# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1003 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1004 --- ## [Only one of dozens of log indexes won't rollover: "source alias does not exist"](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 5\ **Last updated:** [March 23, 2022, 7:52pm UTC](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673 "2022-03-23T19:52:23Z")
ES: 6.8.13 NEST 6.8.6 We have a number of indexes for which we have a programmatic process that checks rollover criteria (ie. max age, max size, etc.) every night. They all have essentially identical template rules, e… --- ## [How to add Script Params and Language using SortDescriptor in ElasticSearch Nest client](https://discuss.elastic.co/t/how-to-add-script-params-and-language-using-sortdescriptor-in-elasticsearch-nest-client/300498)
**Author:** [@aashini](https://discuss.elastic.co/u/aashini)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 7:51pm UTC](https://discuss.elastic.co/t/how-to-add-script-params-and-language-using-sortdescriptor-in-elasticsearch-nest-client/300498 "2022-03-23T19:51:13Z")
I am using Elasticsearch Nest client in .Net application and looking for a syntax to add Params and Language in script based sorting with Sort Descriptor. Below is the code with SortDescriptor : string shortestDistance… --- ## [Snapshot repository - Unable to refresh Azure sas\_token](https://discuss.elastic.co/t/snapshot-repository-unable-to-refresh-azure-sas-token/300380)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 6:19pm UTC](https://discuss.elastic.co/t/snapshot-repository-unable-to-refresh-azure-sas-token/300380 "2022-03-23T18:19:10Z")
Hi all, Our test cluster (3 nodes, version 8.1.1, on RHEL 7.9 VMs) shows "Some repositories contain errors" message. Using the option "Verify repository" I got "Not connected" and details shows that Azure sas\_token has… --- ## [Logstash not sending logs to Elasticsearch](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037)
**Author:** [@wallace84](https://discuss.elastic.co/u/wallace84)\ **Replies:** 11\ **Last updated:** [March 23, 2022, 5:46pm UTC](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037 "2022-03-23T17:46:32Z")
Hello, I have been trying for some time to send a simple log to Elasticsearch and after trying a very simple example, the logs are not been sent to Elasticsearch from logstash. Services: In same server for this test O… --- ## [Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 5:16pm UTC](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435 "2022-03-23T17:16:57Z")
Hi, There are some Vulnerabilities in Elasticsearch 7.16.3 version. Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli. While installing Elasticsearch all of t… --- ## [Chorus, the reference implementation for e-commerce, now supports Elasticsearch!](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489)
**Author:** [@flaxsearch](https://discuss.elastic.co/u/flaxsearch)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 5:11pm UTC](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489 "2022-03-23T17:11:22Z")
Hi all, We've been working hard to improve support for Elasticsearch as part of the Chorus stack, an open source reference implementation for tunable, measurable e-commerce search. My colleague Daniel Wrigley has writte… --- ## [Upgrade assistant - node.attributes.data](https://discuss.elastic.co/t/upgrade-assistant-node-attributes-data/300488)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 4:55pm UTC](https://discuss.elastic.co/t/upgrade-assistant-node-attributes-data/300488 "2022-03-23T16:55:59Z")
Im looking at the warnings for Elasticsearch depreciation in Elastic Cloud and its warning that i have servers that have node.attributes.data set I am using the new tiering, ive not been able to see how or where this is… --- ## [Need to add doc to an index with default values](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326)
**Author:** [@Anika\_Mehrotra](https://discuss.elastic.co/u/Anika_Mehrotra)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 4:42pm UTC](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326 "2022-03-23T16:42:06Z")
Suppose i have an index with 2 fields as firstname and lastname both having default values as "test" Now if I insert a new record in that index POST my-index-000001/general { "firstname": "harry", "lastname": "pott… --- ## [Filter, sum and nested fields](https://discuss.elastic.co/t/filter-sum-and-nested-fields/300486)
**Author:** [@Martin.Br](https://discuss.elastic.co/u/Martin.Br)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 4:11pm UTC](https://discuss.elastic.co/t/filter-sum-and-nested-fields/300486 "2022-03-23T16:11:09Z")
Hello, I am facing some difficulties to execute a search query with filter, sum and nested fields. I wish to search within my data all the documents containing positions with assetId 42 and 43. Moreover, I want to fil… --- ## [Show only duplicate documents data table](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 4:05pm UTC](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328 "2022-03-23T16:05:07Z")
Hi all, I'm trying to show only duplicate data table for a set of documents. So I want to show count of records \> 1. But I can't filter to show metric as count \> 1. How to show only duplicates data table with fields? … --- ## [Revit Event / Timestamp field problem](https://discuss.elastic.co/t/revit-event-timestamp-field-problem/300341)
**Author:** [@bailarch](https://discuss.elastic.co/u/bailarch)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:57pm UTC](https://discuss.elastic.co/t/revit-event-timestamp-field-problem/300341 "2022-03-23T15:57:15Z")
Hello, Not sure if anyone is familiar with Revit but I have a problem with '@timestamp' field from Revit Event. Basically I want to see all the projects that have been opened during past 7 days and I did set my Dev too… --- ## [Kibana cannot authenticate with Elasticsearch, stuck in "Kibana server is not ready yet" phase](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397)
**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 3:27pm UTC](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397 "2022-03-23T15:27:43Z")
Quick rundown of what led to my current issue: Index filled EC2 completely, manually deleted nodes, no longer able to start Elasticsearch After wiping the node (i.e Deleting everything inside the /var/lib/elasticsearch … --- ## [Warning 'Relying on default value of \`pipeline.ecs\_compatibility' after updating to logstash 7.16.1](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018)
**Author:** [@d71247](https://discuss.elastic.co/u/d71247)\ **Replies:** 22\ **Last updated:** [March 23, 2022, 2:52pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018 "2022-03-23T14:52:31Z")
Hello, I just updated my Logstash to 7.16.1... but I noticed errors in my conf when starting Logstash.\* the same conf of Logstash works well in version 7.9.1 How do to fix this warning ? Anyone else experienced this? … --- ## [Where did ParseField and XContentParser go?](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348)
**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:05pm UTC](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348 "2022-03-23T15:05:13Z")
I'm trying to change an ES plugin that worked with ES v7.3.0 to work with ES v7.16.3, but it seems like common.ParseField was removed in ES v7.14.0 and common.xcontent.XContentBuilder & common.xcontent.XContentParser wer… --- ## [Parsing array of elements](https://discuss.elastic.co/t/parsing-array-of-elements/300462)
**Author:** [@eliz](https://discuss.elastic.co/u/eliz)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 3:01pm UTC](https://discuss.elastic.co/t/parsing-array-of-elements/300462 "2022-03-23T15:01:01Z")
Hello, I am looking for a way to go from this message { "parent\_field": \[ "Key 1:red", "Key 1:blue", "Key 2:this is green" \] } to: { "key#1": \["red", "blue"\], "key#2": "this is green" } Tried … --- ## [Building a cluster for the first time](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 9\ **Last updated:** [March 23, 2022, 2:54pm UTC](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322 "2022-03-23T14:54:01Z")
Hi All, So i'm trying to build a cluster for the first time, I've always been working in standalone mode, but i now need to step up into a cluster. So I have 3 instances setup and all are going to be master eligible. I… --- ## [Documentation for Fleet API usage](https://discuss.elastic.co/t/documentation-for-fleet-api-usage/300390)
**Author:** [@trudyc](https://discuss.elastic.co/u/trudyc)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 2:53pm UTC](https://discuss.elastic.co/t/documentation-for-fleet-api-usage/300390 "2022-03-23T14:53:46Z")
Hello all, I am looking for better documentation about using the Fleet API in Elastic/Kibana 7.17. I have looked at https://github.com/elastic/kibana/blob/7.17/x-pack/plugins/fleet/common/openapi/README.md https://pe… --- ## [Snapshot Repository with Minio](https://discuss.elastic.co/t/snapshot-repository-with-minio/300475)
**Author:** [@peterON](https://discuss.elastic.co/u/peterON)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-repository-with-minio/300475 "2022-03-23T14:51:58Z")
Hey, I have tried multiple days to get elastic and Minio to talk to each other. For Dev purpose I currently run a docker-compose with Elasticsearch 8.1.1 and the latest Minio. The docker-compose.yml is as basic as it get… --- ## [Alerting in Kibana : formatting for dates](https://discuss.elastic.co/t/alerting-in-kibana-formatting-for-dates/300470)
**Author:** [@agaucher](https://discuss.elastic.co/u/agaucher)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 2:27pm UTC](https://discuss.elastic.co/t/alerting-in-kibana-formatting-for-dates/300470 "2022-03-23T14:27:44Z")
Hello, I use the alerting rules that are directly available in Kibana (i don't use "Watcher"). As action, I send an email and i put the field {{context.hits.0.\_source.inventoryDate}} in the body. It works well, but the… --- ## [Elastic Cloud Ingest Pipeline Change](https://discuss.elastic.co/t/elastic-cloud-ingest-pipeline-change/300365)
**Author:** [@kinderrs](https://discuss.elastic.co/u/kinderrs)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 1:41pm UTC](https://discuss.elastic.co/t/elastic-cloud-ingest-pipeline-change/300365 "2022-03-23T13:41:18Z")
Hi all! I am using Elastic Cloud to collect information from a custom log. I created a ingest pipeline but then found that I had to change/update a portion of the pipeline (a dissect processor) which went from somethin… --- ## [Repository-hdfs error while creating repository to backup elasticsearch index to HDFS](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917)
**Author:** [@Sahana\_Murthy](https://discuss.elastic.co/u/Sahana_Murthy)\ **Replies:** 6\ **Last updated:** [March 23, 2022, 1:39pm UTC](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917 "2022-03-23T13:39:29Z")
Hello everyone, I am stuck in a situation where my Elasticsearch(7.9.0) upgradation is pending due to backup /snapshot not being in place We have 10 ELK node in cluster based in Azure cloud out of which 3 master nodes … --- ## [Aggregation bucket for 1 Million documents in Kibana](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 1:34pm UTC](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420 "2022-03-23T13:34:43Z")
Hi all, I have to process 1M records and download 1M records. So is it practical to use a bucket size of 1Million so that when i download CSV report , it must have 1 Million documents? Or is there another approach for… --- ## [Where are timelion visualizations saved?](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387)
**Author:** [@fcarrasco](https://discuss.elastic.co/u/fcarrasco)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 1:22pm UTC](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387 "2022-03-23T13:22:39Z")
Hi we have Elasticsearch 7.16.3 Platinum, we create 35 viz in timelion but we need change name of index. Where are timelion visualizations saved? In any system index? Anybody have script to update index name? Any ap… --- ## [High CPU Usage on some filebeat instances](https://discuss.elastic.co/t/high-cpu-usage-on-some-filebeat-instances/298426)
**Author:** [@Lebvanih](https://discuss.elastic.co/u/Lebvanih)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 12:25pm UTC](https://discuss.elastic.co/t/high-cpu-usage-on-some-filebeat-instances/298426 "2022-03-23T12:25:15Z")
Hello, Some information about the system as this can help: Installation inside K8S using elastic helm charts. Filebeat version 7.16.3 Amount of pods per nodes: ~160 Amount of logs harvested per nodes: ~100 CPU usage r… --- ## [Communicate between elk and nagios](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439)
**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\ **Replies:** 5\ **Last updated:** [March 23, 2022, 12:21pm UTC](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439 "2022-03-23T12:21:29Z")
how to communicate between elk and nagios --- ## [Search\_as\_you\_type field as subfield](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425)
**Author:** [@casparxu](https://discuss.elastic.co/u/casparxu)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 11:02am UTC](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425 "2022-03-23T11:02:52Z")
Hello experts, I'm using ES v7. I noticed there's a fantastic type called 'search\_ar\_you\_type' can help me with auto-completion. The samples from doc is map the field to this type like: { "mappings": { "propertie… --- ## [ELK stack upgrade 7.13.4 to 8.1](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:58am UTC](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392 "2022-03-23T10:58:47Z")
I apologize in advance if this topic has already been addressed, but I am relatively new to this type of configurations. I currently have the stack (ES, Kibana and Filebeat) at version 7.13.4 but I want to update to the… --- ## [Error on Elastic Search status](https://discuss.elastic.co/t/error-on-elastic-search-status/300406)
**Author:** [@Asha\_Anie\_Bose](https://discuss.elastic.co/u/Asha_Anie_Bose)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 10:55am UTC](https://discuss.elastic.co/t/error-on-elastic-search-status/300406 "2022-03-23T10:55:55Z")
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearc… --- ## [GeoSpatial Query using NEST and ES 7.14](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 2:54pm UTC](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206 "2022-03-22T14:54:48Z")
We are using ES 17.14 and have looked at the docs but have been unable to create a query and wondered if anyone can shed some light on it. 1- We have an IndexA that has a FieldA of type Geoshape with its latitude and l… --- ## [Kibana server is not ready](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:06am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432 "2022-03-23T10:06:55Z")
Hi i am using kibana 7.12.0. i am facing this issue frequently.can please help me with a solution \[ FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index. Please check the health of your El… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1002) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1004)