# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1230 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1231 --- ## [How to index a .json file located inside a persistent volume on a kubernetes cluster to Elasticsearch](https://discuss.elastic.co/t/how-to-index-a-json-file-located-inside-a-persistent-volume-on-a-kubernetes-cluster-to-elasticsearch/284830)
**Author:** [@Jad\_Sakr](https://discuss.elastic.co/u/Jad_Sakr)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 9:53am UTC](https://discuss.elastic.co/t/how-to-index-a-json-file-located-inside-a-persistent-volume-on-a-kubernetes-cluster-to-elasticsearch/284830 "2021-09-22T09:53:33Z")
I have a code that collects data and dumps it in a .json file. In this file, every line is a json object. I was following this guide https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html to run Elastic on kube… --- ## [Elastalert-kibana plugin error](https://discuss.elastic.co/t/elastalert-kibana-plugin-error/284800)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 9:35am UTC](https://discuss.elastic.co/t/elastalert-kibana-plugin-error/284800 "2021-09-22T09:35:52Z")
While installing the elastalert-kibana plugin .i am facing an error C:\\kibana-7.14.1-windows-x86\_64\\bin\>kibana-plugin install file:///d:/elastalert-kibana-plugin-1.1.0-7.2.0.zip Found previous install attempt. Deleting… --- ## [ARM64 support](https://discuss.elastic.co/t/arm64-support/284825)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 9:32am UTC](https://discuss.elastic.co/t/arm64-support/284825 "2021-09-22T09:32:45Z")
Hi there, I wish to know if the arm64 support is now in General Availabilty and supported for production environment. Best regards, Alessio --- ## [Copy value of @timestamp to another field](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 9:26am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634 "2021-09-22T09:26:03Z")
Hello, I am trying to copy the value of @timestamp to new field timestamp keeping the same format. Is that possible ? Do you have any suggestion ? Thank you. Mustapha --- ## [Request memory constant increase untill it hits circuit breaker request limit. No drop if we stop queries](https://discuss.elastic.co/t/request-memory-constant-increase-untill-it-hits-circuit-breaker-request-limit-no-drop-if-we-stop-queries/284689)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 9:14am UTC](https://discuss.elastic.co/t/request-memory-constant-increase-untill-it-hits-circuit-breaker-request-limit-no-drop-if-we-stop-queries/284689 "2021-09-22T09:14:52Z")
Hi All, We noticed that the aggregation query we use to rollup data in a python script is causing our elasticsearch cluster request What we have isolated is that the queries consume memory which is not freed up even w… --- ## [Advance Watcher Script](https://discuss.elastic.co/t/advance-watcher-script/284824)
**Author:** [@Ravishankar\_Rai](https://discuss.elastic.co/u/Ravishankar_Rai)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 9:13am UTC](https://discuss.elastic.co/t/advance-watcher-script/284824 "2021-09-22T09:13:34Z")
Hi All, I am implementing the uptime alerts for the heartbeat index and my requirement is as below. I want to send an alert to the corresponding monitor mail id from the same index with trigger time =2m when monitor.st… --- ## [How Set Cluster Name for HighLevel Rest Client](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 11\ **Last updated:** [September 22, 2021, 9:03am UTC](https://discuss.elastic.co/t/how-set-cluster-name-for-highlevel-rest-client/284794 "2021-09-22T09:03:41Z")
Hi , I am using 7.3.2 version of Elasticsearch ,here I am using HighLevel Rest Client , here how can I set the clustername for which I have changed the default "Elasticsearch" . 1.Do I need to change the cluster Name … --- ## [How do I aggregate based on these fields?](https://discuss.elastic.co/t/how-do-i-aggregate-based-on-these-fields/284821)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 9:02am UTC](https://discuss.elastic.co/t/how-do-i-aggregate-based-on-these-fields/284821 "2021-09-22T09:02:54Z")
Hi all, I'm trying to come up with a query that results in a table that is similar to: SourceCity | dstCity | dstCountry | dstCountryISO | total sum of flows | total data transferred cityA | cityB | countryB | CB | 15… --- ## [如何去掉kibana显示中json中的\\](https://discuss.elastic.co/t/kibana-json/284820)
**Author:** [@chengxiaobai](https://discuss.elastic.co/u/chengxiaobai)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 8:58am UTC](https://discuss.elastic.co/t/kibana-json/284820 "2021-09-22T08:58:36Z")
图1 为kibana中json显示内容。 图2 为日志原始格式。 目前想在kibana中查看message的信息（需要去掉\\）,请问怎么处理。 我尝试过json反序列化，并没有作用。请指教。。 --- ## [AzureAD and Kibana \[MFA\]](https://discuss.elastic.co/t/azuread-and-kibana-mfa/284310)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 8:24am UTC](https://discuss.elastic.co/t/azuread-and-kibana-mfa/284310 "2021-09-22T08:24:39Z")
Hi, I recently saw an answer about an AzureAD integration with Kibana. I have a question about it. (SSO / Azure AD setup - #2 by forloop) If I make the integration with AzureAD and ELK (on-premises enviroment) and I a… --- ## [Basic auth header kibana not working](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 7:52am UTC](https://discuss.elastic.co/t/basic-auth-header-kibana-not-working/282910 "2021-09-22T07:52:51Z")
I have everything enabled that i can find, which by the way is very difficult to find what i need at times with the elastic docs. I want to pass the Authorization: header with base64 encoded correct credentials for user… --- ## [How to split an array index in Kibana?](https://discuss.elastic.co/t/how-to-split-an-array-index-in-kibana/284377)
**Author:** [@carlos\_gomez\_gomez](https://discuss.elastic.co/u/carlos_gomez_gomez)\ **Replies:** 7\ **Last updated:** [September 22, 2021, 7:33am UTC](https://discuss.elastic.co/t/how-to-split-an-array-index-in-kibana/284377 "2021-09-22T07:33:19Z")
Hi everyone. I have an index in my Kiabana that is an array. These index is an array becouse the length of this coud be diference each time. I need to split the array for use in the control visualization. If I create… --- ## [Why term query not returning the document that contains the exact term in 7.3.2](https://discuss.elastic.co/t/why-term-query-not-returning-the-document-that-contains-the-exact-term-in-7-3-2/284540)
**Author:** [@Lee\_Copper](https://discuss.elastic.co/u/Lee_Copper)\ **Replies:** 5\ **Last updated:** [September 22, 2021, 7:24am UTC](https://discuss.elastic.co/t/why-term-query-not-returning-the-document-that-contains-the-exact-term-in-7-3-2/284540 "2021-09-22T07:24:44Z")
I have a order\_no with value '100000076268946605' in my index. The following term query does not return me the document with order\_no '100000076268946605': { "query": { "term": { "order\_no": { … --- ## [How to aggregation by tree(Bar Chart)](https://discuss.elastic.co/t/how-to-aggregation-by-tree-bar-chart/284531)
**Author:** [@ruif0](https://discuss.elastic.co/u/ruif0)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 7:18am UTC](https://discuss.elastic.co/t/how-to-aggregation-by-tree-bar-chart/284531 "2021-09-22T07:18:45Z")
My data look like this: { "type":"Error", "server":\["Country1/State1/City1",null\] } { "type":"Error", "server":\["Country1/State2/City2",null\] } { "type":"Error", "server":\["Country2/State3/City3",null\] } I want… --- ## [Shards of an index present only in one node in a multinode cluster](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805)
**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\ **Replies:** 4\ **Last updated:** [September 22, 2021, 7:18am UTC](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805 "2021-09-22T07:18:37Z")
Hi, I have a multinode Elasticsearch setup with one master node and two data nodes. I created an index with number of shards as 2 and number of replicas as 1 and inserted the data in the index. However I see that both … --- ## [error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable:](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/284803)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 7:05am UTC](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/284803 "2021-09-22T07:05:29Z")
I am using the docker configuration on the server. I am not that much familiar with docker. Before docker, it is working fine but now it is not working and throwing an error. elasticsearch - Attempted to resurrect conne… --- ## [Change height rows in Kibana table](https://discuss.elastic.co/t/change-height-rows-in-kibana-table/284036)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 7:01am UTC](https://discuss.elastic.co/t/change-height-rows-in-kibana-table/284036 "2021-09-22T07:01:21Z")
Hi there, I have a question. Is it possible to change the height of the rows of a table in Kibana? The purpose of this configuration is to watch all the data and not to see the three points at the end of the row instea… --- ## [Alerts are sometimes triggered](https://discuss.elastic.co/t/alerts-are-sometimes-triggered/284723)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 6:52am UTC](https://discuss.elastic.co/t/alerts-are-sometimes-triggered/284723 "2021-09-22T06:52:03Z")
Hi all. After configuring some alerts on the different logs shown in the "Observability \> Logs \> Steam" menu, I don't understand why the emails are not sent every time the term that should trigger the alert is found amo… --- ## [Link to local document in kibana discover](https://discuss.elastic.co/t/link-to-local-document-in-kibana-discover/284212)
**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 6:36am UTC](https://discuss.elastic.co/t/link-to-local-document-in-kibana-discover/284212 "2021-09-22T06:36:42Z")
how can I get a working link for a local file ingested?. I have file.url and real.path when I put http://{{rawvalue}} at the link template I get http://c/install/Pdfs/file.pdf or file//C:/install/Pdfs/file.pdf bo… --- ## [Are Elastic Beats capable enough to ingest data into Splunk?](https://discuss.elastic.co/t/are-elastic-beats-capable-enough-to-ingest-data-into-splunk/284804)
**Author:** [@spzala](https://discuss.elastic.co/u/spzala)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 6:02am UTC](https://discuss.elastic.co/t/are-elastic-beats-capable-enough-to-ingest-data-into-splunk/284804 "2021-09-22T06:02:37Z")
Hey, Currently, We are using various beats to ingest data into our Elasticsearch. But now, we also encountered a use case in which we need to ingest data into Splunk using the same beats. Is it doable? If yes then can s… --- ## [Run kibana commands from java apache Http (or other java rest client)](https://discuss.elastic.co/t/run-kibana-commands-from-java-apache-http-or-other-java-rest-client/283751)
**Author:** [@anna.kuranda](https://discuss.elastic.co/u/anna.kuranda)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 5:56am UTC](https://discuss.elastic.co/t/run-kibana-commands-from-java-apache-http-or-other-java-rest-client/283751 "2021-09-22T05:56:02Z")
Hi, is there way run kibana rest from java apache http client (or other java rest client)? what url to use ? for example run in apache http : PUT %3Cbase\_elements\_rwr-%7Bnow%2Fd%7D-000001%3E { "aliases": { "basee… --- ## [How to extract error root cause reason using Java RestHighLevelClient?](https://discuss.elastic.co/t/how-to-extract-error-root-cause-reason-using-java-resthighlevelclient/284801)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 5:15am UTC](https://discuss.elastic.co/t/how-to-extract-error-root-cause-reason-using-java-resthighlevelclient/284801 "2021-09-22T05:15:07Z")
Hi, I am trying to perform a wildcard query on date type, which is not allowed by ES, so I see an exception being thrown from ES as below: { "error": { "root\_cause": \[ { "type": "query\_shard\_excepti… --- ## [Date histogram with different Timezones with Elasticsearch v.7.13.3](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639)
**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\ **Replies:** 9\ **Last updated:** [September 22, 2021, 5:09am UTC](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639 "2021-09-22T05:09:33Z")
I have to acquire datas from different part of Timezones (example New York -6.00 and Rome +2.00). In the document I have a field 'timestamp' defined as "data" and I have for example create a "date\_histogram" for example … --- ## [Vm.max\_map\_count can we have any workaround without setting this value](https://discuss.elastic.co/t/vm-max-map-count-can-we-have-any-workaround-without-setting-this-value/284798)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 4:46am UTC](https://discuss.elastic.co/t/vm-max-map-count-can-we-have-any-workaround-without-setting-this-value/284798 "2021-09-22T04:46:48Z")
Hi , I am using fargate and Elasticsearch version as 7.3.2 can i have any workaround to bypass vm.max\_map\_count issue \[65530\] is too low increase to atleast \[262144\] 1.Fargate environment is mandatory .we cannot switc… --- ## [Cannot download older versions of elastic?](https://discuss.elastic.co/t/cannot-download-older-versions-of-elastic/284787)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 2:05am UTC](https://discuss.elastic.co/t/cannot-download-older-versions-of-elastic/284787 "2021-09-22T02:05:09Z")
I'm trying to download an older version of Elasticsearch here: https://www.elastic.co/downloads/past-releases/elasticsearch-7-10-0 But it's not working, instead throwing a 504 timeout. Is there another way to download … --- ## [What is the difference between boost and weight](https://discuss.elastic.co/t/what-is-the-difference-between-boost-and-weight/284714)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 5\ **Last updated:** [September 22, 2021, 1:54am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-boost-and-weight/284714 "2021-09-22T01:54:08Z")
Boost parameter is used in the below example wildcard": { "City": { "wildcard": "M", "boost": 10 } Can I use similar query for weight? --- ## [How to make doc which has more different words score higher?](https://discuss.elastic.co/t/how-to-make-doc-which-has-more-different-words-score-higher/284546)
**Author:** [@Bowen\_Liu](https://discuss.elastic.co/u/Bowen_Liu)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 12:58am UTC](https://discuss.elastic.co/t/how-to-make-doc-which-has-more-different-words-score-higher/284546 "2021-09-22T00:58:39Z")
Hi everyone, I have a problem about scoring in es. The thing is that I use multi\_match to do full text search in muti-fields and use the type "best\_fields", say, user\_name, biz\_type, account\_name, content... When I use,… --- ## [Extracting values from text messages and summing them in real time queries](https://discuss.elastic.co/t/extracting-values-from-text-messages-and-summing-them-in-real-time-queries/284699)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 0\ **Last updated:** [September 21, 2021, 10:06am UTC](https://discuss.elastic.co/t/extracting-values-from-text-messages-and-summing-them-in-real-time-queries/284699 "2021-09-21T10:06:36Z")
Hi, I have event description fields that look this way: "User1 have executed 3 actions" "User2 have executed 5 actions" .... And then many unnstructured message descriptions around. I'm trying to select only mess… --- ## [Nest path is not nested, but definition says it is](https://discuss.elastic.co/t/nest-path-is-not-nested-but-definition-says-it-is/284775)
**Author:** [@James.Gray](https://discuss.elastic.co/u/James.Gray)\ **Replies:** 0\ **Last updated:** [September 21, 2021, 11:05pm UTC](https://discuss.elastic.co/t/nest-path-is-not-nested-but-definition-says-it-is/284775 "2021-09-21T23:05:32Z")
I'm getting an aggregation\_execution\_exception from a query with elasticsearch server 7.x with a reason of: \[nested\] nested path \[productCategories\] is not nested. The equivalent code previously worked in server 5.5.1 wi… --- ## [Check version of Nest?](https://discuss.elastic.co/t/check-version-of-nest/284776)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 0\ **Last updated:** [September 21, 2021, 11:06pm UTC](https://discuss.elastic.co/t/check-version-of-nest/284776 "2021-09-21T23:06:40Z")
I'd like to check was version of the Nest client I am using, and if possible, downgrade it to version 7.13. Is this possible? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1229) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1231)