# Latest **URL:** https://discuss.elastic.co/latest.md?page=905 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 906 --- ## [Does k-nearest neighbor (kNN) search - supports search\_after pagination?](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222)
**Author:** [@Dinesh\_Sonachalam](https://discuss.elastic.co/u/Dinesh_Sonachalam)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 11:44pm UTC](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222 "2022-11-07T23:44:47Z")
Reference: kNN search: k-nearest neighbor (kNN) search | Elasticsearch Guide \[master\] | Elastic Search after pagination: https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#sea… --- ## [Looking for a way to grab named stats from DNS servers and output them to Elastic for better visibility](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364)
**Author:** [@hardeepsingh3](https://discuss.elastic.co/u/hardeepsingh3)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 8:28pm UTC](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364 "2022-11-07T20:28:33Z")
What is the best way to grab the named stats such as Resolver Statistics (IPv4 queries sent, IPv4 responses received etc) and Cache Statistics (cache hits, cache misses etc) and parse them to be able to visualize them on… --- ## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias \[centrologs\] does not point to index \[centrologs-2022.09.28-000001\] in Kibana 8.2.2](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-centrologs-does-not-point-to-index-centrologs-2022-09-28-000001-in-kibana-8-2-2/315962)
**Author:** [@lakshmiD](https://discuss.elastic.co/u/lakshmiD)\ **Replies:** 1\ **Last updated:** [October 10, 2022, 10:19pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-centrologs-does-not-point-to-index-centrologs-2022-09-28-000001-in-kibana-8-2-2/315962 "2022-10-10T22:19:57Z")
Hi Team, Index lifecycle error-Policy rollover happening untill hot phase not going to next step illegal\_argument\_exception: index.lifecycle.rollover\_alias \[centrologs\] does not point to index \[centrologs-2022.09.28\] M… --- ## [APM Log Correlation not showing up...from which index/data stream does that app look for correlations?](https://discuss.elastic.co/t/apm-log-correlation-not-showing-up-from-which-index-data-stream-does-that-app-look-for-correlations/318361)
**Author:** [@Peter\_Li](https://discuss.elastic.co/u/Peter_Li)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 5:58pm UTC](https://discuss.elastic.co/t/apm-log-correlation-not-showing-up-from-which-index-data-stream-does-that-app-look-for-correlations/318361 "2022-11-07T17:58:09Z")
I am sending log entries to elasticsearch directly, bypassing filebeat. The index/datastream is ".ds-logs-radicale-2022.11.07-2022.11.07-000001" (the duplicated date shouldn't be a problem ?). I can see the log entry in … --- ## [Painless stored script "dynamic" compile error](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357)
**Author:** [@karasick](https://discuss.elastic.co/u/karasick)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357 "2022-11-07T17:02:36Z")
Can someone please explain to me the next error ? "error": { "type": "illegal\_argument\_exception", "reason": "failed to execute script", "caused\_by": { "type": "general\_script\_e… --- ## [ElasticSearch Instance is going down periodically with no errors in logs](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133)
**Author:** [@nandeeswara](https://discuss.elastic.co/u/nandeeswara)\ **Replies:** 7\ **Last updated:** [November 7, 2022, 5:24pm UTC](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133 "2022-11-07T17:24:31Z")
We have an application in Liferay portal and it is using Elasticsearch service as remote server. Elasticsearch on a remote server is going down periodically even though the memory , CPU are highly available. Currently … --- ## [Fuzziness parameter in a query](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 3:23pm UTC](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344 "2022-11-07T15:23:14Z")
I'm trying to understand the documentation of the fuzziness parameter. I'm not sure what the low and high values for AUTO mean. Why is it that when I do a query with "AUTO:0,2" I get a result(supposedly an exact match)… --- ## [Kubernetes Pod and container memory usage always at 0](https://discuss.elastic.co/t/kubernetes-pod-and-container-memory-usage-always-at-0/317665)
**Author:** [@sebglon](https://discuss.elastic.co/u/sebglon)\ **Replies:** 4\ **Last updated:** [November 7, 2022, 4:44pm UTC](https://discuss.elastic.co/t/kubernetes-pod-and-container-memory-usage-always-at-0/317665 "2022-11-07T16:44:22Z")
Hi, I have an issue on MetricBeat v8.4.2. I use it to collect Kubernetes (v1.22.2) metrics. But i always have kubernetes.container.memory.usage.bytes and kubernetes.pod.memory.usage.bytes at 0 Here are my clusterRole… --- ## [Visualize Custom Time from a Scripted Field](https://discuss.elastic.co/t/visualize-custom-time-from-a-scripted-field/318272)
**Author:** [@g.bas](https://discuss.elastic.co/u/g.bas)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 4:42pm UTC](https://discuss.elastic.co/t/visualize-custom-time-from-a-scripted-field/318272 "2022-11-07T16:42:51Z")
Hello I am new to Kibana and would like to create my own visual representation where the horizontal axis represents time which is derived from one of my runtime fields. The field is called Duration and is in milliseconds… --- ## [Need Help to extract custom log data using gork](https://discuss.elastic.co/t/need-help-to-extract-custom-log-data-using-gork/318350)
**Author:** [@ipasa](https://discuss.elastic.co/u/ipasa)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 4:20pm UTC](https://discuss.elastic.co/t/need-help-to-extract-custom-log-data-using-gork/318350 "2022-11-07T16:20:43Z")
We want to extract some custom logs like this, \[2022-10-19 07:45:21\] test\_site.INFO: REQUEST: \[{"username":"6HANT","password":"u5469!230","grant\_type":"password"},{"Content-Type":"application/json"},"https://abc.SD.com:… --- ## [Filebeat Fail to get Kibana Version \> x509: certificate signed by unknown authority](https://discuss.elastic.co/t/filebeat-fail-to-get-kibana-version-x509-certificate-signed-by-unknown-authority/318349)
**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 3:57pm UTC](https://discuss.elastic.co/t/filebeat-fail-to-get-kibana-version-x509-certificate-signed-by-unknown-authority/318349 "2022-11-07T15:57:46Z")
Hello! I have set up basic Elastic+Kibana setup and I\`m trying to get Filebeat up and running on the server. I have configured it as from quick start guide, but I get this error: Exiting: error connecting to Kibana: … --- ## [Is it possible to create sum of counter\_rate across implicit dimensions](https://discuss.elastic.co/t/is-it-possible-to-create-sum-of-counter-rate-across-implicit-dimensions/318343)
**Author:** [@wiki.warx](https://discuss.elastic.co/u/wiki.warx)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 3:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-sum-of-counter-rate-across-implicit-dimensions/318343 "2022-11-07T15:45:28Z")
I have metric reported from application (let's call it) tasks. This metric is reported as counter by multiple instances of application. In addition this metric is reported per clientid and per userid (both are UUIDs). I… --- ## [Interval query with filters to include in max gap?](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346)
**Author:** [@Broccolimon](https://discuss.elastic.co/u/Broccolimon)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 3:26pm UTC](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346 "2022-11-07T15:26:42Z")
Hey! I have a query that is looking for the terms "fox" and "brown" in an interval of 10 positions and i would like to filter any result with the word "quick" which is 5 position before interval start and 5 position aft… --- ## [Phrase\_slop does not affect query\_string](https://discuss.elastic.co/t/phrase-slop-does-not-affect-query-string/318345)
**Author:** [@MultiheadAttention](https://discuss.elastic.co/u/MultiheadAttention)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 3:21pm UTC](https://discuss.elastic.co/t/phrase-slop-does-not-affect-query-string/318345 "2022-11-07T15:21:51Z")
My search query { "query\_string": {"query": 'foo bar', "phrase\_slop": 1, "default\_operator": "AND"} } returns the following results: 'foo bar' 'fo… --- ## [Every log line sent to ES create new index](https://discuss.elastic.co/t/every-log-line-sent-to-es-create-new-index/318340)
**Author:** [@florind](https://discuss.elastic.co/u/florind)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 2:59pm UTC](https://discuss.elastic.co/t/every-log-line-sent-to-es-create-new-index/318340 "2022-11-07T14:59:58Z")
Hello, I'm using fluentd to send pod logs to ES 8.5 My problem is that each log sent is creating a new index, so i end up having a very large number of indices. What I'd like to have is one index per day, and keep the… --- ## [How to write a multi-lined script in C# / Nest?](https://discuss.elastic.co/t/how-to-write-a-multi-lined-script-in-c-nest/317907)
**Author:** [@Marcus\_Bullock](https://discuss.elastic.co/u/Marcus_Bullock)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/how-to-write-a-multi-lined-script-in-c-nest/317907 "2022-11-07T14:51:45Z")
Hi all, I am trying to write a statement like this but in Nest / C# object initializer syntax: GET /\_search { "query": { "bool": { "filter": { "script": { "script": """ double … --- ## [Agrégation - Demande aide](https://discuss.elastic.co/t/agregation-demande-aide/318307)
**Author:** [@Artefact](https://discuss.elastic.co/u/Artefact)\ **Replies:** 5\ **Last updated:** [November 7, 2022, 2:38pm UTC](https://discuss.elastic.co/t/agregation-demande-aide/318307 "2022-11-07T14:38:18Z")
Bonjour, Pour un projet, mes requêtes d'agrégation ne me renvoient pas toutes les valeurs attendues et je n'arrive pas à comprendre pourquoi, si quelqu'un a une idée ou une piste à me communiquer :wink: L'index et les … --- ## ["best\_compression" not compressing the data](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320)
**Author:** [@ashika](https://discuss.elastic.co/u/ashika)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 2:27pm UTC](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320 "2022-11-07T14:27:25Z")
Hello team, I was applying "best\_compression" compressing type to my existing elasticsearch indices, but I don't see any significant reduction happening in the indices size. The steps followed were : Close the indices … --- ## [Add array of object into an array through logstash](https://discuss.elastic.co/t/add-array-of-object-into-an-array-through-logstash/318335)
**Author:** [@yashveer](https://discuss.elastic.co/u/yashveer)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 1:45pm UTC](https://discuss.elastic.co/t/add-array-of-object-into-an-array-through-logstash/318335 "2022-11-07T13:45:57Z")
NEED TO DO THIS THOROUGH LOGSTASH ONLY ''' index =\> "test-voq-local" script\_type =\> "inline" document\_id =\> "%{\[i\_odino\]}" scripted\_upsert =\> true action =\> "update" script =\> "ctx.\_source.record.add(params.data); pa… --- ## [Logstash output plugin data changes when stored to file as compared to standard output stdout{ }](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186)
**Author:** [@brbhanushali](https://discuss.elastic.co/u/brbhanushali)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 1:50pm UTC](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186 "2022-11-07T13:50:59Z")
Hello All, I am new to logstash and working on a task to get syslogs from GitHub to Logstash to Elastic Search. I am facing a strange problem in Logstash. To understand the format that is coming on to input port of th… --- ## [Time Filter Element in Canvas](https://discuss.elastic.co/t/time-filter-element-in-canvas/318246)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 1:50pm UTC](https://discuss.elastic.co/t/time-filter-element-in-canvas/318246 "2022-11-07T13:50:02Z")
For this problem, I'm on version 7.11.1 and viewing Kibana in Chrome. When I add the time filter element to a Canvas workpad, it is not functional (when I click on the time control, it doesn't respond to let me select th… --- ## [No logs from Elastic Agent](https://discuss.elastic.co/t/no-logs-from-elastic-agent/318321)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 1:49pm UTC](https://discuss.elastic.co/t/no-logs-from-elastic-agent/318321 "2022-11-07T13:49:42Z")
Hello, I'm trying to ingest datas from elastic agents but I have no logs. This is the situation: Thank u --- ## [At least one primary shard for the index \[.security-7\] is unavailable issue](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 8\ **Last updated:** [November 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149 "2022-11-07T12:31:23Z")
Hi I have a two-node cluster with IP "0.0.0.1" , "0.0.0.2". One of my VMs "0.0.0.2" suddenly stopped, and when I start it, the cluster health was RED. Then I restart both VMs again and below message has been found in th… --- ## [Can we tokenise emailid text along with split characters in elasticsearch and prefixes tokens?](https://discuss.elastic.co/t/can-we-tokenise-emailid-text-along-with-split-characters-in-elasticsearch-and-prefixes-tokens/318329)
**Author:** [@Karthik\_Amar](https://discuss.elastic.co/u/Karthik_Amar)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 12:12pm UTC](https://discuss.elastic.co/t/can-we-tokenise-emailid-text-along-with-split-characters-in-elasticsearch-and-prefixes-tokens/318329 "2022-11-07T12:12:08Z")
I have a use case where i want to tokenise emailId with starts with filter along with punctuations. for example. email - ona.ki@gl.co I want to know whether the the following matches for the above is possible to achiev… --- ## [ElasticSearch deletes documents in an index automatically](https://discuss.elastic.co/t/elasticsearch-deletes-documents-in-an-index-automatically/318316)
**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\ **Replies:** 19\ **Last updated:** [November 7, 2022, 11:51am UTC](https://discuss.elastic.co/t/elasticsearch-deletes-documents-in-an-index-automatically/318316 "2022-11-07T11:51:17Z")
I have configured an ELK Cluster with 5 nodes, one being master and the other slaves. I index logs in the cluster once a day using logstash. I use a CronJOB (script) to copy the log files to the configured logstash direc… --- ## [Avoiding data loss with filebeat in a K8S environment](https://discuss.elastic.co/t/avoiding-data-loss-with-filebeat-in-a-k8s-environment/318324)
**Author:** [@Ganapati\_Basimsetti](https://discuss.elastic.co/u/Ganapati_Basimsetti)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 11:18am UTC](https://discuss.elastic.co/t/avoiding-data-loss-with-filebeat-in-a-k8s-environment/318324 "2022-11-07T11:18:07Z")
Hello There, We are in the process of setting up filebeat in the K8S environment running as a DaemonSet. We are evaluating the possibilities of data loss - logs generated by the application are not uploaded to Logstash … --- ## [Fleet Server & ES Agent](https://discuss.elastic.co/t/fleet-server-es-agent/318259)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 4\ **Last updated:** [November 7, 2022, 11:11am UTC](https://discuss.elastic.co/t/fleet-server-es-agent/318259 "2022-11-07T11:11:51Z")
Hello, when I try to install the fleet server on the machine I receive this error: sudo ./elastic-agent install \\--fleet-server-es=http://10.211.55.7:9200 \\--fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL… --- ## [How to merge multiple ml job using watcher](https://discuss.elastic.co/t/how-to-merge-multiple-ml-job-using-watcher/318149)
**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 10:49am UTC](https://discuss.elastic.co/t/how-to-merge-multiple-ml-job-using-watcher/318149 "2022-11-07T10:49:21Z")
Would you explain how to make alert merging multiple ml job using watcher?? I heared that it can be send alert to correlates multiple machine learning jobs to find the influencer. --- ## [Missing terms in rollup\_search terms aggregations](https://discuss.elastic.co/t/missing-terms-in-rollup-search-terms-aggregations/318314)
**Author:** [@sam.hession](https://discuss.elastic.co/u/sam.hession)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 10:27am UTC](https://discuss.elastic.co/t/missing-terms-in-rollup-search-terms-aggregations/318314 "2022-11-07T10:27:09Z")
Hello, This is a request for a follow-up on a previously posted topic, also documented and acknowledged in an issue on the ElasticSearch repo. My team has encountered this known issue with rollup\_search terms aggregati… --- ## [Malformed escape pair at index 54](https://discuss.elastic.co/t/malformed-escape-pair-at-index-54/318312)
**Author:** [@reed](https://discuss.elastic.co/u/reed)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 10:06am UTC](https://discuss.elastic.co/t/malformed-escape-pair-at-index-54/318312 "2022-11-07T10:06:16Z")
Hi all, i have my http output plugin called so: http { url =\> "http://10.98.144.73:9200/loyd-strategyone-processcode-%{process-code}/\_update\_by\_query?conflicts=proceed" headers =\> { "Authorization" =\> "Basic Z… [Previous page](https://discuss.elastic.co/latest.md?page=904) [Next page](https://discuss.elastic.co/latest.md?page=906)