# Latest **URL:** https://discuss.elastic.co/latest.md?page=918 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 919 --- ## [\_update\_by\_query with PHP API](https://discuss.elastic.co/t/update-by-query-with-php-api/317500)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 11:56am UTC](https://discuss.elastic.co/t/update-by-query-with-php-api/317500 "2022-10-26T11:56:17Z")
I am looking for some examples or documentation to help me know if it is possible to do a \_update\_by\_query with the PHP API. I have seen examples in the JS section, but I can't find anything on the subject in PHP Using … --- ## [Sort both hits and inner hits](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493)
**Author:** [@BrunoSkoon](https://discuss.elastic.co/u/BrunoSkoon)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 11:00am UTC](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493 "2022-10-26T11:00:26Z")
Hello. I'm using Elasticsearch 8.4.3 and I need help to sort both the hits and inner hits. My data set is a list of product types, each containing a list of products. Each product then contains a price object with field… --- ## [Kibana dataview namespace](https://discuss.elastic.co/t/kibana-dataview-namespace/317475)
**Author:** [@dms6978](https://discuss.elastic.co/u/dms6978)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 10:54am UTC](https://discuss.elastic.co/t/kibana-dataview-namespace/317475 "2022-10-26T10:54:16Z")
There is "namespace" properties of the data\_view object when create Data Views. (doc: Create data view API | Kibana Guide \[master\] | Elastic) curl -X POST "kibanahost:port/api/data\_views/data\_view" -H 'kbn-xsrf: true' … --- ## [Pmacct as\_path graphs](https://discuss.elastic.co/t/pmacct-as-path-graphs/317502)
**Author:** [@arphillips](https://discuss.elastic.co/u/arphillips)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 10:40am UTC](https://discuss.elastic.co/t/pmacct-as-path-graphs/317502 "2022-10-26T10:40:50Z")
I am trying to make something akin to a sankey graph using showing the ASN paths. I'd like to be able to visualize the full path and each hop, pmacct is my netflow collector it sends the key "as\_path" in the format "6500… --- ## [Log threshold rules does not allow filtering with boolean fields](https://discuss.elastic.co/t/log-threshold-rules-does-not-allow-filtering-with-boolean-fields/317175)
**Author:** [@qatium-developers](https://discuss.elastic.co/u/qatium-developers)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 10:10am UTC](https://discuss.elastic.co/t/log-threshold-rules-does-not-allow-filtering-with-boolean-fields/317175 "2022-10-26T10:10:18Z")
Hello, we are trying to generate a Log Threshold rule that requires checking a boolean field to detect if the alert must be raised or not, but UI interface does not allow to use this kind of fields. We have checked the… --- ## [I am getting message output data in logstash but i want to parse it to json](https://discuss.elastic.co/t/i-am-getting-message-output-data-in-logstash-but-i-want-to-parse-it-to-json/317469)
**Author:** [@ankurgupta](https://discuss.elastic.co/u/ankurgupta)\ **Replies:** 5\ **Last updated:** [October 26, 2022, 9:44am UTC](https://discuss.elastic.co/t/i-am-getting-message-output-data-in-logstash-but-i-want-to-parse-it-to-json/317469 "2022-10-26T09:44:54Z")
input{ exec { command =\> "netstat" interval =\> 30 } beats{ port =\>5044 } } filter{ grok{ match =\> {"message" =\> \[ #reqout grok: "%{DATESTAMP:time} (::slight\_smile: \[%{DATA:req}(:)\]\[(RQID:)%{DATA:rqId}\]\[(S… --- ## [Tcp output exception](https://discuss.elastic.co/t/tcp-output-exception/317227)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 5\ **Last updated:** [October 26, 2022, 9:44am UTC](https://discuss.elastic.co/t/tcp-output-exception/317227 "2022-10-26T09:44:14Z")
Hie Everyone, I have configured pipeline to read logs over tcp plugin. But im feeling tcp output exception every now and than the tcp connection is getting closed. Error logs: tcp output exception {:host=\>"10.109.0.0"… --- ## [Filter on nested object to return all fields under nested object with value zero](https://discuss.elastic.co/t/filter-on-nested-object-to-return-all-fields-under-nested-object-with-value-zero/317488)
**Author:** [@monaadelrabea](https://discuss.elastic.co/u/monaadelrabea)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 9:07am UTC](https://discuss.elastic.co/t/filter-on-nested-object-to-return-all-fields-under-nested-object-with-value-zero/317488 "2022-10-26T09:07:01Z")
I need to filter on an index that have nested object called params, this object contains dynamic fields how to return only docs that contain fields with zero value under params nesetd object Ex: "params": { "ePwrV":\[ … --- ## [No new data in Kibana - elastic fails to create shard](https://discuss.elastic.co/t/no-new-data-in-kibana-elastic-fails-to-create-shard/316318)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 9:33am UTC](https://discuss.elastic.co/t/no-new-data-in-kibana-elastic-fails-to-create-shard/316318 "2022-10-26T09:33:21Z")
Hi All, from time to time i see that kibana stops showing new data, its always the same, i have daily index (naming from LS) in ES that gets unassigned on both shard when its created, the logs i can find: obtaining sh… --- ## [Angular or React for external kibana plugin](https://discuss.elastic.co/t/angular-or-react-for-external-kibana-plugin/316986)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 5\ **Last updated:** [October 26, 2022, 9:17am UTC](https://discuss.elastic.co/t/angular-or-react-for-external-kibana-plugin/316986 "2022-10-26T09:17:51Z")
Hi, I am creating an external kibana plugin (which will be a bug project). Which is recommended for the same: Angular JS or React JS? Thanks --- ## [Divide query in separate new lines](https://discuss.elastic.co/t/divide-query-in-separate-new-lines/317389)
**Author:** [@oalimerko](https://discuss.elastic.co/u/oalimerko)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 8:39am UTC](https://discuss.elastic.co/t/divide-query-in-separate-new-lines/317389 "2022-10-26T08:39:30Z")
Hello team, this is my new post here,i am looking forward share my experience and knowledge with community. I'm using elasticsearch and kibana for logs monitoring and also for this purpose i use the ES-Exporter for cat… --- ## [Word delimeter graph doesn't work with ICU tokenizer](https://discuss.elastic.co/t/word-delimeter-graph-doesnt-work-with-icu-tokenizer/317482)
**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 8:20am UTC](https://discuss.elastic.co/t/word-delimeter-graph-doesnt-work-with-icu-tokenizer/317482 "2022-10-26T08:20:39Z")
Hi, I want to be able to search word like "Wi-Fi" by wifi and it is possible with word delimeter graph with whitespace tokenizer. But I need the icu\_tokenizer and then it doesn't work at all, it indexes only "wi" and "f… --- ## [What should I do in case of a complete failure during the upgrade process?](https://discuss.elastic.co/t/what-should-i-do-in-case-of-a-complete-failure-during-the-upgrade-process/317326)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 7:56am UTC](https://discuss.elastic.co/t/what-should-i-do-in-case-of-a-complete-failure-during-the-upgrade-process/317326 "2022-10-26T07:56:56Z")
Hello, everyone. How have you been? I have a question related to the upgrade process. In docs (and viewing some posts here in the forum), it is said that the concept of rollback does not exist in Elasticsearch, but we h… --- ## [Binary logs parsing Logstash sent via filebeat?](https://discuss.elastic.co/t/binary-logs-parsing-logstash-sent-via-filebeat/317281)
**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 7:47am UTC](https://discuss.elastic.co/t/binary-logs-parsing-logstash-sent-via-filebeat/317281 "2022-10-26T07:47:23Z")
Hello ! I am trying to parse few logs which are in binary format hence can somebody guide how do we proceed with that? I am attaching the message field for reference: "message" =\> "\\u0000\\u0000\\u0000\\u000384p�\<�\\u0000… --- ## [Phrase words matches anywhere in the multi fields and stemming also reduce the boosting on keyword stuffing](https://discuss.elastic.co/t/phrase-words-matches-anywhere-in-the-multi-fields-and-stemming-also-reduce-the-boosting-on-keyword-stuffing/317477)
**Author:** [@sagarc](https://discuss.elastic.co/u/sagarc)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 7:25am UTC](https://discuss.elastic.co/t/phrase-words-matches-anywhere-in-the-multi-fields-and-stemming-also-reduce-the-boosting-on-keyword-stuffing/317477 "2022-10-26T07:25:02Z")
Data Types: Title: string Keywords: string Description: string Search Requirements: 1. ALL search terms MUST be found somewhere in the title or keywords or description a) Don’t search the whole DOCUMENT for terms… … --- ## [Metricbeat - Error creating runner from config: failed to initialize condition](https://discuss.elastic.co/t/metricbeat-error-creating-runner-from-config-failed-to-initialize-condition/317449)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 7:02am UTC](https://discuss.elastic.co/t/metricbeat-error-creating-runner-from-config-failed-to-initialize-condition/317449 "2022-10-26T07:02:53Z")
Attempting to fetch various bean data from Jboss instances by means of jolokia some works others fail though I can fetch them with curl, any hints appreciated on what/which condition is missing or faulty, TIA! Getting e… --- ## [Unable to Register Azure Repo in Elasticsearch - 2.4.4](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466)
**Author:** [@Sandipan\_Deb](https://discuss.elastic.co/u/Sandipan_Deb)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 6:56am UTC](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466 "2022-10-26T06:56:32Z")
I am getting below error while trying to register a repo in azure storage. It was working fine before 2-3 months. Suddenly it started giving error. Not able to understand what might have changed. Any help is appreciated… --- ## [Set Elastic Password during deployment](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457)
**Author:** [@Dum](https://discuss.elastic.co/u/Dum)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 6:13am UTC](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457 "2022-10-26T06:13:35Z")
I am new to Elasticsearch and setting it up with an install.sh script. I am going through the documentation and can see that for docker installation, one can specify a password for the elastic user in the docker-compose … --- ## [Not able to get fields from multiple source indices](https://discuss.elastic.co/t/not-able-to-get-fields-from-multiple-source-indices/316412)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 5:22am UTC](https://discuss.elastic.co/t/not-able-to-get-fields-from-multiple-source-indices/316412 "2022-10-26T05:22:56Z")
Hi, I gave multiple indices in the 'indices' field of the enrich policy. But it is fetching values from one index only. Thanks --- ## [Approximate kNN total hits inconsistent](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901)
**Author:** [@Dazhi\_Jiao](https://discuss.elastic.co/u/Dazhi_Jiao)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 5:12am UTC](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901 "2022-10-26T05:12:37Z")
Hi, we have an implementation of Approximate kNN search, with 768-dimension embedding vector in the ANN search. We observed that the total hits are not consistent when running the SAME query multiple times, or paginate u… --- ## [Unable to Authenticate user \[kibana\_system\] for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system-for-rest-request/317455)
**Author:** [@Ihms](https://discuss.elastic.co/u/Ihms)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 5:00am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system-for-rest-request/317455 "2022-10-26T05:00:22Z")
I have just installed Elasticsearch 8.4. I can successfully connect to Elasticsearch, but when I try connecting to Kibana, I get the below error: Unable to retrieve version information from Elasticsearch nodes. security… --- ## [S\_s\_l\_handshake\_exception in watcher](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 0\ **Last updated:** [October 24, 2022, 10:03am UTC](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307 "2022-10-24T10:03:05Z")
Hi, I am trying to create the following watcher to send automatically a csv report coming from the POST url of a saved search of kibana. The whatcher is the following: { "trigger": { "schedule": { "interval… --- ## [Max compilations rate setting - cluster level or node level?](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299)
**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 4:20am UTC](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299 "2022-10-26T04:20:55Z")
Does the limit defined in script.max\_compilations\_rate apply for the concurrent number of scripts on a node, or for the total concurrent number of scripts for the entire cluster? Thanks. --- ## [How to store configmap in elasticsearch](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454)
**Author:** [@hanweisen](https://discuss.elastic.co/u/hanweisen)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 2:38am UTC](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454 "2022-10-26T02:38:32Z")
Recently I am indexing the k8s resource object in ES. There are some problems with storing configmap. configmap defines as bellow: // +genclient // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object … --- ## [Monitoring Index Rate (Elastic Cloud)](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453)
**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 1:42am UTC](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453 "2022-10-26T01:42:58Z")
I have an issue where the "ds-.monitoring-es-8-mb" indicies are one of the top two by index rate at around 300/s for our 13 node cluster. I asked support if using "xpack.monitoring.collection.interval" is the correct wa… --- ## [Could we support timeout mechanism for replica bulk request？](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977)
**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977 "2022-10-26T01:39:25Z")
Assume that shard has 1 primary + 1 replica, if a bulk request goes to primary and finished the shard bulk write operation, then transfer the bulk request to replica node, if the replica node is a really slow node, for e… --- ## [Failed to Load Service Token](https://discuss.elastic.co/t/failed-to-load-service-token/317391)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 1:17am UTC](https://discuss.elastic.co/t/failed-to-load-service-token/317391 "2022-10-26T01:17:06Z")
Hello, at the start of Elastic I got these errors: \[2022-10-25T09:31:12,342\]\[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch java.lang.IllegalStateException: security initializati… --- ## [Setup multi nodes on elastic 8.4.3 to run only when 2 nodes are active](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407)
**Author:** [@juandreww](https://discuss.elastic.co/u/juandreww)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 1:14am UTC](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407 "2022-10-26T01:14:55Z")
Hi, I would like to configure the Elastic Search for multiple nodes but only when 2 nodes running from 3 nodes, then the localhost can be accessed I have tried: node.name: node-3 (in folder node2 then node-2, etc) net… --- ## [I cant reach Elasticsearch localhost:9200](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323)
**Author:** [@Dun\_King](https://discuss.elastic.co/u/Dun_King)\ **Replies:** 2\ **Last updated:** [October 26, 2022, 12:30am UTC](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323 "2022-10-26T00:30:09Z")
Hello together, im trying to setup Elasticsearch for 10 hour now, i tried any tips i found on different sites and Forums, but noone could heklp me. I am following the instruction exactly as they are written on the main … --- ## [404 error while pushing traces from OTel Exporter to APM server](https://discuss.elastic.co/t/404-error-while-pushing-traces-from-otel-exporter-to-apm-server/315795)
**Author:** [@gvencadze](https://discuss.elastic.co/u/gvencadze)\ **Replies:** 14\ **Last updated:** [October 25, 2022, 9:57pm UTC](https://discuss.elastic.co/t/404-error-while-pushing-traces-from-otel-exporter-to-apm-server/315795 "2022-10-25T21:57:06Z")
Hey guys, I've setup opentelemetry exporter in cluster, then connected services to it and see traces in exporter logs. But, when they are pushing to APM server it returns http 404 Exporting failed. The error is not retr… [Previous page](https://discuss.elastic.co/latest.md?page=917) [Next page](https://discuss.elastic.co/latest.md?page=919)