# Latest **URL:** https://discuss.elastic.co/latest.md?page=850 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 851 --- ## [How to Deboost the final Score of the results when it matches set of Term/Range Filters](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490)
**Author:** [@Lakshman\_Raj\_Vasudev](https://discuss.elastic.co/u/Lakshman_Raj_Vasudev)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 7:42pm UTC](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490 "2022-12-20T19:42:21Z")
Hi, We have an Scenario,When the query matches certain Set of Term/Range Filter,Deboost the Relevancy Score of those matching documents with a boost Factor,as the usage of negative boosts were not permitted in the Lates… --- ## [Kibana Visualization Missing Time Range UI](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353)
**Author:** [@hidanny](https://discuss.elastic.co/u/hidanny)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353 "2022-10-26T08:34:34Z")
Hello all, This is my Visualization Tab and I am missing the Time Range UI that allows me to determine what time my data appears On the other hand, on my discover tab, I see that it exists as "Last 15 Mins" What… --- ## [Trouble with suggestions](https://discuss.elastic.co/t/trouble-with-suggestions/321673)
**Author:** [@Mihai\_Raulea](https://discuss.elastic.co/u/Mihai_Raulea)\ **Replies:** 4\ **Last updated:** [December 20, 2022, 7:16pm UTC](https://discuss.elastic.co/t/trouble-with-suggestions/321673 "2022-12-20T19:16:06Z")
i have a skills index with the following mapping: { "skills" : { "mappings" : { "properties" : { "skill" : { "type" : "completion", "analyzer" : "simple", "preserve\_sepa… --- ## [Logstash split one message into multiple](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496)
**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\ **Replies:** 10\ **Last updated:** [December 20, 2022, 7:10pm UTC](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496 "2022-12-20T19:10:54Z")
Hi, I've the following message and I managed to create the output from only message, {"@timestamp":"2022-12-01T13:30:00.004Z","message":"\<190\>Dec 1 14:29:59 10.62.161.199 AA-AMG3U: 0950198238 NN \[MDA 8/4\]: LN44 SA 20… --- ## [Watcher Automated Email Reports](https://discuss.elastic.co/t/watcher-automated-email-reports/321586)
**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 7:01pm UTC](https://discuss.elastic.co/t/watcher-automated-email-reports/321586 "2022-12-20T19:01:14Z")
Version 7.17: I'm trying to set up a Watcher to send report emails following this guide: I set up the email account in the elasticsearch.yml with a pretty basic setup since our SMTP server does not require authentica… --- ## [LogStash Conf | Drop Empty Lines](https://discuss.elastic.co/t/logstash-conf-drop-empty-lines/321674)
**Author:** [@srii](https://discuss.elastic.co/u/srii)\ **Replies:** 5\ **Last updated:** [December 20, 2022, 6:37pm UTC](https://discuss.elastic.co/t/logstash-conf-drop-empty-lines/321674 "2022-12-20T18:37:29Z")
The contents of LogStash's conf file looks like this: input { beats { port =\> 5044 } file { path =\> "/usr/share/logstash/iway\_logs/\*" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" … --- ## [Filebeat Incompatibility with Opensearch](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757)
**Author:** [@Anish\_Mittal](https://discuss.elastic.co/u/Anish_Mittal)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 6:19pm UTC](https://discuss.elastic.co/t/filebeat-incompatibility-with-opensearch/320757 "2022-12-20T18:19:09Z")
I have spent almost 4 days on filebeat and opensearch. I have used Filebeat \[7.0.0, 8.5.2, 6.0.0\] and Opensearch 2.4.0. But getting the error: "pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://lo… --- ## [Extending APM Server stored fields](https://discuss.elastic.co/t/extending-apm-server-stored-fields/321676)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 5:59pm UTC](https://discuss.elastic.co/t/extending-apm-server-stored-fields/321676 "2022-12-20T17:59:52Z")
Hello ElasticFans, this below question is how to category. As of now, I have some application defined fields that I would like to be stored in the APM. One can say that we can have spans / transactions etc. I do not … --- ## [KNN Search super slow](https://discuss.elastic.co/t/knn-search-super-slow/321631)
**Author:** [@TopTea1](https://discuss.elastic.co/u/TopTea1)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 5:57pm UTC](https://discuss.elastic.co/t/knn-search-super-slow/321631 "2022-12-20T17:57:03Z")
Hi, I'm using ES v8.1.3 in a dockerized env with 4 shards. In my database I have around ~90M documents, and for each I have a dense vector with a dim of 768. But when I'm trying to perform a search using ANN (with cosine… --- ## [Context Table?](https://discuss.elastic.co/t/context-table/321597)
**Author:** [@davidbeiler](https://discuss.elastic.co/u/davidbeiler)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 5:39pm UTC](https://discuss.elastic.co/t/context-table/321597 "2022-12-20T17:39:02Z")
Hi, Is it possible to add in a context table? I am using exabeam, but couldnt find anything, but i believe it uses the elkstack in the backend this is what i have currently query = { "size": 0, "qu… --- ## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332)
**Author:** [@mikes1962](https://discuss.elastic.co/u/mikes1962)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332 "2022-12-20T17:13:53Z")
I'm trying to install elasticsearch on RedHat 8.5 with SELinux enabled and enforcing. Additionally, the account I'm using has very limited sudo privileges so I run a python script to execute the commands. So I am executi… --- ## [Elastic APM Java Agent : Agent Id](https://discuss.elastic.co/t/elastic-apm-java-agent-agent-id/321533)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 5:10pm UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-agent-id/321533 "2022-12-20T17:10:10Z")
Hi Team, I was going through the metadata provided by Elastic APM and came across the key agent.ephemeral\_id. Can someone please help me understand its purpose and how does the value serve the purpose in observability. … --- ## [Filebeat processor - what is this ~ good for?](https://discuss.elastic.co/t/filebeat-processor-what-is-this-good-for/321616)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 4:24pm UTC](https://discuss.elastic.co/t/filebeat-processor-what-is-this-good-for/321616 "2022-12-20T16:24:14Z")
Hi there, in a 7.17.4. processor block in filebeat I found this statement; ... processors: add\_docker\_metadata: ~ ... What does this sing ~ stand for or do? Thanks! --- ## [Getting K8s annotations in Filebeat logs](https://discuss.elastic.co/t/getting-k8s-annotations-in-filebeat-logs/321671)
**Author:** [@RudyStolds](https://discuss.elastic.co/u/RudyStolds)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 4:06pm UTC](https://discuss.elastic.co/t/getting-k8s-annotations-in-filebeat-logs/321671 "2022-12-20T16:06:20Z")
Hi, I'm trying to get additional annotations from my K8s deployment into Elasticsearch. I'm currently on filebeat 7.18.8. My filebeat imputs in the filebeat.yml file look like the code below filebeat.inputs: - type: … --- ## [Reporting capabilities: Power Bi (Desktop) vs Kibana canvas](https://discuss.elastic.co/t/reporting-capabilities-power-bi-desktop-vs-kibana-canvas/319564)
**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 3:26pm UTC](https://discuss.elastic.co/t/reporting-capabilities-power-bi-desktop-vs-kibana-canvas/319564 "2022-11-22T15:26:58Z")
Hi team, I would like to make a comparison between reporting capabilities between Microsoft Power Bi and Kibana Canvas. I know pretty well Power Bi and I would like to understand better whether under the hood Kibana Can… --- ## [ALLOCATION\_FAILED after restore from snapshot](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659)
**Author:** [@wish\_wei](https://discuss.elastic.co/u/wish_wei)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659 "2022-12-20T14:12:21Z")
Hi I tried to restore index from snapshot download from s3 repository, the origin index's primary shard is about 110GB large.After restore finished， it shows that all shards is ALLOCATION\_FAILED，detail is： sdk\_client\_… --- ## [Empty Agent policy](https://discuss.elastic.co/t/empty-agent-policy/321650)
**Author:** [@nestro](https://discuss.elastic.co/u/nestro)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 2:19pm UTC](https://discuss.elastic.co/t/empty-agent-policy/321650 "2022-12-20T14:19:39Z")
Hi! I can't select a policy for fleet, I've tried to reinstall the whole Stack but it doesn't work either. The problem: The default policies: --- ## [Elastic Observability Engineer Lab 4.2: No Metrics showing in Inventory](https://discuss.elastic.co/t/elastic-observability-engineer-lab-4-2-no-metrics-showing-in-inventory/320141)
**Author:** [@rcorfield](https://discuss.elastic.co/u/rcorfield)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 1:38pm UTC](https://discuss.elastic.co/t/elastic-observability-engineer-lab-4-2-no-metrics-showing-in-inventory/320141 "2022-12-20T13:38:46Z")
I'm working through the Elastic Observability course, but I've hit a problem with Lab 4.2. I have no metrics showing in Inventory, so can't proceed with the Lab. It has been a couple of weeks since I last worked on the c… --- ## [Root mapping definition has unsupported parameters when trying to update the mapping](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655)
**Author:** [@cchertita](https://discuss.elastic.co/u/cchertita)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 1:37pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655 "2022-12-20T13:37:34Z")
Hello, I am trying to setup custom logging for Mulesoft APIs and trying to send data to an ELK server (instead of Kibana, it uses OpenSearch from AWS). I am also using a custom JSON Logger that is required for separate … --- ## [Monitor Uptime With Telnet](https://discuss.elastic.co/t/monitor-uptime-with-telnet/321654)
**Author:** [@OscarFilho](https://discuss.elastic.co/u/OscarFilho)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:36pm UTC](https://discuss.elastic.co/t/monitor-uptime-with-telnet/321654 "2022-12-20T13:36:02Z")
We are using Elastic Cloud to monitor our company's services. Today I installed a private location type monitor that is located in our company's on-premises environment. I would like some help and know if it is possibl… --- ## [Customized Index Template](https://discuss.elastic.co/t/customized-index-template/321557)
**Author:** [@Pankhuri\_Gupta](https://discuss.elastic.co/u/Pankhuri_Gupta)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 1:15pm UTC](https://discuss.elastic.co/t/customized-index-template/321557 "2022-12-20T13:15:13Z")
Hi, I have metricbeat indices being created with metricbeat-7.17\* as index template name but I want to create Index template with some other name.Basically, I want to customize my index templates name. Please provide st… --- ## [ML Datafeed Error](https://discuss.elastic.co/t/ml-datafeed-error/321646)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:00pm UTC](https://discuss.elastic.co/t/ml-datafeed-error/321646 "2022-12-20T13:00:18Z")
Hello! Does anyone know why im facing this issue ? Datafeed is encountering errors extracting data: No search context found for id \[xxxxxx\] --- ## [MY ILM policy is not deleting old data](https://discuss.elastic.co/t/my-ilm-policy-is-not-deleting-old-data/321628)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 12:59pm UTC](https://discuss.elastic.co/t/my-ilm-policy-is-not-deleting-old-data/321628 "2022-12-20T12:59:26Z")
My old data is not deleting don't know why PUT \_ilm/policy/prudhviilm { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_age": "5m" } } }, "warm": { "min\_age": "5m", "acti… --- ## ["stdout only" logs not captured in filebeat while display file with kubectl logs pod](https://discuss.elastic.co/t/stdout-only-logs-not-captured-in-filebeat-while-display-file-with-kubectl-logs-pod/321645)
**Author:** [@Humayun\_Manzer](https://discuss.elastic.co/u/Humayun_Manzer)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 12:38pm UTC](https://discuss.elastic.co/t/stdout-only-logs-not-captured-in-filebeat-while-display-file-with-kubectl-logs-pod/321645 "2022-12-20T12:38:51Z")
This is the filebeats config I am using via helm charts filebeatConfig: filebeat.yml: | filebeat.inputs: - type: container paths: - /var/log/containers/\*.log processors: … --- ## [Integrate external plugin in visualization dashboard](https://discuss.elastic.co/t/integrate-external-plugin-in-visualization-dashboard/319451)
**Author:** [@anik-27](https://discuss.elastic.co/u/anik-27)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 12:19pm UTC](https://discuss.elastic.co/t/integrate-external-plugin-in-visualization-dashboard/319451 "2022-12-20T12:19:20Z")
Hello Everyone ! I have built an external plugin(landingPage) that consist of a navigation bar and footer with React I can access this plugin from the left panel below the elastic logo (Please refer image for better… --- ## [Ldap - local user creation](https://discuss.elastic.co/t/ldap-local-user-creation/321633)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 11:39am UTC](https://discuss.elastic.co/t/ldap-local-user-creation/321633 "2022-12-20T11:39:01Z")
hi Team, Is it possible to create the local user after enable the LDAP ? we are able to create the local users in 7.3.1 before LDAP implementation. but now we are not able login thru the same local user and don't have … --- ## [Customise Bar chart bar width](https://discuss.elastic.co/t/customise-bar-chart-bar-width/321580)
**Author:** [@Amritha\_Patil](https://discuss.elastic.co/u/Amritha_Patil)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 10:55am UTC](https://discuss.elastic.co/t/customise-bar-chart-bar-width/321580 "2022-12-20T10:55:34Z")
Hi, Is there as way to customize the width of bars that are displayed in the bar chart. The number of bars differ based on controls. When the number of bars are low, they tend to be too fat. Is there a way I can fix th… --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/321401)
**Author:** [@Marco201](https://discuss.elastic.co/u/Marco201)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 10:47am UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/321401 "2022-12-20T10:47:01Z")
Hello, since some time we can find the following warning in certain time intervals in logs of elastic in our environments. Usually this has no effect, but sometimes not all shards are assigned and you have to do a retry… --- ## [Filebeat exclude\_files regex](https://discuss.elastic.co/t/filebeat-exclude-files-regex/321206)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 9:49am UTC](https://discuss.elastic.co/t/filebeat-exclude-files-regex/321206 "2022-12-20T09:49:15Z")
I want to exclude all access logs files from the filebeat except 2 service access logs. I'm using the regex but getting error and filebeat start is failing exclude\_files: \['\\/var\\/log\\/xxx\\/.\*(?!.\*(xxx)).\*\\/.\*(?!.\*(xxx)… --- ## [Prevent shard in specific node](https://discuss.elastic.co/t/prevent-shard-in-specific-node/321619)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 9:37am UTC](https://discuss.elastic.co/t/prevent-shard-in-specific-node/321619 "2022-12-20T09:37:35Z")
Hello everyone, how to prevent shard in specific node because I need add all nodes in the cluster but there is specific node RAM and CPU limitation, how to handle this approach and what is best practice to make this t… [Previous page](https://discuss.elastic.co/latest.md?page=849) [Next page](https://discuss.elastic.co/latest.md?page=851)