# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1744 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1745 --- ## [Composite aggregation returns old version documents](https://discuss.elastic.co/t/composite-aggregation-returns-old-version-documents/252353)
**Author:** [@And390](https://discuss.elastic.co/u/And390)\ **Replies:** 6\ **Last updated:** [October 19, 2020, 7:40am UTC](https://discuss.elastic.co/t/composite-aggregation-returns-old-version-documents/252353 "2020-10-19T07:40:47Z")
Hello. I found that in some cases composite aggregation returns old documents (the initial indexed version instead of updated). Steps to reproduce: curl -X PUT -H 'Content-Type: application/json' localhost:9200/test -d … --- ## [Logstash and Elasticsearch ILM bootstrap index](https://discuss.elastic.co/t/logstash-and-elasticsearch-ilm-bootstrap-index/252310)
**Author:** [@Mikele](https://discuss.elastic.co/u/Mikele)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 7:29am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-ilm-bootstrap-index/252310 "2020-10-19T07:29:35Z")
I need to dynamically create several types (with different index names) indexes in Elasticsearch from logstash. I need to use lifecycle (ILM) feature. My questions and either problems are: How can I from logstash creat… --- ## [Kafka to elasticsearch](https://discuss.elastic.co/t/kafka-to-elasticsearch/252487)
**Author:** [@sahil21](https://discuss.elastic.co/u/sahil21)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 7:18am UTC](https://discuss.elastic.co/t/kafka-to-elasticsearch/252487 "2020-10-19T07:18:15Z")
Hi All, I have a kafka topic with some existing data in it. I want to send that data to elasticsearch index using a logstash config file. Currently my config file only send the data which is being entered while the pipe… --- ## [GET /\_cluster/settings empty](https://discuss.elastic.co/t/get-cluster-settings-empty/252471)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 5:42am UTC](https://discuss.elastic.co/t/get-cluster-settings-empty/252471 "2020-10-19T05:42:40Z")
Hi there, I have a 7.5.1 production cluster of 3 nodes running. I am wondering: doing this GET /\_cluster/settings empty just gives me: I would expect more. Background: I have reached on all 3 nodes the disk waterma… --- ## [Kibana not giving results when checking using \*, Also need help in Scripted field](https://discuss.elastic.co/t/kibana-not-giving-results-when-checking-using-also-need-help-in-scripted-field/252455)
**Author:** [@naveen\_wilson](https://discuss.elastic.co/u/naveen_wilson)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 5:22am UTC](https://discuss.elastic.co/t/kibana-not-giving-results-when-checking-using-also-need-help-in-scripted-field/252455 "2020-10-19T05:22:47Z")
Hi All, I want to search for a sentence in Kibana. Please see below an Example. Actual Log : Product 134563 is blocked in SAP When i search with "Product \* is blocked in SAP" in Kibana, Its not showing any result. I … --- ## [Restarting a cluster node](https://discuss.elastic.co/t/restarting-a-cluster-node/252468)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 4:30am UTC](https://discuss.elastic.co/t/restarting-a-cluster-node/252468 "2020-10-19T04:30:12Z")
Update with info I should have included! ES version 6.8.12. Three nodes in the cluster running on Linux. Two nodes have SSDs and one has rotating disks -- this was added for resilience -- all api calls go to the two w… --- ## [How to query - sort multiple nested fields in elasticsearch](https://discuss.elastic.co/t/how-to-query-sort-multiple-nested-fields-in-elasticsearch/252470)
**Author:** [@unnikr](https://discuss.elastic.co/u/unnikr)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 4:18am UTC](https://discuss.elastic.co/t/how-to-query-sort-multiple-nested-fields-in-elasticsearch/252470 "2020-10-19T04:18:21Z")
I required multiple sorting in nested fields. I tried below code but it's not working. how can I do a multiple sorting in nested fields? data is stored like this. indent preformatted text by 4 spaces\[ { "\_index": "tes… --- ## [How can I show all series data for the vega/vaga lite tooltip like tsvb](https://discuss.elastic.co/t/how-can-i-show-all-series-data-for-the-vega-vaga-lite-tooltip-like-tsvb/252222)
**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\ **Replies:** 4\ **Last updated:** [October 19, 2020, 4:05am UTC](https://discuss.elastic.co/t/how-can-i-show-all-series-data-for-the-vega-vaga-lite-tooltip-like-tsvb/252222 "2020-10-19T04:05:24Z")
Dear Vega/vaga lite experts, How can I show all series data for the vega/vaga lite tooltip like tsvb (just like the following graph)? Thanks for ur help in advance! Thanks, Roy --- ## [Is my systemctl restart logstash not working?](https://discuss.elastic.co/t/is-my-systemctl-restart-logstash-not-working/252464)
**Author:** [@yulaika](https://discuss.elastic.co/u/yulaika)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 3:51am UTC](https://discuss.elastic.co/t/is-my-systemctl-restart-logstash-not-working/252464 "2020-10-19T03:51:22Z")
the messages stopped halfway. it’s not even completed. when i systemctl restart logstash, it didn’t even get restarted for some reason. --- ## [NEST 7.9 Bulk Partial Update failing](https://discuss.elastic.co/t/nest-7-9-bulk-partial-update-failing/250581)
**Author:** [@venkatsvr4](https://discuss.elastic.co/u/venkatsvr4)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 2:09am UTC](https://discuss.elastic.co/t/nest-7-9-bulk-partial-update-failing/250581 "2020-10-19T02:09:11Z")
I am using Nest 7.9 client to bulk update documents in a huge index. Followed below 6.6 link to set up updates in C# List\ jiras = new List\(); JObject id1 = new JObject(); … --- ## [Using Leaflet with Elasticsearch](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433)
**Author:** [@morescratch](https://discuss.elastic.co/u/morescratch)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 1:20am UTC](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433 "2020-10-19T01:20:22Z")
Hi all, I’ve been looking for examples on how to use Elasticsearch as a data source for a Leaflet map. I understand that Kibana uses leaflet so I am hoping there some code snippets out there that I can reuse. Anyone know… --- ## [Launch logstash conf files automatically without "logstash -f" command](https://discuss.elastic.co/t/launch-logstash-conf-files-automatically-without-logstash-f-command/252462)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 12:03am UTC](https://discuss.elastic.co/t/launch-logstash-conf-files-automatically-without-logstash-f-command/252462 "2020-10-19T00:03:47Z")
hello my friends, I have .conf files in my directory, and I have to use the logtsash -f command to start reading, is it possible to start them automatically without using the command and also at OS boot thank you --- ## [Elasticsearch-to-csv made easy with Python](https://discuss.elastic.co/t/elasticsearch-to-csv-made-easy-with-python/252461)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 0\ **Last updated:** [October 18, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticsearch-to-csv-made-easy-with-python/252461 "2020-10-18T22:38:22Z")
Hi guys! This time I'm posting here not to ask for help but advice. I've developed a tool to make extremely easy data export from Elasticsearch to a CSV file, both raw and in a aggregated format. You can find much mor… --- ## [Metricbeat mapper error in 7.9.2](https://discuss.elastic.co/t/metricbeat-mapper-error-in-7-9-2/252428)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 2\ **Last updated:** [October 18, 2020, 9:58pm UTC](https://discuss.elastic.co/t/metricbeat-mapper-error-in-7-9-2/252428 "2020-10-18T21:58:21Z")
I have a metricbeat pipeline that works fine sending data to my on premis cluster but getting this error sending to ES cloud: "mapper \[index\_recovery.shards.index.size.reused\_in\_bytes\] cannot be changed from type \[long\]… --- ## [Logstash grep and grok](https://discuss.elastic.co/t/logstash-grep-and-grok/252441)
**Author:** [@tarunmendon](https://discuss.elastic.co/u/tarunmendon)\ **Replies:** 3\ **Last updated:** [October 18, 2020, 3:16pm UTC](https://discuss.elastic.co/t/logstash-grep-and-grok/252441 "2020-10-18T15:16:24Z")
I am new to Elasticstack. I am trying to implement a logstash pipeline in which the a file would be processed and it would filter(grep) and output if the line of file contains following keyword - java.lang.Exception - … --- ## [Kibana Maps- Configure Label Text so it is legible](https://discuss.elastic.co/t/kibana-maps-configure-label-text-so-it-is-legible/251973)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 4\ **Last updated:** [October 18, 2020, 1:00pm UTC](https://discuss.elastic.co/t/kibana-maps-configure-label-text-so-it-is-legible/251973 "2020-10-18T13:00:44Z")
Hi there using Kibana 17.9.2 and setting up a Maps widget. All great.. u,nti,l, ,yo,u, setup a label,., Totally illegible Have played with colors and pixel sizing to no avail., Is there a way to set the font/and size f… --- ## [Feasibility of Geotracking visualization](https://discuss.elastic.co/t/feasibility-of-geotracking-visualization/252367)
**Author:** [@Hideki\_Nakashima](https://discuss.elastic.co/u/Hideki_Nakashima)\ **Replies:** 7\ **Last updated:** [October 18, 2020, 12:54pm UTC](https://discuss.elastic.co/t/feasibility-of-geotracking-visualization/252367 "2020-10-18T12:54:51Z")
Hi, We have a on-going project to visualize GPS data. So far, we used ElasticSearch and Kibana in AWS, however we have some issues to achieve our goal due to limitations on features of Kibana in AWS such as zoom level. … --- ## [Problem processing multiline json](https://discuss.elastic.co/t/problem-processing-multiline-json/250446)
**Author:** [@niv](https://discuss.elastic.co/u/niv)\ **Replies:** 3\ **Last updated:** [October 18, 2020, 10:34am UTC](https://discuss.elastic.co/t/problem-processing-multiline-json/250446 "2020-10-18T10:34:22Z")
MY INPUT FILE : \[ { "value": "drrrrrrrrrrrrropfields\_NTNT10", "Id": "drrrrrrrrrropfields\_10", "PSShowComputerName": "dropfields\_10" }, { "value": "dropfields\_nT8", "P… --- ## [Monitoring of remote server's CPU utilization](https://discuss.elastic.co/t/monitoring-of-remote-servers-cpu-utilization/252360)
**Author:** [@Martin\_qa](https://discuss.elastic.co/u/Martin_qa)\ **Replies:** 2\ **Last updated:** [October 18, 2020, 8:28am UTC](https://discuss.elastic.co/t/monitoring-of-remote-servers-cpu-utilization/252360 "2020-10-18T08:28:52Z")
Hi guys, I am looking for the best solution for measure CPU utilization on the remote server where is running performance testing. Please can you give me some hint on which plugins or beats do I need to use, I am at th… --- ## [ElasticSearch: Mapping not applied to AWS ELK](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 12\ **Last updated:** [October 18, 2020, 5:38am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326 "2020-10-18T05:38:00Z")
While applying below mapping to my local ElasticSearch 7.4.1 private static void addIndexMapping(RestHighLevelClient client, String indexName) throws IOException { PutMappingRequest request = new PutMappingReque… --- ## [Filebeat netflow cant parse netstream from huawei](https://discuss.elastic.co/t/filebeat-netflow-cant-parse-netstream-from-huawei/251534)
**Author:** [@ar4](https://discuss.elastic.co/u/ar4)\ **Replies:** 5\ **Last updated:** [October 17, 2020, 11:47pm UTC](https://discuss.elastic.co/t/filebeat-netflow-cant-parse-netstream-from-huawei/251534 "2020-10-17T23:47:03Z")
Hi, We using filebeat for collect netflow from Mikrotik. Also its work perfect. Now we need to collect netstream from Huawei AR2240 and it's don't work, flows no seen in kibana. Then i run filebeat at debug mode i see… --- ## [Setting bind and publish IPs](https://discuss.elastic.co/t/setting-bind-and-publish-ips/252437)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 0\ **Last updated:** [October 17, 2020, 11:07pm UTC](https://discuss.elastic.co/t/setting-bind-and-publish-ips/252437 "2020-10-17T23:07:58Z")
Hi There.. I know this is covered elsewhere... but I still seem to be having issues. Elasticsearch version 7.9.2 I have a cluster.. with 2 ,masters (I know.. its development), and 2 data nodes. All good. Set up to use … --- ## [Go-elasticsearch versus Olivere golang client](https://discuss.elastic.co/t/go-elasticsearch-versus-olivere-golang-client/252248)
**Author:** [@Sudd\_Ghosh](https://discuss.elastic.co/u/Sudd_Ghosh)\ **Replies:** 1\ **Last updated:** [October 16, 2020, 2:39pm UTC](https://discuss.elastic.co/t/go-elasticsearch-versus-olivere-golang-client/252248 "2020-10-16T14:39:50Z")
Hi, I am planning to migrate from golang Olivere to the official go-elasticsearch API for a data ingestion application running in K8s container. This I am doing mainly because I read Olivere is not committing to support… --- ## [Elastic SQL: How to get length of a field?](https://discuss.elastic.co/t/elastic-sql-how-to-get-length-of-a-field/252417)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 5\ **Last updated:** [October 17, 2020, 4:06pm UTC](https://discuss.elastic.co/t/elastic-sql-how-to-get-length-of-a-field/252417 "2020-10-17T16:06:27Z")
SQL query fails when I do a String function The original data is SELECT "message" FROM ".kibana-event-log-7.9.1-000001" message ----------------- eventLog starting eventLog starting When I do a length POS… --- ## [Rollover error](https://discuss.elastic.co/t/rollover-error/252278)
**Author:** [@venku](https://discuss.elastic.co/u/venku)\ **Replies:** 10\ **Last updated:** [October 17, 2020, 2:28pm UTC](https://discuss.elastic.co/t/rollover-error/252278 "2020-10-17T14:28:11Z")
I am totally lost on how Rollover works. I keep ending up with an error. I deleted my indexes and started fresh but still the same error everytime. I am having following error and could not figure why this is happening.… --- ## [Unable remote debug my plugin installed in Elasticsearch in remote VM](https://discuss.elastic.co/t/unable-remote-debug-my-plugin-installed-in-elasticsearch-in-remote-vm/252411)
**Author:** [@ccnoufal](https://discuss.elastic.co/u/ccnoufal)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 10:43am UTC](https://discuss.elastic.co/t/unable-remote-debug-my-plugin-installed-in-elasticsearch-in-remote-vm/252411 "2020-10-17T10:43:50Z")
I unable remote debug my plugin installed in Elasticsearch in remote VM in eclipse I am getting following error message in popup I have added following line in jvm.options file. -agentlib:jdwp=transport=dt\_socket,se… --- ## [Precision-Recall plot](https://discuss.elastic.co/t/precision-recall-plot/251232)
**Author:** [@Eugene\_Dobrovolskyi](https://discuss.elastic.co/u/Eugene_Dobrovolskyi)\ **Replies:** 2\ **Last updated:** [October 17, 2020, 8:21am UTC](https://discuss.elastic.co/t/precision-recall-plot/251232 "2020-10-17T08:21:58Z")
Hi all, I would like to build a Precision-Recall plot (for detection data of machine learning domain ). I have the next data in my ElasticSearch index: detection result ("true positive", "true negative", "false positi… --- ## [Aggregation with OR filter](https://discuss.elastic.co/t/aggregation-with-or-filter/252390)
**Author:** [@alex-t0](https://discuss.elastic.co/u/alex-t0)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 8:14am UTC](https://discuss.elastic.co/t/aggregation-with-or-filter/252390 "2020-10-17T08:14:01Z")
I have an index of jBPM usertasks. Each usertask has id, actualOwner and actualOwner.keyword, potentialOwners and potentialOwners.keyword, and processId fields. I need this aggregation: count of usertasks per process fo… --- ## [Elasticsearch Service Keeps shutting down](https://discuss.elastic.co/t/elasticsearch-service-keeps-shutting-down/252398)
**Author:** [@Jason\_Crews](https://discuss.elastic.co/u/Jason_Crews)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-service-keeps-shutting-down/252398 "2020-10-17T07:41:05Z")
When it's running Curl gives me { "name" : "llcjg9h", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "dIg2d9-LRt-DIRP1\_P6MPg", "version" : { "number" : "6.8.12", "build\_flavor… --- ## [Can I store the json without creating a mapping](https://discuss.elastic.co/t/can-i-store-the-json-without-creating-a-mapping/251746)
**Author:** [@pkwenda](https://discuss.elastic.co/u/pkwenda)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 1:16am UTC](https://discuss.elastic.co/t/can-i-store-the-json-without-creating-a-mapping/251746 "2020-10-17T01:16:54Z")
now , I save json use nested type , but create many mapping , I'm not going to use the json data for searching, is there a way to store the json without creating a mapping? The json I'm depositing is changing, so it's c… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1743) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1745)