# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1625 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1626 --- ## [Canvas data show is different](https://discuss.elastic.co/t/canvas-data-show-is-different/259627)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 2:12pm UTC](https://discuss.elastic.co/t/canvas-data-show-is-different/259627 "2020-12-29T14:12:19Z")
Hi All, I want to show data STAMP/day And this is my ES Query SELECT count(labels.status::varchar) as Stamp FROM "apm-\*" WHERE labels.status = 'STAMP' AND labels.tanggal = 'DATE(NOW())' But why the result is 0, even … --- ## [Metricbeat AWS module](https://discuss.elastic.co/t/metricbeat-aws-module/259696)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 12:42pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module/259696 "2020-12-29T12:42:23Z")
Kibana version : 7.10.0 Elasticsearch version : 7.10.0 Metricbeat version : 7.10.1 Good day, I'm trying to collect monitoring metrics from AWS with metricbeat. In particular, I am interested in the metrics of the 5 E… --- ## [Elasticsearch and Magento 2.4.1 "No mapping found for position category"](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891)
**Author:** [@dani1](https://discuss.elastic.co/u/dani1)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891 "2020-12-29T11:59:01Z")
Hello there, I'm facing this issue with Elasticsearch 7.6.2 with Magento 2.4. Anyone have an idea? \[2020-10-31 07:34:29\] main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found… --- ## [Index documents with autogenerated ID and custom routing](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287)
**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 11:14am UTC](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287 "2020-12-29T11:14:29Z")
I want to index documents with an autogenerated ID and a Routing. The ID field is autogenerated, so I want to link a parent to a child by ExternalId. I use NEST client for .NET and have such a piece of code: await \_e… --- ## [Elasticsearch Wildcard fieldtype has slow performance for wildcard queries](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662)
**Author:** [@Chris\_Doman](https://discuss.elastic.co/u/Chris_Doman)\ **Replies:** 4\ **Last updated:** [December 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662 "2020-12-29T09:31:42Z")
I'm testing the new ElasticSearch WildCard field type (https://www.elastic.co/blog/find-strings-within-strings-faster-with-the-new-elasticsearch-wildcard-field) that is supposed to offer better wildcard queries. Strange… --- ## [How does Winlogbeat parsing happen?](https://discuss.elastic.co/t/how-does-winlogbeat-parsing-happen/259727)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 9:25am UTC](https://discuss.elastic.co/t/how-does-winlogbeat-parsing-happen/259727 "2020-12-29T09:25:01Z")
Hello there ! Probably dumb question, but : I'm asking how Winlogbeat parsing happen as I didn't use any logstash processing (grok,kv...) and didn't explicitely specify any pipeline to use How does it works ? My setu… --- ## [Search\_after throws an exception using sort on nested filtered field containing date typed data](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783)
**Author:** [@kaore](https://discuss.elastic.co/u/kaore)\ **Replies:** 0\ **Last updated:** [December 29, 2020, 8:50am UTC](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783 "2020-12-29T08:50:38Z")
Given a mapping describing an event which contains the following nested field: ... "timings": { "type": "nested", "properties": { "begin": { "type": "date" }, "end": { "type": "date" } … --- ## [Error in visualisation; \[esaggs\] \> when trying to load a dashboard](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 8:45am UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081 "2020-12-29T08:45:35Z")
Hello, We are using 4 dashboards in Kibana, of which 3 are working just fine. The 4th one however always crashes when loading more than the last 7 days. When loading the last 30 days, we get 1 or 2 'Error in visualizati… --- ## [Syntax to use max\_snapshot\_bytes\_per\_sec in snapshot api](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778)
**Author:** [@dhina](https://discuss.elastic.co/u/dhina)\ **Replies:** 0\ **Last updated:** [December 29, 2020, 8:11am UTC](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778 "2020-12-29T08:11:42Z")
I want to use the max\_snapshot\_bytes\_per\_sec to throttle the speed of the Elastic search snapshot. Checked the documentation, could not find an example on how to specify the limit. Which one of the below value is correc… --- ## [Multitenancy](https://discuss.elastic.co/t/multitenancy/259737)
**Author:** [@ArifAlili](https://discuss.elastic.co/u/ArifAlili)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 7:13am UTC](https://discuss.elastic.co/t/multitenancy/259737 "2020-12-29T07:13:33Z")
Hi all, We are using Elasticsearch for our e-commerce platform, we are indexing products only. We have multiple shops under our platform, each shop is using different catalogue (produtcs). Currently we are investigatin… --- ## [Increase shard count in elastic search kubernetes](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269)
**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\ **Replies:** 4\ **Last updated:** [December 29, 2020, 6:17am UTC](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269 "2020-12-29T06:17:34Z")
I have deployed an Elastic search in GKE. ECK has 3 master and 2 data nodes. When creating an index with 1 shard and 1 replica getting 400 error response when the shard count reached 1000. Is it possible to increase the… --- ## [Unable to install logtrail plugin](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 6:13am UTC](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630 "2020-12-29T06:13:37Z")
Hello Team, We just upgrade our ELK stack version from 6.8 to 7.10.1. We are using 3 node elasticsaerch cluster and cluster is up and running. We upgraded our kibana also from 6.8 to 7.10.1 and its also running we are a… --- ## [Is it possible to install ccr on a older version of elasticsearch, eg:5.x？](https://discuss.elastic.co/t/is-it-possible-to-install-ccr-on-a-older-version-of-elasticsearch-eg-5-x/259446)
**Author:** [@Jia\_Liu](https://discuss.elastic.co/u/Jia_Liu)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 6:09am UTC](https://discuss.elastic.co/t/is-it-possible-to-install-ccr-on-a-older-version-of-elasticsearch-eg-5-x/259446 "2020-12-29T06:09:26Z")
I have two elasticsearch cluster with verison 5.6.8. I want to copy index data across them, but as far as I know, cross-cluster-replication is enabled after 6.5. Is it possible to install ccr on an older version of ela… --- ## [Accessing Elasticsearch System indices via API](https://discuss.elastic.co/t/accessing-elasticsearch-system-indices-via-api/259581)
**Author:** [@bjur](https://discuss.elastic.co/u/bjur)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 10:35am UTC](https://discuss.elastic.co/t/accessing-elasticsearch-system-indices-via-api/259581 "2020-12-24T10:35:00Z")
We have a custom setup in place, where Kibana dashboard is accessed via Elasticsearch API, by querying the .kibana index. From the results the Dashboard queries are extracted and used onward. While testing the upgrade t… --- ## [Error running kibana for first time after install](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604)
**Author:** [@Sama\_M](https://discuss.elastic.co/u/Sama_M)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 6:05am UTC](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604 "2020-12-29T06:05:13Z")
Hello, I have just fresh installed Ubuntu on my laptop so i can follow along a book on python data engineering. All i have installed so far is elasticsearch and kibana. When attempting to run kibana for the first time i… --- ## [Watch-history-ilm-policy - out of the box ILM incorrectly set up?](https://discuss.elastic.co/t/watch-history-ilm-policy-out-of-the-box-ilm-incorrectly-set-up/259606)
**Author:** [@mgevans](https://discuss.elastic.co/u/mgevans)\ **Replies:** 0\ **Last updated:** [December 24, 2020, 8:00pm UTC](https://discuss.elastic.co/t/watch-history-ilm-policy-out-of-the-box-ilm-incorrectly-set-up/259606 "2020-12-24T20:00:37Z")
Hi there we're going through our own ILM components and noticed there are a number of built-in ILMs. One of these is for the watcher history indexes such as ".watcher-history-12-2020.12.23". I'm thinking these are mis… --- ## [In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772)
**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 6:03am UTC](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772 "2020-12-29T06:03:41Z")
In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline --- ## [Why cluster UUID is different](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660)
**Author:** [@sagittar](https://discuss.elastic.co/u/sagittar)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 5:58am UTC](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660 "2020-12-29T05:58:38Z")
node1 \[node\_2409:8086:8110:3f0::2d\] node2 \[node\_2409:8086:8110:3f0::2e\] node3 \[node\_2409:8086:8110:3f0::2f\] here is node1 log \[2020-12-23T02:38:57,563\]\[INFO \]\[o.e.c.c.JoinHelper \] \[node\_2409:8086:8110:3f0::2… --- ## [Grok an Elasticsearch problem](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671)
**Author:** [@mesutalf](https://discuss.elastic.co/u/mesutalf)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671 "2020-12-29T05:57:41Z")
Hi eveyone; I have ELK locally. I trying to send my mini log to Elasticsearch. My pattern is: 2020-11-30 05:52:33,018 \[9344\] INFO Dile.ServiceProvider.ServiceThread \[\] - Thread \[Core\[3u43s3-c403-4fe4-ab87-9bea0c0ab44… --- ## [Elasticsearch storage optimisation](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641)
**Author:** [@a.oiskhine](https://discuss.elastic.co/u/a.oiskhine)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641 "2020-12-29T05:57:04Z")
Hello Guys, Is there any way to reduce the size of elasticsearch indexes, Thanks in advance --- ## [How can I halt the process of movement of indices from hot nodes to warm nodes in elastic?](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:56am UTC](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717 "2020-12-29T05:56:31Z")
I have initiated the process of movement of week 49 indices from our designated hot nodes to warm nodes using the API: PUT \*2020.49/\_settings { "index.routing.allocation.require.data": "warm" } Now how can I halt… --- ## [Is there a way to show shard data path on a node?](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:52am UTC](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759 "2020-12-29T05:52:00Z")
I am in the process of validating using nodes with multiple disks. I need an easy way to have a high level idea where the shards are located. I typically use "GET /\_cat/allocation?v" to show the overall disk usage. Th… --- ## [FileBeat - awscloudwatch input config](https://discuss.elastic.co/t/filebeat-awscloudwatch-input-config/259761)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 10:07pm UTC](https://discuss.elastic.co/t/filebeat-awscloudwatch-input-config/259761 "2020-12-28T22:07:04Z")
Hello Everyone, I have attempted to use the awscloudwatch input type in my FileBeat setup as follows but the appropriate ARN for the account I'm dealing with. The AWS credentials file has the correct ID keys and these … --- ## [Python index CSV into ES date issue](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 5:49am UTC](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764 "2020-12-29T05:49:41Z")
Hi, I use Python csv.DictReader to bulk insert CSV data into ES, i found that the date column was read as string. I tried two methods to deal with the date column data type: pre-define the index template to set the c… --- ## [How to fetch multiple return values by performing queries on multiple indices](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716)
**Author:** [@sharpshooter](https://discuss.elastic.co/u/sharpshooter)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 4:31am UTC](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716 "2020-12-29T04:31:43Z")
Hii i am searching on multiple indices at a time on objects like Mail , Calender , Attachment and want return values of multiple types e.g :- (Mail , Calender , Attachment) but i am not able to get it please help. Thank … --- ## [High load, but lower cpu,lower IO](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047)
**Author:** [@111421](https://discuss.elastic.co/u/111421)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 3:49am UTC](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047 "2020-12-29T03:49:33Z")
Hello, eyeryone I checked the es single node load through cerebor and found that the load is very high, but the cpu utilization rate is very low. Why? ES is deployed through docker, version: 6.8 cerebro: kibana: … --- ## [Data too large, data for \[\\]](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676)
**Author:** [@myamor163](https://discuss.elastic.co/u/myamor163)\ **Replies:** 16\ **Last updated:** [December 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/data-too-large-data-for-transport-request/258676 "2020-12-28T09:14:05Z")
Do not open replicas, index write normal, open replicas, write the following error: type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\\] would be \[30770989726/28.6gb\], whi… --- ## [Insert Custom Field Name into Index Name after going through Solace Pubsub](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 1:31am UTC](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639 "2020-12-29T01:31:39Z")
Hi there I'm using ELK 7.10. My test setup is as follows: filebeat (running in kibana) -\> logstash01 -\> solace pubsub+ -\> logstash02 -\> Elasticsearch -\> kibana What I'm trying to accomplish: Insert custom fields cre… --- ## [Search\_phase\_execution\_exception filebeat all shards failed](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755)
**Author:** [@whosecode](https://discuss.elastic.co/u/whosecode)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 1:11am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755 "2020-12-29T01:11:42Z")
Hi! My ealstic cluster overview panel shows health yellow as shards are missing, and I get below reponses whenever I try to produce some visualization, or dashboard search\_phase\_execution\_exception all shards failed E… --- ## [Json upload using Data visualizer issue](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763)
**Author:** [@Savita\_Chauhan](https://discuss.elastic.co/u/Savita_Chauhan)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 12:22am UTC](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763 "2020-12-29T00:22:56Z")
I am trying to upload/index a simple json file using Kibana's Data Visualizer (under ML). I have 3 node elastic cluster and one kibana running on docker. It lets me upload the json, but when I look at the index it had pu… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1624) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1626)