# Latest **URL:** https://discuss.elastic.co/latest.md?page=886 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 887 --- ## [Not breaking down Embeded json field and instead keep it in a single field](https://discuss.elastic.co/t/not-breaking-down-embeded-json-field-and-instead-keep-it-in-a-single-field/319505)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 1:42pm UTC](https://discuss.elastic.co/t/not-breaking-down-embeded-json-field-and-instead-keep-it-in-a-single-field/319505 "2022-11-22T13:42:34Z")
Hi All, I use json filter plugin to parse log entries in json format such as the below {"actor\_ip":"xxx","from":"Api::ActionsRunnerRegistration#POST","actor":"xxx","actor\_id":2480,"org":"xxx","org\_id":13,"action":"org.… --- ## [Dumping requests](https://discuss.elastic.co/t/dumping-requests/319462)
**Author:** [@Georgi\_Danov](https://discuss.elastic.co/u/Georgi_Danov)\ **Replies:** 4\ **Last updated:** [November 22, 2022, 1:39pm UTC](https://discuss.elastic.co/t/dumping-requests/319462 "2022-11-22T13:39:03Z")
I'm reverse engineering and optimizing ES instance. One of the things that would help me enormously is to understand what operations (updates and queries) are coming in. What's the best way do dump & analyze the operat… --- ## [The content length (938946807) is bigger than the maximum allowed string (536870888) sending logstash-plain.log to elasticsearch](https://discuss.elastic.co/t/the-content-length-938946807-is-bigger-than-the-maximum-allowed-string-536870888-sending-logstash-plain-log-to-elasticsearch/319533)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 8\ **Last updated:** [November 22, 2022, 1:00pm UTC](https://discuss.elastic.co/t/the-content-length-938946807-is-bigger-than-the-maximum-allowed-string-536870888-sending-logstash-plain-log-to-elasticsearch/319533 "2022-11-22T13:00:00Z")
Hi I have setup filebeat to send logstash logs to logstah then elasticsearch. Getting this error when trying to access it on discover page Search Error The content length (938946807) is bigger than the maximum allowed s… --- ## [How to join/combine data from 2 indices using a common/join field in Elastic?](https://discuss.elastic.co/t/how-to-join-combine-data-from-2-indices-using-a-common-join-field-in-elastic/317195)
**Author:** [@AshwiniPrabhu](https://discuss.elastic.co/u/AshwiniPrabhu)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 6:10am UTC](https://discuss.elastic.co/t/how-to-join-combine-data-from-2-indices-using-a-common-join-field-in-elastic/317195 "2022-10-26T06:10:10Z")
Hi, Thank you for your time for reading the question. I have 2 indices: Index 1 (Activation) - Order Id, Activation Date Index 2 (Identity) - Order Id, Identity Date. The join field/common field is Order id. I have t… --- ## [How to include the timestamp filter value in the dropdown filter?](https://discuss.elastic.co/t/how-to-include-the-timestamp-filter-value-in-the-dropdown-filter/317380)
**Author:** [@drizzt\_yin](https://discuss.elastic.co/u/drizzt_yin)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 12:10pm UTC](https://discuss.elastic.co/t/how-to-include-the-timestamp-filter-value-in-the-dropdown-filter/317380 "2022-11-22T12:10:36Z")
Hi, In the drop-down filter, I want to reference the ts field value from the timestamp filter. How to do this? Thanks, Eason --- ## [Index lost the alias rollover](https://discuss.elastic.co/t/index-lost-the-alias-rollover/319396)
**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\ **Replies:** 5\ **Last updated:** [November 22, 2022, 11:56am UTC](https://discuss.elastic.co/t/index-lost-the-alias-rollover/319396 "2022-11-22T11:56:50Z")
Hi, when the index make de rollover and delete step, index-000001 is deleted, but then fluentd creates a new index-000001 (instead write in index-000002) and de alias is deleted so appears the error illegal\_argument\_ex… --- ## [Alias error , with rollover next step index-0002](https://discuss.elastic.co/t/alias-error-with-rollover-next-step-index-0002/319192)
**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\ **Replies:** 3\ **Last updated:** [November 22, 2022, 11:55am UTC](https://discuss.elastic.co/t/alias-error-with-rollover-next-step-index-0002/319192 "2022-11-22T11:55:02Z")
Hi, I have a lifecycle policy with template/alias/index with 5gb and 3 days indextest-00001 good works when the rollover step, close de indextest-00001 and creates a new indextest-00002 but the new index dont write an… --- ## [Encountered a retryable error. Will Retry with exponential backoff](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff/319547)
**Author:** [@pubudu.a](https://discuss.elastic.co/u/pubudu.a)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 11:53am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff/319547 "2022-11-22T11:53:20Z")
Hi All, I encountered the following error in the logstash server after updating Opensearh 1.3 to OpenSearch 2.3 in the AWS Kibana dashboard. The current configuration worked fine with 1.3 but after updating it to 2.3 it… --- ## [Match queries and ASCII folding](https://discuss.elastic.co/t/match-queries-and-ascii-folding/319544)
**Author:** [@babolivier](https://discuss.elastic.co/u/babolivier)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 11:44am UTC](https://discuss.elastic.co/t/match-queries-and-ascii-folding/319544 "2022-11-22T11:44:25Z")
Hi all, I have an index that was created with the following configuration: { "settings": { "analysis": { "analyzer": { "std\_asciifolding": { "tokenizer": "standard", "filter": \[ … --- ## [Set ip on http monitors like curl resolve command](https://discuss.elastic.co/t/set-ip-on-http-monitors-like-curl-resolve-command/319346)
**Author:** [@oofbird](https://discuss.elastic.co/u/oofbird)\ **Replies:** 3\ **Last updated:** [November 22, 2022, 11:05am UTC](https://discuss.elastic.co/t/set-ip-on-http-monitors-like-curl-resolve-command/319346 "2022-11-22T11:05:32Z")
I want to monitor https service. (domain - VIP - webserver) testing domain(VIP) is clear. just call "https://domain". but testing webserver has a problem, guessing from SNI(Server Name Indication). Calling "https://we… --- ## [Elastic Observability On-Demand: exam objectives seem to differ from the training contents](https://discuss.elastic.co/t/elastic-observability-on-demand-exam-objectives-seem-to-differ-from-the-training-contents/317421)
**Author:** [@jan.stap](https://discuss.elastic.co/u/jan.stap)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 10:56am UTC](https://discuss.elastic.co/t/elastic-observability-on-demand-exam-objectives-seem-to-differ-from-the-training-contents/317421 "2022-11-22T10:56:41Z")
Hi, The Elastic Observability On-Demand exam objectives mention configuring filebeat and metricbeat, but I find neither in the current training material. My colleague Paul Oude Vrielink followed this training last June… --- ## [Server Kibana I want to stopped](https://discuss.elastic.co/t/server-kibana-i-want-to-stopped/319420)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 10:29am UTC](https://discuss.elastic.co/t/server-kibana-i-want-to-stopped/319420 "2022-11-22T10:29:43Z")
Hello, I have two servers the first in it Kibana, GrafanaI and the second server in it Elasticsearch and Logstash pipeline is running, I want to reboot the server that in it kibana and Grafana, what is happens to the … --- ## [Issue generating token after adding PV](https://discuss.elastic.co/t/issue-generating-token-after-adding-pv/319537)
**Author:** [@lkurczy](https://discuss.elastic.co/u/lkurczy)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 10:18am UTC](https://discuss.elastic.co/t/issue-generating-token-after-adding-pv/319537 "2022-11-22T10:18:05Z")
Hello, Im trying to configure a new instance of elasticsearch and kibana in docker. When i run it with the following commands, everything runs smoothly and im able to run kibana with security enabled: docker run --nam… --- ## [Postgres integration Fleet](https://discuss.elastic.co/t/postgres-integration-fleet/317649)
**Author:** [@Gaston\_Beltramelli](https://discuss.elastic.co/u/Gaston_Beltramelli)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 10:12am UTC](https://discuss.elastic.co/t/postgres-integration-fleet/317649 "2022-11-22T10:12:33Z")
Hello! I'm trying to install the Postgres integration to get metrics via Fleet, but when I get to the configuration I don't have the option to add the database from the UI, no matter how I add the database in the conne… --- ## [System integration VS Windows Integration](https://discuss.elastic.co/t/system-integration-vs-windows-integration/317701)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 10:02am UTC](https://discuss.elastic.co/t/system-integration-vs-windows-integration/317701 "2022-11-22T10:02:26Z")
Hello, if I add both integrations (system and windows) in Fleet, for the same policy, will there be duplication of logs? Here;s what System collects: Here's what Windows integration collects: Is Sysmon included … --- ## [Query configuration in annotation in TSVB visual](https://discuss.elastic.co/t/query-configuration-in-annotation-in-tsvb-visual/319511)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 9:22am UTC](https://discuss.elastic.co/t/query-configuration-in-annotation-in-tsvb-visual/319511 "2022-11-22T09:22:56Z")
Hi, I wanted to create a visual in TSVB to display Bell icon when total count of category exceeds particular threshold. I have tried category.keyword.count\>10 (referring to this creating a trend graph based on tsvb + a… --- ## [Is it possible to add condition in elasticsearch logstash jdbc input plugin](https://discuss.elastic.co/t/is-it-possible-to-add-condition-in-elasticsearch-logstash-jdbc-input-plugin/319195)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 7\ **Last updated:** [November 22, 2022, 9:07am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-condition-in-elasticsearch-logstash-jdbc-input-plugin/319195 "2022-11-22T09:07:50Z")
Hi Experts, Is it possible to add condition in elasticsearch logstash jdbc input plugin for the use case mentioned below - Usecase - Select data from table1 If datetime (refer elapseTime in code mentioned below) fetc… --- ## [Should I need raw data to create a Grok Filter?](https://discuss.elastic.co/t/should-i-need-raw-data-to-create-a-grok-filter/319386)
**Author:** [@aaron.chang](https://discuss.elastic.co/u/aaron.chang)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 8:33am UTC](https://discuss.elastic.co/t/should-i-need-raw-data-to-create-a-grok-filter/319386 "2022-11-22T08:33:08Z")
Hi , I am a new user to use ELK. I want to analyze Aruba Controller & MM's syslog. But ELK don't have Aruba's template to show clearly. So I need to grok it by myself. From some article ,I know that ELK will not save… --- ## [Install of ECE 3.4.1 times out](https://discuss.elastic.co/t/install-of-ece-3-4-1-times-out/319061)
**Author:** [@carlotoledo](https://discuss.elastic.co/u/carlotoledo)\ **Replies:** 3\ **Last updated:** [November 22, 2022, 7:52am UTC](https://discuss.elastic.co/t/install-of-ece-3-4-1-times-out/319061 "2022-11-22T07:52:03Z")
Hi, I've been trying (and failing) to install elastic ece on prem with no docker library (pre loaded all images as per instruction) on a centos 7 VM using the installation bash script provided by elastic. The install ru… --- ## [Can We set a Node to be both ML Node and Content Node](https://discuss.elastic.co/t/can-we-set-a-node-to-be-both-ml-node-and-content-node/319304)
**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 7:40am UTC](https://discuss.elastic.co/t/can-we-set-a-node-to-be-both-ml-node-and-content-node/319304 "2022-11-22T07:40:52Z")
Hello Team, I am new to Elastic and Machine Learning but what I have gathered by documentation is that to Use machine learning ( For the production cluster) it is better to use a dedicated machine learning node. Now in … --- ## [Search single character](https://discuss.elastic.co/t/search-single-character/319516)
**Author:** [@Zaid\_Raza](https://discuss.elastic.co/u/Zaid_Raza)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 7:23am UTC](https://discuss.elastic.co/t/search-single-character/319516 "2022-11-22T07:23:34Z")
Hi, I am creating a search query in which I am searching course name. For example if I search "Introduction to R" then the output is "Introduction to Scrum". In this query "R" is not considered as a single word while se… --- ## [Error sending data to APM server: Read timed out, response code is -1](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/319515)
**Author:** [@greeshma](https://discuss.elastic.co/u/greeshma)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 7:23am UTC](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/319515 "2022-11-22T07:23:15Z")
I have installed ELK 8.4.0 version and it is running successfully and installed elastic agent 1.8.1 version and apm server of 8.5 version. I have configured the tomcat application but while executing the server a found e… --- ## [Hierarchical-facets](https://discuss.elastic.co/t/hierarchical-facets/319512)
**Author:** [@athiraaravindan](https://discuss.elastic.co/u/athiraaravindan)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 6:11am UTC](https://discuss.elastic.co/t/hierarchical-facets/319512 "2022-11-22T06:11:20Z")
ho to create a nested facets like the picture below using elastic app-search-ui --- ## [Logstash server label shipped with logs](https://discuss.elastic.co/t/logstash-server-label-shipped-with-logs/319478)
**Author:** [@lubimamp](https://discuss.elastic.co/u/lubimamp)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 2:46am UTC](https://discuss.elastic.co/t/logstash-server-label-shipped-with-logs/319478 "2022-11-22T02:46:37Z")
Hi Everyone, i have 2+ logstash servers in cluster and i would like to have some tag/flag/whatever which to tell me from which logstash server exactly the message was shipped. I have cases in which one of the logstash s… --- ## [Data nodes unable to see the data in path.data](https://discuss.elastic.co/t/data-nodes-unable-to-see-the-data-in-path-data/319385)
**Author:** [@Joseph\_Khoury](https://discuss.elastic.co/u/Joseph_Khoury)\ **Replies:** 9\ **Last updated:** [November 22, 2022, 1:40am UTC](https://discuss.elastic.co/t/data-nodes-unable-to-see-the-data-in-path-data/319385 "2022-11-22T01:40:38Z")
Hello all, Initially my Elastic cluster was down after a trial license expired. I was able to successfully delete the license and revert back to the basic one. After that, all the nodes are up with a master. Nonethele… --- ## [Dynamic template vs Index template with explicit mapping in terms of performance](https://discuss.elastic.co/t/dynamic-template-vs-index-template-with-explicit-mapping-in-terms-of-performance/319399)
**Author:** [@2019240081](https://discuss.elastic.co/u/2019240081)\ **Replies:** 4\ **Last updated:** [November 22, 2022, 12:42am UTC](https://discuss.elastic.co/t/dynamic-template-vs-index-template-with-explicit-mapping-in-terms-of-performance/319399 "2022-11-22T00:42:01Z")
Considering both search response speed and indexing rate (in my case the latter is more important ), which is more efficient? Dynamic template or Index template with explicit mapping ? It depends on my environment? --- ## [Does the aggregation-based area graph visualize correctly in Kibana v.7.17.0?](https://discuss.elastic.co/t/does-the-aggregation-based-area-graph-visualize-correctly-in-kibana-v-7-17-0/319394)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 12:09am UTC](https://discuss.elastic.co/t/does-the-aggregation-based-area-graph-visualize-correctly-in-kibana-v-7-17-0/319394 "2022-11-22T00:09:10Z")
I'm comparing the visualization of the aggregation-based area graph between Kibana v.7.6.1 and v.7.17.0. Each graph's view looks like below here. ・Kibana v.7.6.1 ・Kibana v.7.17.0 The graph of the later version(v… --- ## [About the dense vector compression](https://discuss.elastic.co/t/about-the-dense-vector-compression/319398)
**Author:** [@myazi](https://discuss.elastic.co/u/myazi)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 12:00am UTC](https://discuss.elastic.co/t/about-the-dense-vector-compression/319398 "2022-11-22T00:00:18Z")
Does elasticsearch have plans to support product quantization and SQ8 quantization? we have close to 10 Billion semantic vector index. The dense vector is 768 dimensional. --- ## [Elastic 8.0 refuses connections using hostname instead of localhost](https://discuss.elastic.co/t/elastic-8-0-refuses-connections-using-hostname-instead-of-localhost/319416)
**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 10:51pm UTC](https://discuss.elastic.co/t/elastic-8-0-refuses-connections-using-hostname-instead-of-localhost/319416 "2022-11-21T22:51:59Z")
Hello team, I would like to ask you for your expertized advice. After an one of Elastic restart WITHOUT TOUCHING CONFIG :slight\_smile: it started refuse connections using hostname:9200. I have tried variations found … --- ## [Sometimes events write issues from Logstash to Elasticsearch](https://discuss.elastic.co/t/sometimes-events-write-issues-from-logstash-to-elasticsearch/319417)
**Author:** [@Jonathan\_G](https://discuss.elastic.co/u/Jonathan_G)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 10:03am UTC](https://discuss.elastic.co/t/sometimes-events-write-issues-from-logstash-to-elasticsearch/319417 "2022-11-21T10:03:30Z")
Hello! Issue: Usually everything works correctly. Logstash succsessfuly writes bulk requests with events to Elasticsearch. But sometimes we have issue with connectivity between Logstash && Elasticsearch. Issue relates … [Previous page](https://discuss.elastic.co/latest.md?page=885) [Next page](https://discuss.elastic.co/latest.md?page=887)