# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1838

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1839

---

## [Cant inport Data](https://discuss.elastic.co/t/cant-inport-data/246772)

<div class="topic-metadata">

**Author:** [@dustmarijn](https://discuss.elastic.co/u/dustmarijn)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 1:33pm UTC](https://discuss.elastic.co/t/cant-inport-data/246772 "2020-08-28T13:33:44Z")

</div>

Hello i'm getting stuck in the inport of my own dummy data, can someone help me?

---

## [ML Population Analysis](https://discuss.elastic.co/t/ml-population-analysis/246697)

<div class="topic-metadata">

**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\
**Replies:** 1\
**Last updated:** [August 28, 2020, 1:27pm UTC](https://discuss.elastic.co/t/ml-population-analysis/246697 "2020-08-28T13:27:00Z")

</div>

Hi all, I have a population model created as per recipes with configuration as follow: "high\_info\_content(destination.subdomain) over destination.domain" I'm trying to understand how the model is working for this spec…

---

## [Search for documents which does not contains nested items with some condition](https://discuss.elastic.co/t/search-for-documents-which-does-not-contains-nested-items-with-some-condition/246634)

<div class="topic-metadata">

**Author:** [@Filozofer](https://discuss.elastic.co/u/Filozofer)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 1:11pm UTC](https://discuss.elastic.co/t/search-for-documents-which-does-not-contains-nested-items-with-some-condition/246634 "2020-08-28T13:11:42Z")

</div>

Hello there ! :slight\_smile: I cannot found a way to retrieve documents which do not have a nested item corresponding to some condition. Let me explain this : I've got an index which contain employees. All employees go…

---

## [Unallocated shards when restoring index from snapshot](https://discuss.elastic.co/t/unallocated-shards-when-restoring-index-from-snapshot/245892)

<div class="topic-metadata">

**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/unallocated-shards-when-restoring-index-from-snapshot/245892 "2020-08-28T13:02:02Z")

</div>

I'm trying to create an index by restoring a custom S3 repo snapshot. (on an elastic cloud deployment) but it doesn't work, The restored index is created but on an unassigned shard. How to either prevent or fix this ?

---

## ["remote certificate is invalid" when attempting to connect through custom Azure function](https://discuss.elastic.co/t/remote-certificate-is-invalid-when-attempting-to-connect-through-custom-azure-function/246762)

<div class="topic-metadata">

**Author:** [@Dennis\_Whalen](https://discuss.elastic.co/u/Dennis_Whalen)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 12:51pm UTC](https://discuss.elastic.co/t/remote-certificate-is-invalid-when-attempting-to-connect-through-custom-azure-function/246762 "2020-08-28T12:51:34Z")

</div>

We are running into an issue and thought I might get some help here. We have deployed Elastic into Azure using the marketplace template and are able to establish encrypted connection between Kibana and the cluster with …

---

## [Fail to enroll: fail to execute request to Kibana](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana/245945)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 7\
**Last updated:** [August 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana/245945 "2020-08-28T12:40:34Z")

</div>

Hello there, I´m trying to setting up my elastic-agent but no success. Can you guy´s please help me? PS C:\\Program Files\\Elastic-Agent\> .\\elastic-agent.exe enroll https://0.0.0.0:5601 xxXxxxxXXxXXXXXXXxxxx The Elastic A…

---

## [Auto-Authentication to Kibana](https://discuss.elastic.co/t/auto-authentication-to-kibana/242837)

<div class="topic-metadata">

**Author:** [@Edmond\_Legaspi](https://discuss.elastic.co/u/Edmond_Legaspi)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 11:02am UTC](https://discuss.elastic.co/t/auto-authentication-to-kibana/242837 "2020-08-28T11:02:17Z")

</div>

Hi, My requirement is: after users login to our website, they do not need to key in account/password again in order to access kibana. Please note that reverse proxy approach will probably not solve my problem. There ar…

---

## [Search multiple indexes and nested](https://discuss.elastic.co/t/search-multiple-indexes-and-nested/246735)

<div class="topic-metadata">

**Author:** [@chomenko](https://discuss.elastic.co/u/chomenko)\
**Replies:** 1\
**Last updated:** [August 28, 2020, 10:36am UTC](https://discuss.elastic.co/t/search-multiple-indexes-and-nested/246735 "2020-08-28T10:36:21Z")

</div>

Is possible to nested query add name index when searching across multiple indexes ? I have this question: query: { bool: { should: \[ { filter: { term: { \_index: "index1" } }, bool: { …

---

## [Routing bug: no routing document get doc id not found, while set specific routing param found the docs](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 7\
**Last updated:** [August 28, 2020, 10:35am UTC](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714 "2020-08-28T10:35:21Z")

</div>

version : 7.6.2 we search the docs: curl xxx.xxx.xxx.xx:9200/index-1/\_search?pretty -H'Content-type: application/json' -d' { "query": { "terms": { "field-1": \["xxxxxxx"\] } } } ' the response body l…

---

## [Need connection pooling sample for node js package (@elatic/elasticsearch)](https://discuss.elastic.co/t/need-connection-pooling-sample-for-node-js-package-elatic-elasticsearch/246739)

<div class="topic-metadata">

**Author:** [@Soumarshi](https://discuss.elastic.co/u/Soumarshi)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 10:32am UTC](https://discuss.elastic.co/t/need-connection-pooling-sample-for-node-js-package-elatic-elasticsearch/246739 "2020-08-28T10:32:08Z")

</div>

Is it possible to initiate a connection and add it to a connection pool on startup on node js server? Once it's there, can we re-use the connection for all the API calls. If yes, can anyone please share a sample implemen…

---

## [Forbid primary shard on some node](https://discuss.elastic.co/t/forbid-primary-shard-on-some-node/245078)

<div class="topic-metadata">

**Author:** [@Mathmarc](https://discuss.elastic.co/u/Mathmarc)\
**Replies:** 3\
**Last updated:** [August 28, 2020, 10:31am UTC](https://discuss.elastic.co/t/forbid-primary-shard-on-some-node/245078 "2020-08-28T10:31:50Z")

</div>

Hi there, We are deploying a elasticsearch cluster, on kubernetes (using the official helm chart). However, we have an unresolved issue. Our usage of elasticsearch has huge variations in usage. During night, we can hav…

---

## [Latency time increase when switched Elastic Search from Heroku env addon to elastic cloud env](https://discuss.elastic.co/t/latency-time-increase-when-switched-elastic-search-from-heroku-env-addon-to-elastic-cloud-env/245550)

<div class="topic-metadata">

**Author:** [@Soumarshi](https://discuss.elastic.co/u/Soumarshi)\
**Replies:** 4\
**Last updated:** [August 28, 2020, 10:25am UTC](https://discuss.elastic.co/t/latency-time-increase-when-switched-elastic-search-from-heroku-env-addon-to-elastic-cloud-env/245550 "2020-08-28T10:25:30Z")

</div>

Our search API is hosted on the AWS environment. Previously we had an add-on on Heroku env for elastic search (v6.7.2) DB. The latency time for the query execution from the search API was less than 500 ms. When we moved …

---

## [Kibana query to find the latest snapshot](https://discuss.elastic.co/t/kibana-query-to-find-the-latest-snapshot/246738)

<div class="topic-metadata">

**Author:** [@sash16](https://discuss.elastic.co/u/sash16)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 10:23am UTC](https://discuss.elastic.co/t/kibana-query-to-find-the-latest-snapshot/246738 "2020-08-28T10:23:43Z")

</div>

what would be the kibana query to find the latest snapshot based on start\_epoch. I only need name of the snapshot. other columns can be removed from the output

---

## [Unable to setup PKI Authentication](https://discuss.elastic.co/t/unable-to-setup-pki-authentication/246672)

<div class="topic-metadata">

**Author:** [@filiph](https://discuss.elastic.co/u/filiph)\
**Replies:** 5\
**Last updated:** [August 28, 2020, 10:12am UTC](https://discuss.elastic.co/t/unable-to-setup-pki-authentication/246672 "2020-08-28T10:12:10Z")

</div>

Hi, I'm trying to setup PKI authentication on my on-premises cluster. However, I can't make it work no matter what I try to do. Setup: elasticsearch-7.5.2, Linux testing this out with 3 nodes, all on my host all nodes…

---

## [Jdbc input plugin doesn't work with prepared statements enabled and large amount of data is proceeding](https://discuss.elastic.co/t/jdbc-input-plugin-doesnt-work-with-prepared-statements-enabled-and-large-amount-of-data-is-proceeding/245981)

<div class="topic-metadata">

**Author:** [@e1m7bo](https://discuss.elastic.co/u/e1m7bo)\
**Replies:** 8\
**Last updated:** [August 28, 2020, 9:29am UTC](https://discuss.elastic.co/t/jdbc-input-plugin-doesnt-work-with-prepared-statements-enabled-and-large-amount-of-data-is-proceeding/245981 "2020-08-28T09:29:09Z")

</div>

Before I'll create an issue on Github I'd like to be sure that I'm dealing here with a bug and not with some configuration problem. I've a task to import data from Oracle database to Elasticsearch. Of course I'm using J…

---

## [Filter on multiple terms with OR](https://discuss.elastic.co/t/filter-on-multiple-terms-with-or/246731)

<div class="topic-metadata">

**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 9:22am UTC](https://discuss.elastic.co/t/filter-on-multiple-terms-with-or/246731 "2020-08-28T09:22:44Z")

</div>

Is there any way in elastic search to filter on multiple terms. One of the field in our elastic document is language\_code. I want to set the filter in boolqueryfilter something like below boolQueryBuilder.filter(langua…

---

## [Deux versions elasticsearch sur la même machine](https://discuss.elastic.co/t/deux-versions-elasticsearch-sur-la-meme-machine/246638)

<div class="topic-metadata">

**Author:** [@EAmel](https://discuss.elastic.co/u/EAmel)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 9:10am UTC](https://discuss.elastic.co/t/deux-versions-elasticsearch-sur-la-meme-machine/246638 "2020-08-28T09:10:15Z")

</div>

Bonjour, Est-il possible d'installer deux versions ES (5.6.x et 6.8.x)sur la même machine ? Si oui comment? sachant que la version 6.8 est déjà installé via le package debian. Je vous remercie de votre aide.

---

## [No such file to load -- elasticsearch/version](https://discuss.elastic.co/t/no-such-file-to-load-elasticsearch-version/246724)

<div class="topic-metadata">

**Author:** [@Ismael\_Garcia](https://discuss.elastic.co/u/Ismael_Garcia)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 7:37am UTC](https://discuss.elastic.co/t/no-such-file-to-load-elasticsearch-version/246724 "2020-08-28T07:37:37Z")

</div>

Hi, I got this error message when I load a logstash file: \[ERROR\] 2020-08-28 07:29:27.372 \[main\] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (LoadError) no such file to…

---

## [TSVB Data Table Sorting Return Different Columns Value](https://discuss.elastic.co/t/tsvb-data-table-sorting-return-different-columns-value/246699)

<div class="topic-metadata">

**Author:** [@kllee.au](https://discuss.elastic.co/u/kllee.au)\
**Replies:** 1\
**Last updated:** [August 28, 2020, 7:19am UTC](https://discuss.elastic.co/t/tsvb-data-table-sorting-return-different-columns-value/246699 "2020-08-28T07:19:33Z")

</div>

Hi, I'm using Kibana 7.8.1 with TVSB Data Table, but when i click on the sort on some of the columns, the values on the several columns were different that its original value. Following are an example contains only 4 o…

---

## [After Upgrade to 7.9, all documents getting deleted daily in specific Index](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395)

<div class="topic-metadata">

**Author:** [@NashSLX](https://discuss.elastic.co/u/NashSLX)\
**Replies:** 6\
**Last updated:** [August 28, 2020, 6:41am UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395 "2020-08-28T06:41:22Z")

</div>

Hi everyone! I upgraded our servers to elastic 7.9 recently, but have been unable to index our full dataset ever since then. In fact, every morning at exactly 4AM, all data gets deleted from that, and only that, index. …

---

## [Pushing logs to ElasticSearch in another AWS account: Timeout errors](https://discuss.elastic.co/t/pushing-logs-to-elasticsearch-in-another-aws-account-timeout-errors/246718)

<div class="topic-metadata">

**Author:** [@ltrod](https://discuss.elastic.co/u/ltrod)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 6:14am UTC](https://discuss.elastic.co/t/pushing-logs-to-elasticsearch-in-another-aws-account-timeout-errors/246718 "2020-08-28T06:14:07Z")

</div>

I'm running Filebeat on Kubernetes in a EKS Cluster in AWS and send the logs to ElasticSearch in another AWS account. The logs reach the ElasticSearch and I can see the logs in Kibana. But I get these errors sometimes: E…

---

## [Session Counter over time Visualisation](https://discuss.elastic.co/t/session-counter-over-time-visualisation/246299)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 4\
**Last updated:** [August 28, 2020, 5:05am UTC](https://discuss.elastic.co/t/session-counter-over-time-visualisation/246299 "2020-08-28T05:05:15Z")

</div>

Hi, I have the following Data: Timestamp, SessionState (Opened), SessionID Timestamp, SessionState (Closed), SessionID And I need to visualize the amount of open sessions at "timeframe". Is this somehow possible with…

---

## [Kibana - HTTP 500 error - circuit\_breaking\_exception](https://discuss.elastic.co/t/kibana-http-500-error-circuit-breaking-exception/246708)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [August 28, 2020, 5:00am UTC](https://discuss.elastic.co/t/kibana-http-500-error-circuit-breaking-exception/246708 "2020-08-28T05:00:23Z")

</div>

Hello, I hope you and your loved ones are safe and healthy. I have Kibana and Elasticsearch installed on the same VM. I am getting following error post successful login to Kibana instance using root privileged account. …

---

## [Everything looks fine but still the data is not imported and not displayed on the console](https://discuss.elastic.co/t/everything-looks-fine-but-still-the-data-is-not-imported-and-not-displayed-on-the-console/246266)

<div class="topic-metadata">

**Author:** [@Chandana\_Koppal](https://discuss.elastic.co/u/Chandana_Koppal)\
**Replies:** 3\
**Last updated:** [August 28, 2020, 4:58am UTC](https://discuss.elastic.co/t/everything-looks-fine-but-still-the-data-is-not-imported-and-not-displayed-on-the-console/246266 "2020-08-28T04:58:48Z")

</div>

C:\\CSV Files\>logstash -f summaryerrorbyfrequency.conf Java HotSpot(TM) 64-Bit Server VM warning: Ignoring option UseConcMarkSweepGC; support was removed in 14.0 Java HotSpot(TM) 64-Bit Server VM warning: Ignoring optio…

---

## [Elasticsearch and Guice](https://discuss.elastic.co/t/elasticsearch-and-guice/246712)

<div class="topic-metadata">

**Author:** [@bhargavkn](https://discuss.elastic.co/u/bhargavkn)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-and-guice/246712 "2020-08-28T04:21:53Z")

</div>

Hi, I was recently going through elasticsearch's codebase and saw that a using a fork of Guice is being used for dependency injection. With a little more search on the internet (here, and here), it seems that there are …

---

## [Elasticsearch cluster replace ca file](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703)

<div class="topic-metadata">

**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\
**Replies:** 0\
**Last updated:** [August 28, 2020, 2:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703 "2020-08-28T02:45:55Z")

</div>

How to replace CA files in cluster without downtime I referred to this article Encrypting communications in an Elasticsearch Docker Containeredit when building a cluster Now that I have a new node that wants to join th…

---

## [Capture Errors On Input](https://discuss.elastic.co/t/capture-errors-on-input/246193)

<div class="topic-metadata">

**Author:** [@csgeek](https://discuss.elastic.co/u/csgeek)\
**Replies:** 2\
**Last updated:** [August 28, 2020, 1:16am UTC](https://discuss.elastic.co/t/capture-errors-on-input/246193 "2020-08-28T01:16:41Z")

</div>

I'd like to add a pattern where errors that occur on the input are captured. I am using the snmp input plugin. If the host is unreachable or anything else happens, I'd like to log the error/exception and send it to a d…

---

## [How to get rid of the logs of one specific output? (ouput exec)](https://discuss.elastic.co/t/how-to-get-rid-of-the-logs-of-one-specific-output-ouput-exec/246693)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [August 27, 2020, 10:20pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-the-logs-of-one-specific-output-ouput-exec/246693 "2020-08-27T22:20:24Z")

</div>

Hi, Im using logstahs output exec and every time it runs, the output exec create a log like this: \[2020-08-27T16:56:40,756\]\[INFO \]\[logstash.outputs.exec \]\[my-pipeline\]\[53bf2b...\] the problem is that are hundreds of …

---

## [Index get bigger when indexing or updating](https://discuss.elastic.co/t/index-get-bigger-when-indexing-or-updating/244767)

<div class="topic-metadata">

**Author:** [@mateusd24](https://discuss.elastic.co/u/mateusd24)\
**Replies:** 19\
**Last updated:** [August 27, 2020, 9:49pm UTC](https://discuss.elastic.co/t/index-get-bigger-when-indexing-or-updating/244767 "2020-08-27T21:49:29Z")

</div>

Hi people! When i make index/update for many document the elasticsearch index get so much bigger and took 30minutes to get small if no operations is made. some \_settings that i use: "number\_of\_replicas" : 0 "requests…

---

## [Does the jdbc\_static loader run once upon logstash start or restart no matter the scheduler?](https://discuss.elastic.co/t/does-the-jdbc-static-loader-run-once-upon-logstash-start-or-restart-no-matter-the-scheduler/246681)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [August 27, 2020, 8:34pm UTC](https://discuss.elastic.co/t/does-the-jdbc-static-loader-run-once-upon-logstash-start-or-restart-no-matter-the-scheduler/246681 "2020-08-27T20:34:59Z")

</div>

When you start up or restart logstash with a jdbc\_static filter, does the loader automatically run once and then pick up the scheduler? In other words if I have the scheduler set to run once a day at midnight, and I sta…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1837)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1839)
