# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1535 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1536 --- ## [Aggregation over big data](https://discuss.elastic.co/t/aggregation-over-big-data/265486)
**Author:** [@Filip\_Sirc](https://discuss.elastic.co/u/Filip_Sirc)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/aggregation-over-big-data/265486 "2021-02-25T14:22:47Z")
Hello, i would like to ask you for advice. I have index with milions of documents and need to query it (query will return cca. 100 000 documents) and use results for aggregations. My current code is: { "query": { … --- ## [Wildcard query rewrite parameter not working with new wildcard field type?](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453)
**Author:** [@cads](https://discuss.elastic.co/u/cads)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453 "2021-02-25T13:48:53Z")
The Wildcard Query offers a rewrite parameter to influence how Lucene calculates the relevance scores. On keyword fields this works as expected but it does not seem to work with the new wildcard field type which belongs … --- ## [Generating the password hash](https://discuss.elastic.co/t/generating-the-password-hash/262432)
**Author:** [@mchudinov](https://discuss.elastic.co/u/mchudinov)\ **Replies:** 7\ **Last updated:** [February 25, 2021, 2:05pm UTC](https://discuss.elastic.co/t/generating-the-password-hash/262432 "2021-02-25T14:05:28Z")
How to generate a hash for file realm? as described here: I use Elasticsearch in K8S ECK and use this document for define users: kind: Secret apiVersion: v1 metadata: name: my-filerealm-secret… --- ## [How can I check logstash throughput(event per second)?](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340 "2021-02-25T13:33:33Z")
I am sending data from Logstash to Elasticsearch. (filebeat -\> kafka -\> logstash -\> elasticsearch) I want to know the Logstash Event Per Second(EPS) (it is assumed that the environment of Elasticsearch is the same.) P… --- ## [Kibana Time Histogram x-axis Dates and Time Overlapping](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448 "2021-02-25T13:22:55Z")
HI, I am using OSS kibana version - 7.5.0, I have created visuals bar charts ,Line charts selected x-axis as Date Histogram with field @timestamp with minimum interval as a Auto. When selecting time range to see visua… --- ## [Node couldn't rejoin cluster because "version not supported"](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:21pm UTC](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473 "2021-02-25T13:21:43Z")
I've got an Elasticsearch cluster of four nodes. Three can hold data and are master eligible. One cannot hold data, isn't master eligible and has Kibana on it. Two of the master eligible nodes became unhappy resulting in… --- ## [In Vega trying to show the number in percentage form](https://discuss.elastic.co/t/in-vega-trying-to-show-the-number-in-percentage-form/265476)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 12:20pm UTC](https://discuss.elastic.co/t/in-vega-trying-to-show-the-number-in-percentage-form/265476 "2021-02-25T12:20:13Z")
I am new to Kibana and trying to create a Vega visualization for displaying percentage of effort. The data (result of an analysis) we need to display is in percentage. As text in Vega are based on position. When results … --- ## [Date Math Support in index names while defining SLM policy](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 12:04pm UTC](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613 "2021-02-25T12:04:14Z")
Hi, I want to backup only last months index using SLM policy and trying to use date Math while configuring the indices in SLM policy. Unfortunately, it doesn't work and can't find the index. However the same date math p… --- ## [KIBANA: xpack.spaces.enabled: false](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466)
**Author:** [@MaximK](https://discuss.elastic.co/u/MaximK)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466 "2021-02-25T11:32:08Z")
Hi Team, Could you please let me know if set xpack.spaces.enabled: false i dont have in kibana UI: logs\\metric. Can I use features such as Logs UI , Metric ,... without xpack.spaces.enabled: true ? or spaces is requ… --- ## [Export Emojis and Special Characters in CSV Reports](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425)
**Author:** [@zah](https://discuss.elastic.co/u/zah)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 10:45am UTC](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425 "2021-02-25T10:45:38Z")
Is there a way to export special characters (eg accented letters) and emojis from a Kibana table to CSV format? Whenever I export a data table with special characters and emojis in the text as a CSV report, the csv rende… --- ## [Inner\_hits segment omitted while querying with elasticsearch-hadoop](https://discuss.elastic.co/t/inner-hits-segment-omitted-while-querying-with-elasticsearch-hadoop/265464)
**Author:** [@siddharthsourabh](https://discuss.elastic.co/u/siddharthsourabh)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 10:35am UTC](https://discuss.elastic.co/t/inner-hits-segment-omitted-while-querying-with-elasticsearch-hadoop/265464 "2021-02-25T10:35:00Z")
A query with inner\_hits is only returning the \_source segment from within all the hits, and the inner\_hits are being ignored. The ScrollReader only has logic to extract \_source & id fields, see here - https://github.com/… --- ## [Rollup bugs on 7.11.0 in kibana](https://discuss.elastic.co/t/rollup-bugs-on-7-11-0-in-kibana/264986)
**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 10:22am UTC](https://discuss.elastic.co/t/rollup-bugs-on-7-11-0-in-kibana/264986 "2021-02-25T10:22:25Z")
Hello, I upgraded on the 7.11.0 on the elastic cloud this week. Since then, I got new issues with my rollups. At first the option to create an index pattern on rollups index disapeared. Before I got this button : N… --- ## [Agent can't sent data to host](https://discuss.elastic.co/t/agent-cant-sent-data-to-host/264393)
**Author:** [@Wan\_IndyKz](https://discuss.elastic.co/u/Wan_IndyKz)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 10:15am UTC](https://discuss.elastic.co/t/agent-cant-sent-data-to-host/264393 "2021-02-25T10:15:16Z")
Agent can't sent data to host Behind Agent config "Default config" haven't "rev. xx" and status swap to offline Error Message Application: endpoint-security--7:9 3 \[abe34abd -8a88-4f6e-942c-87 442addd7 aa\]: State c… --- ## [Unexpected Shingle Behaviour](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461)
**Author:** [@rishabhm12](https://discuss.elastic.co/u/rishabhm12)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 9:48am UTC](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461 "2021-02-25T09:48:17Z")
Hey, I have a field locality in my index having 'ashok vihar phase 2' as one of the document. The corresponding setting is {"settings": { "analysis": { "analyzer": { "custom\_analyzer": … --- ## [How to query geo data from Elastic Maps Service](https://discuss.elastic.co/t/how-to-query-geo-data-from-elastic-maps-service/265334)
**Author:** [@Zhifei](https://discuss.elastic.co/u/Zhifei)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 10:03am UTC](https://discuss.elastic.co/t/how-to-query-geo-data-from-elastic-maps-service/265334 "2021-02-25T10:03:32Z")
Hi, I found Elastic recently introduced a new brilliant feature called Elastic Maps Service, and I have tried to create Maps with it by adding Vector Layers. I wonder can I query the GeoJSON data of each of the Vector L… --- ## [Preserve @timestamp Field for Custom Filebeat JSON logs](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:54am UTC](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495 "2021-02-25T09:54:39Z")
I've deployed agents across two machines that are ingesting custom log data stored in json files. However, the @timestamp field present in the log files are not getting preserved. For example, here's a json log generate… --- ## [Kibana Fleet Agents upgrade issues](https://discuss.elastic.co/t/kibana-fleet-agents-upgrade-issues/264727)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:51am UTC](https://discuss.elastic.co/t/kibana-fleet-agents-upgrade-issues/264727 "2021-02-25T09:51:21Z")
Good morning, I am currently testing out "Fleet" and I really like it so far, but now that version 7.11 has come out I am seeing all these issues. My main concern on this one is the upgrade. I am seeing the following i… --- ## [Dynamic data type for one field](https://discuss.elastic.co/t/dynamic-data-type-for-one-field/264844)
**Author:** [@tutpaw](https://discuss.elastic.co/u/tutpaw)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 9:39am UTC](https://discuss.elastic.co/t/dynamic-data-type-for-one-field/264844 "2021-02-25T09:39:27Z")
Hi, I don't know, if this topic has been already discussed, but I didn't find an appropriate one - hence, I'm creating a new one. I've got an nginx log whose partial representation is as follows. First, the record stati… --- ## [I want to get the list of fields where matched in records (search explanation)](https://discuss.elastic.co/t/i-want-to-get-the-list-of-fields-where-matched-in-records-search-explanation/265460)
**Author:** [@VladimirI](https://discuss.elastic.co/u/VladimirI)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 9:38am UTC](https://discuss.elastic.co/t/i-want-to-get-the-list-of-fields-where-matched-in-records-search-explanation/265460 "2021-02-25T09:38:10Z")
The only closest thing I found is to request an explanation that has the field name as part of description, something like weight(fieldName:1 in 0) \[PerFieldSimilarity\], result of: But the field name here is not access… --- ## [Accessing Arrays inside ElasticSearch Script with Painless](https://discuss.elastic.co/t/accessing-arrays-inside-elasticsearch-script-with-painless/263894)
**Author:** [@Cyphy](https://discuss.elastic.co/u/Cyphy)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 8:46am UTC](https://discuss.elastic.co/t/accessing-arrays-inside-elasticsearch-script-with-painless/263894 "2021-02-25T08:46:11Z")
Hello there, actually i am trying to compare bounding boxes and score them. For that i am using a painless script which helps me with the math. Unfortunately in some cases my documents doesn't contain only one coordinat… --- ## [Delete unused dynamic mapping Fields](https://discuss.elastic.co/t/delete-unused-dynamic-mapping-fields/265446)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 7:50am UTC](https://discuss.elastic.co/t/delete-unused-dynamic-mapping-fields/265446 "2021-02-25T07:50:55Z")
Continuing the discussion from Delete unsued dynamic mapping Fields: Can anyone please explain from Elasticsearch Team in detail that why we are not able to add this feature of deleting unwanted mapping? We have 10 mil… --- ## [Painless to convert Kbps to Mbps](https://discuss.elastic.co/t/painless-to-convert-kbps-to-mbps/263944)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 6\ **Last updated:** [February 25, 2021, 7:43am UTC](https://discuss.elastic.co/t/painless-to-convert-kbps-to-mbps/263944 "2021-02-25T07:43:52Z")
In kibana i have field in kilobit/second format, But to calculate the average and to visualize i would need to convert data into megabit/second . String speed = doc\['speed\_download.keyword'\].value; long size = Long.pa… --- ## [javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/265369)
**Author:** [@d.balaaji](https://discuss.elastic.co/u/d.balaaji)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 7:35am UTC](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/265369 "2021-02-25T07:35:02Z")
Hello All, I configured 4 node Elasticsearch cluster. 1 -M, 2-M/D and 1 - D nodes. I have encrypted TLS using p12 and generated pem to get the organisation signed certificates. Certificate was generated as below. ./ke… --- ## [Can't filter Rollup index results](https://discuss.elastic.co/t/cant-filter-rollup-index-results/264097)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:18am UTC](https://discuss.elastic.co/t/cant-filter-rollup-index-results/264097 "2021-02-25T07:18:16Z")
Hi, I have a rollup index with some values, e.g. customer. I've created a Kibana dashboard from it. When I try to filter the dashboard with customer : some-customer, I get an error. When I do a custom query, I can filte… --- ## [Logstash hangs with no error](https://discuss.elastic.co/t/logstash-hangs-with-no-error/265441)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 7:08am UTC](https://discuss.elastic.co/t/logstash-hangs-with-no-error/265441 "2021-02-25T07:08:48Z")
Hi, We are running logstash on Kubernetes (deployed using logstash helm chart from elastic). Logstash periodically hangs and stops processing data with no errors. It uses filebeat input and sends data to elasticsearch. … --- ## [Elastic Cloud - Not able to Update indices.query.bool.max\_clause\_count](https://discuss.elastic.co/t/elastic-cloud-not-able-to-update-indices-query-bool-max-clause-count/265428)
**Author:** [@iscorpio23](https://discuss.elastic.co/u/iscorpio23)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 6:44am UTC](https://discuss.elastic.co/t/elastic-cloud-not-able-to-update-indices-query-bool-max-clause-count/265428 "2021-02-25T06:44:35Z")
HI, Im using elastic cloud and need to update "indices.query.bool.max\_clause\_count: 2048" in the elasticsearch.yml, but having below error. Anyone have the same experience and how we solve this ? Thanks, Usman --- ## [Importing Dynamic named file from logstash to elasticsearch in a single index](https://discuss.elastic.co/t/importing-dynamic-named-file-from-logstash-to-elasticsearch-in-a-single-index/265434)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 5:19am UTC](https://discuss.elastic.co/t/importing-dynamic-named-file-from-logstash-to-elasticsearch-in-a-single-index/265434 "2021-02-25T05:19:21Z")
Hi Team, So let's just say I'm receiving some dynamic named files based on today's date like, somefile-25-02-2021.csv somefile-26-02-2021.csv somefile-27-02-2021.csv somefile-28-02-2021.csv and I want to increment t… --- ## [Is there a "Top N" filter that can be applied to dashboards?](https://discuss.elastic.co/t/is-there-a-top-n-filter-that-can-be-applied-to-dashboards/265400)
**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 4:55am UTC](https://discuss.elastic.co/t/is-there-a-top-n-filter-that-can-be-applied-to-dashboards/265400 "2021-02-25T04:55:51Z")
I would like to filter a dashboard so that a user supplied number of results populate. Is this at all possible? The end use case is to apply a filter such as, "Only return the top 10 altitudes" (only 10 individual docum… --- ## [Master not discovered yet: have discovered](https://discuss.elastic.co/t/master-not-discovered-yet-have-discovered/265432)
**Author:** [@111447](https://discuss.elastic.co/u/111447)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 4:37am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-have-discovered/265432 "2021-02-25T04:37:06Z")
I am currently using Elasticsearh 7.10.2 in ec2 of aws. I would like to link the node of Elasticsearch installed in each ec2. However, the master not discovered yet error occurs. What can I do to solve it? The conte… --- ## [Getting NoShardAvailableActionException on 1.3.4](https://discuss.elastic.co/t/getting-noshardavailableactionexception-on-1-3-4/265431)
**Author:** [@sreenathss](https://discuss.elastic.co/u/sreenathss)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 4:43am UTC](https://discuss.elastic.co/t/getting-noshardavailableactionexception-on-1-3-4/265431 "2021-02-25T04:43:14Z")
Hi Team, I am using elastic version 1.3.4 on clustering mode and I am getting below mentioned error \[001\] All shards failed for phase: \[query\] org.elasticsearch.action.NoShardAvailableActionException: \[searchName\]\[1\] … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1534) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1536)