# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1955 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1956 --- ## [Support of dot in field name](https://discuss.elastic.co/t/support-of-dot-in-field-name/239664)
**Author:** [@Sergey\_Taranenko](https://discuss.elastic.co/u/Sergey_Taranenko)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 4:14pm UTC](https://discuss.elastic.co/t/support-of-dot-in-field-name/239664 "2020-07-02T16:14:23Z")
Does es support dot in field name? I have field with name like: "checkbox1.1" and after insert it transforms to object type field(splitted by "."). As i know dots were supported in 2.4 version(https://www.elastic.co/guid… --- ## [I upgraded elasticsearch to 7.8.0 version but I got "java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.http.netty4.Netty4HttpServerTransport" error](https://discuss.elastic.co/t/i-upgraded-elasticsearch-to-7-8-0-version-but-i-got-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-http-netty4-netty4httpservertransport-error/239621)
**Author:** [@aysnur](https://discuss.elastic.co/u/aysnur)\ **Replies:** 5\ **Last updated:** [July 2, 2020, 4:13pm UTC](https://discuss.elastic.co/t/i-upgraded-elasticsearch-to-7-8-0-version-but-i-got-java-lang-noclassdeffounderror-could-not-initialize-class-org-elasticsearch-http-netty4-netty4httpservertransport-error/239621 "2020-07-02T16:13:12Z")
I upgraded elasticsearch to 7.8.0 version my dependencies like \` \ \org.elasticsearch\ \elasticsearch\ \7.8.0\ … --- ## [Filebeat logs /tmp/filebeat.{host}.root.log.INFO.{date}](https://discuss.elastic.co/t/filebeat-logs-tmp-filebeat-host-root-log-info-date/239607)
**Author:** [@phivos](https://discuss.elastic.co/u/phivos)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 3:31pm UTC](https://discuss.elastic.co/t/filebeat-logs-tmp-filebeat-host-root-log-info-date/239607 "2020-07-02T15:31:37Z")
Same case with this closed topic Filebeat is deployed on a kubernetes cluster as daemon set, and generates thousands of files under /tmp. This caused extremely high inode usage preventing the system from being able to … --- ## [Highlighting with edge ngram token + synonym filter](https://discuss.elastic.co/t/highlighting-with-edge-ngram-token-synonym-filter/239600)
**Author:** [@b\_b\_inc](https://discuss.elastic.co/u/b_b_inc)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 9:36am UTC](https://discuss.elastic.co/t/highlighting-with-edge-ngram-token-synonym-filter/239600 "2020-07-02T09:36:16Z")
Hi, For my use case I need to use both an edge-ngram token filter and a synonym filter, and then highlight the appropriate token in the result using highlight. Considering I've to use both edge-ngram and synonym, I've … --- ## [X-ProxiedEntitiesChain - Has anyone used it in a heartbeat?](https://discuss.elastic.co/t/x-proxiedentitieschain-has-anyone-used-it-in-a-heartbeat/239159)
**Author:** [@soooooobusy](https://discuss.elastic.co/u/soooooobusy)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 3:08pm UTC](https://discuss.elastic.co/t/x-proxiedentitieschain-has-anyone-used-it-in-a-heartbeat/239159 "2020-07-02T15:08:41Z")
Hi, I'm trying to get a check.request to a RESTful endpoint, using GET and headers of Accept and X-ProxiedEntitiesChain, but I can't seem to pass across the Chain correctly to get authorisation. I'm using - Accept: 'a… --- ## [Winlogbeat Could not index event to Elasticsearch (source.ip: LOCAL)](https://discuss.elastic.co/t/winlogbeat-could-not-index-event-to-elasticsearch-source-ip-local/239658)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 2:56pm UTC](https://discuss.elastic.co/t/winlogbeat-could-not-index-event-to-elasticsearch-source-ip-local/239658 "2020-07-02T14:56:18Z")
I am seeing quite a lot of errors in Logstash for Winlogbeat events failing to index. The error indicates events are coming in with "source.ip: LOCAL" which is not a valid IP address. If for some reason the literal strin… --- ## [Help to increase number of shards on active index running close to 2B records](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560)
**Author:** [@saiguru](https://discuss.elastic.co/u/saiguru)\ **Replies:** 9\ **Last updated:** [July 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560 "2020-07-02T14:53:54Z")
I have 3 master and 2 data node with each 1TB cluster. I build a production index and it is reaching limit of 2B, how to increase # of shards to 10 on running index. ip heap.percent ram.percent cpu load\_1m load… --- ## [Keeping data aggregated in Kibana](https://discuss.elastic.co/t/keeping-data-aggregated-in-kibana/239651)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/keeping-data-aggregated-in-kibana/239651 "2020-07-02T14:48:16Z")
Hi everyone, I have logs every seconds on Kibana but keeping all of them is too heavy. I want to aggregate them to keep less values. Once the day is passed, I want to have only one value per 15 minutes, A week later, ju… --- ## [What causes "no route host" error while trying to Reindex from a remote cluster?](https://discuss.elastic.co/t/what-causes-no-route-host-error-while-trying-to-reindex-from-a-remote-cluster/239652)
**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 2:15pm UTC](https://discuss.elastic.co/t/what-causes-no-route-host-error-while-trying-to-reindex-from-a-remote-cluster/239652 "2020-07-02T14:15:11Z")
I'm trying to do a \_reindex API request from cluster A to cluster B, and I noticed some times I an error response that says: "no route host". this gets solved by restarting my cluster's es client nodes, then re-doing t… --- ## [Retry interval on failed shard allocation attempts](https://discuss.elastic.co/t/retry-interval-on-failed-shard-allocation-attempts/239646)
**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 2:14pm UTC](https://discuss.elastic.co/t/retry-interval-on-failed-shard-allocation-attempts/239646 "2020-07-02T14:14:06Z")
I couldn't find any information about it, is there (or will there be) an option to set the interval between each shard allocation retry attempt? I am asking because even though I raised the retry limit to 20 or 30 on s… --- ## [Canvas Search Text Input](https://discuss.elastic.co/t/canvas-search-text-input/239647)
**Author:** [@TimJMartin](https://discuss.elastic.co/u/TimJMartin)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 1:40pm UTC](https://discuss.elastic.co/t/canvas-search-text-input/239647 "2020-07-02T13:40:22Z")
Hi I am just starting with Elastic and have some data succesfully loaded and got a Canvas dashboard. However, it seems there is only the Dropdown Filter to query my data. I was hoping there would a text input type eleme… --- ## [GROUP BY SQL returns no data](https://discuss.elastic.co/t/group-by-sql-returns-no-data/239347)
**Author:** [@dbuzz](https://discuss.elastic.co/u/dbuzz)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 1:38pm UTC](https://discuss.elastic.co/t/group-by-sql-returns-no-data/239347 "2020-07-02T13:38:30Z")
Hey ALL, I am running simple SQL in the Kibana SQL workspace and getting no data back. Appreciate for any clues! select status, count(\*) as status\_cnt from my-index4 group by status Thanks, Dimon. --- ## [Get "Time picker defaults"](https://discuss.elastic.co/t/get-time-picker-defaults/239630)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 1:36pm UTC](https://discuss.elastic.co/t/get-time-picker-defaults/239630 "2020-07-02T13:36:25Z")
Hi team, can anybody help to receive "Time picker defaults" value from advanced settings in Kibana? What is the index or file where it\`s placed? My task is to refer to the parameter in my custom plugin. --- ## [Do we loose backpressure-sensitive protocol by inserting Kafka between Filebeat and Elasticsearch](https://discuss.elastic.co/t/do-we-loose-backpressure-sensitive-protocol-by-inserting-kafka-between-filebeat-and-elasticsearch/239644)
**Author:** [@yguubiqube](https://discuss.elastic.co/u/yguubiqube)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 1:34pm UTC](https://discuss.elastic.co/t/do-we-loose-backpressure-sensitive-protocol-by-inserting-kafka-between-filebeat-and-elasticsearch/239644 "2020-07-02T13:34:20Z")
Hi, this is a design investigation. On many docker containers, we will have Filebeat that reads logs (generated by many services). On one docker container we will have Elasticsearch that receives and indexes the logs. … --- ## [Metricbeat - PostgreSQL authentication method](https://discuss.elastic.co/t/metricbeat-postgresql-authentication-method/239641)
**Author:** [@adminunix](https://discuss.elastic.co/u/adminunix)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 1:17pm UTC](https://discuss.elastic.co/t/metricbeat-postgresql-authentication-method/239641 "2020-07-02T13:17:52Z")
Hello, I am trying to use postgresql module for metricbeat but I get the following error: error in QueryStats: failed to obtain a connection with the database: pq: Ident authentication failed for user "postgres" My Po… --- ## [Exiting: error loading config file: open filebeat.yml: permission denied](https://discuss.elastic.co/t/exiting-error-loading-config-file-open-filebeat-yml-permission-denied/239490)
**Author:** [@mschindl](https://discuss.elastic.co/u/mschindl)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 1:17pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-open-filebeat-yml-permission-denied/239490 "2020-07-02T13:17:42Z")
I try to specifiy the config file for filebeat, but all the time I get a permission denied error in the container. User root is set and strict.perms=false too. I'm using following versions: \[root@mschindl-lnx1 config-d… --- ## [Java.lang.illegalstateexception: unexpected byte \[0x02\] elasticsearch](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571)
**Author:** [@vikrammazakindia](https://discuss.elastic.co/u/vikrammazakindia)\ **Replies:** 5\ **Last updated:** [July 2, 2020, 12:57pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571 "2020-07-02T12:57:54Z")
I am facing above error in spring data elastic search . how to parse simple query string in query builder? my code is final QueryBuilder searchquery = QueryBuilders.boolQuery() .should(QueryBuilders.simpleQueryStringQ… --- ## [Date filter needed for unix timestamps?](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 12:52pm UTC](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585 "2020-07-02T12:52:30Z")
Greetings Logstashers, I wrote a grok parser for one of my logs, the log in question has a unix timestamp. Here's a line from the log: {"name":"firefox.exe","pid":"7668","start\_time":"1585318348"} Here's what my gr… --- ## [Data type - array, flattened or nested?](https://discuss.elastic.co/t/data-type-array-flattened-or-nested/239283)
**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 11:31am UTC](https://discuss.elastic.co/t/data-type-array-flattened-or-nested/239283 "2020-06-30T11:31:15Z")
We are indexing records that may have one or more full names and one or more full addresses. We want to be able to search against those without getting cross matches so a simple JSON array or delimited concatenation wil… --- ## [Upgrading elasticsearch from 6.8 to 7.7.1](https://discuss.elastic.co/t/upgrading-elasticsearch-from-6-8-to-7-7-1/239620)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 8\ **Last updated:** [July 2, 2020, 11:28am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-from-6-8-to-7-7-1/239620 "2020-07-02T11:28:42Z")
Hello, We are about to upgrade elasticserch from 6.8 to 7.7.1 is there anything special that needs to be done so that the indexes would be compatible? I know that beats has some option to migrate 6 to 7 and that is why … --- ## [How to create % comparative line graph for a set of stocks](https://discuss.elastic.co/t/how-to-create-comparative-line-graph-for-a-set-of-stocks/239623)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 11:26am UTC](https://discuss.elastic.co/t/how-to-create-comparative-line-graph-for-a-set-of-stocks/239623 "2020-07-02T11:26:27Z")
I would like to compare (say 10 stocks) on their relative performance for a given period (% increase or % decrease). I have the data (time, symbols, and daily change percent). I am doing a line chart I have used the s… --- ## [Unable to Access Elasticsearch using http://localhost:9200. Also on the last install page I dont see "open elastic search in the browser"](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538)
**Author:** [@pasta80](https://discuss.elastic.co/u/pasta80)\ **Replies:** 6\ **Last updated:** [July 2, 2020, 10:56am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538 "2020-07-02T10:56:44Z")
Hi, As you can see in my title, i am unable to access elasticsearch after finishing the install using http://localhost:9200. it says this site cant be reached and local host refued to connect. I have already installed j… --- ## [Add data to elastic search and join records](https://discuss.elastic.co/t/add-data-to-elastic-search-and-join-records/239232)
**Author:** [@kate\_c](https://discuss.elastic.co/u/kate_c)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 10:31am UTC](https://discuss.elastic.co/t/add-data-to-elastic-search-and-join-records/239232 "2020-07-02T10:31:16Z")
Hi, I have some questions I am new to elasticsearch. 1. I have a data file I would like to add it to elasticsearch how can I do it? Create a database first? The file is in csv. Do you have any guides for doing this or so… --- ## [Boost value on a boolean field](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869)
**Author:** [@djean](https://discuss.elastic.co/u/djean)\ **Replies:** 3\ **Last updated:** [July 2, 2020, 10:17am UTC](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869 "2020-07-02T10:17:05Z")
Hello, I have a field indexed as a boolean. I wonder if there is a way to boost the document when this value is true and not boost it when the value is false. I can't find a way to do it. Thanks. --- ## [Data table/report list of values per item](https://discuss.elastic.co/t/data-table-report-list-of-values-per-item/239606)
**Author:** [@VishalBhalla](https://discuss.elastic.co/u/VishalBhalla)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 10:10am UTC](https://discuss.elastic.co/t/data-table-report-list-of-values-per-item/239606 "2020-07-02T10:10:39Z")
Each document in my index has the following terms: host.hostname vulnerability.id I'm just looking to create a report or data table to view this data in the following format: host.hostname-1: vulnerability.id-1, vuln… --- ## [Use Curl command to access ElasticCloud-Kibana API secured by Azure AD](https://discuss.elastic.co/t/use-curl-command-to-access-elasticcloud-kibana-api-secured-by-azure-ad/239506)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 2:40pm UTC](https://discuss.elastic.co/t/use-curl-command-to-access-elasticcloud-kibana-api-secured-by-azure-ad/239506 "2020-07-01T14:40:22Z")
I am trying to get a token from Azure AD and use that on cURL command for using RestAPI on ElasticCloud, forexample for getting or creating an index,... Here is what I have tried: #!/bin/bash host="myApplicatio… --- ## [Grokparse failure for multiline ERROR messages but not for WARN log levels](https://discuss.elastic.co/t/grokparse-failure-for-multiline-error-messages-but-not-for-warn-log-levels/239252)
**Author:** [@ramokarahasan](https://discuss.elastic.co/u/ramokarahasan)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 9:53am UTC](https://discuss.elastic.co/t/grokparse-failure-for-multiline-error-messages-but-not-for-warn-log-levels/239252 "2020-07-02T09:53:06Z")
Hi, I'm using filebeat -\> logstash -\> elasticsearch -\> kibana and would like to have the loglevels displayed in kibana. Filebeat 7.6.2 Logstash 7.6.1 This works fine with WARN and INFO but not for ERROR log levels. M… --- ## [Csv reporting always failed win 5m records](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072)
**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\ **Replies:** 9\ **Last updated:** [July 2, 2020, 9:50am UTC](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072 "2020-07-02T09:50:22Z")
Hi, I was trying to share CSV with 5 million records which is only datatime and md5 . so size might be less even its 5 million records . I have 900 MB in limit in both xpack.reporting.csv.maxSizeBytes http.max\_conten… --- ## [QueryStringQuery for date range and integers](https://discuss.elastic.co/t/querystringquery-for-date-range-and-integers/239189)
**Author:** [@shahab78](https://discuss.elastic.co/u/shahab78)\ **Replies:** 3\ **Last updated:** [July 2, 2020, 9:37am UTC](https://discuss.elastic.co/t/querystringquery-for-date-range-and-integers/239189 "2020-07-02T09:37:23Z")
Hi, I have some Java code like this: SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder(); QueryBuilder stringQuery = QueryBuilders.queryStringQuery(query); searchSourceBuilder.query(stringQuery); I have… --- ## [Metricbeat reports incorrect (outdated?) kernel version](https://discuss.elastic.co/t/metricbeat-reports-incorrect-outdated-kernel-version/237183)
**Author:** [@archon810](https://discuss.elastic.co/u/archon810)\ **Replies:** 4\ **Last updated:** [July 2, 2020, 9:28am UTC](https://discuss.elastic.co/t/metricbeat-reports-incorrect-outdated-kernel-version/237183 "2020-07-02T09:28:44Z")
Version: 7.7.1 Operating System: OpenSUSE 15.1 I have several hosts running metricbeat. One of them is currently reporting an incorrect kernel version (5.4.10): In reality, this host is on 5.1.17: uname -a Linux hi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1954) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1956)