# Latest **URL:** https://discuss.elastic.co/latest.md?page=941 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 942 --- ## [How to pass pagination to java scroll api](https://discuss.elastic.co/t/how-to-pass-pagination-to-java-scroll-api/315965)
**Author:** [@mahfuj\_asif](https://discuss.elastic.co/u/mahfuj_asif)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 12:10pm UTC](https://discuss.elastic.co/t/how-to-pass-pagination-to-java-scroll-api/315965 "2022-10-06T12:10:40Z")
I am trying to fetch all data from elastic index with scroll id. SearchQuery searchQuery = new NativeSearchQueryBuilder() .withIndices(ELASTIC\_INDEX) .withTypes(DOC\_TYPE) … --- ## [Disabling a monitor doesn't actually disable it](https://discuss.elastic.co/t/disabling-a-monitor-doesnt-actually-disable-it/315936)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 2\ **Last updated:** [October 6, 2022, 10:46am UTC](https://discuss.elastic.co/t/disabling-a-monitor-doesnt-actually-disable-it/315936 "2022-10-06T10:46:34Z")
Hey! I've got a couple of monitors disabled via the Monitor Management screen, but the monitors continue to run. Is this a known issue? My monitors are executed on fleet managed elastic agents via Kubernetes. I've tried… --- ## [Need to disable idle indices in logstash config](https://discuss.elastic.co/t/need-to-disable-idle-indices-in-logstash-config/315942)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 8:53am UTC](https://discuss.elastic.co/t/need-to-disable-idle-indices-in-logstash-config/315942 "2022-10-06T08:53:33Z")
Hi team, In our TEST Environment, N number of indices are idle in position. Those are unwantedly roll back over itself. Could you giude us, what are the procedure to disable the unwanted indices in logstash config or s… --- ## [Sending logs to a previously created index using Custom Logs integration](https://discuss.elastic.co/t/sending-logs-to-a-previously-created-index-using-custom-logs-integration/315948)
**Author:** [@RP5](https://discuss.elastic.co/u/RP5)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 9:24am UTC](https://discuss.elastic.co/t/sending-logs-to-a-previously-created-index-using-custom-logs-integration/315948 "2022-10-06T09:24:10Z")
I was using filebeat to send data to an index that I had created. (say indextest) Can I send data to the above index (indextest) using Elastic Agent Custom Logs Integration? Thank you --- ## [Anomaly score is changed after few days](https://discuss.elastic.co/t/anomaly-score-is-changed-after-few-days/315937)
**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\ **Replies:** 1\ **Last updated:** [October 6, 2022, 8:28am UTC](https://discuss.elastic.co/t/anomaly-score-is-changed-after-few-days/315937 "2022-10-06T08:28:58Z")
I am confusing that anomaly score is changed after few days in anomaly explore. First of all, it seems that the anomaly itself is not a cross sign, so it is not a phenomenon for multi-bucket anomaly score. If the anoma… --- ## [Facing issue while starting logstash which connects with Maria Database](https://discuss.elastic.co/t/facing-issue-while-starting-logstash-which-connects-with-maria-database/315233)
**Author:** [@nawaz462](https://discuss.elastic.co/u/nawaz462)\ **Replies:** 2\ **Last updated:** [October 6, 2022, 8:25am UTC](https://discuss.elastic.co/t/facing-issue-while-starting-logstash-which-connects-with-maria-database/315233 "2022-10-06T08:25:23Z")
On linux server, i wanted to have ELK setup with MariaDB through Docker. I want to setup the Elastic search data with indexes for the maria DB tables from scratch and as well as for incremental changes sync. These are d… --- ## [Logstasg ERROR filewatch.tailmode.handlers.grow](https://discuss.elastic.co/t/logstasg-error-filewatch-tailmode-handlers-grow/315550)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 4\ **Last updated:** [October 6, 2022, 8:12am UTC](https://discuss.elastic.co/t/logstasg-error-filewatch-tailmode-handlers-grow/315550 "2022-10-06T08:12:57Z")
Hi, set up reading mysql logs from nfs using multiline codec and grok filter The first problem is that it doesn’t read the file after rotation, restarting doesn’t help, it still doesn’t seem to see it, there was an erro… --- ## [How to disable inpect Action from visualisations context menu options](https://discuss.elastic.co/t/how-to-disable-inpect-action-from-visualisations-context-menu-options/313857)
**Author:** [@sanskar-panchal-gith](https://discuss.elastic.co/u/sanskar-panchal-gith)\ **Replies:** 4\ **Last updated:** [October 6, 2022, 7:49am UTC](https://discuss.elastic.co/t/how-to-disable-inpect-action-from-visualisations-context-menu-options/313857 "2022-10-06T07:49:41Z")
Hi , I have been working on a custom kibana plugin to render a dashboard. I am using dashboard.getDashboardContainerByValueRenderer(); to render the dashboard. I want to disable some actions from the context menu of t… --- ## [Is it possible to install multiple Fleet Servers?](https://discuss.elastic.co/t/is-it-possible-to-install-multiple-fleet-servers/315744)
**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\ **Replies:** 4\ **Last updated:** [October 6, 2022, 7:15am UTC](https://discuss.elastic.co/t/is-it-possible-to-install-multiple-fleet-servers/315744 "2022-10-06T07:15:03Z")
Hi everyone, I was wondering, is it possible to install multiple Fleet Servers connected to the same ES ? I explain myself, I already have a Fleet Server installed but there might be a lot more Elastic agents than now … --- ## [Logstash health check failing for TG](https://discuss.elastic.co/t/logstash-health-check-failing-for-tg/315541)
**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\ **Replies:** 1\ **Last updated:** [October 6, 2022, 7:04am UTC](https://discuss.elastic.co/t/logstash-health-check-failing-for-tg/315541 "2022-10-06T07:04:02Z")
Hi All, I had one logstash ec2 ubuntu machine, Due to frequent load issue i have added one more logstash machine and put both machines behind AWS ALB. Now both my instances are unhealthy under TG and i am not sure what… --- ## [Delete indices with 50 gb or older than](https://discuss.elastic.co/t/delete-indices-with-50-gb-or-older-than/315884)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 7\ **Last updated:** [October 6, 2022, 6:14am UTC](https://discuss.elastic.co/t/delete-indices-with-50-gb-or-older-than/315884 "2022-10-06T06:14:34Z")
Hello, I'm currently trying to delete indices which are either greater than 50 GB or older than 31 days, but it seems like this is not possible with ILM. ILM uses, if anything defined in the hot stage, the days since r… --- ## [Order legend items](https://discuss.elastic.co/t/order-legend-items/314168)
**Author:** [@fabrizio1979](https://discuss.elastic.co/u/fabrizio1979)\ **Replies:** 2\ **Last updated:** [October 6, 2022, 5:57am UTC](https://discuss.elastic.co/t/order-legend-items/314168 "2022-10-06T05:57:51Z")
Hi there, How to order the legend items displayed on graphs? I used graphs. I would like legend items ordered as A1 A2 B1 B2 Thanks --- ## [Logstash service is not started in linux](https://discuss.elastic.co/t/logstash-service-is-not-started-in-linux/315802)
**Author:** [@Jathurshan\_Sumandira](https://discuss.elastic.co/u/Jathurshan_Sumandira)\ **Replies:** 3\ **Last updated:** [October 6, 2022, 5:11am UTC](https://discuss.elastic.co/t/logstash-service-is-not-started-in-linux/315802 "2022-10-06T05:11:49Z")
Hi, I am beginner to ELK stack and I am working on Linux server, I could try to start the logstash service but the service does not start and I could not see any logs in the command line(empty). Even though the permissio… --- ## [Get a mapping/schema of flattened field](https://discuss.elastic.co/t/get-a-mapping-schema-of-flattened-field/315919)
**Author:** [@getorca](https://discuss.elastic.co/u/getorca)\ **Replies:** 2\ **Last updated:** [October 6, 2022, 4:10am UTC](https://discuss.elastic.co/t/get-a-mapping-schema-of-flattened-field/315919 "2022-10-06T04:10:46Z")
Is there a way to get a mapping or schema of all the sub-fields that exist in my flattened field? --- ## [Constant\_scores w/ boost upon matching properties within nested](https://discuss.elastic.co/t/constant-scores-w-boost-upon-matching-properties-within-nested/315930)
**Author:** [@Paul\_Kim](https://discuss.elastic.co/u/Paul_Kim)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 4:14am UTC](https://discuss.elastic.co/t/constant-scores-w-boost-upon-matching-properties-within-nested/315930 "2022-10-06T04:14:17Z")
I have below as my mapping for some\_index. { "some\_index": "properties": { "people": { "type": "nested", "properties": { "name": { "type": "keyword" … --- ## [Trouble with reindexing and ingest pipeline](https://discuss.elastic.co/t/trouble-with-reindexing-and-ingest-pipeline/315536)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 3\ **Last updated:** [October 6, 2022, 3:07am UTC](https://discuss.elastic.co/t/trouble-with-reindexing-and-ingest-pipeline/315536 "2022-10-06T03:07:15Z")
I have problem with reindexing with ingest pipeline. Basically it seems to be working in most cases, but in some it is not and I have no clue how to debug or find a root cause. Here is my scenario: I have two indices … --- ## [Logstash fails to fetch Configuration](https://discuss.elastic.co/t/logstash-fails-to-fetch-configuration/315915)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 6\ **Last updated:** [October 6, 2022, 1:32am UTC](https://discuss.elastic.co/t/logstash-fails-to-fetch-configuration/315915 "2022-10-06T01:32:40Z")
My logstash isn't starting. When I check the logs, I see these: Could not fetch all the sources {:exception=\>Errno::EACCES, :message=\>"Permission denied - /etc/logstash/conf.d/log.conf", :backtrace=\>\["org/jruby/RubyIO.j… --- ## ['create' vs. 'create\_doc' privilege for beats\_system](https://discuss.elastic.co/t/create-vs-create-doc-privilege-for-beats-system/315752)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 1\ **Last updated:** [October 6, 2022, 1:16am UTC](https://discuss.elastic.co/t/create-vs-create-doc-privilege-for-beats-system/315752 "2022-10-06T01:16:12Z")
On my Elasticsearch 7.x cluster, the beats\_system role has the index privileges create\_index and create. According to Security privileges | Elasticsearch Guide \[7.17\] | Elastic, roles with the the index create privilege… --- ## [KeyCloak redirect\_uri gives 404 page not found error](https://discuss.elastic.co/t/keycloak-redirect-uri-gives-404-page-not-found-error/315892)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 2\ **Last updated:** [October 6, 2022, 12:53am UTC](https://discuss.elastic.co/t/keycloak-redirect-uri-gives-404-page-not-found-error/315892 "2022-10-06T00:53:41Z")
I'm using Elasticsearch and Kibana 7.16.3. I've gotten SSL/TLS properly setup on my local install. I've gotten KeyCloak set up and working. I can bring up Kibana and login with Keycloak successfully. However, after login… --- ## [What does the host refer to when configuring APM integration?](https://discuss.elastic.co/t/what-does-the-host-refer-to-when-configuring-apm-integration/315922)
**Author:** [@pedroaugusto](https://discuss.elastic.co/u/pedroaugusto)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 12:29am UTC](https://discuss.elastic.co/t/what-does-the-host-refer-to-when-configuring-apm-integration/315922 "2022-10-06T00:29:09Z")
Hello! I'm configuring the APM Integration and I have a question. In General -\> Server Configuration. What's the host? Is Kibana's host? Or Elastic's host? Or APM Server's host? Or the host of the application that A… --- ## ["match-boolean-query doesn't return the "exact match word" of the query](https://discuss.elastic.co/t/match-boolean-query-doesnt-return-the-exact-match-word-of-the-query/315918)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 11:54pm UTC](https://discuss.elastic.co/t/match-boolean-query-doesnt-return-the-exact-match-word-of-the-query/315918 "2022-10-05T23:54:18Z")
I'm using "match-Boolean-prefix query but I can't get the exact match of the query.I can't use prefix queries because I also need "not exact match" results and I also need the fuzziness and word completion.I get every th… --- ## [Exclude multiple patterns in logstash s3 input](https://discuss.elastic.co/t/exclude-multiple-patterns-in-logstash-s3-input/315917)
**Author:** [@Elias\_Ojeda](https://discuss.elastic.co/u/Elias_Ojeda)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 11:55pm UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-logstash-s3-input/315917 "2022-10-05T23:55:59Z")
Logstash S3 input has an option to exclude a pattern. The example shows how to exclude a single pattern. For example: "exclude\_pattern" =\> "/2020/04/" Is it possible to exclude multiple patterns? For example, exclude… --- ## [Filter unique value fron url field](https://discuss.elastic.co/t/filter-unique-value-fron-url-field/314378)
**Author:** [@Vivek\_Nigam](https://discuss.elastic.co/u/Vivek_Nigam)\ **Replies:** 5\ **Last updated:** [October 5, 2022, 8:41pm UTC](https://discuss.elastic.co/t/filter-unique-value-fron-url-field/314378 "2022-10-05T20:41:49Z")
I want to filer all unique device id from url message , is it possible?? please help url: "/v1/default/hls-ts-fk/vodm/f452aa15-87ca-5013-856e-b0758db7c3d5/default\_ott.m3u8?PID=testing.30d&PAID=TITL0000000000391111&devic… --- ## [Kibana dashboard table view results in "Aborted"](https://discuss.elastic.co/t/kibana-dashboard-table-view-results-in-aborted/313065)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 8:40pm UTC](https://discuss.elastic.co/t/kibana-dashboard-table-view-results-in-aborted/313065 "2022-10-05T20:40:37Z")
Currently we have a large Dashboard displaying multiple visualizations. However, since 8.4.0 we encounter on the following message on two table views in Kibana. I'm not sure if it is a problem with a timeout or response … --- ## [Unable to view winlogbeat log data](https://discuss.elastic.co/t/unable-to-view-winlogbeat-log-data/315910)
**Author:** [@tyc-4](https://discuss.elastic.co/u/tyc-4)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 7:58pm UTC](https://discuss.elastic.co/t/unable-to-view-winlogbeat-log-data/315910 "2022-10-05T19:58:26Z")
I tried to send logs using winlogbeat to a self hosted ELK stack but I am unable to view any information other than the \_id and \_index. How do I fix this? --- ## [How can I edit output fleetserver configurations?](https://discuss.elastic.co/t/how-can-i-edit-output-fleetserver-configurations/315563)
**Author:** [@GustavoPires](https://discuss.elastic.co/u/GustavoPires)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 7:26pm UTC](https://discuss.elastic.co/t/how-can-i-edit-output-fleetserver-configurations/315563 "2022-10-05T19:26:18Z")
Hello, I need to put my interface firewall at output fleetserver seetings, but it is not possible. How can I edit output? Another question, how can I generate CA trusted fingerprint? --- ## [Count of files in sincedb and file\_completed\_log\_path](https://discuss.elastic.co/t/count-of-files-in-sincedb-and-file-completed-log-path/315907)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 7:07pm UTC](https://discuss.elastic.co/t/count-of-files-in-sincedb-and-file-completed-log-path/315907 "2022-10-05T19:07:09Z")
Hi Can You explain why I have a so much difference in count of particular daily file in sincedb and file\_complete\_log\_path. It seems that sincedb does not reflect the actual number of reprocessed files, hence there are n… --- ## [Null terminated message string](https://discuss.elastic.co/t/null-terminated-message-string/315905)
**Author:** [@LisaJ](https://discuss.elastic.co/u/LisaJ)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 6:59pm UTC](https://discuss.elastic.co/t/null-terminated-message-string/315905 "2022-10-05T18:59:57Z")
I have a syslog message that contains a null terminated string: "syslog\_message":"A10\\u0000" -- these messages represent is-alive checks from a load balancer to the logstash servers. I would prefer not to have thousands … --- ## [Host File or Wildcards for Heartbeat](https://discuss.elastic.co/t/host-file-or-wildcards-for-heartbeat/315906)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 6:48pm UTC](https://discuss.elastic.co/t/host-file-or-wildcards-for-heartbeat/315906 "2022-10-05T18:48:46Z")
I'm trying to set up Heartbeat and looking for an efficient way to manage the host list for the icmp monitor. Is there an option to either reference a host file or to somehow use wildcards for the hosts list? I've looked… --- ## [Multi language support for kibana dashboards](https://discuss.elastic.co/t/multi-language-support-for-kibana-dashboards/315473)
**Author:** [@Srikanth\_V](https://discuss.elastic.co/u/Srikanth_V)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 5:51pm UTC](https://discuss.elastic.co/t/multi-language-support-for-kibana-dashboards/315473 "2022-10-05T17:51:54Z")
Hey guys, Hope you are doing well. Is there a possibility to have multi language support in 1 instance of kibana? If yes, how can the language be changed from say en to fr. I have 2 different dashboards 1 for english … [Previous page](https://discuss.elastic.co/latest.md?page=940) [Next page](https://discuss.elastic.co/latest.md?page=942)