# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1996 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1997 --- ## [Need help to simple sort aggregation by other field](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287)
**Author:** [@Uli\_Kasper](https://discuss.elastic.co/u/Uli_Kasper)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 11:51am UTC](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287 "2020-06-16T11:51:40Z")
Hi, my documents in the index have fields named "filter\_color" and "filter\_color\_value". "filter\_color" is an interger mapped field containing a number from 10 to 160. "filter\_color\_value" is a string field which cont… --- ## [Unable to pull from docker registry due to authentication error ... again](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error-again/236936)
**Author:** [@Ionut\_Calin](https://discuss.elastic.co/u/Ionut_Calin)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 11:24am UTC](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error-again/236936 "2020-06-16T11:24:19Z")
Hello it seems that this problem is somehow recurrent. Now it appears again: docker pull docker.elastic.co/elasticsearch/elasticsearch-oss:6.7.1 Error response from daemon: Get https://docker.elastic.co/v2/: authentica… --- ## [Journalbeat exits with success](https://discuss.elastic.co/t/journalbeat-exits-with-success/236988)
**Author:** [@chrissound](https://discuss.elastic.co/u/chrissound)\ **Replies:** 6\ **Last updated:** [June 16, 2020, 10:11am UTC](https://discuss.elastic.co/t/journalbeat-exits-with-success/236988 "2020-06-16T10:11:09Z")
\[root@XenonKiloCranberry:~\]# /nix/store/lfcgbj5s5iwd4fa6dcs2lmrkryy03a9s-journalbeat-6.8.3-bin/bin/journalbeat -c /nix/store/9g135rj3vz502l03iy08567nyl22iirm-journalbeat.yml -path.data /var/lib/journalbeat/data -path.log… --- ## [Nested data type limit](https://discuss.elastic.co/t/nested-data-type-limit/237239)
**Author:** [@divya005](https://discuss.elastic.co/u/divya005)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/nested-data-type-limit/237239 "2020-06-16T10:02:45Z")
Hello team, I have more than 100 nested items in my project and while fetching i need to get only 10 based on grouping.Can you please help me how to get this. --- ## [How to get Elastic, Kibana and Logstash working with docker compose](https://discuss.elastic.co/t/how-to-get-elastic-kibana-and-logstash-working-with-docker-compose/236760)
**Author:** [@Magnuss](https://discuss.elastic.co/u/Magnuss)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 10:00am UTC](https://discuss.elastic.co/t/how-to-get-elastic-kibana-and-logstash-working-with-docker-compose/236760 "2020-06-16T10:00:40Z")
Hi all, I'm trying to get a Elastic cluster working with docker-compose. I'm running into some issues. I would like to use volumes locally so i can edit config files and add new conf files for Logstash. Also i would li… --- ## [Got Invalid Frame Type Exception even Filebeat version is same which pointing to Logstash 5.6.14](https://discuss.elastic.co/t/got-invalid-frame-type-exception-even-filebeat-version-is-same-which-pointing-to-logstash-5-6-14/237255)
**Author:** [@ridwanbejo](https://discuss.elastic.co/u/ridwanbejo)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:40am UTC](https://discuss.elastic.co/t/got-invalid-frame-type-exception-even-filebeat-version-is-same-which-pointing-to-logstash-5-6-14/237255 "2020-06-16T08:40:48Z")
Hi Magnus, I have problems with Filebeat and Logstash setup. So I assigned to move logstash service to dockerize one. Then, I use logstash Docker with version 5.6.14. But I have an exception when attempt to redirect one… --- ## [Searching term with it's position range](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984)
**Author:** [@Kazuki\_Matsuda](https://discuss.elastic.co/u/Kazuki_Matsuda)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 9:26am UTC](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984 "2020-06-16T09:26:44Z")
Hello, I have a following three document 1. \`{field: "one two three"}\` 2. \`{field: "x one two three"}\` 3. \`{field: "x y one two three"}\` Question: Can I query term tow with it's position range? Example: {match: "two",… --- ## [Elasticsearch performance issues after upgrade from 5.6 to 6.8](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264)
**Author:** [@ahronl](https://discuss.elastic.co/u/ahronl)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264 "2020-06-16T09:13:24Z")
Hi, we upgraded our server from elasticsearch 5.6 to 6.8.6 and experience performance issues,, high cpu usage and frequent full GC. the cluster is 10 data nodes with 300~ shards, we have a daily index shards size very … --- ## [Are time-based index faster than rollover-indices - if the time is known?](https://discuss.elastic.co/t/are-time-based-index-faster-than-rollover-indices-if-the-time-is-known/234883)
**Author:** [@G-K-Patel](https://discuss.elastic.co/u/G-K-Patel)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 9:09am UTC](https://discuss.elastic.co/t/are-time-based-index-faster-than-rollover-indices-if-the-time-is-known/234883 "2020-06-16T09:09:30Z")
Hi All, We know there are two types mechanism to create multiple indices, if the size of data is too large for one index. Namely, 1) time-based: where time is used in the suffix-of the index name, e.g. MyIndex-2019, MyI… --- ## [How to add machine learning to analyze regression failures?](https://discuss.elastic.co/t/how-to-add-machine-learning-to-analyze-regression-failures/237241)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:01am UTC](https://discuss.elastic.co/t/how-to-add-machine-learning-to-analyze-regression-failures/237241 "2020-06-16T09:01:34Z")
Hi guys, I was trying to find out the reasons for regression failures using the machine learning feature of Kibana, but I was only able to detect the anomalies, that too based on the count only. I want it to analyze cer… --- ## [Message.keyword not exist filebeat 7.3](https://discuss.elastic.co/t/message-keyword-not-exist-filebeat-7-3/237259)
**Author:** [@Jaume\_Puigserver](https://discuss.elastic.co/u/Jaume_Puigserver)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:52am UTC](https://discuss.elastic.co/t/message-keyword-not-exist-filebeat-7-3/237259 "2020-06-16T08:52:59Z")
Hi, I'm trying to create a search using message.keyword it works without problems with version 7.7 but I have several indexes with version 7.3.1 and when I execute the query I got "No field found for \[message.keyword\] … --- ## [How to use memcached plugin in logstash](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256)
**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256 "2020-06-16T08:44:21Z")
Hi, I am recently learning elk stack and paying more attention to logstash configs. most recently decided to use memcached plugin to get data from another server and write it to elasticsearch according to this url … --- ## [Centralized configuration with Wildcard is not working](https://discuss.elastic.co/t/centralized-configuration-with-wildcard-is-not-working/237120)
**Author:** [@Seraph](https://discuss.elastic.co/u/Seraph)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 8:39am UTC](https://discuss.elastic.co/t/centralized-configuration-with-wildcard-is-not-working/237120 "2020-06-16T08:39:30Z")
Hello, I'm facing a problem concerning the centralized configuration and I've not been able to solve it for a couple of weeks and I don't know why. OS : Centos 7 Here is the think : I would like to use the shared conf… --- ## [Distributed Pipeline - Can the send\_to address be resolved from a variable?](https://discuss.elastic.co/t/distributed-pipeline-can-the-send-to-address-be-resolved-from-a-variable/237204)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 8:33am UTC](https://discuss.elastic.co/t/distributed-pipeline-can-the-send-to-address-be-resolved-from-a-variable/237204 "2020-06-16T08:33:25Z")
I have a working setup, where events come in from a single filebeat node, hit the log stash main pipeline which sends the event to one of 20 different pipelines. To do this there is an ugly if statement that does 20 str… --- ## [Winlogbeat, metricbeat not work on winodws xp](https://discuss.elastic.co/t/winlogbeat-metricbeat-not-work-on-winodws-xp/236515)
**Author:** [@manzu](https://discuss.elastic.co/u/manzu)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 8:24am UTC](https://discuss.elastic.co/t/winlogbeat-metricbeat-not-work-on-winodws-xp/236515 "2020-06-16T08:24:54Z")
i need mornitoring system for many server. so, i 'm setting winlogbeat and metricbeat (7.6.0 v...) two beat works well on win7 but not work on xp ..... I need help. alert error message winodws 1053 error and ".\\winl… --- ## [Elasticsearch on Kubernetes losing Cluster Connection every hour](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086)
**Author:** [@fewagewasd](https://discuss.elastic.co/u/fewagewasd)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086 "2020-06-16T08:23:47Z")
Hi, I am migrating an older application using elasticsearch 2.4 (I know that's a very old version, but I'm not able to upgrade at this point) to Kubernetes. I set it up using a StatefulSet and a headless service, which … --- ## [ElasticSearch cluster unreachable every night between 00.00 and 02.00](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249 "2020-06-16T08:15:36Z")
Hi fellows, I have a question regarding the 'possible' scheduled jobs of ElasticSeach. We monitor the application with cURL and run it every 30 seconds to inspect the HTTPS response. Somehow, we receive an unavailable e… --- ## [Painless search](https://discuss.elastic.co/t/painless-search/236696)
**Author:** [@Jaume\_Puigserver](https://discuss.elastic.co/u/Jaume_Puigserver)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 8:20am UTC](https://discuss.elastic.co/t/painless-search/236696 "2020-06-16T08:20:37Z")
Hi, I'm trying to use painless script for extracting data from a cisco message. I know that you will tell me that better indexing from start with a new asa patter but for now I need urgently extract data The message st… --- ## [Indexing Rate is fluctuating](https://discuss.elastic.co/t/indexing-rate-is-fluctuating/237252)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:17am UTC](https://discuss.elastic.co/t/indexing-rate-is-fluctuating/237252 "2020-06-16T08:17:47Z")
The indexing rate is quite fluctuating. Is it normal? Is there any way to make it more stable? --- ## [Transforms weird situation](https://discuss.elastic.co/t/transforms-weird-situation/237224)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 8:03am UTC](https://discuss.elastic.co/t/transforms-weird-situation/237224 "2020-06-16T08:03:20Z")
Hi experts, I have several transforms for pivot, this is the situation that make me confused: The transform works as expected The Documents Processes and documents indexed increased as expected with around 500 documen… --- ## [Numeric metrics aggregation on Nested key-value set](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096 "2020-06-16T07:54:08Z")
Hi Our index contains docs with a nested set of key-values, we would need to perform metric aggregation per key. So we for example, we would need the average cpuTime per taskId for such docs: { "tasks" : \[ … --- ## [Looking for advices on how to improve an Elastic architecture](https://discuss.elastic.co/t/looking-for-advices-on-how-to-improve-an-elastic-architecture/235024)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 8\ **Last updated:** [June 16, 2020, 7:42am UTC](https://discuss.elastic.co/t/looking-for-advices-on-how-to-improve-an-elastic-architecture/235024 "2020-06-16T07:42:10Z")
Good evening, During an internship in computer science (so I start with Docker, K8S and the Elastic stack), I'm asked to set up a log retrieval environment using the Elastic stack under ECK. For the moment, I'm trainin… --- ## [How to pass multiple terms as a param in script scoring](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 7:34am UTC](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240 "2020-06-16T07:34:31Z")
I'm making custom score script plugin for scoring based on payload value. I've done with scoring logic, but it's working properly when it receives only one term. I want to receive several analyzed terms in query. How c… --- ## [I have a question about Elastic Search](https://discuss.elastic.co/t/i-have-a-question-about-elastic-search/237216)
**Author:** [@111349](https://discuss.elastic.co/u/111349)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 7:24am UTC](https://discuss.elastic.co/t/i-have-a-question-about-elastic-search/237216 "2020-06-16T07:24:59Z")
I've used the search api provided by Elastic, I have a question while searching and leave a question. Why can't I search for "=" or "+" ... etc when searching in Elastic? If I search for "+abc=", only abc is highlighte… --- ## [Internal Server Error: SearchError / CSP related?](https://discuss.elastic.co/t/internal-server-error-searcherror-csp-related/237143)
**Author:** [@Wabi\_Sabi](https://discuss.elastic.co/u/Wabi_Sabi)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 7:24am UTC](https://discuss.elastic.co/t/internal-server-error-searcherror-csp-related/237143 "2020-06-16T07:24:53Z")
Fellow Kibana Users, I am getting up to speed with Kibana and ran into some issues. The solution came pre-packaged so I am not even quite sure where to start and what to look for. Any suggestions would be greatly apprec… --- ## [Is it possible to retrieve progress status from Jira?](https://discuss.elastic.co/t/is-it-possible-to-retrieve-progress-status-from-jira/236882)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:22am UTC](https://discuss.elastic.co/t/is-it-possible-to-retrieve-progress-status-from-jira/236882 "2020-06-16T07:22:26Z")
Hi guys, I want to know if it is possible to retrieve progress status (like In-Progress, Done) from Jira in case I have issue Id in my index. My use case is, I want to check how many issues are open by applying filters o… --- ## [Force filebeat to reparse CSV](https://discuss.elastic.co/t/force-filebeat-to-reparse-csv/237082)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 7:16am UTC](https://discuss.elastic.co/t/force-filebeat-to-reparse-csv/237082 "2020-06-16T07:16:15Z")
Hello, I'm using filebeat and Logstash I want to force re-parse the files provided in the path section, but that doesn't seem to work my config filebeat is: filebeat.inputs: - type: log enabled: true paths: … --- ## [Graph the last state of a case](https://discuss.elastic.co/t/graph-the-last-state-of-a-case/237040)
**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 7:07am UTC](https://discuss.elastic.co/t/graph-the-last-state-of-a-case/237040 "2020-06-16T07:07:16Z")
I need to graph the last result of the cases and group them. that is, how many cases do I currently have as a result in "en\_seguimiento", "sin\_respuesta" , or "SinVenta"... In eslastic, a document is recorded for each … --- ## [Duration of several events](https://discuss.elastic.co/t/duration-of-several-events/237168)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 7:05am UTC](https://discuss.elastic.co/t/duration-of-several-events/237168 "2020-06-16T07:05:03Z")
After Logstash I have the following data in Elastic: EVENTTIME OPERATION MSGID 20-06-20 05:09:46 Input 889780ef 20-06-20 05:09:47 Casche 889780ef 20-06-20 05:09:48 Transform 889780ef 20-06-20 05:09:51 Outp… --- ## [Reporting stopped working due to version conflict](https://discuss.elastic.co/t/reporting-stopped-working-due-to-version-conflict/237109)
**Author:** [@gulycka](https://discuss.elastic.co/u/gulycka)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 6:54am UTC](https://discuss.elastic.co/t/reporting-stopped-working-due-to-version-conflict/237109 "2020-06-16T06:54:53Z")
Hi, recently I encountered issue with reporting plugin from X-Pack. We are running ELK stack with only Basic license for X-Pack, in version 7.5.2. Previously, reporting was working without any issues. Few days ago I … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1995) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1997)