# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1060 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1061 --- ## [Snowball token analyzer for Slovenian](https://discuss.elastic.co/t/snowball-token-analyzer-for-slovenian/295589)
**Author:** [@provi](https://discuss.elastic.co/u/provi)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 3:16pm UTC](https://discuss.elastic.co/t/snowball-token-analyzer-for-slovenian/295589 "2022-02-09T15:16:03Z")
Hello there! I'm searching for a Slovenian Snowball (or Stemmer) Analyzer to create a custom plugin (with Java) I already found something for Serbian and Slovak, but I have to recognize, I'm struggling with Slovenian. … --- ## [How to create "index pattern" with C#/NEST API? (creating a saved object) \[7.X\]](https://discuss.elastic.co/t/how-to-create-index-pattern-with-c-nest-api-creating-a-saved-object-7-x/294106)
**Author:** [@jkhadra](https://discuss.elastic.co/u/jkhadra)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:26pm UTC](https://discuss.elastic.co/t/how-to-create-index-pattern-with-c-nest-api-creating-a-saved-object-7-x/294106 "2022-01-17T16:26:25Z")
Hi, I'd like to know the proper syntax for creating an index pattern/saved object using the NEST API. I've tried using the code here, but nothing is ever created when I check manually via Kibana. I'm trying to re-… --- ## [Failed to start Elasticsearch](https://discuss.elastic.co/t/failed-to-start-elasticsearch/296727)
**Author:** [@Ivan\_Scorpey](https://discuss.elastic.co/u/Ivan_Scorpey)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:50pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch/296727 "2022-02-09T14:50:28Z")
I start ES but have Failed to start Elasticsearch and in log java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "setContextClassLoader") --- ## [How to filter nested objects in nested aggregation](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669)
**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:25pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669 "2022-02-09T14:25:39Z")
Hello, I am having a minor issue with an "aggregation" query I have been using for a couple years. My scenario: I have an index of documents that have a "searchByName" nested property. The "searchByName" property is … --- ## [Advice on upgrade winlogbeat v6.4.2 to latest 7.17.0](https://discuss.elastic.co/t/advice-on-upgrade-winlogbeat-v6-4-2-to-latest-7-17-0/296617)
**Author:** [@SuperDolas](https://discuss.elastic.co/u/SuperDolas)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:24pm UTC](https://discuss.elastic.co/t/advice-on-upgrade-winlogbeat-v6-4-2-to-latest-7-17-0/296617 "2022-02-09T14:24:35Z")
Ola First time using the software and would like some help please. I have a few servers still using v6.4.2 and I would like to go to the latest version 7.17.0 What is the best way to get there? Remove all v6 and inst… --- ## [APT fails to install elasticsearch 2.x](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707)
**Author:** [@Viktor\_Habchak](https://discuss.elastic.co/u/Viktor_Habchak)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 2:21pm UTC](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707 "2022-02-09T14:21:37Z")
Hello, I have trouble installing Elasticsearch v2.x on ubuntu 18.04. Here's the output I get with the simplest case: vik@ubuntu:~$ curl -fsSL https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - OK vi… --- ## [Auto\_date\_histogram and extended\_bounds](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 2:14pm UTC](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733 "2022-02-09T14:14:58Z")
Hello, I am trying to make a query using auto\_date\_histogram and extended\_bounds but i get the error: \[auto\_date\_histogram\] unknown field \[extended\_bounds\] the documentation for auto\_date\_histogram does mention exte… --- ## [Multiple hosts per monitor confuses certificate validation since 7.17.0](https://discuss.elastic.co/t/multiple-hosts-per-monitor-confuses-certificate-validation-since-7-17-0/296062)
**Author:** [@PayBas](https://discuss.elastic.co/u/PayBas)\ **Replies:** 7\ **Last updated:** [February 9, 2022, 2:09pm UTC](https://discuss.elastic.co/t/multiple-hosts-per-monitor-confuses-certificate-validation-since-7-17-0/296062 "2022-02-09T14:09:46Z")
Since upgrading Heartbeat to 7.17.0 all my monitors have gone haywire. It seems that if you define multiple hosts per monitor like so: - type: http id: cicd name: CI/CD hosts: - https://a.corp.internal - … --- ## [Secure setting is unauthorized](https://discuss.elastic.co/t/secure-setting-is-unauthorized/295264)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 3\ **Last updated:** [February 9, 2022, 1:50pm UTC](https://discuss.elastic.co/t/secure-setting-is-unauthorized/295264 "2022-02-09T13:50:49Z")
I tried to use basic authentication credentials in metricbeat.yml I set monitor, read\_ilm and read\_pipeline as cluster privileges for role metricbeat\_writer. But I got 403 error code. ERROR \[publisher\_pipeline\_output\] … --- ## [Elasticsearch request failed: 28 - Operation timed out after 1000 milliseconds with 0 bytes received](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284)
**Author:** [@zeleniy](https://discuss.elastic.co/u/zeleniy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284 "2022-02-09T13:31:48Z")
I have PHP web app which interacts with Elasticsearch. It worked well but recently i got error with next text: 2022-01-13 16:43:59 \[95.161.173.18\]\[4669\]\[1tjhk618ubj7tjniq1utjpbntj\]\[error\]\[application\] delete elastic 202… --- ## [Does adding new fields to an existing document works like updating?](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 1:11pm UTC](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720 "2022-02-09T13:11:33Z")
I know the structure of inverted index data structure and worked with inverted index compression algorithms. So, I know why updating a document is not possible in inverted index and why this is simulated by inserting new… --- ## [How to display a table in Vega-Lite tooltip?](https://discuss.elastic.co/t/how-to-display-a-table-in-vega-lite-tooltip/296725)
**Author:** [@jhackert](https://discuss.elastic.co/u/jhackert)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:53pm UTC](https://discuss.elastic.co/t/how-to-display-a-table-in-vega-lite-tooltip/296725 "2022-02-09T12:53:31Z")
Hi folks, I'm looking for a way to show the content of an array-type field in a tooltip as a table with Vega-Lite. The data that shall be shown in the tooltip is in aggregations-\>clients-\>buckets-\>topn\_domains-\>buckets. … --- ## [Date\_histogram - extended bounds, converting null to 0](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719)
**Author:** [@elasticshane](https://discuss.elastic.co/u/elasticshane)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 12:49pm UTC](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719 "2022-02-09T12:49:11Z")
Hello, I have a collection of rooms in Elasticsearch 7.11.0, where each room has a data and a capacity for that date: PUT /capacities\_index { "mappings": { "properties": { "date": { "type": "date" … --- ## [Getting an error while upgrading logstash from 5.6 to 6.8](https://discuss.elastic.co/t/getting-an-error-while-upgrading-logstash-from-5-6-to-6-8/296722)
**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:36pm UTC](https://discuss.elastic.co/t/getting-an-error-while-upgrading-logstash-from-5-6-to-6-8/296722 "2022-02-09T12:36:33Z")
I'm getting this error while upgrading logstash 5.6 to 6.8. It would be very kind of you if you could suggest here something? Please find the snippet of the error- \[2022-02-09T17:39:49,294\]\[FATAL\]\[logstash.runner … --- ## [Add second elasticsearch node](https://discuss.elastic.co/t/add-second-elasticsearch-node/296721)
**Author:** [@Vitalii\_Kulinich](https://discuss.elastic.co/u/Vitalii_Kulinich)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:25pm UTC](https://discuss.elastic.co/t/add-second-elasticsearch-node/296721 "2022-02-09T12:25:08Z")
Hi, please help to understand how can I add second Elasticsearch node. So we have run Elasticsearch + kibana as docker containers. Elasticsearch in config - "discovery.type=single-node", I want to add one more node as … --- ## [Calculating duration](https://discuss.elastic.co/t/calculating-duration/296472)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 12:16pm UTC](https://discuss.elastic.co/t/calculating-duration/296472 "2022-02-09T12:16:19Z")
Hi, I am not sure if this can be achieved, I have the following query: GET /winlogbeat-7.14.0-2022.02.03-000001/\_search { "query": { "match\_all": {} }, "aggs": { "bulks": { "terms": { "field… --- ## [Unique Count Aggregation filtering](https://discuss.elastic.co/t/unique-count-aggregation-filtering/296679)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 3\ **Last updated:** [February 9, 2022, 12:04pm UTC](https://discuss.elastic.co/t/unique-count-aggregation-filtering/296679 "2022-02-09T12:04:33Z")
\*\* I was wondering if the below described is possible to display on Kibana. With a sample data as below, and the unique identifier being the 'sessionId' What i'm trying to do is create any vizualization (lets say a tab… --- ## [Beats automaticaly create empty indices](https://discuss.elastic.co/t/beats-automaticaly-create-empty-indices/296348)
**Author:** [@Pysel](https://discuss.elastic.co/u/Pysel)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 11:52am UTC](https://discuss.elastic.co/t/beats-automaticaly-create-empty-indices/296348 "2022-02-09T11:52:40Z")
Hello, is there a config to disable the Beats automaticaly creating indices for their version ? To give a better explanation, I have some beats writing to custom indices, we are all fine there but those beats still creat… --- ## [Help for extra large load](https://discuss.elastic.co/t/help-for-extra-large-load/296380)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 11:49am UTC](https://discuss.elastic.co/t/help-for-extra-large-load/296380 "2022-02-09T11:49:37Z")
Hi Everybody, I have 20 machines that each one has about 100,000 logs per minute, I'm using elk right now but the problem is sometimes logs are not showing real-time in kibana discovery. I used tuning, performance got b… --- ## [Possible ELK merges](https://discuss.elastic.co/t/possible-elk-merges/296715)
**Author:** [@marc0069urca](https://discuss.elastic.co/u/marc0069urca)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:25am UTC](https://discuss.elastic.co/t/possible-elk-merges/296715 "2022-02-09T11:25:07Z")
Hello community, I wanted to know which possibility was better for SQL data merging in ELK? Also I find myself with hundred of resource to aggregate, is it better to do aggregates or jbc streaming between 2 data entrie… --- ## [Indices and Shard count impact on performance](https://discuss.elastic.co/t/indices-and-shard-count-impact-on-performance/296714)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:10am UTC](https://discuss.elastic.co/t/indices-and-shard-count-impact-on-performance/296714 "2022-02-09T11:10:14Z")
I know that the shard count and size has a significant impact on the search performance (speed) and cluster recovery. Does the total number of shard count impact the search speed? Let me simplify it assume I have 5 indi… --- ## [How can I search in all fields?](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 10:53am UTC](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249 "2022-02-09T10:53:11Z")
Hello, I've been asking a lot of questions lately. Is it impossible to search in all fields from the Elasticsearch 7.0.0 version now? Can't I use \_all anymore? If I can't use it, is there any other way? Or I wonder i… --- ## [Kibana not splitting fields by dot anymore](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826)
**Author:** [@fredsted](https://discuss.elastic.co/u/fredsted)\ **Replies:** 7\ **Last updated:** [February 9, 2022, 10:01am UTC](https://discuss.elastic.co/t/kibana-not-splitting-fields-by-dot-anymore/295826 "2022-02-09T10:01:01Z")
Hello, I'm wondering why Kibana has stopped splitting fields. For example, we used to have separate fields for "cloud.provider", "cloud.machine.type", but now it's just a single "cloud" field. It's interesting that … --- ## [FSCrawler excludes, Windows server](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:57am UTC](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689 "2022-02-09T09:57:29Z")
Has anyone had success with using excludes in FSCrawler on Windows servers? Are there are any known limitations? e.g. can you exclude only top level folders or can you exclude deeper folder s eg folder1\\sub1\\sub2\\sub3\*… --- ## [Elastic Search Unrestricted Information Disclosure Vulnerability](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688)
**Author:** [@kshi](https://discuss.elastic.co/u/kshi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 9:53am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688 "2022-02-09T09:53:16Z")
Hi Team, We are using Elasticsearch version 1.6.1 for one of our product Recovery Manger. Where it is just used for message finding and indexing. Customer is using the Nessus Vulnerability scanner and is coming out wi… --- ## [Add field when line contains EXCEPTION](https://discuss.elastic.co/t/add-field-when-line-contains-exception/296656)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [February 9, 2022, 9:12am UTC](https://discuss.elastic.co/t/add-field-when-line-contains-exception/296656 "2022-02-09T09:12:34Z")
Hi, logstash read the file line by line and add each line to Elasticsearch ok but i just want to add it with a condition when he find "EXCEPTION". example of my log file: 01/01/2022 15:00:02 546- MAIN EXCEPTION : Sys… --- ## [Issue in index mapping](https://discuss.elastic.co/t/issue-in-index-mapping/296025)
**Author:** [@mostafa\_khedri](https://discuss.elastic.co/u/mostafa_khedri)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:06am UTC](https://discuss.elastic.co/t/issue-in-index-mapping/296025 "2022-02-09T09:06:21Z")
Hi guys. I have some log in JSON format as below: {"message":"new activity:","context":{"request.headers":{"x-user-data":\["xxxx"\],"x-real-ip":\["xxxx"\],"x-forwarded-via":\["xxx/0.1"\],"x-forwarded-proto":\["http"\],"x-forwar… --- ## [Error: Could not find or load main class org.elasticsearch.tools.JavaVersionChecker](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 9:02am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695 "2022-02-09T09:02:10Z")
Hi, I have implemented an new cluster of elasticearch v7.12.0 with 6 nodes and two masters. After the servers were installed i saw that all of the Elasticsearch services are dead. When starting them i got: Error: Could… --- ## [Logstash exited with code 0](https://discuss.elastic.co/t/logstash-exited-with-code-0/296694)
**Author:** [@jeremd](https://discuss.elastic.co/u/jeremd)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 8:54am UTC](https://discuss.elastic.co/t/logstash-exited-with-code-0/296694 "2022-02-09T08:54:44Z")
Hi, for some reasons my logstash shut down when I run docker-compose up. Anyone has an idea please ? version: "3.7" services: elasticsearch: image: elasticsearch:7.9.2 ports: - "9200:9200" environme… --- ## [Logstash 7.16.3 failed to start: "cannot load Java class org.logstash.util.JavaVersion"](https://discuss.elastic.co/t/logstash-7-16-3-failed-to-start-cannot-load-java-class-org-logstash-util-javaversion/296590)
**Author:** [@pikopl](https://discuss.elastic.co/u/pikopl)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 12:10pm UTC](https://discuss.elastic.co/t/logstash-7-16-3-failed-to-start-cannot-load-java-class-org-logstash-util-javaversion/296590 "2022-02-08T12:10:56Z")
I installed Logstash OSS ver. 7.16.3 rpm: $ sudo rpm -ivh logstash-oss-7.16.3-x86\_64.rpm warning: logstash-oss-7.16.3-x86\_64.rpm: Header V4 RSA/SHA512 Signature, key ID d88e42b4: NOKEY Preparing... … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1059) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1061)