# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=473 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 474 --- ## [How to connect local kibana with elasticsearch ssh port forward?](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-elasticsearch-ssh-port-forward/321757)
**Author:** [@tariqsajid](https://discuss.elastic.co/u/tariqsajid)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 12:11pm UTC](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-elasticsearch-ssh-port-forward/321757 "2022-12-21T12:11:34Z")
Hello, I would want to know how to connect my laptop's running kibana to elasticsearch on AWS while port forwarding it to my local system. chrome extension ## Multi Elasticsearch Head I'm not sure how to link Kibana to… --- ## [Logstash Scheduled Run of conf file and error alert](https://discuss.elastic.co/t/logstash-scheduled-run-of-conf-file-and-error-alert/321743)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 11:41am UTC](https://discuss.elastic.co/t/logstash-scheduled-run-of-conf-file-and-error-alert/321743 "2022-12-21T11:41:32Z")
Hi , I'm using logstash to push my CSV data from a location to elasticsearch database. In my project I want a scheduled CSV data push at a particular time. Also want to know if any error is generated while pushing dat… --- ## [Internal Server Error after trying to save a Query](https://discuss.elastic.co/t/internal-server-error-after-trying-to-save-a-query/318416)
**Author:** [@LightX](https://discuss.elastic.co/u/LightX)\ **Replies:** 2\ **Last updated:** [November 23, 2022, 11:43am UTC](https://discuss.elastic.co/t/internal-server-error-after-trying-to-save-a-query/318416 "2022-11-23T11:43:12Z")
Hello together, we are using Kibana with version 7.8.1, unfortunately I am completely noob on Kibana so would really appricate any help. Basically, as soon as I try to "save search" I get internal server errors.... If … --- ## [Cluster yellow after upgrade from 7.16.2 to 7.17.7](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412)
**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 10:04am UTC](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412 "2022-12-21T10:04:24Z")
Hi, I started a rolling upgrade as per directions from the guide. I have 6 data nodes (n1 and n2 are also ingest nodes) and after successfully upgrading n4 I upgraded n6 and the cluster is unable to get from yellow to gr… --- ## [Average size of data indices](https://discuss.elastic.co/t/average-size-of-data-indices/321625)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 5\ **Last updated:** [December 21, 2022, 10:03am UTC](https://discuss.elastic.co/t/average-size-of-data-indices/321625 "2022-12-21T10:03:36Z")
I have more of questions regarding size of data. what is average of data can Elasticsearch store par second? if there is 1M document of data in log file and volume 1G after storing in elastic database what is the new … --- ## [How to index text files (pdf, doc, txt...) in Java?](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678)
**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\ **Replies:** 5\ **Last updated:** [December 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678 "2022-12-21T09:48:53Z")
Hello everyone, some time ago I started to deal with Elasticsearch. Now I am faced with the task of indexing various text files from a certain directory for subsequent search by their contents. Since Elasticsearch uses … --- ## [Elastic search transform not working on nested fields](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 9:45am UTC](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649 "2022-12-21T09:45:31Z")
Hi, I have an index which looks like below "properties": { "employee\_id": { "type": "long" }, "employee\_details": { "type": "nested", "dynamic": "false", "properties": { "city": { "t… --- ## [Logstash not able to connect to elastic search hosted on asw](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elastic-search-hosted-on-asw/321737)
**Author:** [@shivam585](https://discuss.elastic.co/u/shivam585)\ **Replies:** 8\ **Last updated:** [December 21, 2022, 9:17am UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elastic-search-hosted-on-asw/321737 "2022-12-21T09:17:30Z")
\[2022-12-21T07:09:39,189\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-12-21T07:09:39,205\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.versi… --- ## [How to connect es cluster](https://discuss.elastic.co/t/how-to-connect-es-cluster/321712)
**Author:** [@duocoding](https://discuss.elastic.co/u/duocoding)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 8:39am UTC](https://discuss.elastic.co/t/how-to-connect-es-cluster/321712 "2022-12-21T08:39:27Z")
// Create the low-level client RestClient restClient = RestClient.builder( new HttpHost("localhost", 9200)).build(); // Create the transport with a Jackson mapper ElasticsearchTransport transport = new RestClientTra… --- ## [Elastic Agent 8.5.3 Logging](https://discuss.elastic.co/t/elastic-agent-8-5-3-logging/321732)
**Author:** [@zirota](https://discuss.elastic.co/u/zirota)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 8:24am UTC](https://discuss.elastic.co/t/elastic-agent-8-5-3-logging/321732 "2022-12-21T08:24:42Z")
Hello, I am facing some difficulties in configuring the agent log path when running in standalone mode. Agent Version: 8.5.3 Distribution: linux\_x86-64 Config: Startup command: ./elastic-agent -run -c \ **Author:** [@Irina\_Truong](https://discuss.elastic.co/u/Irina_Truong)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2022-en-how-to-import-an-ml-model-with-eland-if-youre-not-a-python-developer/318465 "2022-12-21T08:00:47Z") Why do I need an ML model? An ML model in Elasticsearch could be used for enriching your data during indexing. Some examples of what an ML model can do: extract entities from text (NER) predicting classes (classific… --- ## [javax.security.auth.login.LoginException: Could not login: the client is being asked for a password, but the Kafka client code does not currently support obtaining a password from the user. not available to garner authentication information from the user](https://discuss.elastic.co/t/javax-security-auth-login-loginexception-could-not-login-the-client-is-being-asked-for-a-password-but-the-kafka-client-code-does-not-currently-support-obtaining-a-password-from-the-user-not-available-to-garner-authentication-information-from-the-user/321723)
**Author:** [@Balaganesh\_G](https://discuss.elastic.co/u/Balaganesh_G)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 7:19am UTC](https://discuss.elastic.co/t/javax-security-auth-login-loginexception-could-not-login-the-client-is-being-asked-for-a-password-but-the-kafka-client-code-does-not-currently-support-obtaining-a-password-from-the-user-not-available-to-garner-authentication-information-from-the-user/321723 "2022-12-21T07:19:49Z")
Hi Team, I have using logstash 8.3.3 and migirated to new Logstash 8.5.3 facing below error. javax.security.auth.login.LoginException: Could not login: the client is being asked for a password, but the Kafka client cod… --- ## [Upgrade from Transport Client to HLRC / JAVA API Client? Which to choose?](https://discuss.elastic.co/t/upgrade-from-transport-client-to-hlrc-java-api-client-which-to-choose/320869)
**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Replies:** 6\ **Last updated:** [December 21, 2022, 6:30am UTC](https://discuss.elastic.co/t/upgrade-from-transport-client-to-hlrc-java-api-client-which-to-choose/320869 "2022-12-21T06:30:08Z")
Hello Team, I am fairly new to Elasticsearch and I have project in which we use Java Client provided by Elasticsearch to fetch logs from Elasticsearch and use those logs in our Application. The thing is that the project … --- ## [Logstash filter code that sends a query to related indices by wild card \[indexname-\*\]](https://discuss.elastic.co/t/logstash-filter-code-that-sends-a-query-to-related-indices-by-wild-card-indexname/321718)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 5:54am UTC](https://discuss.elastic.co/t/logstash-filter-code-that-sends-a-query-to-related-indices-by-wild-card-indexname/321718 "2022-12-21T05:54:50Z")
Hello All, Can someone please help me out how can I write custom filter in logstash to achieve the following: Making a custom logstash filter that sends a query to related indices by wild card (indexname-\*) for records… --- ## [\[Integration\] Facing error while adding transform in integration package](https://discuss.elastic.co/t/integration-facing-error-while-adding-transform-in-integration-package/320746)
**Author:** [@Alex\_R](https://discuss.elastic.co/u/Alex_R)\ **Replies:** 4\ **Last updated:** [December 21, 2022, 5:05am UTC](https://discuss.elastic.co/t/integration-facing-error-while-adding-transform-in-integration-package/320746 "2022-12-21T05:05:02Z")
I have referred elastic-package spec to ship transform along with integration package. However, I am not able to install integration package when added transform under /root/integrations/packages/my\_package/elasticsearch… --- ## [Delete by query error (version conflict)](https://discuss.elastic.co/t/delete-by-query-error-version-conflict/321365)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 4:57am UTC](https://discuss.elastic.co/t/delete-by-query-error-version-conflict/321365 "2022-12-21T04:57:17Z")
I'm trying to delete some specific documents from an index with a query POST /.ds-logs-system.syslog-default-2022.10.30-000004/\_delete\_by\_query?pretty { "query": { "match": { "process.name": "install.sh" … --- ## [Keytool asking for password for keystore , none applied ever](https://discuss.elastic.co/t/keytool-asking-for-password-for-keystore-none-applied-ever/321713)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 3:57am UTC](https://discuss.elastic.co/t/keytool-asking-for-password-for-keystore-none-applied-ever/321713 "2022-12-21T03:57:27Z")
We are on ES version 7.17 and trying to setting up cross cluster ( remote ). I am trying to add cert from one node to remote in the elastic-certificates.p12 file using below command keytool -importcert -noprompt -keysto… --- ## [How to replace "and" operator inside "must\_not" to group clauses. Query migration to ES 7.6.1](https://discuss.elastic.co/t/how-to-replace-and-operator-inside-must-not-to-group-clauses-query-migration-to-es-7-6-1/321706)
**Author:** [@aanaya](https://discuss.elastic.co/u/aanaya)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 12:51am UTC](https://discuss.elastic.co/t/how-to-replace-and-operator-inside-must-not-to-group-clauses-query-migration-to-es-7-6-1/321706 "2022-12-21T00:51:31Z")
Hi guys, I'm trying to migrate following query to ES 7.6.1, but not sure how to replace "and" functionality cause it looks like it's not longer supported in ES 7.6.1. ... "must\_not": \[ { "and": \[ { … --- ## [Change field format in response](https://discuss.elastic.co/t/change-field-format-in-response/321702)
**Author:** [@rybak.yuriy.m](https://discuss.elastic.co/u/rybak.yuriy.m)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 10:54pm UTC](https://discuss.elastic.co/t/change-field-format-in-response/321702 "2022-12-20T22:54:40Z")
I do some aggregattion with search api and in my response sum field looks like: "value": 9.34467409269E11" How do I can to change format to long without exponential format? --- ## [How to set timerange query to -15min from now?](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662)
**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:33pm UTC](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662 "2022-12-20T14:33:55Z")
I need to check to see if two distinct logs are being generated every 15 min and every hour, so I'm trying to create two timeranges for two different indices -- one that checks for logs in the past 15 min and returns the… --- ## [Azure App Service Logs to Elastic Cloud (without Filebeat)](https://discuss.elastic.co/t/azure-app-service-logs-to-elastic-cloud-without-filebeat/321661)
**Author:** [@CrystalDesignDR](https://discuss.elastic.co/u/CrystalDesignDR)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 2:30pm UTC](https://discuss.elastic.co/t/azure-app-service-logs-to-elastic-cloud-without-filebeat/321661 "2022-12-20T14:30:41Z")
Hi, we send various types of data into our Elastic Cloud deployments, whether it be custom indexes or APM (RUM, node.js, ASP.NET, .NET Core ecc.) data, which is all very straight forward. But when it comes to applicati… --- ## [Regex Pattern to fetch field from message](https://discuss.elastic.co/t/regex-pattern-to-fetch-field-from-message/320563)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 9:14pm UTC](https://discuss.elastic.co/t/regex-pattern-to-fetch-field-from-message/320563 "2022-12-20T21:14:55Z")
HI Team, I'm trying to fetch some key field from my message and i need pattern to match exact keyword. i need UserID and User agent matching pattern \[INFO \] 2022-12-05 17:20:45:409 Logger - 365 Service Request: \U… --- ## [Kibana 8.4.x and 8.5.x Elasticsearch compatibility](https://discuss.elastic.co/t/kibana-8-4-x-and-8-5-x-elasticsearch-compatibility/321687)
**Author:** [@Thornfalt](https://discuss.elastic.co/u/Thornfalt)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 9:06pm UTC](https://discuss.elastic.co/t/kibana-8-4-x-and-8-5-x-elasticsearch-compatibility/321687 "2022-12-20T21:06:06Z")
I was browsing the support matrix at Support Matrix | Elastic When looking at the Elasticsearch compatibility, the Kibana versions 8.4.x and 8.5.x is not supported with Elasticsearch 8.4.x and 8.5.x. Does this mean it'… --- ## [HELP! Unable to open Kibana What should I do?](https://discuss.elastic.co/t/help-unable-to-open-kibana-what-should-i-do/321677)
**Author:** [@Pei\_Z](https://discuss.elastic.co/u/Pei_Z)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 8:16pm UTC](https://discuss.elastic.co/t/help-unable-to-open-kibana-what-should-i-do/321677 "2022-12-20T20:16:36Z")
I am unable to open Kibana because of this error. \[2022-12-21T01:57:34.111+08:00\]\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] R… --- ## [Is it possible to trigger an alert when a new index is created](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605)
**Author:** [@Krishna\_Teja](https://discuss.elastic.co/u/Krishna_Teja)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 7:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605 "2022-12-20T19:43:55Z")
I have an ILM which creates indices every 10 days for a datastream. I need to update the mapping for the newly created index on creation. Is it possible to get an alert or trigger a webhook once a new index is created? --- ## [How to Deboost the final Score of the results when it matches set of Term/Range Filters](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490)
**Author:** [@Lakshman\_Raj\_Vasudev](https://discuss.elastic.co/u/Lakshman_Raj_Vasudev)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 7:42pm UTC](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490 "2022-12-20T19:42:21Z")
Hi, We have an Scenario,When the query matches certain Set of Term/Range Filter,Deboost the Relevancy Score of those matching documents with a boost Factor,as the usage of negative boosts were not permitted in the Lates… --- ## [Kibana Visualization Missing Time Range UI](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353)
**Author:** [@hidanny](https://discuss.elastic.co/u/hidanny)\ **Replies:** 3\ **Last updated:** [October 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/kibana-visualization-missing-time-range-ui/317353 "2022-10-26T08:34:34Z")
Hello all, This is my Visualization Tab and I am missing the Time Range UI that allows me to determine what time my data appears On the other hand, on my discover tab, I see that it exists as "Last 15 Mins" What… --- ## [Trouble with suggestions](https://discuss.elastic.co/t/trouble-with-suggestions/321673)
**Author:** [@Mihai\_Raulea](https://discuss.elastic.co/u/Mihai_Raulea)\ **Replies:** 4\ **Last updated:** [December 20, 2022, 7:16pm UTC](https://discuss.elastic.co/t/trouble-with-suggestions/321673 "2022-12-20T19:16:06Z")
i have a skills index with the following mapping: { "skills" : { "mappings" : { "properties" : { "skill" : { "type" : "completion", "analyzer" : "simple", "preserve\_sepa… --- ## [Logstash split one message into multiple](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496)
**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\ **Replies:** 10\ **Last updated:** [December 20, 2022, 7:10pm UTC](https://discuss.elastic.co/t/logstash-split-one-message-into-multiple/321496 "2022-12-20T19:10:54Z")
Hi, I've the following message and I managed to create the output from only message, {"@timestamp":"2022-12-01T13:30:00.004Z","message":"\<190\>Dec 1 14:29:59 10.62.161.199 AA-AMG3U: 0950198238 NN \[MDA 8/4\]: LN44 SA 20… --- ## [Watcher Automated Email Reports](https://discuss.elastic.co/t/watcher-automated-email-reports/321586)
**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 7:01pm UTC](https://discuss.elastic.co/t/watcher-automated-email-reports/321586 "2022-12-20T19:01:14Z")
Version 7.17: I'm trying to set up a Watcher to send report emails following this guide: I set up the email account in the elasticsearch.yml with a pretty basic setup since our SMTP server does not require authentica… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=472) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=474)