# Latest **URL:** https://discuss.elastic.co/latest.md?page=999 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1000 --- ## [Syntax for running async search in PHP client?](https://discuss.elastic.co/t/syntax-for-running-async-search-in-php-client/312464)
**Author:** [@me24](https://discuss.elastic.co/u/me24)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 11:40am UTC](https://discuss.elastic.co/t/syntax-for-running-async-search-in-php-client/312464 "2022-08-22T11:40:14Z")
Hi, I'm trying to fire multiple search requests in parallel (same input but different queries) to save on execution time - running them in series seems wasteful. I'm using PHP 7.4 and ES 7.5.2 at the moment, running "re… --- ## [Super-long wildcard query (must be a better way!)](https://discuss.elastic.co/t/super-long-wildcard-query-must-be-a-better-way/312605)
**Author:** [@Richie\_Jarvis](https://discuss.elastic.co/u/Richie_Jarvis)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 11:35am UTC](https://discuss.elastic.co/t/super-long-wildcard-query-must-be-a-better-way/312605 "2022-08-22T11:35:41Z")
Hi All, I am playing with some flight data at the moment, and wanted to view the Eastbourne Airshow data I have captured with my aerial & dump1090 integration. To this end, I want to exclude all commercial flights from… --- ## [Nodes disconnected randomly](https://discuss.elastic.co/t/nodes-disconnected-randomly/312599)
**Author:** [@c48105fb5be692da920e](https://discuss.elastic.co/u/c48105fb5be692da920e)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 10:31am UTC](https://discuss.elastic.co/t/nodes-disconnected-randomly/312599 "2022-08-22T10:31:26Z")
I'm running Elasticsearch cluster (7.10.2) with 8 nodes of cluster (3 master, 3 data, and 2 client node). It was running smoothly till now , now the nodes began to disconnect from the cluster one node at a day , when I… --- ## [Index template shows a policy that doesn't exist](https://discuss.elastic.co/t/index-template-shows-a-policy-that-doesnt-exist/312598)
**Author:** [@salmuhammady](https://discuss.elastic.co/u/salmuhammady)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 10:24am UTC](https://discuss.elastic.co/t/index-template-shows-a-policy-that-doesnt-exist/312598 "2022-08-22T10:24:55Z")
Index Template is showing a policy lifecycle that doesn't exist. any idea how come this happens? GET /index-name/\_ilm/explain?pretty { "indices" : { ".ds-index-name-2022.01.12-000001" : { "index" : ".ds-ind… --- ## [Impossible to find index template path](https://discuss.elastic.co/t/impossible-to-find-index-template-path/312541)
**Author:** [@Samuele\_Lolli](https://discuss.elastic.co/u/Samuele_Lolli)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 9:38am UTC](https://discuss.elastic.co/t/impossible-to-find-index-template-path/312541 "2022-08-22T09:38:43Z")
I created a index template from the Kibana UI but i can't configure properly the index inside my logstash pipeline because i can't find the path of the index template. --- ## [Can only use wildcard queries on keyword, text and wildcard fields](https://discuss.elastic.co/t/can-only-use-wildcard-queries-on-keyword-text-and-wildcard-fields/312591)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 9:36am UTC](https://discuss.elastic.co/t/can-only-use-wildcard-queries-on-keyword-text-and-wildcard-fields/312591 "2022-08-22T09:36:07Z")
Hi, I have defined mappings for my index when i am doing wildcard search ipaddress i am getting an error Can only use wildcard queries on keyword, text and wildcard fields - not on \[scan\_iteration\] which is of type \[i… --- ## [Logstash behavior to output to Elastic Search closed index](https://discuss.elastic.co/t/logstash-behavior-to-output-to-elastic-search-closed-index/312590)
**Author:** [@sg.gpar](https://discuss.elastic.co/u/sg.gpar)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 9:23am UTC](https://discuss.elastic.co/t/logstash-behavior-to-output-to-elastic-search-closed-index/312590 "2022-08-22T09:23:54Z")
logstash output is configured as Elastic Search index. Somehow index was closed in between after loading some data, For pending data it will reload automatically after index was opened ? --- ## [Kibana Scripted Field HourOfDay](https://discuss.elastic.co/t/kibana-scripted-field-hourofday/311447)
**Author:** [@fim01](https://discuss.elastic.co/u/fim01)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 8:14am UTC](https://discuss.elastic.co/t/kibana-scripted-field-hourofday/311447 "2022-08-22T08:14:14Z")
I followed documentation to create a simple scripted field to calculate HourOfDay doc\['@timestamp'\].date.hourOfDay error: { "took": 5, "timed\_out": false, "\_shards": { "total": 9, "successful": 8, … --- ## [Can't connect with elasticsearch because of https or SSL security](https://discuss.elastic.co/t/cant-connect-with-elasticsearch-because-of-https-or-ssl-security/312581)
**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 7:34am UTC](https://discuss.elastic.co/t/cant-connect-with-elasticsearch-because-of-https-or-ssl-security/312581 "2022-08-22T07:34:04Z")
Hey, I have some problems when i want to connect elasticsearch port, for example i can't connect python to elasticsearch because of ssl, the https, the same for kafka confluent, I've already use some technique like ad… --- ## [Kibana LDAP authentication via apache proxy](https://discuss.elastic.co/t/kibana-ldap-authentication-via-apache-proxy/312385)
**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 7:27am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-via-apache-proxy/312385 "2022-08-22T07:27:57Z")
Hi, with xpack and TLS for elasticserach + kibana disable i can use ldap authentication via apache. I can login to kibana with my ldap account. Kibana config: server.port: 5601 server.host: "myhost" elasticsearch.hos… --- ## [How can I get CloudWatchLogs to Elastic as JSON?](https://discuss.elastic.co/t/how-can-i-get-cloudwatchlogs-to-elastic-as-json/312101)
**Author:** [@DanielInacio](https://discuss.elastic.co/u/DanielInacio)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 7:08am UTC](https://discuss.elastic.co/t/how-can-i-get-cloudwatchlogs-to-elastic-as-json/312101 "2022-08-22T07:08:18Z")
Hi everyone Basically, I have a CloudFormation Stack in AWS, which currently uses the AWS Lambda ElasticForwarder to POST CloudFormation logs into an Elasticsearch stream. The messages are JSON dictionaries but they ar… --- ## [Need to upgrade to ES 8](https://discuss.elastic.co/t/need-to-upgrade-to-es-8/312579)
**Author:** [@Jana03](https://discuss.elastic.co/u/Jana03)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 6:50am UTC](https://discuss.elastic.co/t/need-to-upgrade-to-es-8/312579 "2022-08-22T06:50:52Z")
Hi, We need to upgrade ES to 8+ version, for that i need the compatible fluentd and fluentd es plugin versions. can you please help --- ## [ECK Stack Monitoring disable certificate validation on beats](https://discuss.elastic.co/t/eck-stack-monitoring-disable-certificate-validation-on-beats/310875)
**Author:** [@clewo](https://discuss.elastic.co/u/clewo)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 6:24am UTC](https://discuss.elastic.co/t/eck-stack-monitoring-disable-certificate-validation-on-beats/310875 "2022-08-22T06:24:28Z")
Hi, I wanted to setup Stack Monitoring as described here: Stack Monitoring | Elastic Cloud on Kubernetes \[2.3\] | Elastic I've provided my own certificate to the elasticsearch cluster which didn't contain a SAN entry fo… --- ## [Elastic ECK Filebeat logs from a pod](https://discuss.elastic.co/t/elastic-eck-filebeat-logs-from-a-pod/312409)
**Author:** [@joepa37](https://discuss.elastic.co/u/joepa37)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 6:22am UTC](https://discuss.elastic.co/t/elastic-eck-filebeat-logs-from-a-pod/312409 "2022-08-22T06:22:28Z")
I have configured a Elastic ECK Beat with autodiscover for all pod logs, but I need to add logs from a specific pod log file. I have tried with module and log config but not working yet. The access.log file exists on th… --- ## [Creating an enrollment token in Elastic fails due to PrivateKey error](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461)
**Author:** [@Mostafa\_Talebi](https://discuss.elastic.co/u/Mostafa_Talebi)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 5:49am UTC](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461 "2022-08-22T05:49:17Z")
I have created a three nodes elastic cluster, with two being master nodes. I have created CS, CERT and http.p12 files manually, all placed in their respective machines and when I run elastic, everything boots successful… --- ## [Timestamp is not correct](https://discuss.elastic.co/t/timestamp-is-not-correct/310278)
**Author:** [@BaseSL](https://discuss.elastic.co/u/BaseSL)\ **Replies:** 4\ **Last updated:** [August 22, 2022, 5:32am UTC](https://discuss.elastic.co/t/timestamp-is-not-correct/310278 "2022-08-22T05:32:53Z")
I have the problem that the time does not match the one in the log file. What can I do about it ? It only occurs with this log file (filebeat). On another system, where Logstash is running, this does not occur. Unfo… --- ## [Log4j2-ecs-layout serialize MDC](https://discuss.elastic.co/t/log4j2-ecs-layout-serialize-mdc/311623)
**Author:** [@tbglazer](https://discuss.elastic.co/u/tbglazer)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 5:28am UTC](https://discuss.elastic.co/t/log4j2-ecs-layout-serialize-mdc/311623 "2022-08-22T05:28:44Z")
Is there any option not to serialize MDC fields by default ? I am using additional fields to serialize under different name like \ **Author:** [@who](https://discuss.elastic.co/u/who)\ **Replies:** 0\ **Last updated:** [August 21, 2022, 6:31am UTC](https://discuss.elastic.co/t/determining-which-item-in-patterns-array-of-a-grok-plugin-was-matched/312538 "2022-08-21T06:31:48Z") Assuming we're using the grok filter plugin in the "multiple patterns for a single field" mode: filter { grok { match =\> { "message" =\> \[ "Duration: %{NUMBER:duration}", … --- ## [Dissectfailure when it shouldn't](https://discuss.elastic.co/t/dissectfailure-when-it-shouldnt/312375)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 4:10am UTC](https://discuss.elastic.co/t/dissectfailure-when-it-shouldnt/312375 "2022-08-22T04:10:25Z")
Hi All, I'm puzzled. I have a logstash configuration working on two servers. First is fine, but on the second an error says there is a dissect failure \[2022-08-18T11:13:02,260\]\[WARN \]\[org.logstash.dissect.Dissector\] D… --- ## [Can't run curl in terminal](https://discuss.elastic.co/t/cant-run-curl-in-terminal/312469)
**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 12:43pm UTC](https://discuss.elastic.co/t/cant-run-curl-in-terminal/312469 "2022-08-19T12:43:56Z")
Hi Everyone, I don't know what's happen, but i can't run curl cmd in terminal, I've already ran curl -GET https://127.0.0.1:9200 and the response is: curl: (58) could not load PEM client certificate, OpenSSL error e… --- ## [Version history](https://discuss.elastic.co/t/version-history/312463)
**Author:** [@afuente](https://discuss.elastic.co/u/afuente)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:27am UTC](https://discuss.elastic.co/t/version-history/312463 "2022-08-22T00:27:32Z")
Hello, guys!! Is it possible to see the version history of a saved query, dashboard, visualization, etc.? I mean, I created a saved query, but another user has changed it without telling me, is it possible to know who c… --- ## [Registry Proxy Authentication](https://discuss.elastic.co/t/registry-proxy-authentication/312460)
**Author:** [@zirota](https://discuss.elastic.co/u/zirota)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 11:22am UTC](https://discuss.elastic.co/t/registry-proxy-authentication/312460 "2022-08-19T11:22:25Z")
Hello, Any idea how I can provide credentials to the proxy specified xpack.fleet.registryProxyUrl? Usually when working with proxies, we make use of the username:password basic authentication in the URL such as "https:… --- ## [How to fix vulnerability(CVE-2001-1199)](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441)
**Author:** [@wilsonyy](https://discuss.elastic.co/u/wilsonyy)\ **Replies:** 5\ **Last updated:** [August 22, 2022, 12:26am UTC](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441 "2022-08-22T00:26:50Z")
A cross-site scripting vulnerability（ CVE-2001-1199） was found in Elasticsearch:9200，I've never seen it before，so how to fix it, anybody helps? --- ## [Documentation Formating issues](https://discuss.elastic.co/t/documentation-formating-issues/312476)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:25am UTC](https://discuss.elastic.co/t/documentation-formating-issues/312476 "2022-08-22T00:25:43Z")
Hello, It seems that the documentation site for Elastic Stack is changing and some things are broken at the moment, are you guys aware of this issue? For example this page Create transform API | Elasticsearch Guide \[8.… --- ## [Elasticsearch -not starting after boot on ubuntu server 22.04.1](https://discuss.elastic.co/t/elasticsearch-not-starting-after-boot-on-ubuntu-server-22-04-1/312528)
**Author:** [@bezder](https://discuss.elastic.co/u/bezder)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:24am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-boot-on-ubuntu-server-22-04-1/312528 "2022-08-22T00:24:35Z")
Hello, when i reboot my ubuntu server and run systemctl status elasticsearch i am getting errror as below, when i execute afterward systemctl restart elasticsearch; all works okay ... any idea why its not starting p… --- ## [How to return hour by hour average for the last X days?](https://discuss.elastic.co/t/how-to-return-hour-by-hour-average-for-the-last-x-days/312560)
**Author:** [@Yi\_HAN](https://discuss.elastic.co/u/Yi_HAN)\ **Replies:** 0\ **Last updated:** [August 21, 2022, 10:03pm UTC](https://discuss.elastic.co/t/how-to-return-hour-by-hour-average-for-the-last-x-days/312560 "2022-08-21T22:03:34Z")
I have the following script to return an aggregation hour by hour of last x days on ExecNom: GET /mkt-with-time/\_search { "size": 0, "query": { "range": { "@timestamp": { "gte": "now-7d/d", … --- ## [\[Solved\] Cast/Map IP Field to IP Type](https://discuss.elastic.co/t/solved-cast-map-ip-field-to-ip-type/312558)
**Author:** [@snkhan](https://discuss.elastic.co/u/snkhan)\ **Replies:** 1\ **Last updated:** [August 21, 2022, 9:59pm UTC](https://discuss.elastic.co/t/solved-cast-map-ip-field-to-ip-type/312558 "2022-08-21T21:59:15Z")
Hello, I am a new ELK user, and am trying in vain to cast an existing field containing an IP address to an IP data type. From the copious searches it is clear that I must use mappings, but my attempts to do so have fail… --- ## [The program ./load\_blogs.sh doesn't do anything](https://discuss.elastic.co/t/the-program-load-blogs-sh-doesnt-do-anything/312508)
**Author:** [@ingmar](https://discuss.elastic.co/u/ingmar)\ **Replies:** 1\ **Last updated:** [August 21, 2022, 1:01pm UTC](https://discuss.elastic.co/t/the-program-load-blogs-sh-doesnt-do-anything/312508 "2022-08-21T13:01:01Z")
Hello, While doing the labs for module 1 for Elasticsearch Engineer, I am required to run the bash script ./load\_blogs.sh. It doesn't load the blogs into the blogs index after I see the script complete. When I go back… --- ## [Add Runtime Field By UpdateQueryAsync](https://discuss.elastic.co/t/add-runtime-field-by-updatequeryasync/312532)
**Author:** [@Rahma\_Boughale](https://discuss.elastic.co/u/Rahma_Boughale)\ **Replies:** 2\ **Last updated:** [August 21, 2022, 12:19pm UTC](https://discuss.elastic.co/t/add-runtime-field-by-updatequeryasync/312532 "2022-08-21T12:19:45Z")
Hello all, i am new to elasticsearch, i am trying to add a new field(runtime field) by UpdateByQueryAsync in my index(it already created), i did some research and i saw that we can add a new fiel by this syntax : var u… --- ## [How to set up 'allow\_custom\_routing' for data streams?](https://discuss.elastic.co/t/how-to-set-up-allow-custom-routing-for-data-streams/312544)
**Author:** [@dkosenko](https://discuss.elastic.co/u/dkosenko)\ **Replies:** 0\ **Last updated:** [August 21, 2022, 11:43am UTC](https://discuss.elastic.co/t/how-to-set-up-allow-custom-routing-for-data-streams/312544 "2022-08-21T11:43:29Z")
Hi, How do I create a stream with "allow\_custom\_routing": true? I cannot find any documention on it. I have specified: "mappings": { "dynamic": "true", "\_routing": { "required": true }, but it has n… [Previous page](https://discuss.elastic.co/latest.md?page=998) [Next page](https://discuss.elastic.co/latest.md?page=1000)