# Latest

**URL:** https://discuss.elastic.co/latest.md?page=952

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 953

---

## [Facing communication issue while sending data from SQL to logstash](https://discuss.elastic.co/t/facing-communication-issue-while-sending-data-from-sql-to-logstash/315269)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 2:08pm UTC](https://discuss.elastic.co/t/facing-communication-issue-while-sending-data-from-sql-to-logstash/315269 "2022-09-27T14:08:41Z")

</div>

find the logs from logstash side. \[2022-09-27T15:47:00,258\]\[ERROR\]\[logstash.inputs.jdbc \]\[test\]\[f4db26278744478bf3c5e76b57171244092a989c2d32ce74f9029d5a6e668706\] Unable to connect to database. Tried 1 times {:error\_…

---

## [Boost value depending on number of common terms](https://discuss.elastic.co/t/boost-value-depending-on-number-of-common-terms/315267)

<div class="topic-metadata">

**Author:** [@pzmudzinski](https://discuss.elastic.co/u/pzmudzinski)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 2:05pm UTC](https://discuss.elastic.co/t/boost-value-depending-on-number-of-common-terms/315267 "2022-09-27T14:05:10Z")

</div>

Assuming we have index called users and each of them have hobbies stored as array of strings like :\["basketball", "games"\]. We want to fetch users with common hobbies, although we want to boost users with more than one …

---

## [Default elastic user with superuser role has no access to APM API](https://discuss.elastic.co/t/default-elastic-user-with-superuser-role-has-no-access-to-apm-api/314955)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 5\
**Last updated:** [September 27, 2022, 1:54pm UTC](https://discuss.elastic.co/t/default-elastic-user-with-superuser-role-has-no-access-to-apm-api/314955 "2022-09-27T13:54:36Z")

</div>

Elasticsearch and Kibana are both running v7.6.2 on EKS using Helm When logged in as the default elastic user with the superuser role, I am getting a 500 Internal Server Error when making requests to the APM API in the …

---

## [Default Index Pattern (logstash-yyyy.MM.dd) Failing](https://discuss.elastic.co/t/default-index-pattern-logstash-yyyy-mm-dd-failing/315195)

<div class="topic-metadata">

**Author:** [@scriner](https://discuss.elastic.co/u/scriner)\
**Replies:** 7\
**Last updated:** [September 27, 2022, 1:33pm UTC](https://discuss.elastic.co/t/default-index-pattern-logstash-yyyy-mm-dd-failing/315195 "2022-09-27T13:33:43Z")

</div>

Hi all. We are using the following pipeline config file to ship syslogs to Logstash: input { tcp { port =\> 1514 codec =\> "json" type =\> "syslog" } udp { port =\> 1514 codec =\> "json" type =\> …

---

## [Search within "text" field in discover mode](https://discuss.elastic.co/t/search-within-text-field-in-discover-mode/314120)

<div class="topic-metadata">

**Author:** [@Mark\_S](https://discuss.elastic.co/u/Mark_S)\
**Replies:** 4\
**Last updated:** [September 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/search-within-text-field-in-discover-mode/314120 "2022-09-27T13:05:28Z")

</div>

kibana filters in "discover" mode seem to have "exist", "is", "is not" but no "contains" value. Is there any way to use "contains" for a text field? e.g. with Elasticsearch Query DSL?

---

## [How to chain multiple input in Logstash](https://discuss.elastic.co/t/how-to-chain-multiple-input-in-logstash/315179)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 3\
**Last updated:** [September 27, 2022, 12:50pm UTC](https://discuss.elastic.co/t/how-to-chain-multiple-input-in-logstash/315179 "2022-09-27T12:50:47Z")

</div>

My use case is something like below First Input(Mysql JDBC) I'm selecting some data from MySQL like select pk\_id, score, other\_id from \<some\_table\> Second Chained Input (Elasticsearch) Then I want to pass the data p…

---

## [How to modify scores of documents based on partial and exact match](https://discuss.elastic.co/t/how-to-modify-scores-of-documents-based-on-partial-and-exact-match/315010)

<div class="topic-metadata">

**Author:** [@Binish\_Shams](https://discuss.elastic.co/u/Binish_Shams)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 12:11pm UTC](https://discuss.elastic.co/t/how-to-modify-scores-of-documents-based-on-partial-and-exact-match/315010 "2022-09-27T12:11:08Z")

</div>

Hello I am finding a solution to achieve a scenario where an index having suppose 10 records each record having last name, first name and phone number etc fields and I want to do partial match and exact match for these f…

---

## [FATAL Error: "elastalert-kibana-plugin.serverHost" and "elastalert-kibana-plugin.serverPort" settings were not applied](https://discuss.elastic.co/t/fatal-error-elastalert-kibana-plugin-serverhost-and-elastalert-kibana-plugin-serverport-settings-were-not-applied/315242)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 1\
**Last updated:** [September 27, 2022, 11:48am UTC](https://discuss.elastic.co/t/fatal-error-elastalert-kibana-plugin-serverhost-and-elastalert-kibana-plugin-serverport-settings-were-not-applied/315242 "2022-09-27T11:48:48Z")

</div>

Issue or Error i got #docker logs elk\_kibana.1.nobzh4lt68m3wgacvuh3vfijs {"type":"log","@timestamp":"2022-09-27T08:46:23Z","tags":\["fatal","root"\],"pid":1,"message":"{ Error: \\"elastalert-kibana-plugin.serverHost\\" and…

---

## [The data store is normal, and the fuzzy search is empty？](https://discuss.elastic.co/t/the-data-store-is-normal-and-the-fuzzy-search-is-empty/315238)

<div class="topic-metadata">

**Author:** [@kingsKangKang](https://discuss.elastic.co/u/kingsKangKang)\
**Replies:** 5\
**Last updated:** [September 27, 2022, 11:05am UTC](https://discuss.elastic.co/t/the-data-store-is-normal-and-the-fuzzy-search-is-empty/315238 "2022-09-27T11:05:45Z")

</div>

I have a piece of data that says: 善恩康生物科技(苏州)有限公司 Field is： {"name": {"type": "text","analyzer": "ik\_max\_word", "search\_analyzer": "ik\_smart" }} My search statement is: {"query":{"match\_phrase":{"name":{"query":"善恩康…

---

## [Bm25 tune parameters using elasticsearch](https://discuss.elastic.co/t/bm25-tune-parameters-using-elasticsearch/315245)

<div class="topic-metadata">

**Author:** [@dayzero](https://discuss.elastic.co/u/dayzero)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 9:52am UTC](https://discuss.elastic.co/t/bm25-tune-parameters-using-elasticsearch/315245 "2022-09-27T09:52:22Z")

</div>

Hi, I indexed the data with some b and k1 values of the default bm25 algorithm. The thing is implementing relevance feedback on the search engine to tune those b and k1 values. How can I not use reindexing for each time…

---

## [Update document structure without duplication](https://discuss.elastic.co/t/update-document-structure-without-duplication/315244)

<div class="topic-metadata">

**Author:** [@reed](https://discuss.elastic.co/u/reed)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 9:27am UTC](https://discuss.elastic.co/t/update-document-structure-without-duplication/315244 "2022-09-27T09:27:26Z")

</div>

Hi all, I need to read alla index documents and for all add a new field with default value, my code is this: input { elasticsearch { hosts =\> \["http://myelastic:9200"\] index =\> "myindex-txt" user =\> aaa passwor…

---

## [Unable to find certificate for ca\_cert argument while connecting to kibana (for developer)](https://discuss.elastic.co/t/unable-to-find-certificate-for-ca-cert-argument-while-connecting-to-kibana-for-developer/314377)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 9:07am UTC](https://discuss.elastic.co/t/unable-to-find-certificate-for-ca-cert-argument-while-connecting-to-kibana-for-developer/314377 "2022-09-27T09:07:28Z")

</div>

When downloading elastic kibana for here we were getting the certificate in a terminal which look like below HTTP CA certificate SHA-256 fingerprint: a52dd93511e8c6045e21f16654b77c9ee0f34aea26d9f40320b531c474676228 I…

---

## [Phrase query with collate with Elastic Java Client 8.4](https://discuss.elastic.co/t/phrase-query-with-collate-with-elastic-java-client-8-4/315218)

<div class="topic-metadata">

**Author:** [@Peter\_Strasser](https://discuss.elastic.co/u/Peter_Strasser)\
**Replies:** 6\
**Last updated:** [September 27, 2022, 8:59am UTC](https://discuss.elastic.co/t/phrase-query-with-collate-with-elastic-java-client-8-4/315218 "2022-09-27T08:59:51Z")

</div>

Hi Elastic Community, I am looking to run a phrase suggestion with the collate parameter in the Elastic Java Client Version 8.4., but I can not get any working example running. I currently encounter 2 problems: The …

---

## [Retrieving script field in elasticsearch for ML](https://discuss.elastic.co/t/retrieving-script-field-in-elasticsearch-for-ml/315165)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 8:56am UTC](https://discuss.elastic.co/t/retrieving-script-field-in-elasticsearch-for-ml/315165 "2022-09-27T08:56:43Z")

</div>

Hi Team I added this field recently and now i have to apply high function in this field using single metric ML. But this field is not showin , i know this is runtime field but is there any solution for this.

---

## [Add total row in Canvas Datatable](https://discuss.elastic.co/t/add-total-row-in-canvas-datatable/315144)

<div class="topic-metadata">

**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 8:35am UTC](https://discuss.elastic.co/t/add-total-row-in-canvas-datatable/315144 "2022-09-27T08:35:36Z")

</div>

Hi everyone, I have a question: I need to add a line with totals on my Canvas datatable. It's possibile ? I created in Canvas a table with ES SQL Query and I cannot import Table object from Kibana, because in Canvas I…

---

## [Elasticsearch index\_search\_slowlog.log has error](https://discuss.elastic.co/t/elasticsearch-index-search-slowlog-log-has-error/315240)

<div class="topic-metadata">

**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-index-search-slowlog-log-has-error/315240 "2022-09-27T07:26:36Z")

</div>

Hello, I'm working with Elasticsearch 7.14.0 version in ubuntu 18.04 version. We want to gain "search keyword" from Elasticsearch slow log. Suddenly, Elasticsearch doesn't make new search log. What is the problem in thi…

---

## [Cisco Filebeat module (umbrella) - Improve ECS utilization](https://discuss.elastic.co/t/cisco-filebeat-module-umbrella-improve-ecs-utilization/315127)

<div class="topic-metadata">

**Author:** [@aforfot](https://discuss.elastic.co/u/aforfot)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 7:15am UTC](https://discuss.elastic.co/t/cisco-filebeat-module-umbrella-improve-ecs-utilization/315127 "2022-09-27T07:15:28Z")

</div>

We are ingesting Cisco Umbrella data into our Elasticsearch for search, detection in Elastic Security and visualization through Kibana. However, we have noticed a few specific fields where the Cisco module does not optim…

---

## [Office 365 Filebeat Module - Improve ECS utilization](https://discuss.elastic.co/t/office-365-filebeat-module-improve-ecs-utilization/315126)

<div class="topic-metadata">

**Author:** [@aforfot](https://discuss.elastic.co/u/aforfot)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 7:14am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-improve-ecs-utilization/315126 "2022-09-27T07:14:29Z")

</div>

We are ingesting O365 data into our Elasticsearch for search, detection in Elastic Security and visualiation through Kibana. However, we have noticed a few areas for improvement within the module. What is most interestin…

---

## [Microsoft Filebeat Module - Lack of ECS utilization](https://discuss.elastic.co/t/microsoft-filebeat-module-lack-of-ecs-utilization/315125)

<div class="topic-metadata">

**Author:** [@aforfot](https://discuss.elastic.co/u/aforfot)\
**Replies:** 6\
**Last updated:** [September 27, 2022, 7:12am UTC](https://discuss.elastic.co/t/microsoft-filebeat-module-lack-of-ecs-utilization/315125 "2022-09-27T07:12:21Z")

</div>

We are ingesting Microsoft ATP and M365 Defender data into our Elasticsearch for search, detection in Elastic Security, and visualization through Kibana. However, we have noticed a few specific fields where the Microsoft…

---

## [How to ignore exceptions and read the next offset of kafka](https://discuss.elastic.co/t/how-to-ignore-exceptions-and-read-the-next-offset-of-kafka/315235)

<div class="topic-metadata">

**Author:** [@lythen](https://discuss.elastic.co/u/lythen)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 6:49am UTC](https://discuss.elastic.co/t/how-to-ignore-exceptions-and-read-the-next-offset-of-kafka/315235 "2022-09-27T06:49:03Z")

</div>

My Logstash is used in reading the data of kafka and sending them to Elasticsearch. But now I 'm facing some problems,sucsh as when the index was frozen in ES, the Logstash would throw an exception and then, the Logstash…

---

## [Conditional sorting by different text fields in Elastic Search Query](https://discuss.elastic.co/t/conditional-sorting-by-different-text-fields-in-elastic-search-query/315231)

<div class="topic-metadata">

**Author:** [@christianholsen](https://discuss.elastic.co/u/christianholsen)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 5:58am UTC](https://discuss.elastic.co/t/conditional-sorting-by-different-text-fields-in-elastic-search-query/315231 "2022-09-27T05:58:11Z")

</div>

I have a problem sorting some data in an Elastic Search index. My data in ES are documents with a default name and possibly translation of the name can be found in a translations nested structure: \[ { "defaultName"…

---

## [A simple answer to QA question: how does Elasticsearch work?](https://discuss.elastic.co/t/a-simple-answer-to-qa-question-how-does-elasticsearch-work/315223)

<div class="topic-metadata">

**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\
**Replies:** 12\
**Last updated:** [September 27, 2022, 5:26am UTC](https://discuss.elastic.co/t/a-simple-answer-to-qa-question-how-does-elasticsearch-work/315223 "2022-09-27T05:26:34Z")

</div>

Lets say I have a very simple Elasticsearch index, 100,000 documents with a single field called "text" which was indexed using the default text analyzer A QA engineer wants to know, when they type something in, what sho…

---

## [Trying to install output mongodb](https://discuss.elastic.co/t/trying-to-install-output-mongodb/314309)

<div class="topic-metadata">

**Author:** [@Niels434](https://discuss.elastic.co/u/Niels434)\
**Replies:** 6\
**Last updated:** [September 27, 2022, 5:23am UTC](https://discuss.elastic.co/t/trying-to-install-output-mongodb/314309 "2022-09-27T05:23:08Z")

</div>

I'm trying to get the output plugin MongoDB for the Logstash pipeline installed. But i'm getting an error code: jruby: warning: unknown property jruby.mx1g jruby: warning: unknown property jruby.ms1g jruby: unknown o…

---

## [Regarding duplicacy of logs through filebeat at kibana](https://discuss.elastic.co/t/regarding-duplicacy-of-logs-through-filebeat-at-kibana/314365)

<div class="topic-metadata">

**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\
**Replies:** 8\
**Last updated:** [September 27, 2022, 4:23am UTC](https://discuss.elastic.co/t/regarding-duplicacy-of-logs-through-filebeat-at-kibana/314365 "2022-09-27T04:23:34Z")

</div>

Hi, As attached screenshot of kibana, logs are repeated with same message in two format, only difference of it log.file.path as I seen here. These dhcp logs are coming through filebeat to kafka. Logs flow is: filebea…

---

## [Logstash circuit breaking](https://discuss.elastic.co/t/logstash-circuit-breaking/315049)

<div class="topic-metadata">

**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\
**Replies:** 2\
**Last updated:** [September 27, 2022, 3:24am UTC](https://discuss.elastic.co/t/logstash-circuit-breaking/315049 "2022-09-27T03:24:11Z")

</div>

Hi, Do anyone know how to solve this circuit breaking exception in logstash (7.10). \[2022-09-23T14:38:22,920\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[299ec4f1e5994d0fe7b59d4e4d29f50e734f0d6401d909dc198ecbc402ca398…

---

## [Deleted Elasticsearch http\_ca.crt](https://discuss.elastic.co/t/deleted-elasticsearch-http-ca-crt/315225)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [September 27, 2022, 3:17am UTC](https://discuss.elastic.co/t/deleted-elasticsearch-http-ca-crt/315225 "2022-09-27T03:17:37Z")

</div>

A client, who has logstash and a elastic node in the same machine, was having problem indexing data with logstash, the cacert configuration in the logstash output was pointing to the elasticsearch directory where he h…

---

## [Restricting Elastic Cluster Access From Browser and unwanted Servers](https://discuss.elastic.co/t/restricting-elastic-cluster-access-from-browser-and-unwanted-servers/315208)

<div class="topic-metadata">

**Author:** [@sanjaykumr](https://discuss.elastic.co/u/sanjaykumr)\
**Replies:** 1\
**Last updated:** [September 27, 2022, 2:41am UTC](https://discuss.elastic.co/t/restricting-elastic-cluster-access-from-browser-and-unwanted-servers/315208 "2022-09-27T02:41:18Z")

</div>

We have 5 Node Cluster with 3 Master Nodes , 3 Coord nodes and 6 Data Nodes. Currently we can view the content of Elastic cluster via browser using the url \["" http://hostname:9200/\_cat/nodes""\] , we want access from th…

---

## [Skipping security auto configuration](https://discuss.elastic.co/t/skipping-security-auto-configuration/315173)

<div class="topic-metadata">

**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\
**Replies:** 1\
**Last updated:** [September 27, 2022, 12:12am UTC](https://discuss.elastic.co/t/skipping-security-auto-configuration/315173 "2022-09-27T00:12:41Z")

</div>

I'm attempting to build a 3 node cluster with Elastic 8.2.3. I can build the first node as a single node cluster successfully and connect with kibana. My problem is adding nodes. On the first node, I've run the comman…

---

## [Kibana Create Role API returns 404](https://discuss.elastic.co/t/kibana-create-role-api-returns-404/315211)

<div class="topic-metadata">

**Author:** [@jlos](https://discuss.elastic.co/u/jlos)\
**Replies:** 3\
**Last updated:** [September 26, 2022, 11:25pm UTC](https://discuss.elastic.co/t/kibana-create-role-api-returns-404/315211 "2022-09-26T23:25:48Z")

</div>

Hello, I know this is technically a duplicate of this discussion right here, but I'm not satisfied with the outcome of it. I'm attempting to use Kibana's create/update role API to create a user role. I'm following the …

---

## [Duplicate data from filebeat (input type: log)](https://discuss.elastic.co/t/duplicate-data-from-filebeat-input-type-log/315221)

<div class="topic-metadata">

**Author:** [@sathishpal](https://discuss.elastic.co/u/sathishpal)\
**Replies:** 0\
**Last updated:** [September 26, 2022, 11:27pm UTC](https://discuss.elastic.co/t/duplicate-data-from-filebeat-input-type-log/315221 "2022-09-26T23:27:23Z")

</div>

Hi All, Duplicate data is sent from Filebeat. When I start the elastic agent, I can see two filebeat processes running. If I Kill the first one it auto restarts and the second one disappears when I kill it twice. Once …

[Previous page](https://discuss.elastic.co/latest.md?page=951)

[Next page](https://discuss.elastic.co/latest.md?page=953)
