# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1059

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1060

---

## [Trying to upgrade elasticsearch docker from 1.5.2 to 2.4.6](https://discuss.elastic.co/t/trying-to-upgrade-elasticsearch-docker-from-1-5-2-to-2-4-6/296569)

<div class="topic-metadata">

**Author:** [@Saranya\_V](https://discuss.elastic.co/u/Saranya_V)\
**Replies:** 5\
**Last updated:** [February 10, 2022, 8:26am UTC](https://discuss.elastic.co/t/trying-to-upgrade-elasticsearch-docker-from-1-5-2-to-2-4-6/296569 "2022-02-10T08:26:16Z")

</div>

Can you please share the steps to upgarde the Elasticsearch running in docker. Have tried the steps mentioned in the below link. But all indexes were failing to come up. step1: Disable shard alloation(PUT /\_cluster/stt…

---

## [Why scoring is expensive](https://discuss.elastic.co/t/why-scoring-is-expensive/296808)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [February 10, 2022, 8:25am UTC](https://discuss.elastic.co/t/why-scoring-is-expensive/296808 "2022-02-10T08:25:47Z")

</div>

referring to this doc for example, a score function is computationally expensive and it is sufficient to compute the score on a filtered set of documents. why scoring is expensive in which terms we are talking about. …

---

## [Joins in elasticsearch](https://discuss.elastic.co/t/joins-in-elasticsearch/296810)

<div class="topic-metadata">

**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\
**Replies:** 1\
**Last updated:** [February 10, 2022, 8:24am UTC](https://discuss.elastic.co/t/joins-in-elasticsearch/296810 "2022-02-10T08:24:00Z")

</div>

Hi, I have several index aliases and I need to make a SQL-like join between them. Elasticsearch does not allow to create aliases of aliases. Is there any way to solve this problem.

---

## [Difference between canvas and dashboard](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619)

<div class="topic-metadata">

**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\
**Replies:** 2\
**Last updated:** [February 10, 2022, 7:39am UTC](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619 "2022-02-10T07:39:14Z")

</div>

what is the difference between canvas and dashboards in kibana?

---

## [How to check the total number of data over 10,000?](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799)

<div class="topic-metadata">

**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\
**Replies:** 2\
**Last updated:** [February 10, 2022, 7:26am UTC](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799 "2022-02-10T07:26:00Z")

</div>

Hello friends There are more than 1 million docs in the index. At this time, when information is obtained through match\_all, the total value is displayed as 10,000. How can I check the number of doc? I know that more…

---

## [Unassigned replicas with status CLUSTER\_RECOVERED](https://discuss.elastic.co/t/unassigned-replicas-with-status-cluster-recovered/296746)

<div class="topic-metadata">

**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\
**Replies:** 2\
**Last updated:** [February 10, 2022, 7:00am UTC](https://discuss.elastic.co/t/unassigned-replicas-with-status-cluster-recovered/296746 "2022-02-10T07:00:18Z")

</div>

Hello All, I have a single node Elasticsearch setup. I have unassigned replicas Here is the kibana query through which I am checking: GET \_cat/shards?v=true&h=index,shard,prirep,state,node,unassigned.reason&s=state a…

---

## [Color range on Metric Widget not working on Average Metric](https://discuss.elastic.co/t/color-range-on-metric-widget-not-working-on-average-metric/296737)

<div class="topic-metadata">

**Author:** [@despinola](https://discuss.elastic.co/u/despinola)\
**Replies:** 5\
**Last updated:** [February 10, 2022, 6:38am UTC](https://discuss.elastic.co/t/color-range-on-metric-widget-not-working-on-average-metric/296737 "2022-02-10T06:38:20Z")

</div>

I have a dashboard that is using a color range on two metrics: The first one is a numeric field (count) and the color range works perfectly. The problem appears on the second metric which is also numeric but is an Aver…

---

## [Error: Loading chunk 12 failed](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304)

<div class="topic-metadata">

**Author:** [@zhangbiaozb](https://discuss.elastic.co/u/zhangbiaozb)\
**Replies:** 6\
**Last updated:** [February 10, 2022, 5:54am UTC](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304 "2022-02-10T05:54:38Z")

</div>

I confirm the elistic and kibana are installled correctly in Oracle Linux 7.9. But when I visit the kibana page, the error show: Version: 7.16.3 Build: 46336 Error: Loading chunk 12 failed. (error: http://168.138.163.1…

---

## [Very slow search performance after upgrade to 7.16.1](https://discuss.elastic.co/t/very-slow-search-performance-after-upgrade-to-7-16-1/296152)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 12\
**Last updated:** [February 10, 2022, 5:04am UTC](https://discuss.elastic.co/t/very-slow-search-performance-after-upgrade-to-7-16-1/296152 "2022-02-10T05:04:23Z")

</div>

I have noticed that search performance for my cluster has reduced drastically since upgrading to 7.16.1 (from 7.15). As an example consider an index dns-2022.01.31. There are around 56M docs in this and bulk of those do…

---

## [Logstash sends the log to elasticsearch and Syslog-ng or rsyslog(multiple outputs) which keeps the original log](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322)

<div class="topic-metadata">

**Author:** [@tobyvu](https://discuss.elastic.co/u/tobyvu)\
**Replies:** 7\
**Last updated:** [February 10, 2022, 4:17am UTC](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322 "2022-02-10T04:17:17Z")

</div>

I am wanting to configure the log from: Filebeat -\> Logstash -\> Elasticsearch and syslog-ng(or rsyslog). I configured with Syslog-ng to get the log following the instructions at: Sending logs from Logstash to syslog-ng …

---

## [Rollover\_alias XXX does not point to index XXX](https://discuss.elastic.co/t/rollover-alias-xxx-does-not-point-to-index-xxx/296794)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [February 10, 2022, 2:47am UTC](https://discuss.elastic.co/t/rollover-alias-xxx-does-not-point-to-index-xxx/296794 "2022-02-10T02:47:38Z")

</div>

I see the following error on kibana Index Management, I have some doubts, these indexes have already pointed to the corresponding alias (index.lifecycle.rollover\_alias) according to the template, why is it prompted that …

---

## [Renaming Values](https://discuss.elastic.co/t/renaming-values/296769)

<div class="topic-metadata">

**Author:** [@chin1](https://discuss.elastic.co/u/chin1)\
**Replies:** 2\
**Last updated:** [February 10, 2022, 2:09am UTC](https://discuss.elastic.co/t/renaming-values/296769 "2022-02-10T02:09:06Z")

</div>

Hi there, Is there away to rename values within visuals? so for example filtering Colors which outputs 1 , 2 I want to rename these 1 == 'Red' 2== 'Blue' etc.

---

## [Problem with JDBC-Streaming filter plugin](https://discuss.elastic.co/t/problem-with-jdbc-streaming-filter-plugin/296791)

<div class="topic-metadata">

**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 11:43pm UTC](https://discuss.elastic.co/t/problem-with-jdbc-streaming-filter-plugin/296791 "2022-02-09T23:43:04Z")

</div>

We're running into a problem where we're using jdbc-streaming to query a mysql database using a prepared statement and in some cases we get the error "java.sql.SQLException: No operations allowed after statement closed."…

---

## [Export to CSV shows blank fields](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218)

<div class="topic-metadata">

**Author:** [@Richard\_Schroeder](https://discuss.elastic.co/u/Richard_Schroeder)\
**Replies:** 15\
**Last updated:** [February 9, 2022, 11:36pm UTC](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218 "2022-02-09T23:36:52Z")

</div>

I'm exporting data from a view created from the discover module. In the data there is a field that is filled only in some records, less than 10% of records have this field filled. When I filter or export the entire listi…

---

## [Elasticsearch Software Bill of Materials (SBOM)](https://discuss.elastic.co/t/elasticsearch-software-bill-of-materials-sbom/296763)

<div class="topic-metadata">

**Author:** [@jtp1023](https://discuss.elastic.co/u/jtp1023)\
**Replies:** 1\
**Last updated:** [February 9, 2022, 10:39pm UTC](https://discuss.elastic.co/t/elasticsearch-software-bill-of-materials-sbom/296763 "2022-02-09T22:39:57Z")

</div>

Is there a published SBOM anywhere for Elasticsearch or any other document that shares all the components/libraries used within the application? This would be helpful when investigating security vulnerabilities and deter…

---

## [Update Logstash OSS rpm to fix netty vulnerabilites](https://discuss.elastic.co/t/update-logstash-oss-rpm-to-fix-netty-vulnerabilites/296717)

<div class="topic-metadata">

**Author:** [@pikopl](https://discuss.elastic.co/u/pikopl)\
**Replies:** 1\
**Last updated:** [February 9, 2022, 10:25pm UTC](https://discuss.elastic.co/t/update-logstash-oss-rpm-to-fix-netty-vulnerabilites/296717 "2022-02-09T22:25:18Z")

</div>

Please update logstash OSS rpm to fix following netty-all jars vulnerabilities: \[NVD - CVE-2021-37137\] \[NVD - CVE-2021-37136\] Please update netty-all to at least 4.1.68.Final (currently 4.1.65.Final)

---

## [Trying to add readiness and liveness to filebeat](https://discuss.elastic.co/t/trying-to-add-readiness-and-liveness-to-filebeat/296785)

<div class="topic-metadata">

**Author:** [@anu2](https://discuss.elastic.co/u/anu2)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 9:01pm UTC](https://discuss.elastic.co/t/trying-to-add-readiness-and-liveness-to-filebeat/296785 "2022-02-09T21:01:29Z")

</div>

k8s version-v1.19.16 filebeat version 7.7.1 i am trying to add readiness and liveness to my code. livenessProbe: exec: command: - sh - -c - | #!/usr/bi…

---

## [Kibana rule creation fails using REST API](https://discuss.elastic.co/t/kibana-rule-creation-fails-using-rest-api/296771)

<div class="topic-metadata">

**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\
**Replies:** 7\
**Last updated:** [February 9, 2022, 8:19pm UTC](https://discuss.elastic.co/t/kibana-rule-creation-fails-using-rest-api/296771 "2022-02-09T20:19:38Z")

</div>

I am trying to create a rule using REST API. I tried using curl and also using the console. I get the following error when I try to create the rule. \[types removal\] Specifying types in document index requests is deprec…

---

## [Information about Kibana user's login](https://discuss.elastic.co/t/information-about-kibana-users-login/296731)

<div class="topic-metadata">

**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\
**Replies:** 1\
**Last updated:** [February 9, 2022, 7:15pm UTC](https://discuss.elastic.co/t/information-about-kibana-users-login/296731 "2022-02-09T19:15:55Z")

</div>

Hello! Can you say, where I can find information about users authentication on Kibana? Fail and success. And can I see login of users, who provide incorrent password?

---

## [Watcher for nodes in elasticsearch](https://discuss.elastic.co/t/watcher-for-nodes-in-elasticsearch/296387)

<div class="topic-metadata">

**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\
**Replies:** 8\
**Last updated:** [February 9, 2022, 5:29pm UTC](https://discuss.elastic.co/t/watcher-for-nodes-in-elasticsearch/296387 "2022-02-09T17:29:17Z")

</div>

Hello guys This I my first time working with watchers. Can anyone help me with building watcher for all Elasticsearch nodes are running or stopped that is we should get alert when the node is stopped or started. I nee…

---

## [Ingest data with GCP Dataflow](https://discuss.elastic.co/t/ingest-data-with-gcp-dataflow/294046)

<div class="topic-metadata">

**Author:** [@gustafkisi](https://discuss.elastic.co/u/gustafkisi)\
**Replies:** 11\
**Last updated:** [February 9, 2022, 5:10pm UTC](https://discuss.elastic.co/t/ingest-data-with-gcp-dataflow/294046 "2022-02-09T17:10:29Z")

</div>

Hello. I'm trying to ingest data to ES with the use of GCP Dataflow and the template PubSub to Elasticsearch. So far I've tried a couple of different deployments which are all on GCP using the trial option over at elast…

---

## [Dynamic Templates updates as part of upgrade](https://discuss.elastic.co/t/dynamic-templates-updates-as-part-of-upgrade/296765)

<div class="topic-metadata">

**Author:** [@venkat\_dinesh](https://discuss.elastic.co/u/venkat_dinesh)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 4:57pm UTC](https://discuss.elastic.co/t/dynamic-templates-updates-as-part-of-upgrade/296765 "2022-02-09T16:57:04Z")

</div>

Hi, Context : I am upgrading a set of indices with data from Elasticsearch 7.0 to Elasticsearch 7.10 (I do not have much control over the target version). In some of existing indices, mappings use dynamic\_templates. E…

---

## [Migrate legacy templates to index templates](https://discuss.elastic.co/t/migrate-legacy-templates-to-index-templates/296764)

<div class="topic-metadata">

**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 4:57pm UTC](https://discuss.elastic.co/t/migrate-legacy-templates-to-index-templates/296764 "2022-02-09T16:57:02Z")

</div>

Hello, I can't find any documentation that helps in migrating the legacy templates to the 'new' index templates. A starting point would be apreciated :slight\_smile: Thanks, Roberto D'Arco

---

## [Filter terms aggregation on array field](https://discuss.elastic.co/t/filter-terms-aggregation-on-array-field/296627)

<div class="topic-metadata">

**Author:** [@silarhi](https://discuss.elastic.co/u/silarhi)\
**Replies:** 4\
**Last updated:** [February 9, 2022, 4:56pm UTC](https://discuss.elastic.co/t/filter-terms-aggregation-on-array-field/296627 "2022-02-09T16:56:06Z")

</div>

Hello there, I'm looking for a solution to filter some aggregation terms based on an array field. Here's an example of data: PUT /test-index POST /test-index/\_doc/ { "type": "album", "authors": \[1, 2, 3, 4, 5\] } …

---

## [Unable to Create Index using RestHighLevelClient API, ES 7.12.1](https://discuss.elastic.co/t/unable-to-create-index-using-resthighlevelclient-api-es-7-12-1/296757)

<div class="topic-metadata">

**Author:** [@ashishgp11](https://discuss.elastic.co/u/ashishgp11)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 4:31pm UTC](https://discuss.elastic.co/t/unable-to-create-index-using-resthighlevelclient-api-es-7-12-1/296757 "2022-02-09T16:31:54Z")

</div>

Hi, I am using \`ES 7.12.1\` and when I am trying to create the Index with the code getting an error: client = new RestHighLevelClient(RestClient.builder(new HttpHost("localhost", 9200, "http"))); CreateIndexReque…

---

## [ILM transfer index to cold, than frozen phase with searchable snapshot](https://discuss.elastic.co/t/ilm-transfer-index-to-cold-than-frozen-phase-with-searchable-snapshot/296755)

<div class="topic-metadata">

**Author:** [@bolemebrige](https://discuss.elastic.co/u/bolemebrige)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 4:25pm UTC](https://discuss.elastic.co/t/ilm-transfer-index-to-cold-than-frozen-phase-with-searchable-snapshot/296755 "2022-02-09T16:25:12Z")

</div>

Hi, is it possible to transfer index to cold phase, make snapshot, mount it as fully searchable snapshot and than after some time transfer it to frozen phase while mounting it as partially mounted index. It seems like …

---

## [Filebeat to logstash, no data when logstash run as service, got data when I run by command](https://discuss.elastic.co/t/filebeat-to-logstash-no-data-when-logstash-run-as-service-got-data-when-i-run-by-command/296752)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-no-data-when-logstash-run-as-service-got-data-when-i-run-by-command/296752 "2022-02-09T16:07:45Z")

</div>

Hi, I got several pipelines getting data from a DB, and other new pipelines that get data from filebeat. When I run logstash as a service, I get data from the DB source, but no data from filebeat. When I run logstash b…

---

## [ERROR logstash.outputs.email](https://discuss.elastic.co/t/error-logstash-outputs-email/296729)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 2\
**Last updated:** [February 9, 2022, 3:51pm UTC](https://discuss.elastic.co/t/error-logstash-outputs-email/296729 "2022-02-09T15:51:03Z")

</div>

Hi, My code: email { to =\> "za@gmail.com" via =\> 'smtp' address =\> 'smtp.gmail.com' from =\> 'john@gmail.com' authentication =\> "plain" username =\> "john@gmail.com" password =\> "john123" subject =\> '…

---

## [Tuning number of workers](https://discuss.elastic.co/t/tuning-number-of-workers/296748)

<div class="topic-metadata">

**Author:** [@Sonia1](https://discuss.elastic.co/u/Sonia1)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 3:39pm UTC](https://discuss.elastic.co/t/tuning-number-of-workers/296748 "2022-02-09T15:39:24Z")

</div>

Hello, Currently our logstash consists of 7 pipelines that launch queries against a DB accessed by JDBC. With logstash we enrich and normalize this data and index it directly to Elasticsearch. In total 20 jdbc queries a…

---

## [Openshift elasticsearch image: privileges isues](https://discuss.elastic.co/t/openshift-elasticsearch-image-privileges-isues/296742)

<div class="topic-metadata">

**Author:** [@Sonia1](https://discuss.elastic.co/u/Sonia1)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 3:25pm UTC](https://discuss.elastic.co/t/openshift-elasticsearch-image-privileges-isues/296742 "2022-02-09T15:25:46Z")

</div>

Hi, We want to create a restricted space to certain users who can only have certain read permissions. To do this we are doing the following: From the elastic user, we create the new space "users" with the apps limita…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1058)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1060)
