# Latest **URL:** https://discuss.elastic.co/latest.md?page=978 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 979 --- ## [Reindex to data streams](https://discuss.elastic.co/t/reindex-to-data-streams/313818)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 6:51pm UTC](https://discuss.elastic.co/t/reindex-to-data-streams/313818 "2022-09-06T18:51:41Z")
I'm using the following to reindex to a data stream, although it completes right way... The source index has 262394 documents. POST \_reindex { "source": { "index": "syslog-prod-2021.09.07" }, "dest": { "in… --- ## [Ruby filter to check fields dynamically](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 9\ **Last updated:** [September 6, 2022, 6:42pm UTC](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709 "2022-09-06T18:42:30Z")
Hie All, From the following logs I want to check on condition HasErrorState = true and drop the entire event. Data field will be single entry and in that we have multiple entries for Scales. "Data": \[ { … --- ## [Cannot able to send data from Jaeger to Elastic APM with APM secret token](https://discuss.elastic.co/t/cannot-able-to-send-data-from-jaeger-to-elastic-apm-with-apm-secret-token/313808)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 5:42pm UTC](https://discuss.elastic.co/t/cannot-able-to-send-data-from-jaeger-to-elastic-apm-with-apm-secret-token/313808 "2022-09-06T17:42:32Z")
Hi Team, We are trying to send the data from jaeger to Elastic APM using the jaeger agent. We are trying as per the elastic documentation. We are using below config. args: - --reporter.grpc.host-port=\ **Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/logstash-not-starting/313807 "2022-09-06T16:41:58Z") I just installed logstash 8.4.1 on an Ubuntu VM. When i start the service It doesn't start and keep throwing this error. Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-09-06T14:56:04,394\]\[INFO \]… --- ## [Parsing error on Metricbeat 8.3 with HAProxy 1.5](https://discuss.elastic.co/t/parsing-error-on-metricbeat-8-3-with-haproxy-1-5/313202)
**Author:** [@shim1st](https://discuss.elastic.co/u/shim1st)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 4:27pm UTC](https://discuss.elastic.co/t/parsing-error-on-metricbeat-8-3-with-haproxy-1-5/313202 "2022-09-06T16:27:30Z")
I installed Metricbeat 8.3 on CentOS and enabled HAProxy. Error occured like below. {"log.level":"debug","@timestamp":"2022-08-29T17:12:03.771+0900","log.logger":"processors","log.origin":{"file.name":"processing/proce… --- ## [Visualize Library - Tools - Controls have wrong fields in filter section](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382)
**Author:** [@Wojciech\_Kwiecien](https://discuss.elastic.co/u/Wojciech_Kwiecien)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382 "2022-09-06T16:24:22Z")
Hello everyone. I tried to add some filterthe s into visualization section and like you the see on screen I selecthe ted in controls panel on the right side Index patter apm-\*-transaction and I tried to add in filter ur… --- ## [Change Name in Stack Monitoring](https://discuss.elastic.co/t/change-name-in-stack-monitoring/312896)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/change-name-in-stack-monitoring/312896 "2022-09-06T16:24:14Z")
By default, beats which are sending monitoring data to a dedicated monitoring cluster (by setting 'monitoring.elasticsearch.monitoring.enabled: true') are showing up in Kibana Stack Monitoring with their hostname without… --- ## [Elastic Java Client: Problem with GeoPointProperty - unknown field 'index'](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799)
**Author:** [@CodingMax](https://discuss.elastic.co/u/CodingMax)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:36pm UTC](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799 "2022-09-06T15:36:25Z")
Hi, according the Documentation I can use the parameter index for the field-type geo\_point. I use the Java-Client in Version 8.3.3 and a mapping like this (only a snippet): "location": { "type": "geo\_point", "inde… --- ## [Shrink shard max recommended size?](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806)
**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 4:07pm UTC](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806 "2022-09-06T16:07:56Z")
Is there a max recommended size for shrunk shards? We are on a 7.17.4 ES cluster with 10 data nodes and large volumes. We have one index that's kinda busy so we have an index template that defines 10/1 shards/replicas.… --- ## [My exec input plugin does not compatible with ecs](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718 "2022-09-06T16:03:15Z")
Hi, I am trying to learn ow to use ecs schema within logstash. I use logstash 7.10.0 and input plugin I want to use in my logstash config file is "exec input". I am trying to just follow the documentation guideline htt… --- ## [Hot\_threads per interpretation](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 3:57pm UTC](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809 "2022-09-06T15:57:36Z")
Hello, I would like to know how to read the hot threads information for a particular node and track the operations that cause high CPU usage. Below is a sample: {field1}{field2}{field3}{IP1}{IP2:port}{di}{rack\_ud=1, ra… --- ## [Probleme de limite temporelle / Kibana](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 13\ **Last updated:** [September 6, 2022, 3:47pm UTC](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560 "2022-09-06T15:47:12Z")
Bonjour, Je me tourne vers vous car j'ai un pb avec l'affichage de données. J'ai un corpus de données injectées correctement qui vont de 1997 à 2022 (le doc count indique 289000). Lorsque je souhaite faire un graphique … --- ## [L2 & L3 SW Integration](https://discuss.elastic.co/t/l2-l3-sw-integration/313472)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:44pm UTC](https://discuss.elastic.co/t/l2-l3-sw-integration/313472 "2022-09-06T15:44:05Z")
Dear All, I'm new to the community and I have a small question also. how do integrate L2 and L3 switches to elasticsearch to monitor via kibana? Looking for your answers. Thanks --- ## [Custom Logo for Kibana 8.3.3 - Guide](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 9:38am UTC](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894 "2022-08-25T09:38:34Z")
I would like to change the header logo in Kibana 8.3.3. :innocent: Change Header Logo and Text Change loading Text and Logo Change login page logo and text Change Page Title I have achieved it by editing f… --- ## [Histogram in kibana](https://discuss.elastic.co/t/histogram-in-kibana/313436)
**Author:** [@Matanueces](https://discuss.elastic.co/u/Matanueces)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 2:55pm UTC](https://discuss.elastic.co/t/histogram-in-kibana/313436 "2022-09-06T14:55:05Z")
Hello, I'm trying to create a visualization of a histogram in kibana from the following data: Discover: The field that contains the data for the histogram is "current\_hist" If I do a query with the devtools, they … --- ## [Issues with new search query](https://discuss.elastic.co/t/issues-with-new-search-query/313804)
**Author:** [@rzaal](https://discuss.elastic.co/u/rzaal)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 2:21pm UTC](https://discuss.elastic.co/t/issues-with-new-search-query/313804 "2022-09-06T14:21:38Z")
Hi i have recently been busy reworking our old and outdated ES now um running 8.4 and im trying to create a similar query to what i had in the old one. But i have a hard time finding examples or the right documentation T… --- ## [Error with paging large result set using SQL Server](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483)
**Author:** [@manuel.urbano](https://discuss.elastic.co/u/manuel.urbano)\ **Replies:** 7\ **Last updated:** [September 6, 2022, 1:27pm UTC](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483 "2022-09-06T13:27:59Z")
Hello everyone! I'm trying to import a data set with more than 4 million rows from my database in SQL Server. I followed the advice here Jdbc input plugin | Logstash Reference \[8.4\] | Elastic and set jdbc\_fetch\_size wi… --- ## [Kibana not loading through Iframe on Raspberry PI, but runs in separate tab](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871)
**Author:** [@Mathias\_Christian\_Cl](https://discuss.elastic.co/u/Mathias_Christian_Cl)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 1:09pm UTC](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871 "2022-09-06T13:09:04Z")
Hi, We are running Kibana through reverse proxy to provide password-less access through our web gui. However we have experienced on some of our Raspberry PIs that Kibana is loading forever, and when it is supposed to sh… --- ## [Cant access kibana over https](https://discuss.elastic.co/t/cant-access-kibana-over-https/312924)
**Author:** [@cihady](https://discuss.elastic.co/u/cihady)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 12:58pm UTC](https://discuss.elastic.co/t/cant-access-kibana-over-https/312924 "2022-09-06T12:58:36Z")
I am using docker-compose file below. I believe, I set all the necessary options for https but when I try to connect kibana over https I cant reach but I can over http. Do you have any idea, What is wrong with my config… --- ## [Kibana alert type Metric threshold add fields index to body Email](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777)
**Author:** [@jorge\_Flores\_Machuca](https://discuss.elastic.co/u/jorge_Flores_Machuca)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 12:48pm UTC](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777 "2022-09-06T12:48:59Z")
Hello everyone, how can I take fields from the metricbeat index and add them to the body of my email, as shown in the example on the green line? this my rule and this my definition email if you could guide me tha… --- ## [Disable system module](https://discuss.elastic.co/t/disable-system-module/313790)
**Author:** [@maheshmotukuri](https://discuss.elastic.co/u/maheshmotukuri)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 12:15pm UTC](https://discuss.elastic.co/t/disable-system-module/313790 "2022-09-06T12:15:33Z")
I'm running metricbeat in container Run Metricbeat on Docker | Metricbeat Reference \[8.4\] | Elastic but don't have any idea how to disable systems module or any other module ? tried to disable in metricbeat.yaml metr… --- ## [Parsing advise](https://discuss.elastic.co/t/parsing-advise/313712)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 12:21pm UTC](https://discuss.elastic.co/t/parsing-advise/313712 "2022-09-06T12:21:38Z")
Hello All, How can I parse the below message? The below events are sent over syslog, and the output is sent to Sentinel. I tried to use the KV filter but its failing, as part of parsing, I should also extract the usern… --- ## [Is there a time limit for Filebeat or Logstash to attempt to retransmit?](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 5\ **Last updated:** [September 6, 2022, 12:19pm UTC](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721 "2022-09-06T12:19:30Z")
I am using Filebeat, Logstash, and Elasticsearch to collect logs. I have received a query that some logs are not being captured by Elasticsearch. Is it possible to lose logs in this ELK server configuration? For examp… --- ## [Is there a way to create scheduled slack text reports from Kibana?](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788)
**Author:** [@KappaRossa](https://discuss.elastic.co/u/KappaRossa)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:46am UTC](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788 "2022-09-06T11:46:41Z")
I would like to create a daily Kibana table report in a dedicated Slack channel. E.g. Every day, at 10:00 AM I would like a text report on basic information from Kibana visualizations to trigger and say something between… --- ## [Data migration: ClickHouse to Elasticsearch, Any connectors](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784)
**Author:** [@bilal\_abdu](https://discuss.elastic.co/u/bilal_abdu)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:20am UTC](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784 "2022-09-06T11:20:32Z")
Hi All, Do we have connector for data migration from ClickHouse to Elastic Search. --- ## [Popular Fields](https://discuss.elastic.co/t/popular-fields/312827)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 10:05am UTC](https://discuss.elastic.co/t/popular-fields/312827 "2022-09-06T10:05:36Z")
Hello Community, there are Popular fields collected out from the Available Fields on the left-hand side of Discover in Kibana. The customer wants them to be adjusted to each user as well as to each data view. Therefore… --- ## [What is the Watcher's logs location?](https://discuss.elastic.co/t/what-is-the-watchers-logs-location/313776)
**Author:** [@Dr.Antarctica](https://discuss.elastic.co/u/Dr.Antarctica)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 10:02am UTC](https://discuss.elastic.co/t/what-is-the-watchers-logs-location/313776 "2022-09-06T10:02:24Z")
Hi, I'm using Watchers on Kibana to alert me via e-mail. I tried to add the logging action, but can't find where the messages are logged. Do I need to do anything else to access them? I can find the Watcher's audit log… --- ## [Can't set up index lifecycle correctly](https://discuss.elastic.co/t/cant-set-up-index-lifecycle-correctly/313768)
**Author:** [@fetchbak](https://discuss.elastic.co/u/fetchbak)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 8:47am UTC](https://discuss.elastic.co/t/cant-set-up-index-lifecycle-correctly/313768 "2022-09-06T08:47:48Z")
Hi there! I'm trying to set up the lifecycle of my indexes and I'm getting the following error: "Index lifecycle error illegal\_argument\_exception: index.lifecycle.rollover\_alias \[test-alias\] does not point to index \[t… --- ## [Filter JSON message in kibana](https://discuss.elastic.co/t/filter-json-message-in-kibana/312535)
**Author:** [@imkinnu](https://discuss.elastic.co/u/imkinnu)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 9:41am UTC](https://discuss.elastic.co/t/filter-json-message-in-kibana/312535 "2022-09-06T09:41:16Z")
Hi, My JSON file looks like this. I want a filter on Kibana for the JSON object I am passing through logstash. For example { "\_index": "mule-logs", "\_type": "\_doc", "\_id": "S\_gavoIBvzaqpVvKmITM", "\_score": 1, … --- ## [Transferring documents from different ES servers](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:38am UTC](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773 "2022-09-06T09:38:42Z")
I'm trying to transfer some documents from a source server to a destination server. Both have the same settings, and indices associated to those documents. The documents have an object data field, that inherits from an … [Previous page](https://discuss.elastic.co/latest.md?page=977) [Next page](https://discuss.elastic.co/latest.md?page=979)