# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1945

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1946

---

## [Fuzziness with Keyword and Text fields](https://discuss.elastic.co/t/fuzziness-with-keyword-and-text-fields/240266)

<div class="topic-metadata">

**Author:** [@psramkumar](https://discuss.elastic.co/u/psramkumar)\
**Replies:** 1\
**Last updated:** [July 8, 2020, 9:07am UTC](https://discuss.elastic.co/t/fuzziness-with-keyword-and-text-fields/240266 "2020-07-08T09:07:52Z")

</div>

"When querying text or keyword fields, fuzziness is interpreted as a Levenshtein Edit Distance" Based on the above statement from Fuzziness Document, the query should work the same for both fields. Please correc…

---

## [Kibana doesn't start after upgrading from 6.6.0 to 6.8.10 version](https://discuss.elastic.co/t/kibana-doesnt-start-after-upgrading-from-6-6-0-to-6-8-10-version/240218)

<div class="topic-metadata">

**Author:** [@MohammedReehan](https://discuss.elastic.co/u/MohammedReehan)\
**Replies:** 3\
**Last updated:** [July 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/kibana-doesnt-start-after-upgrading-from-6-6-0-to-6-8-10-version/240218 "2020-07-08T08:39:52Z")

</div>

Hello, I would need some help here. i have recently upgrade Elastic and kibana from version 6.6.0 to 6.8.0 however elasticsearch upgrade went good. i didn't reindex any indices. however after upgrading kibana version. k…

---

## [Unable to get Kibana working under subdomain](https://discuss.elastic.co/t/unable-to-get-kibana-working-under-subdomain/240112)

<div class="topic-metadata">

**Author:** [@jacktaaniels](https://discuss.elastic.co/u/jacktaaniels)\
**Replies:** 2\
**Last updated:** [July 8, 2020, 7:50am UTC](https://discuss.elastic.co/t/unable-to-get-kibana-working-under-subdomain/240112 "2020-07-08T07:50:35Z")

</div>

Hello, I am trying to set up Kibana with Nginx using ubuntu 18.04 LTS. I am using an alias for Kibana, e.g. kibana.mydomain.com. Under the domain root, I want to have a different application running. Kibana service itse…

---

## [CloudFlare X-Forwarded-For Real Source IP](https://discuss.elastic.co/t/cloudflare-x-forwarded-for-real-source-ip/239973)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 4\
**Last updated:** [July 8, 2020, 7:50am UTC](https://discuss.elastic.co/t/cloudflare-x-forwarded-for-real-source-ip/239973 "2020-07-08T07:50:45Z")

</div>

Hi, I'm new to Elastic and need help to find the real IP of nginx site visitor. The environment I have is Nginx module installed in Filebeat and reading the data passed via logstash to elasticsearch and viewed in kiban…

---

## [Logstash-output-neo4j: Installation successful But NOT work](https://discuss.elastic.co/t/logstash-output-neo4j-installation-successful-but-not-work/240280)

<div class="topic-metadata">

**Author:** [@Aaronzk](https://discuss.elastic.co/u/Aaronzk)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 7:15am UTC](https://discuss.elastic.co/t/logstash-output-neo4j-installation-successful-but-not-work/240280 "2020-07-08T07:15:23Z")

</div>

Hello Everyone, We are solving a use case where we'd benefit from sending some connected data via logstash into neo4j, but we don't yet know how. We have tried to install: but it would not even appear in the list …

---

## [Boolean Query returns wrong results](https://discuss.elastic.co/t/boolean-query-returns-wrong-results/240177)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 12\
**Last updated:** [July 8, 2020, 7:12am UTC](https://discuss.elastic.co/t/boolean-query-returns-wrong-results/240177 "2020-07-08T07:12:08Z")

</div>

Mapping PUT index PUT /index/\_mapping { "properties": { "categories": { "type": "nested", "properties": { "id": { "type": "integer" } } }, "deleted": { "…

---

## [(429) Too Many Requests during indexing pdf](https://discuss.elastic.co/t/429-too-many-requests-during-indexing-pdf/240279)

<div class="topic-metadata">

**Author:** [@LKL](https://discuss.elastic.co/u/LKL)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 7:09am UTC](https://discuss.elastic.co/t/429-too-many-requests-during-indexing-pdf/240279 "2020-07-08T07:09:58Z")

</div>

Hello, we have around 20000 products in 25 different languages. Each language has an own index (products\_en, products\_fr, ...) when 1000 product data (code, name, description) per language is gathered, we send for ever…

---

## [Why the index not discover in kibana?](https://discuss.elastic.co/t/why-the-index-not-discover-in-kibana/240248)

<div class="topic-metadata">

**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Replies:** 2\
**Last updated:** [July 8, 2020, 6:46am UTC](https://discuss.elastic.co/t/why-the-index-not-discover-in-kibana/240248 "2020-07-08T06:46:16Z")

</div>

Hi All, i can get the index (logstash-web-20200701) inES , but why the index not discove in kibana? and then Today's index file can be viewed normally btw the index is supplemented manually, not created in real time

---

## [Max\_inner\_result\_window](https://discuss.elastic.co/t/max-inner-result-window/240273)

<div class="topic-metadata">

**Author:** [@nitin7](https://discuss.elastic.co/u/nitin7)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 6:39am UTC](https://discuss.elastic.co/t/max-inner-result-window/240273 "2020-07-08T06:39:37Z")

</div>

Is there any guideline on setting max\_inner\_result\_window. I've nested field inside of nested, which can be more than 1000 deep. The default parameter for inner window is 100. Is it OK to set it to \>1000 or there's any …

---

## [Bucket sort by a scripted metric](https://discuss.elastic.co/t/bucket-sort-by-a-scripted-metric/240261)

<div class="topic-metadata">

**Author:** [@Kun\_Liu1](https://discuss.elastic.co/u/Kun_Liu1)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 5:22am UTC](https://discuss.elastic.co/t/bucket-sort-by-a-scripted-metric/240261 "2020-07-08T05:22:39Z")

</div>

HI everyone, I'm currently on elasticsearch 7.4. We have some complicated elasticsearch queries. I have an issue when sorting top 10 terms for some nested field by scripted metric. Here is the query I'm having issue. …

---

## [Aggregation query syntax - assistance needed](https://discuss.elastic.co/t/aggregation-query-syntax-assistance-needed/240270)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 6:14am UTC](https://discuss.elastic.co/t/aggregation-query-syntax-assistance-needed/240270 "2020-07-08T06:14:09Z")

</div>

Hello I am trying to get docs that answer the query. But, also want to get 1 doc of each type. For example, retrieve all the hostnames that have diskspace\_usage \> 0.3 With the following I am getting the correct resul…

---

## [How to get query result without doc field(\_index, \_id...)](https://discuss.elastic.co/t/how-to-get-query-result-without-doc-field-index-id/240245)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [July 8, 2020, 6:03am UTC](https://discuss.elastic.co/t/how-to-get-query-result-without-doc-field-index-id/240245 "2020-07-08T06:03:05Z")

</div>

how to get query result without doc field? doc field: \_index, \_type, \_id, \_score...

---

## [Fetch data using elasticsearch\_dsl python lib](https://discuss.elastic.co/t/fetch-data-using-elasticsearch-dsl-python-lib/240257)

<div class="topic-metadata">

**Author:** [@qxlsz](https://discuss.elastic.co/u/qxlsz)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 4:32am UTC](https://discuss.elastic.co/t/fetch-data-using-elasticsearch-dsl-python-lib/240257 "2020-07-08T04:32:20Z")

</div>

Hello, I've attached the screenshot below I am trying to use elasticsearch\_dsl python library. i've indexed the columns which i need so i can query My aim is , for a given snapshot the keys which i am interested …

---

## [Connection reset by peer in 6.8.2 ES with 6.8.10 java client](https://discuss.elastic.co/t/connection-reset-by-peer-in-6-8-2-es-with-6-8-10-java-client/240262)

<div class="topic-metadata">

**Author:** [@deepak\_upadhyay](https://discuss.elastic.co/u/deepak_upadhyay)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 5:22am UTC](https://discuss.elastic.co/t/connection-reset-by-peer-in-6-8-2-es-with-6-8-10-java-client/240262 "2020-07-08T05:22:58Z")

</div>

Often we are seeing "Connection reset by Peer" after migrating to ES 6.8.2. But often there is Connection reset by Peer exception thrown by Elasticsearch rest client. Any solution or how can we debug this issue ?

---

## [New to Painless, can someone please help?](https://discuss.elastic.co/t/new-to-painless-can-someone-please-help/238384)

<div class="topic-metadata">

**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\
**Replies:** 7\
**Last updated:** [July 8, 2020, 5:37am UTC](https://discuss.elastic.co/t/new-to-painless-can-someone-please-help/238384 "2020-07-08T05:37:35Z")

</div>

I'm brand new to painless, so please forgive me if I'm asking a dumb question here. I have an index that has events with many fields in them, and need to calculate a field based on values found in others, and include th…

---

## [Please help me with how to search Elastic](https://discuss.elastic.co/t/please-help-me-with-how-to-search-elastic/239732)

<div class="topic-metadata">

**Author:** [@111349](https://discuss.elastic.co/u/111349)\
**Replies:** 9\
**Last updated:** [July 8, 2020, 4:25am UTC](https://discuss.elastic.co/t/please-help-me-with-how-to-search-elastic/239732 "2020-07-08T04:25:24Z")

</div>

I am requesting a search on Elastic through the Java Elastic API. Among them, I use queryStringQueryBuilder. Let's say the field name I have in elastic is fruit. Each field has a value of a-apple, b-apple, and c-apple…

---

## [No data from filebeat cisco module](https://discuss.elastic.co/t/no-data-from-filebeat-cisco-module/239402)

<div class="topic-metadata">

**Author:** [@bqy314495](https://discuss.elastic.co/u/bqy314495)\
**Replies:** 8\
**Last updated:** [July 8, 2020, 4:17am UTC](https://discuss.elastic.co/t/no-data-from-filebeat-cisco-module/239402 "2020-07-08T04:17:09Z")

</div>

hi, guys i'm new to this platform and want to do some cisco device monitoring , in my lab i've setted netflow and syslog on asa firewall , and now i can see data from netflow and make dashboards on kibana. which now p…

---

## [Pie chart top hit metrics doesn't allow sort by timestamp](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937)

<div class="topic-metadata">

**Author:** [@Kayla\_Vo](https://discuss.elastic.co/u/Kayla_Vo)\
**Replies:** 7\
**Last updated:** [July 8, 2020, 3:05am UTC](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937 "2020-07-08T03:05:15Z")

</div>

I am using Amazon Elasticsearch 7.4 to create a pie chart for the last value of each category. The logs look like this: { "@timestamp": 1593750007582, "type": "roommode", "name": "Off", …

---

## [Can't get geoip working](https://discuss.elastic.co/t/cant-get-geoip-working/238574)

<div class="topic-metadata">

**Author:** [@danona45](https://discuss.elastic.co/u/danona45)\
**Replies:** 9\
**Last updated:** [July 8, 2020, 2:28am UTC](https://discuss.elastic.co/t/cant-get-geoip-working/238574 "2020-07-08T02:28:00Z")

</div>

I know there are gazillion other posts but I have tried pretty much anything at this point. Background: I am using AWS Opendistro and send events using Logstash both versions 7.4.0 Indexing template: { "pano…

---

## [More data return when do one query](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148)

<div class="topic-metadata">

**Author:** [@bo\_bo](https://discuss.elastic.co/u/bo_bo)\
**Replies:** 4\
**Last updated:** [July 8, 2020, 2:12am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148 "2020-07-08T02:12:28Z")

</div>

i want do some queries in elasticsearch when i do this by kibana, it returns like this: but when i do queries in console with these sentences: GET /doujiangv4-2020-07-05/\_search/ { "query":{ "bool" : { …

---

## [Sort aggregation buckets based on Keyword field/Scripted Non Metric Field](https://discuss.elastic.co/t/sort-aggregation-buckets-based-on-keyword-field-scripted-non-metric-field/240246)

<div class="topic-metadata">

**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\
**Replies:** 0\
**Last updated:** [July 8, 2020, 2:04am UTC](https://discuss.elastic.co/t/sort-aggregation-buckets-based-on-keyword-field-scripted-non-metric-field/240246 "2020-07-08T02:04:26Z")

</div>

Hi I have docs with string and numeric fields. And I do aggs in the following manner: { "from": 0, "size": 0, "timeout": "60s", "query": { "bool": { "must": \[ { "terms": { …

---

## [Kibana7.1 - Getting "unable to find usable node.js executable" after running ./kibana --oss](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077)

<div class="topic-metadata">

**Author:** [@ucw](https://discuss.elastic.co/u/ucw)\
**Replies:** 3\
**Last updated:** [July 8, 2020, 1:53am UTC](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077 "2020-07-08T01:53:34Z")

</div>

Hi all, I'm getting message "unable to find usable node.js executable" after running ./kibana --oss and couldn't get Kibana up and running. Kibana server OS - Ubuntu 18.04.1 LTS Installation steps: git clone https:/…

---

## [Can search queries be performed when updating a mapping](https://discuss.elastic.co/t/can-search-queries-be-performed-when-updating-a-mapping/239831)

<div class="topic-metadata">

**Author:** [@Alexander\_Koval](https://discuss.elastic.co/u/Alexander_Koval)\
**Replies:** 5\
**Last updated:** [July 8, 2020, 1:04am UTC](https://discuss.elastic.co/t/can-search-queries-be-performed-when-updating-a-mapping/239831 "2020-07-08T01:04:24Z")

</div>

I write a plugin for Elasticsearch and I need to know, can search queries and mapping updates run concurrently?

---

## [Aggregation on terms and find min value of script results](https://discuss.elastic.co/t/aggregation-on-terms-and-find-min-value-of-script-results/240214)

<div class="topic-metadata">

**Author:** [@Akihito\_Kanbara](https://discuss.elastic.co/u/Akihito_Kanbara)\
**Replies:** 3\
**Last updated:** [July 8, 2020, 12:54am UTC](https://discuss.elastic.co/t/aggregation-on-terms-and-find-min-value-of-script-results/240214 "2020-07-08T00:54:45Z")

</div>

Hi, I have a use case need to first groupBy "user" and do some calculation and find the min value of the results. What I am doing is: GET test/\_search { "size": 0, "aggs": { "throughput": { "terms": { …

---

## [Elastic Search Pagination](https://discuss.elastic.co/t/elastic-search-pagination/240141)

<div class="topic-metadata">

**Author:** [@ankitkothana](https://discuss.elastic.co/u/ankitkothana)\
**Replies:** 1\
**Last updated:** [July 8, 2020, 12:36am UTC](https://discuss.elastic.co/t/elastic-search-pagination/240141 "2020-07-08T00:36:11Z")

</div>

I am using elastic search with composite aggregation for pagination. Response does provide me an after\_key attribute for getting to next page. Is there any way/attribute for getting to previous page from current page? I…

---

## [Shipping logs to s3 after end of index lifecycle](https://discuss.elastic.co/t/shipping-logs-to-s3-after-end-of-index-lifecycle/240238)

<div class="topic-metadata">

**Author:** [@ramiriskis](https://discuss.elastic.co/u/ramiriskis)\
**Replies:** 4\
**Last updated:** [July 8, 2020, 12:18am UTC](https://discuss.elastic.co/t/shipping-logs-to-s3-after-end-of-index-lifecycle/240238 "2020-07-08T00:18:25Z")

</div>

Hi! My team has a managed elastic instance and we are currently shipping our logs to it. The created indices go through the log life cycle process (hot, warm, cold) as specified in the docs. My issue is that instead of …

---

## [Metricbeat http http.json: invalid character '\<' looking for beginning of value error](https://discuss.elastic.co/t/metricbeat-http-http-json-invalid-character-looking-for-beginning-of-value-error/240147)

<div class="topic-metadata">

**Author:** [@Faten](https://discuss.elastic.co/u/Faten)\
**Replies:** 2\
**Last updated:** [July 7, 2020, 11:52pm UTC](https://discuss.elastic.co/t/metricbeat-http-http-json-invalid-character-looking-for-beginning-of-value-error/240147 "2020-07-07T23:52:35Z")

</div>

Hi, I configured in metricbeat the http module as below example, but I am getting the following error : http.json: invalid character '\<' looking for beginning of value. # Module: http # Docs: https://www.elastic.co/gui…

---

## [Metricbeat for docker - filesystem metrics](https://discuss.elastic.co/t/metricbeat-for-docker-filesystem-metrics/240236)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 0\
**Last updated:** [July 7, 2020, 11:45pm UTC](https://discuss.elastic.co/t/metricbeat-for-docker-filesystem-metrics/240236 "2020-07-07T23:45:53Z")

</div>

Hello, I am interested in monitoring the filesystem capacity inside a docker container (df -h results). The container(s) runs postgresSQL cluster. Especially, want metrics for size, used, available, percentage. Is th…

---

## [Elasticsearch/Kibana 7.8.0-1 in Docker Container - Index Pattern issue in Kibana as nothing showing up when going into Discover](https://discuss.elastic.co/t/elasticsearch-kibana-7-8-0-1-in-docker-container-index-pattern-issue-in-kibana-as-nothing-showing-up-when-going-into-discover/240088)

<div class="topic-metadata">

**Author:** [@soneill](https://discuss.elastic.co/u/soneill)\
**Replies:** 5\
**Last updated:** [July 7, 2020, 11:25pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-7-8-0-1-in-docker-container-index-pattern-issue-in-kibana-as-nothing-showing-up-when-going-into-discover/240088 "2020-07-07T23:25:21Z")

</div>

I have Elasticsearch and Kibana running in a docker container. I've recently setup up a data stream from my 1900ACS router of ulog data pushing connections information from that router into Elasticsearch. From what I'm…

---

## [Logstash with kafka plugin not get messages in a new topic](https://discuss.elastic.co/t/logstash-with-kafka-plugin-not-get-messages-in-a-new-topic/238655)

<div class="topic-metadata">

**Author:** [@Altamir\_Dias](https://discuss.elastic.co/u/Altamir_Dias)\
**Replies:** 1\
**Last updated:** [July 7, 2020, 11:23pm UTC](https://discuss.elastic.co/t/logstash-with-kafka-plugin-not-get-messages-in-a-new-topic/238655 "2020-07-07T23:23:49Z")

</div>

Hello guys, I need a help in specific case. My environment have a DLL application who create messages and topics in Kafka, than logstash get messages of the all topics. But problem is new topic only collect when a next…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1944)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1946)
