discuss.elastic.co/latest.md?page=829 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 830 --- ## [Lens Table - "wrong" selection of top N elements](https://discuss.elastic.co/t/lens-table-wrong-selection-of-top-n-elements/321784)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 8\ **Last updated:** [January 9, 2023, 11:12am UTC](https://discuss.elastic.co/t/lens-table-wrong-selection-of-top-n-elements/321784 "2023-01-09T11:12:53Z")
Hi! I want to display a table like this: | File Name | Number of warnings | | path/to/foo.cpp | 123 | | path/to/bar.cpp | 30 … --- ## [Unable to find Upgrade Assistant option in 8.3.3 version](https://discuss.elastic.co/t/unable-to-find-upgrade-assistant-option-in-8-3-3-version/322458)
**Author:** [@Abj\_Ins](https://discuss.elastic.co/u/Abj_Ins)\ **Replies:** 3\ **Last updated:** [January 9, 2023, 11:46am UTC](https://discuss.elastic.co/t/unable-to-find-upgrade-assistant-option-in-8-3-3-version/322458 "2023-01-09T11:46:56Z")
Hi Team, we are trying to upgrade from version 8.2.3 to 8.5 but, unable to find Upgrade Assistant option. Kindly help us and let us know the process, how to upgrade to the latest version. Thanks. --- ## [Error fields script in the Index Pattern](https://discuss.elastic.co/t/error-fields-script-in-the-index-pattern/321314)
**Author:** [@rpc29y](https://discuss.elastic.co/u/rpc29y)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 11:21am UTC](https://discuss.elastic.co/t/error-fields-script-in-the-index-pattern/321314 "2023-01-09T11:21:41Z")
Hello. I have an elastic version 7.10 and in the Index Pattern of one of the indexes I have created a simple fields script: "doc\['temperature'\]\* 10" Apparently the creation is correct, but I can't get to display the v… --- ## [Logstash SSL verification](https://discuss.elastic.co/t/logstash-ssl-verification/322615)
**Author:** [@hanna](https://discuss.elastic.co/u/hanna)\ **Replies:** 7\ **Last updated:** [January 9, 2023, 11:15am UTC](https://discuss.elastic.co/t/logstash-ssl-verification/322615 "2023-01-09T11:15:05Z")
Hello, how can I enable SSL certificate verification in my logstash pipeline output to elasticsearch? I don't find any documentation on which certificates to use here. The cluster version is 8.5.3. This is my logstash… --- ## [Translation does not work in EUI Core components](https://discuss.elastic.co/t/translation-does-not-work-in-eui-core-components/322636)
**Author:** [@wsbr](https://discuss.elastic.co/u/wsbr)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 11:10am UTC](https://discuss.elastic.co/t/translation-does-not-work-in-eui-core-components/322636 "2023-01-09T11:10:05Z")
Hi, We are using Elasticsearch 8.4.1 and some actions does not be translated. How to solve this problem? In the packages/core/i18n/core-i18n-browser-internal/src/i18n\_eui\_mapping.tsx file we find at line 1161 'euiQu… --- ## [Function score query with decay function on huge dataset](https://discuss.elastic.co/t/function-score-query-with-decay-function-on-huge-dataset/322724)
**Author:** [@minhdao](https://discuss.elastic.co/u/minhdao)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 11:09am UTC](https://discuss.elastic.co/t/function-score-query-with-decay-function-on-huge-dataset/322724 "2023-01-09T11:09:40Z")
Good day everyone. Background I'm building a search engine for a marketplace. Our market has products, sellers, and customers. Each product has many sellers with their locations. The number of sellers might be around 10… --- ## [Elasticsearch on Kubernetes - Auto scale](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-auto-scale/322539)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-auto-scale/322539 "2023-01-09T11:02:42Z")
Hi, We are upgrading our Elasticsearch clusters to work on top of EKS and we want to use autoscaling. We wonder if/when you'll support the autoscaling based on memory or CPU, and if there's a plan to dynamically add/re… --- ## [Download csv file option directly on visualization/dashboard](https://discuss.elastic.co/t/download-csv-file-option-directly-on-visualization-dashboard/322658)
**Author:** [@amarkoli](https://discuss.elastic.co/u/amarkoli)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 11:02am UTC](https://discuss.elastic.co/t/download-csv-file-option-directly-on-visualization-dashboard/322658 "2023-01-09T11:02:27Z")
the Download CSV option in visible when clicked on the "Inspect" which is open when clicked on the 3 dots icons. But can we have the Download CSV option directly on the visualization/dashboard or somewhere else. if ther… --- ## [KQL Query Date filter on non timeseries data](https://discuss.elastic.co/t/kql-query-date-filter-on-non-timeseries-data/321839)
**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\ **Replies:** 4\ **Last updated:** [January 9, 2023, 10:44am UTC](https://discuss.elastic.co/t/kql-query-date-filter-on-non-timeseries-data/321839 "2023-01-09T10:44:56Z")
Hi, I'm tying to use Lens to plot data changing over a period of time. We generate the data once a week at single point in time, and so it doesn't look good as a time series. We also want to plot the count of a data … --- ## [Docker-compose setup healthcheck unhealthy](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665)
**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 10:36am UTC](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665 "2023-01-09T10:36:39Z")
Hello, I'm using the example docker-compose file as presented here - with stack version 8.5.2 . I wrapped the docker-compose command into a systemd script. All services were running until today when I had to restart my … --- ## [Data Pipeline Design Considerations](https://discuss.elastic.co/t/data-pipeline-design-considerations/322717)
**Author:** [@Tiharqa](https://discuss.elastic.co/u/Tiharqa)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 9:47am UTC](https://discuss.elastic.co/t/data-pipeline-design-considerations/322717 "2023-01-09T09:47:21Z")
So I have a confluent kafka with multiple topics per network divided as follows NET1: Data NET1-SYSLG NET1-WIN ====== NET2 : Data NET2-SYSLG NET2-WIN I have 2 logstash servers reading from those topics on Kafka … --- ## [SentinelOne Integration - Missing Logs](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336)
**Author:** [@clintonm9](https://discuss.elastic.co/u/clintonm9)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 9:54am UTC](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336 "2023-01-09T09:54:43Z")
I have set up SentinelOne Integration and have enabled all of the log collections. I see logs coming in, but there is not much detail. Does anyone know if more details like you see in S1 console should be ingested? --- ## [Brand new master doesn't join cluster bootstrap error](https://discuss.elastic.co/t/brand-new-master-doesnt-join-cluster-bootstrap-error/322567)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 10\ **Last updated:** [January 9, 2023, 9:48am UTC](https://discuss.elastic.co/t/brand-new-master-doesnt-join-cluster-bootstrap-error/322567 "2023-01-09T09:48:36Z")
Hi, We have a 7.10.2 cluster with multiple data-only nodes and 3 master-only nodes. We wiped one of the 3 masters clean (reinstall), and now it refuses to join the cluster: master not discovered yet, this node has not… --- ## [About Fleet Agents categority](https://discuss.elastic.co/t/about-fleet-agents-categority/321844)
**Author:** [@cybersirp](https://discuss.elastic.co/u/cybersirp)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 9:38am UTC](https://discuss.elastic.co/t/about-fleet-agents-categority/321844 "2023-01-09T09:38:33Z")
How is the consumption of resources related to the number of agents that we deploy in our organizations calculated? Is there a formula to be able to have an approximate amount of resources needed for each agent that wil… --- ## [Yearly reset of cumulative sum with monthly buckets](https://discuss.elastic.co/t/yearly-reset-of-cumulative-sum-with-monthly-buckets/321315)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 9:36am UTC](https://discuss.elastic.co/t/yearly-reset-of-cumulative-sum-with-monthly-buckets/321315 "2023-01-09T09:36:49Z")
Hello, i have a table lens with a monthly date histogram and a cumulative sum column. Is there a way to "reset" the cumulative sum to 0 at the start of a year? So 1.1.2007 would start with 0 instead of 3867 from the… --- ## [Filebeat autodiscover filestream input have error logs with ID already exists](https://discuss.elastic.co/t/filebeat-autodiscover-filestream-input-have-error-logs-with-id-already-exists/322716)
**Author:** [@andry.zhu](https://discuss.elastic.co/u/andry.zhu)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 9:35am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-filestream-input-have-error-logs-with-id-already-exists/322716 "2023-01-09T09:35:24Z")
HI! I am running a filebeat version 8.5.3 daemonset in kubernetes cluster. I has configured autodiscover filestream input each namespace. it have error logs with ID already exists are often reported during run time. My … --- ## [Webhdfs Output plugin does not working with use\_kerberos\_auth](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-working-with-use-kerberos-auth/322714)
**Author:** [@vincent.ea3](https://discuss.elastic.co/u/vincent.ea3)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 9:20am UTC](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-working-with-use-kerberos-auth/322714 "2023-01-09T09:20:05Z")
Hello, I am working to deploy logstash in k8s container to output message to hadoop. https://github.com/elastic/helm-charts According to the documentation, webHDFS and Kerberos authentication are supported. https://w… --- ## [Applying Filters to the Category Page?](https://discuss.elastic.co/t/applying-filters-to-the-category-page/322659)
**Author:** [@datvnn](https://discuss.elastic.co/u/datvnn)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 9:15am UTC](https://discuss.elastic.co/t/applying-filters-to-the-category-page/322659 "2023-01-09T09:15:14Z")
I am using custom connector with search-ui-elasticsearch-connector for Nextjs. I'm having a problem with the category page section # /category/\[category\].tsx const categoryPageconfig = (category) =\> ({ ...Config, s… --- ## [\[8.5.3\] Unable to download CSV from dashboard / visualizations](https://discuss.elastic.co/t/8-5-3-unable-to-download-csv-from-dashboard-visualizations/321835)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 8\ **Last updated:** [January 9, 2023, 9:14am UTC](https://discuss.elastic.co/t/8-5-3-unable-to-download-csv-from-dashboard-visualizations/321835 "2023-01-09T09:14:49Z")
None of my Kibana dashboard or viz have a "Download to CVS" option showing up in 8.5.3. What am I missing? Below is my setup: I've installed the 8.5.3 stack of elasticsearch and kibana from this official doc. My kibana… --- ## [Logstash in Docker and Elastic down](https://discuss.elastic.co/t/logstash-in-docker-and-elastic-down/322675)
**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 9:06am UTC](https://discuss.elastic.co/t/logstash-in-docker-and-elastic-down/322675 "2023-01-09T09:06:38Z")
Hello, I'm running Logstash in Docker. Sometimes it happens that Elasticsearch is unavailable and when I restart the Logstash docker container, Logstash removing messages are they are no longer saved to Elasticsearch. I… --- ## [.NET Oracle.ManagedDataAccess.Core 3.\*.\* support](https://discuss.elastic.co/t/net-oracle-manageddataaccess-core-3-support/322538)
**Author:** [@tomaszn](https://discuss.elastic.co/u/tomaszn)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 8:57am UTC](https://discuss.elastic.co/t/net-oracle-manageddataaccess-core-3-support/322538 "2023-01-09T08:57:02Z")
In auto-instrumentation compatibility list Oracle.ManagedDataAccess.Core=2.\*.\* for integration to work. Are there any plans to extend support to Oracle.ManagedData.Access.Core=3.\*.\*? --- ## [Error: \[config validation of \[elasticsearch\].serviceAccountToken\]: serviceAccountToken cannot be specified when "username" is also set](https://discuss.elastic.co/t/error-config-validation-of-elasticsearch-serviceaccounttoken-serviceaccounttoken-cannot-be-specified-when-username-is-also-set/321020)
**Author:** [@iLucas.Bechlte.exe](https://discuss.elastic.co/u/iLucas.Bechlte.exe)\ **Replies:** 0\ **Last updated:** [December 12, 2022, 11:04am UTC](https://discuss.elastic.co/t/error-config-validation-of-elasticsearch-serviceaccounttoken-serviceaccounttoken-cannot-be-specified-when-username-is-also-set/321020 "2022-12-12T11:04:39Z")
Hello, when I try to follow this instruction to secure my Elastic Stack, I will get this error: Error: \[config validation of \[elasticsearch\].serviceAccountToken\]: serviceAccountToken cannot be specified when "username"… --- ## [All request sent to the same host while init RestHighLevelClient with domain](https://discuss.elastic.co/t/all-request-sent-to-the-same-host-while-init-resthighlevelclient-with-domain/321803)
**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 6:42am UTC](https://discuss.elastic.co/t/all-request-sent-to-the-same-host-while-init-resthighlevelclient-with-domain/321803 "2023-01-09T06:42:38Z")
I have an es cluster with multiple node. Recently I found that the bulk requests to the cluster seems uneven. Here is the demo code: import org.apache.http.HttpHost; import org.elasticsearch.action.ActionListener; imp… --- ## [Moving license from old cluster nodes to new ones](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592)
**Author:** [@Nick.Evans](https://discuss.elastic.co/u/Nick.Evans)\ **Replies:** 7\ **Last updated:** [January 9, 2023, 6:27am UTC](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592 "2023-01-09T06:27:48Z")
We have a 3 node elasticsearch cluster. (node-1, node-2, node-3) We have a need to introduce 3 new nodes and fail out the original 3. I have built nodes 4, 5 and 6 and successfully added them to cluster. Once the clus… --- ## [Why translog\_ops still greater than 0 after flush](https://discuss.elastic.co/t/why-translog-ops-still-greater-than-0-after-flush/322095)
**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 6:26am UTC](https://discuss.elastic.co/t/why-translog-ops-still-greater-than-0-after-flush/322095 "2023-01-09T06:26:53Z")
I want to move shards between different kind of nodes in my cluster. First, I stop write any docs into index and invoked POST my\_idx/\_flush to commit translog to lucene. Then change the index.routing.allocation.require … --- ## [Wildcard Queries Vs Query\_string Queries](https://discuss.elastic.co/t/wildcard-queries-vs-query-string-queries/322692)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 5:21am UTC](https://discuss.elastic.co/t/wildcard-queries-vs-query-string-queries/322692 "2023-01-09T05:21:39Z")
Hello, I am looking for wildcard matching of events on log data in elasticsearch. For example i want to match IP addresses in my data but I only know the ending address (i want to match to 192.100.1.1 but i search for \*… --- ## [Communications link failure\\n\\nThe last packet successfully received from the server was 50,079 milliseconds ago. The last packet sent successfully to the server was 50,080 milliseconds ago.",](https://discuss.elastic.co/t/communications-link-failure-n-nthe-last-packet-successfully-received-from-the-server-was-50-079-milliseconds-ago-the-last-packet-sent-successfully-to-the-server-was-50-080-milliseconds-ago/322698)
**Author:** [@sohan](https://discuss.elastic.co/u/sohan)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 4:49am UTC](https://discuss.elastic.co/t/communications-link-failure-n-nthe-last-packet-successfully-received-from-the-server-was-50-079-milliseconds-ago-the-last-packet-sent-successfully-to-the-server-was-50-080-milliseconds-ago/322698 "2023-01-09T04:49:53Z")
jdbc\_driver\_library =\> "/opt/bitnami/logstash/logstash-core/lib/jars/mysql-connector-java.jar" jdbc\_driver\_class =\> "com.mysql.cj.jdbc.Driver" jdbc\_connection\_string =\> "jdbc:mysql://db:3306/dbname?zeroDateTimeBehavior… --- ## [Kubernetes CPU Memory Usage in %](https://discuss.elastic.co/t/kubernetes-cpu-memory-usage-in/322429)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [January 9, 2023, 4:08am UTC](https://discuss.elastic.co/t/kubernetes-cpu-memory-usage-in/322429 "2023-01-09T04:08:56Z")
Hi Team, We need to find the CPU and Memory utilization % of pods in kubernetes through metricbeat. I have used the formula as: CPU: { "aggs": { "timeseries": { "auto\_date\_histogram": {"field": "@timestamp", "buc… --- ## [Elastic won't send data to Kibana](https://discuss.elastic.co/t/elastic-wont-send-data-to-kibana/318833)
**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 7:19am UTC](https://discuss.elastic.co/t/elastic-wont-send-data-to-kibana/318833 "2022-11-14T07:19:38Z")
Hallo, I have a configuration like the following, but elastic can't retrieve the logs. And the plain-log .log also doesn't show the activation log. How else can I confirm that logstash and filebeat are connected and tran… --- ## [Wildcard search on all fields](https://discuss.elastic.co/t/wildcard-search-on-all-fields/322693)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 2\ **Last updated:** [January 9, 2023, 2:55am UTC](https://discuss.elastic.co/t/wildcard-search-on-all-fields/322693 "2023-01-09T02:55:08Z")
Hello, I want to search a wildcard string on all fields of a document. Is there any way to do it? I was able to write this query but for some reason it always returns empty. {"bool": {"must" : \[{"wildcard": {"\_all": "… [Previous page](https://discuss.elastic.co/latest.md?page=828) [Next page](https://discuss.elastic.co/latest.md?page=830)