# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=896 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 897 --- ## [Create specific column](https://discuss.elastic.co/t/create-specific-column/307669)
**Author:** [@Renato\_Souza](https://discuss.elastic.co/u/Renato_Souza)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 3:53pm UTC](https://discuss.elastic.co/t/create-specific-column/307669 "2022-06-20T15:53:48Z")
How to create or what the documentation for this: I have some data in column message, but i need to create a new column for this IP and network name. This possible? --- ## [Set IP address as index](https://discuss.elastic.co/t/set-ip-address-as-index/307642)
**Author:** [@fropa](https://discuss.elastic.co/u/fropa)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 3:39pm UTC](https://discuss.elastic.co/t/set-ip-address-as-index/307642 "2022-06-20T15:39:07Z")
Hi, Can I configure logstash to set "source IP address" as index ? Is there any variable for that? --- ## [Logstash Log4j Update](https://discuss.elastic.co/t/logstash-log4j-update/307604)
**Author:** [@rishabjain1012](https://discuss.elastic.co/u/rishabjain1012)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 3:35pm UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604 "2022-06-20T15:35:59Z")
Hi, We are using opensource versions of logstash docker Images. Our security team found that these images contain log4j-core-2.17.0.jar which is found to be vulnerable. Can someone provide us an update as of when will… --- ## [Elasticsearch Keep Stopping](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422)
**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\ **Replies:** 22\ **Last updated:** [June 20, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422 "2022-06-20T15:31:21Z")
I am running Elasticsearch 8 on a server with 300gb hard drive and 16gb RAM. The Elasticsearch keep stopping in few hours. I tried restarting it using systemctl and got below message ● elasticsearch.service - Elasticse… --- ## [Elastic mapping improper integer coercion to decimal/float](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165)
**Author:** [@VenkateshD](https://discuss.elastic.co/u/VenkateshD)\ **Replies:** 5\ **Last updated:** [June 20, 2022, 3:26pm UTC](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165 "2022-06-20T15:26:42Z")
Input document {"warrantyMiles":65000,"loadIndex":95} Index mapping "loadIndex": { "type": "integer", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "warrantyMiles": { "type": "integer", "fiel… --- ## [Snapshot for cluster size TB](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493)
**Author:** [@christians](https://discuss.elastic.co/u/christians)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 3:17pm UTC](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493 "2022-06-20T15:17:50Z")
Hi, In the actuallity i have the policy slm for snapshot daily with cluster size 2-5 GB the snapshot are corrects. I have a question for an cluster size 9TB. We need implement a snapshot daily optim. Please Could you … --- ## [Logstash giving error while creating template - Failed to install template Got response code '400' contacting Elasticsearch at URL](https://discuss.elastic.co/t/logstash-giving-error-while-creating-template-failed-to-install-template-got-response-code-400-contacting-elasticsearch-at-url/307677)
**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 3:14pm UTC](https://discuss.elastic.co/t/logstash-giving-error-while-creating-template-failed-to-install-template-got-response-code-400-contacting-elasticsearch-at-url/307677 "2022-06-20T15:14:10Z")
I am getting this error failed to install when specifying the template file in the logstash configuration. But the same template json is working if I create it using the Elasticsearch API. I actually don't want to create… --- ## [Use sns message value for Elasticsearch input query](https://discuss.elastic.co/t/use-sns-message-value-for-elasticsearch-input-query/307488)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 2:47pm UTC](https://discuss.elastic.co/t/use-sns-message-value-for-elasticsearch-input-query/307488 "2022-06-20T14:47:57Z")
Hello, Is there a way to retrieve a value from an SNS message (via an input) and pass that same value to an Elastic input ? --- ## [Elasticsearch master node failover](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504)
**Author:** [@artem.zikov](https://discuss.elastic.co/u/artem.zikov)\ **Replies:** 4\ **Last updated:** [June 20, 2022, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504 "2022-06-20T14:29:11Z")
Hello. I have Elasticsearch cluster (for graylog) with Elasticsearch-oss 7.10.2 Cluster has 3 nodes: 2 data/master and 1 master # curl -XGET 'localhost:9200/\_cat/nodes?v&pretty' ip heap.percent ram.percent cp… --- ## [Create nested object mapping using logstash unloading from postgres](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661)
**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 2:24pm UTC](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661 "2022-06-20T14:24:35Z")
Hi, I am unloading data from Postgres to Elasticsearch using logstash. In this case if the index is not there in Elasticsearch logstash is creating an index with the predefined mapping. The mapping is perfect for all th… --- ## [Unable to retrieve license information from license server](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 5\ **Last updated:** [June 20, 2022, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server/304766 "2022-06-20T14:13:18Z")
Setting up a multi-node ELK 8.2 stack and hitting an issue I've not been able to sort out. The basics of Elasticsearch and Kibana are working, but Logstash doesn't want to connect to the one Elasticsearch machine I have.… --- ## [Map data not displaying in 8.2.0](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 17\ **Last updated:** [June 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450 "2022-06-20T14:12:57Z")
Hi, Ive migrated from 7.16 to 8.2 but since then my maps are not displaying. The data is there and mapped with a gep\_point for the location. I also noticed the location is no longer displaying in the discover ie with t… --- ## [Backfill Rollup indices from external Sources](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667)
**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 2:08pm UTC](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667 "2022-06-20T14:08:18Z")
hi there, we have a legacy selwritten data retention solution which i want to migrate into pure elastic. it contains daily averages(weighted) af some metrics over the last 5 years. The Rollup off the latest metric alr… --- ## [Filebeat file\_identity inode\_uuid](https://discuss.elastic.co/t/filebeat-file-identity-inode-uuid/307665)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 2:01pm UTC](https://discuss.elastic.co/t/filebeat-file-identity-inode-uuid/307665 "2022-06-20T14:01:57Z")
This may be an old discussion and we have seen some improvements in the past, but I would like to bring it up again. The issue is that by default, filebeat indentifies files by inode and device id. The problem with the … --- ## [Inability to retrieve data set when sorted on multivalued date field](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660)
**Author:** [@rand0m86](https://discuss.elastic.co/u/rand0m86)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 1:40pm UTC](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660 "2022-06-20T13:40:27Z")
We have a data set of 40M+ records in one of the indices in Elasticsearch v6.8.18. Data is added/updated/removed daily at a given time (no ad-hoc changes happen during the day). In the application which uses ES we have … --- ## [Logstash 8.x ecs.compatibility mode adds event.original](https://discuss.elastic.co/t/logstash-8-x-ecs-compatibility-mode-adds-event-original/307654)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 1:05pm UTC](https://discuss.elastic.co/t/logstash-8-x-ecs-compatibility-mode-adds-event-original/307654 "2022-06-20T13:05:42Z")
As already discussed in a previous thread, logstash in ecs.compatibility mode adds the event.original field to all events. The proposed solution was to turn off ecs.compatibility. The problem is that disabling ecs.compa… --- ## [Filter hosts based on port](https://discuss.elastic.co/t/filter-hosts-based-on-port/307495)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 12:27pm UTC](https://discuss.elastic.co/t/filter-hosts-based-on-port/307495 "2022-06-20T12:27:00Z")
Hello, i am using auto discovery in kubernetes and some discovered hosts has port 0 on which health check is failing. I want to be able to filter those hosts and run icmp check for them. How can i achieve this with condi… --- ## [Highlight not working properly](https://discuss.elastic.co/t/highlight-not-working-properly/307128)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 6\ **Last updated:** [June 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/highlight-not-working-properly/307128 "2022-06-20T12:23:52Z")
Hi Team, Can anyone please explain me the flow of highlight in Elasticsearch? When i am adding multiple queries in should condition then highlight is not returning expected values and when i am trying with single query… --- ## [Spring-boot-starter-data-elasticsearch 2.4.4 gives results and 2.5.13 and above versions don't give results for query](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621)
**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 8:50am UTC](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621 "2022-06-20T08:50:12Z")
@Query("{"terms":{"id": ?0}}") public Page findById(List id) Spring-boot-starter-data-Elasticsearch 2.4.4 generates a query with wrapper inside that is encrypted during debug and I get matching results from index When… --- ## [Benchmarking es-cluster on AWS](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636 "2022-06-20T12:01:22Z")
Hi All, I am running my es-cluster on kubernetes on AWS instance x2iedn(memory optimized) and i4i(Storage optimized). I tried benchmarking the es cluster on both instance type. I have 3 data nodes and 1 master node. … --- ## [Creating Analyzer Query in Java API Client Elasticsearch version 7.16.3](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620)
**Author:** [@Aadi](https://discuss.elastic.co/u/Aadi)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 12:00pm UTC](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620 "2022-06-20T12:00:30Z")
Hi everyone, I have a java application in which ElasticSearchClient is used for establishing connection with Elasticsearch server. The application uses BulkRequest for indexing documents. Following code index the docum… --- ## [How can I get my kibana and elasticsearch url? for the filebeat?](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623 "2022-06-20T11:31:38Z")
Thanks, How can I know my kibana and Elasticsearch url? output.elasticsearch: hosts: \["\"\] username: "elastic" password: "\" setup.kibana: host: "\" how can I get these? thanks --- ## [Reorder results to ensure the closest match returns first](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635)
**Author:** [@Thomas\_Gibbs](https://discuss.elastic.co/u/Thomas_Gibbs)\ **Replies:** 0\ **Last updated:** [June 20, 2022, 10:57am UTC](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635 "2022-06-20T10:57:15Z")
I'd like to make a single rescore query that pushes the closest metadata match to what someone searched (before applying the function score), but then have the function score as a much larger factor afterwards, in order… --- ## [Copy some fields from one index to another](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 9\ **Last updated:** [June 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421 "2022-06-20T11:24:48Z")
I am thinking if it's possible to merge two indices to holt my data first\_index: PUT first\_index { "mappings": { "dynamic": "false", "\_source": { "excludes": \["content"\] }, "properties": { … --- ## [Create an alert when deadline date reached](https://discuss.elastic.co/t/create-an-alert-when-deadline-date-reached/307428)
**Author:** [@danje57](https://discuss.elastic.co/u/danje57)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 10:17am UTC](https://discuss.elastic.co/t/create-an-alert-when-deadline-date-reached/307428 "2022-06-20T10:17:19Z")
Dear all, I create an action register, which is a list of task I need to perform during the year. This is a basic csv file with header: Tack name; Task Description; START\_Date; Due\_Date;Status I would like to have an… --- ## [Heartbeat showing Down even the port is working when autodiscovery of Docker Host Port and IP's](https://discuss.elastic.co/t/heartbeat-showing-down-even-the-port-is-working-when-autodiscovery-of-docker-host-port-and-ips/307568)
**Author:** [@itssenthil](https://discuss.elastic.co/u/itssenthil)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 9:42am UTC](https://discuss.elastic.co/t/heartbeat-showing-down-even-the-port-is-working-when-autodiscovery-of-docker-host-port-and-ips/307568 "2022-06-20T09:42:30Z")
Hey Elastic Team, Good Day, I'm done the configurations to autodiscovery of Heartbeat, and also it discovers the port, but the some of the up status ports in realtime in docker showing down from the beginning in the Hear… --- ## [Can heartbeat monitor ip/website via specific network interface?](https://discuss.elastic.co/t/can-heartbeat-monitor-ip-website-via-specific-network-interface/307346)
**Author:** [@luckyclue](https://discuss.elastic.co/u/luckyclue)\ **Replies:** 3\ **Last updated:** [June 20, 2022, 9:30am UTC](https://discuss.elastic.co/t/can-heartbeat-monitor-ip-website-via-specific-network-interface/307346 "2022-06-20T09:30:26Z")
One server connected to 3 ISP and need to monitor those latency to some ip/websites . Can heartbeat monitor ip/website via specific network interface ? or run some scripts (for change gateway ) after complete a round of… --- ## [Write logs from wordpress in the elasticsearch](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587 "2022-06-20T09:22:37Z")
Hi, If possible- I ave a question: I have a elk cluster. this is my mysql deployment: apiVersion: apps/v1 kind: Deployment metadata: name: mysql namespace: database labels: app: mysql spec: replicas: 1 … --- ## [In docker(docker-compose), I got some errors](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489)
**Author:** [@StartMenu](https://discuss.elastic.co/u/StartMenu)\ **Replies:** 2\ **Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489 "2022-06-20T09:22:36Z")
I used this files to up dockers I changed log4j2.properties file for less logs to watch clearly : rootLogger.level = info to rootLogger.level = warn then ,mounted it into docker container: -./Elasticsearch/config… --- ## [Vulnerability CVE-2020-13956 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 4\ **Last updated:** [June 20, 2022, 9:11am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854 "2022-06-20T09:11:20Z")
Hello, vulnerability CVE-2020-13956 is reported on the httpclient-4.5.10.jar libraries of the reindex module of Elasticsearch (modules/reindex/httpclient-4.5.10.jar). Are there any official statements regarding if this… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=895) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=897)