# Latest

**URL:** https://discuss.elastic.co/latest.md?page=992

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 993

---

## [Java High Level Rest Client - Mutli Search API Not working with Elasticsearch 8.3.2](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515)

<div class="topic-metadata">

**Author:** [@sheiks2m](https://discuss.elastic.co/u/sheiks2m)\
**Replies:** 4\
**Last updated:** [August 26, 2022, 9:15am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515 "2022-08-26T09:15:34Z")

</div>

HI, Im using Java High level rest client version 7.17.5. Multi Search API not working as expected. Please find the below code. SearchSourceBuilder metaDataSearch = new SearchSourceBuilder(); org.elasticsearch.a…

---

## [NPE using APM Agent 1.33.0](https://discuss.elastic.co/t/npe-using-apm-agent-1-33-0/312702)

<div class="topic-metadata">

**Author:** [@Nick\_Stolwijk](https://discuss.elastic.co/u/Nick_Stolwijk)\
**Replies:** 4\
**Last updated:** [August 26, 2022, 9:01am UTC](https://discuss.elastic.co/t/npe-using-apm-agent-1-33-0/312702 "2022-08-26T09:01:37Z")

</div>

We are getting NPE's with the Elastic APM Agent 1.33.0. APM Agent language and version: elastic-apm-agent-1.33.0.jar: OK INFO: Downloaded: elastic-apm-agent-1.33.0.jar INFO: Mount /init-seed found. APM copied to: /init…

---

## [Apache, Filebeat, Kibana 8.3.3](https://discuss.elastic.co/t/apache-filebeat-kibana-8-3-3/312696)

<div class="topic-metadata">

**Author:** [@Gunnar](https://discuss.elastic.co/u/Gunnar)\
**Replies:** 5\
**Last updated:** [August 26, 2022, 8:38am UTC](https://discuss.elastic.co/t/apache-filebeat-kibana-8-3-3/312696 "2022-08-26T08:38:26Z")

</div>

Hello, I'm new to Filebeat and Kibana. I'm having a strange issue, I'm sending apache logfiles to Elasticsearch using the apache module. On Kibana logfile shows like this: 13:06:23.462 www.xxx.de 185.191.171.22 - - \[23…

---

## [Can't remove deleted object from dashboard](https://discuss.elastic.co/t/cant-remove-deleted-object-from-dashboard/312927)

<div class="topic-metadata">

**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\
**Replies:** 2\
**Last updated:** [August 26, 2022, 8:17am UTC](https://discuss.elastic.co/t/cant-remove-deleted-object-from-dashboard/312927 "2022-08-26T08:17:44Z")

</div>

Dear All, I deleted a visualisation from the library which was used in a kibana dashboard. Unfortunately there is now an empty frame which can't be removed from the dashboard. Any ideas how to solve this issue without …

---

## [Can't restart kibana](https://discuss.elastic.co/t/cant-restart-kibana/312357)

<div class="topic-metadata">

**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\
**Replies:** 11\
**Last updated:** [August 26, 2022, 7:44am UTC](https://discuss.elastic.co/t/cant-restart-kibana/312357 "2022-08-26T07:44:22Z")

</div>

I've just started to learn elasticsearch and kibana yesterday, Today, when i try to restart kibana server, it's return me error: FATAL Error: Port 5601 is already in use. Another instance of Kibana may be running! Th…

---

## [How to identify specific users who are submitting slowlog queries?](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120)

<div class="topic-metadata">

**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\
**Replies:** 10\
**Last updated:** [August 26, 2022, 7:19am UTC](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120 "2022-08-26T07:19:50Z")

</div>

I'm trying to create a dashboard that can identify slow queries and the user who submitted them. Was wondering if there were any examples/guides I could follow online as I am a bit stumped on how to go about this (am a b…

---

## [Logstash -\> Elastic Timeouts](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 5\
**Last updated:** [August 26, 2022, 7:17am UTC](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713 "2022-08-26T07:17:13Z")

</div>

I have 2 logstash nodes with about 30 different pipelines sending data to a 6 node elastic cluster. For about half of my pipelines I am seeing a ton of errors like this in the /var/log/logstash/pipeline\_mypipeline.log fi…

---

## [Error while restore snapshot GCS](https://discuss.elastic.co/t/error-while-restore-snapshot-gcs/312968)

<div class="topic-metadata">

**Author:** [@Kiran\_Kumar\_Thungala](https://discuss.elastic.co/u/Kiran_Kumar_Thungala)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 9:29pm UTC](https://discuss.elastic.co/t/error-while-restore-snapshot-gcs/312968 "2022-08-25T21:29:09Z")

</div>

Hi, I'm struggle trying to restore an index from a snapshot which was taken by SLM. The steps I've following are: We have snapshots which was taken as per SLM, i am trying to restore one of the snapshot: "backup" : { …

---

## [Knowing when an event message get sent to pubsub](https://discuss.elastic.co/t/knowing-when-an-event-message-get-sent-to-pubsub/312987)

<div class="topic-metadata">

**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 4:14am UTC](https://discuss.elastic.co/t/knowing-when-an-event-message-get-sent-to-pubsub/312987 "2022-08-26T04:14:01Z")

</div>

I'm using this plugin to send kafka events to pubsub, I'm running to some issue where I need to know when the message arrived at logstash and when it was attempted to be delivered to pubsub. When I tried to enable log…

---

## [APM Dependencies tab is empty, but data present in Service map tab](https://discuss.elastic.co/t/apm-dependencies-tab-is-empty-but-data-present-in-service-map-tab/311233)

<div class="topic-metadata">

**Author:** [@Offout](https://discuss.elastic.co/u/Offout)\
**Replies:** 6\
**Last updated:** [August 26, 2022, 4:32am UTC](https://discuss.elastic.co/t/apm-dependencies-tab-is-empty-but-data-present-in-service-map-tab/311233 "2022-08-26T04:32:12Z")

</div>

Kibana version: 8.2.3 Elasticsearch version: 8.2.3 APM Server version: 8.2.3 APM Agent language and version: PHP 1.5.2 Browser version: Chrome 103, CLI Original install method (e.g. download page, yum, deb, fro…

---

## [Elasticsearch tableau connection error](https://discuss.elastic.co/t/elasticsearch-tableau-connection-error/312985)

<div class="topic-metadata">

**Author:** [@vnaresh66temp5](https://discuss.elastic.co/u/vnaresh66temp5)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 3:42am UTC](https://discuss.elastic.co/t/elasticsearch-tableau-connection-error/312985 "2022-08-26T03:42:41Z")

</div>

We are trying to connect to elasticsearch from tableau to do some BI stuff. We are planning to buy a platinum license. But before that, we would like to see how it works with tableau, elasticsearch I took a trail licens…

---

## [I'm getting jar hell when installing custom analyzer plugin](https://discuss.elastic.co/t/im-getting-jar-hell-when-installing-custom-analyzer-plugin/312978)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 2:46am UTC](https://discuss.elastic.co/t/im-getting-jar-hell-when-installing-custom-analyzer-plugin/312978 "2022-08-26T02:46:34Z")

</div>

The following error is occurring So I deleted the lib in elasticsearch/lib, but if I delete it, another error occurs If I try to delete it from the java project, a code compilation error occurs, what should I do? grad…

---

## [Elasticsearch Platinum license](https://discuss.elastic.co/t/elasticsearch-platinum-license/312983)

<div class="topic-metadata">

**Author:** [@vnaresh66temp5](https://discuss.elastic.co/u/vnaresh66temp5)\
**Replies:** 1\
**Last updated:** [August 26, 2022, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-platinum-license/312983 "2022-08-26T03:32:11Z")

</div>

I am planning to buy an elasticsearch platinum license. We have three working environments, Dev, Uat, Prod. If I buy one elasticsearch platinum license, is it enough to use the same license on three environments or shou…

---

## [I need help using elastic agent to collect and transform logs](https://discuss.elastic.co/t/i-need-help-using-elastic-agent-to-collect-and-transform-logs/312981)

<div class="topic-metadata">

**Author:** [@shshsh](https://discuss.elastic.co/u/shshsh)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 3:04am UTC](https://discuss.elastic.co/t/i-need-help-using-elastic-agent-to-collect-and-transform-logs/312981 "2022-08-26T03:04:15Z")

</div>

Hi, Im new to elasticsearch and its agents, and I'm having trouble understanding how to use the agents properly, especially ever since its trying to replace the beats family. I'm trying to use elastic agents managed by…

---

## [How is log4j-1.2.17 jar being installed on my system](https://discuss.elastic.co/t/how-is-log4j-1-2-17-jar-being-installed-on-my-system/312971)

<div class="topic-metadata">

**Author:** [@brilong](https://discuss.elastic.co/u/brilong)\
**Replies:** 1\
**Last updated:** [August 26, 2022, 1:10am UTC](https://discuss.elastic.co/t/how-is-log4j-1-2-17-jar-being-installed-on-my-system/312971 "2022-08-26T01:10:16Z")

</div>

I am not very familiar with logstash but I am trying to determine why the file /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-log4j-3.1.3-java/vendor/jar-dependencies/runtime-jars/log4j-1.2.17.jar exis…

---

## [Filebeat how to set a custom indice](https://discuss.elastic.co/t/filebeat-how-to-set-a-custom-indice/312969)

<div class="topic-metadata">

**Author:** [@dimmthewitted1](https://discuss.elastic.co/u/dimmthewitted1)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 11:13pm UTC](https://discuss.elastic.co/t/filebeat-how-to-set-a-custom-indice/312969 "2022-08-25T23:13:15Z")

</div>

I have never been more frustrated in a product than I am with the ELK stack. Its needlessly complicated, feels almost intentional as if to push people towards Fleet and Elastic Cloud. I have given up on the Apache inte…

---

## [How do I match a newline in logstash grok](https://discuss.elastic.co/t/how-do-i-match-a-newline-in-logstash-grok/311596)

<div class="topic-metadata">

**Author:** [@yts85205107](https://discuss.elastic.co/u/yts85205107)\
**Replies:** 5\
**Last updated:** [August 25, 2022, 10:50pm UTC](https://discuss.elastic.co/t/how-do-i-match-a-newline-in-logstash-grok/311596 "2022-08-25T22:50:48Z")

</div>

this is my log sample as below: \[2022-08-07T15:57:54+08:00\] 9.9.9.9 "Request-Method-URL: GET XXX Sex - Free Porn Videos on XXX.com" "Status-Code: 200" "Request-Length: 1" "Request-Time: 1.23" "Upstream-Server: 1.1.1.1:1…

---

## [Inventory Rule - Observability](https://discuss.elastic.co/t/inventory-rule-observability/312963)

<div class="topic-metadata">

**Author:** [@luccas-freitas](https://discuss.elastic.co/u/luccas-freitas)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 7:22pm UTC](https://discuss.elastic.co/t/inventory-rule-observability/312963 "2022-08-25T19:22:56Z")

</div>

I'm trying to create a Inventory Rule to monitor cpu usage on kubernetes. I configured an slack action to send me a message with {{context.group}} variable but I didn't find any rule variables that can get the deployment…

---

## [Script score vector search performance](https://discuss.elastic.co/t/script-score-vector-search-performance/312341)

<div class="topic-metadata">

**Author:** [@zyyme](https://discuss.elastic.co/u/zyyme)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 9:21pm UTC](https://discuss.elastic.co/t/script-score-vector-search-performance/312341 "2022-08-25T21:21:20Z")

</div>

Hello! I use Elasticsearch 7.14 and I have a mapping like this: { "mappings": { "properties": { "vector": { "type": "dense\_vector", "dims": 512 }, "category": { "type": "…

---

## [Elastic search match Query string query (blue OR red OR yellow) AND cake](https://discuss.elastic.co/t/elastic-search-match-query-string-query-blue-or-red-or-yellow-and-cake/312704)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 4\
**Last updated:** [August 25, 2022, 8:13pm UTC](https://discuss.elastic.co/t/elastic-search-match-query-string-query-blue-or-red-or-yellow-and-cake/312704 "2022-08-25T20:13:27Z")

</div>

Hi, I am trying to create a query to request all the "cake" with blue or red or yellow color, and I guess the condition similar to (blue OR red OR yellow) AND cake. And I have look at the Elasticsearch Query String q…

---

## [We need a currency type in Elastic String validators and converters to currencies of other countries. We must store currency values in the native country currency and we need field validators to remove currency formatting characters](https://discuss.elastic.co/t/we-need-a-currency-type-in-elastic-string-validators-and-converters-to-currencies-of-other-countries-we-must-store-currency-values-in-the-native-country-currency-and-we-need-field-validators-to-remove-currency-formatting-characters/312965)

<div class="topic-metadata">

**Author:** [@jmkdev](https://discuss.elastic.co/u/jmkdev)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 8:04pm UTC](https://discuss.elastic.co/t/we-need-a-currency-type-in-elastic-string-validators-and-converters-to-currencies-of-other-countries-we-must-store-currency-values-in-the-native-country-currency-and-we-need-field-validators-to-remove-currency-formatting-characters/312965 "2022-08-25T20:04:09Z")

</div>

Continuing the discussion from How to store currency datatype in elasticsearch?:

---

## [Search UI: how can I tell \<Facet\> to return all the options , not a subset with -more- button](https://discuss.elastic.co/t/search-ui-how-can-i-tell-facet-to-return-all-the-options-not-a-subset-with-more-button/312961)

<div class="topic-metadata">

**Author:** [@tonyfam](https://discuss.elastic.co/u/tonyfam)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 7:45pm UTC](https://discuss.elastic.co/t/search-ui-how-can-i-tell-facet-to-return-all-the-options-not-a-subset-with-more-button/312961 "2022-08-25T19:45:53Z")

</div>

Hello, We have set up a meta engine to webcrawl 12 sites. We use the url-host as the filter for our meta-engine, with 12 possible url-host sources, so that upon search, the user will see the url-host sources for the se…

---

## [LDAP configuration for elastic](https://discuss.elastic.co/t/ldap-configuration-for-elastic/312874)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 4\
**Last updated:** [August 25, 2022, 6:30pm UTC](https://discuss.elastic.co/t/ldap-configuration-for-elastic/312874 "2022-08-25T18:30:54Z")

</div>

Hi, I'm a bit new to security configurations that don't involve native realm. The case is that I would like to configure elasticsearch authentication with ldap and the configuration is not very clear about some things. …

---

## [Search in Discover](https://discuss.elastic.co/t/search-in-discover/312958)

<div class="topic-metadata">

**Author:** [@papilocheg1992](https://discuss.elastic.co/u/papilocheg1992)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 6:13pm UTC](https://discuss.elastic.co/t/search-in-discover/312958 "2022-08-25T18:13:46Z")

</div>

we have some value (word) that we want to find in an index with a large number of fields. How can this be done using the Kibana Discovery interface?

---

## [The filestream input](https://discuss.elastic.co/t/the-filestream-input/312948)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 1\
**Last updated:** [August 25, 2022, 6:07pm UTC](https://discuss.elastic.co/t/the-filestream-input/312948 "2022-08-25T18:07:35Z")

</div>

what's the role of the the filestream input ??? filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below are the input spe…

---

## [Failed to install template](https://discuss.elastic.co/t/failed-to-install-template/312949)

<div class="topic-metadata">

**Author:** [@Queren\_Santos](https://discuss.elastic.co/u/Queren_Santos)\
**Replies:** 1\
**Last updated:** [August 25, 2022, 5:58pm UTC](https://discuss.elastic.co/t/failed-to-install-template/312949 "2022-08-25T17:58:07Z")

</div>

Can anyone help? My template in Elasticsearch is ready, but Logstash does not send the index to which it is already created: ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Failed to install template {:message=\>"Got respon…

---

## [Metricbeat http module cant parse query key with period in it](https://discuss.elastic.co/t/metricbeat-http-module-cant-parse-query-key-with-period-in-it/312540)

<div class="topic-metadata">

**Author:** [@Nimar\_Arora](https://discuss.elastic.co/u/Nimar_Arora)\
**Replies:** 13\
**Last updated:** [August 25, 2022, 5:30pm UTC](https://discuss.elastic.co/t/metricbeat-http-module-cant-parse-query-key-with-period-in-it/312540 "2022-08-25T17:30:48Z")

</div>

query key-values such as resource.kafka.id: XXXX are being encoded as resource=map%5Bkafka%3Amap%5Bid%3AXXXX%5D%5D instead of resource.kafka.id=XXXX This is my metricbeat http module configuration: - module: http met…

---

## [Logstash only logs the word 'log' on completion](https://discuss.elastic.co/t/logstash-only-logs-the-word-log-on-completion/312916)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 3\
**Last updated:** [August 25, 2022, 5:03pm UTC](https://discuss.elastic.co/t/logstash-only-logs-the-word-log-on-completion/312916 "2022-08-25T17:03:14Z")

</div>

I am using the following input configurations for deleting the files once read and log the information. input { file { path =\> "C:/.log" mode =\> "read" file\_completed\_action =\> "log\_and\_delete" file\_co…

---

## [Invalid Index Name Exception](https://discuss.elastic.co/t/invalid-index-name-exception/312908)

<div class="topic-metadata">

**Author:** [@hnf](https://discuss.elastic.co/u/hnf)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 4:42pm UTC](https://discuss.elastic.co/t/invalid-index-name-exception/312908 "2022-08-25T16:42:29Z")

</div>

Hello everyone, I have an issue when I try to make an index a field created using add\_field by referencing them when outputing. I create three .conf files that begin by a number , like 1file.conf, 2file.conf and 99outp…

---

## [GPG key fails to import for filebeat on Centos9](https://discuss.elastic.co/t/gpg-key-fails-to-import-for-filebeat-on-centos9/312946)

<div class="topic-metadata">

**Author:** [@sbradley](https://discuss.elastic.co/u/sbradley)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 4:28pm UTC](https://discuss.elastic.co/t/gpg-key-fails-to-import-for-filebeat-on-centos9/312946 "2022-08-25T16:28:50Z")

</div>

Following the instructions here Repositories for APT and YUM | Filebeat Reference \[8.4\] | Elastic I attempt to import the GPG key and receive the following error: error: https://packages.elastic.co/GPG-KEY-elasticsearc…

[Previous page](https://discuss.elastic.co/latest.md?page=991)

[Next page](https://discuss.elastic.co/latest.md?page=993)
