# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1538 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1539 --- ## [Difference between snowball stemmer and regular stemmer](https://discuss.elastic.co/t/difference-between-snowball-stemmer-and-regular-stemmer/265346)
**Author:** [@tomsquest](https://discuss.elastic.co/u/tomsquest)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 1:35pm UTC](https://discuss.elastic.co/t/difference-between-snowball-stemmer-and-regular-stemmer/265346 "2021-02-24T13:35:28Z")
Hi, Elasticsearch (and Lucene ?) has two stemmer token filters: the snowball one and the regular one. It seems in my tests that the regular stemmer is under the hood the snowball stemmer. It this really the case ? Fo… --- ## [7.11 APIs who don't need a body now return an error when provided with one](https://discuss.elastic.co/t/7-11-apis-who-dont-need-a-body-now-return-an-error-when-provided-with-one/265324)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 1:34pm UTC](https://discuss.elastic.co/t/7-11-apis-who-dont-need-a-body-now-return-an-error-when-provided-with-one/265324 "2021-02-24T13:34:57Z")
Hi, I have been upgrading one of my clusters to 7.11.1 and much to my surprise there is a behavior change that I haven't been able to find in the breaking changes or in the "what's new" page for this release. GET \_cat/… --- ## [Kibana read role access](https://discuss.elastic.co/t/kibana-read-role-access/265337)
**Author:** [@Jawed1](https://discuss.elastic.co/u/Jawed1)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-read-role-access/265337 "2021-02-24T13:33:56Z")
Hello folks, I have setup EFK in aks but I am getting issue during set role in kibana dashboard. I have set cluster and index as a read permission but when I logon I can able to create dashboard, index pattern as same … --- ## [Logstash doesn't parse logs if i don't define start\_position](https://discuss.elastic.co/t/logstash-doesnt-parse-logs-if-i-dont-define-start-position/265329)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 1:22pm UTC](https://discuss.elastic.co/t/logstash-doesnt-parse-logs-if-i-dont-define-start-position/265329 "2021-02-24T13:22:06Z")
Below is my code. When I try to run this pipeline. Pipeline is starting but not parsing the logs. I have deleted .sincedb files at (data/plugins/inputs/file). input { file { path =\> ".../directory/\*.log" … --- ## [XML Filter example](https://discuss.elastic.co/t/xml-filter-example/264698)
**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 1:20pm UTC](https://discuss.elastic.co/t/xml-filter-example/264698 "2021-02-24T13:20:23Z")
Hi, I have a requirement where in the a XML message is picked up from TIBCO EMS with the help of logstash and then is viewed in Kibana. I want to parse this message element individually for example conversationid,eventi… --- ## [ML - Datafeed is encountering errors extracting data: all shards failed](https://discuss.elastic.co/t/ml-datafeed-is-encountering-errors-extracting-data-all-shards-failed/264994)
**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\ **Replies:** 23\ **Last updated:** [February 24, 2021, 12:59pm UTC](https://discuss.elastic.co/t/ml-datafeed-is-encountering-errors-extracting-data-all-shards-failed/264994 "2021-02-24T12:59:10Z")
Hi! I have created a ML job, but when I select Start Datafeed, I get this error: Datafeed is encountering errors extracting data: all shards failed, as in the image below. I really dont have any idea why I get this. … --- ## [Update data](https://discuss.elastic.co/t/update-data/265339)
**Author:** [@Liliana\_Novais](https://discuss.elastic.co/u/Liliana_Novais)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:56pm UTC](https://discuss.elastic.co/t/update-data/265339 "2021-02-24T12:56:41Z")
Hello, I am new in elastic search. I have a csv file that I want to upload to elastic search in order to use in kibana. The file is saved in my laptop and I want to update the data. I am not the administrator of the la… --- ## [Special character handlling in the alert message](https://discuss.elastic.co/t/special-character-handlling-in-the-alert-message/265285)
**Author:** [@Piyush\_Gandhi](https://discuss.elastic.co/u/Piyush_Gandhi)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:53pm UTC](https://discuss.elastic.co/t/special-character-handlling-in-the-alert-message/265285 "2021-02-24T12:53:35Z")
Hi, I would like to print the request made value in my alerting messaging, however, when I formed the alert message, I was getting the ASCII values in my alert message. Extraction query response: { "\_shards": { … --- ## [Query related logs that contain a keyword](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529)
**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\ **Replies:** 6\ **Last updated:** [February 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529 "2021-02-24T12:44:14Z")
I have a need to query the logs in Elasticsearch through Kibana in a certain way that I will explain soon. I'll try my best to explain what I'm looking for and hopefully someone can tell me if it is possible via Kibana o… --- ## [Failed to parse mapping \[\_doc\]: properties must be a map type](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:35pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103 "2021-02-24T12:35:56Z")
I'm trying to update the routing allocation of index templates, but with the new 7.10 release, I get strange errors. For the other version, I just GET the index template, alter the routing key, and PUT it back to the AP… --- ## [Can not restart logstash service after configured syslog.conf](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 12:03pm UTC](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335 "2021-02-24T12:03:28Z")
I was able to install logstash on the ubuntu server. Then I configued the syslog.conf file to get the traffic to elasticsearch(installed in same server). Then tried to restart the logstash service, but unable to restar… --- ## [Rally: Errror: Cannot update teams in /root/.rally/benchmarks/teams/default](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332)
**Author:** [@LuisSchaefer](https://discuss.elastic.co/u/LuisSchaefer)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 11:38am UTC](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332 "2021-02-24T11:38:30Z")
Hi guys, I use Rally 1.4.1, RHEL 7.9, offline. I didnt't find any similiar topic so I hope somebody could help me. Thanks Input: esrally --distribution-version=7.10.2 --track-path=/root/.rally/benchmarks/tracks/defa… --- ## [How can i read logs event in logstash from siem system?](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 11:20am UTC](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151 "2021-02-24T11:20:30Z")
How can i read logs from siem system in logstash? --- ## [Kibana Error](https://discuss.elastic.co/t/kibana-error/265243)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-error/265243 "2021-02-24T10:32:44Z")
Hello!!! please i have a follow Error in Kibana controls. i resolve it like but i have the same info.. how i can resolve it --- ## [org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319)
**Author:** [@karthik\_m2](https://discuss.elastic.co/u/karthik_m2)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 10:31am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319 "2021-02-24T10:31:31Z")
Hello Team, We have recently upgraded oracle JAVA version to below java version "1.8.0\_281" Java(TM) SE Runtime Environment (build 1.8.0\_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) Afte… --- ## [Reverse geo distance search](https://discuss.elastic.co/t/reverse-geo-distance-search/263524)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 9\ **Last updated:** [February 24, 2021, 10:30am UTC](https://discuss.elastic.co/t/reverse-geo-distance-search/263524 "2021-02-24T10:30:34Z")
Hi everyone; There are 2 indices at my system. One of them is people and another one is houses. There is location criteria for each person at people indice like this. { "locationName": "london", "distance": 1,… --- ## [How to uninstall Logstash](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 10:20am UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280 "2021-02-24T10:20:10Z")
I want to know how to uninstall Logstash in the Ubuntu server? --- ## [Heap usage of suggestor field](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:59am UTC](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312 "2021-02-24T09:59:17Z")
Hi I am using Elastic Version "7.5.2". I would like to know how much of the heap, my completion suggestor field takes. The mapping is as this { "type": "completion", "pres… --- ## [How to specify names of different files in metricbeat.config.modules.path config option in metricbeat](https://discuss.elastic.co/t/how-to-specify-names-of-different-files-in-metricbeat-config-modules-path-config-option-in-metricbeat/265224)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 9:48am UTC](https://discuss.elastic.co/t/how-to-specify-names-of-different-files-in-metricbeat-config-modules-path-config-option-in-metricbeat/265224 "2021-02-24T09:48:13Z")
I want to specify different names of files separately in metricbeat.config.modules.path configuration. Actually, I have some yml files in a folders for each module but I want to reload only yml files of few modules. How … --- ## [How to make a field hold an array, and how to put values in there, and how to loop through an array?](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311)
**Author:** [@Khalil\_SLEIMI](https://discuss.elastic.co/u/Khalil_SLEIMI)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:46am UTC](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311 "2021-02-24T09:46:39Z")
Hi there, I'm new to the elk stack, and want some advice concerning how to manipulate json objects. long story short, I have a json that I extracted from an xml, and now, want to change the json of the output, that's why… --- ## [X-Pack Platinum License Update](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296)
**Author:** [@abhabhishek](https://discuss.elastic.co/u/abhabhishek)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 9:32am UTC](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296 "2021-02-24T09:32:45Z")
I am having elastic 6.2 on-prem platinum license which was issued to "abc" and now it is about to expire(will expire on 1March 2021) and hence we have purchased same license but for differe uid&issuesto- "xyz" once I go… --- ## [Filebeat Logstash Module](https://discuss.elastic.co/t/filebeat-logstash-module/265297)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-logstash-module/265297 "2021-02-24T09:13:54Z")
Hi guys, I'm trying to add a log to Logstash module in Filebeat, but can't succeed. Can anybody please give me some hint what's wrong in my config? Example of Log Entry 2021-02-23T12:44:49.000Z,Warning,1 2021-02-23T1… --- ## [Is it possible to sort a field that contains a hexadecimal string?](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295)
**Author:** [@htang](https://discuss.elastic.co/u/htang)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295 "2021-02-24T09:08:46Z")
I have a mapping as keyword which contains a hexadecimal string like: 5f4b455cf6b841508fb1fa24 which is a 12 byte object. Is it possible to ask ES to sort on this field by value? I don't want lexicographic order. Fo… --- ## [Elastic Cloud OIDC error](https://discuss.elastic.co/t/elastic-cloud-oidc-error/265200)
**Author:** [@Basilis\_Ch](https://discuss.elastic.co/u/Basilis_Ch)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 8:43am UTC](https://discuss.elastic.co/t/elastic-cloud-oidc-error/265200 "2021-02-24T08:43:27Z")
Using ES 7.10 7.10.1 and 7.10.2 in different clusters, I received below errors applying known working configs with Azure AD realm exposed via OIDC. \[instance-0000000009\] Received Token Response from OP with status \[UN… --- ## [Index Pattern refresh](https://discuss.elastic.co/t/index-pattern-refresh/264760)
**Author:** [@UniverseX](https://discuss.elastic.co/u/UniverseX)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 8:05am UTC](https://discuss.elastic.co/t/index-pattern-refresh/264760 "2021-02-24T08:05:36Z")
It seems that with 7.11 release the Index Pattern refresh functionality has been replaced. However, I can't find anything in the manual, it seems still to be the old one where Refresh button was on the page. Could someon… --- ## [Reindexing throughput degrades over time](https://discuss.elastic.co/t/reindexing-throughput-degrades-over-time/265279)
**Author:** [@htang](https://discuss.elastic.co/u/htang)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 7:54am UTC](https://discuss.elastic.co/t/reindexing-throughput-degrades-over-time/265279 "2021-02-24T07:54:14Z")
My reindex operation has slowed considerably over time - what can explain this trend of decrease in throughput? Please see attached. While reindexing is happening, the search latency has also gone up too. See attac… --- ## [Search through all document fields (nested and root document) in one multi match query](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180)
**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 3:21pm UTC](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180 "2021-02-23T15:21:22Z")
Let's assume these basic documents as an example: { "name": "shirt", "description": "with stripes", "items": \[ { "color": "red", "size": "44" }, { "color": "blue", "size": "38" … --- ## [Kibana doesn\`t start](https://discuss.elastic.co/t/kibana-doesn-t-start/265206)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-doesn-t-start/265206 "2021-02-24T07:34:04Z")
Hi I want to run a Kibana in my cluster but faced with a problem and can not run it. When I use service kibana start or systemctl start kibana , it seems to be ok and kibana is running and also the port 5601 is listen… --- ## [Is it good that memory usage is high like over 90%?](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 5\ **Last updated:** [February 24, 2021, 6:10am UTC](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144 "2021-02-24T06:10:42Z")
Hi experts, I know that es node uses memory both for jvm and file cache. If I have an node with 50GB memory and set jvm using 25GB, is that expected when the total memory usage is high like 48GB and never go down? Will… --- ## [Setting up passwords with elasticsearch-setup-passwords interactive](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 6:04am UTC](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208 "2021-02-24T06:04:28Z")
Im having an issue with enabling security on my cluster when Im trying to add the passwords to the bulit in users: I have 6 nodes atl-deves01.com atl-deves02.com atl-deves03.com met-deves01.com met-deves02.com met… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1537) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1539)