# Latest **URL:** https://discuss.elastic.co/latest.md?page=959 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 960 --- ## [Precondition 'apm integration installed' failed](https://discuss.elastic.co/t/precondition-apm-integration-installed-failed/314388)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 12:09pm UTC](https://discuss.elastic.co/t/precondition-apm-integration-installed-failed/314388 "2022-09-21T12:09:58Z")
Hello, i am trying to setup apm server (legacy). I successfully deployed apm server with eck to kubernetes. But when i check logs i see error message related to integration. I created integration from kibana UI, but stil… --- ## ["No mapping found for \[@timestamp\] in order to sort on"](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/314855)
**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\ **Replies:** 4\ **Last updated:** [September 21, 2022, 11:56am UTC](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/314855 "2022-09-21T11:56:24Z")
Hey, I have this error: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found for \[@timestamp\] in order to sort on","index\_uuid":"0qKrRe3tQbKYhi5ps\_WcCw","index":"products"}\],"type":"search\_… --- ## [Failed on parsing mappings on index creation \[nyc\_taxis\]](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 8\ **Last updated:** [September 21, 2022, 11:03am UTC](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977 "2022-09-21T11:03:49Z")
Hi All, I got below error while running benchmarking with nyc\_taxis track. failed on parsing mappings on index creation \[nyc\_taxis\]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server… --- ## [Unbalanced Cluster I/O Operations](https://discuss.elastic.co/t/unbalanced-cluster-i-o-operations/313661)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 3\ **Last updated:** [September 21, 2022, 10:42am UTC](https://discuss.elastic.co/t/unbalanced-cluster-i-o-operations/313661 "2022-09-21T10:42:51Z")
Hello, I have a 3 master/data nodes cluster + 1 kibana client node using elasticsearch version 7.17.4 The cluster is deployed on Nutanix. I'm using auditbeat, packetbeat, filebeat and elastic agent as sources of data. … --- ## [Security index is unavailable](https://discuss.elastic.co/t/security-index-is-unavailable/314824)
**Author:** [@rkulanga](https://discuss.elastic.co/u/rkulanga)\ **Replies:** 12\ **Last updated:** [September 21, 2022, 10:32am UTC](https://discuss.elastic.co/t/security-index-is-unavailable/314824 "2022-09-21T10:32:02Z")
Hi, Due to the low disk space (95% used) on my system goes down. Then I have removed some files from the indices directory and restart both Kibana and Elasticsearch service. But system is not working now. According to… --- ## [Qradar logs to elasticsearch](https://discuss.elastic.co/t/qradar-logs-to-elasticsearch/314853)
**Author:** [@Arslonbek\_Toshev](https://discuss.elastic.co/u/Arslonbek_Toshev)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 10:13am UTC](https://discuss.elastic.co/t/qradar-logs-to-elasticsearch/314853 "2022-09-21T10:13:21Z")
We have couple Sophos FWs sending logs to Qradar SIEM which we plan to extend to Elastic for threat hunting (Log Forwarding from Qradar to Elastic). In Integrations I choose Sophos. but logs don't parse correctly. the pr… --- ## [Display latency, throughput of APM instrumented apps in custom Kibana dashboard](https://discuss.elastic.co/t/display-latency-throughput-of-apm-instrumented-apps-in-custom-kibana-dashboard/314306)
**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\ **Replies:** 5\ **Last updated:** [September 21, 2022, 9:45am UTC](https://discuss.elastic.co/t/display-latency-throughput-of-apm-instrumented-apps-in-custom-kibana-dashboard/314306 "2022-09-21T09:45:28Z")
Hello people, We have instrumented some Java and .NET applications with APM agents. So in Kibana-\>APM -\>Services we can see the apps and all the relevant metrics like Throughput, Latency, Failed transaction rate, etc. … --- ## [Problème d'intégration des indices](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017)
**Author:** [@renaud\_l](https://discuss.elastic.co/u/renaud_l)\ **Replies:** 15\ **Last updated:** [September 21, 2022, 8:47am UTC](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017 "2022-09-21T08:47:45Z")
Bonsoir, J'utilise une application web qui transmet des fichiers vers elastic afin de pouvoir visualiser la donnée dans Kibana. Tout fonctionnait très bien depuis 2 ans, mais je suis désormais bloqué : les fichiers qui… --- ## [How to filter the results based on a condition if there is a whole word match from y attribute in x attribute](https://discuss.elastic.co/t/how-to-filter-the-results-based-on-a-condition-if-there-is-a-whole-word-match-from-y-attribute-in-x-attribute/314843)
**Author:** [@arsoni20](https://discuss.elastic.co/u/arsoni20)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 8:46am UTC](https://discuss.elastic.co/t/how-to-filter-the-results-based-on-a-condition-if-there-is-a-whole-word-match-from-y-attribute-in-x-attribute/314843 "2022-09-21T08:46:07Z")
I want to do filtering based on a whole word match in Elasticsearch. e.g. POST /company/1 { "name": "Hemani", "age" : 23, "experienceInYears" : 2, "role" : "Python developer", "object" :{ "link":"Python, Scala, R" } … --- ## [Elastic Timeout not working](https://discuss.elastic.co/t/elastic-timeout-not-working/314791)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 5\ **Last updated:** [September 21, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-timeout-not-working/314791 "2022-09-21T07:18:47Z")
When I am passing the timeout value 1ms in the request, still the result is coming with took value being more than 1ms. How does this timeout value work? Request - GET dco-preview/\_search { "timeout": "10ms", "qu… --- ## [For exporting data shoud we use scroll or pit with search after?](https://discuss.elastic.co/t/for-exporting-data-shoud-we-use-scroll-or-pit-with-search-after/314475)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 4\ **Last updated:** [September 21, 2022, 7:13am UTC](https://discuss.elastic.co/t/for-exporting-data-shoud-we-use-scroll-or-pit-with-search-after/314475 "2022-09-21T07:13:32Z")
For exporting data shoud we use scroll or pit with search after? Documentation says not to use scroll for deep pagination. Assume that the data which we are querying would not change. --- ## [Unknown key for a START\_OBJECT in \[3\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777)
**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\ **Replies:** 3\ **Last updated:** [September 21, 2022, 6:31am UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777 "2022-09-21T06:31:24Z")
Hi all, im getting this error on aggs query and i want to do multiple aggregation can you pls help here. { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", "reason" : "Unknown ke… --- ## [How to get aggregation bucket of certain field values use as a key](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-of-certain-field-values-use-as-a-key/314829)
**Author:** [@yuvraj.singh](https://discuss.elastic.co/u/yuvraj.singh)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 6:10am UTC](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-of-certain-field-values-use-as-a-key/314829 "2022-09-21T06:10:09Z")
\let suppose , I have some data like\ document 1 : "\_source": { "custom\_behavior": \[ { "key": "Brand", "value": "HP" … --- ## [Back up data from Elasticsearch and Kibana to another server](https://discuss.elastic.co/t/back-up-data-from-elasticsearch-and-kibana-to-another-server/314826)
**Author:** [@rt\_888](https://discuss.elastic.co/u/rt_888)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 5:49am UTC](https://discuss.elastic.co/t/back-up-data-from-elasticsearch-and-kibana-to-another-server/314826 "2022-09-21T05:49:16Z")
I have read the documentation for Restore and Backup with this link Blockquote But since i am running ELK on docker, is it a good way to migrate all of its data (indice, dashboards) to another server using Docker vol… --- ## [Logstash-extract multiple subfield values in multiple events](https://discuss.elastic.co/t/logstash-extract-multiple-subfield-values-in-multiple-events/314682)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 6\ **Last updated:** [September 21, 2022, 5:27am UTC](https://discuss.elastic.co/t/logstash-extract-multiple-subfield-values-in-multiple-events/314682 "2022-09-21T05:27:33Z")
Hi, I have below type of events(fields value can be dynamic). I'm trying to split field's key, value as new event. I'm able to do it for two fields(TOTAl\_VOLUME, SUCCESS\_VOLUME), but when i try for 3rd field, logstash … --- ## [How to define multiline in filebeat.inputs base on image?](https://discuss.elastic.co/t/how-to-define-multiline-in-filebeat-inputs-base-on-image/314780)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 4:58am UTC](https://discuss.elastic.co/t/how-to-define-multiline-in-filebeat-inputs-base-on-image/314780 "2022-09-21T04:58:31Z")
Hey, in our cluster some apps are sending logs as multiline, and the problem is that the log structure is different from app to app. How can we set up an 'if' condition that will include the multiline.pattern: … --- ## [Dealing with log messages about source \_and\_ target](https://discuss.elastic.co/t/dealing-with-log-messages-about-source-and-target/313895)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 6\ **Last updated:** [September 21, 2022, 4:26am UTC](https://discuss.elastic.co/t/dealing-with-log-messages-about-source-and-target/313895 "2022-09-21T04:26:31Z")
Okay, so… We’ve got a field that could be used to indicate whether a whole message is related to client or server activity, whether communication is inbound or outbound: network.direction But in some situations we’re l… --- ## [Label data line as first or last](https://discuss.elastic.co/t/label-data-line-as-first-or-last/314817)
**Author:** [@razmizafiruddin](https://discuss.elastic.co/u/razmizafiruddin)\ **Replies:** 6\ **Last updated:** [September 21, 2022, 2:35am UTC](https://discuss.elastic.co/t/label-data-line-as-first-or-last/314817 "2022-09-21T02:35:36Z")
Hi, i am new to kibana, i have some data loaded into index pattern as below. new data will be uploaded every 30 min. i am having problem to label/determine the first and last data for each serial number. i think it is ac… --- ## [Elastic Agent Tags in Discover](https://discuss.elastic.co/t/elastic-agent-tags-in-discover/314742)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 2:07am UTC](https://discuss.elastic.co/t/elastic-agent-tags-in-discover/314742 "2022-09-21T02:07:58Z")
Hi, We are creating/updating Tags for VM's from Fleet management UI. But these tags are not available in Discover section. Is this limitation ? Thanks, Praveen --- ## [Error to start elastic search](https://discuss.elastic.co/t/error-to-start-elastic-search/314771)
**Author:** [@tariqali250](https://discuss.elastic.co/u/tariqali250)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 1:06am UTC](https://discuss.elastic.co/t/error-to-start-elastic-search/314771 "2022-09-21T01:06:26Z")
sudo journalctl -f --unit elasticsearch \<-- Logs begin at Tue 2022-09-20 06:33:24 EDT. -- Sep 20 07:11:10 localhost.localdomain systemd-entrypoint\[3613\]: at io.netty.util.concurrent.AbstractEventExecutor.safeExe… --- ## [Filebeat 8.4.1 slow](https://discuss.elastic.co/t/filebeat-8-4-1-slow/314783)
**Author:** [@rschwa2](https://discuss.elastic.co/u/rschwa2)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 2:23pm UTC](https://discuss.elastic.co/t/filebeat-8-4-1-slow/314783 "2022-09-20T14:23:41Z")
I upgraded elk to 8.4.1 recently, from 8.3.2. I noticed that filebeat is much slower reading our zeek logs. I configured filebeat to read from one zeek log (conn.log) and output to the console (redirected to /dev/null)… --- ## [Elasticsearch Integration - unavailable?](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315)
**Author:** [@Jack\_Judge2](https://discuss.elastic.co/u/Jack_Judge2)\ **Replies:** 9\ **Last updated:** [September 20, 2022, 11:34pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315 "2022-09-20T23:34:23Z")
Hi, I'm building a monitoring cluster built on an 8.1.1 stack and I noticed that the Elasticsearch integration for Agent isn't available but it is available on an older 7.17 stack. Elasticsearch integration docs This … --- ## [Fleet sever is automatically connected](https://discuss.elastic.co/t/fleet-sever-is-automatically-connected/314741)
**Author:** [@vikas-mishra](https://discuss.elastic.co/u/vikas-mishra)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 11:14pm UTC](https://discuss.elastic.co/t/fleet-sever-is-automatically-connected/314741 "2022-09-20T23:14:23Z")
Hi there, I am trying to set up my fleet server. On my kibana page it was showing fleet server is connected. Even though I' have changed the host is it still connecting to the old fleet server ? Any how by ignoring it… --- ## [How can I Filebeat multiple files that are radically different](https://discuss.elastic.co/t/how-can-i-filebeat-multiple-files-that-are-radically-different/314350)
**Author:** [@dimmthewitted1](https://discuss.elastic.co/u/dimmthewitted1)\ **Replies:** 5\ **Last updated:** [September 20, 2022, 10:43pm UTC](https://discuss.elastic.co/t/how-can-i-filebeat-multiple-files-that-are-radically-different/314350 "2022-09-20T22:43:45Z")
Is this community still active ? I want to ingest two files from my web server, the apache access logs and the modsecurity logs. The modsecurity logs I will have to setup some serious GROK filters. Filebeat and my in… --- ## [Cannot connect to the Elasticsearch cluster](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/314786)
**Author:** [@jjimenez](https://discuss.elastic.co/u/jjimenez)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 10:30pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/314786 "2022-09-20T22:30:11Z")
Hi Everyone, I new with Kibana and Elasticsearch, I have a trouble with Kibana, when the users open Kibana show the error "Cannot connect to the Elasticsearch cluster", I search the error in the log of elasticsearch and … --- ## [How to guarantee percentage of result in multi\_match search](https://discuss.elastic.co/t/how-to-guarantee-percentage-of-result-in-multi-match-search/314792)
**Author:** [@Guilherme\_Mello](https://discuss.elastic.co/u/Guilherme_Mello)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 10:28pm UTC](https://discuss.elastic.co/t/how-to-guarantee-percentage-of-result-in-multi-match-search/314792 "2022-09-20T22:28:31Z")
I have a search using multi\_match that returns products from multiple stores there is a business logic that i need to implement, which is: ensure that products from certain stores must appear on each pagination (30 ite… --- ## [JavaScript Client](https://discuss.elastic.co/t/javascript-client/314803)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 6:26pm UTC](https://discuss.elastic.co/t/javascript-client/314803 "2022-09-20T18:26:46Z")
Hi we have ELK on a server running 7.17.1 I am trying to use the JavaScript Client. I am following the instructions but I am getting this error Where buffer.constants is undefined in file 'webpack:///node\_modules/@e… --- ## [Table View not loading on Dashboard without manual "Refresh"](https://discuss.elastic.co/t/table-view-not-loading-on-dashboard-without-manual-refresh/313634)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 8:14pm UTC](https://discuss.elastic.co/t/table-view-not-loading-on-dashboard-without-manual-refresh/313634 "2022-09-20T20:14:12Z")
Strange Issue, not sure how to debug. We habe a dashboards with several elements. Everything works fine except the table views they either don't load like below or generate the message "aborted". The query complexity is … --- ## [Fields .keyword](https://discuss.elastic.co/t/fields-keyword/314800)
**Author:** [@Kaname\_Nishioka](https://discuss.elastic.co/u/Kaname_Nishioka)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 7:34pm UTC](https://discuss.elastic.co/t/fields-keyword/314800 "2022-09-20T19:34:27Z")
Hey guys, My first post in this community, I need reindex all my fields setting type to keyword, but when I do this, the field ".keyword" is removed and my dashboards is deployed using field ".keyword", Is it possible t… --- ## [Help - elastic integration](https://discuss.elastic.co/t/help-elastic-integration/314804)
**Author:** [@aperkins](https://discuss.elastic.co/u/aperkins)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 7:15pm UTC](https://discuss.elastic.co/t/help-elastic-integration/314804 "2022-09-20T19:15:56Z")
Hope I'm in the right place - yesterday I fumbled through installing the elastic stack, setup an agent, a fleet server (all on the same server) So far installed - Elasticsearch, Logstash, Kibana, Metricsbeat. I've got i… [Previous page](https://discuss.elastic.co/latest.md?page=958) [Next page](https://discuss.elastic.co/latest.md?page=960)