# Latest

**URL:** https://discuss.elastic.co/latest.md?page=901

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 902

---

## [ElasticSearch Java API 8.5.0 fields are missing from indexed document](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576)

<div class="topic-metadata">

**Author:** [@AKDAS\_System](https://discuss.elastic.co/u/AKDAS_System)\
**Replies:** 7\
**Last updated:** [November 10, 2022, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576 "2022-11-10T09:34:26Z")

</div>

Hello. We've been migrating from ES 7 version to 8.5 and discovered this weird behavior. In Kibana I can index a test document with a null field value and it will get indexed and will be present in the index. PUT my-in…

---

## [Reindex from remote server](https://discuss.elastic.co/t/reindex-from-remote-server/318630)

<div class="topic-metadata">

**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\
**Replies:** 1\
**Last updated:** [November 10, 2022, 8:59am UTC](https://discuss.elastic.co/t/reindex-from-remote-server/318630 "2022-11-10T08:59:12Z")

</div>

Hello, I want to migrate the data from one elasticsearch cluster to another using reindexing from a remote server approach. Calling reindex API multiple times does the migration activity from scratch each time rather i…

---

## [How can we compare no of hits in query](https://discuss.elastic.co/t/how-can-we-compare-no-of-hits-in-query/318631)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 8:58am UTC](https://discuss.elastic.co/t/how-can-we-compare-no-of-hits-in-query/318631 "2022-11-10T08:58:40Z")

</div>

I am using metricbeat for getting system uptime. When a system goes down , the no of hits is less than 1. Is there any way we can add that no\_of\_hits \< 1 in a query. Earlier i am using this query. But i did not get any …

---

## [Not able to use bind-mount volumes with Elasticsearch used in a podman container](https://discuss.elastic.co/t/not-able-to-use-bind-mount-volumes-with-elasticsearch-used-in-a-podman-container/318628)

<div class="topic-metadata">

**Author:** [@DomR](https://discuss.elastic.co/u/DomR)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 8:36am UTC](https://discuss.elastic.co/t/not-able-to-use-bind-mount-volumes-with-elasticsearch-used-in-a-podman-container/318628 "2022-11-10T08:36:51Z")

</div>

Hello, I'm new at Elasticsearch (ES) and i'm currently set a customized podman container ES 8.5.0 installation from base RPM repository In this installation I'm using a dedicated Linux user 'elasticadm' which owns the …

---

## [To get the data of Index size into Kibana Dashboards](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/318080)

<div class="topic-metadata">

**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\
**Replies:** 5\
**Last updated:** [November 10, 2022, 8:19am UTC](https://discuss.elastic.co/t/to-get-the-data-of-index-size-into-kibana-dashboards/318080 "2022-11-10T08:19:56Z")

</div>

Hi Team, We would like to open the same topic (To get the data of Index size into Kibana Dashboards) due to that topic has been closed automatically and we need more clarification to know about this. Actually we are ma…

---

## [Differentiate coursor and touch event stream](https://discuss.elastic.co/t/differentiate-coursor-and-touch-event-stream/318546)

<div class="topic-metadata">

**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 8:19am UTC](https://discuss.elastic.co/t/differentiate-coursor-and-touch-event-stream/318546 "2022-11-10T08:19:03Z")

</div>

Hello, I'm using version 8.4.3 of elastic cloud. Is there any way to differentiate when the click is done with the cursor (mouse or touchpad) or with touch (ipad)? I developed some charts in vega, but when I open them …

---

## [Splitting a json array format with same fields name](https://discuss.elastic.co/t/splitting-a-json-array-format-with-same-fields-name/318509)

<div class="topic-metadata">

**Author:** [@Adabi\_Raihan](https://discuss.elastic.co/u/Adabi_Raihan)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 7:44am UTC](https://discuss.elastic.co/t/splitting-a-json-array-format-with-same-fields-name/318509 "2022-11-10T07:44:06Z")

</div>

Hi Everyone, Currently, i have this kind of JSON array with the same field, what I wanted is to split this data into an independent field and the field name is based on a "name" field events.parameters (this is the fie…

---

## [Error: fail to enroll: error 400 fleet-server BadRequest](https://discuss.elastic.co/t/error-fail-to-enroll-error-400-fleet-server-badrequest/317329)

<div class="topic-metadata">

**Author:** [@Mouc](https://discuss.elastic.co/u/Mouc)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 7:41am UTC](https://discuss.elastic.co/t/error-fail-to-enroll-error-400-fleet-server-badrequest/317329 "2022-11-10T07:41:25Z")

</div>

Hello, After reading all the topics linked to my problem, i still could not solve it. My Elastic-Agent was installed correctly but the enrollment doesn't work, at first i only read the warning saying that remote server…

---

## [Remote reindex with wildcard to multiple indices](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 6\
**Last updated:** [November 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552 "2022-11-10T07:22:25Z")

</div>

Hey Everyone, I'm having some issues with running a remote reindex from cluster a to cluster b. The end goal I'm trying to achieve is having some index pattern that the user can provide, and the remote reindex will get …

---

## [Complete ELK Data migration between 2 clusters](https://discuss.elastic.co/t/complete-elk-data-migration-between-2-clusters/318610)

<div class="topic-metadata">

**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\
**Replies:** 1\
**Last updated:** [November 10, 2022, 7:20am UTC](https://discuss.elastic.co/t/complete-elk-data-migration-between-2-clusters/318610 "2022-11-10T07:20:07Z")

</div>

Hello, I have two ELK stack instances on my local machine with version \[7.5.1 and 8.4.3\]. Now I need to migrate the data from the old version cluster to the new version cluster. Question: What would be the right app…

---

## [Requirement to build a Multiple Input system in Logstash as given below, Can I build something like this?](https://discuss.elastic.co/t/requirement-to-build-a-multiple-input-system-in-logstash-as-given-below-can-i-build-something-like-this/318584)

<div class="topic-metadata">

**Author:** [@rravitech](https://discuss.elastic.co/u/rravitech)\
**Replies:** 2\
**Last updated:** [November 10, 2022, 6:56am UTC](https://discuss.elastic.co/t/requirement-to-build-a-multiple-input-system-in-logstash-as-given-below-can-i-build-something-like-this/318584 "2022-11-10T06:56:39Z")

</div>

I need to implement a UDP system in between the input and output patterns as mentioned below. inputs : beats, tcp output: elastic-search meanwhile i need to send all the data from the inputs like beats, tcp to an UDPO…

---

## [How to Monitor the process using metricbeat](https://discuss.elastic.co/t/how-to-monitor-the-process-using-metricbeat/318525)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 5\
**Last updated:** [November 10, 2022, 6:32am UTC](https://discuss.elastic.co/t/how-to-monitor-the-process-using-metricbeat/318525 "2022-11-10T06:32:55Z")

</div>

How to Monitor the process using metricbeat in windows. Should we include the process details in the configuration yml of metricbeat? currently without mentioning any process details in config file its only showing proc…

---

## [Elasticsearch 8.5.0 docker fail elasticsearch-reset-password](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 1\
**Last updated:** [November 10, 2022, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575 "2022-11-10T06:22:49Z")

</div>

Hi. Today I've update my develop single cluster from 8.4.X to 8.5.0 When I've tried to reset password get error (same from host that from terminal of docker desktop) ❯ docker exec -it sitelight-es01 /usr/share/elastic…

---

## [Elasticsearch Scroll Api](https://discuss.elastic.co/t/elasticsearch-scroll-api/318608)

<div class="topic-metadata">

**Author:** [@GOPAL\_GOTE](https://discuss.elastic.co/u/GOPAL_GOTE)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 4:38am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-api/318608 "2022-11-10T04:38:04Z")

</div>

Hi, I'm trying to fetch 10,000 records on each iteration using the scroll API, but I'm not getting a response from it. I increased max\_result\_window to 500000 but am not getting any response from the API. I wrote code a…

---

## [Trace capturing taking time after updating dynamic configuration](https://discuss.elastic.co/t/trace-capturing-taking-time-after-updating-dynamic-configuration/318612)

<div class="topic-metadata">

**Author:** [@sarthik](https://discuss.elastic.co/u/sarthik)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 6:09am UTC](https://discuss.elastic.co/t/trace-capturing-taking-time-after-updating-dynamic-configuration/318612 "2022-11-10T06:09:36Z")

</div>

Trace capturing taking time after updating dynamic configuration. After I update instrumentation and recording both, there is a loss of trace data for some initial time. Is there a fixed span of time to wait after upda…

---

## [How to ingest a log file from source system to Kibana through Filebeat](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544)

<div class="topic-metadata">

**Author:** [@cadrija](https://discuss.elastic.co/u/cadrija)\
**Replies:** 15\
**Last updated:** [November 10, 2022, 5:50am UTC](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544 "2022-11-10T05:50:26Z")

</div>

Hi experts! I am new to elastic. I have installed ELK (7.17.6) on a Ubuntu system (suppose u.u.u.u). Now I am trying to fetch/ingest a log file from a windows system (suppose w.w.w.w). Steps I followed leaning from tut…

---

## [How to set https in beats agents configuration](https://discuss.elastic.co/t/how-to-set-https-in-beats-agents-configuration/318527)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 2\
**Last updated:** [November 10, 2022, 5:32am UTC](https://discuss.elastic.co/t/how-to-set-https-in-beats-agents-configuration/318527 "2022-11-10T05:32:26Z")

</div>

how to set https in beats agents configuration ? i am using 7.17.3 v of elk. output is through logstash.

---

## [Index security in kibana](https://discuss.elastic.co/t/index-security-in-kibana/318428)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 5:02am UTC](https://discuss.elastic.co/t/index-security-in-kibana/318428 "2022-11-10T05:02:06Z")

</div>

if the user does not have access to the index, no message is displayed (insufficient privileges). but just doesn't display any data which confuses my users, and they call me saying the data is missing. This is a situa…

---

## [How to divide a single field of a log in elasticsearch into multiple fields in a single event only using logstash filter plugin](https://discuss.elastic.co/t/how-to-divide-a-single-field-of-a-log-in-elasticsearch-into-multiple-fields-in-a-single-event-only-using-logstash-filter-plugin/318538)

<div class="topic-metadata">

**Author:** [@khushi](https://discuss.elastic.co/u/khushi)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 4:32am UTC](https://discuss.elastic.co/t/how-to-divide-a-single-field-of-a-log-in-elasticsearch-into-multiple-fields-in-a-single-event-only-using-logstash-filter-plugin/318538 "2022-11-10T04:32:39Z")

</div>

I am sending emails from a mail service to elasticsearch. Now I want to have multiple fields of a single field.

---

## [Index suddenly reporting "Format version is not supported"](https://discuss.elastic.co/t/index-suddenly-reporting-format-version-is-not-supported/318605)

<div class="topic-metadata">

**Author:** [@theblindstagger](https://discuss.elastic.co/u/theblindstagger)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 3:46am UTC](https://discuss.elastic.co/t/index-suddenly-reporting-format-version-is-not-supported/318605 "2022-11-10T03:46:50Z")

</div>

Hi, Our application uses elasticsearch v7.9.2. Each instance of the application creates three separate indexes for three different types of data. One customer instance was working fine until the weekend, when a schedu…

---

## [Best Practices for Saving and Maintaining Kibana Saved Objects (Index Patterns & Dashboards)](https://discuss.elastic.co/t/best-practices-for-saving-and-maintaining-kibana-saved-objects-index-patterns-dashboards/318603)

<div class="topic-metadata">

**Author:** [@dante10](https://discuss.elastic.co/u/dante10)\
**Replies:** 0\
**Last updated:** [November 10, 2022, 2:52am UTC](https://discuss.elastic.co/t/best-practices-for-saving-and-maintaining-kibana-saved-objects-index-patterns-dashboards/318603 "2022-11-10T02:52:17Z")

</div>

What is the best practice for maintaining kibana saved objects for index-patterns and dashboards in github? 1. Do you save index-patterns and dashboards in one file? Ex: saved\_objects.ndjson {"type":"index-pattern", …

---

## [Transform Vega Data](https://discuss.elastic.co/t/transform-vega-data/314480)

<div class="topic-metadata">

**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 4:19am UTC](https://discuss.elastic.co/t/transform-vega-data/314480 "2022-10-13T04:19:57Z")

</div>

How to transform data that I already get from index like this: Into the format like this: So the Type and Value can be separated in different column. I only know how to do this in Vega-Lite but not in Vega.

---

## [Installing Elasticsearch with third party CA certificates](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440)

<div class="topic-metadata">

**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 12:46am UTC](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440 "2022-11-10T00:46:14Z")

</div>

Good afternoon, we are planning on deploying Elastic search with third party publicly signed certificates from Lets Encrypt and i have been trying to find a way of replacing the certificates that are provided by the Elas…

---

## [Not able to get more than 10 results in ANN search using ES 8.5.0 docker image](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429)

<div class="topic-metadata">

**Author:** [@wole](https://discuss.elastic.co/u/wole)\
**Replies:** 3\
**Last updated:** [November 9, 2022, 11:22pm UTC](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429 "2022-11-09T23:22:30Z")

</div>

Hi team, I am using the Elasticsearch 8.5.0 docker image (installed and started as explained here) to do some experimenting with ANN search. I followed this guide to perform approximate KNN search and use a POST comman…

---

## [Mac verify error: Invalid Password? while creating certificates](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 11:14pm UTC](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443 "2022-11-09T23:14:24Z")

</div>

Creating certificates for elasticSearch install via docker-compose. Gets an error 'Mac verify error: Invalid Password?' while running the command: sudo docker-compose -f create-certs.yml run --rm create\_certs I'm creati…

---

## [AWS CloudWatch integration with Elastic using Elastic Agent On-premise](https://discuss.elastic.co/t/aws-cloudwatch-integration-with-elastic-using-elastic-agent-on-premise/318453)

<div class="topic-metadata">

**Author:** [@Manikandan\_V](https://discuss.elastic.co/u/Manikandan_V)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 4:07pm UTC](https://discuss.elastic.co/t/aws-cloudwatch-integration-with-elastic-using-elastic-agent-on-premise/318453 "2022-11-08T16:07:02Z")

</div>

I am in need of configuring the elastic agent in on-premise and connect with cloud watch logs for multiple AWS accounts and multiple Cloud watch log groups. Any idea how to configure multiple log groups or automatically…

---

## [Elasticsearch Fails to Start Up within Kubernetes](https://discuss.elastic.co/t/elasticsearch-fails-to-start-up-within-kubernetes/318462)

<div class="topic-metadata">

**Author:** [@argsv](https://discuss.elastic.co/u/argsv)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 6:12pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-up-within-kubernetes/318462 "2022-11-08T18:12:37Z")

</div>

I am using elasticsearch 7.17.2 within Kubernetes. I am using the elastic operator. I am getting the following error Exception in thread "main" java.nio.file.AccessDeniedException: /usr/share/elasticsearch/plugins/lost+…

---

## [How can i apply index template and ilm to existing index?](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 11:03pm UTC](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529 "2022-11-09T23:03:48Z")

</div>

Now, i have 'test' index in elasticsearch. Documents are written in 'test' index every day, and every seconds. In this case, i want to apply index template to 'test' index. For example, 'test-0000001', 'test-0000002'.…

---

## [Restricting kibana access - iframe](https://discuss.elastic.co/t/restricting-kibana-access-iframe/315455)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 12\
**Last updated:** [November 9, 2022, 9:32pm UTC](https://discuss.elastic.co/t/restricting-kibana-access-iframe/315455 "2022-11-09T21:32:02Z")

</div>

Hi, We have a kibana instance and we are using kibana iframe embedding into our application page. This is working fine, the problem that we are facing is that we have different clients and for every client we have creat…

---

## [No JVMs were found APM](https://discuss.elastic.co/t/no-jvms-were-found-apm/318177)

<div class="topic-metadata">

**Author:** [@User28](https://discuss.elastic.co/u/User28)\
**Replies:** 9\
**Last updated:** [November 9, 2022, 9:02pm UTC](https://discuss.elastic.co/t/no-jvms-were-found-apm/318177 "2022-11-09T21:02:24Z")

</div>

Hi, Elasticsearch - v7.17.4 Kibana - v7.17.4 APM Server - v7.17.4 Opentelemetry agent - v1.11.0 In Kibana APM JVM UI, it says No JVMs were found service.node.name is also set We have sending observability da…

[Previous page](https://discuss.elastic.co/latest.md?page=900)

[Next page](https://discuss.elastic.co/latest.md?page=902)
