# Latest

**URL:** https://discuss.elastic.co/latest.md?page=919

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 920

---

## [Escape character while connecting with Elastic Search](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439)

<div class="topic-metadata">

**Author:** [@Karan\_Jain1](https://discuss.elastic.co/u/Karan_Jain1)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 8:14pm UTC](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439 "2022-10-25T20:14:59Z")

</div>

Hi In our cluster, the Elastic Search version is 7.6.1 and security is enabled using OpenDistro (please refer https://opendistro.github.io/for-elasticsearch/ ) of a compatible OD version of 1.6 and backup ( please refe…

---

## [ES 7.17.6 Is it possible to update a rollup job?](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 6:14pm UTC](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001 "2022-10-25T18:14:26Z")

</div>

Hi Team, I'm trying to update the page\_size of an existing rollup job but I don't see an API available for that. Is it possible?

---

## [Unable to configuring HeartBeat autodiscovery with hints in ECK setup](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309)

<div class="topic-metadata">

**Author:** [@diadoom](https://discuss.elastic.co/u/diadoom)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309 "2022-10-25T17:39:21Z")

</div>

hello! I'm trying to configure heartbeat in ECK using the autodiscovery configuration with hints, however using the config in ECK does not seem to work. It used to work when I had a self managed elastic setup running i…

---

## [Metricbeat Configuration on eck](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257)

<div class="topic-metadata">

**Author:** [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\
**Replies:** 7\
**Last updated:** [October 25, 2022, 5:31pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257 "2022-10-25T17:31:48Z")

</div>

Hello, I am trying to send data from a container ubuntu to eck. Below you can see my configuration output.elasticsearch: Array of hosts to connect to. hosts: \["https://elasticsearch-es-internal-http:9200"\] Protocol…

---

## [Using search as you type field for prefix queries](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 5:28pm UTC](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432 "2022-10-25T17:28:44Z")

</div>

I indexed some of my data as a "search as you type" field in Kibana. Specifically, in the query below the field authorships.author.display\_name.autocomplete is indexed this way. From looking at the documentation, indexin…

---

## [ES query from spark returns all despite of filter](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643)

<div class="topic-metadata">

**Author:** [@aadhikari3711](https://discuss.elastic.co/u/aadhikari3711)\
**Replies:** 8\
**Last updated:** [October 25, 2022, 5:14pm UTC](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643 "2022-10-25T17:14:37Z")

</div>

Hello All, I am trying to access index from databricks via es query and wanted a result set based on query filter, add to data frame. Requirement: Get output with :cd.ID=1 and cd.s\_D\<\>0. I get: All the cd.ID both 0 …

---

## [I want to get the source host or container details by using UUID of the index](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426)

<div class="topic-metadata">

**Author:** [@Jana03](https://discuss.elastic.co/u/Jana03)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 5:11pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426 "2022-10-25T17:11:46Z")

</div>

I want to disable fluentd internal logs which are fluent.warn. we have many servers fluentd installed and sending logs to elasticsearch. when i click on logs it is not showing any source, env, or app details. how will…

---

## [Query nested array for empty and specific value](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263)

<div class="topic-metadata">

**Author:** [@kunwarshukla](https://discuss.elastic.co/u/kunwarshukla)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:43pm UTC](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263 "2022-10-25T16:43:05Z")

</div>

Documents structure - { "hits": \[ { "\_type": "\_doc", "\_id": "ef0a2c44179a513476b080cc2a585d95", "\_source": { "DIVISION\_NUMBER": 44, "MATCHES": \[ { "MATCH\_STA…

---

## [APM - Trace samples ordering](https://discuss.elastic.co/t/apm-trace-samples-ordering/312918)

<div class="topic-metadata">

**Author:** [@Miloslav\_Adamec](https://discuss.elastic.co/u/Miloslav_Adamec)\
**Replies:** 3\
**Last updated:** [October 25, 2022, 4:41pm UTC](https://discuss.elastic.co/t/apm-trace-samples-ordering/312918 "2022-10-25T16:41:44Z")

</div>

Kibana version: v8.3.3 Elasticsearch version: v8.3.3 APM Server version: v8.3.3 APM Agent language and version: Browser version: Chrome 104.0.5112.101 Original install method (e.g. download page, yum, deb, from …

---

## [Logstash trying to reprocess the same files](https://discuss.elastic.co/t/logstash-trying-to-reprocess-the-same-files/317362)

<div class="topic-metadata">

**Author:** [@Victor\_Caetano](https://discuss.elastic.co/u/Victor_Caetano)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:20pm UTC](https://discuss.elastic.co/t/logstash-trying-to-reprocess-the-same-files/317362 "2022-10-25T16:20:19Z")

</div>

I'm using File Input Plugin, and a multiline codec, and grok filters to process .txt files that exists in a folder in my Linux VM, those files are static, i don't make changes in it's content, i only add more files to th…

---

## [Unable to output into Elasticsearch](https://discuss.elastic.co/t/unable-to-output-into-elasticsearch/317374)

<div class="topic-metadata">

**Author:** [@Hawas\_Musthafa](https://discuss.elastic.co/u/Hawas_Musthafa)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:15pm UTC](https://discuss.elastic.co/t/unable-to-output-into-elasticsearch/317374 "2022-10-25T16:15:47Z")

</div>

Unable to output to the elasticseach. output { elasticsearch { hosts =\> "elasticsearch:9200" user =\> "logstash\_internal" password =\> "${LOGSTASH\_INTERNAL\_PASSWORD}" index =\> "testmanagement-%{+yyyy.MM.dd}" } and …

---

## [Input multiple files using Elastic Agent](https://discuss.elastic.co/t/input-multiple-files-using-elastic-agent/317150)

<div class="topic-metadata">

**Author:** [@shuuny-matrix](https://discuss.elastic.co/u/shuuny-matrix)\
**Replies:** 9\
**Last updated:** [October 25, 2022, 4:08pm UTC](https://discuss.elastic.co/t/input-multiple-files-using-elastic-agent/317150 "2022-10-25T16:08:38Z")

</div>

Hi, I wanted to input multiple files with same category from a directory to a same index into Kibana with Elasticsearch backend. I noticed that it could be done using Logstash but not clear documentation on how to do to…

---

## [Best way to update a single field across all the documents (may be million docs)](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343)

<div class="topic-metadata">

**Author:** [@ykonathala](https://discuss.elastic.co/u/ykonathala)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 2:43pm UTC](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343 "2022-10-25T14:43:00Z")

</div>

Team, Can I get some suggestions around updating a single field across multiple documents in the elasticsearch? Thing here is need to get a value of that field (existing) compare it will an external value and do some ca…

---

## [Security Rules with Endgame get an error](https://discuss.elastic.co/t/security-rules-with-endgame-get-an-error/317241)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 3\
**Last updated:** [October 25, 2022, 3:30pm UTC](https://discuss.elastic.co/t/security-rules-with-endgame-get-an-error/317241 "2022-10-25T15:30:58Z")

</div>

Hi, In Elastic Security there are 4 rules which don’t work because Endgame is replaced by Endpoint. The rules are: Malware - Detected - Elastic Endgame Malware - Prevented - Elastic Endgame Ransomware - Detected - Ela…

---

## [400: request does not support \[pit\]](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141)

<div class="topic-metadata">

**Author:** [@mworzala](https://discuss.elastic.co/u/mworzala)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 2:50pm UTC](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141 "2022-10-25T14:50:59Z")

</div>

Hi: I am executing the following query against the search api, but it is returning a 400, and an error that the request does not support the pit parameter. This is from the Go client, however, from the python client the…

---

## [Download of indices as download option](https://discuss.elastic.co/t/download-of-indices-as-download-option/316313)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 2:26pm UTC](https://discuss.elastic.co/t/download-of-indices-as-download-option/316313 "2022-10-25T14:26:56Z")

</div>

Hi all, Sometimes, I need to download entire index data for different purposes. Maybe use it for another place or app. There is no export button for getting Elasticsearch Index Data as json file or some other format i…

---

## [Speed indexing](https://discuss.elastic.co/t/speed-indexing/317295)

<div class="topic-metadata">

**Author:** [@Julie\_Montels](https://discuss.elastic.co/u/Julie_Montels)\
**Replies:** 9\
**Last updated:** [October 25, 2022, 2:03pm UTC](https://discuss.elastic.co/t/speed-indexing/317295 "2022-10-25T14:03:18Z")

</div>

Hello, When pushing our data to Elastic (we made sequential batches of 100), it takes a lot of time even for a small amount of data (24h for 1.5Million documents). Is it normal ? What do you recommend to speed the ind…

---

## [Issue with role permissions for user role mapping with AAD](https://discuss.elastic.co/t/issue-with-role-permissions-for-user-role-mapping-with-aad/316987)

<div class="topic-metadata">

**Author:** [@gauravthakur02](https://discuss.elastic.co/u/gauravthakur02)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 1:46pm UTC](https://discuss.elastic.co/t/issue-with-role-permissions-for-user-role-mapping-with-aad/316987 "2022-10-25T13:46:33Z")

</div>

Kibana version: 8.4.2 Elasticsearch version: 8.4.2 APM Server version: 8.4.2 APM Agent language and version: Java Agent, Version 1.33.0 Browser version: Microsoft Edge, Version 106.0.1370.47 Fresh install or upgrade…

---

## [Reset password in Elasticsearch does not work](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 1:46pm UTC](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418 "2022-10-25T13:46:25Z")

</div>

Hello everyone, I have installed my own certificates on my Elasticsearch Server. root CA Server certificate All certificates are self-signed. I now want to reset the password for the "logstash\_system" user and get the…

---

## [Fleet Ingest Docker Container Logs](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416)

<div class="topic-metadata">

**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 1:01pm UTC](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416 "2022-10-25T13:01:13Z")

</div>

We'd like to try and use all the benefits of Fleet but also need to ingest selected container logs. And add include/exclude regexes to these logs as some of them can be quite noisy and also badly formatted. filebeat ha…

---

## [Error while creating Snapshots](https://discuss.elastic.co/t/error-while-creating-snapshots/317366)

<div class="topic-metadata">

**Author:** [@selvaraj-sembulingam](https://discuss.elastic.co/u/selvaraj-sembulingam)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 12:43pm UTC](https://discuss.elastic.co/t/error-while-creating-snapshots/317366 "2022-10-25T12:43:31Z")

</div>

Getting the following error while creating snapshots INTERNAL\_SERVER\_ERROR: java.lang.IllegalStateException: Could not find a readable index-N file in a non-empty shard snapshot directory \[\[indices\]\[qduDEnw9Se6TrncgbEZB…

---

## [Fleet Server invalid argument “tcp://10.233.110.49:8220” for “–fleet-server-port”](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/317017)

<div class="topic-metadata">

**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 12:28pm UTC](https://discuss.elastic.co/t/fleet-server-invalid-argument-tcp-10-233-110-49-8220-for-fleet-server-port/317017 "2022-10-25T12:28:57Z")

</div>

Even with ECK 2.4, I'm still able to reproduce this error. Fleet Server invalid argument "tcp://10.233.110.49:8220" for "--fleet-server-port". I did find that it only appears to happen when I create a service with the sa…

---

## [Automatic skipping of indexes / shards for date-based indexing and index sorting](https://discuss.elastic.co/t/automatic-skipping-of-indexes-shards-for-date-based-indexing-and-index-sorting/317399)

<div class="topic-metadata">

**Author:** [@jojo23](https://discuss.elastic.co/u/jojo23)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 11:37am UTC](https://discuss.elastic.co/t/automatic-skipping-of-indexes-shards-for-date-based-indexing-and-index-sorting/317399 "2022-10-25T11:37:45Z")

</div>

I run an Elasticsearch cluster with dozens of time-based monthly indexes and 240+ shards. Query performance is always a priority, so I have been wondering if there are ways to improve which indexes / shards are actually …

---

## [How to get the UUID of a document?](https://discuss.elastic.co/t/how-to-get-the-uuid-of-a-document/317401)

<div class="topic-metadata">

**Author:** [@wrobitza\_aveq](https://discuss.elastic.co/u/wrobitza_aveq)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 11:29am UTC](https://discuss.elastic.co/t/how-to-get-the-uuid-of-a-document/317401 "2022-10-25T11:29:30Z")

</div>

When I am indexing a document to Elasticsearch via Ruby, I am supplying a custom \_id field, e.g. analytics-development-foo\_18. I get the following response from ES: {"\_index"=\>"analytics-development-foo", "\_id"=\>"analy…

---

## [Increasing the number of index shards](https://discuss.elastic.co/t/increasing-the-number-of-index-shards/317377)

<div class="topic-metadata">

**Author:** [@ZahraZare](https://discuss.elastic.co/u/ZahraZare)\
**Replies:** 7\
**Last updated:** [October 25, 2022, 10:47am UTC](https://discuss.elastic.co/t/increasing-the-number-of-index-shards/317377 "2022-10-25T10:47:00Z")

</div>

Is it possible to change the number of shards of existing indices? How to do this with Python?

---

## [How to get log when running kibana as a developer](https://discuss.elastic.co/t/how-to-get-log-when-running-kibana-as-a-developer/316426)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 10:54am UTC](https://discuss.elastic.co/t/how-to-get-log-when-running-kibana-as-a-developer/316426 "2022-10-25T10:54:42Z")

</div>

Hi, I am running kibana as a developer (in development mode). How and where can I get the log files when doing the same? Logging details in my kibana.yml My kibana working directory is /my\_work/kibana logging.dest: /…

---

## [Implement multi-tenancy for an external custom plugin](https://discuss.elastic.co/t/implement-multi-tenancy-for-an-external-custom-plugin/315655)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 10:53am UTC](https://discuss.elastic.co/t/implement-multi-tenancy-for-an-external-custom-plugin/315655 "2022-10-25T10:53:17Z")

</div>

Hi I am developing my own external custom plugin in React. I want to implement multi-tenancy for the same. I believe the process to first create namespaces for each company and then give access to users of a particular…

---

## [Restrict access to Wazuh-kibana-plugin](https://discuss.elastic.co/t/restrict-access-to-wazuh-kibana-plugin/316280)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 10:53am UTC](https://discuss.elastic.co/t/restrict-access-to-wazuh-kibana-plugin/316280 "2022-10-25T10:53:10Z")

</div>

Hi, I have installed Wazuh as a plugin in my Kibana instance. I want to restrict Wazuh access to a particular namespace and particular user roles only. How can I achieve the same? Thanks

---

## [Make custom plugin available based on role of user and in some namepsaces only](https://discuss.elastic.co/t/make-custom-plugin-available-based-on-role-of-user-and-in-some-namepsaces-only/315932)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 10:51am UTC](https://discuss.elastic.co/t/make-custom-plugin-available-based-on-role-of-user-and-in-some-namepsaces-only/315932 "2022-10-25T10:51:51Z")

</div>

Hi I am creating a custom externally distributable plugin But I want the plugin to be installed in specific namespaces only and be available to users with specific roles only How can I implement it? I checked on Kiba…

---

## [Soundex phonetic not working](https://discuss.elastic.co/t/soundex-phonetic-not-working/317383)

<div class="topic-metadata">

**Author:** [@Nitin\_Dabadghav](https://discuss.elastic.co/u/Nitin_Dabadghav)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 8:51am UTC](https://discuss.elastic.co/t/soundex-phonetic-not-working/317383 "2022-10-25T08:51:39Z")

</div>

I am trying to use phonetic's soundex encoder. I have an index which has a record for a name which has a string "Yangtze". If I try to search with a misspelled strings like "yangse", "yantse" or similar, I am unable to g…

[Previous page](https://discuss.elastic.co/latest.md?page=918)

[Next page](https://discuss.elastic.co/latest.md?page=920)
