# Latest **URL:** https://discuss.elastic.co/latest.md?page=864 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 865 --- ## [How to get average number of samples for time series data with DSL query?](https://discuss.elastic.co/t/how-to-get-average-number-of-samples-for-time-series-data-with-dsl-query/320841)
**Author:** [@bgyomorei\_c](https://discuss.elastic.co/u/bgyomorei_c)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 11:26am UTC](https://discuss.elastic.co/t/how-to-get-average-number-of-samples-for-time-series-data-with-dsl-query/320841 "2022-12-09T11:26:28Z")
I want to get the average number of request per second(or minute) for performance testing data, but the basic aggregation possibilities i've found so far doesn't cover this. I could only do a count on a field, but that … --- ## [Logstash and elasticsearch bundled java update](https://discuss.elastic.co/t/logstash-and-elasticsearch-bundled-java-update/320853)
**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 11:01am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-bundled-java-update/320853 "2022-12-09T11:01:43Z")
Hi, We are using ELK stack 7.17.2 in our environment. We have found vulnerability on Logstash and Elasticsearch for JDK. We have used jdk bundled one. Below is the VA snap. Please let me know how i can update the JDK … --- ## [Clone cluster with Logstash](https://discuss.elastic.co/t/clone-cluster-with-logstash/320551)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 19\ **Last updated:** [December 9, 2022, 9:44am UTC](https://discuss.elastic.co/t/clone-cluster-with-logstash/320551 "2022-12-09T09:44:25Z")
Hey Everyone, We're trying to figure out the best way to clone a cluster completely, and Logstash seems to be the best option on a large scale as there's no need to use a custom solution. An example configuration of wh… --- ## [Kibana Query Taking too long](https://discuss.elastic.co/t/kibana-query-taking-too-long/320865)
**Author:** [@Arjun\_Meena](https://discuss.elastic.co/u/Arjun_Meena)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 9:24am UTC](https://discuss.elastic.co/t/kibana-query-taking-too-long/320865 "2022-12-09T09:24:37Z")
We have a visualisation that uses the below given query to fetch the data. GET commerce-access-console-logs-\*/\_search { "aggs": { "3": { "filters": { "filters": { "LUX-SearchProducts": { … --- ## [Set Static Master Node in Elasticsearch Cluster](https://discuss.elastic.co/t/set-static-master-node-in-elasticsearch-cluster/320858)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 5\ **Last updated:** [December 9, 2022, 9:22am UTC](https://discuss.elastic.co/t/set-static-master-node-in-elasticsearch-cluster/320858 "2022-12-09T09:22:08Z")
Hi, I have a 3 Node Elasticsearch. I have set the discovery.seed\_hosts: \["Node1", "Node2", "Node3"\] and cluster.initial\_master\_nodes: \["Node1"\]. What is the configuration if I want the master node " Node1" to be re-ele… --- ## [Howto to visualize/map latest state of a string value of multiple docs](https://discuss.elastic.co/t/howto-to-visualize-map-latest-state-of-a-string-value-of-multiple-docs/318735)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 0\ **Last updated:** [November 11, 2022, 11:25am UTC](https://discuss.elastic.co/t/howto-to-visualize-map-latest-state-of-a-string-value-of-multiple-docs/318735 "2022-11-11T11:25:29Z")
Got metricbeat fetching jolokia values of the state of several instances of Jboss servers of several linux boxes. I tinkering with howto best create a visualization that'll show an overview of each expected instances sta… --- ## [Elasticsearch bootstrap check](https://discuss.elastic.co/t/elasticsearch-bootstrap-check/320812)
**Author:** [@imdroid](https://discuss.elastic.co/u/imdroid)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-bootstrap-check/320812 "2022-12-09T08:32:59Z")
I'm trying to create an elasticcluster. the nodes are setup in two seperate servers. my network and transport details are as follows: network.host: 10.198.22.161 http.port: 9200 transport.host: 10.198.22.161 transport.t… --- ## [Deleting / editing existing analyzer in elastic index](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838)
**Author:** [@Leonid\_P](https://discuss.elastic.co/u/Leonid_P)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 8:17am UTC](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838 "2022-12-09T08:17:27Z")
Hello! Is it safe to delete or change an analyzer in an existing index? Surfing through Stackoverflow and experimenting on my own I've found ways for both operations, i.e. curl -X PUT "localhost:9200/index\_name/\_setti… --- ## [Unable to create data stream in Elastic Search 7.9](https://discuss.elastic.co/t/unable-to-create-data-stream-in-elastic-search-7-9/320829)
**Author:** [@zain](https://discuss.elastic.co/u/zain)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 8:03am UTC](https://discuss.elastic.co/t/unable-to-create-data-stream-in-elastic-search-7-9/320829 "2022-12-09T08:03:16Z")
Hello, I am trying to create data streams in my Elasticsearch which is 7.9 using this guide but unable to create as I cannot see options to route to State Management \> Index Management as I can see both are different op… --- ## [Dec 9th, 2022: \[EN\] Front to back instrumentation in JavaScript using Elastic RUM, APM and OTel](https://discuss.elastic.co/t/dec-9th-2022-en-front-to-back-instrumentation-in-javascript-using-elastic-rum-apm-and-otel/318876)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [December 9, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2022-en-front-to-back-instrumentation-in-javascript-using-elastic-rum-apm-and-otel/318876 "2022-12-09T08:00:50Z")
Introduction Over the festive season, developers and support engineers will be on high alert for many systems looking for issues and spikes in usage to keep their systems alive for eager shoppers or users trying to fi… --- ## [Error on uploading ML model to Elasticsearch](https://discuss.elastic.co/t/error-on-uploading-ml-model-to-elasticsearch/320803)
**Author:** [@Odd\_Erik\_Gronberg](https://discuss.elastic.co/u/Odd_Erik_Gronberg)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 3:18pm UTC](https://discuss.elastic.co/t/error-on-uploading-ml-model-to-elasticsearch/320803 "2022-12-08T15:18:28Z")
I am trying to upload a ML model to Elasticsearch through the Eland client but there seems to be some issues. The model I am trying to upload is listed as a Compatible third party model in the documentation here: Mode… --- ## [Multiple Logstash instances sharing code](https://discuss.elastic.co/t/multiple-logstash-instances-sharing-code/320861)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 0\ **Last updated:** [December 9, 2022, 7:05am UTC](https://discuss.elastic.co/t/multiple-logstash-instances-sharing-code/320861 "2022-12-09T07:05:59Z")
Hi, I have four pipelines, two related to seeding data, and two related to continuously update data in elasticsearch. All pipelines share a lot of code. I am planning to run the pipelines in docker, and would like to cr… --- ## [EKS to ELK integration](https://discuss.elastic.co/t/eks-to-elk-integration/320556)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 4\ **Last updated:** [December 9, 2022, 6:44am UTC](https://discuss.elastic.co/t/eks-to-elk-integration/320556 "2022-12-09T06:44:07Z")
Hi team, Could someone please guide us, how to integrate EKS to ELK from docker pushing logs to ELK. Thanks, Yasar Arafaath A. --- ## [Rollup Index Empty Data](https://discuss.elastic.co/t/rollup-index-empty-data/320860)
**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\ **Replies:** 0\ **Last updated:** [December 9, 2022, 6:37am UTC](https://discuss.elastic.co/t/rollup-index-empty-data/320860 "2022-12-09T06:37:05Z")
Hi I created rollup jobs for my index xxx\_113 but the rollups index is empty { - "jobs": \[ - { - "config": { - "id": "test\_rollup", "index\_pattern": "xxx\_113", "rollup\_index": "… --- ## [How to use min\_score parameter in ES percolator query?](https://discuss.elastic.co/t/how-to-use-min-score-parameter-in-es-percolator-query/320845)
**Author:** [@aneeshkoya](https://discuss.elastic.co/u/aneeshkoya)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 6:28am UTC](https://discuss.elastic.co/t/how-to-use-min-score-parameter-in-es-percolator-query/320845 "2022-12-09T06:28:20Z")
Hi all. My case scenario is such that when the documents are percolated against the stored queries, only those queries that have a score greater than a threshold give a hit for the respective document. I tried min\_score… --- ## [Can We move mapping and template without moving data with snapshot and restore?](https://discuss.elastic.co/t/can-we-move-mapping-and-template-without-moving-data-with-snapshot-and-restore/320857)
**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 6:16am UTC](https://discuss.elastic.co/t/can-we-move-mapping-and-template-without-moving-data-with-snapshot-and-restore/320857 "2022-12-09T06:16:56Z")
Is it Possible? like i dont want take snapshot of any index but just want to take snapshot of cluster state and restore it ! --- ## [What exactly elasticsearch is? Is it database or search engine](https://discuss.elastic.co/t/what-exactly-elasticsearch-is-is-it-database-or-search-engine/320856)
**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 6:10am UTC](https://discuss.elastic.co/t/what-exactly-elasticsearch-is-is-it-database-or-search-engine/320856 "2022-12-09T06:10:15Z")
Just Want Clarity Please Help --- ## [Can I create Alert considering field value of the index?](https://discuss.elastic.co/t/can-i-create-alert-considering-field-value-of-the-index/320794)
**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\ **Replies:** 2\ **Last updated:** [December 9, 2022, 5:51am UTC](https://discuss.elastic.co/t/can-i-create-alert-considering-field-value-of-the-index/320794 "2022-12-09T05:51:37Z")
Hello Here, simple situation here is i have one index named hat Mapping is herePUT hat { "mappings": { "properties": { "@timestamp": { "type": "date" }, "jay": { "type": "intege… --- ## [Kibana equivalent to lookup table](https://discuss.elastic.co/t/kibana-equivalent-to-lookup-table/320839)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 1\ **Last updated:** [December 9, 2022, 5:48am UTC](https://discuss.elastic.co/t/kibana-equivalent-to-lookup-table/320839 "2022-12-09T05:48:49Z")
I have a list of all user.names in a lens table and another list of user.names in another table. I want to perform lookup between the two tables to create a list of user.names are in the first table but not in the other … --- ## [Setting APM for elasticsearch 7.17.4](https://discuss.elastic.co/t/setting-apm-for-elasticsearch-7-17-4/320644)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 3\ **Last updated:** [December 9, 2022, 2:08am UTC](https://discuss.elastic.co/t/setting-apm-for-elasticsearch-7-17-4/320644 "2022-12-09T02:08:00Z")
I am trying to setup APM on elasticsearch 7.17.4 stack, i have successfully setup apm server and trying to use the Automatic setup with apm-agent-attach-cli.jar method with below flags java -jar apm-agent-attach-cli-1.3… --- ## [A logstash to bigquery transmission problem](https://discuss.elastic.co/t/a-logstash-to-bigquery-transmission-problem/320771)
**Author:** [@dalaopo](https://discuss.elastic.co/u/dalaopo)\ **Replies:** 4\ **Last updated:** [December 9, 2022, 2:01am UTC](https://discuss.elastic.co/t/a-logstash-to-bigquery-transmission-problem/320771 "2022-12-09T02:01:50Z")
Hello！ I encountered an error when I used logstash to transfer kafka data to google bigquery \[ERROR\]\[logstash.outputs.googlebigquery\]\[main\]\[30729410306cb4d98635a59cbf171cea3b769fd734b29b17e925785d4edac5ba\] Error upload… --- ## [How to set the browser time zone for Vega?](https://discuss.elastic.co/t/how-to-set-the-browser-time-zone-for-vega/320155)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 11:38pm UTC](https://discuss.elastic.co/t/how-to-set-the-browser-time-zone-for-vega/320155 "2022-12-08T23:38:32Z")
I have a Vega visualization within Kibana. The vega part looks like this { $schema: https://vega.github.io/schema/vega-lite/v5.json title: Event counts from all indexes data: { url: { %context%: true … --- ## [Kibana URL not updating with Filters](https://discuss.elastic.co/t/kibana-url-not-updating-with-filters/318602)
**Author:** [@pk80103](https://discuss.elastic.co/u/pk80103)\ **Replies:** 6\ **Last updated:** [December 8, 2022, 11:38pm UTC](https://discuss.elastic.co/t/kibana-url-not-updating-with-filters/318602 "2022-12-08T23:38:18Z")
Hi Everyone, I have an issue with my Kibana Dashboard. Whenever I update some filter the vlaues of the URL is expected to be changes but it is not changing. It is remaining same. Currect values for URL in Kibana Dashbo… --- ## [Scatter plot by VEGA](https://discuss.elastic.co/t/scatter-plot-by-vega/318701)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 0\ **Last updated:** [November 11, 2022, 2:24am UTC](https://discuss.elastic.co/t/scatter-plot-by-vega/318701 "2022-11-11T02:24:59Z")
We have created attached scatter plot by VEGA. The code what we use is as below (We concealed critical information): { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "mark": { type:"point", filled… --- ## [Fuzzy matching hashtag with Simple Query String Query](https://discuss.elastic.co/t/fuzzy-matching-hashtag-with-simple-query-string-query/320416)
**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 10:44pm UTC](https://discuss.elastic.co/t/fuzzy-matching-hashtag-with-simple-query-string-query/320416 "2022-12-08T22:44:51Z")
I have an indexed field named "searchBucket" with the term "#revit" in it. Here is the analyzer applied to that field: "default" : { "filter" : \[ "lowercase", "asciifolding"… --- ## [Show bar horizontal as percentage](https://discuss.elastic.co/t/show-bar-horizontal-as-percentage/320752)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 9:36pm UTC](https://discuss.elastic.co/t/show-bar-horizontal-as-percentage/320752 "2022-12-08T21:36:52Z")
Hello, i have this bar horizontal lens: I wanted to show the numbers of volume\_total (5,797,557) as percentage (the application\_name's volume\_total divided by the sum of volume\_total of all application). But if i use… --- ## [Elasticsearch can't start service](https://discuss.elastic.co/t/elasticsearch-cant-start-service/320823)
**Author:** [@natthanon\_khr](https://discuss.elastic.co/u/natthanon_khr)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 9:23pm UTC](https://discuss.elastic.co/t/elasticsearch-cant-start-service/320823 "2022-12-08T21:23:39Z")
I can't start and restart systemctl elasticsearch after reboot server, I want to know what is the reason please. this is log! \[2022-12-09T00:59:50,406\]\[WARN \]\[o.e.b.Natives \] \[vmcbmsudbu01\] unable to load JN… --- ## [Batch Upload with Enrich Policy Suddenly taking much longer](https://discuss.elastic.co/t/batch-upload-with-enrich-policy-suddenly-taking-much-longer/320493)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 9:13pm UTC](https://discuss.elastic.co/t/batch-upload-with-enrich-policy-suddenly-taking-much-longer/320493 "2022-12-08T21:13:27Z")
Hello all, My team has been running a single-vm elasticsearch instance for about a year and we are currently facing an issue when it comes to batch uploading documents, which is also assigned an enrichment policy. To h… --- ## [Error in logstash plain file](https://discuss.elastic.co/t/error-in-logstash-plain-file/320624)
**Author:** [@michaeljsamuel](https://discuss.elastic.co/u/michaeljsamuel)\ **Replies:** 18\ **Last updated:** [December 8, 2022, 8:39pm UTC](https://discuss.elastic.co/t/error-in-logstash-plain-file/320624 "2022-12-08T20:39:04Z")
Hi there, I am trying to use logstash on windows and believe I have downloaded it correctly however i am unable to forward any logs and this is what is in my plain file \[2022-12-07T10:41:03,853\]\[INFO \]\[logstash.runner … --- ## [Escaping a forward slash / in a regex match](https://discuss.elastic.co/t/escaping-a-forward-slash-in-a-regex-match/320828)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 8:05pm UTC](https://discuss.elastic.co/t/escaping-a-forward-slash-in-a-regex-match/320828 "2022-12-08T20:05:41Z")
Hello, This should be rather simple but I'm definitely overthinking this. I've tried escaping a forward slash in a regex match for a painless script in an ingest pipeline and it fails every combination I try. I have t… [Previous page](https://discuss.elastic.co/latest.md?page=863) [Next page](https://discuss.elastic.co/latest.md?page=865)