# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=891 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 892 --- ## [Aggregate on field value](https://discuss.elastic.co/t/aggregate-on-field-value/307968)
**Author:** [@zoriax](https://discuss.elastic.co/u/zoriax)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 8:56am UTC](https://discuss.elastic.co/t/aggregate-on-field-value/307968 "2022-06-23T08:56:28Z")
Hello, I'm new on this forum and I need your help :slight\_smile: I'm looking for a we to "aggregate" values on a field. Let me explain what I'm looking for : I have documents with this kind of fields : { "\_id" : "1… --- ## [Tokens offset issue](https://discuss.elastic.co/t/tokens-offset-issue/307737)
**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 8:50am UTC](https://discuss.elastic.co/t/tokens-offset-issue/307737 "2022-06-23T08:50:34Z")
Hello, I'm upgrading from Elastic 6.8.1 to 7.8.1 (tested on 8.2.3 as well) and getting the following error: startOffset must be non-negative, and endOffset must be \>= startOffset, and offsets must not go backwards I… --- ## [Winlogbeat Kibana data not showing](https://discuss.elastic.co/t/winlogbeat-kibana-data-not-showing/307966)
**Author:** [@yhk](https://discuss.elastic.co/u/yhk)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 8:36am UTC](https://discuss.elastic.co/t/winlogbeat-kibana-data-not-showing/307966 "2022-06-23T08:36:46Z")
Hello I'm just studying ELK I have finished building the ELK environment. I'm testing to collect windows log through winlogbeat for the first time. However, the winlogbeat setup seems to have been completed normally, … --- ## [Snmptrap for v3](https://discuss.elastic.co/t/snmptrap-for-v3/307610)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 8:32am UTC](https://discuss.elastic.co/t/snmptrap-for-v3/307610 "2022-06-23T08:32:20Z")
Hi Team, how can I enable snmptrap plugins for v3. The configuration I am going through applicable only for snmpv1 and v2. But my requirement is for v3 also. please guide me. Below is my configuration: input{ snmptra… --- ## [Can't Open Kibana Web Page](https://discuss.elastic.co/t/cant-open-kibana-web-page/307944)
**Author:** [@Darshana](https://discuss.elastic.co/u/Darshana)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 8:00am UTC](https://discuss.elastic.co/t/cant-open-kibana-web-page/307944 "2022-06-23T08:00:28Z")
Hi, I am not able to open kibana page in web browser. This issue come after C drive full. then i have delete temporary files to increase space in C drive. and also delete file from C:\\ELK IN\\elasticsearch-7.14.0\\data\\n… --- ## [Aggregation using part of a timestamp field](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858)
**Author:** [@mo-ezzat](https://discuss.elastic.co/u/mo-ezzat)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 7:53am UTC](https://discuss.elastic.co/t/aggregation-using-part-of-a-timestamp-field/307858 "2022-06-23T07:53:51Z")
Hello, I'm trying to make an aggregation using a field in the a timestamp format as "dateTimeReceived" : "2022-04-04T08:35:50.5566113Z" but I just want to use the date part, so I tried using the visualization on kib… --- ## [Removing timestamp from the dashboard report](https://discuss.elastic.co/t/removing-timestamp-from-the-dashboard-report/307847)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 7:35am UTC](https://discuss.elastic.co/t/removing-timestamp-from-the-dashboard-report/307847 "2022-06-23T07:35:30Z")
Hi, I want to remove this timestamp (\[Flights\] Global Flight Dashboard - Jun 1, 2022 @ 00:00:00.000 to Jun 10, 2022 @ 00:00:00.000) from the report of the dashboard. --- ## [How to identiry duplicates and delete it in index](https://discuss.elastic.co/t/how-to-identiry-duplicates-and-delete-it-in-index/307830)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 6\ **Last updated:** [June 23, 2022, 7:12am UTC](https://discuss.elastic.co/t/how-to-identiry-duplicates-and-delete-it-in-index/307830 "2022-06-23T07:12:42Z")
we are using elasticsearch 7.11.1 recently we observed an issue and below are the points for it. we store data for every 15 mins interval and we get time stamp from our input file (ex: 05:00, 23:15, 20:30, 11:45 ) r… --- ## [Elasticsearch is not installed in my laptop](https://discuss.elastic.co/t/elasticsearch-is-not-installed-in-my-laptop/307941)
**Author:** [@Talha\_Naeem](https://discuss.elastic.co/u/Talha_Naeem)\ **Replies:** 12\ **Last updated:** [June 23, 2022, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-installed-in-my-laptop/307941 "2022-06-23T06:52:03Z")
--- ## [Is there a guide as to how to upgrade old MSI installations?](https://discuss.elastic.co/t/is-there-a-guide-as-to-how-to-upgrade-old-msi-installations/307254)
**Author:** [@runegronkjaer](https://discuss.elastic.co/u/runegronkjaer)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:37am UTC](https://discuss.elastic.co/t/is-there-a-guide-as-to-how-to-upgrade-old-msi-installations/307254 "2022-06-23T06:37:47Z")
Is there a guide as to how to upgrade old MSI installations? That was so easy that the manual installation process seems super complicated in comparison. /Rune --- ## [While trying to Close Indices ElasticSearch gives error "Object reference not set to an instance of an object."](https://discuss.elastic.co/t/while-trying-to-close-indices-elasticsearch-gives-error-object-reference-not-set-to-an-instance-of-an-object/307844)
**Author:** [@EVINDX](https://discuss.elastic.co/u/EVINDX)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:12am UTC](https://discuss.elastic.co/t/while-trying-to-close-indices-elasticsearch-gives-error-object-reference-not-set-to-an-instance-of-an-object/307844 "2022-06-23T06:12:16Z")
I am trying to close the indices using the POST cmd localhost:9200/\_all/\_close But I am receiving this exception from Elasticsearch. Exception: 'Elasticsearch 'Indices.Close' API failed due to error 'Object reference … --- ## [How do I fix TLS Error when connecting with Python Client?](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python-client/307916)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 6:09am UTC](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python-client/307916 "2022-06-23T06:09:58Z")
When I try to connect to Elasticsearch with Python Client, I get this error: elastic\_transport.TlsError: TLS error caused by: TlsError(TLS error caused by: SSLError(\[SSL: WRONG\_VERSION\_NUMBER\] wrong version number (\_ssl.… --- ## [Kibana Page is not getting display](https://discuss.elastic.co/t/kibana-page-is-not-getting-display/307935)
**Author:** [@RSakhalikar23](https://discuss.elastic.co/u/RSakhalikar23)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:08am UTC](https://discuss.elastic.co/t/kibana-page-is-not-getting-display/307935 "2022-06-23T06:08:57Z")
This page can’t be displayed This page can’t be displayed Make sure the web address https://10.0.119.220:5601 is correct. Look for the page with your search engine. Refresh the page in a few minutes. Please do needfu… --- ## [How do I fix TLS Error when connecting with Python?](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python/307922)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:08am UTC](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python/307922 "2022-06-23T06:08:09Z")
When I try to connect to Elasticsearch with Python Client, I get this error: elastic\_transport.TlsError: TLS error caused by: TlsError(TLS error caused by: SSLError(\[SSL: WRONG\_VERSION\_NUMBER\] wrong version number (\_ssl.… --- ## [How do I upgrade old MSI installations?](https://discuss.elastic.co/t/how-do-i-upgrade-old-msi-installations/307942)
**Author:** [@runegronkjaer](https://discuss.elastic.co/u/runegronkjaer)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 6:06am UTC](https://discuss.elastic.co/t/how-do-i-upgrade-old-msi-installations/307942 "2022-06-23T06:06:14Z")
EDIT: As this topic was closed by @warkolm I cannot reply to his comment and must update. So this means that noone in the entire world knows how to update an elastic instance on windows? How do I upgrade an old v7 msi… --- ## [Why I'm getting 0 results when fuzziness is more than 2?](https://discuss.elastic.co/t/why-im-getting-0-results-when-fuzziness-is-more-than-2/307883)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 1:31pm UTC](https://discuss.elastic.co/t/why-im-getting-0-results-when-fuzziness-is-more-than-2/307883 "2022-06-22T13:31:13Z")
I'm using elastic search 7.6.2 I have index with the following mapping: "mappings": { "properties": { "content": {"type": "text"}, } } with 3 documents: michae… --- ## [Filebeat not shipping logs to elasticsearch](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch/307783)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 6:04am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-elasticsearch/307783 "2022-06-23T06:04:01Z")
Hi Team, I am using Filebeat 8.0.0 And using filestream type for harvesting logs from 6 different paths with ingest pipeline. But i have to restart the Filebeat service to get the logs as it is not sending logs from t… --- ## [How to configure filebeat for AD logs in Cloudwatch](https://discuss.elastic.co/t/how-to-configure-filebeat-for-ad-logs-in-cloudwatch/307690)
**Author:** [@johnstancox](https://discuss.elastic.co/u/johnstancox)\ **Replies:** 3\ **Last updated:** [June 23, 2022, 6:03am UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-for-ad-logs-in-cloudwatch/307690 "2022-06-23T06:03:01Z")
Hello Elastic/Beat super heroes, I am using filebeat to pull aws cloudwatch logs for an aws Active Directory service. So, the "message" property of the cloudwatch log record is the Windows Event log record. I would like… --- ## [When i am creating multiple dashboard, it is streaming same logs table for all dashboard](https://discuss.elastic.co/t/when-i-am-creating-multiple-dashboard-it-is-streaming-same-logs-table-for-all-dashboard/307825)
**Author:** [@Yash\_garg](https://discuss.elastic.co/u/Yash_garg)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 5:52am UTC](https://discuss.elastic.co/t/when-i-am-creating-multiple-dashboard-it-is-streaming-same-logs-table-for-all-dashboard/307825 "2022-06-23T05:52:40Z")
I am using filebeat to ship my logs and using elasticsearch, logstash and kibana for visualization. On kibana dashboard, I have setup Observability-\> logs-\> streams-\> settings-\> log index pattern from kibana (Here I am a… --- ## [Deleting duplicates in index using API query](https://discuss.elastic.co/t/deleting-duplicates-in-index-using-api-query/307945)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 5:47am UTC](https://discuss.elastic.co/t/deleting-duplicates-in-index-using-api-query/307945 "2022-06-23T05:47:26Z")
I an in search of a query to to delete the duplicates for below example index data: name product sale id sai pen 100 1 kumar car 30 2 sai pen 100 1 sai pen 100 1 ram bike 288 3 kumar car 30 2 After deleting dup… --- ## [When outputting from logstash to elasticsearch, some data is missing](https://discuss.elastic.co/t/when-outputting-from-logstash-to-elasticsearch-some-data-is-missing/307820)
**Author:** [@sbyunnn](https://discuss.elastic.co/u/sbyunnn)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 4:59am UTC](https://discuss.elastic.co/t/when-outputting-from-logstash-to-elasticsearch-some-data-is-missing/307820 "2022-06-23T04:59:21Z")
Hi, I am building ELK Stack The output of my logstash is Elasticsearch but, some data is missing in ES However, some data is missing from ES. After removing all indexes, I can see missed data. but, the other data mis… --- ## [Duplicates in ElasticSearch when using ILM Rollover](https://discuss.elastic.co/t/duplicates-in-elasticsearch-when-using-ilm-rollover/307910)
**Author:** [@Troy571](https://discuss.elastic.co/u/Troy571)\ **Replies:** 1\ **Last updated:** [June 23, 2022, 2:14am UTC](https://discuss.elastic.co/t/duplicates-in-elasticsearch-when-using-ilm-rollover/307910 "2022-06-23T02:14:28Z")
I have read two other posts related to this but I still have not found a solution to my issue. I am ingesting large amounts of data and the ingestion rate is unpredictable. I have implemented ILM policies to rollover an … --- ## [Sprintf on xml filter xpath](https://discuss.elastic.co/t/sprintf-on-xml-filter-xpath/307925)
**Author:** [@Factor3](https://discuss.elastic.co/u/Factor3)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 12:38am UTC](https://discuss.elastic.co/t/sprintf-on-xml-filter-xpath/307925 "2022-06-23T00:38:54Z")
Hi. Is there a way to use sprintf on the xml xpath string? I have to get the node where the value is equal to a field of the event like this but I am getting no results: xml { source =\> "\[@metadata\]\[body\]" store\_xm… --- ## [Sort MLT query results: spark + scala](https://discuss.elastic.co/t/sort-mlt-query-results-spark-scala/307782)
**Author:** [@nobre0](https://discuss.elastic.co/u/nobre0)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 8:59pm UTC](https://discuss.elastic.co/t/sort-mlt-query-results-spark-scala/307782 "2022-06-22T20:59:02Z")
Hi, I'm trying to run the 'More Like This' (MLT) query using the apache spark connector. The problem is that the result is not sorted by computed MLT score. I think it is related to the sort=\_doc parameter added in the… --- ## [Upsert into nested field](https://discuss.elastic.co/t/upsert-into-nested-field/307289)
**Author:** [@elwdipath](https://discuss.elastic.co/u/elwdipath)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 8:21pm UTC](https://discuss.elastic.co/t/upsert-into-nested-field/307289 "2022-06-22T20:21:23Z")
I'm trying to upsert (push) and object into a nested field. We have data in xml that comes in like this: \ \1234\ \John Smith\ \ \ \ \ \3424\ **Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 8:17pm UTC](https://discuss.elastic.co/t/update-ca-and-server-certs-and-also-add-couple-more-cold-servers/307906 "2022-06-22T20:17:57Z") Hello Team, I am looking for answers to 2 major questions. I have used below link to setup my entire stack in production and everything looks fine so far. https://www.elastic.co/guide/en/elastic-stack-get-started/7.1… --- ## [Elastic-Spark connector : How to read data fro ES Index which has nested Json with array fields](https://discuss.elastic.co/t/elastic-spark-connector-how-to-read-data-fro-es-index-which-has-nested-json-with-array-fields/307803)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 7:59pm UTC](https://discuss.elastic.co/t/elastic-spark-connector-how-to-read-data-fro-es-index-which-has-nested-json-with-array-fields/307803 "2022-06-22T19:59:32Z")
I have use case where I have same filed names in Json inside array fields as below. I have included "es.read.field.as.array.include" : distrChan.Notifications.OfferNtfy.AId , distrChan.Notifications.OfferNtfy.EId while … --- ## [Kibana not working after setting up minimal security](https://discuss.elastic.co/t/kibana-not-working-after-setting-up-minimal-security/307454)
**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\ **Replies:** 8\ **Last updated:** [June 22, 2022, 6:28pm UTC](https://discuss.elastic.co/t/kibana-not-working-after-setting-up-minimal-security/307454 "2022-06-22T18:28:45Z")
I have the below setup for Elasticsearch I have the below setup for Kibana server.host: "0.0.0.0" Elasticsearch.username: "kibana\_system" Elasticsearch.logQueries: true logging.dest: D:\\Elastic\\kibana-7.17.0\\Logs\\… --- ## [Unable to send logs to elasticsearch due to max\_bytes\_length\_exceeded\_exception](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-due-to-max-bytes-length-exceeded-exception/307892)
**Author:** [@Gihan\_Indrajith](https://discuss.elastic.co/u/Gihan_Indrajith)\ **Replies:** 1\ **Last updated:** [June 22, 2022, 5:50pm UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-due-to-max-bytes-length-exceeded-exception/307892 "2022-06-22T17:50:00Z")
Observing below log in Fluentd with max\_bytes\_length\_exceeded\_exception. Please help to identify the root cause and fix 2022-06-22 22:18:30 +0800 \[error\]: #0 Could not push log to Elasticsearch: {"took"=\>30, "errors"=\>t… --- ## [How do I fix TLS Error when connecting with Python Client?](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python-client/307907)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 0\ **Last updated:** [June 22, 2022, 5:49pm UTC](https://discuss.elastic.co/t/how-do-i-fix-tls-error-when-connecting-with-python-client/307907 "2022-06-22T17:49:58Z")
When I try to connect to Elasticsearch with Python Client, I get this error: elastic\_transport.TlsError: TLS error caused by: TlsError(TLS error caused by: SSLError(\[SSL: WRONG\_VERSION\_NUMBER\] wrong version number (\_ssl.… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=890) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=892)