# Latest **URL:** https://discuss.elastic.co/latest.md?page=843 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 844 --- ## [Policy Assignation](https://discuss.elastic.co/t/policy-assignation/320917)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 1\ **Last updated:** [December 26, 2022, 6:21pm UTC](https://discuss.elastic.co/t/policy-assignation/320917 "2022-12-26T18:21:34Z")
Hi there! I would like to understand something related to elastic agents. When I have two agents enrolled with the same policy, is the ingestion automatically balanced depending on the agent's available resources, or do… --- ## [Elasticsearch config issue](https://discuss.elastic.co/t/elasticsearch-config-issue/321999)
**Author:** [@Lakshmi\_Kumari](https://discuss.elastic.co/u/Lakshmi_Kumari)\ **Replies:** 2\ **Last updated:** [December 26, 2022, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-config-issue/321999 "2022-12-26T18:11:05Z")
Running a duplicate node for the first time in the server, getting below issue. \[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch org.elasticsearch.http.BindHttpException: Failed to… --- ## [Entire data is not coming in watcher's PDF](https://discuss.elastic.co/t/entire-data-is-not-coming-in-watchers-pdf/322000)
**Author:** [@darshan\_folane](https://discuss.elastic.co/u/darshan_folane)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 5:46pm UTC](https://discuss.elastic.co/t/entire-data-is-not-coming-in-watchers-pdf/322000 "2022-12-26T17:46:21Z")
Hello, I have set up a basic watcher which will generate a PDF every 10min, but when I get a PDF on my mail it is like only a screenshot of that dashboard, the entire data is not coming. In the dashboard, I have a tabl… --- ## [What happens when warm tier gets filled up?](https://discuss.elastic.co/t/what-happens-when-warm-tier-gets-filled-up/321975)
**Author:** [@darshan\_folane](https://discuss.elastic.co/u/darshan_folane)\ **Replies:** 3\ **Last updated:** [December 26, 2022, 5:27pm UTC](https://discuss.elastic.co/t/what-happens-when-warm-tier-gets-filled-up/321975 "2022-12-26T17:27:17Z")
Currently, I'm having three warm nodes, and ILM continuously ingesting data in warm nodes. Warm nodes is holding 85%, 80%, and 86% of the data, and data is continuously ingested. So what happens when the warm tier gets … --- ## [Adding items to a new field](https://discuss.elastic.co/t/adding-items-to-a-new-field/321995)
**Author:** [@Glad](https://discuss.elastic.co/u/Glad)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 4:15pm UTC](https://discuss.elastic.co/t/adding-items-to-a-new-field/321995 "2022-12-26T16:15:31Z")
Hi, I recently started using Elastic and I'm having a problem. I am using a monitoring system for my tests to retrieve various data from the machines I am using. This monitoring system has an api that allows Logstash to … --- ## [Extract timestamp from multiple records](https://discuss.elastic.co/t/extract-timestamp-from-multiple-records/321993)
**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 3:38pm UTC](https://discuss.elastic.co/t/extract-timestamp-from-multiple-records/321993 "2022-12-26T15:38:45Z")
Hi, Below is my config file, input { file{ path =\> "/Users/.../Work/Projects/ELK/Logstash/Input/\*.txt" start\_position =\> beginning codec =\> "json" type =\> "data" sincedb\_path =\> "NUL" } } filter { … --- ## [How to get the graph similar to kibana demo](https://discuss.elastic.co/t/how-to-get-the-graph-similar-to-kibana-demo/317936)
**Author:** [@sixsenseninja](https://discuss.elastic.co/u/sixsenseninja)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 9:55am UTC](https://discuss.elastic.co/t/how-to-get-the-graph-similar-to-kibana-demo/317936 "2022-11-02T09:55:53Z")
Hi, i saw a graph from the following url: Elastic Demos) I wonder what widget being use and how can i achieve the similar result? I can't figure out what widget being used for that. --- ## [String to IP Convert](https://discuss.elastic.co/t/string-to-ip-convert/321984)
**Author:** [@nonameo](https://discuss.elastic.co/u/nonameo)\ **Replies:** 5\ **Last updated:** [December 26, 2022, 12:59pm UTC](https://discuss.elastic.co/t/string-to-ip-convert/321984 "2022-12-26T12:59:16Z")
Hi everyone, I have a problem converting the string field to IP datatype. I'm trying to convert via convert processor in the pipeline, also tried with the grok but nothing. How can I do that? Why the processors do not w… --- ## [Pagination issue on elasticsearch query result](https://discuss.elastic.co/t/pagination-issue-on-elasticsearch-query-result/321990)
**Author:** [@Manzoor\_Faisal](https://discuss.elastic.co/u/Manzoor_Faisal)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 12:52pm UTC](https://discuss.elastic.co/t/pagination-issue-on-elasticsearch-query-result/321990 "2022-12-26T12:52:47Z")
Hy, I hope you are good and doing well. I am facing issue during search query result of ELS. I configured ELS with my Code and When I search using ELS it shows result fine but the issue is it shows loading sign (three do… --- ## ["The heap is empty" error on KNN search](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550)
**Author:** [@abay.kenzhekhan](https://discuss.elastic.co/u/abay.kenzhekhan)\ **Replies:** 10\ **Last updated:** [December 26, 2022, 12:28pm UTC](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550 "2022-12-26T12:28:35Z")
I am doing following KNN search request { "filter": { "bool": { "must\_not": { "term": { "some\_field": 14642652 } }, "must": { "term": { "some\_field2": true } } } }, "knn": { … --- ## [Index.lifecycle.rollover\_alias \[filebeat-7.17.7\] does not point to index \[filebeat-7.17.7-2022.12.21\]](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-17-7-does-not-point-to-index-filebeat-7-17-7-2022-12-21/321917)
**Author:** [@tjay](https://discuss.elastic.co/u/tjay)\ **Replies:** 14\ **Last updated:** [December 26, 2022, 11:40am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-17-7-does-not-point-to-index-filebeat-7-17-7-2022-12-21/321917 "2022-12-26T11:40:19Z")
Hi, I started using elasticsearch, kibana, logstash and filebeat and noticed that the rollover error is occurring. Can someone shed a light on this? It looks there are two indexes and the second one (000002) is used at… --- ## [Which URLs should allow for Kibana](https://discuss.elastic.co/t/which-urls-should-allow-for-kibana/317873)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 1\ **Last updated:** [November 1, 2022, 9:47am UTC](https://discuss.elastic.co/t/which-urls-should-allow-for-kibana/317873 "2022-11-01T09:47:22Z")
Hi Which URL or links should allow for the Kibana server since we have restricted internet from our servers. Once disconnected from the internet then integration and other services are getting stuck (not loading) so is… --- ## [What type to choose for Dates Column](https://discuss.elastic.co/t/what-type-to-choose-for-dates-column/321979)
**Author:** [@Hasan](https://discuss.elastic.co/u/Hasan)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 9:26am UTC](https://discuss.elastic.co/t/what-type-to-choose-for-dates-column/321979 "2022-12-26T09:26:42Z")
Hello, I have got the dataset consisting of a date column. The Format for the date in my data file is MM-DD-YYYY. While importing the dataset to Kibana what type should I choose in the pipeline and in mappings to make it… --- ## [How to start Elastic Observability](https://discuss.elastic.co/t/how-to-start-elastic-observability/321978)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 9:13am UTC](https://discuss.elastic.co/t/how-to-start-elastic-observability/321978 "2022-12-26T09:13:09Z")
We are using heartbeat for node availability and filebeat for logs shipment. Now we want to explore elastic observability features. In kibana observability section there is uptime option with heartbeat we have used one o… --- ## [Logstash filter not working](https://discuss.elastic.co/t/logstash-filter-not-working/321948)
**Author:** [@parisila](https://discuss.elastic.co/u/parisila)\ **Replies:** 2\ **Last updated:** [December 26, 2022, 8:29am UTC](https://discuss.elastic.co/t/logstash-filter-not-working/321948 "2022-12-26T08:29:36Z")
I have filebeat, logstash and elasticsearch. My logstash config.d looks like this 02-beats-input.conf receives the message from filebeat 30-elasticsearch-output.conf sends to elasticsearch ingest pipeline. Logstash… --- ## [Document is not saved](https://discuss.elastic.co/t/document-is-not-saved/321976)
**Author:** [@dave3](https://discuss.elastic.co/u/dave3)\ **Replies:** 0\ **Last updated:** [December 26, 2022, 8:18am UTC](https://discuss.elastic.co/t/document-is-not-saved/321976 "2022-12-26T08:18:59Z")
I have created a documet with many fields, some of them are lists of Strings as follows: @Field(type = FieldType.Nested) private Set\ locationList = new HashSet\<\>(); but when I try to save this document, i get t… --- ## [Upgrade from 7.16.2 to 7.171.7](https://discuss.elastic.co/t/upgrade-from-7-16-2-to-7-171-7/320439)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [December 26, 2022, 7:37am UTC](https://discuss.elastic.co/t/upgrade-from-7-16-2-to-7-171-7/320439 "2022-12-26T07:37:07Z")
Hi, I have a three-node cluster version 716.2 and I want to upgrade it to 7.17.7. in my current cluster, TLS setting is activated by following: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpa… --- ## [Elastic APM java : Get Active serviceName](https://discuss.elastic.co/t/elastic-apm-java-get-active-servicename/321307)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 8\ **Last updated:** [December 26, 2022, 6:01am UTC](https://discuss.elastic.co/t/elastic-apm-java-get-active-servicename/321307 "2022-12-26T06:01:48Z")
Hi, I have a scenario wherein I need to get the list of active services in elasticsearch (ServiceName that would be bound to the Elastic APM Jar in case of java , .dll in case of .net, etc ) . I'll need these service Na… --- ## [Unable to add event filter exception](https://discuss.elastic.co/t/unable-to-add-event-filter-exception/319764)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 3\ **Last updated:** [November 28, 2022, 10:28am UTC](https://discuss.elastic.co/t/unable-to-add-event-filter-exception/319764 "2022-11-28T10:28:57Z")
I'm trying to drop some events and I'm not able to select any fields in Security\>manage\>Event Filters This is on 8.5.2 run in docker. No error is shown. --- ## [Matching data in two different indexes](https://discuss.elastic.co/t/matching-data-in-two-different-indexes/317741)
**Author:** [@OlegBochkarev](https://discuss.elastic.co/u/OlegBochkarev)\ **Replies:** 2\ **Last updated:** [October 31, 2022, 11:59pm UTC](https://discuss.elastic.co/t/matching-data-in-two-different-indexes/317741 "2022-10-31T23:59:00Z")
Hi, team! I collect authorising logs from two systems into two separate indexes. Index content: Index1: system1\_timestamp system1\_username system1\_ip ... Index2: system2\_timesamp system2\_username system2\_ip ..… --- ## [CSPM third Party](https://discuss.elastic.co/t/cspm-third-party/321805)
**Author:** [@Dea\_Agra](https://discuss.elastic.co/u/Dea_Agra)\ **Replies:** 1\ **Last updated:** [December 25, 2022, 11:52pm UTC](https://discuss.elastic.co/t/cspm-third-party/321805 "2022-12-25T23:52:06Z")
Hi Elastic Team, We want to integrate our Elastic SIEM with CSPM third part tools, is there any tool recommandation taht we can integrate with our Elastic SIEM? --- ## [Agent Spoofing - Multiple Hosts Using Same Agent after update to 8.5.3](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276)
**Author:** [@Paradox](https://discuss.elastic.co/u/Paradox)\ **Replies:** 1\ **Last updated:** [December 25, 2022, 11:39pm UTC](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276 "2022-12-25T23:39:33Z")
Hello, since the update to ELS 8.5.3 we receive "Agent Spoofing - Multiple Hosts Using Same Agent" messages. We were able to narrow down the message to be related to the DHCP integration. As soon as this is activated… --- ## [Elastic Agent Updating forever](https://discuss.elastic.co/t/elastic-agent-updating-forever/321935)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 1\ **Last updated:** [December 25, 2022, 10:58pm UTC](https://discuss.elastic.co/t/elastic-agent-updating-forever/321935 "2022-12-25T22:58:23Z")
Hello there, I´m trying to install elastic agent on windows server box but for some reason appears to be something related with sc.exe command. Follow the logs from the agent on this server: \[elastic\_agent\]\[error\] Ela… --- ## [Metricbeat does not collect memory and disc io statistics of docker containers](https://discuss.elastic.co/t/metricbeat-does-not-collect-memory-and-disc-io-statistics-of-docker-containers/321663)
**Author:** [@Nil\_Jeffoy](https://discuss.elastic.co/u/Nil_Jeffoy)\ **Replies:** 2\ **Last updated:** [December 25, 2022, 7:15pm UTC](https://discuss.elastic.co/t/metricbeat-does-not-collect-memory-and-disc-io-statistics-of-docker-containers/321663 "2022-12-25T19:15:28Z")
I have installed Metricbeat and enabled Docker and System modules. I can see CPU usage statistics, but there is no Memory and DicsIO data. Also, I can see memory and other data from System Module. But I need Memory an… --- ## [See data in Kibana](https://discuss.elastic.co/t/see-data-in-kibana/319893)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 12:01am UTC](https://discuss.elastic.co/t/see-data-in-kibana/319893 "2022-11-28T00:01:58Z")
Hello Installed ELK on one host and FileBeat on another. Configured FileBeat to send data to Elasticsearch How can I see my logs in Kibana? Thank you --- ## [Bad elastic document](https://discuss.elastic.co/t/bad-elastic-document/321904)
**Author:** [@thuy\_do\_thi](https://discuss.elastic.co/u/thuy_do_thi)\ **Replies:** 5\ **Last updated:** [December 25, 2022, 2:49pm UTC](https://discuss.elastic.co/t/bad-elastic-document/321904 "2022-12-25T14:49:11Z")
Why is the Elastic document so bad? I am a devops engineer. I spent a week on deploy elasticsearch+logstash+kibana+kafka. After Xpack is enabled by default, I try to modify the user name of elasticsearch. It took me a… --- ## [Create time-series with stream data](https://discuss.elastic.co/t/create-time-series-with-stream-data/317352)
**Author:** [@Ismael\_Alvarez](https://discuss.elastic.co/u/Ismael_Alvarez)\ **Replies:** 4\ **Last updated:** [October 31, 2022, 4:17pm UTC](https://discuss.elastic.co/t/create-time-series-with-stream-data/317352 "2022-10-31T16:17:55Z")
hey there! I need to create a graph with the stream data, I attach an example graph that I need to create and stream logs. I appreciate the support, I have tried to create but without results, best Regards Ismael … --- ## [Kibana case sensitive search?](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [December 25, 2022, 2:18pm UTC](https://discuss.elastic.co/t/kibana-case-sensitive-search/317788 "2022-12-25T14:18:05Z")
kibana case sensitive search? i try but is not have operator base on dashboard --- ## [Safe usage of \`\_forcemerge\` with \`only\_expunge\_deletes\`](https://discuss.elastic.co/t/safe-usage-of-forcemerge-with-only-expunge-deletes/321964)
**Author:** [@Au6ojlut](https://discuss.elastic.co/u/Au6ojlut)\ **Replies:** 0\ **Last updated:** [December 25, 2022, 10:31am UTC](https://discuss.elastic.co/t/safe-usage-of-forcemerge-with-only-expunge-deletes/321964 "2022-12-25T10:31:37Z")
Hello Team I am using the Elasticsearch 8.4.2. I have several indices, that is receiving updates (or deletes). On some indices update operation goes with the optimistic-concurrency-control. After some time, when the p… --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/321963)
**Author:** [@SaM9](https://discuss.elastic.co/u/SaM9)\ **Replies:** 0\ **Last updated:** [December 25, 2022, 9:59am UTC](https://discuss.elastic.co/t/logstash-configuration/321963 "2022-12-25T09:59:41Z")
in my elastic stack i have the following components : elastic agnet , fleet server , logstach and ealsticsearch cluster in my logstach output config do I have to send data directory to ealstcisearch data nodes or to flee… [Previous page](https://discuss.elastic.co/latest.md?page=842) [Next page](https://discuss.elastic.co/latest.md?page=844)