# Latest

**URL:** https://discuss.elastic.co/latest.md?page=913

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 914

---

## [Understanding Young vs Survivor vs Old in JVM Nodes Stats](https://discuss.elastic.co/t/understanding-young-vs-survivor-vs-old-in-jvm-nodes-stats/317844)

<div class="topic-metadata">

**Author:** [@nola](https://discuss.elastic.co/u/nola)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 7:10pm UTC](https://discuss.elastic.co/t/understanding-young-vs-survivor-vs-old-in-jvm-nodes-stats/317844 "2022-10-31T19:10:10Z")

</div>

I have a basic understanding of young vs old, vs permanent in general context of the JVM heap. But I was told when I want to monitor JVM heap pressure and gc, I should run GET \_nodes/stats?filter\_path=nodes.\*.jvm.mem.p…

---

## [Meta engine vs sub-engine tuning](https://discuss.elastic.co/t/meta-engine-vs-sub-engine-tuning/317561)

<div class="topic-metadata">

**Author:** [@nottocc](https://discuss.elastic.co/u/nottocc)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 7:22pm UTC](https://discuss.elastic.co/t/meta-engine-vs-sub-engine-tuning/317561 "2022-10-31T19:22:18Z")

</div>

Does anyone have more information on how tuning works between Meta engines and sub-engines? I'd like to find a way to weight sub-engine A more than sub-engine B. How have others approached this?

---

## [Fleet server unable to enroll with a provided CA certificate (Docker)](https://discuss.elastic.co/t/fleet-server-unable-to-enroll-with-a-provided-ca-certificate-docker/317680)

<div class="topic-metadata">

**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 7:21pm UTC](https://discuss.elastic.co/t/fleet-server-unable-to-enroll-with-a-provided-ca-certificate-docker/317680 "2022-10-31T19:21:52Z")

</div>

Good afternoon, we are attempting to deploy a Docker Container Based Elastic Stack, with a provided publicly signed CA certificate but on each enroll we are coming up with the following: BlockquoteError: enrollment fai…

---

## [Agent Server - cannot enroll with user-provided certificates](https://discuss.elastic.co/t/agent-server-cannot-enroll-with-user-provided-certificates/317528)

<div class="topic-metadata">

**Author:** [@vecjh](https://discuss.elastic.co/u/vecjh)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 7:20pm UTC](https://discuss.elastic.co/t/agent-server-cannot-enroll-with-user-provided-certificates/317528 "2022-10-31T19:20:36Z")

</div>

Hi, I'm trying to enroll Agent Server with self-generated cerificates. I'm providing all paths as per this guide. However, the enrollment stops and the last lines in the log are as follows: {"log.level":"info","@timesta…

---

## [Help with conditionals in logstash](https://discuss.elastic.co/t/help-with-conditionals-in-logstash/317836)

<div class="topic-metadata">

**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 5:31pm UTC](https://discuss.elastic.co/t/help-with-conditionals-in-logstash/317836 "2022-10-31T17:31:34Z")

</div>

hello, I'm trying to perform a filter with some conditions, but when performing as follows, it doesn't work. if "dns\_server\_process\_query\_send" or "Not authoritative" in \[message\] { drop {} } but if I use the followin…

---

## [Index boosting and how the exact matches can rank higher than fuzzy match and phrase match in the elastic search?](https://discuss.elastic.co/t/index-boosting-and-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317835)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 5:07pm UTC](https://discuss.elastic.co/t/index-boosting-and-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317835 "2022-10-31T17:07:02Z")

</div>

0 I'm trying to configure Elasticsearch to give me both exact matches and fuzzy matches, and also phrase matches. I'm using Elasticsearch to search names of foods in a database, and I want it to be fuzzy to allow for mi…

---

## [Whitelist nested field](https://discuss.elastic.co/t/whitelist-nested-field/317773)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 5\
**Last updated:** [October 31, 2022, 4:53pm UTC](https://discuss.elastic.co/t/whitelist-nested-field/317773 "2022-10-31T16:53:07Z")

</div>

Hi everyone, i plan to whitelist some fields, but they are nested field. i already tried prune to whitelist them and it didn't work. for example: Request Body : {"tipe":"FF","nama":"ABC","nik":"","handphone":"00012","…

---

## [Parsed Multi Object in Json](https://discuss.elastic.co/t/parsed-multi-object-in-json/317705)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 7\
**Last updated:** [October 31, 2022, 4:42pm UTC](https://discuss.elastic.co/t/parsed-multi-object-in-json/317705 "2022-10-31T16:42:38Z")

</div>

Hi there, so i have a log look like this: 2022-10-27 08:39:02 \[https-jsse-nio-9078-exec-7\] INFO i.c.p.va.security.LoggerFilter - Response Body : {"responseCode":"00","responseDesc":"Approved","data":"{"vaNumber":"111…

---

## [Fleet and autodiscovery](https://discuss.elastic.co/t/fleet-and-autodiscovery/317284)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 4:42pm UTC](https://discuss.elastic.co/t/fleet-and-autodiscovery/317284 "2022-10-31T16:42:37Z")

</div>

Hello All, I have the following docker containers running with Docker Swarm: Elastic Agent Filebeat Traefik service Spring boot app We are trying to obtain the spring boot app/traefik logs via Elastic Agent but it is…

---

## [APM server is not listening in netstat tupln](https://discuss.elastic.co/t/apm-server-is-not-listening-in-netstat-tupln/316540)

<div class="topic-metadata">

**Author:** [@lekshmir80](https://discuss.elastic.co/u/lekshmir80)\
**Replies:** 5\
**Last updated:** [October 31, 2022, 9:40am UTC](https://discuss.elastic.co/t/apm-server-is-not-listening-in-netstat-tupln/316540 "2022-10-31T09:40:03Z")

</div>

Kibana version: 7.8.0 Elasticsearch version: 7.8.0 APM Server version: 7.8.0 APM Agent language and version: 6.12.0 Browser version: Chrome 105.0.5195.125 Original install method (e.g. download page, yum, deb, from…

---

## [Error uploading data from PostgresQL to Elasticsearch via logstash](https://discuss.elastic.co/t/error-uploading-data-from-postgresql-to-elasticsearch-via-logstash/317832)

<div class="topic-metadata">

**Author:** [@Evgen\_G](https://discuss.elastic.co/u/Evgen_G)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 4:21pm UTC](https://discuss.elastic.co/t/error-uploading-data-from-postgresql-to-elasticsearch-via-logstash/317832 "2022-10-31T16:21:34Z")

</div>

Tell me, please, can anyone come across such a problem: when unloading data from the database in elasticsearch, an error occurs \[ERROR\] 2022-10-31 16:02:14.628 \[\[main\]\>worker1\] elasticsearch - Encountered a retryable er…

---

## [Kibana custom dashboard does not show Filebeat metrics values](https://discuss.elastic.co/t/kibana-custom-dashboard-does-not-show-filebeat-metrics-values/317656)

<div class="topic-metadata">

**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\
**Replies:** 8\
**Last updated:** [October 31, 2022, 3:24pm UTC](https://discuss.elastic.co/t/kibana-custom-dashboard-does-not-show-filebeat-metrics-values/317656 "2022-10-31T15:24:54Z")

</div>

Hi, Summary of the Issue I'm having: Custom Kibana dashboard I have created to show a few internal Filebeat metrics - does not show their values (just shows zeros for all fields I selected), even though I can see that …

---

## [Concatenation of two fields](https://discuss.elastic.co/t/concatenation-of-two-fields/317691)

<div class="topic-metadata">

**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 3:20pm UTC](https://discuss.elastic.co/t/concatenation-of-two-fields/317691 "2022-10-31T15:20:16Z")

</div>

Hello, I want to concatenate/combine/merge two or three fields and assign this combined value to new field (mapping created for new field) after indexing. could you please suggest how to do this? Thanks!

---

## [How to add parameters to a scripted similarity?](https://discuss.elastic.co/t/how-to-add-parameters-to-a-scripted-similarity/317731)

<div class="topic-metadata">

**Author:** [@fsanzestevez](https://discuss.elastic.co/u/fsanzestevez)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-add-parameters-to-a-scripted-similarity/317731 "2022-10-31T13:29:48Z")

</div>

I'm trying to make a parametrized scripted similarity function but I can't get it to work. I have created the script and have it stored. However, when I try to implement it in the similarity score, I keep getting error…

---

## [Grok processor - Multiple matches of the same pattern](https://discuss.elastic.co/t/grok-processor-multiple-matches-of-the-same-pattern/317805)

<div class="topic-metadata">

**Author:** [@robdiluca](https://discuss.elastic.co/u/robdiluca)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 9:54am UTC](https://discuss.elastic.co/t/grok-processor-multiple-matches-of-the-same-pattern/317805 "2022-10-31T09:54:12Z")

</div>

Hi all, I'm using the grok processor to parse the "message" field of a document in a ingest pipeline. That field can contain zero or more occurrences of UUIDs. I'm only interested in finding all the occurrences of UUIDs…

---

## [Set role for cluster-member node](https://discuss.elastic.co/t/set-role-for-cluster-member-node/317785)

<div class="topic-metadata">

**Author:** [@g.le](https://discuss.elastic.co/u/g.le)\
**Replies:** 3\
**Last updated:** [October 31, 2022, 8:50am UTC](https://discuss.elastic.co/t/set-role-for-cluster-member-node/317785 "2022-10-31T08:50:43Z")

</div>

We 've been using ELK v7.10 in a cluster setup with several nodes. For the time being, all nodes have the same roles. According to the documentation, we could specify that a given node (member of the cluster) can have …

---

## [Filebeat Fortinet Module + Kibana SIEM](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/317721)

<div class="topic-metadata">

**Author:** [@Rafa\_Moreno](https://discuss.elastic.co/u/Rafa_Moreno)\
**Replies:** 7\
**Last updated:** [October 31, 2022, 8:12am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/317721 "2022-10-31T08:12:56Z")

</div>

Hi there, I have an installation of kibana and Elasticsearch, I have tried to use the fortinet filebeat module, even the elastic agent, and send the logs by syslogd, I understand that I should be able to see the fortiga…

---

## [Sending jenkins metrics to elastic APM](https://discuss.elastic.co/t/sending-jenkins-metrics-to-elastic-apm/316727)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 9\
**Last updated:** [October 31, 2022, 7:14am UTC](https://discuss.elastic.co/t/sending-jenkins-metrics-to-elastic-apm/316727 "2022-10-31T07:14:58Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [How to grok a certain fields from a log file](https://discuss.elastic.co/t/how-to-grok-a-certain-fields-from-a-log-file/315996)

<div class="topic-metadata">

**Author:** [@anupvtr](https://discuss.elastic.co/u/anupvtr)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 6:43am UTC](https://discuss.elastic.co/t/how-to-grok-a-certain-fields-from-a-log-file/315996 "2022-10-31T06:43:42Z")

</div>

Preformatted textHi All, I am quite new to the magic world of Grok. Any help will be thankful. I need to apply filter for the following file. 2022-08-22 22:18:59 , 666 INFO @ (blockurcolumn-11) \[rbbit\_MQ\_Versa.appa…

---

## [Fresh ELK install 8.4.3. Logstash problem](https://discuss.elastic.co/t/fresh-elk-install-8-4-3-logstash-problem/317670)

<div class="topic-metadata">

**Author:** [@Xgraver1](https://discuss.elastic.co/u/Xgraver1)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 6:06am UTC](https://discuss.elastic.co/t/fresh-elk-install-8-4-3-logstash-problem/317670 "2022-10-31T06:06:50Z")

</div>

Hello Could use some help with fresh ELK installation on premises. I installed Elasticstack and Kibana with mostly default configuration. In Elasticstack conf i changed Data path and uncommented host and port settings. …

---

## [Monitor Docker Containers running on a Virtual Machine](https://discuss.elastic.co/t/monitor-docker-containers-running-on-a-virtual-machine/317616)

<div class="topic-metadata">

**Author:** [@Adedolapo\_Okunsanmi](https://discuss.elastic.co/u/Adedolapo_Okunsanmi)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 6:04am UTC](https://discuss.elastic.co/t/monitor-docker-containers-running-on-a-virtual-machine/317616 "2022-10-31T06:04:26Z")

</div>

Hi Guys, I am wondering if it is possible to get logs from a Docker Container hosted on an Azure VM. Documentation, URLs, and Videos are welcomed.

---

## [While ingesting a log file from source system to Kibana through Filebeat, getting "End Of File reached" message in Filebeat logs](https://discuss.elastic.co/t/while-ingesting-a-log-file-from-source-system-to-kibana-through-filebeat-getting-end-of-file-reached-message-in-filebeat-logs/317777)

<div class="topic-metadata">

**Author:** [@cadrija](https://discuss.elastic.co/u/cadrija)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 5:55am UTC](https://discuss.elastic.co/t/while-ingesting-a-log-file-from-source-system-to-kibana-through-filebeat-getting-end-of-file-reached-message-in-filebeat-logs/317777 "2022-10-31T05:55:37Z")

</div>

Hi experts! I am new to elastic. I have installed ELK (8.4) on a Ubuntu system (suppose u.u.u.u). Now I am trying to fetch/ingest a log file from a windows system (suppose w.w.w.w). Steps I followed leaning from tutori…

---

## [Java agent APM and valid errors](https://discuss.elastic.co/t/java-agent-apm-and-valid-errors/317685)

<div class="topic-metadata">

**Author:** [@Ivan44785372](https://discuss.elastic.co/u/Ivan44785372)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 4:45am UTC](https://discuss.elastic.co/t/java-agent-apm-and-valid-errors/317685 "2022-10-31T04:45:22Z")

</div>

I can see that all "valid" errors, when I throw my own exception and handle them like this if (N \> 0) { throw new MyCustomException(); } All such "errors" shows in "Errors" page in APM, but these are not real error…

---

## [Pagination, sorted and aggregation on data](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291)

<div class="topic-metadata">

**Author:** [@StephenGuo](https://discuss.elastic.co/u/StephenGuo)\
**Replies:** 4\
**Last updated:** [October 31, 2022, 2:54am UTC](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291 "2022-10-31T02:54:53Z")

</div>

Hi I have a group of user access data which contain the user name, access timestamp, and some of other info. There will be multiple records with the same username but different access timestamp. What I want is to do i…

---

## [Workplace /Salesforce connector missing data](https://discuss.elastic.co/t/workplace-salesforce-connector-missing-data/249193)

<div class="topic-metadata">

**Author:** [@Gertjan](https://discuss.elastic.co/u/Gertjan)\
**Replies:** 5\
**Last updated:** [September 22, 2020, 4:40pm UTC](https://discuss.elastic.co/t/workplace-salesforce-connector-missing-data/249193 "2020-09-22T16:40:40Z")

</div>

Hi there, I installed Enterprise Search 7.9.1 (Workplace) with Elasticsearch 7.9.0 on a Mac (localhost). I was able to connect the Github and Dropbox connector and retrieve the data in the index. I also activated the S…

---

## [Custom connector with a combination of attribute and group security?](https://discuss.elastic.co/t/custom-connector-with-a-combination-of-attribute-and-group-security/279008)

<div class="topic-metadata">

**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 1:34pm UTC](https://discuss.elastic.co/t/custom-connector-with-a-combination-of-attribute-and-group-security/279008 "2021-07-20T13:34:15Z")

</div>

Hello, I want to build a custom connector, but the source repository uses attribute based security (e.g. Document-level security - OpenSearch documentation) So for a user to see a document they would need all of the per…

---

## [Issue with app search (download) release -- not quite a connection issue](https://discuss.elastic.co/t/issue-with-app-search-download-release-not-quite-a-connection-issue/191249)

<div class="topic-metadata">

**Author:** [@dhrp](https://discuss.elastic.co/u/dhrp)\
**Replies:** 5\
**Last updated:** [July 19, 2019, 9:28pm UTC](https://discuss.elastic.co/t/issue-with-app-search-download-release-not-quite-a-connection-issue/191249 "2019-07-19T21:28:06Z")

</div>

I'm interested in trying out app-search self hosted, but I'm having trouble getting started. I can submit an object using past JSON or upload. In the logs this is all well received. But then App search keeps returning …

---

## [Installing App Search 7.2 GA](https://discuss.elastic.co/t/installing-app-search-7-2-ga/188103)

<div class="topic-metadata">

**Author:** [@bpamiri](https://discuss.elastic.co/u/bpamiri)\
**Replies:** 4\
**Last updated:** [July 8, 2019, 9:26pm UTC](https://discuss.elastic.co/t/installing-app-search-7-2-ga/188103 "2019-07-08T21:26:36Z")

</div>

I've just finished standing up a 10 node Elasticsearch 7.2 cluster on CentOS VMs in our data center. Now I want to download App Search and play with it. I'm a little confused as to where it needs to be installed. The doc…

---

## [When Elastic App Search support Elasticsearch 7.0?](https://discuss.elastic.co/t/when-elastic-app-search-support-elasticsearch-7-0/177511)

<div class="topic-metadata">

**Author:** [@tuyndv](https://discuss.elastic.co/u/tuyndv)\
**Replies:** 1\
**Last updated:** [June 26, 2019, 6:52am UTC](https://discuss.elastic.co/t/when-elastic-app-search-support-elasticsearch-7-0/177511 "2019-06-26T06:52:09Z")

</div>

Dear Team, Version current (Elastic App Search Beta 4) Verify these prerequisites: Java 8 or Java 11 is installed, and Elasticsearch \>= 6.6.x, \< 7 is installed and running. Elasticsearch requires at least a Basic licen…

---

## [Indices eating too much space (~50 GB each)](https://discuss.elastic.co/t/indices-eating-too-much-space-50-gb-each/216609)

<div class="topic-metadata">

**Author:** [@The-Big-K](https://discuss.elastic.co/u/The-Big-K)\
**Replies:** 2\
**Last updated:** [January 28, 2020, 10:19am UTC](https://discuss.elastic.co/t/indices-eating-too-much-space-50-gb-each/216609 "2020-01-28T10:19:12Z")

</div>

I'm using Elasticsearch 7.5.2 on uBuntu. Recently, I began using elasticsearch to display relevant search results on every page load. This shot up the volume; but I also found out that it has created large index files. N…

[Previous page](https://discuss.elastic.co/latest.md?page=912)

[Next page](https://discuss.elastic.co/latest.md?page=914)
