# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1589

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1590

---

## [OIDC with Elasticsearch](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946)

<div class="topic-metadata">

**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946 "2021-01-25T11:32:20Z")

</div>

It seems every bit of documentation that I read has conflicting advice, and I'm stumped on this one. First of, I've never worked with OIDC or SAML before so this is my first exploration. I'm trying to configure SSO so i…

---

## [javax.net.ssl.SSLHandshakeException](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 11:10am UTC](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065 "2021-01-25T11:10:38Z")

</div>

Hi, Recently I'm receiving this warning(caught exception while handling client http traffic) in my elasticsearch logs. The cluster health is green and there are no unassigned shards. Here are my Logs.

---

## [Folder shared for elastcisearch logs](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634)

<div class="topic-metadata">

**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634 "2021-01-25T10:34:13Z")

</div>

Hi! I want to store elasticsearch, kibana and logstash logs in a shared folder. Is that possible? I need to have a certain structure for the folder path? I am using 6.5 ELK version. Thanks for your help!

---

## [Elasticsearch Query with dynamic filters](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072)

<div class="topic-metadata">

**Author:** [@shoaib\_akram](https://discuss.elastic.co/u/shoaib_akram)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072 "2021-01-25T09:20:41Z")

</div>

hi I need your help to build a query to use multiple dynamic filter. like if i provide a filter "a" on Field "A" it search on the basis of "a" else do nothing if i provide a filter "b" on Field "B" it search on the ba…

---

## [Restore of elasticsearch data fails with CorruptIndexException\[checksum failed (hardware problem?)](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 9:00am UTC](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619 "2021-01-25T09:00:41Z")

</div>

Hi Team, We trying to restore a backup that we had taken a couple of days ago on a freshly installed elasticsearch cluster. The steps we followed are mentioned below: Installed an elasticsearch chart and pushed some d…

---

## [Different index name based on metricset and backend logic of metricbeat](https://discuss.elastic.co/t/different-index-name-based-on-metricset-and-backend-logic-of-metricbeat/262070)

<div class="topic-metadata">

**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 8:43am UTC](https://discuss.elastic.co/t/different-index-name-based-on-metricset-and-backend-logic-of-metricbeat/262070 "2021-01-25T08:43:49Z")

</div>

Hi experts, My design is metricbeat -\> logstash -\> elasticsearch -\> kibana Would like your adive, should i have different index for different metric set? For isntance, performance-cpu, performance-memory,... is htis …

---

## [Fields description](https://discuss.elastic.co/t/fields-description/262038)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 8:43am UTC](https://discuss.elastic.co/t/fields-description/262038 "2021-01-25T08:43:14Z")

</div>

Hi, I'm working to import tons of basketball's stats so I was thinking if there is a way to add a description to every field in Kibana's dashboards or visualizations. For instance, in the Discover tab, I would find it …

---

## [Aggregating entities from transaction documents using transforms](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828)

<div class="topic-metadata">

**Author:** [@kbirk](https://discuss.elastic.co/u/kbirk)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 8:37am UTC](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828 "2021-01-25T08:37:00Z")

</div>

Hello, We have an application that models transactional data. Each document describes a single transaction between two entities. Our current import process is done in two phases. First we ingest all the transactions in…

---

## [Index randomly fetches wrong results and wrong numeric type](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 8:16am UTC](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893 "2021-01-25T08:16:34Z")

</div>

Hi, I have a situation I have not seen before... In my test index I have just 25 records. I am noticing the following inconsistent problems upon a simple search request to the alias (which is pointing to this single in…

---

## [Can not to delete child document](https://discuss.elastic.co/t/can-not-to-delete-child-document/262064)

<div class="topic-metadata">

**Author:** [@Mamo](https://discuss.elastic.co/u/Mamo)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 8:00am UTC](https://discuss.elastic.co/t/can-not-to-delete-child-document/262064 "2021-01-25T08:00:32Z")

</div>

logstash version: 6.4.2 elasticsearch version: 6.4.2 output { elasticsearch { host =\> \[...\] action =\> "delete" index =\> "test" document\_id =\> "%{childId}" routing =\> "%{parentId}" } } or outpu…

---

## [Sink data from hive to es](https://discuss.elastic.co/t/sink-data-from-hive-to-es/262062)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 7:37am UTC](https://discuss.elastic.co/t/sink-data-from-hive-to-es/262062 "2021-01-25T07:37:35Z")

</div>

Hi guys, I want to sink my data from hive to es. data in hive just like this: CREATE TABLE \`dwd\_ddjk\_hospital\`( \`orgid\` bigint, \`orgcode\` string, …

---

## [Intercept incoming data to logstash pipeline](https://discuss.elastic.co/t/intercept-incoming-data-to-logstash-pipeline/262028)

<div class="topic-metadata">

**Author:** [@g2h2o](https://discuss.elastic.co/u/g2h2o)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 7:02am UTC](https://discuss.elastic.co/t/intercept-incoming-data-to-logstash-pipeline/262028 "2021-01-25T07:02:52Z")

</div>

Actually we are getting jenkins build logs result into elasticsearch through filebeats and logstash. We are receiving the expected data in logstash but for an unknown reason is getting repeated constantly. Seems that t…

---

## [Logstash error: Could not process event: no implicit conversion of NilClass into String](https://discuss.elastic.co/t/logstash-error-could-not-process-event-no-implicit-conversion-of-nilclass-into-string/262056)

<div class="topic-metadata">

**Author:** [@Subhas\_Patil](https://discuss.elastic.co/u/Subhas_Patil)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 5:51am UTC](https://discuss.elastic.co/t/logstash-error-could-not-process-event-no-implicit-conversion-of-nilclass-into-string/262056 "2021-01-25T05:51:14Z")

</div>

Iam getting the error Could not process event: no implicit conversion of NilClass into String in logstash ruby filter. Here is the ruby file which iam using in the logstash filter: def filter(event) require 'json' …

---

## [Data plugin search bar on filter removal doesn't refresh automatically](https://discuss.elastic.co/t/data-plugin-search-bar-on-filter-removal-doesnt-refresh-automatically/260502)

<div class="topic-metadata">

**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 5:41am UTC](https://discuss.elastic.co/t/data-plugin-search-bar-on-filter-removal-doesnt-refresh-automatically/260502 "2021-01-25T05:41:46Z")

</div>

Hi Team, I am using data plugin for elastic queries. In my project i have used kibana search bar as below \<navigation.ui.TopNavMenu appName={PLUGIN\_ID} showSearchBar={true} useDefaultBehaviors={true} …

---

## [Cold phase staying in data/data\_hot node](https://discuss.elastic.co/t/cold-phase-staying-in-data-data-hot-node/262052)

<div class="topic-metadata">

**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:42am UTC](https://discuss.elastic.co/t/cold-phase-staying-in-data-data-hot-node/262052 "2021-01-25T04:42:34Z")

</div>

Hello, I am trying to setup an elasticsearch cluster. I setted up 9 nodes with these roles : master-1 \[master\] master-2 \[master\] master-3 \[master\] data-1 \[data, data\_hot\] data-2 \[data\_warm\] data-3 \[data\_warm\] da…

---

## [What line indicates that filebeat is creating an index in Elasticsearch](https://discuss.elastic.co/t/what-line-indicates-that-filebeat-is-creating-an-index-in-elasticsearch/261791)

<div class="topic-metadata">

**Author:** [@rajeshkp](https://discuss.elastic.co/u/rajeshkp)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:34am UTC](https://discuss.elastic.co/t/what-line-indicates-that-filebeat-is-creating-an-index-in-elasticsearch/261791 "2021-01-25T04:34:09Z")

</div>

What line indicates that Filebeat 7.7.0 is creating an index in Elasticsearch. We are trying to debug the fact that its not creating an Elasticsearch index, but the harvester fails saying the index is missing. Isn't it t…

---

## [How to keep data when upgrading kibana docker?](https://discuss.elastic.co/t/how-to-keep-data-when-upgrading-kibana-docker/261877)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 6\
**Last updated:** [January 25, 2021, 4:17am UTC](https://discuss.elastic.co/t/how-to-keep-data-when-upgrading-kibana-docker/261877 "2021-01-25T04:17:08Z")

</div>

version: '3.6' services: elasticsearch: image: elasticsearch:7.9.1 container\_name: elasticsearch-docker environment: - node.name=es-docker - cluster.name=es-single-node - discovery.type=s…

---

## [Conditional update based on priority in Elasticsearch](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036)

<div class="topic-metadata">

**Author:** [@Ahmed\_Sharara](https://discuss.elastic.co/u/Ahmed_Sharara)\
**Replies:** 8\
**Last updated:** [January 25, 2021, 4:15am UTC](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036 "2021-01-25T04:15:54Z")

</div>

Hello, I'm using logstash to index data from Kafka to Elasticsearch. There are multiple events with the same id. I'm using upsert in logstash to update existing documents with the new values based on the \_id. sample in…

---

## [Is it safe to delete SLM history indexes](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965)

<div class="topic-metadata">

**Author:** [@robbyku](https://discuss.elastic.co/u/robbyku)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:10am UTC](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965 "2021-01-25T04:10:29Z")

</div>

Hi, I have added a new master-eligible node (say node04) and was decommissioning another master-eligible node (say node03), due to a different es version, from the cluster of 3 nodes. So I used the cluster allocation fi…

---

## [How to get a better performance to load ElasticSearch data into Hive?](https://discuss.elastic.co/t/how-to-get-a-better-performance-to-load-elasticsearch-data-into-hive/262051)

<div class="topic-metadata">

**Author:** [@Sean\_Han](https://discuss.elastic.co/u/Sean_Han)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 3:40am UTC](https://discuss.elastic.co/t/how-to-get-a-better-performance-to-load-elasticsearch-data-into-hive/262051 "2021-01-25T03:40:28Z")

</div>

We created the Hive external table using ElasticSearch StorageHandler as shown below: CREATE EXTERNAL TABLE DEFAULT.ES\_TEST ( REG\_DATE STRING , STR1 STRING , STR2 STRING , STR3 STRING , STR4 STRING , S…

---

## [How Logstash Process data](https://discuss.elastic.co/t/how-logstash-process-data/261216)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 2:49am UTC](https://discuss.elastic.co/t/how-logstash-process-data/261216 "2021-01-25T02:49:33Z")

</div>

Hello Team I am in requirement of pushing data from Oracle Table to Elasticsearch Index. My Oracle Table is of 300GB in Size. I would like to understand , How Logstash process the data when he pulls from Oracle { inpu…

---

## [Installing Elastic Search on shared webhosting](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046)

<div class="topic-metadata">

**Author:** [@MyGIS](https://discuss.elastic.co/u/MyGIS)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 1:54am UTC](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046 "2021-01-25T01:54:36Z")

</div>

Hello, Is it possible to installed Elasticsearch on a shared web hosting such as Hostgator or Bluehost? Thanks.

---

## [What are the possible values of type in task](https://discuss.elastic.co/t/what-are-the-possible-values-of-type-in-task/261534)

<div class="topic-metadata">

**Author:** [@kender1314](https://discuss.elastic.co/u/kender1314)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 1:33am UTC](https://discuss.elastic.co/t/what-are-the-possible-values-of-type-in-task/261534 "2021-01-25T01:33:12Z")

</div>

As the documentation says，when I execute command GET \_tasks?actions=\*search&detailed return result { "nodes" : { "oTUltX4IQMOUUVeiohTt8A" : { "name" : "H5dfFeA", "transport\_address" : "127.0.0.1:9300", "host" : "…

---

## [Elastic ILM does not work as expected after upgrading Elastic](https://discuss.elastic.co/t/elastic-ilm-does-not-work-as-expected-after-upgrading-elastic/261554)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 12:36am UTC](https://discuss.elastic.co/t/elastic-ilm-does-not-work-as-expected-after-upgrading-elastic/261554 "2021-01-25T00:36:09Z")

</div>

After I have upgraded my Elasticsearch cluster from 7.9 to 7.10.1 my ILM for filebeat does not work as expected. I can see that the corresponding indices are being marked as Warm when I check the index management, but I …

---

## [NEST client always using PUT http method instead of POST](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552)

<div class="topic-metadata">

**Author:** [@Izzy](https://discuss.elastic.co/u/Izzy)\
**Replies:** 0\
**Last updated:** [January 19, 2021, 1:56pm UTC](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552 "2021-01-19T13:56:39Z")

</div>

I'm trying to index my documents and expect them to have unique Ids, for doing that I'm using pipeline processor in order to remove the Id field from my model. However, Id always stored as 0 in elastic side. I noticed …

---

## [Best practices for managing application logs](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824)

<div class="topic-metadata">

**Author:** [@pampua84](https://discuss.elastic.co/u/pampua84)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 12:07am UTC](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824 "2021-01-25T00:07:17Z")

</div>

Hello boys and girls, I have a few questions about best practices for managing my application logs on elastic: Is it a good idea to create an index by app and day to improve search performance? I have logs in Json for…

---

## [Problem with centos 7 install](https://discuss.elastic.co/t/problem-with-centos-7-install/261941)

<div class="topic-metadata">

**Author:** [@cyrduf](https://discuss.elastic.co/u/cyrduf)\
**Replies:** 1\
**Last updated:** [January 24, 2021, 11:56pm UTC](https://discuss.elastic.co/t/problem-with-centos-7-install/261941 "2021-01-24T23:56:41Z")

</div>

Hello, I have some problems after elasticsearch installation on centos 7 VM. There is the log and if you can help me to solve. Best Regards \[root@localhost log\]# sudo yum install -y elasticsearch Modules complémenta…

---

## [Bitnami Elasticsearch in Azure(X-Pack)](https://discuss.elastic.co/t/bitnami-elasticsearch-in-azure-x-pack/261727)

<div class="topic-metadata">

**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\
**Replies:** 6\
**Last updated:** [January 24, 2021, 11:52pm UTC](https://discuss.elastic.co/t/bitnami-elasticsearch-in-azure-x-pack/261727 "2021-01-24T23:52:27Z")

</div>

Hi all. I want to use Bitnami Elasticsearch in Azure portal, but I don't need X-Pack. How I can disable it or install Bitnami Elk without X-Pack? When I starting to create in from Marketplace, I don't see any setting ho…

---

## [Data node is not reporting CPU](https://discuss.elastic.co/t/data-node-is-not-reporting-cpu/261697)

<div class="topic-metadata">

**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\
**Replies:** 3\
**Last updated:** [January 24, 2021, 10:06pm UTC](https://discuss.elastic.co/t/data-node-is-not-reporting-cpu/261697 "2021-01-24T22:06:49Z")

</div>

Hello, I have a cloud.elastic.co deployment with some hot and warm nodes. One of the hot nodes has not been reporting CPU usage since it was launched. Was hoping it would sort itself out, even tried a restart. I hav…

---

## [Poretect plain text password in Kibana yml file](https://discuss.elastic.co/t/poretect-plain-text-password-in-kibana-yml-file/261999)

<div class="topic-metadata">

**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\
**Replies:** 3\
**Last updated:** [January 24, 2021, 5:05pm UTC](https://discuss.elastic.co/t/poretect-plain-text-password-in-kibana-yml-file/261999 "2021-01-24T17:05:13Z")

</div>

Hi experts, Please share me way to protect hard coded sensitive data in kibana.yml elasticsearch.username: "kibana" elasticsearch.password: "PasswordAsPlainText" For logstash i use keystore. so i just need use ${ES\_PW…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1588)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1590)
