# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=732 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 733 --- ## [QueryBuilders.moreLikeThis() bug in 7.16 Java API?](https://discuss.elastic.co/t/querybuilders-morelikethis-bug-in-7-16-java-api/294413)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 1:11pm UTC](https://discuss.elastic.co/t/querybuilders-morelikethis-bug-in-7-16-java-api/294413 "2022-01-14T13:11:55Z")
I'm trying to create a SearchRequest with a MoreLikeThisQuery like so: JsonData jsonDocument = JsonData.of(document); LikeDocument likeDocument = new LikeDocument.Builder().doc(jsonDocument).build(); … --- ## [Logstash Configuration File](https://discuss.elastic.co/t/logstash-configuration-file/294266)
**Author:** [@\_Thomas](https://discuss.elastic.co/u/_Thomas)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 12:27pm UTC](https://discuss.elastic.co/t/logstash-configuration-file/294266 "2022-01-14T12:27:54Z")
Hi Guys, first of all, I'm sorry in case I'm asking stupid questions - I'm pretty new to this ELK Topic, and I'm trying to get my head around it. At the moment I'm working on a Logstash config file, that should import … --- ## [Post filter results by score and max\_score](https://discuss.elastic.co/t/post-filter-results-by-score-and-max-score/294366)
**Author:** [@faza.zheten123](https://discuss.elastic.co/u/faza.zheten123)\ **Replies:** 5\ **Last updated:** [January 14, 2022, 11:59am UTC](https://discuss.elastic.co/t/post-filter-results-by-score-and-max-score/294366 "2022-01-14T11:59:59Z")
Hello, I want to show only max scored results. Is it possible? If possible could you tell me how to do it? Thanks as lot! --- ## [Help with pfsense integration](https://discuss.elastic.co/t/help-with-pfsense-integration/294404)
**Author:** [@tsourtsouris](https://discuss.elastic.co/u/tsourtsouris)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 11:22am UTC](https://discuss.elastic.co/t/help-with-pfsense-integration/294404 "2022-01-14T11:22:22Z")
Hello there, I installed the pfsense integration, but I get this fields only: I ship the pfsense logs to an ubuntu server and there I have installed the policy. The syslog server listens only to 9001 udp. How do th… --- ## [Range queries with custom format dates](https://discuss.elastic.co/t/range-queries-with-custom-format-dates/292852)
**Author:** [@vincen.zo](https://discuss.elastic.co/u/vincen.zo)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 10:31am UTC](https://discuss.elastic.co/t/range-queries-with-custom-format-dates/292852 "2022-01-14T10:31:07Z")
Hi, I am having some troubles using single and multiple range clauses in queries with date fields that use dynamic mappings. I frist create an empty index with the following dynamic mappings, including a custom date fo… --- ## [Elastic Security Integeration with Huawei firewall](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868)
**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 10:02am UTC](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868 "2022-01-14T10:02:59Z")
any idea about elastic security integration with Huawei firewall ? any workaround as Huawei integration is not listed in elastic security builtin integrations ? --- ## [Failed to load metata when restarting elasticsearch](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709)
**Author:** [@bruce2](https://discuss.elastic.co/u/bruce2)\ **Replies:** 7\ **Last updated:** [January 14, 2022, 8:23am UTC](https://discuss.elastic.co/t/failed-to-load-metata-when-restarting-elasticsearch/293709 "2022-01-14T08:23:05Z")
When I restart a node of the elasticsearch cluster, it failed to start. I set log level to trace. The logs is like below: \[2022-01-05T19:2...\]\[TRACE\]\[o.e.g.PersistedClusterStateService\] \[HOSTNAME\] found index metadata … --- ## [How to configure Elasticsearch outputs and credentials when using Elastic Agent?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-outputs-and-credentials-when-using-elastic-agent/294379)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-outputs-and-credentials-when-using-elastic-agent/294379 "2022-01-14T08:17:29Z")
Hi, I managed to set up Fleet-managed Elastic Agent on a host. I installed the System integration so the Elastic Agent gather logs and metrics. The agent is healthy according to the Fleet's Agents page on Kibana. Howeve… --- ## [Syncing SQL data with Elastic](https://discuss.elastic.co/t/syncing-sql-data-with-elastic/294372)
**Author:** [@Satyan\_Gupta](https://discuss.elastic.co/u/Satyan_Gupta)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 7:27am UTC](https://discuss.elastic.co/t/syncing-sql-data-with-elastic/294372 "2022-01-14T07:27:02Z")
Hello Everyone, I am new to elastic and facing issue to keep my sql database in sync with elastic. Here is my logstash config file. input { jdbc { jdbc\_driver\_library =\> "C:\\Users\\satyang.sw\\Desktop\\ELK\_Stack\\log… --- ## [Kibana Yellow Status due to new encryptedSavedObjects encryptionkey](https://discuss.elastic.co/t/kibana-yellow-status-due-to-new-encryptedsavedobjects-encryptionkey/294362)
**Author:** [@ikbal](https://discuss.elastic.co/u/ikbal)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 6:56am UTC](https://discuss.elastic.co/t/kibana-yellow-status-due-to-new-encryptedsavedobjects-encryptionkey/294362 "2022-01-14T06:56:55Z")
Hello everyone, I currently having issues with Kibana where the xpack.encryptedSavedObjects.encryptionKey been changed to a new one. I forgot to backup the old key and now using the new key. After restarting the kibana,… --- ## [Logstash User Survey](https://discuss.elastic.co/t/logstash-user-survey/294248)
**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\ **Replies:** 2\ **Last updated:** [January 14, 2022, 6:48am UTC](https://discuss.elastic.co/t/logstash-user-survey/294248 "2022-01-14T06:48:19Z")
Hi, I know it's been a while ago, but I ran into the post about Logstash user survey Logstash User Survey Results | Elastic Blog recently and I found the blog really useful, since it also includes the link to the raw fi… --- ## [Confused about Explicit Mapping in Synonym Graph](https://discuss.elastic.co/t/confused-about-explicit-mapping-in-synonym-graph/294368)
**Author:** [@learningmore](https://discuss.elastic.co/u/learningmore)\ **Replies:** 0\ **Last updated:** [January 14, 2022, 6:35am UTC](https://discuss.elastic.co/t/confused-about-explicit-mapping-in-synonym-graph/294368 "2022-01-14T06:35:31Z")
I've read the document on Synonym Graph, but I am still confused about explicit mapping. Assume that we have the following data: horse mouse chicken rooster duck cow Let's assume the synonym file has the following ent… --- ## [SURICATA LOGS NOT SHOWING UP IN NETWORK EVENTS IN ELASTIC SIEM](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 13\ **Last updated:** [January 14, 2022, 6:30am UTC](https://discuss.elastic.co/t/suricata-logs-not-showing-up-in-network-events-in-elastic-siem/293176 "2022-01-14T06:30:27Z")
Hi, I have installed elastic agent, on my host machine. I created a policy named suricata and I have added integrations of endpoint security and suricata. At the host end I have installed centos and have installed suric… --- ## [How to copy from Kibana Logs easily?](https://discuss.elastic.co/t/how-to-copy-from-kibana-logs-easily/294140)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 5:32am UTC](https://discuss.elastic.co/t/how-to-copy-from-kibana-logs-easily/294140 "2022-01-14T05:32:01Z")
I use Kibana to view the Logs, and I want to copy some lines from it. However, when copying, I get something like the following in my clipboard: 16:55:10.943 MyTag \[Debug\] my message 16:55:10.956 AnotherTag \[Info\] anoth… --- ## [Updating documents within a Hot-Warm-Cold Index Management Lifecycle](https://discuss.elastic.co/t/updating-documents-within-a-hot-warm-cold-index-management-lifecycle/294314)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:43pm UTC](https://discuss.elastic.co/t/updating-documents-within-a-hot-warm-cold-index-management-lifecycle/294314 "2022-01-13T18:43:41Z")
Hello, I have set up an index lifecycle policy with rollover enable either for a max index size of 50gb or 30 days. The indices will move to a warm phase on rollover and to a cold phase after 90 days. Phase descriptio… --- ## [Aggregating Case Information](https://discuss.elastic.co/t/aggregating-case-information/291836)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 4\ **Last updated:** [January 14, 2022, 12:20am UTC](https://discuss.elastic.co/t/aggregating-case-information/291836 "2022-01-14T00:20:10Z")
Hello, I would like to aggregate case information monthly into certain reports, for example, how many cases were opened in the last month, status, etc.. I know all cases are stored as saved objects, and I was looking i… --- ## [CrashLoopBackOff on ECK startup with Dynamic Local Persistant Volume via OpenEBS](https://discuss.elastic.co/t/crashloopbackoff-on-eck-startup-with-dynamic-local-persistant-volume-via-openebs/294338)
**Author:** [@svelem](https://discuss.elastic.co/u/svelem)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 10:48pm UTC](https://discuss.elastic.co/t/crashloopbackoff-on-eck-startup-with-dynamic-local-persistant-volume-via-openebs/294338 "2022-01-13T22:48:05Z")
Hello, We have a :wheel\_of\_dharma: cluster with 1 master ( 1 core, 4g memory ) 2 worknodes ( 2 core, 8g memory ) When starting my data & master nodes resut in a CrashLoopBackOff. I've been trying to debug the issue… --- ## [Frequent log in kibana 7.16.2](https://discuss.elastic.co/t/frequent-log-in-kibana-7-16-2/294148)
**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 10:06pm UTC](https://discuss.elastic.co/t/frequent-log-in-kibana-7-16-2/294148 "2022-01-13T22:06:07Z")
After upgrading Kibana 7.11.1 to 7.16.2, we are seeing continuous log in Kibana log file. Also, ES queries is being printed in log. We are seeing such continuous log in Kibana 7.11.1 after successful startup. But We ar… --- ## [Unable to seeing any of the “pew pew” lines on the Network tab in Elastic Security](https://discuss.elastic.co/t/unable-to-seeing-any-of-the-pew-pew-lines-on-the-network-tab-in-elastic-security/294283)
**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-seeing-any-of-the-pew-pew-lines-on-the-network-tab-in-elastic-security/294283 "2022-01-13T13:56:49Z")
i am following the elastic blog " Collecting and analyzing Zeek data with Elastic Security" everything is working except I am not able to seeing any of the “pew pew” lines on the Network tab in Elastic Security. i hav… --- ## [Ansible roles being deprecated and to support Version 8.0.0?](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233)
**Author:** [@Andrew\_DeMarsh](https://discuss.elastic.co/u/Andrew_DeMarsh)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 7:38pm UTC](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233 "2022-01-13T19:38:11Z")
Hey I've found notices in Elastic's git repos inside the Ansible roles that I currently use for rolling out Elasticsearch in our different environments saying: This Ansible role is being deprecated and will not be upda… --- ## [\[ANNOUNCEMENT\] - spring-elasticsearch 7.1 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-7-1-released/294315)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:44pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-7-1-released/294315 "2022-01-13T18:44:01Z")
The spring-elasticsearch team is pleased to announce the spring-elasticsearch-7.1 release! Spring factories for Elasticsearch Usage Add this library to you project: \ \fr.pilato.spring\ … --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.16 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-16-released/294313)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 6:41pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-16-released/294313 "2022-01-13T18:41:05Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.16 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias, template creation and index lifecyc… --- ## [Share visualization in editable mode in iFrame](https://discuss.elastic.co/t/share-visualization-in-editable-mode-in-iframe/293920)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 5:25pm UTC](https://discuss.elastic.co/t/share-visualization-in-editable-mode-in-iframe/293920 "2022-01-13T17:25:46Z")
Hi, is it possible to share visualization in editable mode? If I share dashboard in edit mode, I see the gearwheel in the corner for choosing option "edit visualization" but when I click on it, my iFrame just spreads … --- ## [Usage coordinator node before ingest node and data node](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149)
**Author:** [@acidborn601](https://discuss.elastic.co/u/acidborn601)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:42pm UTC](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149 "2022-01-13T16:42:42Z")
Hi all! We have cluster with 3 dedicated master nodes, 4 dedicated ingest nodes and 28 dedicated data nodes. Data sent to ingest nodes from filebeat. Max.performance indexing on this configuration ~200000 tps. Question… --- ## [How to escape new line character?](https://discuss.elastic.co/t/how-to-escape-new-line-character/294254)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 4:17pm UTC](https://discuss.elastic.co/t/how-to-escape-new-line-character/294254 "2022-01-13T16:17:22Z")
"MethodParameter" =\> "{\\r\\n \\"getCardholderBalance\\": {\\r\\n \\"acquirer\\": {\\r\\n \\"id\\": \\"testdemo\\",\\r\\n \\"userId\\": \\"xxxxx\\",\\r\\n \\"password\\": \\"xxxxxxxxxxxxxxx\\"\\r\\n },\\r\\n \\"card\\": {\\r\\n… --- ## [Enrich processor limitations](https://discuss.elastic.co/t/enrich-processor-limitations/294295)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 3:33pm UTC](https://discuss.elastic.co/t/enrich-processor-limitations/294295 "2022-01-13T15:33:26Z")
Hey, I'm working with enrich processor to add data from my already existing logs to the ones that are being ingested. What makes it challenging is the fact that the logs that are the »source« of information are also con… --- ## [How to remove date and time in message](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 3\ **Last updated:** [January 13, 2022, 2:59pm UTC](https://discuss.elastic.co/t/how-to-remove-date-and-time-in-message/294280 "2022-01-13T14:59:56Z")
Hi, how can i remove the date and time from the message field? and above all is it possible? example screen shot: --- ## [Delete value from filed in recursive way](https://discuss.elastic.co/t/delete-value-from-filed-in-recursive-way/294088)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 2:44pm UTC](https://discuss.elastic.co/t/delete-value-from-filed-in-recursive-way/294088 "2022-01-13T14:44:29Z")
Hi I need to remove from a few fields in the recursive way some value so I've tried in two steps but without success, can You check what's wrong input data: "ue\_stat" =\> "undefined-undefined", "s\_gw" =\> "122.123.205… --- ## [Elasticsearch - Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/elasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/294287)
**Author:** [@makeshkumar](https://discuss.elastic.co/u/makeshkumar)\ **Replies:** 0\ **Last updated:** [January 13, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/294287 "2022-01-13T14:00:12Z")
Hi Team, We are using the ELK stack and we are getting the below error in our logstash pods logs . Logs are sending slowly or some time it is not at all processing the logs . Note: We checked the elasatic search servi… --- ## [Kibana was available (Was degraded)](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:55pm UTC](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193 "2022-01-13T13:55:56Z")
Hello all, I am using version 7.16.2 for my elastic stack. I have a three node cluster implementation. when I updated the stack to 7.16.2, I noticed following in my logs log \[12:00:44.067\] \[info\]\[status\] Kibana is… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=731) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=733)