# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=638

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 639

---

## [Bulk Indexing API- To return the number of successful updates/creates](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174)

<div class="topic-metadata">

**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\
**Replies:** 0\
**Last updated:** [May 7, 2022, 1:24pm UTC](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174 "2022-05-07T13:24:04Z")

</div>

Not sure if this is a feature request, or is something that I missed (like a parameter in the Request that can enable this): The JSON body returned by a ~/\_bulk POST will include fairly rich info in the items\[\] array, b…

---

## [Event tracking for improving conversion rate](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274)

<div class="topic-metadata">

**Author:** [@yukai](https://discuss.elastic.co/u/yukai)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 7:11am UTC](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274 "2022-05-06T07:11:18Z")

</div>

We built a video search platform powered by Elasticsearch. Which consists of a search bar (of course) and many interesting functions like video recommendation, search histories, video comments and so on. Which confuses…

---

## [How do we make a search suggestions like amazon in elasticsearch](https://discuss.elastic.co/t/how-do-we-make-a-search-suggestions-like-amazon-in-elasticsearch/304116)

<div class="topic-metadata">

**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\
**Replies:** 3\
**Last updated:** [May 7, 2022, 2:06am UTC](https://discuss.elastic.co/t/how-do-we-make-a-search-suggestions-like-amazon-in-elasticsearch/304116 "2022-05-07T02:06:15Z")

</div>

am using Elasticsearch for my suggestion. I need a suggestion like amazon. how can i do it with Elasticsearch ?

---

## [Getting a discover/dashboard error of: "Unexpected token \< in JSON at position 0"](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785)

<div class="topic-metadata">

**Author:** [@jonezy7173](https://discuss.elastic.co/u/jonezy7173)\
**Replies:** 11\
**Last updated:** [May 7, 2022, 12:26am UTC](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785 "2022-05-07T00:26:44Z")

</div>

I'm not able to find much information about this online except for this post. However, their issue was caused by a proxy. I'm simply setup on a single node in my homelab off of a span port on my switch (and I have a mana…

---

## [Return Selected Fields from DSL Aggregation](https://discuss.elastic.co/t/return-selected-fields-from-dsl-aggregation/304158)

<div class="topic-metadata">

**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\
**Replies:** 0\
**Last updated:** [May 6, 2022, 10:06pm UTC](https://discuss.elastic.co/t/return-selected-fields-from-dsl-aggregation/304158 "2022-05-06T22:06:24Z")

</div>

Hello, I have the following \_search query: { "size": 0, "aggs": { "3": { "terms": { "field": "REGIONAL.keyword", "order": { "\_count"…

---

## [Agents in Fleet Healthy, but no logs](https://discuss.elastic.co/t/agents-in-fleet-healthy-but-no-logs/304154)

<div class="topic-metadata">

**Author:** [@jumpie](https://discuss.elastic.co/u/jumpie)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 10:04pm UTC](https://discuss.elastic.co/t/agents-in-fleet-healthy-but-no-logs/304154 "2022-05-06T22:04:50Z")

</div>

Hello, I have a couple agents managed by Fleet. They say healthy in Fleet and when I run elastic-agent -health on the client, but they have no logs in Discover. I also have a couple agents running standalone and they d…

---

## [Local Logstash 7.9.3 error: (EACCES) Permission denied - NUL](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153)

<div class="topic-metadata">

**Author:** [@JonathanHai](https://discuss.elastic.co/u/JonathanHai)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 8:23pm UTC](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153 "2022-05-06T20:23:17Z")

</div>

Hi everyone, I'm attempting to run a local instance of Logstash 7.9.3 on my windows machine. Specifically, C:\\logstash-7.9.3\\bin\>logstash.bat \[ERROR\] 2022-05-06 15:04:57.066 \[main\] Logstash - java.lang.IllegalStateExce…

---

## [Kibana keeps logging users out with message "An unexpected authentication error occurred. Please log in again."](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-with-message-an-unexpected-authentication-error-occurred-please-log-in-again/299729)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 10\
**Last updated:** [May 6, 2022, 5:00pm UTC](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-with-message-an-unexpected-authentication-error-occurred-please-log-in-again/299729 "2022-05-06T17:00:39Z")

</div>

I am running an Elastic Service v7.16.2, when I open a single tab or multiply tabs of Kibana, it unexpectedly logs the user out, sometimes after a minute or less. Other times it seems to be stable and keeps user logged i…

---

## [Throttle Filter Logstash](https://discuss.elastic.co/t/throttle-filter-logstash/304104)

<div class="topic-metadata">

**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 4:47pm UTC](https://discuss.elastic.co/t/throttle-filter-logstash/304104 "2022-05-06T16:47:21Z")

</div>

Hi As there are some deduplicated log ingressing into logstash That's why I would like to use the Throttle Filter to filter out the log The config is listed as below filter { if \[name\] == "pack\_incident\_response…

---

## [XML plugin parse](https://discuss.elastic.co/t/xml-plugin-parse/304124)

<div class="topic-metadata">

**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/xml-plugin-parse/304124 "2022-05-06T16:41:09Z")

</div>

Hello, I've been using the XML filtering plugin because I need to parse some XML data. This is a simple example: \<task code="a01" status="wip"/\> \<task code="a02" status="nwg"/\> \<task code="a03" status="nwg"\> Desc…

---

## [Grok help needed](https://discuss.elastic.co/t/grok-help-needed/304102)

<div class="topic-metadata">

**Author:** [@sdevasy73](https://discuss.elastic.co/u/sdevasy73)\
**Replies:** 6\
**Last updated:** [May 6, 2022, 3:53pm UTC](https://discuss.elastic.co/t/grok-help-needed/304102 "2022-05-06T15:53:16Z")

</div>

i am a newbie to grok pattern, trying to parse the below mentioned cisco firewall syslog. With the try struggling with what type to use to extract the interested fields, some of them works if i paste it individually, bu…

---

## [Visualize grouped endpoints excluding unique IDs](https://discuss.elastic.co/t/visualize-grouped-endpoints-excluding-unique-ids/302217)

<div class="topic-metadata">

**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\
**Replies:** 3\
**Last updated:** [May 6, 2022, 2:34pm UTC](https://discuss.elastic.co/t/visualize-grouped-endpoints-excluding-unique-ids/302217 "2022-05-06T14:34:07Z")

</div>

Hi I'm trying to get a visualization of the count of endpoints hit in a timeframe. My issue is that when I add my url.path feild to the visualization it displays like this (as an example) /rest/endpoint/8372812 /rest/e…

---

## [Kibana Dashboard import from 7.x to 8.x](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003)

<div class="topic-metadata">

**Author:** [@Aman\_Gupta1](https://discuss.elastic.co/u/Aman_Gupta1)\
**Replies:** 4\
**Last updated:** [May 6, 2022, 2:13pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003 "2022-05-06T14:13:30Z")

</div>

Hi Team, I have moved my ELK stack from 7.x to 8.x i have exported dashboards from 7.x but while uploading to 8.x it gives error. Not supported. As format is changed from .json to .ndjson. Is there any way to do this…

---

## [Push json array to elasticsearch](https://discuss.elastic.co/t/push-json-array-to-elasticsearch/304099)

<div class="topic-metadata">

**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 1:59pm UTC](https://discuss.elastic.co/t/push-json-array-to-elasticsearch/304099 "2022-05-06T13:59:51Z")

</div>

Hi Team, I am trying to pushing the json array of data to Elasticsearch but its showing as error How to push below json array to Elasticsearch:- \[ { "operation": "create", "senderid": "jmbaxi001", "values": \[ { …

---

## [Log Flow/Stream](https://discuss.elastic.co/t/log-flow-stream/303605)

<div class="topic-metadata">

**Author:** [@Bo-Wyatt](https://discuss.elastic.co/u/Bo-Wyatt)\
**Replies:** 4\
**Last updated:** [May 6, 2022, 1:35pm UTC](https://discuss.elastic.co/t/log-flow-stream/303605 "2022-05-06T13:35:58Z")

</div>

Hello, I want to display a visualization of my log stream on my Dashboard. I only have a data view/index pattern matching my Index. I'm currently using a table but I can only show up to 1000 records (and it's represented…

---

## [Logstash hangs before indexing the last log event](https://discuss.elastic.co/t/logstash-hangs-before-indexing-the-last-log-event/303725)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 6\
**Last updated:** [May 6, 2022, 12:24pm UTC](https://discuss.elastic.co/t/logstash-hangs-before-indexing-the-last-log-event/303725 "2022-05-06T12:24:51Z")

</div>

Hi, My setup: Elasticsearch 8.1.0, kibana 8.1.0, logstash 8.1.0 My logstash config: input{ file{ path =\> "C:/Users/avisriva/Documents/Logs/TDW\_9 Logs/logs\_14082020.txt" codec =\> multiline{ pattern =\> "Log Ent…

---

## [Logstash Multiple input missbehaving](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 8:57am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092 "2022-05-06T08:57:33Z")

</div>

Hello Every One I m using logstash http input and tcp inout in multiple conf file in single logstash machine while I start machin I am getting tcp input DATA in to http input this is ODD how can I fix this please sugg…

---

## [Unable to authenticate to Strigo lab for Observability Fundamentals course (ID: E-5VNZ9V)](https://discuss.elastic.co/t/unable-to-authenticate-to-strigo-lab-for-observability-fundamentals-course-id-e-5vnz9v/303936)

<div class="topic-metadata">

**Author:** [@Kundan\_kumar1](https://discuss.elastic.co/u/Kundan_kumar1)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 6:24am UTC](https://discuss.elastic.co/t/unable-to-authenticate-to-strigo-lab-for-observability-fundamentals-course-id-e-5vnz9v/303936 "2022-05-06T06:24:21Z")

</div>

Strigo requests for an email as username, while the Observability Fundamentals course (ID: E-5VNZ9V) provides a non-email username ('training'). Am unable to log-on to Strigo.

---

## [Dictionary decompounder: only longest match doesn't work](https://discuss.elastic.co/t/dictionary-decompounder-only-longest-match-doesnt-work/303598)

<div class="topic-metadata">

**Author:** [@Arisara\_Pornwattanav](https://discuss.elastic.co/u/Arisara_Pornwattanav)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 5:29am UTC](https://discuss.elastic.co/t/dictionary-decompounder-only-longest-match-doesnt-work/303598 "2022-05-06T05:29:34Z")

</div>

Hi I have problem with analyzer: dictionary decompounder. I need the analyzer output as the longest word that match the dictionary. So, I set the word\_list: theredapple, redapple, apple and I also set only\_longest\_matc…

---

## [Logs are not in correct order and timestamp mismatch](https://discuss.elastic.co/t/logs-are-not-in-correct-order-and-timestamp-mismatch/303715)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 4:55am UTC](https://discuss.elastic.co/t/logs-are-not-in-correct-order-and-timestamp-mismatch/303715 "2022-05-06T04:55:23Z")

</div>

Hello team, We could see the logs flowing in kibana are not in correct order if the multiple logs are having same timestamp. In below mentioned case, the timestamp of three logs were in same timestamp as "14:40:13,117" …

---

## [OCR highlighter for Alto or hOCR formats](https://discuss.elastic.co/t/ocr-highlighter-for-alto-or-hocr-formats/304051)

<div class="topic-metadata">

**Author:** [@evelix](https://discuss.elastic.co/u/evelix)\
**Replies:** 1\
**Last updated:** [May 6, 2022, 4:49am UTC](https://discuss.elastic.co/t/ocr-highlighter-for-alto-or-hocr-formats/304051 "2022-05-06T04:49:31Z")

</div>

We use an OCR software to extract the fulltext from scanned images in Alto or hOCR format. These formats basically know the coordinates of each word on the scanned image. When doing a search against the fulltext, a requ…

---

## [False Positive Report - DriverGenius.exe](https://discuss.elastic.co/t/false-positive-report-drivergenius-exe/302615)

<div class="topic-metadata">

**Author:** [@Driver-Soft](https://discuss.elastic.co/u/Driver-Soft)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 1:16am UTC](https://discuss.elastic.co/t/false-positive-report-drivergenius-exe/302615 "2022-05-06T01:16:25Z")

</div>

We followed your instruction to submitted a false positive report to fp\_reports@elastic.co 30 days ago but not get any reply. Hash: 2ceac1bdcc3718a4f824e41d62e690d089e84d284b37b6efef2cdbd5f545a80d Filename (Optional): D…

---

## [What does this alert mean and how to prevent it?](https://discuss.elastic.co/t/what-does-this-alert-mean-and-how-to-prevent-it/304060)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 12:46am UTC](https://discuss.elastic.co/t/what-does-this-alert-mean-and-how-to-prevent-it/304060 "2022-05-06T00:46:54Z")

</div>

Every day there is this alert: I then click on the Allocate missing replica shards which takes me to the Indices view (e.g. Monitoring/Indices). It says Unassigned Shards: 0, which makes sense since the alert says th…

---

## [Adding a AWS Lambda between API Gateway and Spring boot](https://discuss.elastic.co/t/adding-a-aws-lambda-between-api-gateway-and-spring-boot/304034)

<div class="topic-metadata">

**Author:** [@ramakrishnahkr](https://discuss.elastic.co/u/ramakrishnahkr)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 10:50pm UTC](https://discuss.elastic.co/t/adding-a-aws-lambda-between-api-gateway-and-spring-boot/304034 "2022-05-05T22:50:54Z")

</div>

I have a team that has built everything using NodeJS/Typescript. They have specific libraries that are written in typescript that can read the headers the upstream services pass. However, my service is in Spring boot wh…

---

## [Is it possible to bulk edit all rules for certain fields?](https://discuss.elastic.co/t/is-it-possible-to-bulk-edit-all-rules-for-certain-fields/302686)

<div class="topic-metadata">

**Author:** [@Esha](https://discuss.elastic.co/u/Esha)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 10:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-bulk-edit-all-rules-for-certain-fields/302686 "2022-05-05T22:20:03Z")

</div>

Hi Team, Is it possible to bulk edit all rules for timestamp override field to use the event.ingested field? What is the recommended maximum search duration for a rule if there is any?

---

## [How to extract rules and connector using elastic API](https://discuss.elastic.co/t/how-to-extract-rules-and-connector-using-elastic-api/303477)

<div class="topic-metadata">

**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 9:53pm UTC](https://discuss.elastic.co/t/how-to-extract-rules-and-connector-using-elastic-api/303477 "2022-05-05T21:53:40Z")

</div>

i want to export rules and connector from elastic using API i created this request : curl -X POST -u elastic:pass https://myHOST:9243/api/detection\_engine/rules/\_export?exclude\_export\_details=true -H 'kbn-xsrf: true' -…

---

## [Logstash s3 error Failed to open TCP connection](https://discuss.elastic.co/t/logstash-s3-error-failed-to-open-tcp-connection/304068)

<div class="topic-metadata">

**Author:** [@swev](https://discuss.elastic.co/u/swev)\
**Replies:** 0\
**Last updated:** [May 5, 2022, 9:01pm UTC](https://discuss.elastic.co/t/logstash-s3-error-failed-to-open-tcp-connection/304068 "2022-05-05T21:01:27Z")

</div>

I have been trying to get the s3 plugin to work have been running into issues connecting to the url. The interest part is the url it reports in the error message is missing the region, which was referenced in the endpo…

---

## [Udp - Exception in inputworker - Logstash (7.4.2) with netflow plugin](https://discuss.elastic.co/t/udp-exception-in-inputworker-logstash-7-4-2-with-netflow-plugin/304056)

<div class="topic-metadata">

**Author:** [@gurumu](https://discuss.elastic.co/u/gurumu)\
**Replies:** 2\
**Last updated:** [May 5, 2022, 7:58pm UTC](https://discuss.elastic.co/t/udp-exception-in-inputworker-logstash-7-4-2-with-netflow-plugin/304056 "2022-05-05T19:58:39Z")

</div>

\[ERROR\] 2022-05-05 09:24:32.009 \[\<udp.1\] udp - Exception in inputworker {"exception"=\>java.lang.NullPointerException, "backtrace"=\>\["org.jruby.runtime.invokedynamic.InvokeDynamicSupport.callMethodMissing(InvokeDynamicSup…

---

## [Logstash s3 input plugin not working without prefix](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-working-without-prefix/304067)

<div class="topic-metadata">

**Author:** [@sindhu\_vutukuri](https://discuss.elastic.co/u/sindhu_vutukuri)\
**Replies:** 0\
**Last updated:** [May 5, 2022, 7:47pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-working-without-prefix/304067 "2022-05-05T19:47:19Z")

</div>

I am trying to ingest msk logs from s3 bucket to Elasticsearch via logstash input s3 plugin. S3 bucket holds multiple msk cluster logs. Here is my logstash input config input { s3 { "region" =\> "{{ …

---

## [Cannot run EnterpriseSearch without security](https://discuss.elastic.co/t/cannot-run-enterprisesearch-without-security/303975)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 7:46pm UTC](https://discuss.elastic.co/t/cannot-run-enterprisesearch-without-security/303975 "2022-05-05T19:46:51Z")

</div>

Hi I am trying to run a non-secure ES setup with Elasticsearch+Kibana+EnterpriseSearch on my Mac M1 - I have downloaded the tar.gz and am running them from the cmdline directly (after changing the config files) This is…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=637)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=639)
