# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1985 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1986 --- ## [TLS Between Elastic & Kibana...Certs Not Working](https://discuss.elastic.co/t/tls-between-elastic-kibana-certs-not-working/236996)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 6\ **Last updated:** [June 21, 2020, 7:45am UTC](https://discuss.elastic.co/t/tls-between-elastic-kibana-certs-not-working/236996 "2020-06-21T07:45:52Z")
We have established TLS on our cluster (v7.7.1) by generating self-signed certificates as described in this document. Entire cluster seems to be working fine. However, to establish TLS between Kibana (residing on a sepa… --- ## [Result window is too large Error](https://discuss.elastic.co/t/result-window-is-too-large-error/237941)
**Author:** [@skv325](https://discuss.elastic.co/u/skv325)\ **Replies:** 2\ **Last updated:** [June 21, 2020, 6:18am UTC](https://discuss.elastic.co/t/result-window-is-too-large-error/237941 "2020-06-21T06:18:22Z")
Hello, I am getting an error message when doing paged search from kendo data grid on elasticsearch: "Result window is too large, from + size must be less than or equal to: \[10000\] but was \[44800\]..." The index has app… --- ## [Compare 2 fields in Search - Kibana](https://discuss.elastic.co/t/compare-2-fields-in-search-kibana/237362)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 7\ **Last updated:** [June 21, 2020, 4:52am UTC](https://discuss.elastic.co/t/compare-2-fields-in-search-kibana/237362 "2020-06-21T04:52:35Z")
Hi Team, We were asked a question by business whether we can produce a search result comparing 2 fields. For Ex: submitted\_amt \> paid\_amt Usually In Kibana we can do submitted\_amt \>= or \<= 1000 on a value. The req… --- ## [ElasticSearch with mongo](https://discuss.elastic.co/t/elasticsearch-with-mongo/237838)
**Author:** [@Rodrigo\_Ceballos](https://discuss.elastic.co/u/Rodrigo_Ceballos)\ **Replies:** 2\ **Last updated:** [June 21, 2020, 2:15am UTC](https://discuss.elastic.co/t/elasticsearch-with-mongo/237838 "2020-06-21T02:15:07Z")
Hi. I hope you can help me or that someone has the experience already passed. It happens that I want to start working my mongo data in elastic, so I'm doing a process that synchronizes mongo with elastic, For that I am… --- ## [Import CSV data to Elastic App Search "block in start\_input" Error](https://discuss.elastic.co/t/import-csv-data-to-elastic-app-search-block-in-start-input-error/237937)
**Author:** [@th3Hopper](https://discuss.elastic.co/u/th3Hopper)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 8:40pm UTC](https://discuss.elastic.co/t/import-csv-data-to-elastic-app-search-block-in-start-input-error/237937 "2020-06-20T20:40:42Z")
I'm trying to import CSV data to my Elastic App search but it throwing an error. Error Message:- \[2020-06-21T01:40:17,552\]\[INFO \]\[filewatch.observingtail \]\[main\]\[07a10415268d8655d99cdad82a61cbca125e21687e65bc0296c88f9… --- ## [When synonym overlapped with another synonym](https://discuss.elastic.co/t/when-synonym-overlapped-with-another-synonym/237902)
**Author:** [@RUIS](https://discuss.elastic.co/u/RUIS)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 8:08pm UTC](https://discuss.elastic.co/t/when-synonym-overlapped-with-another-synonym/237902 "2020-06-20T20:08:42Z")
Hi, I'm currently trying to setting up the synonyms and I noticed if a word overlapped with another word in the synonym dic, the token I got will only include one of them. For example, If I have an analyzer using the fo… --- ## [Kibana ~ min\_doc\_count : 0 issue with calculating percentage](https://discuss.elastic.co/t/kibana-min-doc-count-0-issue-with-calculating-percentage/237933)
**Author:** [@vdalvi](https://discuss.elastic.co/u/vdalvi)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 6:54pm UTC](https://discuss.elastic.co/t/kibana-min-doc-count-0-issue-with-calculating-percentage/237933 "2020-06-20T18:54:53Z")
Hi, I have a kibana query that calculates percentage change over a period of 15 minutes. The query works just fine except when the doc\_count : 0. When I get a doc\_count : 0 for that interval it does not calculate perce… --- ## [Time on the graph of discover page not refreshing](https://discuss.elastic.co/t/time-on-the-graph-of-discover-page-not-refreshing/237573)
**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\ **Replies:** 3\ **Last updated:** [June 20, 2020, 6:25pm UTC](https://discuss.elastic.co/t/time-on-the-graph-of-discover-page-not-refreshing/237573 "2020-06-20T18:25:11Z")
Hi, I recently upgraded my elasticsearch cluster on kubernetes to 7.7.1. I noticed that the time on the discover graph no longer gets updated with auto refresh. The page has to be refreshed or the time period has to be … --- ## [Logstash aggregate/mutate](https://discuss.elastic.co/t/logstash-aggregate-mutate/237876)
**Author:** [@pixelinc](https://discuss.elastic.co/u/pixelinc)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-aggregate-mutate/237876 "2020-06-20T15:51:31Z")
Hey all, I'm attempting to combine take 2 logs and add a field from a previous log to the other log. I've read around about aggregate and mutate, and all that but I'm not quite understanding how to do this. I have 2 lo… --- ## [Add namespace labels to kubernetes metadata](https://discuss.elastic.co/t/add-namespace-labels-to-kubernetes-metadata/237922)
**Author:** [@abhishek\_acharya](https://discuss.elastic.co/u/abhishek_acharya)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 3:44pm UTC](https://discuss.elastic.co/t/add-namespace-labels-to-kubernetes-metadata/237922 "2020-06-20T15:44:07Z")
Hi there I have assigned labels to my kubernetes namespace and I want these labels in my kibana. I am getting only my namespace field in kibana as kubernetes.namespace: "my-namespace". What changes i have to do in my … --- ## [Alerting don't creating indexes and don't send log's messages](https://discuss.elastic.co/t/alerting-dont-creating-indexes-and-dont-send-logs-messages/237919)
**Author:** [@111356](https://discuss.elastic.co/u/111356)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/alerting-dont-creating-indexes-and-dont-send-logs-messages/237919 "2020-06-20T15:03:40Z")
Greetings! I am using ELK stack with APM for some time, but without alerting. And yesterday, I decided to add them. I have docker-compose installation at this time. I had tls between kibana and elastic enabled already. B… --- ## [Any way to maintain a long list of hearbeat.monitors.urls?](https://discuss.elastic.co/t/any-way-to-maintain-a-long-list-of-hearbeat-monitors-urls/236906)
**Author:** [@zongzw](https://discuss.elastic.co/u/zongzw)\ **Replies:** 6\ **Last updated:** [June 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/any-way-to-maintain-a-long-list-of-hearbeat-monitors-urls/236906 "2020-06-20T14:32:38Z")
Hi, My list in heartbeat.monitors.urls is long, is there any way to maintain it in a separate file. I mean I want to it to be: heartbeat.yml: # Configure monitors inline heartbeat.monitors: - type: http # List or … --- ## [Module test, how do i create the test.log-expected.json file?](https://discuss.elastic.co/t/module-test-how-do-i-create-the-test-log-expected-json-file/237914)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 12:52pm UTC](https://discuss.elastic.co/t/module-test-how-do-i-create-the-test-log-expected-json-file/237914 "2020-06-20T12:52:39Z")
Hi there, how do i create the "test.log-expected.json" with elastic / kibana, search ? Search command needed, so that i get the same format / content as in the sample file. thanks for any help here. StefanS --- ## [Error while sorting in bucket aggregation](https://discuss.elastic.co/t/error-while-sorting-in-bucket-aggregation/237912)
**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 11:37am UTC](https://discuss.elastic.co/t/error-while-sorting-in-bucket-aggregation/237912 "2020-06-20T11:37:28Z")
{ "error": { "root\_cause": \[ { "type": "aggregation\_execution\_exception", "reason": "Invalid aggregator order path \[data.hardware.ram\_usa… --- ## [Disable Source File Compression(Fdt File)](https://discuss.elastic.co/t/disable-source-file-compression-fdt-file/237905)
**Author:** [@Senkyy1](https://discuss.elastic.co/u/Senkyy1)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 10:06am UTC](https://discuss.elastic.co/t/disable-source-file-compression-fdt-file/237905 "2020-06-20T10:06:09Z")
Is There Any Way to Disable Compression In Elasticsearch. by make some changes in compressingstoredfieldreader/writer file or anywhere..i m try this from last 48 hours. but not get it..please help regarding this. --- ## [Getting GeoIP field for NGINX Logs](https://discuss.elastic.co/t/getting-geoip-field-for-nginx-logs/237903)
**Author:** [@jaysbeekay](https://discuss.elastic.co/u/jaysbeekay)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 9:45am UTC](https://discuss.elastic.co/t/getting-geoip-field-for-nginx-logs/237903 "2020-06-20T09:45:22Z")
Hi, I am having trouble trying to get the location from NGINX logs to be shown as a GeoIP (instead of a float) within Kibana to visualise on a dashboard I am currently filebeats to ship logs from my NGINX server to Log… --- ## [Is the concept of payload in ES same as in Lucene](https://discuss.elastic.co/t/is-the-concept-of-payload-in-es-same-as-in-lucene/237906)
**Author:** [@Ziilozes](https://discuss.elastic.co/u/Ziilozes)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 8:20am UTC](https://discuss.elastic.co/t/is-the-concept-of-payload-in-es-same-as-in-lucene/237906 "2020-06-20T08:20:19Z")
As far as i know, payload in Lucene is stored in inverted index, right after docid and term freq. But according to es reference on analysis-delimited-payload-tokenfilter, payload is stored in termVectors. So are these … --- ## [Shared went to unassigned state](https://discuss.elastic.co/t/shared-went-to-unassigned-state/237870)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 2\ **Last updated:** [June 20, 2020, 7:36am UTC](https://discuss.elastic.co/t/shared-went-to-unassigned-state/237870 "2020-06-20T07:36:47Z")
I have 6 node data node cluster. I started an index restore with Replica 1. But after some time the status of the index is yellow then when I checked the health status it returned many shareds are unassigned. From the e… --- ## [Ingest pipeline should work based on conditions](https://discuss.elastic.co/t/ingest-pipeline-should-work-based-on-conditions/237806)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 7:05am UTC](https://discuss.elastic.co/t/ingest-pipeline-should-work-based-on-conditions/237806 "2020-06-20T07:05:45Z")
Hi i have created a ingest pipeline using grok processor below is my processor Ingest pipeline with grok PUT \_ingest/pipeline/dissectpipeline { "description" : "split message content", … --- ## [Exception in thread “” java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW Elasticsearch 7.7](https://discuss.elastic.co/t/exception-in-thread-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-7-7/237897)
**Author:** [@Sepideh\_Naghdi](https://discuss.elastic.co/u/Sepideh_Naghdi)\ **Replies:** 0\ **Last updated:** [June 20, 2020, 6:22am UTC](https://discuss.elastic.co/t/exception-in-thread-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-7-7/237897 "2020-06-20T06:22:15Z")
0 I wrote java code which connect to ElasticSearch node and save documents in index. I got below error: Exception in thread "Thread-21" java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW I know this error is rela… --- ## [Index name error](https://discuss.elastic.co/t/index-name-error/237759)
**Author:** [@examin](https://discuss.elastic.co/u/examin)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 5:17am UTC](https://discuss.elastic.co/t/index-name-error/237759 "2020-06-20T05:17:59Z")
my indexName have '-' and it is returning error Please help curl -XPOST "http://3.7.226.52:9200/\_xpack/sql" -H 'Content-Type: application/json' -d' { "query":"SELECT \* from cc-portm" }' "type": "parsing\_exception", … --- ## [Elastic Search Aggregation with bool query](https://discuss.elastic.co/t/elastic-search-aggregation-with-bool-query/237768)
**Author:** [@Vaibhav\_Sharma](https://discuss.elastic.co/u/Vaibhav_Sharma)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 5:10am UTC](https://discuss.elastic.co/t/elastic-search-aggregation-with-bool-query/237768 "2020-06-20T05:10:34Z")
This is my elastic bool query. this works fine : { "query": { "bool": { "filter": \[ { "terms": { "parent\_uuid.\_raw": \[ … --- ## [Heartbeat problem in 7.7.x](https://discuss.elastic.co/t/heartbeat-problem-in-7-7-x/237250)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 4:02am UTC](https://discuss.elastic.co/t/heartbeat-problem-in-7-7-x/237250 "2020-06-20T04:02:29Z")
Dear Experts, I have problem with Heartbeat version when upgrade to 7.7. In 7.6.2 I have icmp monitor, and the result in the index for rtt was rtt.us, then in 7.7, the rtt.us was missing and change to icmp.rtt.us, this… --- ## [Elasticsearch Hot-Warn-Cold on a single node!](https://discuss.elastic.co/t/elasticsearch-hot-warn-cold-on-a-single-node/237650)
**Author:** [@Julius](https://discuss.elastic.co/u/Julius)\ **Replies:** 4\ **Last updated:** [June 20, 2020, 3:30am UTC](https://discuss.elastic.co/t/elasticsearch-hot-warn-cold-on-a-single-node/237650 "2020-06-20T03:30:09Z")
is there a way to archive old data on elasticsearch and automatically move it to cheaper storage while keeping access to this data from the kibana interface ? Our architecture has a single node that run, logstash, elast… --- ## [Search for index field value in text possible?](https://discuss.elastic.co/t/search-for-index-field-value-in-text-possible/237824)
**Author:** [@Tom\_Burke](https://discuss.elastic.co/u/Tom_Burke)\ **Replies:** 1\ **Last updated:** [June 20, 2020, 1:17am UTC](https://discuss.elastic.co/t/search-for-index-field-value-in-text-possible/237824 "2020-06-20T01:17:52Z")
The problem: I have a long list of short strings (1-5 words, mostly) which I want to fuzzy check if they are in a text. The shorts strings are in an index, while the text is part of the query. Is this possible? I manag… --- ## [Timestamp between certain hours any day?](https://discuss.elastic.co/t/timestamp-between-certain-hours-any-day/236535)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 2\ **Last updated:** [June 20, 2020, 12:22am UTC](https://discuss.elastic.co/t/timestamp-between-certain-hours-any-day/236535 "2020-06-20T00:22:23Z")
hi, i'm working a DFIR case, i'm fairly new to KIbana. i'm got millions of log entries to sift through. i need to see the log entries of a certain kind that were created after normal business hours any day of the week. … --- ## [Reindexing with date format conversion applied on dynamic fields matching regex](https://discuss.elastic.co/t/reindexing-with-date-format-conversion-applied-on-dynamic-fields-matching-regex/237793)
**Author:** [@Andrei\_Gog](https://discuss.elastic.co/u/Andrei_Gog)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 11:53pm UTC](https://discuss.elastic.co/t/reindexing-with-date-format-conversion-applied-on-dynamic-fields-matching-regex/237793 "2020-06-19T23:53:46Z")
Hello Guys. I have an index A that has fields dt\_0 to dt\_n (n\<=100) that unfortunately are stored as dynamic mappings and represent the Long value of a date. The index B has the same mappings as A but it also has the ri… --- ## [Adding elasticsearch-keystore with docker/kubernetes](https://discuss.elastic.co/t/adding-elasticsearch-keystore-with-docker-kubernetes/237884)
**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 10:37pm UTC](https://discuss.elastic.co/t/adding-elasticsearch-keystore-with-docker-kubernetes/237884 "2020-06-19T22:37:53Z")
Hi, I'm following below documents to make a test ELK cluster integrate with key cloak and I'm at the step to add client secret in the elasticsearch keystore. https://www.elastic.co/guide/en/elastic-stack-get-started/cu… --- ## [Elasticsearch 7.3.2 shows status as failed - main ERROR Unable to locate appender "rolling\_old" for logger config "root"](https://discuss.elastic.co/t/elasticsearch-7-3-2-shows-status-as-failed-main-error-unable-to-locate-appender-rolling-old-for-logger-config-root/237886)
**Author:** [@sayef](https://discuss.elastic.co/u/sayef)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 11:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-shows-status-as-failed-main-error-unable-to-locate-appender-rolling-old-for-logger-config-root/237886 "2020-06-19T23:00:27Z")
I am new to Elasticsearch and getting this error Getting the following error when I do a sudo systemctl status elasticsearch.service. ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/ela… --- ## [Real time and sync](https://discuss.elastic.co/t/real-time-and-sync/237859)
**Author:** [@asl](https://discuss.elastic.co/u/asl)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 7:54pm UTC](https://discuss.elastic.co/t/real-time-and-sync/237859 "2020-06-19T19:54:01Z")
Hi everyone, I’m trying to achieve real-time operations without affecting performance too much. More in deep, I need to sync data from a main relational database to ES. I thought about using a message broker (or by usin… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1984) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1986)