# Latest

**URL:** https://discuss.elastic.co/latest.md?page=897

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 898

---

## [Fingerprint for kafka output](https://discuss.elastic.co/t/fingerprint-for-kafka-output/318878)

<div class="topic-metadata">

**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 3:01pm UTC](https://discuss.elastic.co/t/fingerprint-for-kafka-output/318878 "2022-11-14T15:01:59Z")

</div>

Hello! is there any option to use fingerprint in kafka output ? we have three nodes in high availability and we are tripling data. How can we avoid it ? Thank you in advanced!

---

## [Click On Kibana visual to navigate to associated dashboardkibana](https://discuss.elastic.co/t/click-on-kibana-visual-to-navigate-to-associated-dashboardkibana/318615)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 2:46pm UTC](https://discuss.elastic.co/t/click-on-kibana-visual-to-navigate-to-associated-dashboardkibana/318615 "2022-11-14T14:46:24Z")

</div>

Hello All, Is there a way in kibana visualization to Navigate to associated dashboarb after clicking on visualization.Currently work around I did i created seperate markdown custom CSS and navigate,but ideal requirement…

---

## [Term vectors for nested fields](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348)

<div class="topic-metadata">

**Author:** [@gioele](https://discuss.elastic.co/u/gioele)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 2:31pm UTC](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348 "2022-11-14T14:31:48Z")

</div>

Hi everyone. I'm trying to use the mtermvectors api to get the term vectors (with term\_statistics) for an artificial document having several nested fields. I noticed however that, while for standard fields this works wi…

---

## [How to capture and send error with Go APM?](https://discuss.elastic.co/t/how-to-capture-and-send-error-with-go-apm/316715)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 5:09am UTC](https://discuss.elastic.co/t/how-to-capture-and-send-error-with-go-apm/316715 "2022-11-14T05:09:13Z")

</div>

I got the basics of Elastic and Kibana (version 8.4) APM for a simple go app, but I can't seem to populate the errors page when I go to Kibana\>Observability\>APM\>Services\>MyGoApp\>Errors. It always looks empty like this: …

---

## [Unable to get Elasticsearch console](https://discuss.elastic.co/t/unable-to-get-elasticsearch-console/318534)

<div class="topic-metadata">

**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\
**Replies:** 7\
**Last updated:** [November 14, 2022, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-get-elasticsearch-console/318534 "2022-11-14T14:08:49Z")

</div>

Hi, We are not able to get Elasticsearch web console even if we check https://xxx.xxx.xx.xxx:9200 it shows nothing but all the services are running fine. Please find below logs from Elasticsearch. \[2022-11-09T16:22:4…

---

## [Kibana Visualization \[Line Chart\] How to Split By "Filters" and "Terms" in single visualization](https://discuss.elastic.co/t/kibana-visualization-line-chart-how-to-split-by-filters-and-terms-in-single-visualization/318226)

<div class="topic-metadata">

**Author:** [@kshamaz](https://discuss.elastic.co/u/kshamaz)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 2:01pm UTC](https://discuss.elastic.co/t/kibana-visualization-line-chart-how-to-split-by-filters-and-terms-in-single-visualization/318226 "2022-11-14T14:01:29Z")

</div>

Hi all, I have a ES dataset containing a term uri\_path, which can contain a mix of static strings and dynamic strings. Ex: Static values (i.e they don't contain dynamic parts in the path): /api/user/ /api/profile/ D…

---

## [How to (easiily) set time period to end of a day](https://discuss.elastic.co/t/how-to-easiily-set-time-period-to-end-of-a-day/318208)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 1:50pm UTC](https://discuss.elastic.co/t/how-to-easiily-set-time-period-to-end-of-a-day/318208 "2022-11-14T13:50:27Z")

</div>

Kibana 7.17 Very often I want to look at data for a certain day, so I need to set the time period as, E.g. Nov 3, 2022 @ 00:00:00.000 to Nov 3, 2022 @ 23:59:59.999. How can I easily do that? The only way I can find to …

---

## [How to Count repeated values in Kibana](https://discuss.elastic.co/t/how-to-count-repeated-values-in-kibana/318872)

<div class="topic-metadata">

**Author:** [@phil\_hcs\_tech](https://discuss.elastic.co/u/phil_hcs_tech)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 1:00pm UTC](https://discuss.elastic.co/t/how-to-count-repeated-values-in-kibana/318872 "2022-11-14T13:00:19Z")

</div>

I have an index storing family data. One of the properties is "childrenAges" which stores a list of the ages of the children in the family, see sample data below. I need to be able to count the ages of children across t…

---

## [Can I use ES roles with security disabled?](https://discuss.elastic.co/t/can-i-use-es-roles-with-security-disabled/318861)

<div class="topic-metadata">

**Author:** [@powerful\_clouds](https://discuss.elastic.co/u/powerful_clouds)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 11:18am UTC](https://discuss.elastic.co/t/can-i-use-es-roles-with-security-disabled/318861 "2022-11-14T11:18:47Z")

</div>

I'm trying to use field-level security with ES. I have successfully created an index and populated it with some data. I have also defined a roles.yml file: regular: cluster: all indices: - names: \['log-index'\] …

---

## [Elastic agents not showing up data for custom UDP integration](https://discuss.elastic.co/t/elastic-agents-not-showing-up-data-for-custom-udp-integration/318853)

<div class="topic-metadata">

**Author:** [@Pablo\_Sagrera\_Garcia](https://discuss.elastic.co/u/Pablo_Sagrera_Garcia)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/elastic-agents-not-showing-up-data-for-custom-udp-integration/318853 "2022-11-14T10:23:11Z")

</div>

Hi I have a Fleet of Elastic Agents running on a fresh k8s cluster (running ECK 8.5.0). I added Custom UDP log integration (default namespace ,Listen port 9512 and Listen address 0.0.0.0,Dataset name: udp.generic) via K…

---

## [Running functional tests from examples on Kibana 7.10.2 falls to errors](https://discuss.elastic.co/t/running-functional-tests-from-examples-on-kibana-7-10-2-falls-to-errors/316906)

<div class="topic-metadata">

**Author:** [@i\_sysa](https://discuss.elastic.co/u/i_sysa)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 2:17pm UTC](https://discuss.elastic.co/t/running-functional-tests-from-examples-on-kibana-7-10-2-falls-to-errors/316906 "2022-10-18T14:17:07Z")

</div>

Hi team, may anybody help with issue? I'm running test server for 'examples' plugins and it falls to error Corrupted database, /kibana7.10.2/data/node\_auto\_transpilation\_cache/7.10 attempting to delete the store file a…

---

## [CSV to Elasticsearch via Python - Not able to see documents in Dashboard / Discover](https://discuss.elastic.co/t/csv-to-elasticsearch-via-python-not-able-to-see-documents-in-dashboard-discover/318820)

<div class="topic-metadata">

**Author:** [@erwinl10](https://discuss.elastic.co/u/erwinl10)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 10:14am UTC](https://discuss.elastic.co/t/csv-to-elasticsearch-via-python-not-able-to-see-documents-in-dashboard-discover/318820 "2022-11-14T10:14:32Z")

</div>

Hi everyone, Good day! I am trying to do ingest csv to elasticsearch and hopefully to be able to visualize it in Kibana. Index is created via UI\[upload CSV\]. I've used a simple Python code for the succeeding upload of …

---

## [Field \[event.ingested\] of type \[keyword\] does not support custom formats](https://discuss.elastic.co/t/field-event-ingested-of-type-keyword-does-not-support-custom-formats/318850)

<div class="topic-metadata">

**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 10:06am UTC](https://discuss.elastic.co/t/field-event-ingested-of-type-keyword-does-not-support-custom-formats/318850 "2022-11-14T10:06:30Z")

</div>

I am using elasticsearch 7.10. On Friday night, one of the indices threw the error llegal\_argument\_exception at shard 0index xx.yynode FNZgMx35SGBsn8a1rs0WKQ Field \[event.ingested\] of type \[keyword\] does not support cu…

---

## [INCREASE RAM USAGE FOR KIBANA INSTANCE](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 8\
**Last updated:** [November 14, 2022, 9:27am UTC](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836 "2022-11-14T09:27:22Z")

</div>

Kibana instance in the stack monitoring section shows Memory: 1.9/4.0 GB Is that the memory given to the entire kibana instance???? Can I increase this limit as the total RAM server got is 64 GB....

---

## [Replace old Cold Node by a new one and migrate data](https://discuss.elastic.co/t/replace-old-cold-node-by-a-new-one-and-migrate-data/318410)

<div class="topic-metadata">

**Author:** [@zenzedoon](https://discuss.elastic.co/u/zenzedoon)\
**Replies:** 8\
**Last updated:** [November 14, 2022, 9:39am UTC](https://discuss.elastic.co/t/replace-old-cold-node-by-a-new-one-and-migrate-data/318410 "2022-11-14T09:39:16Z")

</div>

Hello, I have an ELK cluster with 3 nodes (debian 11 and ELK 7.17.0) : node1 (master+hot+ingest+content) 2Tb node2 (master+worm) 3Tb node3 (master+cold) 4Tb the cluster now is on red status cause the node3 is full ,…

---

## [Configure index template with custom fields](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777)

<div class="topic-metadata">

**Author:** [@Ganapati\_Basimsetti](https://discuss.elastic.co/u/Ganapati_Basimsetti)\
**Replies:** 8\
**Last updated:** [November 13, 2022, 4:00pm UTC](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777 "2022-11-13T16:00:07Z")

</div>

Hello Team, I am trying to configure an index template using custom fields with filebeat 8.2.0. I tried various combinations and read through various topics on the forum and the docs, but I couldn't make it work. The e…

---

## [Estimated bandwidth for normal operation](https://discuss.elastic.co/t/estimated-bandwidth-for-normal-operation/318840)

<div class="topic-metadata">

**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 9:04am UTC](https://discuss.elastic.co/t/estimated-bandwidth-for-normal-operation/318840 "2022-11-14T09:04:40Z")

</div>

Hi all, I am the new to ELK stack and I would like to calculate the bandwidth for normal operation. "Based on my understanding, There's a number of consumers of bandwidth in an Elasticsearch cluster. The main two in no…

---

## [Newline character not processed by logback logstash JSON appender in Spring boot logger](https://discuss.elastic.co/t/newline-character-not-processed-by-logback-logstash-json-appender-in-spring-boot-logger/318841)

<div class="topic-metadata">

**Author:** [@jayanth91](https://discuss.elastic.co/u/jayanth91)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 9:00am UTC](https://discuss.elastic.co/t/newline-character-not-processed-by-logback-logstash-json-appender-in-spring-boot-logger/318841 "2022-11-14T09:00:58Z")

</div>

So i'm trying to format my json string but somehow the newline characters are not being processed and get printed as-is.

---

## [Elasticsearch index data not found in directory data.path](https://discuss.elastic.co/t/elasticsearch-index-data-not-found-in-directory-data-path/318835)

<div class="topic-metadata">

**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-index-data-not-found-in-directory-data-path/318835 "2022-11-14T08:20:55Z")

</div>

Hi in .yml file i have mentioned data.path=custom directory.The index has approximate 500 mb data . when i CD to the custom directory and do \>\> ls -lh its only 4.kb I wonder where all the data resides of elasticsearch…

---

## [(Issue) Kibana Sending PlainText HTTP Traffic to ElasticSearch \[8.5.0\] (Fresh Install) (RHEL 7)](https://discuss.elastic.co/t/issue-kibana-sending-plaintext-http-traffic-to-elasticsearch-8-5-0-fresh-install-rhel-7/318829)

<div class="topic-metadata">

**Author:** [@scanlan](https://discuss.elastic.co/u/scanlan)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/issue-kibana-sending-plaintext-http-traffic-to-elasticsearch-8-5-0-fresh-install-rhel-7/318829 "2022-11-14T08:17:26Z")

</div>

Hi All, Having an issue and was hoping someone would be able to assist. I have deployed a fresh instance of Elastic & Kibana (separate hosts) via RPM on RHEL 7.9. No issues during deployment. Everything seems to work f…

---

## [Does combined\_fields query (or multi-match+cross\_fields) support phrase?](https://discuss.elastic.co/t/does-combined-fields-query-or-multi-match-cross-fields-support-phrase/318837)

<div class="topic-metadata">

**Author:** [@yliu000](https://discuss.elastic.co/u/yliu000)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 8:03am UTC](https://discuss.elastic.co/t/does-combined-fields-query-or-multi-match-cross-fields-support-phrase/318837 "2022-11-14T08:03:00Z")

</div>

Hi, I have documents with multiple fields, and want to do "term centric" search, instead of "field centric" search. (Following term centric combined\_fields for "term centric" definition). I have two needs: First, I n…

---

## [How to understand registry file in filebeat 8.3.2](https://discuss.elastic.co/t/how-to-understand-registry-file-in-filebeat-8-3-2/318827)

<div class="topic-metadata">

**Author:** [@bharat97](https://discuss.elastic.co/u/bharat97)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-understand-registry-file-in-filebeat-8-3-2/318827 "2022-11-14T06:29:59Z")

</div>

Hi, Is there any way I can know, which all files are shipped by filebeat to logstash. I was reading the registry file but I am not able to understand what each record means. Here is a sample of my registry log file, can …

---

## [Why Current action time option of 2 indices is showing same date and time](https://discuss.elastic.co/t/why-current-action-time-option-of-2-indices-is-showing-same-date-and-time/318727)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 5:54am UTC](https://discuss.elastic.co/t/why-current-action-time-option-of-2-indices-is-showing-same-date-and-time/318727 "2022-11-14T05:54:01Z")

</div>

Why Current action time option of 2 indices is showing same date and time. how to check the indice creation details . i have attached the screenshots too.

---

## [Elasticseach shards allocation](https://discuss.elastic.co/t/elasticseach-shards-allocation/318770)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 5:13am UTC](https://discuss.elastic.co/t/elasticseach-shards-allocation/318770 "2022-11-14T05:13:22Z")

</div>

Hi, I have elastic version 7.17.0 and I have a problem with shard allocation, which causes problems with data loading. The cluster is rejecting requests and limiting ingest due to overloading 2 nodes. The nodes are ov…

---

## [ELK Migartion to 8.4.3](https://discuss.elastic.co/t/elk-migartion-to-8-4-3/318715)

<div class="topic-metadata">

**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 3:08am UTC](https://discuss.elastic.co/t/elk-migartion-to-8-4-3/318715 "2022-11-14T03:08:08Z")

</div>

Hello, Current ELK stack version details: Elasticsearch: 7.5.1 Kibana: 6.7.2 Logstash: 6.8.12 We are using ELK purely as a log-aggregation platform and I am planning to update my ELK cluster 8.4.3. Could you ple…

---

## [Unable to start Logstash docker 8.5.0](https://discuss.elastic.co/t/unable-to-start-logstash-docker-8-5-0/318815)

<div class="topic-metadata">

**Author:** [@diogogm](https://discuss.elastic.co/u/diogogm)\
**Replies:** 4\
**Last updated:** [November 14, 2022, 2:50am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-docker-8-5-0/318815 "2022-11-14T02:50:08Z")

</div>

Hi everyone, I'm trying to start my logstash docker after hours configuring jvm.options, log4j2.properties, logstash.yml and pipelines.yml it's still showing "Logstash shut down" , I'm running the latest version of Elas…

---

## [Enable user to generate API Key and access API](https://discuss.elastic.co/t/enable-user-to-generate-api-key-and-access-api/318695)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 9\
**Last updated:** [November 14, 2022, 2:43am UTC](https://discuss.elastic.co/t/enable-user-to-generate-api-key-and-access-api/318695 "2022-11-14T02:43:43Z")

</div>

Hello. We are running ELK 7.6.2 stack. I need to create a user and provide it access for API key generation along with API access. When I check in Kibana console it says "API keys not enabled in Elasticsearch" Please …

---

## [How to split ".security-7"](https://discuss.elastic.co/t/how-to-split-security-7/317807)

<div class="topic-metadata">

**Author:** [@MuFeng](https://discuss.elastic.co/u/MuFeng)\
**Replies:** 18\
**Last updated:** [November 14, 2022, 1:58am UTC](https://discuss.elastic.co/t/how-to-split-security-7/317807 "2022-11-14T01:58:29Z")

</div>

Why can't I add multiple copies of. security-7 in the ES8 cluster? How to modify the number of replicas of the system index?

---

## [Load index template into Elasticsearch](https://discuss.elastic.co/t/load-index-template-into-elasticsearch/318814)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 12:53am UTC](https://discuss.elastic.co/t/load-index-template-into-elasticsearch/318814 "2022-11-14T00:53:37Z")

</div>

Hello, I want to issue the following command. However, I can only access my elasticsearch via ssl. Therefore I get the following error message: root@nmanme01:~# filebeat setup -E output.logstash.enabled=false -E outp…

---

## [Kibana setup with elasticsearch 8.4.3](https://discuss.elastic.co/t/kibana-setup-with-elasticsearch-8-4-3/318792)

<div class="topic-metadata">

**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 12:38am UTC](https://discuss.elastic.co/t/kibana-setup-with-elasticsearch-8-4-3/318792 "2022-11-14T00:38:14Z")

</div>

Hello, I am setting up the Kibana and Elasticseach instances in AWS with version 8.4.3. The Elasticsearch instance is up and running. While configuring the kibana I have set the following properties. server.host: 0.0.…

[Previous page](https://discuss.elastic.co/latest.md?page=896)

[Next page](https://discuss.elastic.co/latest.md?page=898)
