# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=254 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 255 --- ## [How to use timefilter element to filter time and affect to some element that integrate with itself?](https://discuss.elastic.co/t/how-to-use-timefilter-element-to-filter-time-and-affect-to-some-element-that-integrate-with-itself/349781)
**Author:** [@Dy\_Vanrith](https://discuss.elastic.co/u/Dy_Vanrith)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 9:40am UTC](https://discuss.elastic.co/t/how-to-use-timefilter-element-to-filter-time-and-affect-to-some-element-that-integrate-with-itself/349781 "2023-12-21T09:40:22Z")
Example i have 2 element One element for report canvas base on date that i want to filter filters | essql query= { string "SELECT \* FROM "2023.12.\*" " } | markdown " {{#each rows}} Total Rejected Total Retract … --- ## [Alerts not working (stack version 8.2)](https://discuss.elastic.co/t/alerts-not-working-stack-version-8-2/349773)
**Author:** [@ooaleksiienko](https://discuss.elastic.co/u/ooaleksiienko)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 8:32am UTC](https://discuss.elastic.co/t/alerts-not-working-stack-version-8-2/349773 "2023-12-21T08:32:46Z")
Problem with: Installing namespace-level resources and creating concrete index for .alerts-security.alerts-default when restarting Kibana I've checked and can see that after fleet setup next Component Templates downlo… --- ## [Apm for django, filter errors by cusotm field](https://discuss.elastic.co/t/apm-for-django-filter-errors-by-cusotm-field/349762)
**Author:** [@k\_cf](https://discuss.elastic.co/u/k_cf)\ **Replies:** 1\ **Last updated:** [December 21, 2023, 8:03am UTC](https://discuss.elastic.co/t/apm-for-django-filter-errors-by-cusotm-field/349762 "2023-12-21T08:03:12Z")
I have set up elastic apm for a django project with logging (elasticapm.contrib.django.handlers.LoggingHandler). Upon logging a message as follows: logger.exception( custom\_logging\_message, exc\_info=True, ex… --- ## [Dec 21st, 2023: \[RO\] SLO-ul rău, SLO-ul bun: o aventură pe tema SRE](https://discuss.elastic.co/t/dec-21st-2023-ro-slo-ul-rau-slo-ul-bun-o-aventura-pe-tema-sre/347305)
**Author:** [@virginiadiana.todea](https://discuss.elastic.co/u/virginiadiana.todea)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2023-ro-slo-ul-rau-slo-ul-bun-o-aventura-pe-tema-sre/347305 "2023-12-21T08:00:44Z")
This post is also available in English. This post is also available in Espagnol. Dacă te-ai aventurat vreodată în orașul SRE, există șanse foarte mari să fi întâlnit deja unele dintre personajele mele preferate: SLO… --- ## [Dec 21st, 2023: \[EN\] Good SLO, Bad SLO: an SRE adventure theme](https://discuss.elastic.co/t/dec-21st-2023-en-good-slo-bad-slo-an-sre-adventure-theme/347304)
**Author:** [@virginiadiana.todea](https://discuss.elastic.co/u/virginiadiana.todea)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2023-en-good-slo-bad-slo-an-sre-adventure-theme/347304 "2023-12-21T08:00:44Z")
This post is also available in espagnol. This post is also available in romanian. If you ever endeavoured in the SRE town, there is a very good chance that you already have met some of my favourite characters: the S… --- ## [Dec 21st, 2023: \[ES\] El SLO bueno, el SLO malo: una aventura SRE](https://discuss.elastic.co/t/dec-21st-2023-es-el-slo-bueno-el-slo-malo-una-aventura-sre/347306)
**Author:** [@virginiadiana.todea](https://discuss.elastic.co/u/virginiadiana.todea)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2023-es-el-slo-bueno-el-slo-malo-una-aventura-sre/347306 "2023-12-21T08:00:44Z")
This post is also available in English. This post is also available in Romanian. Si alguna vez te aventuraste en la ciudad de los SRE, es muy probable que ya hayas conocido a algunos de mis personajes favoritos: SLO… --- ## [Extracting nested fileds with grok or kv](https://discuss.elastic.co/t/extracting-nested-fileds-with-grok-or-kv/349766)
**Author:** [@cass1ope1a](https://discuss.elastic.co/u/cass1ope1a)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 7:29am UTC](https://discuss.elastic.co/t/extracting-nested-fileds-with-grok-or-kv/349766 "2023-12-21T07:29:38Z")
I have logs like: Server response. Body={"valid":\[{"someId":"12345","someType":"somevalue123","isSome":true}\],"invalid":\[\]} current pipeline config: if \[syslog\_tag\] =~ "json" { json { source =\> root\_… --- ## [Create a Java Query from a DSL terms query](https://discuss.elastic.co/t/create-a-java-query-from-a-dsl-terms-query/349584)
**Author:** [@Edgar\_Osorio](https://discuss.elastic.co/u/Edgar_Osorio)\ **Replies:** 2\ **Last updated:** [December 20, 2023, 9:52pm UTC](https://discuss.elastic.co/t/create-a-java-query-from-a-dsl-terms-query/349584 "2023-12-20T21:52:46Z")
Given the following Query { "query":{ "bool" : { "must" : \[ { "terms" : { "\_id" : \["8606874","21387518","16704862","23947520","23897437","1050114","24967566","50356… --- ## [Persistent ECS warning](https://discuss.elastic.co/t/persistent-ecs-warning/349743)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 3\ **Last updated:** [December 20, 2023, 6:03pm UTC](https://discuss.elastic.co/t/persistent-ecs-warning/349743 "2023-12-20T18:03:45Z")
logstash 8.11.3 Can anyone tell me why with the following config, and everything else at the default install, why I continue to get the \[logstash.codecs.jsonlines\] ECS compatibility is enabled but \`target\` option was n… --- ## [Time-series data out of order](https://discuss.elastic.co/t/time-series-data-out-of-order/349741)
**Author:** [@lkw](https://discuss.elastic.co/u/lkw)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 4:54pm UTC](https://discuss.elastic.co/t/time-series-data-out-of-order/349741 "2023-12-20T16:54:21Z")
I have a data stream in use for some custom application logs. There are about 10 months of logs in it and a handful of rolled-over backing indices. I also have about 3 years worth of historic application logs that I'd l… --- ## [How to select multiple new index patterns in Kiban](https://discuss.elastic.co/t/how-to-select-multiple-new-index-patterns-in-kiban/349456)
**Author:** [@Satsan](https://discuss.elastic.co/u/Satsan)\ **Replies:** 2\ **Last updated:** [December 20, 2023, 3:58pm UTC](https://discuss.elastic.co/t/how-to-select-multiple-new-index-patterns-in-kiban/349456 "2023-12-20T15:58:24Z")
How to efficiently add or select multiple new index patterns in Kibana? I need to incorporate over 90 + directory logs into the Kibana dashboard. Manually adding the index pattern for each of them is time-consuming. Is t… --- ## [Enrich document with data from same index](https://discuss.elastic.co/t/enrich-document-with-data-from-same-index/349705)
**Author:** [@rickardo](https://discuss.elastic.co/u/rickardo)\ **Replies:** 8\ **Last updated:** [December 20, 2023, 3:37pm UTC](https://discuss.elastic.co/t/enrich-document-with-data-from-same-index/349705 "2023-12-20T15:37:31Z")
Hi, we got one index that we insert documents where one can follow e.g. a session and what is done, i.e.: document 1; sessionId = 17 type=created country=DE document 2: sessionId = 17 type=action now at insertion… --- ## [Logstash with ouput clickhouse plugin more than 80% logs are missing](https://discuss.elastic.co/t/logstash-with-ouput-clickhouse-plugin-more-than-80-logs-are-missing/349724)
**Author:** [@Anandh\_Kumar1](https://discuss.elastic.co/u/Anandh_Kumar1)\ **Replies:** 1\ **Last updated:** [December 20, 2023, 2:58pm UTC](https://discuss.elastic.co/t/logstash-with-ouput-clickhouse-plugin-more-than-80-logs-are-missing/349724 "2023-12-20T14:58:11Z")
I am using logstash version 7.17.15 in production environment, In that i am using the ouput plugin is clickhouse and the version is 20.8.3.18. Using the filebeat I am moving the logs into logstash which is there is remo… --- ## [Elastic Endpoint Restarted](https://discuss.elastic.co/t/elastic-endpoint-restarted/349375)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 2\ **Last updated:** [December 20, 2023, 2:51pm UTC](https://discuss.elastic.co/t/elastic-endpoint-restarted/349375 "2023-12-20T14:51:36Z")
I'm trying to understand what happened recently where this command ran on a desktop "sc.exe start ElasticEndpoint restarted" We also use SentinelOne, and SentinelOne detected that activity as malicious, so I'm trying to… --- ## [Change number of shards and refresh interval for all datastreams of Elastic Agent](https://discuss.elastic.co/t/change-number-of-shards-and-refresh-interval-for-all-datastreams-of-elastic-agent/349725)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 1:14pm UTC](https://discuss.elastic.co/t/change-number-of-shards-and-refresh-interval-for-all-datastreams-of-elastic-agent/349725 "2023-12-20T13:14:35Z")
Hello, Currently all the data collected by the Elastic Agent integrations uses a default number of shards of 1 and a refresh interval of 1s, those configurations are not optimal for our use case and are starting to impa… --- ## [Add uptime monitors to a dashboard](https://discuss.elastic.co/t/add-uptime-monitors-to-a-dashboard/349675)
**Author:** [@gnatola](https://discuss.elastic.co/u/gnatola)\ **Replies:** 4\ **Last updated:** [December 20, 2023, 11:58am UTC](https://discuss.elastic.co/t/add-uptime-monitors-to-a-dashboard/349675 "2023-12-20T11:58:40Z")
How can I add my uptime monitors to a dashboard? Thanks. --- ## [Using elastic client with latest version for various operations](https://discuss.elastic.co/t/using-elastic-client-with-latest-version-for-various-operations/349678)
**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\ **Replies:** 1\ **Last updated:** [December 20, 2023, 9:10am UTC](https://discuss.elastic.co/t/using-elastic-client-with-latest-version-for-various-operations/349678 "2023-12-20T09:10:17Z")
Hi, I am trying to migrate my java client to 8.11 stack from 7.17. Earlier, I had to pass auth token as request options in all requests. Now, there are so many incompatible methods where I dont see option to pass reque… --- ## [Dec 20th, 2023: \[EN\] Mastering Elastic Agent Scalability: Navigating the Holiday Surge with SQS, S3, and CloudWatch](https://discuss.elastic.co/t/dec-20th-2023-en-mastering-elastic-agent-scalability-navigating-the-holiday-surge-with-sqs-s3-and-cloudwatch/347299)
**Author:** [@Tamara\_Dancheva](https://discuss.elastic.co/u/Tamara_Dancheva)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2023-en-mastering-elastic-agent-scalability-navigating-the-holiday-surge-with-sqs-s3-and-cloudwatch/347299 "2023-12-20T08:00:09Z")
Tags: #logs, #beats, filebeat, #scale, #cloudwatch, #s3, #sqs Ever found yourself wondering how to scale your Agent or your standalone Beats implementation? Are you currently grappling with the challenge of ingesting… --- ## [Dec 20th, 2023: \[ES\] Cómo dominar la Escalabilidad del Elastic Agent: Afrontando la Oleada Navideña con SQS, S3 y CloudWatch](https://discuss.elastic.co/t/dec-20th-2023-es-como-dominar-la-escalabilidad-del-elastic-agent-afrontando-la-oleada-navidena-con-sqs-s3-y-cloudwatch/347301)
**Author:** [@Tamara\_Dancheva](https://discuss.elastic.co/u/Tamara_Dancheva)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2023-es-como-dominar-la-escalabilidad-del-elastic-agent-afrontando-la-oleada-navidena-con-sqs-s3-y-cloudwatch/347301 "2023-12-20T08:00:09Z")
¿Alguna vez te has preguntado cómo escalar tu Agente o tu implementación independiente de Beats? ¿Te estás enfrentando al desafío de ingestar datos de numerosos grupos de registros de CloudWatch, solo para descubrir q… --- ## [Relation between shard size and sum of its segments size](https://discuss.elastic.co/t/relation-between-shard-size-and-sum-of-its-segments-size/349671)
**Author:** [@Tommaso\_Parisi](https://discuss.elastic.co/u/Tommaso_Parisi)\ **Replies:** 1\ **Last updated:** [December 20, 2023, 7:35am UTC](https://discuss.elastic.co/t/relation-between-shard-size-and-sum-of-its-segments-size/349671 "2023-12-20T07:35:00Z")
Hello, I was under the assumption that the disk space used by a shard is the sum of the disk space of its segments. I have and index with 1 Million document and 3 shards and it seems to me that this is not true. Can so… --- ## [Sql query returns nothing , but output file udpated](https://discuss.elastic.co/t/sql-query-returns-nothing-but-output-file-udpated/349622)
**Author:** [@gayatri\_SN](https://discuss.elastic.co/u/gayatri_SN)\ **Replies:** 3\ **Last updated:** [December 20, 2023, 5:28am UTC](https://discuss.elastic.co/t/sql-query-returns-nothing-but-output-file-udpated/349622 "2023-12-20T05:28:21Z")
Hi, I'm using jdbc input streaming filter to get the data from query. but in some cases query returns empty or null value. \< last\_run\_metadata\_path =\> \ \ **Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 6\ **Last updated:** [December 19, 2023, 11:28pm UTC](https://discuss.elastic.co/t/date-mapping-template-not-being-applied-correctly/349469 "2023-12-19T23:28:10Z") Hi, I'm receiving the following data set into ES from Logstash: { "fields": { "date-code": "180502", "form-factor": "FORM1", "serial-no": "1122334455", "vendor": "VENDOR-PRE", "vendor-part": "PART… --- ## [Reindex after Shrink to rename index (to the original one)?](https://discuss.elastic.co/t/reindex-after-shrink-to-rename-index-to-the-original-one/349606)
**Author:** [@HyebinHong](https://discuss.elastic.co/u/HyebinHong)\ **Replies:** 2\ **Last updated:** [December 19, 2023, 11:45pm UTC](https://discuss.elastic.co/t/reindex-after-shrink-to-rename-index-to-the-original-one/349606 "2023-12-19T23:45:23Z")
Hello, Elastic! According to my former question, I realized I need to change my settings related to shards and replicas. (Huge thanks to @Christian\_Dahlqvist ) Here is my former question Reducing replica was easy with… --- ## [Max Window Size is Set to 10000 but the Terms aggregations is giving single filter value larger than max window size.](https://discuss.elastic.co/t/max-window-size-is-set-to-10000-but-the-terms-aggregations-is-giving-single-filter-value-larger-than-max-window-size/348924)
**Author:** [@santhosh.linga](https://discuss.elastic.co/u/santhosh.linga)\ **Replies:** 11\ **Last updated:** [December 19, 2023, 10:30pm UTC](https://discuss.elastic.co/t/max-window-size-is-set-to-10000-but-the-terms-aggregations-is-giving-single-filter-value-larger-than-max-window-size/348924 "2023-12-19T22:30:18Z")
We have created an index and are querying the index to display the complete dataset. However, we have encountered performance issues, as we are dealing with 1 million records in response to user search queries. To addres… --- ## [Custom TCP integration with TLS](https://discuss.elastic.co/t/custom-tcp-integration-with-tls/349679)
**Author:** [@CodeMonky](https://discuss.elastic.co/u/CodeMonky)\ **Replies:** 4\ **Last updated:** [December 19, 2023, 10:10pm UTC](https://discuss.elastic.co/t/custom-tcp-integration-with-tls/349679 "2023-12-19T22:10:42Z")
Good day all. I hope this is a simple question, but I've not been able to find any info. For the custom TCP integration that can be used when there's not an Elastic provided integration to use for data ingestion: does i… --- ## [Fixing query for type ahead with more than one query term](https://discuss.elastic.co/t/fixing-query-for-type-ahead-with-more-than-one-query-term/349564)
**Author:** [@RodAndTom](https://discuss.elastic.co/u/RodAndTom)\ **Replies:** 2\ **Last updated:** [December 19, 2023, 9:20pm UTC](https://discuss.elastic.co/t/fixing-query-for-type-ahead-with-more-than-one-query-term/349564 "2023-12-19T21:20:34Z")
Hi, I'm currently using the following query to suggest terms for type ahead completion for a title field, and it suits me very well: GET transcricoes/\_search { "query": { "wildcard": { "name": { "va… --- ## [Expired trial license during training lab... i just started :-(](https://discuss.elastic.co/t/expired-trial-license-during-training-lab-i-just-started/349480)
**Author:** [@logmeup](https://discuss.elastic.co/u/logmeup)\ **Replies:** 5\ **Last updated:** [December 19, 2023, 8:57pm UTC](https://discuss.elastic.co/t/expired-trial-license-during-training-lab-i-just-started/349480 "2023-12-19T20:57:54Z")
Course: Monitoring modern applications using Elastic Version: \ Question: Trying to do my first lab and Kibana says the trail license expired: "Your license expired on October 28, 2022 7:… --- ## [What happens on shutdown if queue.drain is true but output is unavailable?](https://discuss.elastic.co/t/what-happens-on-shutdown-if-queue-drain-is-true-but-output-is-unavailable/349680)
**Author:** [@noobiewan](https://discuss.elastic.co/u/noobiewan)\ **Replies:** 0\ **Last updated:** [December 19, 2023, 7:29pm UTC](https://discuss.elastic.co/t/what-happens-on-shutdown-if-queue-drain-is-true-but-output-is-unavailable/349680 "2023-12-19T19:29:44Z")
Hi there, I'm currently running Logstash on Kubernetes and have configured a pipeline with a Persistent Queue and the setting queue.drain: true. In this setup, I'm curious about Logstash's behavior when it receives a SI… --- ## [IF Regex not working](https://discuss.elastic.co/t/if-regex-not-working/349648)
**Author:** [@marcowiskhy](https://discuss.elastic.co/u/marcowiskhy)\ **Replies:** 5\ **Last updated:** [December 19, 2023, 5:51pm UTC](https://discuss.elastic.co/t/if-regex-not-working/349648 "2023-12-19T17:51:51Z")
Hey guys, In my pipeline I use a dictionary to enrich internal IPs and, to capture, I use the following regex: if \[source\] =~ "^10\\." or \[source\] =~ "^127\\.0\\." or \[source\] =~ "^192\\.168\\." or \[source\] =~ "^172\\.(1\[678… --- ## [Get integration assets](https://discuss.elastic.co/t/get-integration-assets/349647)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 3\ **Last updated:** [December 19, 2023, 5:22pm UTC](https://discuss.elastic.co/t/get-integration-assets/349647 "2023-12-19T17:22:08Z")
Is there a way to get the list of elasticsearch assets for a given elastic integration (From kibana or from an API). I am trying to figure out the list of: index templates, component templates, transforms, pipelines ma… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=253) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=255)