# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1434

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1435

---

## [7.7 ILM Best Compression](https://discuss.elastic.co/t/7-7-ilm-best-compression/233279)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 4\
**Last updated:** [May 21, 2020, 1:55pm UTC](https://discuss.elastic.co/t/7-7-ilm-best-compression/233279 "2020-05-21T13:55:00Z")

</div>

From the release notes of 7.7 there is Adding best\_compression #49974 I have upgraded to 7.7 and cannot find best compression under ILM and cannot find anything in the guides. Has thise been implemented yet? Thanks …

---

## [APM Agent Tomcat](https://discuss.elastic.co/t/apm-agent-tomcat/233747)

<div class="topic-metadata">

**Author:** [@mhr](https://discuss.elastic.co/u/mhr)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 1:53pm UTC](https://discuss.elastic.co/t/apm-agent-tomcat/233747 "2020-05-21T13:53:58Z")

</div>

HI, I have install APM agent for Tomcat. Below is the setenv config. I am not getting any error in catalina.out file. Tomcat version: 8.0.39, java version:1.8.0\_20. I am not able to find my server in APM service. expo…

---

## [Email Watcher : How to Read "To :" List from Database](https://discuss.elastic.co/t/email-watcher-how-to-read-to-list-from-database/233585)

<div class="topic-metadata">

**Author:** [@RaTheDev](https://discuss.elastic.co/u/RaTheDev)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 5:54pm UTC](https://discuss.elastic.co/t/email-watcher-how-to-read-to-list-from-database/233585 "2020-05-20T17:54:00Z")

</div>

I had configured the Email watcher and successfully send individual reports to different Email distribution lists. But now we have the Distribution Groups defined in our database where my client can control the lists, So…

---

## [Count on last appearance of each type](https://discuss.elastic.co/t/count-on-last-appearance-of-each-type/233727)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 12:52pm UTC](https://discuss.elastic.co/t/count-on-last-appearance-of-each-type/233727 "2020-05-21T12:52:00Z")

</div>

Hi all, Having this data: Time type status May 21, 2020 @ 11:40:48.345 A 1 May 21, 2020 @ 11:40:48.344 B 1 May 21, 2020 @ 11:40:48.344 C 0 May 21, 20…

---

## [Query template not found by Logstash](https://discuss.elastic.co/t/query-template-not-found-by-logstash/233736)

<div class="topic-metadata">

**Author:** [@mielsi30](https://discuss.elastic.co/u/mielsi30)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 12:30pm UTC](https://discuss.elastic.co/t/query-template-not-found-by-logstash/233736 "2020-05-21T12:30:41Z")

</div>

Hello, I am using a .conf file which uses the elasticsearch filter to query an index and enrich the documents coming in. I am using a query template called search\_by\_title.json which is stored in the same directory as t…

---

## [Logstach nested XML indexing using ruby filter](https://discuss.elastic.co/t/logstach-nested-xml-indexing-using-ruby-filter/233560)

<div class="topic-metadata">

**Author:** [@Junior\_Zilles](https://discuss.elastic.co/u/Junior_Zilles)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 2:45pm UTC](https://discuss.elastic.co/t/logstach-nested-xml-indexing-using-ruby-filter/233560 "2020-05-20T14:45:15Z")

</div>

So I have this XML with 30mb and I'm trying to put into Elasticsearch with logstash, each XML can have a lot of pages and each page need to be save in Elasticsearch what I have until now is: \<?xml version="1.0" ?\> …

---

## [Transform api : Can't find destination index in kibana](https://discuss.elastic.co/t/transform-api-cant-find-destination-index-in-kibana/233732)

<div class="topic-metadata">

**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 12:27pm UTC](https://discuss.elastic.co/t/transform-api-cant-find-destination-index-in-kibana/233732 "2020-05-21T12:27:51Z")

</div>

Hi! I run the follwoing query to create a new index using the TRANSFORM API . While the query runs correctly, I can't find the new index (in my case kibana\_sample\_data\_ecommerce\_transform\_210520) in the kibana UI. Can…

---

## [Alerting by amount of "hits"](https://discuss.elastic.co/t/alerting-by-amount-of-hits/233715)

<div class="topic-metadata">

**Author:** [@Or\_Biran](https://discuss.elastic.co/u/Or_Biran)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 12:11pm UTC](https://discuss.elastic.co/t/alerting-by-amount-of-hits/233715 "2020-05-21T12:11:52Z")

</div>

Hi, I want to create a detection rule that if was X unauthorized events then Alert\\Create a signal... how can I do that? thanks!

---

## [Stalled Logstash](https://discuss.elastic.co/t/stalled-logstash/233733)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 12:05pm UTC](https://discuss.elastic.co/t/stalled-logstash/233733 "2020-05-21T12:05:47Z")

</div>

Hi, I had logstash stalled, I've used the --pipeline.unsafe\_shutdown but no luck. Here are the logs. ubuntu@elk:~$ sudo service logstash start --pipeline.unsafe\_shutdown ^C ubuntu@elk:~$ cd /usr/share/logstash/ ubuntu@…

---

## [Elasticsearch warning in debug log](https://discuss.elastic.co/t/elasticsearch-warning-in-debug-log/230285)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 4\
**Last updated:** [May 21, 2020, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-warning-in-debug-log/230285 "2020-05-21T11:58:38Z")

</div>

Hi I'm getting below warning in elasticsearch log \[.kibana\_task\_manager\_1\] not opting out of the query cache; authorization is not allowed I ran these queries POST /.kibana\_task\_manager/\_close PUT /.kibana\_task\_mana…

---

## [Logstash dont send to output](https://discuss.elastic.co/t/logstash-dont-send-to-output/233580)

<div class="topic-metadata">

**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\
**Replies:** 15\
**Last updated:** [May 21, 2020, 11:48am UTC](https://discuss.elastic.co/t/logstash-dont-send-to-output/233580 "2020-05-21T11:48:57Z")

</div>

its a new installation im collecting sflow data using sflow plugin debugging the sflow plugin i can see flows data getting to logstash but nothing is being sent to the output. ive tried to logz.io and to local file. …

---

## [Elasticsearch Search error](https://discuss.elastic.co/t/elasticsearch-search-error/232784)

<div class="topic-metadata">

**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-search-error/232784 "2020-05-21T11:08:28Z")

</div>

Hello guys !! I am working on text similarity using text\_embedding and cosine similarity with elasticsearch I am getting this error : elasticsearch.exceptions.RequestError: RequestError(400, 'search\_phase\_execution\_ex…

---

## [Mapping Create Error using version 6.3](https://discuss.elastic.co/t/mapping-create-error-using-version-6-3/233725)

<div class="topic-metadata">

**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 11:04am UTC](https://discuss.elastic.co/t/mapping-create-error-using-version-6-3/233725 "2020-05-21T11:04:30Z")

</div>

{ "settings": { "analysis": { "filter": { "substring": { "type": "nGram", "min\_gram": "2", "max\_gram": "50" } }, "analyzer": { "str\_index\_analyzer": { "filter": \[ "lowercase", "substring" \], "tokenizer": …

---

## [More search time](https://discuss.elastic.co/t/more-search-time/233136)

<div class="topic-metadata">

**Author:** [@hegebharat](https://discuss.elastic.co/u/hegebharat)\
**Replies:** 9\
**Last updated:** [May 21, 2020, 11:04am UTC](https://discuss.elastic.co/t/more-search-time/233136 "2020-05-21T11:04:22Z")

</div>

Hi, We have case where we have indexed 1billion vectors(each is 512 -dims) using dense\_vector (elastic version 7.6). We are using cosine similarity to find the best hits. But every query is taking 6.7 sec to get the …

---

## [Count if field 1 bigger than field 2](https://discuss.elastic.co/t/count-if-field-1-bigger-than-field-2/232503)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 3\
**Last updated:** [May 21, 2020, 10:57am UTC](https://discuss.elastic.co/t/count-if-field-1-bigger-than-field-2/232503 "2020-05-21T10:57:28Z")

</div>

Hi all, Imaging that i have the data: time. Person. Hours. limit of hours datatime1 person1 5 6 datatime1 person2 7 …

---

## [Visualisation of latest results for distinct test cases in Bar chart, Pie chart](https://discuss.elastic.co/t/visualisation-of-latest-results-for-distinct-test-cases-in-bar-chart-pie-chart/229669)

<div class="topic-metadata">

**Author:** [@aryaman](https://discuss.elastic.co/u/aryaman)\
**Replies:** 3\
**Last updated:** [May 21, 2020, 10:26am UTC](https://discuss.elastic.co/t/visualisation-of-latest-results-for-distinct-test-cases-in-bar-chart-pie-chart/229669 "2020-05-21T10:26:53Z")

</div>

Hi, I am trying to use Kibana 7.6 for making visualisation for test results data. I have around 58 different test cases which have been run multiple times(around 600) and stored in the DB. Now whenever a test is run i…

---

## [Is Metribeat modules beat-xpack, elasticsearch-xpack and logstash-xpack are free or paid?](https://discuss.elastic.co/t/is-metribeat-modules-beat-xpack-elasticsearch-xpack-and-logstash-xpack-are-free-or-paid/233682)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 10:24am UTC](https://discuss.elastic.co/t/is-metribeat-modules-beat-xpack-elasticsearch-xpack-and-logstash-xpack-are-free-or-paid/233682 "2020-05-21T10:24:57Z")

</div>

Is monitoring beats, Elasticsearch, logstash and kibana with Metricbeat using x-pack modules is free or licence ? Simply Monitoring ELK stack with Metricbeat is free or require licence?

---

## [Kibana dashboard Real time](https://discuss.elastic.co/t/kibana-dashboard-real-time/233039)

<div class="topic-metadata">

**Author:** [@Bipin\_Kumar](https://discuss.elastic.co/u/Bipin_Kumar)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 10:07am UTC](https://discuss.elastic.co/t/kibana-dashboard-real-time/233039 "2020-05-21T10:07:48Z")

</div>

Hi Team , Kibana provided API support for creating the new dashboard and visualizer . Do you have any existing functionality in ELK which create any real time dashboard based on the rules and settings ? Please let me …

---

## [JDBC input with SSL enabled](https://discuss.elastic.co/t/jdbc-input-with-ssl-enabled/233516)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 9:59am UTC](https://discuss.elastic.co/t/jdbc-input-with-ssl-enabled/233516 "2020-05-21T09:59:52Z")

</div>

Hi, Earlier I was using logstash jdbc plugin to input mongodb data which was working fine. Now we have made changes to our mongodb and enabled SSL , replicaset with self signed certificate. I am not sure how can I give…

---

## [SSL handshake fails between Kibana/APMServer and Elasticsearch after custom certificate setting on Elasticsearch](https://discuss.elastic.co/t/ssl-handshake-fails-between-kibana-apmserver-and-elasticsearch-after-custom-certificate-setting-on-elasticsearch/208604)

<div class="topic-metadata">

**Author:** [@Bingu\_Shim](https://discuss.elastic.co/u/Bingu_Shim)\
**Replies:** 21\
**Last updated:** [May 21, 2020, 9:48am UTC](https://discuss.elastic.co/t/ssl-handshake-fails-between-kibana-apmserver-and-elasticsearch-after-custom-certificate-setting-on-elasticsearch/208604 "2020-05-21T09:48:34Z")

</div>

I'm trying to configure our own certificate to the Elasticsearch, Kibana and APM Server, and got ssl handshake errors. I referenced This document for setting. The symptoms and my environments are as follow, and if ther…

---

## [Updating of indexes with elasticsearch-py](https://discuss.elastic.co/t/updating-of-indexes-with-elasticsearch-py/233711)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 9:46am UTC](https://discuss.elastic.co/t/updating-of-indexes-with-elasticsearch-py/233711 "2020-05-21T09:46:04Z")

</div>

Hi, I have gotten my python script which is using the elasticsearch-py library to index a csv file which will be updated daily. However, i am currently deleting the existing index and creating it again to "update" the d…

---

## [Kibana - Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/230778)

<div class="topic-metadata">

**Author:** [@santosh1607kumar](https://discuss.elastic.co/u/santosh1607kumar)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 9:45am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/230778 "2020-05-21T09:45:54Z")

</div>

I am trying to run kibana on an ubuntu instance. I have set up elasticsearch and kibana. However when I run kibana using /usr/share/kibana/bin/kibana I get and error which says "Unable to retrieve version information fro…

---

## [Mapping field meta not working](https://discuss.elastic.co/t/mapping-field-meta-not-working/233696)

<div class="topic-metadata">

**Author:** [@suspai](https://discuss.elastic.co/u/suspai)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 8:39am UTC](https://discuss.elastic.co/t/mapping-field-meta-not-working/233696 "2020-05-21T08:39:33Z")

</div>

Hi, I need to create a meta data for the field mapping as mentioned in this url: https://www.elastic.co/guide/en/elasticsearch/reference/7.x/mapping-field-meta.html But it gives a 400 error, as below. Please let me kno…

---

## [Words matching with fuzziness 2 aren't highlighted](https://discuss.elastic.co/t/words-matching-with-fuzziness-2-arent-highlighted/233694)

<div class="topic-metadata">

**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 8:23am UTC](https://discuss.elastic.co/t/words-matching-with-fuzziness-2-arent-highlighted/233694 "2020-05-21T08:23:02Z")

</div>

I have placed highlighter in my search query and performing fuzzy search. Some of the matched words aren't highlighted in despite of fuzzy matching with two character change. For example: "James" is matching with "Thame…

---

## [Is it possible to plot a line chart of moving sum count?](https://discuss.elastic.co/t/is-it-possible-to-plot-a-line-chart-of-moving-sum-count/233693)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 8:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-plot-a-line-chart-of-moving-sum-count/233693 "2020-05-21T08:18:48Z")

</div>

Hello there, I found a option moving average, but is it possible to plot a line chart of moving sum count? Thank you.

---

## [Geoip filter not creating type geo\_point but only string type](https://discuss.elastic.co/t/geoip-filter-not-creating-type-geo-point-but-only-string-type/233551)

<div class="topic-metadata">

**Author:** [@vivitare](https://discuss.elastic.co/u/vivitare)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 7:44am UTC](https://discuss.elastic.co/t/geoip-filter-not-creating-type-geo-point-but-only-string-type/233551 "2020-05-21T07:44:54Z")

</div>

Hello, I'm trying to create a Kibana map with coordinates points from apache log using the plugin geoip. The problem is no geo\_point type are created in Elasticsearch. However, apache log are correctly parsed by filter…

---

## [Logstash 6.8.3 is crashing 'to\_hash\_with\_metadata'](https://discuss.elastic.co/t/logstash-6-8-3-is-crashing-to-hash-with-metadata/233689)

<div class="topic-metadata">

**Author:** [@denzhel](https://discuss.elastic.co/u/denzhel)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 7:26am UTC](https://discuss.elastic.co/t/logstash-6-8-3-is-crashing-to-hash-with-metadata/233689 "2020-05-21T07:26:54Z")

</div>

Hello everyone, I have 4 identical servers that runs the same deployment of Logstash 6.8.3, one of them, only one crashes with the following error: \[2020-05-21T06:11:31,662\]\[ERROR\]\[logstash.pipeline \] Exception …

---

## [ECS for Metricbeat to use "Kibana -\> Metrics"](https://discuss.elastic.co/t/ecs-for-metricbeat-to-use-kibana-metrics/233685)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 0\
**Last updated:** [May 21, 2020, 7:14am UTC](https://discuss.elastic.co/t/ecs-for-metricbeat-to-use-kibana-metrics/233685 "2020-05-21T07:14:36Z")

</div>

Hi! I'm trying to filter my data into ECS properly, right now I'm trying to write CPU stats like perecentage. So my question is: Which fields are required for Kibana -\> Metrics \> CPU Usage? I'm using metricbeat's ind…

---

## [Mutate message in Logstash](https://discuss.elastic.co/t/mutate-message-in-logstash/233272)

<div class="topic-metadata">

**Author:** [@Joseph-Gan-wk](https://discuss.elastic.co/u/Joseph-Gan-wk)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 7:11am UTC](https://discuss.elastic.co/t/mutate-message-in-logstash/233272 "2020-05-21T07:11:32Z")

</div>

Hi all, I want to ask is that Logstash filtering support the case like this:- value field is ABCDE, abcde, 12345, @#$% if the value field is ABCDE and abcde, then overwrite ABCE and abcde to 98765. mutate { match =\>…

---

## [Logstash throws runtime exception while parsing huge XML](https://discuss.elastic.co/t/logstash-throws-runtime-exception-while-parsing-huge-xml/231621)

<div class="topic-metadata">

**Author:** [@Saravana\_Maadavan](https://discuss.elastic.co/u/Saravana_Maadavan)\
**Replies:** 5\
**Last updated:** [May 21, 2020, 7:04am UTC](https://discuss.elastic.co/t/logstash-throws-runtime-exception-while-parsing-huge-xml/231621 "2020-05-21T07:04:22Z")

</div>

Hello, In Logstash I am trying to replace a prefix in the XML which is not having any definition and then indexing it to elastic. Receiving error while parsing some huge XMLs. I would be requiring the full XML to be sto…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1433)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1435)
