# Latest

**URL:** https://discuss.elastic.co/latest.md?page=976

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 977

---

## [Need to get documents with field have length \> 200 words](https://discuss.elastic.co/t/need-to-get-documents-with-field-have-length-200-words/312432)

<div class="topic-metadata">

**Author:** [@mani7](https://discuss.elastic.co/u/mani7)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 3:04pm UTC](https://discuss.elastic.co/t/need-to-get-documents-with-field-have-length-200-words/312432 "2022-09-07T15:04:01Z")

</div>

Trying to find the documents having field values lenght \> 200 characters

---

## [Elasticsearch no longer boots](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452)

<div class="topic-metadata">

**Author:** [@dw5304](https://discuss.elastic.co/u/dw5304)\
**Replies:** 10\
**Last updated:** [September 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452 "2022-09-07T14:55:24Z")

</div>

came in this morning to find a non working bootable version of elasticsearch. \[2022-09-01T14:02:06,208\]\[ERROR\]\[o.e.b.Elasticsearch \] \[redacted\] fatal exception while booting Elasticsearch java.lang.IllegalArgumentE…

---

## [Fleet Server - Duplicate key](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896)

<div class="topic-metadata">

**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 2:31pm UTC](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896 "2022-09-07T14:31:09Z")

</div>

Hello everyone, I recently configured Fleet Server on my stack. During the configuration I selected Production and entered my keys (Wildcard Certificates). These are the same ones I used for transport and have obvious…

---

## [Does FIPS 140-2 Mode Work on Kubernetes?](https://discuss.elastic.co/t/does-fips-140-2-mode-work-on-kubernetes/254417)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 5\
**Last updated:** [September 7, 2022, 2:25pm UTC](https://discuss.elastic.co/t/does-fips-140-2-mode-work-on-kubernetes/254417 "2022-09-07T14:25:06Z")

</div>

Hi All, I was looking into FIPS 140-2 mode support on Kubernetes with Elastic's k8s operator, however, I didn't see any mention of FIPS 140-2 at all within the docs. Is this something that is supported? If it is does it…

---

## [How to use multiple operators in EQL (Event query language)?](https://discuss.elastic.co/t/how-to-use-multiple-operators-in-eql-event-query-language/313852)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 7:09am UTC](https://discuss.elastic.co/t/how-to-use-multiple-operators-in-eql-event-query-language/313852 "2022-09-07T07:09:31Z")

</div>

Hi, I was wondering how to use multiple operators using EQL (Event Query Language). My EQL query is : any where office\_hours == false and winlog.event\_id == 4624 or winlog.event\_id == 4625 I would like to add parenth…

---

## [Facing issues in Metric format to replicate query from Grafana to KIBANA](https://discuss.elastic.co/t/facing-issues-in-metric-format-to-replicate-query-from-grafana-to-kibana/313892)

<div class="topic-metadata">

**Author:** [@ISHIKA](https://discuss.elastic.co/u/ISHIKA)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 2:02pm UTC](https://discuss.elastic.co/t/facing-issues-in-metric-format-to-replicate-query-from-grafana-to-kibana/313892 "2022-09-07T14:02:44Z")

</div>

Hello, I am trying to replicate the below query from prometheus GRFANA to KIBANA. I am not able to get same results, not even close. sum(node\_namespace\_pod\_container:container\_cpu\_usage\_seconds\_total:sum\_irate{namespa…

---

## [Is it Better to use Elastic UI with other framework?](https://discuss.elastic.co/t/is-it-better-to-use-elastic-ui-with-other-framework/313846)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 1:55pm UTC](https://discuss.elastic.co/t/is-it-better-to-use-elastic-ui-with-other-framework/313846 "2022-09-07T13:55:39Z")

</div>

Can I use Elastic UI with other Technology like Django? or with any other backends it's Says Elastic UI The framework powering the Elastic Stack I have been wondering if I could use it with Django or Node etc

---

## [Options List Control Ignores Filters and Queries](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 7\
**Last updated:** [September 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962 "2022-09-07T13:52:44Z")

</div>

The Controls visualization has now been available for quite some time, but it is still being noted as a technical preview. Is there any plan to move this to GA? Since it was first introduced, it seems the Options List co…

---

## [Lifecycle delete phase question](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876)

<div class="topic-metadata">

**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\
**Replies:** 3\
**Last updated:** [September 7, 2022, 1:22pm UTC](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876 "2022-09-07T13:22:11Z")

</div>

Hi all, I want to make a lifecycle policy to my index I want the conditions are delete after 15days or 25gb but in delete phase it only allows me delete after n days not by n gb too Is there some way to make that? (w…

---

## [ElasticClient.DeleteByQueryAsync method is not waiting as per given Timeout](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926)

<div class="topic-metadata">

**Author:** [@ManElastic\_MakSearch](https://discuss.elastic.co/u/ManElastic_MakSearch)\
**Replies:** 2\
**Last updated:** [September 7, 2022, 12:57pm UTC](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926 "2022-09-07T12:57:09Z")

</div>

I am using Nest version 7.11.1. I am trying to use DeleteByQueryAsync method of ElasticClient. Below is the code I am trying to make working. var settings = await GetConnectionSettings("XYZTenant"); //// This method set…

---

## [Unable to change query paramters in rally](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711)

<div class="topic-metadata">

**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\
**Replies:** 6\
**Last updated:** [September 7, 2022, 12:47pm UTC](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711 "2022-09-07T12:47:41Z")

</div>

Hi there, I am generating my own queries for a benchmark, my py code looks like this (adapted from some github repos I found): class QueryParamSource: def \_\_init\_\_(self, track, params, \*\*kwargs): ... def…

---

## [Inconsistent Term and Terms query resolution in filter context](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884)

<div class="topic-metadata">

**Author:** [@robertasg](https://discuss.elastic.co/u/robertasg)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 12:45pm UTC](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884 "2022-09-07T12:45:53Z")

</div>

According to Elasticsearch docs it says that TermsQuery is the same as a TermQuery but can be operate with multiple values. The terms query is the same as the term query, except you can search for multiple values. Ho…

---

## [Monitoring Elastic License On Prometheus](https://discuss.elastic.co/t/monitoring-elastic-license-on-prometheus/313870)

<div class="topic-metadata">

**Author:** [@takshika\_jambhule](https://discuss.elastic.co/u/takshika_jambhule)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 12:34pm UTC](https://discuss.elastic.co/t/monitoring-elastic-license-on-prometheus/313870 "2022-09-07T12:34:50Z")

</div>

I have installed elasticsearch\_exporter on my elastic boxes to set up alerts and monitoring on Prometheus.(GitHub - prometheus-community/elasticsearch\_exporter: Elasticsearch stats exporter for Prometheus) However, elast…

---

## [How to implement query termsAgregation to get the documents for each of the buckets that the query generates. I am using java spring boot](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883)

<div class="topic-metadata">

**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883 "2022-09-07T12:31:05Z")

</div>

Hi, I am trying to get each of the elements that the elasticsearch group by generates. What I get now is the key and the amount of elements for each of the buckets, my interest is to get each of those elements that conta…

---

## [Use case Kibana Alerts vs Watcher](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844)

<div class="topic-metadata">

**Author:** [@vwong](https://discuss.elastic.co/u/vwong)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844 "2022-09-07T12:29:06Z")

</div>

Hi, As I read from document, Kibana Alerts and watcher are both used to detect conditions and can trigger actions in response. As they offer similar function, would there use cases that can share for using either one o…

---

## [Error establishing direct connection to mongo node Error output: no reachable servers](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395)

<div class="topic-metadata">

**Author:** [@Asher\_Manangan](https://discuss.elastic.co/u/Asher_Manangan)\
**Replies:** 6\
**Last updated:** [September 7, 2022, 12:09pm UTC](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395 "2022-09-07T12:09:00Z")

</div>

Hi, Here is the log: Error establishing direct connection to mongo node at \[127.0.0.1:27017\]. Error output: no reachable servers I tried a lot of things, but after so many days, I can't find it work. Here is my mong…

---

## [Kibana Canvas](https://discuss.elastic.co/t/kibana-canvas/313786)

<div class="topic-metadata">

**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\
**Replies:** 8\
**Last updated:** [September 7, 2022, 11:59am UTC](https://discuss.elastic.co/t/kibana-canvas/313786 "2022-09-07T11:59:49Z")

</div>

Hello, I have a dashboard with a Pie, including some filters to specify the Slices of the pie. I want to build the Pie in canvas, but I don't know how. Can someone guide me a little bit, with some hints....how to get t…

---

## [ISSUE WITH INSTALATION KIBANA IN CENTOS](https://discuss.elastic.co/t/issue-with-instalation-kibana-in-centos/312451)

<div class="topic-metadata">

**Author:** [@andres07](https://discuss.elastic.co/u/andres07)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 11:59am UTC](https://discuss.elastic.co/t/issue-with-instalation-kibana-in-centos/312451 "2022-09-07T11:59:23Z")

</div>

Hi, I am trying to install Kibana on a centos server so that I can collect logs from different machines. On my server and installed kibana, elasticsearch and logstash. All these agents are working, but I am not able to…

---

## [Copy paste Kibana settings to multiple clusters](https://discuss.elastic.co/t/copy-paste-kibana-settings-to-multiple-clusters/313464)

<div class="topic-metadata">

**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 11:49am UTC](https://discuss.elastic.co/t/copy-paste-kibana-settings-to-multiple-clusters/313464 "2022-09-07T11:49:53Z")

</div>

We are running several elasticsearch/kibana clusters, with some modifications to the "advanced settings" in kibana Is there a way that we can automatically sync/propagate settings from one instance to another, to avoid …

---

## [Django syncs to ElasticSearch even when logstash container is removed?](https://discuss.elastic.co/t/django-syncs-to-elasticsearch-even-when-logstash-container-is-removed/313878)

<div class="topic-metadata">

**Author:** [@scheung38](https://discuss.elastic.co/u/scheung38)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 11:29am UTC](https://discuss.elastic.co/t/django-syncs-to-elasticsearch-even-when-logstash-container-is-removed/313878 "2022-09-07T11:29:27Z")

</div>

What is the reason behind Django data updated to Elasticsearch when logstash container is removed? Initially checked no index here - (empty) http://localhost:5601/app/management/data/index\_management/indices docker ki…

---

## [Add profile option for fleet server host URL in fleet server settings](https://discuss.elastic.co/t/add-profile-option-for-fleet-server-host-url-in-fleet-server-settings/313874)

<div class="topic-metadata">

**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 10:47am UTC](https://discuss.elastic.co/t/add-profile-option-for-fleet-server-host-url-in-fleet-server-settings/313874 "2022-09-07T10:47:59Z")

</div>

Alike to the outputs profiles for Elasticsearch/Logstash and the Agent Binary Download that you now can specify in Agent policy settings, it would be very useful to also be able to do that for the Fleet server hosts part…

---

## [How can I dynamically create elasticsearch indices using logtsash using jdbc?](https://discuss.elastic.co/t/how-can-i-dynamically-create-elasticsearch-indices-using-logtsash-using-jdbc/313873)

<div class="topic-metadata">

**Author:** [@shantam\_saxena](https://discuss.elastic.co/u/shantam_saxena)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 10:21am UTC](https://discuss.elastic.co/t/how-can-i-dynamically-create-elasticsearch-indices-using-logtsash-using-jdbc/313873 "2022-09-07T10:21:43Z")

</div>

I have a table in snowflake for which I have a target column. The target column has 20 distinct values and will increase with time. My intention is to use logstash to create separate indices for all the unique values in …

---

## [Log alerting: trigger alert when specific log string has not been logged on specific time](https://discuss.elastic.co/t/log-alerting-trigger-alert-when-specific-log-string-has-not-been-logged-on-specific-time/313868)

<div class="topic-metadata">

**Author:** [@Remco1985](https://discuss.elastic.co/u/Remco1985)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 9:49am UTC](https://discuss.elastic.co/t/log-alerting-trigger-alert-when-specific-log-string-has-not-been-logged-on-specific-time/313868 "2022-09-07T09:49:50Z")

</div>

Hello everbody, Hopefully somebody can help me out. For specific monitoring purposes i'm trying to achieve the following: We curruntly running ELK v 7.13.2 in our environment. We have a specific application server in w…

---

## [Query regarding scoring of ES8. 2](https://discuss.elastic.co/t/query-regarding-scoring-of-es8-2/312687)

<div class="topic-metadata">

**Author:** [@sajeeda](https://discuss.elastic.co/u/sajeeda)\
**Replies:** 3\
**Last updated:** [September 7, 2022, 9:10am UTC](https://discuss.elastic.co/t/query-regarding-scoring-of-es8-2/312687 "2022-09-07T09:10:54Z")

</div>

Hi All, I am trying to upgrade from ES6.3 to ES8.2. I am new to Elasticsearch and wanted to understand how the scoring is done on text search in both the versions. scores and the result set is all different when compa…

---

## [Connect Confluence 7.13.x, with Workplace Search 8.3 using out of the box connector](https://discuss.elastic.co/t/connect-confluence-7-13-x-with-workplace-search-8-3-using-out-of-the-box-connector/312822)

<div class="topic-metadata">

**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\
**Replies:** 8\
**Last updated:** [September 7, 2022, 9:09am UTC](https://discuss.elastic.co/t/connect-confluence-7-13-x-with-workplace-search-8-3-using-out-of-the-box-connector/312822 "2022-09-07T09:09:17Z")

</div>

I'm following the steps here and it says you need a consumer key and public key from Workplace search. Where do I get this in Workplace search. The only thing i could find is an api key and that didn't work. Thanks. …

---

## [Find the number of search requests per day hitting ES Cluster](https://discuss.elastic.co/t/find-the-number-of-search-requests-per-day-hitting-es-cluster/313865)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 8:57am UTC](https://discuss.elastic.co/t/find-the-number-of-search-requests-per-day-hitting-es-cluster/313865 "2022-09-07T08:57:52Z")

</div>

Is there a way to know the (average) number of search requests per day hitting the Elasticsearch cluster? If my ES cluster contains day-wise indices and I want find the no of search requests that hit ES cluster in last …

---

## [Sorting by date in log stream](https://discuss.elastic.co/t/sorting-by-date-in-log-stream/313339)

<div class="topic-metadata">

**Author:** [@conor\_c](https://discuss.elastic.co/u/conor_c)\
**Replies:** 4\
**Last updated:** [September 7, 2022, 8:55am UTC](https://discuss.elastic.co/t/sorting-by-date-in-log-stream/313339 "2022-09-07T08:55:48Z")

</div>

Hi All, I've been searching and searching for a solution, but I've not managed to find any relevant answers. I suspect I am looking in the wrong place or have misunderstood how some of the ELK stack tools are connected. …

---

## [Auto\_expand\_replicas not working on enrich index](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569)

<div class="topic-metadata">

**Author:** [@ddolcimascolo](https://discuss.elastic.co/u/ddolcimascolo)\
**Replies:** 31\
**Last updated:** [September 7, 2022, 8:38am UTC](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569 "2022-09-07T08:38:03Z")

</div>

Hi guys, Our enrich indices are not replicated on our production cluster, and I don't understand why... Can you help to troubleshoot the issue? Context ES 7.17.1 3 Nodes Many various data indices Many ingest pipeline…

---

## [Elastic-agent cloudflare logpull and problem with using processors for filter events](https://discuss.elastic.co/t/elastic-agent-cloudflare-logpull-and-problem-with-using-processors-for-filter-events/312069)

<div class="topic-metadata">

**Author:** [@slast](https://discuss.elastic.co/u/slast)\
**Replies:** 1\
**Last updated:** [August 15, 2022, 10:43am UTC](https://discuss.elastic.co/t/elastic-agent-cloudflare-logpull-and-problem-with-using-processors-for-filter-events/312069 "2022-08-15T10:43:46Z")

</div>

Hi Everyone I have a problem with elastic-agent( ver 7.17.4) that we are using to collect logs from cloudflare. I want to drop some events by using processors in "Edit Cloudflare integration" - but nothing is work. …

---

## [Kibana TSVB to filter out aggregated result](https://discuss.elastic.co/t/kibana-tsvb-to-filter-out-aggregated-result/313859)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 8:01am UTC](https://discuss.elastic.co/t/kibana-tsvb-to-filter-out-aggregated-result/313859 "2022-09-07T08:01:43Z")

</div>

Anyone knows how to filter tsvb aggregated result? In my example below, I used 3 aggregations then grouped by Cluster, to capture the remaining memory % avg (MemoryUsageGB) avg(MemoryTotalGB) bucket script to get the …

[Previous page](https://discuss.elastic.co/latest.md?page=975)

[Next page](https://discuss.elastic.co/latest.md?page=977)
