# Latest **URL:** https://discuss.elastic.co/latest.md?page=942 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 943 --- ## [Exclude fields from add filter dropdown](https://discuss.elastic.co/t/exclude-fields-from-add-filter-dropdown/315764)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 5:39pm UTC](https://discuss.elastic.co/t/exclude-fields-from-add-filter-dropdown/315764 "2022-10-05T17:39:17Z")
Hello, i have an already existing Dashboard with personal information for a small user group. Now a new user group also needs some of that information, but should only see their part. The data comes from a logstash pipe… --- ## [Vert High Latencies For GeoDistance query for 10k documents](https://discuss.elastic.co/t/vert-high-latencies-for-geodistance-query-for-10k-documents/315631)
**Author:** [@Parth\_Narang](https://discuss.elastic.co/u/Parth_Narang)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 5:32pm UTC](https://discuss.elastic.co/t/vert-high-latencies-for-geodistance-query-for-10k-documents/315631 "2022-10-05T17:32:08Z")
I have a requirement to fetch 10k documents around a lat long in 10km radius while below query works fine but take around 350 ms to fetch all the documents. is there any other way to improve on this was expecting latenci… --- ## [Redirect users to dashboard directly upon login](https://discuss.elastic.co/t/redirect-users-to-dashboard-directly-upon-login/315886)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 5:31pm UTC](https://discuss.elastic.co/t/redirect-users-to-dashboard-directly-upon-login/315886 "2022-10-05T17:31:58Z")
I have few dashboards to monitor performance and utilization of the network devices. I would like to redirect users to a dashboard directly when they login instead of landing on a home page. Is there any way to achieve t… --- ## [ES 7.11 How to debug search\_failures for rollup jobs](https://discuss.elastic.co/t/es-7-11-how-to-debug-search-failures-for-rollup-jobs/314896)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 4:05pm UTC](https://discuss.elastic.co/t/es-7-11-how-to-debug-search-failures-for-rollup-jobs/314896 "2022-10-05T16:05:23Z")
My new rollup job is showing search\_failures and not indexing anything. Where can I go to see the details as to why the search failures are occuring? I looked at the rollup job details and the capabilities but there are… --- ## [Manually propagating a distributed tracing context from third party http client (.net)](https://discuss.elastic.co/t/manually-propagating-a-distributed-tracing-context-from-third-party-http-client-net/315024)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 4:41pm UTC](https://discuss.elastic.co/t/manually-propagating-a-distributed-tracing-context-from-third-party-http-client-net/315024 "2022-10-05T16:41:11Z")
Kibana version: 7.16.3 (Docker) Elasticsearch version: 7.16.3 (Docker) APM Server version: 7.16.3 (Docker) APM Agent language and version: .net Description of the problem including expected versus actual behavior… --- ## [Mapping: how to disable array of string?](https://discuss.elastic.co/t/mapping-how-to-disable-array-of-string/315782)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 3:42pm UTC](https://discuss.elastic.co/t/mapping-how-to-disable-array-of-string/315782 "2022-10-05T15:42:56Z")
We want to apply a real strict mapping , but arrays are still accepted and mess around our data pipeline (because after we use Apache Spark to read data). We (at our team level) have no control on the incoming data. Ho… --- ## [Problem using SERVER\_PUBLICBASEURL with docker-compose](https://discuss.elastic.co/t/problem-using-server-publicbaseurl-with-docker-compose/315874)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 12\ **Last updated:** [October 5, 2022, 3:38pm UTC](https://discuss.elastic.co/t/problem-using-server-publicbaseurl-with-docker-compose/315874 "2022-10-05T15:38:32Z")
Hi, I am currently trying to set the field SERVER\_PUBLICSBASEURL on my docker-compose.yml, but it seems that nothing is changing. I can only access to kibana through the ip but not through the hostname I wrote. the doc… --- ## [No APM event when sending from a node child process](https://discuss.elastic.co/t/no-apm-event-when-sending-from-a-node-child-process/315862)
**Author:** [@pierre-aurele-martin](https://discuss.elastic.co/u/pierre-aurele-martin)\ **Replies:** 5\ **Last updated:** [October 5, 2022, 3:01pm UTC](https://discuss.elastic.co/t/no-apm-event-when-sending-from-a-node-child-process/315862 "2022-10-05T15:01:16Z")
Kibana version: Latest Elasticsearch version: Latest APM Server version: Latest APM Agent language and version: Node latest Original install method (e.g. download page, yum, deb, from source, etc.) and version: pnpm … --- ## [APM Graphic Intermittent](https://discuss.elastic.co/t/apm-graphic-intermittent/315842)
**Author:** [@luffy](https://discuss.elastic.co/u/luffy)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 2:48pm UTC](https://discuss.elastic.co/t/apm-graphic-intermittent/315842 "2022-10-05T14:48:20Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Looking for a phrase tokenizer or filter like this](https://discuss.elastic.co/t/looking-for-a-phrase-tokenizer-or-filter-like-this/315853)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 2:51pm UTC](https://discuss.elastic.co/t/looking-for-a-phrase-tokenizer-or-filter-like-this/315853 "2022-10-05T14:51:43Z")
Hello searchers, I'am looking for a tokenizer (or filter) that treat the input phrase like this : Given the input phrase : "the foxes jumping quickly" I want to output documents, whose field may contain all theses wor… --- ## [Drop irrelevant filebeat docker metadata not working](https://discuss.elastic.co/t/drop-irrelevant-filebeat-docker-metadata-not-working/315887)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 2:23pm UTC](https://discuss.elastic.co/t/drop-irrelevant-filebeat-docker-metadata-not-working/315887 "2022-10-05T14:23:23Z")
I am using filebeat to ship container logs to ELK. I have way too many metadata that I don't need. container.id, container.name, conatiner.labels, container.image and so on. The only one I need her is container.name, so… --- ## [Options not available in Kibana Discover for keyword field](https://discuss.elastic.co/t/options-not-available-in-kibana-discover-for-keyword-field/315872)
**Author:** [@gaurav\_soni](https://discuss.elastic.co/u/gaurav_soni)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/options-not-available-in-kibana-discover-for-keyword-field/315872 "2022-10-05T14:18:01Z")
I imported some data , one of the fields had a mapping of type "text" , i later modified the mapping using the following. PUT /restaurant\_data/\_mapping { "properties": { "name": { "type": "text", "fiel… --- ## [Unable to set granular permissions for Endpoint Security module](https://discuss.elastic.co/t/unable-to-set-granular-permissions-for-endpoint-security-module/315866)
**Author:** [@bil15](https://discuss.elastic.co/u/bil15)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-set-granular-permissions-for-endpoint-security-module/315866 "2022-10-05T14:13:25Z")
Hello! My SOC team is staring to use Elastic Stack for Security purposes, and we are planning to use both SIEM and Endpoint Security capabilities. We have T1 and T2 analysts, and I'd wanted to give them different permi… --- ## [Splunk eval Command Equivalent](https://discuss.elastic.co/t/splunk-eval-command-equivalent/314810)
**Author:** [@hi\_xavier](https://discuss.elastic.co/u/hi_xavier)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/splunk-eval-command-equivalent/314810 "2022-10-05T13:17:30Z")
Hi, My team is in process of moving from Splunk to Elk. Does Elk have an equivalent to Splunk's eval command? Thanks ! --- ## [Mockito Test for Elastic Java api client](https://discuss.elastic.co/t/mockito-test-for-elastic-java-api-client/315773)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 0\ **Last updated:** [October 4, 2022, 12:23pm UTC](https://discuss.elastic.co/t/mockito-test-for-elastic-java-api-client/315773 "2022-10-04T12:23:56Z")
I have tried to mock the response for the below method, but it's not working. Not able to mock the search.hits().hits() method. SearchResponse\ search = client.search(s -\> s .index("products") .query(q -\>… --- ## [Metricbeat PostgreSQL module missing Database Name](https://discuss.elastic.co/t/metricbeat-postgresql-module-missing-database-name/315881)
**Author:** [@robdiluca](https://discuss.elastic.co/u/robdiluca)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 1:09pm UTC](https://discuss.elastic.co/t/metricbeat-postgresql-module-missing-database-name/315881 "2022-10-05T13:09:41Z")
Hi all, I'm using the Metricbeat PostgreSQL module and the related default Kibana Dashboard. However, when activating the "statement" metricset, I noticed the documents it produce do not contain the field "postgresql.da… --- ## [All hosts Dashboard : host.name field is splitted when there is "-" (dash) in naming](https://discuss.elastic.co/t/all-hosts-dashboard-host-name-field-is-splitted-when-there-is-dash-in-naming/315879)
**Author:** [@4ourth](https://discuss.elastic.co/u/4ourth)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 12:58pm UTC](https://discuss.elastic.co/t/all-hosts-dashboard-host-name-field-is-splitted-when-there-is-dash-in-naming/315879 "2022-10-05T12:58:07Z")
Hi, I am trying to configure Elastic Security. After parsing logs to the right fields, when I open Security \> Hosts \> All hosts it's splitting my hostnames if there is a "-" (dash. symbol ) in naming, and shows one host… --- ## [Index routing allocation require does not work and throws confusing explain](https://discuss.elastic.co/t/index-routing-allocation-require-does-not-work-and-throws-confusing-explain/315873)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 12:18pm UTC](https://discuss.elastic.co/t/index-routing-allocation-require-does-not-work-and-throws-confusing-explain/315873 "2022-10-05T12:18:24Z")
Hello, I have a cluster on version 7.17 where I'm using a node attribute called node\_type with the values hot and warm to allocate shards and move between node type with ILM, all indices have an index.routing.allocatio… --- ## [Best way to form a cluster](https://discuss.elastic.co/t/best-way-to-form-a-cluster/315680)
**Author:** [@FredericB](https://discuss.elastic.co/u/FredericB)\ **Replies:** 5\ **Last updated:** [October 5, 2022, 11:19am UTC](https://discuss.elastic.co/t/best-way-to-form-a-cluster/315680 "2022-10-05T11:19:30Z")
Hi there, i'm new to ELK and also read lot of documentations from elastic.co I've tested many combinations to form a cluster and wondering can't find the best way to form it: 1-Creating the 1st Node (that is also a clu… --- ## [Convert kibana query language in json format automatically?](https://discuss.elastic.co/t/convert-kibana-query-language-in-json-format-automatically/315762)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 11:08am UTC](https://discuss.elastic.co/t/convert-kibana-query-language-in-json-format-automatically/315762 "2022-10-05T11:08:50Z")
hello i ve this query on discover message :"AREAS ENGINEERING" and message:"20220925104256" how convert in this format GET /myindex/\_search { "query": { "match\_phrase\_prefix": { "message": ????? why p… --- ## [How to partial update es in the output plugin of logstash](https://discuss.elastic.co/t/how-to-partial-update-es-in-the-output-plugin-of-logstash/315864)
**Author:** [@Juno163](https://discuss.elastic.co/u/Juno163)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 11:03am UTC](https://discuss.elastic.co/t/how-to-partial-update-es-in-the-output-plugin-of-logstash/315864 "2022-10-05T11:03:22Z")
By default, logstash output cannot partial update Elasticsearch but fully update. In my case, I can only search some fields which need to update, when it comes to es, the fields which didn't searched will update as blan… --- ## [Filebeat blocked after bulk file insertion](https://discuss.elastic.co/t/filebeat-blocked-after-bulk-file-insertion/315747)
**Author:** [@Marco\_Lagalla](https://discuss.elastic.co/u/Marco_Lagalla)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 10:52am UTC](https://discuss.elastic.co/t/filebeat-blocked-after-bulk-file-insertion/315747 "2022-10-05T10:52:52Z")
Hi all, I am running an ELK platform where Filebeat is installed as agent in a container, monitoring a file written by Nginx. This nginx gets close to 30mln of requests at day. The ingestion of access logs is performin… --- ## [Sort data based on a field value](https://discuss.elastic.co/t/sort-data-based-on-a-field-value/315857)
**Author:** [@HadiKhai](https://discuss.elastic.co/u/HadiKhai)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 10:14am UTC](https://discuss.elastic.co/t/sort-data-based-on-a-field-value/315857 "2022-10-05T10:14:59Z")
Hello, I am saving priority inside the data and I am looking for a way to boost the score based on the priority. "userA":{ "specialities": \[ { "speciality\_priority": 3, "sp… --- ## [Unable to search for flattened (nested) field existence](https://discuss.elastic.co/t/unable-to-search-for-flattened-nested-field-existence/315863)
**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 10:47am UTC](https://discuss.elastic.co/t/unable-to-search-for-flattened-nested-field-existence/315863 "2022-10-05T10:47:51Z")
I'm storing an arbitrary nested object as a flattened field "\_meta" which contains various information related to a product. Here is the mapping for that field: "mappings": { "dynamic": "strict", "prope… --- ## [How to get doc\_count in terms aggregation?](https://discuss.elastic.co/t/how-to-get-doc-count-in-terms-aggregation/315855)
**Author:** [@Be-poz](https://discuss.elastic.co/u/Be-poz)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 10:10am UTC](https://discuss.elastic.co/t/how-to-get-doc-count-in-terms-aggregation/315855 "2022-10-05T10:10:37Z")
Hi i'd like to get doc\_count when i did terms aggregation. here is example i used. PUT sample { "mappings": { "properties": { "updateType": {"type": "keyword"}, "date": {"type": "date", "format": "epoc… --- ## [Date\_histogram breakdown](https://discuss.elastic.co/t/date-histogram-breakdown/315846)
**Author:** [@aa09](https://discuss.elastic.co/u/aa09)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 10:04am UTC](https://discuss.elastic.co/t/date-histogram-breakdown/315846 "2022-10-05T10:04:12Z")
I want to be able to break down my data by year and then further by month, im pretty sure this is possible but cant see exactly how. I am using the following at the moment to get a yearly breakdown: 'by\_year'… --- ## [Elasticsearch v8 Java API client search with filter (not postFilter)](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-search-with-filter-not-postfilter/315823)
**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\ **Replies:** 2\ **Last updated:** [October 5, 2022, 10:02am UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-search-with-filter-not-postfilter/315823 "2022-10-05T10:02:25Z")
I wanted to replace postFilter with filter in the search, but not sure how to because Query has "query.postFilter(postFilters) " method but nothing as ".filter(filters) " . Current implementations is like , Creating Que… --- ## [Enrichment Policy does not match the values of an array/object](https://discuss.elastic.co/t/enrichment-policy-does-not-match-the-values-of-an-array-object/315562)
**Author:** [@hanna](https://discuss.elastic.co/u/hanna)\ **Replies:** 4\ **Last updated:** [October 5, 2022, 8:59am UTC](https://discuss.elastic.co/t/enrichment-policy-does-not-match-the-values-of-an-array-object/315562 "2022-10-05T08:59:36Z")
Hi, i have the following enrichmentpolicy that i cant get to work. The targetfield cveintel from the enrichmentpolicy is never created. Any help is appreciated. \> PUT \_enrich/policy/cve\_enrichment\_policy \> { \> "matc… --- ## [Cannot read configured \[PKCS12\] keystore (as a truststore)](https://discuss.elastic.co/t/cannot-read-configured-pkcs12-keystore-as-a-truststore/315849)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 0\ **Last updated:** [October 5, 2022, 8:33am UTC](https://discuss.elastic.co/t/cannot-read-configured-pkcs12-keystore-as-a-truststore/315849 "2022-10-05T08:33:05Z")
Hello, I configure TLS on all 5 nodes of my cluster. I followed this documentation: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/security-basic-setup.html#encrypt-internode-communication I generated a C… --- ## [FSCrawler && SSL && SANs](https://discuss.elastic.co/t/fscrawler-ssl-sans/314263)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 28\ **Last updated:** [October 5, 2022, 8:27am UTC](https://discuss.elastic.co/t/fscrawler-ssl-sans/314263 "2022-10-05T08:27:52Z")
Hello There! I am trying to set up a FSCrawler. This is my \_settings.yaml file: --- name: "test-job" fs: url: "/tmp/es" update\_rate: "15m" excludes: - "\*/~\*" json\_support: false filename\_as\_id: false add… [Previous page](https://discuss.elastic.co/latest.md?page=941) [Next page](https://discuss.elastic.co/latest.md?page=943)