# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1010 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1011 --- ## [Unable to export Kibana dashboard](https://discuss.elastic.co/t/unable-to-export-kibana-dashboard/298080)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 23\ **Last updated:** [March 17, 2022, 2:06pm UTC](https://discuss.elastic.co/t/unable-to-export-kibana-dashboard/298080 "2022-03-17T14:06:08Z")
Hi All. I am using ELK7.6.2 stack. When I try to export a dashboard I get a 404 error. Please see below $ curl -k -u user:password -X GET "http://\`hostname\`:5601/api/kibana/dashboards/export?dashboard=93454870-94dc-11e… --- ## [Saving percolator with query string and wildcard fields search](https://discuss.elastic.co/t/saving-percolator-with-query-string-and-wildcard-fields-search/293991)
**Author:** [@vohanka](https://discuss.elastic.co/u/vohanka)\ **Replies:** 8\ **Last updated:** [March 17, 2022, 1:33pm UTC](https://discuss.elastic.co/t/saving-percolator-with-query-string-and-wildcard-fields-search/293991 "2022-03-17T13:33:20Z")
Hello I am trying to save percolator query with code which looks like this "query": "Content.\\\\\*:apple OR android" but i got error response which looks like this No field mapping can be found for the field with name … --- ## [Failed to query elasticsearch for previous event Cannot cast org.jruby.RubyNil to org.jruby.RubyString](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event-cannot-cast-org-jruby-rubynil-to-org-jruby-rubystring/299953)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 0\ **Last updated:** [March 17, 2022, 1:06pm UTC](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event-cannot-cast-org-jruby-rubynil-to-org-jruby-rubystring/299953 "2022-03-17T13:06:18Z")
Im using Elasticsearch filter plugin as below elasticsearch { hosts =\> \["localhost:9200"\] index =\> "dashboard\_write" query =\> "sessionID:%{\[sid\]}" fields =\> \["authsid","sid"\] … --- ## [Excessive time to recreate the index](https://discuss.elastic.co/t/excessive-time-to-recreate-the-index/299699)
**Author:** [@hrodriguez](https://discuss.elastic.co/u/hrodriguez)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 12:00pm UTC](https://discuss.elastic.co/t/excessive-time-to-recreate-the-index/299699 "2022-03-17T12:00:49Z")
Hi! I am working with Kibana and I have some problems with my index. I use two index one is allways correct and never lost data. These index are made by a consult to PosgreSQL this only take 100ms but on kibana the da… --- ## [Elasticsearch-java - BulkOperation and IndexRequest have different behaviour with same custom JsonpSerializer](https://discuss.elastic.co/t/elasticsearch-java-bulkoperation-and-indexrequest-have-different-behaviour-with-same-custom-jsonpserializer/298496)
**Author:** [@fmarazita](https://discuss.elastic.co/u/fmarazita)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-java-bulkoperation-and-indexrequest-have-different-behaviour-with-same-custom-jsonpserializer/298496 "2022-03-17T11:10:20Z")
Hi, It seems that BulkOperation and IndexRequest with same tDocumentSerialization have different behaviour. Elastic version: 7.16.3 I created a test with the same upsert operation, with and without using bulk operatio… --- ## [Unassigned shards because of different elasticsearch version](https://discuss.elastic.co/t/unassigned-shards-because-of-different-elasticsearch-version/299182)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 10:33am UTC](https://discuss.elastic.co/t/unassigned-shards-because-of-different-elasticsearch-version/299182 "2022-03-17T10:33:06Z")
Hi All, Recently I have upgraded the one data node , Node got successfully upgraded but there are some unassigned shards which are not being replicated to other nodes because of below error: "explanation" : "cannot all… --- ## [ELK installing](https://discuss.elastic.co/t/elk-installing/299936)
**Author:** [@SOC](https://discuss.elastic.co/u/SOC)\ **Replies:** 0\ **Last updated:** [March 17, 2022, 10:31am UTC](https://discuss.elastic.co/t/elk-installing/299936 "2022-03-17T10:31:41Z")
HI All I'm planning for deploy ELK SIEM 8.1 for small organization, as of now I don't have any idea of how many assets or servers i need integrate in ELK SIEM. Please let me know system requirement or server configurat… --- ## [Update by Query elastic on field type as Text - ES 7.17](https://discuss.elastic.co/t/update-by-query-elastic-on-field-type-as-text-es-7-17/299837)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 3\ **Last updated:** [March 17, 2022, 10:23am UTC](https://discuss.elastic.co/t/update-by-query-elastic-on-field-type-as-text-es-7-17/299837 "2022-03-17T10:23:36Z")
Trying to do "findAndModify" in ES According to doc Update By Query API | Elasticsearch Guide \[7.17\] | Elastic We have mapping as the following: { "dynamic\_templates": \[ { "strings\_as\_keywords": { … --- ## [When using synonyms, got exception "term: xxx analyzed to a token (xxx) with position increment != 1 (got: 0)](https://discuss.elastic.co/t/when-using-synonyms-got-exception-term-xxx-analyzed-to-a-token-xxx-with-position-increment-1-got-0/299259)
**Author:** [@Cindy\_X](https://discuss.elastic.co/u/Cindy_X)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 10:06am UTC](https://discuss.elastic.co/t/when-using-synonyms-got-exception-term-xxx-analyzed-to-a-token-xxx-with-position-increment-1-got-0/299259 "2022-03-17T10:06:18Z")
Hi team, We tried to find the root cause of an exception while using synonyms. This is the synonym filter: "japanese\_index\_synonym": { "type": "synonym\_graph", "lenient": false, "sy… --- ## [Elastic did not load properly. Check the server output for more information](https://discuss.elastic.co/t/elastic-did-not-load-properly-check-the-server-output-for-more-information/299366)
**Author:** [@Lucas\_Roberto](https://discuss.elastic.co/u/Lucas_Roberto)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 10:03am UTC](https://discuss.elastic.co/t/elastic-did-not-load-properly-check-the-server-output-for-more-information/299366 "2022-03-17T10:03:42Z")
I followed the ES Quickstart guide, but I still receiving the error "Elastic did not load properly. Check the server output for more information" when I try to acess the KIbana dashboard on my browser. For information, … --- ## [Upgrade to 8.1 from 7.14.0](https://discuss.elastic.co/t/upgrade-to-8-1-from-7-14-0/299409)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 10:03am UTC](https://discuss.elastic.co/t/upgrade-to-8-1-from-7-14-0/299409 "2022-03-17T10:03:21Z")
We are planning to upgrade Elasticsearch from 7.14 to 8.1. The doubt I have is about index templates. As legacy templates are deprecated in favor of composable templates. So before upgrade do we need to change all exist… --- ## [Union of queries in highRestClient java 7.9.1](https://discuss.elastic.co/t/union-of-queries-in-highrestclient-java-7-9-1/299568)
**Author:** [@Anna\_Kuranda](https://discuss.elastic.co/u/Anna_Kuranda)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 10:02am UTC](https://discuss.elastic.co/t/union-of-queries-in-highrestclient-java-7-9-1/299568 "2022-03-17T10:02:18Z")
I try to do few selects in elk and union results of query Like in sql (select .... ) UNION (select..) Is there way todo it in one request ? Thanks --- ## [Outsource parts in queries](https://discuss.elastic.co/t/outsource-parts-in-queries/299450)
**Author:** [@simobrusch](https://discuss.elastic.co/u/simobrusch)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 10:01am UTC](https://discuss.elastic.co/t/outsource-parts-in-queries/299450 "2022-03-17T10:01:03Z")
So let's say I have the following code in C# using NEST: private ISearchResponse\ GetFilteredResultsByIds(ElasticClient client, Query query) { return client.Search\(s =\> s … --- ## [Store certificated in keystore](https://discuss.elastic.co/t/store-certificated-in-keystore/299889)
**Author:** [@ginolegigot](https://discuss.elastic.co/u/ginolegigot)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 9:51am UTC](https://discuss.elastic.co/t/store-certificated-in-keystore/299889 "2022-03-17T09:51:26Z")
Hello, If i properly understood this doc and especially this paragraph: The elasticsearch-certutil outputs a PKCS#12 keystore which includes the CA certificate as a trusted certificate entry. This allows for the keyst… --- ## [Include all hosts that met condition in watcher email alert](https://discuss.elastic.co/t/include-all-hosts-that-met-condition-in-watcher-email-alert/299866)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 9:34am UTC](https://discuss.elastic.co/t/include-all-hosts-that-met-condition-in-watcher-email-alert/299866 "2022-03-17T09:34:58Z")
Hello, I am wondering if it is possible to include all hosts that have met the condition set in the watcher in one email? I would like to send my clients a list of devices that have met the condition once a day. Here i… --- ## [DSL Query with match phrase](https://discuss.elastic.co/t/dsl-query-with-match-phrase/299922)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 8:35am UTC](https://discuss.elastic.co/t/dsl-query-with-match-phrase/299922 "2022-03-17T08:35:49Z")
Hi, My Doc in Index. I want to query fields in the source. { "\_index" : "hi-2022.01.04", "\_type" : "\_doc", "\_id" : "-e2AIn4BnkeJqJCuSq9B", "\_version" : 16, "\_seq\_no" : 264786, "\_primary\_term" : 2, "found"… --- ## [Elastic search with tokenizer](https://discuss.elastic.co/t/elastic-search-with-tokenizer/299562)
**Author:** [@fizhhh1997](https://discuss.elastic.co/u/fizhhh1997)\ **Replies:** 4\ **Last updated:** [March 17, 2022, 7:28am UTC](https://discuss.elastic.co/t/elastic-search-with-tokenizer/299562 "2022-03-17T07:28:20Z")
Hi, i am wonder about the important of tokenizer when searching with Elasticsearch ? how can i accurate search with setting tokenizer --- ## [Average for a string field in Kibana visualization](https://discuss.elastic.co/t/average-for-a-string-field-in-kibana-visualization/299819)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 6:37am UTC](https://discuss.elastic.co/t/average-for-a-string-field-in-kibana-visualization/299819 "2022-03-17T06:37:45Z")
Hi all, I'm trying to find average for a string field and I want to show in a bar chart in Kibana by date. In my dataset, Say I have hundreds of computers with a computer\_id ( string field). I have hundreds of Virus a… --- ## [Logstash mutate add\_field into all logs/data](https://discuss.elastic.co/t/logstash-mutate-add-field-into-all-logs-data/299918)
**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\ **Replies:** 0\ **Last updated:** [March 17, 2022, 6:28am UTC](https://discuss.elastic.co/t/logstash-mutate-add-field-into-all-logs-data/299918 "2022-03-17T06:28:43Z")
Hi, I have a question regarding logstash.. Right now, I have a few different CSV files that are being shipped into logstash. The CSV file example is below. THE example File 1 url.com ,192.xxx.xxx.xxx,product-A urlA.c… --- ## [Is ILM (index lifecycle management) supported in Elassticsearch-OSS？](https://discuss.elastic.co/t/is-ilm-index-lifecycle-management-supported-in-elassticsearch-oss/299916)
**Author:** [@805728578](https://discuss.elastic.co/u/805728578)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 5:55am UTC](https://discuss.elastic.co/t/is-ilm-index-lifecycle-management-supported-in-elassticsearch-oss/299916 "2022-03-17T05:55:19Z")
version: 6.8.23 --- ## [Need to ship confluent cloud logs and metrics](https://discuss.elastic.co/t/need-to-ship-confluent-cloud-logs-and-metrics/297962)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 16\ **Last updated:** [March 17, 2022, 5:39am UTC](https://discuss.elastic.co/t/need-to-ship-confluent-cloud-logs-and-metrics/297962 "2022-03-17T05:39:08Z")
Hi team, Need to ship confluent cloud logs/metrics to beats that are installed on a Kubernetes cluster and eventually to Elasticsearch. Have read about Elasticsearch syn connector but can we first ship it to beats and … --- ## [How metricbeat to monitor Filebeat running in Daemonset on K8s](https://discuss.elastic.co/t/how-metricbeat-to-monitor-filebeat-running-in-daemonset-on-k8s/299397)
**Author:** [@cmy214](https://discuss.elastic.co/u/cmy214)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 5:23am UTC](https://discuss.elastic.co/t/how-metricbeat-to-monitor-filebeat-running-in-daemonset-on-k8s/299397 "2022-03-17T05:23:42Z")
Hi all, My filebeat is in Daemonset on K8s cluster. In 7.17 internal monitoring of beats is removed and requires a separate metricbeat for achieving monitoring. So I'm setting up metricbeat as Daemonset to monitor my … --- ## [ERROR: Failed to determine the health of the cluster. Unexpected http status \[403\]](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-unexpected-http-status-403/299836)
**Author:** [@ArunKumarC](https://discuss.elastic.co/u/ArunKumarC)\ **Replies:** 3\ **Last updated:** [March 17, 2022, 5:14am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-unexpected-http-status-403/299836 "2022-03-17T05:14:10Z")
ERROR: Failed to determine the health of the cluster. Unexpected http status \[403\] not able to get the enrollment token getting above error. please help me on this issue --- ## [Does BULK API returns results before task is completed?](https://discuss.elastic.co/t/does-bulk-api-returns-results-before-task-is-completed/299911)
**Author:** [@lonewolf](https://discuss.elastic.co/u/lonewolf)\ **Replies:** 3\ **Last updated:** [March 17, 2022, 4:33am UTC](https://discuss.elastic.co/t/does-bulk-api-returns-results-before-task-is-completed/299911 "2022-03-17T04:33:07Z")
I am using Elasticsearch-python bulk helpers to update a index and run a search query with a script. The query executes successfully only if add some timeout (say 10s) between bulk update and script. Is this because bulk… --- ## [Elastic search Add additional condition if type is different](https://discuss.elastic.co/t/elastic-search-add-additional-condition-if-type-is-different/299706)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 3\ **Last updated:** [March 17, 2022, 2:32am UTC](https://discuss.elastic.co/t/elastic-search-add-additional-condition-if-type-is-different/299706 "2022-03-17T02:32:05Z")
I have 2 sets of documents, which are joined by fragmentId . I have written a query that pulls both documents, but I am thinking is there any other way to write it. Parent Document - There could be only 1 such document … --- ## [What is the difference between force merge and freeze index on ILM actions?](https://discuss.elastic.co/t/what-is-the-difference-between-force-merge-and-freeze-index-on-ilm-actions/299811)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 1:28am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-force-merge-and-freeze-index-on-ilm-actions/299811 "2022-03-17T01:28:31Z")
Is there any difference between force merge and freeze index action in ILM? My entire ILM is under below. In warm phase, the index is merged to a single segment which makes the index read only. { "policy": { "ph… --- ## [How can I sign out of Kibana v7.7.0](https://discuss.elastic.co/t/how-can-i-sign-out-of-kibana-v7-7-0/299883)
**Author:** [@danny007](https://discuss.elastic.co/u/danny007)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 12:33am UTC](https://discuss.elastic.co/t/how-can-i-sign-out-of-kibana-v7-7-0/299883 "2022-03-17T00:33:38Z")
I'm new to Kibana, I logged into kibana v7.7.0 but cannot find the sign out button. Do I simply close my browser ? That's kind of a strange way to log out of an application, at least to me... Pls enlighten me guys. --- ## [During a rolling restart sometimes all replicas of a single shard go into PRIMARY\_FAILED](https://discuss.elastic.co/t/during-a-rolling-restart-sometimes-all-replicas-of-a-single-shard-go-into-primary-failed/299269)
**Author:** [@rmb938](https://discuss.elastic.co/u/rmb938)\ **Replies:** 3\ **Last updated:** [March 16, 2022, 11:43pm UTC](https://discuss.elastic.co/t/during-a-rolling-restart-sometimes-all-replicas-of-a-single-shard-go-into-primary-failed/299269 "2022-03-16T23:43:28Z")
I have an issue where sometimes during a rolling restart when it gets to a node that has a primary replica once the node is offline the replica shards go into a PRIMARY\_FAILED state. i.e my-index 11 p UNA… --- ## [The Network Adapter could not establish the connection](https://discuss.elastic.co/t/the-network-adapter-could-not-establish-the-connection/299885)
**Author:** [@felipeneto04](https://discuss.elastic.co/u/felipeneto04)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 10:58pm UTC](https://discuss.elastic.co/t/the-network-adapter-could-not-establish-the-connection/299885 "2022-03-16T22:58:36Z")
I'm new here and also to logstash. I'm having trouble trying to connect. I have several branches spread across Brazil, I get data from each one through a VPN connection, and I use a .sh scheduled in CRON to call the sc… --- ## [Kibana stack monitoring dashboard not showing data](https://discuss.elastic.co/t/kibana-stack-monitoring-dashboard-not-showing-data/299902)
**Author:** [@Satya\_Graha](https://discuss.elastic.co/u/Satya_Graha)\ **Replies:** 0\ **Last updated:** [March 16, 2022, 9:24pm UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-dashboard-not-showing-data/299902 "2022-03-16T21:24:42Z")
We are using Elasticsearch 7.9.3 and have enabled monitoring data collection locally. This is our cluster's setting "xpack" : { "monitoring" : { "elasticsearch" : { "collection" : { … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1009) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1011)