# Latest

**URL:** https://discuss.elastic.co/latest.md?page=837

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 838

---

## [Missing required property 'Highlight.fields'](https://discuss.elastic.co/t/missing-required-property-highlight-fields/322294)

<div class="topic-metadata">

**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 9:27am UTC](https://discuss.elastic.co/t/missing-required-property-highlight-fields/322294 "2023-01-02T09:27:35Z")

</div>

i am using elasticsearch bool querry with springboot application my querry is as follow: public List\<feed\> search(String id) throws IOException { Query bodyTermQuery = TermQuery.of(tq -\> tq.field("bo…

---

## [Kibana Graph Links](https://discuss.elastic.co/t/kibana-graph-links/317226)

<div class="topic-metadata">

**Author:** [@Rachel\_Bond](https://discuss.elastic.co/u/Rachel_Bond)\
**Replies:** 3\
**Last updated:** [December 5, 2022, 12:34pm UTC](https://discuss.elastic.co/t/kibana-graph-links/317226 "2022-12-05T12:34:59Z")

</div>

Hi ELK Community! I was just wondering if there were a way to define links within Graph using an existing field and if not a native capability, if is there a workaround someone has found to make this work? Thank you fo…

---

## [Year is missing from original log file, log events are stored as current year](https://discuss.elastic.co/t/year-is-missing-from-original-log-file-log-events-are-stored-as-current-year/322300)

<div class="topic-metadata">

**Author:** [@r123](https://discuss.elastic.co/u/r123)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 11:11am UTC](https://discuss.elastic.co/t/year-is-missing-from-original-log-file-log-events-are-stored-as-current-year/322300 "2023-01-02T11:11:27Z")

</div>

Hi there, I have been testing the ELK-Stack recently. The ELK-Stack runs on a standalone server (elk-host01) After setting everything up, I have installed the elastic-agent on another server (srv-docker01). The logs ar…

---

## [Using logstash to connect to Azure Datalake Storage Account from elasticsearch](https://discuss.elastic.co/t/using-logstash-to-connect-to-azure-datalake-storage-account-from-elasticsearch/322296)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 9:54am UTC](https://discuss.elastic.co/t/using-logstash-to-connect-to-azure-datalake-storage-account-from-elasticsearch/322296 "2023-01-02T09:54:56Z")

</div>

Hi all, Using jdbc driver in logstash, I'm able to connect elasticsearch with different databases like mysql , etc & get data to elasticsearch. But I'm not able to connect elasticsearch with Azure Data Lake Storage Gen…

---

## [How to implement index rollover properties/condition in ES using spring data elasticsearch](https://discuss.elastic.co/t/how-to-implement-index-rollover-properties-condition-in-es-using-spring-data-elasticsearch/322218)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 3\
**Last updated:** [January 2, 2023, 8:15am UTC](https://discuss.elastic.co/t/how-to-implement-index-rollover-properties-condition-in-es-using-spring-data-elasticsearch/322218 "2023-01-02T08:15:37Z")

</div>

Hello All, How can I add the following property values in Elasticsearch when using spring-data-elasticsearch? Data from spring to elastic and need to configure ILM for this.For this specific usecase logsatsh cant be us…

---

## [How to fetch data from Elasticseach and display in React using APIs](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197)

<div class="topic-metadata">

**Author:** [@khlinten\_demelash](https://discuss.elastic.co/u/khlinten_demelash)\
**Replies:** 8\
**Last updated:** [January 2, 2023, 8:03am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197 "2023-01-02T08:03:47Z")

</div>

Hello, I'm from Ethiopia, and I'm working in Front-end Website Development. am using ReactJS and Elasticsearch. I'm getting trouble fetching data from Elasticsearch(https://192.168.1.3:9200/clientesafewindows-logstash/\_…

---

## [Where did the time picker in discover went?](https://discuss.elastic.co/t/where-did-the-time-picker-in-discover-went/317908)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [December 5, 2022, 9:21am UTC](https://discuss.elastic.co/t/where-did-the-time-picker-in-discover-went/317908 "2022-12-05T09:21:02Z")

</div>

Hi, I made a fresh install of kibana 8.4.3. Where did the time picker went? Also in Discover panel I have plenty of usecases where I need to specify a time range. Thanks a lot, Andreas

---

## [Error sending data to APM server: Read timed out, response code is -1](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/322242)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 1\
**Last updated:** [January 2, 2023, 6:23am UTC](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/322242 "2023-01-02T06:23:35Z")

</div>

Hi APM agent \>\>\> APM server. APM agent can't send data to APM server. FYI1: Telnet and curl work properly from agent to server. FYI2: On agent log i can see traces are log correctly but not send to server! FYI3: Eve…

---

## [Collect all logs from a Windows host with Winlogbeat](https://discuss.elastic.co/t/collect-all-logs-from-a-windows-host-with-winlogbeat/322278)

<div class="topic-metadata">

**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 3:40am UTC](https://discuss.elastic.co/t/collect-all-logs-from-a-windows-host-with-winlogbeat/322278 "2023-01-02T03:40:20Z")

</div>

Hi, Does anyone know if there is a default config to collect everything available from a Windows host? We are currently running configs to collect specific logs such as System, Security; however we would like to collec…

---

## [Delete Kibana index](https://discuss.elastic.co/t/delete-kibana-index/320405)

<div class="topic-metadata">

**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\
**Replies:** 2\
**Last updated:** [December 5, 2022, 2:39am UTC](https://discuss.elastic.co/t/delete-kibana-index/320405 "2022-12-05T02:39:53Z")

</div>

Hi , a new index gets created , every month , so for this december one index got created, if I delete the index and re run , will a new index gets created for December. Note: A new index gets created, if a bot runs on f…

---

## [Alerts for missing results during the last week](https://discuss.elastic.co/t/alerts-for-missing-results-during-the-last-week/322085)

<div class="topic-metadata">

**Author:** [@adiad](https://discuss.elastic.co/u/adiad)\
**Replies:** 1\
**Last updated:** [January 2, 2023, 12:19am UTC](https://discuss.elastic.co/t/alerts-for-missing-results-during-the-last-week/322085 "2023-01-02T00:19:23Z")

</div>

Hi Would it be possible to create a watcher using two different overlapping time ranges and get the delta (subtract the results and get only those that are missing) I'm trying to create an alert that checks my last wee…

---

## [Fluentd cannot connect to Elasticsearch](https://discuss.elastic.co/t/fluentd-cannot-connect-to-elasticsearch/322269)

<div class="topic-metadata">

**Author:** [@Zeynal\_Hajili](https://discuss.elastic.co/u/Zeynal_Hajili)\
**Replies:** 13\
**Last updated:** [January 1, 2023, 9:08pm UTC](https://discuss.elastic.co/t/fluentd-cannot-connect-to-elasticsearch/322269 "2023-01-01T21:08:29Z")

</div>

Hello everybody, First of all, happy new year to everybody :slight\_smile: I need your help with the ELK stack. I have installed Elastic , Kibana and Fluentd with HelmChart. I have healthy cluster of Elasticsearch ,I …

---

## [Kibana gone wrong](https://discuss.elastic.co/t/kibana-gone-wrong/320418)

<div class="topic-metadata">

**Author:** [@Rohan\_Dina\_Nath](https://discuss.elastic.co/u/Rohan_Dina_Nath)\
**Replies:** 1\
**Last updated:** [December 4, 2022, 9:12pm UTC](https://discuss.elastic.co/t/kibana-gone-wrong/320418 "2022-12-04T21:12:22Z")

</div>

Hi all, When displaying in Kibana I am getting this error. I am not sure if this is the right place but any help would be much appriciated. \[esaggs\] \> EsError: index \[.async-search\] blocked by: \[TOO\_MANY\_REQUESTS/12/di…

---

## [\[Elastic 8.5.2\] bug in ingestion pipeline?](https://discuss.elastic.co/t/elastic-8-5-2-bug-in-ingestion-pipeline/322231)

<div class="topic-metadata">

**Author:** [@Pierre\_LANCASTRE](https://discuss.elastic.co/u/Pierre_LANCASTRE)\
**Replies:** 2\
**Last updated:** [January 1, 2023, 7:12pm UTC](https://discuss.elastic.co/t/elastic-8-5-2-bug-in-ingestion-pipeline/322231 "2023-01-01T19:12:57Z")

</div>

Hi, For the context, I ve got an Elasticagent on my rsyslog which forwards raw udp log to my Elasticstack (running as standalone). I've defined a K-V action in the pipeline to split the message and create the different…

---

## [Rsyslog is not forwarding logs to elasticsearch](https://discuss.elastic.co/t/rsyslog-is-not-forwarding-logs-to-elasticsearch/322266)

<div class="topic-metadata">

**Author:** [@Aksel](https://discuss.elastic.co/u/Aksel)\
**Replies:** 6\
**Last updated:** [January 1, 2023, 6:37pm UTC](https://discuss.elastic.co/t/rsyslog-is-not-forwarding-logs-to-elasticsearch/322266 "2023-01-01T18:37:25Z")

</div>

I'm trying to configure rsyslog to send logs to logstash and then forward them to elasticsearch. I have create a config file /etc/rsyslog.d/60-output.conf with the following content: \*.\* @localhost:10514;json-template …

---

## [Shards Failure - Kibana Dashboard](https://discuss.elastic.co/t/shards-failure-kibana-dashboard/318287)

<div class="topic-metadata">

**Author:** [@balaa](https://discuss.elastic.co/u/balaa)\
**Replies:** 5\
**Last updated:** [December 4, 2022, 9:06pm UTC](https://discuss.elastic.co/t/shards-failure-kibana-dashboard/318287 "2022-12-04T21:06:29Z")

</div>

Hi Team, We are are using ELK 7.16.3 version and when ever the timeframe is more than 30 days i am getting the shards failure in my dashboard. node\_disconnected\_exception at shard 0 index sd-daily-20220422-00105-000…

---

## [What datatype to select](https://discuss.elastic.co/t/what-datatype-to-select/321847)

<div class="topic-metadata">

**Author:** [@Hasan](https://discuss.elastic.co/u/Hasan)\
**Replies:** 7\
**Last updated:** [January 1, 2023, 3:54pm UTC](https://discuss.elastic.co/t/what-datatype-to-select/321847 "2023-01-01T15:54:24Z")

</div>

Hello, while importing my dataset I have this column which consist of numerical and string values. When setting the datatype in mappings to keyword its not showing the numerical values and by changing it to double its sh…

---

## [Elasticsearch output plugin ssl verification](https://discuss.elastic.co/t/elasticsearch-output-plugin-ssl-verification/322264)

<div class="topic-metadata">

**Author:** [@Mahdi\_Moazami](https://discuss.elastic.co/u/Mahdi_Moazami)\
**Replies:** 2\
**Last updated:** [January 1, 2023, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-ssl-verification/322264 "2023-01-01T14:51:13Z")

</div>

Hi elastic team I've configured a pipeline containing a file input, some filters and elasticsearch output. the target es server is secured by ssl and the certificates are generated using the the way explained in docs. n…

---

## [Integrate Fortigate with Logstash](https://discuss.elastic.co/t/integrate-fortigate-with-logstash/322262)

<div class="topic-metadata">

**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\
**Replies:** 0\
**Last updated:** [January 1, 2023, 12:51pm UTC](https://discuss.elastic.co/t/integrate-fortigate-with-logstash/322262 "2023-01-01T12:51:56Z")

</div>

Hello Team can anyone tell me a way or video explain how to integrate fortigate logs with logstash and elasticsearch and a way to make it appear in kibana i have elasticsearch 7.17.6 Kibana 7.17.6 Logstash 7.17.6 T…

---

## [Subtract timestamps from logs basis a field and show as a view on dashboard](https://discuss.elastic.co/t/subtract-timestamps-from-logs-basis-a-field-and-show-as-a-view-on-dashboard/317718)

<div class="topic-metadata">

**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\
**Replies:** 3\
**Last updated:** [November 7, 2022, 6:58am UTC](https://discuss.elastic.co/t/subtract-timestamps-from-logs-basis-a-field-and-show-as-a-view-on-dashboard/317718 "2022-11-07T06:58:22Z")

</div>

Apologies for reposting this. As a newbie to Kiabana, I couldn't achieve the earlier proposed solution from Kibana views. Can someone please guide me how and where to add equation or add code to achieve below? Any snippe…

---

## [Upload more then one log in Kibana](https://discuss.elastic.co/t/upload-more-then-one-log-in-kibana/319859)

<div class="topic-metadata">

**Author:** [@g.bas](https://discuss.elastic.co/u/g.bas)\
**Replies:** 2\
**Last updated:** [December 4, 2022, 3:10pm UTC](https://discuss.elastic.co/t/upload-more-then-one-log-in-kibana/319859 "2022-12-04T15:10:14Z")

</div>

Hello I have a question I am new to the whole topic and now have the problem. That I can only upload a log for a visualization. So my concrete question is how I can load more than one log file on the one hand when creati…

---

## [How to get api url to perform this action from my mobile app](https://discuss.elastic.co/t/how-to-get-api-url-to-perform-this-action-from-my-mobile-app/318254)

<div class="topic-metadata">

**Author:** [@Gilles\_GNANAGBE](https://discuss.elastic.co/u/Gilles_GNANAGBE)\
**Replies:** 1\
**Last updated:** [November 7, 2022, 6:01am UTC](https://discuss.elastic.co/t/how-to-get-api-url-to-perform-this-action-from-my-mobile-app/318254 "2022-11-07T06:01:41Z")

</div>

Example : DELETE index PUT index/\_doc/1 { "foo": "bar" } GET index/\_search { "query": { "match": { "foo": "bar" } } } from what api url can i perform this from my mobile app ? I'm very new in thi…

---

## [Kibana Visualization Bar/Line color not stable](https://discuss.elastic.co/t/kibana-visualization-bar-line-color-not-stable/316054)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 5:37am UTC](https://discuss.elastic.co/t/kibana-visualization-bar-line-color-not-stable/316054 "2022-10-10T05:37:52Z")

</div>

Hello All, I want to make a visual with stable bar colors but colors are changing once i add those visuals on dashboard. And also they change when i try to change them from dashboard or from inside the visual. Is there …

---

## [Cisco FTD cisco.ftd.security Unknown Field Search](https://discuss.elastic.co/t/cisco-ftd-cisco-ftd-security-unknown-field-search/320814)

<div class="topic-metadata">

**Author:** [@cmenuey](https://discuss.elastic.co/u/cmenuey)\
**Replies:** 2\
**Last updated:** [December 31, 2022, 6:27pm UTC](https://discuss.elastic.co/t/cisco-ftd-cisco-ftd-security-unknown-field-search/320814 "2022-12-31T18:27:35Z")

</div>

Hi all, I'm trying to figure out the best way I can build some dashboards or perform searches against the data field cisco.ftd.security from the Cisco FTD integration. When I attempt to search any of the terms in this f…

---

## [Elastic search: running with the root UID is forbidden](https://discuss.elastic.co/t/elastic-search-running-with-the-root-uid-is-forbidden/322221)

<div class="topic-metadata">

**Author:** [@gopublog](https://discuss.elastic.co/u/gopublog)\
**Replies:** 2\
**Last updated:** [December 31, 2022, 6:22pm UTC](https://discuss.elastic.co/t/elastic-search-running-with-the-root-uid-is-forbidden/322221 "2022-12-31T18:22:41Z")

</div>

I am trying to install elasticsearch in my aks cluster and it is failing. I have followed the below steps: root@developer1:~/elasticsearch# git clone https://github.com/elastic/helm-charts.git Cloning into 'helm-charts…

---

## [Fleet Data streams is No data streams](https://discuss.elastic.co/t/fleet-data-streams-is-no-data-streams/318283)

<div class="topic-metadata">

**Author:** [@eezzlife](https://discuss.elastic.co/u/eezzlife)\
**Replies:** 1\
**Last updated:** [November 7, 2022, 3:20am UTC](https://discuss.elastic.co/t/fleet-data-streams-is-no-data-streams/318283 "2022-11-07T03:20:08Z")

</div>

Hello every one! I'm having some issues, here are my installation steps Install Elasticsearch with Docker on sever A. .env # Password for the 'elastic' user (at least 6 characters) ELASTIC\_PASSWORD=urpassword # Pas…

---

## [Elasticsearch connection problem in elassandra](https://discuss.elastic.co/t/elasticsearch-connection-problem-in-elassandra/322236)

<div class="topic-metadata">

**Author:** [@priyankaksa](https://discuss.elastic.co/u/priyankaksa)\
**Replies:** 3\
**Last updated:** [December 31, 2022, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-problem-in-elassandra/322236 "2022-12-31T14:48:36Z")

</div>

I am new to Elassandra. I want to make setup(windows 10) and hit queries from Elasticsearch url. I have installed Elassandra and start it is working fine but am not able to access Elasticsearch url. I also tried to c…

---

## [How to give shorter hit a higher score?](https://discuss.elastic.co/t/how-to-give-shorter-hit-a-higher-score/322245)

<div class="topic-metadata">

**Author:** [@JohnDope](https://discuss.elastic.co/u/JohnDope)\
**Replies:** 0\
**Last updated:** [December 31, 2022, 2:07pm UTC](https://discuss.elastic.co/t/how-to-give-shorter-hit-a-higher-score/322245 "2022-12-31T14:07:10Z")

</div>

I am building a ngram search example with ES. Is is possible to take account the shortest length of all the hits? Here's an example: Documents: {"aliases": \["ElonMuskTesla", "ElonTesla"\]} {"aliases": \["ElonMusk"\]} De…

---

## [Elasticsearch cluster on AWS ECS with discovery-ec2 fails to start after version 8.1.3](https://discuss.elastic.co/t/elasticsearch-cluster-on-aws-ecs-with-discovery-ec2-fails-to-start-after-version-8-1-3/322206)

<div class="topic-metadata">

**Author:** [@RaJiska](https://discuss.elastic.co/u/RaJiska)\
**Replies:** 1\
**Last updated:** [December 31, 2022, 12:48pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-aws-ecs-with-discovery-ec2-fails-to-start-after-version-8-1-3/322206 "2022-12-31T12:48:44Z")

</div>

Hi, EDIT: After more tests, this issue appears from version 8.2.0 onwards, while 8.1.3 seems to work as expected. Looking at the change log, I can see the following change for version 8.2.0 Support IMDSv2 for EC2 Discov…

---

## [Color code table row and graph bar depending depending on a threshold](https://discuss.elastic.co/t/color-code-table-row-and-graph-bar-depending-depending-on-a-threshold/318233)

<div class="topic-metadata">

**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\
**Replies:** 5\
**Last updated:** [November 6, 2022, 5:25pm UTC](https://discuss.elastic.co/t/color-code-table-row-and-graph-bar-depending-depending-on-a-threshold/318233 "2022-11-06T17:25:59Z")

</div>

Referring below/attached table screenshot: We want to show different color coding of a bar graph (or) a row item in a table depending on a threshold value. Threshold is not same for processes mentioned under 'processes…

[Previous page](https://discuss.elastic.co/latest.md?page=836)

[Next page](https://discuss.elastic.co/latest.md?page=838)
