# Latest **URL:** https://discuss.elastic.co/latest.md?page=883 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 884 --- ## [Mapping keyword as date during ingestion - es 8.4.2, spark 3.2.0 on emr 6.6.0](https://discuss.elastic.co/t/mapping-keyword-as-date-during-ingestion-es-8-4-2-spark-3-2-0-on-emr-6-6-0/319546)
**Author:** [@Marcin\_Gasior](https://discuss.elastic.co/u/Marcin_Gasior)\ **Replies:** 7\ **Last updated:** [November 24, 2022, 5:16pm UTC](https://discuss.elastic.co/t/mapping-keyword-as-date-during-ingestion-es-8-4-2-spark-3-2-0-on-emr-6-6-0/319546 "2022-11-24T17:16:34Z")
I'm migrating our solution between elastic 7.1.0 and 8.4.2. Previously we used spark 2.4 and scala 2.11, now upgraded to latest and greatest versions :slight\_smile: The mapping is strict { "mappings": { "dynamic… --- ## [How to run two Elasticsearch Service on Window Server 2019?](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 4:21pm UTC](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477 "2022-11-24T16:21:59Z")
Hello, I have two instance of Elastic installed and configured to run on a different port on Windows server. I am required to run both the instance simultaneously. However when I try to run the second Elasticsearch ser… --- ## [Permission denied just after installation](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568)
**Author:** [@Broot](https://discuss.elastic.co/u/Broot)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 3:58pm UTC](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568 "2022-11-24T15:58:35Z")
I'm trying to install and run Elasticsearch and Kibana and I can't do it because every time I try, I always get some Access Permission Denied. I'm on Ubuntu 20.04 thus installing via Debian for example : /usr/share/el… --- ## [How to change the default response payload 10 to a custom number in app search php client](https://discuss.elastic.co/t/how-to-change-the-default-response-payload-10-to-a-custom-number-in-app-search-php-client/317716)
**Author:** [@Dhanushka\_Samarasing](https://discuss.elastic.co/u/Dhanushka_Samarasing)\ **Replies:** 6\ **Last updated:** [November 24, 2022, 3:30pm UTC](https://discuss.elastic.co/t/how-to-change-the-default-response-payload-10-to-a-custom-number-in-app-search-php-client/317716 "2022-11-24T15:30:15Z")
I was using the app-search php client for my application using below code block. What it does is that, get the results from a app-search engine based on the query we provide in the $search variable. $search = new Schema… --- ## [Need help in undertsanding Elastic Hot Threads API output](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265)
**Author:** [@vinit0711](https://discuss.elastic.co/u/vinit0711)\ **Replies:** 16\ **Last updated:** [November 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265 "2022-11-24T14:43:30Z")
I am running a single Node Elastic Cluster on a Server . Filebeat is used as collector for netflow data . Further FIlebeat is giving output to Elastic . Some Important Point Server has 32 core CPU and 500 GB RAM . I se… --- ## [Kibana Rules & Connectors for Webhook body format - JSON format](https://discuss.elastic.co/t/kibana-rules-connectors-for-webhook-body-format-json-format/317643)
**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 8:49pm UTC](https://discuss.elastic.co/t/kibana-rules-connectors-for-webhook-body-format-json-format/317643 "2022-10-27T20:49:27Z")
Attempting to send an alert using a webhook to a Microsoft Power Automate flow. We can see the alert fire from Kibana but the body is coming across as one, long string to the Power Automate flow. Wondering how the cont… --- ## [Multi matching wildcard text](https://discuss.elastic.co/t/multi-matching-wildcard-text/319619)
**Author:** [@Chitrank\_Bisht](https://discuss.elastic.co/u/Chitrank_Bisht)\ **Replies:** 2\ **Last updated:** [November 24, 2022, 2:38pm UTC](https://discuss.elastic.co/t/multi-matching-wildcard-text/319619 "2022-11-24T14:38:12Z")
I have to apply search on two fields, and I have a wildcard text to search. if the text is found in either of the fields that should result in a hit. I am using Olivere golang package. I tried a combination of should and… --- ## [Combining queries while preserving order](https://discuss.elastic.co/t/combining-queries-while-preserving-order/319760)
**Author:** [@Peter\_Strasser](https://discuss.elastic.co/u/Peter_Strasser)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 1:59pm UTC](https://discuss.elastic.co/t/combining-queries-while-preserving-order/319760 "2022-11-24T13:59:09Z")
Hi Elastic Community, I have the use case, that I want to search blocks of data in order. If we take products as an example a requirement could look like this: Group1: First 5 products are products with the id 120, 12… --- ## [How to add token\_chars: symbol using linq notation?](https://discuss.elastic.co/t/how-to-add-token-chars-symbol-using-linq-notation/319736)
**Author:** [@frankmehlhop.com](https://discuss.elastic.co/u/frankmehlhop.com)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 1:30pm UTC](https://discuss.elastic.co/t/how-to-add-token-chars-symbol-using-linq-notation/319736 "2022-11-24T13:30:08Z")
I want that I can also search for symbols like "§123". I find that I should add token\_chars: symbol. (example) "token\_chars": \["letter", "digit", "punctuation", "symbol"\] At my C#-code I'm using elasticClient.Indices… --- ## [How to do calculations in Logstash](https://discuss.elastic.co/t/how-to-do-calculations-in-logstash/319759)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 1:23pm UTC](https://discuss.elastic.co/t/how-to-do-calculations-in-logstash/319759 "2022-11-24T13:23:30Z")
Hello, Please find my configuration file structure input{ http\_poller{ // here I have mentioned API url and authorisation tags =\> \["tag1"\] } http\_poller{ // here I have mentioned API url and authorisation tags =\> \["tag… --- ## [Keystore.password deprecated](https://discuss.elastic.co/t/keystore-password-deprecated/319324)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 7\ **Last updated:** [November 24, 2022, 12:13pm UTC](https://discuss.elastic.co/t/keystore-password-deprecated/319324 "2022-11-24T12:13:24Z")
Hello, i'm triyng to resolve this deprecated setting but i can't rn. I add the secure version(keystore.secure\_password) in the keystore by elasticsearch-keystore add but it didn't work. I tried also to put it in the y… --- ## [Elasticsearch 7.15 Multi terms aggregation with several fields, sort by key](https://discuss.elastic.co/t/elasticsearch-7-15-multi-terms-aggregation-with-several-fields-sort-by-key/319716)
**Author:** [@anna1](https://discuss.elastic.co/u/anna1)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-15-multi-terms-aggregation-with-several-fields-sort-by-key/319716 "2022-11-24T08:22:38Z")
Hello everyone, I have a question regarding the case of multi terms aggregation with several fields and sort by key. How does the sorting work if the key is an array? According to which field / value is the sorting do… --- ## [How to use WrapperQuery in new Java API client 8.4.3 to fire a raw elasticsearch query?](https://discuss.elastic.co/t/how-to-use-wrapperquery-in-new-java-api-client-8-4-3-to-fire-a-raw-elasticsearch-query/319727)
**Author:** [@p4charu](https://discuss.elastic.co/u/p4charu)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 9:36am UTC](https://discuss.elastic.co/t/how-to-use-wrapperquery-in-new-java-api-client-8-4-3-to-fire-a-raw-elasticsearch-query/319727 "2022-11-24T09:36:53Z")
I'm trying to use WrapperQuery to run a raw query like this String queryStr = "{\\n" + " \\"query\\": {\\n" + " \\"bool\\": {\\n" + " \\"must\\": \[\\n" + " {\\n" + " \\"match\\": {\\n" +… --- ## [Heartbeat in elastic agent](https://discuss.elastic.co/t/heartbeat-in-elastic-agent/319742)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 11:29am UTC](https://discuss.elastic.co/t/heartbeat-in-elastic-agent/319742 "2022-11-24T11:29:01Z")
We have installed Elastic agent (Fleet) but not able to find how to integrate heartbeat with it. Fleet version 7.10.01 . Please help to find how to configure URL's monitoring with Elastic agent. --- ## [Filebeat is not taking input in regular interval](https://discuss.elastic.co/t/filebeat-is-not-taking-input-in-regular-interval/319732)
**Author:** [@subrata7](https://discuss.elastic.co/u/subrata7)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 10:15am UTC](https://discuss.elastic.co/t/filebeat-is-not-taking-input-in-regular-interval/319732 "2022-11-24T10:15:43Z")
A node js application is writing on a JSON file in a interval of 30s from where Filebeat is supposed to take input and send to elasticsearch through logstash.But filebeat is not reading the input until I open the file in… --- ## [Create custom index while sending logs from filebeat to elasticsearch](https://discuss.elastic.co/t/create-custom-index-while-sending-logs-from-filebeat-to-elasticsearch/319747)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 11:24am UTC](https://discuss.elastic.co/t/create-custom-index-while-sending-logs-from-filebeat-to-elasticsearch/319747 "2022-11-24T11:24:08Z")
Hi i've setup filebeat(7.17.7) to send logs to elasticsearch(8.5.1) The logs are getting shipped but to the default index that is filebeat 7.17 Here is my filebeat.yml output.elasticsearch: # Array of hosts to conne… --- ## [Conditional formatting of the header of a table](https://discuss.elastic.co/t/conditional-formatting-of-the-header-of-a-table/319745)
**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 11:21am UTC](https://discuss.elastic.co/t/conditional-formatting-of-the-header-of-a-table/319745 "2022-11-24T11:21:06Z")
Hi team, with the following code I obtained the conditional formatting of a table based on the value of the field "vendor\_name". Is it possible to format header separately from the data in the table? thanks, g kibana… --- ## [Logstash Shutiing Down](https://discuss.elastic.co/t/logstash-shutiing-down/319744)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 11:19am UTC](https://discuss.elastic.co/t/logstash-shutiing-down/319744 "2022-11-24T11:19:38Z")
i'm new to ELK i have a folder contient json files and i'm using logstash for indexing sometimes i get this error \[2022-11-24T11:08:58,748\]\[WARN \]\[logstash.runner \] SIGINT received. Shutting down. \[2022-11-24… --- ## [Error on query\_suggestion endpoint (Elastic based AppSearch)](https://discuss.elastic.co/t/error-on-query-suggestion-endpoint-elastic-based-appsearch/319457)
**Author:** [@adesso-david](https://discuss.elastic.co/u/adesso-david)\ **Replies:** 4\ **Last updated:** [November 24, 2022, 11:12am UTC](https://discuss.elastic.co/t/error-on-query-suggestion-endpoint-elastic-based-appsearch/319457 "2022-11-24T11:12:07Z")
Hi everybody! I am going to build a search solution for my companies' website using App Search. Since we use a 3rd party webcrawler, we decided to use App Search based on an Elasticsearch index, so we can use ingest pip… --- ## [TVSB Markdown visualization null values](https://discuss.elastic.co/t/tvsb-markdown-visualization-null-values/319718)
**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\ **Replies:** 2\ **Last updated:** [November 24, 2022, 11:01am UTC](https://discuss.elastic.co/t/tvsb-markdown-visualization-null-values/319718 "2022-11-24T11:01:18Z")
Hello, How can I display null values using each\_all in a markdown visualization? I have this until now {{#each \_all}} {{#with office as myoffice Office {{../label}} {{/with}} {{/each}} wher… --- ## [Data stream in filebeat 8.1.0](https://discuss.elastic.co/t/data-stream-in-filebeat-8-1-0/319596)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 10:35am UTC](https://discuss.elastic.co/t/data-stream-in-filebeat-8-1-0/319596 "2022-11-24T10:35:46Z")
Hi I'm using filebeat in 8.1.0 on docker below is my filebeat.yml But I'm able to reach data stream option how i should enable it? The second thing how to under docker image force enable dedicated module for example ap… --- ## [Filebeat k8s annotations](https://discuss.elastic.co/t/filebeat-k8s-annotations/319587)
**Author:** [@Jeff\_d\_Ambly](https://discuss.elastic.co/u/Jeff_d_Ambly)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 10:23am UTC](https://discuss.elastic.co/t/filebeat-k8s-annotations/319587 "2022-11-24T10:23:48Z")
I'm trying to get filebeat working in kubernetes, I'm wanting to only collect logs for pods in specific namespaces here is my filebeat config filebeat.inputs: - type: log paths: - /var/lib/rancher/rke/log/\*… --- ## [Filebeat start config wrong](https://discuss.elastic.co/t/filebeat-start-config-wrong/319502)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 10:14am UTC](https://discuss.elastic.co/t/filebeat-start-config-wrong/319502 "2022-11-24T10:14:22Z")
I've tried to read my nginx logs trough filebeats on Windows (for test) but something goes wrong. Can You suggest? - module: nginx # Access logs access: enabled: true # Set custom paths for the log files. I… --- ## [I get error Unable to configure plugins: (ArgumentError) Cannot determine timezone from nil](https://discuss.elastic.co/t/i-get-error-unable-to-configure-plugins-argumenterror-cannot-determine-timezone-from-nil/319531)
**Author:** [@mdinalova](https://discuss.elastic.co/u/mdinalova)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 9:08am UTC](https://discuss.elastic.co/t/i-get-error-unable-to-configure-plugins-argumenterror-cannot-determine-timezone-from-nil/319531 "2022-11-24T09:08:18Z")
Hello guys! I want to run my logtstash connect to elastic using input jdbc. Then i create conf file to run logstash but i always get this error, i try any changes in conf file but still not working. Anyone can help me t… --- ## [Shipping logs from Logstash to multiple Elasticsearch node in the cluster](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708)
**Author:** [@chaunguyen.3979](https://discuss.elastic.co/u/chaunguyen.3979)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 8:43am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708 "2022-11-24T08:43:47Z")
Hello, I create a cluster with 3 Elasticsearch nodes, and intend to ship logs from the Logstash to all Elasticsearch nodes simultaneously (Eg: I have cluster with node A - master node, node B and C - data node, and ever… --- ## [Is it able to freeze other operations during re-index in opensearch/elasticsearch?](https://discuss.elastic.co/t/is-it-able-to-freeze-other-operations-during-re-index-in-opensearch-elasticsearch/319720)
**Author:** [@Daniel\_Gordon](https://discuss.elastic.co/u/Daniel_Gordon)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 8:42am UTC](https://discuss.elastic.co/t/is-it-able-to-freeze-other-operations-during-re-index-in-opensearch-elasticsearch/319720 "2022-11-24T08:42:07Z")
Hi all, I encountered a problem that requiring to freeze other operations(such as create document/update document) during re-index. This is because we worried about the difference between source index's documents and ta… --- ## [Elastic Fleet Server Agent fails on startup](https://discuss.elastic.co/t/elastic-fleet-server-agent-fails-on-startup/319282)
**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\ **Replies:** 12\ **Last updated:** [November 24, 2022, 8:33am UTC](https://discuss.elastic.co/t/elastic-fleet-server-agent-fails-on-startup/319282 "2022-11-24T08:33:26Z")
Hi, currently I want to evaluate Elastic APM, but first things first, I am trying to setup the Elastic Agent in Fleet-Managed mode which keeps constantly failing. Managed Azure Redhat Openshift 4.9 // ECK 2.5 Right no… --- ## [Does filebeat transmit data to the master node of the elasticsearch cluster or to the data node](https://discuss.elastic.co/t/does-filebeat-transmit-data-to-the-master-node-of-the-elasticsearch-cluster-or-to-the-data-node/319694)
**Author:** [@CatLoveFishma](https://discuss.elastic.co/u/CatLoveFishma)\ **Replies:** 3\ **Last updated:** [November 24, 2022, 8:27am UTC](https://discuss.elastic.co/t/does-filebeat-transmit-data-to-the-master-node-of-the-elasticsearch-cluster-or-to-the-data-node/319694 "2022-11-24T08:27:59Z")
Hello, If I have a es cluster which has three data nodes (B,C,D) and a master node (A). Now I want to use filebeat to collect logs and directly transfer date to the es cluster.Which node should I transfer the data to？ … --- ## [Getting error {“ok”:false,”message”:”backend closed connection”} when POST request](https://discuss.elastic.co/t/getting-error-ok-false-message-backend-closed-connection-when-post-request/319219)
**Author:** [@StevenMartins](https://discuss.elastic.co/u/StevenMartins)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 7:57am UTC](https://discuss.elastic.co/t/getting-error-ok-false-message-backend-closed-connection-when-post-request/319219 "2022-11-24T07:57:22Z")
Hi, After a few minutes (5/10min) of POST requests, I get this error : {“ok”:false,”message”:”backend closed connection”} in my console but I do not see error in App Search API logs... How is it possible ? What can be … --- ## [How to run wildcard queries for long types?](https://discuss.elastic.co/t/how-to-run-wildcard-queries-for-long-types/319706)
**Author:** [@golofetuk](https://discuss.elastic.co/u/golofetuk)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-to-run-wildcard-queries-for-long-types/319706 "2022-11-24T07:35:51Z")
I just run a simple wildcard query on my elasticsearch server. My query is; GET calls-\*/\_search { "query": { "bool": { "filter": \[ { "bool": { "should": \[ { … [Previous page](https://discuss.elastic.co/latest.md?page=882) [Next page](https://discuss.elastic.co/latest.md?page=884)