# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1186 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1187 --- ## [Output When Data in Field is a Specific Value](https://discuss.elastic.co/t/output-when-data-in-field-is-a-specific-value/287733)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 9:43pm UTC](https://discuss.elastic.co/t/output-when-data-in-field-is-a-specific-value/287733 "2021-10-26T21:43:49Z")
Hi, I want to know only output a field called network.application when it contains the value ALPHA but I am getting an error that Expected one of \[ \\t\\r\\n\], "#", "{" at line 152, column 7 (byte 3941) after output { if… --- ## [General elastic performance when search\_after with PIT sorted by score is used for UI pagination](https://discuss.elastic.co/t/general-elastic-performance-when-search-after-with-pit-sorted-by-score-is-used-for-ui-pagination/287238)
**Author:** [@vjgorla](https://discuss.elastic.co/u/vjgorla)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 9:17pm UTC](https://discuss.elastic.co/t/general-elastic-performance-when-search-after-with-pit-sorted-by-score-is-used-for-ui-pagination/287238 "2021-10-26T21:17:13Z")
We are integrating search\_after query to our UI pagination. If we use PIT and keep the search context alive between UI page fetches, which could be minutes depending on user think time, would that scale well?. We have to… --- ## [Inconsistent results when search\_after is used for pagination sorted by score and id](https://discuss.elastic.co/t/inconsistent-results-when-search-after-is-used-for-pagination-sorted-by-score-and-id/286554)
**Author:** [@vjgorla](https://discuss.elastic.co/u/vjgorla)\ **Replies:** 3\ **Last updated:** [October 26, 2021, 7:14pm UTC](https://discuss.elastic.co/t/inconsistent-results-when-search-after-is-used-for-pagination-sorted-by-score-and-id/286554 "2021-10-26T19:14:28Z")
We have implemented pagination using search\_after and sorting the results by \_score and a unique id field as a tie-breaker. However sometimes we are getting duplicate results across pages, and other times matches do not … --- ## [Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/287640)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 4:31pm UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/287640 "2021-10-26T16:31:17Z")
Hi, I have configured logstash conf file to get data from filebeat. Logstash input port 5044 and output to elasticseach as multiple index output. Elasticsearch service is up and running. But logstash can't reach the E… --- ## [Unable to install elastic-logging-plugin (docker plugin) \>= 7.13.0 (beatSocket.sock: connect: no such file or directory)](https://discuss.elastic.co/t/unable-to-install-elastic-logging-plugin-docker-plugin-7-13-0-beatsocket-sock-connect-no-such-file-or-directory/287716)
**Author:** [@Freddyus](https://discuss.elastic.co/u/Freddyus)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 4:19pm UTC](https://discuss.elastic.co/t/unable-to-install-elastic-logging-plugin-docker-plugin-7-13-0-beatsocket-sock-connect-no-such-file-or-directory/287716 "2021-10-26T16:19:52Z")
Error when installing elastic-logging-plugin version higher than 7.12.1. Can you please tell me what could be the problem? #docker plugin install elastic/elastic-logging-plugin:7.15.1 Plugin "elastic/elastic-logging-pl… --- ## [RabbitMQ Module Errors in logs](https://discuss.elastic.co/t/rabbitmq-module-errors-in-logs/287715)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 4:15pm UTC](https://discuss.elastic.co/t/rabbitmq-module-errors-in-logs/287715 "2021-10-26T16:15:14Z")
Hi All, I'm using Metricbeat 7.3, I've enabled the RabbitMQ module and I'm getting below error in logs. I'm running version 3.7.15 of RabbitMQ. 2021-10-26T10:29:19.683-0500 ERROR \[rabbitmq.queue\] queue/data.go:97 erro… --- ## [Replacing hosts in a cluster](https://discuss.elastic.co/t/replacing-hosts-in-a-cluster/287511)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 4\ **Last updated:** [October 26, 2021, 3:47pm UTC](https://discuss.elastic.co/t/replacing-hosts-in-a-cluster/287511 "2021-10-26T15:47:09Z")
Hi, we have a 7.9.1 cluster consisting of 3 hosts and we need to replace it with 3 new servers running ES 7.14-7.15. Would it be enough to just start one new server, wait for it to join the cluster, then shut down one ol… --- ## [Logstash azure blob plugin error](https://discuss.elastic.co/t/logstash-azure-blob-plugin-error/287709)
**Author:** [@RS\_D](https://discuss.elastic.co/u/RS_D)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 3:24pm UTC](https://discuss.elastic.co/t/logstash-azure-blob-plugin-error/287709 "2021-10-26T15:24:52Z")
I am trying to install "logstash-input-azureblob" plugin with command as below using docker compose. I am getting the below error. command: bash -c "bin/logstash-plugin install logstash-input-azureblob && logstash -f … --- ## [Canvas Kibana highlight point in bubble chart from dropdown](https://discuss.elastic.co/t/canvas-kibana-highlight-point-in-bubble-chart-from-dropdown/285573)
**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\ **Replies:** 3\ **Last updated:** [October 26, 2021, 3:00pm UTC](https://discuss.elastic.co/t/canvas-kibana-highlight-point-in-bubble-chart-from-dropdown/285573 "2021-10-26T15:00:56Z")
Hi, I am working with canvas in which I have one dropdown which filters for countries. I have a bubble plot (x and y numeric, and countries as text) with the full data (no filters). The goal is to keep the full data in … --- ## [Exiting: Index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/287700)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 1:59pm UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/287700 "2021-10-26T13:59:18Z")
Hi, I am unable to setup filebeat to send logs to logstash, I followed few solutions of setting up index management using Elasticsearch output then delete old document but the issue is still exist. I have also disabled… --- ## [Can a dedicated coordinator replace a load balancer](https://discuss.elastic.co/t/can-a-dedicated-coordinator-replace-a-load-balancer/287496)
**Author:** [@anon43570709](https://discuss.elastic.co/u/anon43570709)\ **Replies:** 8\ **Last updated:** [October 26, 2021, 1:58pm UTC](https://discuss.elastic.co/t/can-a-dedicated-coordinator-replace-a-load-balancer/287496 "2021-10-26T13:58:27Z")
Can a dedicated coordinator replace a load balancer such as haproxy? --- ## [Illustration of DocValues, Fielddata and Inverted Index](https://discuss.elastic.co/t/illustration-of-docvalues-fielddata-and-inverted-index/287699)
**Author:** [@galambo](https://discuss.elastic.co/u/galambo)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 1:18pm UTC](https://discuss.elastic.co/t/illustration-of-docvalues-fielddata-and-inverted-index/287699 "2021-10-26T13:18:19Z")
Hello, I would like to better understand internal Elasticsearch data structures, more specifically 1) inverted index 2) fielddata and 3) DocValues Assume we have the following use case: Sample data 1: We’re given a … --- ## [Problem’s processing or storing decimal starting with 0.0](https://discuss.elastic.co/t/problem-s-processing-or-storing-decimal-starting-with-0-0/287635)
**Author:** [@Hescalona](https://discuss.elastic.co/u/Hescalona)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 1:17pm UTC](https://discuss.elastic.co/t/problem-s-processing-or-storing-decimal-starting-with-0-0/287635 "2021-10-26T13:17:35Z")
Hi, I'm trying to store values like 0.033 but Elasticsearch it's storing just 0. The Log come from a file to LOGSTASH them process with GROK (in https://grokdebug.herokuapp.com/ the debug work fine) and store in Elastic… --- ## [How do I calculate the number of shards I should have?](https://discuss.elastic.co/t/how-do-i-calculate-the-number-of-shards-i-should-have/287561)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 5\ **Last updated:** [October 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/how-do-i-calculate-the-number-of-shards-i-should-have/287561 "2021-10-26T12:23:50Z")
Hello Following the advice given on this forum (thank you), I have been able to reduce from August to now, shard amount: From 4028 to 3317 That being said, I feel this is a high number. There is a document that says h… --- ## [Choose which date field is used in the dashboard date filter](https://discuss.elastic.co/t/choose-which-date-field-is-used-in-the-dashboard-date-filter/286688)
**Author:** [@ggreystorm26](https://discuss.elastic.co/u/ggreystorm26)\ **Replies:** 10\ **Last updated:** [October 26, 2021, 12:10pm UTC](https://discuss.elastic.co/t/choose-which-date-field-is-used-in-the-dashboard-date-filter/286688 "2021-10-26T12:10:03Z")
I would like to know how to specify which date field is used in the date filter at the top right of the dashboard creation page. I am using only one index, but the two date fields I have were added in the Index Patterns… --- ## [Elasticsearch not updating any data with no error](https://discuss.elastic.co/t/elasticsearch-not-updating-any-data-with-no-error/287177)
**Author:** [@APic](https://discuss.elastic.co/u/APic)\ **Replies:** 7\ **Last updated:** [October 26, 2021, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-not-updating-any-data-with-no-error/287177 "2021-10-26T11:59:58Z")
Hello, in Elasticsearch 6.6.2 i'm having this weird problem where elastic stops performing any modification to data. Any UPDATE/INDEX/DELETE operation returns OK result but data never change in indexes. I see no errors… --- ## [Get search with json request](https://discuss.elastic.co/t/get-search-with-json-request/287616)
**Author:** [@razs](https://discuss.elastic.co/u/razs)\ **Replies:** 10\ **Last updated:** [October 26, 2021, 11:28am UTC](https://discuss.elastic.co/t/get-search-with-json-request/287616 "2021-10-26T11:28:51Z")
Hi, how can i get a search with json and python? 0 Been reading this Run Elasticsearch API requests | Kibana Guide \[7.15\] | Elastic and im having doubst, can anyone help me create a json request to run from python to d… --- ## [In pointseries stacked chart showing ‘text’ values on the right place](https://discuss.elastic.co/t/in-pointseries-stacked-chart-showing-text-values-on-the-right-place/287203)
**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 11:09am UTC](https://discuss.elastic.co/t/in-pointseries-stacked-chart-showing-text-values-on-the-right-place/287203 "2021-10-26T11:09:05Z")
Hello, I've created a stacked bar chart, I want to show the values on the right places and I also have a filter that will change with the dropdown. How can I arrange the text for it to show in the right places. This i… --- ## [Deploy metricbeat to Windows nodes in Kubernetes](https://discuss.elastic.co/t/deploy-metricbeat-to-windows-nodes-in-kubernetes/287683)
**Author:** [@mihai.albert](https://discuss.elastic.co/u/mihai.albert)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 10:51am UTC](https://discuss.elastic.co/t/deploy-metricbeat-to-windows-nodes-in-kubernetes/287683 "2021-10-26T10:51:17Z")
There's already clear documentation on how to manually install the metricbeat agent to various operating systems, including Windows, here. It can also be deployed using the Helm charts shown here, making it very easy to … --- ## [Parse JSON array](https://discuss.elastic.co/t/parse-json-array/287682)
**Author:** [@khouloud](https://discuss.elastic.co/u/khouloud)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 10:50am UTC](https://discuss.elastic.co/t/parse-json-array/287682 "2021-10-26T10:50:04Z")
Hello, In my log file I have json array, when I parse it with json filtre logstash only the first object display in Elasticsearch. How can I display all the object in Elasticsearch Table ? Thank you. --- ## [Using vega visualizations with Canvas (interactivity with dropdown)](https://discuss.elastic.co/t/using-vega-visualizations-with-canvas-interactivity-with-dropdown/287195)
**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 10:39am UTC](https://discuss.elastic.co/t/using-vega-visualizations-with-canvas-interactivity-with-dropdown/287195 "2021-10-26T10:39:34Z")
Hey Everyone, I have a Canvas with several charts that are changing with a dropdown select filter. I added my radar chart to my Canvas that I created with custom vega visualization using Add Element - Add from Kibana. … --- ## [Function\_score for score\_mode: sum returning 1 instead of 0](https://discuss.elastic.co/t/function-score-for-score-mode-sum-returning-1-instead-of-0/287679)
**Author:** [@hexer338](https://discuss.elastic.co/u/hexer338)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 10:38am UTC](https://discuss.elastic.co/t/function-score-for-score-mode-sum-returning-1-instead-of-0/287679 "2021-10-26T10:38:30Z")
Hi, When using function\_score query with score\_mode: "sum", calculated score is returned as 1 instead of 0. Elasticsearch Version: 7.1.0 Steps to Reproduce: Index a document and search using function\_score query: P… --- ## [Ruby filter to get data for performance alerting](https://discuss.elastic.co/t/ruby-filter-to-get-data-for-performance-alerting/286990)
**Author:** [@Sebastian\_Rodak](https://discuss.elastic.co/u/Sebastian_Rodak)\ **Replies:** 6\ **Last updated:** [October 26, 2021, 10:33am UTC](https://discuss.elastic.co/t/ruby-filter-to-get-data-for-performance-alerting/286990 "2021-10-26T10:33:36Z")
Hi ! I'm working with json below to configure trigger when "free" will be near to 0, { "@timestamp" =\> 2021-10-13T08:51:00.395Z, "type" =\> "metric", "@version" =\> "1", … --- ## [Kafka Connect Error on Elasticsearch API Hit](https://discuss.elastic.co/t/kafka-connect-error-on-elasticsearch-api-hit/287673)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 10:08am UTC](https://discuss.elastic.co/t/kafka-connect-error-on-elasticsearch-api-hit/287673 "2021-10-26T10:08:49Z")
Hello, I try to send logs to Elasticsearch using kafka. When I hit the Elasticsearch hosts, the index was created, but the document was not, so the result, I got a newly created index with 0 document this is the error … --- ## [Fortigate integration with ELK](https://discuss.elastic.co/t/fortigate-integration-with-elk/287323)
**Author:** [@Hamzah](https://discuss.elastic.co/u/Hamzah)\ **Replies:** 3\ **Last updated:** [October 26, 2021, 9:27am UTC](https://discuss.elastic.co/t/fortigate-integration-with-elk/287323 "2021-10-26T09:27:34Z")
Hi, I am trying to integrate fortigate with Elasticstack. What should be the optimal solution for this integration? 1- Should I use logstash, send fortigate logs to logstash and parse them. 2- Should I use filebeat se… --- ## [SSLHandshakeException: Empty server certificate chain](https://discuss.elastic.co/t/sslhandshakeexception-empty-server-certificate-chain/287628)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 9:14am UTC](https://discuss.elastic.co/t/sslhandshakeexception-empty-server-certificate-chain/287628 "2021-10-26T09:14:48Z")
ES version: 7.12 I'm getting this error...any help is really appreciated. "Caused by: javax.net.ssl.SSLHandshakeException: Empty server certificate chain", "at sun.security.ssl.Alert.createSSLException(Alert.java:131) … --- ## [Error when running curator](https://discuss.elastic.co/t/error-when-running-curator/287577)
**Author:** [@Jojo123](https://discuss.elastic.co/u/Jojo123)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 8:44am UTC](https://discuss.elastic.co/t/error-when-running-curator/287577 "2021-10-26T08:44:13Z")
Hello everyone, I'm an absolute beginner who encounters many problems and haven't find a solution yet. I've been running Elasticsearch and kibana for some months on a debian 10 VM. Elasticsearch receives logs from 2 wi… --- ## [Elastic Cloud how to send email alerts](https://discuss.elastic.co/t/elastic-cloud-how-to-send-email-alerts/287653)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 8:06am UTC](https://discuss.elastic.co/t/elastic-cloud-how-to-send-email-alerts/287653 "2021-10-26T08:06:21Z")
Hi, I wanted to send the PDF reports from Elastic Cloud. I see an option to create watcher. But where am I supposed to give the email configurations. setting like how we used to provide the email settings in Elasticsear… --- ## [How to call transform api using python](https://discuss.elastic.co/t/how-to-call-transform-api-using-python/287072)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 7:55am UTC](https://discuss.elastic.co/t/how-to-call-transform-api-using-python/287072 "2021-10-26T07:55:06Z")
I am trying to develop a python script since the max frequency parameter for transform api ranges from 1s to 1h. I am using: python verison 3.6.8 Elasticsearch python api: python -m pip install elasticsearch UPDATE… --- ## [Import index from another Elasticsearch](https://discuss.elastic.co/t/import-index-from-another-elasticsearch/287167)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 6\ **Last updated:** [October 26, 2021, 7:31am UTC](https://discuss.elastic.co/t/import-index-from-another-elasticsearch/287167 "2021-10-26T07:31:27Z")
I have two Elasticsearch in same system and I want index with it's data from first Elasticsearch to second one in new index. How it's done? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1185) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1187)