# Latest **URL:** https://discuss.elastic.co/latest.md?page=1197 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1198 --- ## [Elasticsearch index mapping?](https://discuss.elastic.co/t/elasticsearch-index-mapping/300926)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping/300926 "2022-03-29T09:27:34Z")
i'm beginner of Elasticsearch i doing now a simple project for my training purpose , my project is user login system with fileuploading and search option, user can upload multiple textfiles on his account there is no l… --- ## [Finding document similarity by distance and visualising clusters](https://discuss.elastic.co/t/finding-document-similarity-by-distance-and-visualising-clusters/300939)
**Author:** [@sandydesu](https://discuss.elastic.co/u/sandydesu)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 9:24am UTC](https://discuss.elastic.co/t/finding-document-similarity-by-distance-and-visualising-clusters/300939 "2022-03-29T09:24:06Z")
I'm new to the stack and learning as I go along so any help would be much appreciated. I have 9.5 million records of people, with formatted\_name, formatted\_address and formatted\_birthday as indexable fields in Elasticse… --- ## [Combining Documents for test result comparison in Kibana](https://discuss.elastic.co/t/combining-documents-for-test-result-comparison-in-kibana/300829)
**Author:** [@JBufton](https://discuss.elastic.co/u/JBufton)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:23am UTC](https://discuss.elastic.co/t/combining-documents-for-test-result-comparison-in-kibana/300829 "2022-03-29T09:23:48Z")
Hi, I'm new here so I apologise if this turns out to be a noob question. I have a large set of documents in elastic containing test result data including timestamps, runtimes, results, branch tests were ran on and test r… --- ## [Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/300480)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:21am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/300480 "2022-03-29T09:21:30Z")
Am I missing something? I am trying to send in a basic tryout some logs from a Server with Filebeat, via Logstash to Elasticsearch. I am getting the data from Beats in Logstash. But Logstash is giving me following messag… --- ## [Logstash "Marking url as dead" issue and http client logging log4j2](https://discuss.elastic.co/t/logstash-marking-url-as-dead-issue-and-http-client-logging-log4j2/300937)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-marking-url-as-dead-issue-and-http-client-logging-log4j2/300937 "2022-03-29T09:10:52Z")
Hello there, We are experiencing "marking url as dead" problem on our logstash machines, I know this is a known issue and there are many solutions people are discussing. I tried some of them they are not the solution t… --- ## [Concurrent IndexSearch clarification](https://discuss.elastic.co/t/concurrent-indexsearch-clarification/300073)
**Author:** [@dlants](https://discuss.elastic.co/u/dlants)\ **Replies:** 0\ **Last updated:** [March 18, 2022, 4:51pm UTC](https://discuss.elastic.co/t/concurrent-indexsearch-clarification/300073 "2022-03-18T16:51:04Z")
This blog post describes concurrent query execution in Lucene (at the IndexSearcher level), and claims: Concurrent query execution is a surprisingly little known sleeper feature in Lucene, since it is not yet exposed i… --- ## [ES \[Get by document ID\] vs \[Search by terms\] returns different results](https://discuss.elastic.co/t/es-get-by-document-id-vs-search-by-terms-returns-different-results/300700)
**Author:** [@T-Muller-25](https://discuss.elastic.co/u/T-Muller-25)\ **Replies:** 0\ **Last updated:** [March 25, 2022, 1:26pm UTC](https://discuss.elastic.co/t/es-get-by-document-id-vs-search-by-terms-returns-different-results/300700 "2022-03-25T13:26:50Z")
Hi, From my understanding, there is no difference between the get by document id and search by terms but the performance. However, I just encountered a very strange issue. when I use: GET /my\_index/\_doc/1 --\> it retur… --- ## [Drawing a time based graph](https://discuss.elastic.co/t/drawing-a-time-based-graph/300382)
**Author:** [@George915](https://discuss.elastic.co/u/George915)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 8:57am UTC](https://discuss.elastic.co/t/drawing-a-time-based-graph/300382 "2022-03-29T08:57:24Z")
Hi ELK community, newbie ELK user here. I have a time based document as shown below and I was able to insert it in my Elasticsearch. I set up the timestamps field as a date date type. Timestamps are epoch time. I want t… --- ## [I am trying to perform aggregation on top aggregations results in kibana visualization tab. Can anyone please help me how to achieve this](https://discuss.elastic.co/t/i-am-trying-to-perform-aggregation-on-top-aggregations-results-in-kibana-visualization-tab-can-anyone-please-help-me-how-to-achieve-this/300795)
**Author:** [@Sumithra\_Thammineni](https://discuss.elastic.co/u/Sumithra_Thammineni)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 8:51am UTC](https://discuss.elastic.co/t/i-am-trying-to-perform-aggregation-on-top-aggregations-results-in-kibana-visualization-tab-can-anyone-please-help-me-how-to-achieve-this/300795 "2022-03-29T08:51:34Z")
My use case: Group the data by "a" attribute and "b" attribute. The below is the result i am able to figure out with kibana a attribute b attribute Count A1 x 1 A1 y 1 B1 z 2 Problem: Again i want to grou… --- ## [Kibana 8.0.1: Can't set logAlias on the configuration file](https://discuss.elastic.co/t/kibana-8-0-1-cant-set-logalias-on-the-configuration-file/300541)
**Author:** [@panos-indev](https://discuss.elastic.co/u/panos-indev)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 8:50am UTC](https://discuss.elastic.co/t/kibana-8-0-1-cant-set-logalias-on-the-configuration-file/300541 "2022-03-29T08:50:45Z")
Hello, I've been trying to configure logAlias to my config file and I get the following message: \[xpack.infra\].sources.default.logAlias\]: definition for this key is missing I used the 2 below configurations on kibana.… --- ## [I want to setup pattern match alerts in kibana and notify via nagios](https://discuss.elastic.co/t/i-want-to-setup-pattern-match-alerts-in-kibana-and-notify-via-nagios/300809)
**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 8:23am UTC](https://discuss.elastic.co/t/i-want-to-setup-pattern-match-alerts-in-kibana-and-notify-via-nagios/300809 "2022-03-28T08:23:22Z")
We use ELK for log management and nagios for centralized monitoring. I want to setup pattern match alerts in kibana and notify via nagios. Can you please let me know if this is feasible. --- ## [How to flag errors in APM errors view](https://discuss.elastic.co/t/how-to-flag-errors-in-apm-errors-view/300928)
**Author:** [@StevenMartins](https://discuss.elastic.co/u/StevenMartins)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 8:31am UTC](https://discuss.elastic.co/t/how-to-flag-errors-in-apm-errors-view/300928 "2022-03-29T08:31:50Z")
Hi, The metrics of my app are coming up well : I installed Filebeat and added some modules to make the logs go up : But I don't have anything that comes up in the errors view: Is it possible to see this ty… --- ## [Elasticsearch date range query for range on a date-time field](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759)
**Author:** [@Shaiwal\_Sharma](https://discuss.elastic.co/u/Shaiwal_Sharma)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759 "2022-03-29T08:29:28Z")
I have to get records (training) wherein I have a start\_date, and I have to get all records that have not yet ended. So I don't have an end\_date field, but just the start date, so end\_date is start\_date + 60 days. So wha… --- ## [AND in SQL query is translated to nested bool](https://discuss.elastic.co/t/and-in-sql-query-is-translated-to-nested-bool/300923)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 8:15am UTC](https://discuss.elastic.co/t/and-in-sql-query-is-translated-to-nested-bool/300923 "2022-03-29T08:15:35Z")
Hi, When I translate the following to DSL I see multiple nested bool instead one bool that contains all the conditions. Can I control it? GET \_sql/translate { "query": """ SELECT \* FROM "base" WHERE "Id" = '62… --- ## [How to show all errors with APM](https://discuss.elastic.co/t/how-to-show-all-errors-with-apm/300921)
**Author:** [@StevenMartins](https://discuss.elastic.co/u/StevenMartins)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 8:14am UTC](https://discuss.elastic.co/t/how-to-show-all-errors-with-apm/300921 "2022-03-29T08:14:05Z")
Hi, Having installed the apm I have well my services which go up : I only have the "exceptions" that come up and not all php errors : Equivalent in log file : \[2022-03-28T09:57:47.921767+00:00\] recordMigratio… --- ## [Trying to include tensorflow library in my ES plugin and getting the following error](https://discuss.elastic.co/t/trying-to-include-tensorflow-library-in-my-es-plugin-and-getting-the-following-error/300735)
**Author:** [@ashwin91kumar](https://discuss.elastic.co/u/ashwin91kumar)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 8:13am UTC](https://discuss.elastic.co/t/trying-to-include-tensorflow-library-in-my-es-plugin-and-getting-the-following-error/300735 "2022-03-29T08:13:59Z")
\#8 6.878 -\> Rolled back file:///plugins/plugin.zip #8 6.878 Exception in thread "main" java.lang.IllegalStateException: codebase property already set: codebase.tensorflow-core-api -\> file:/usr/share/elasticsearch/plugins… --- ## [Frequent timeout when using elasticsearch-py 8.1.0](https://discuss.elastic.co/t/frequent-timeout-when-using-elasticsearch-py-8-1-0/300831)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 7:51am UTC](https://discuss.elastic.co/t/frequent-timeout-when-using-elasticsearch-py-8-1-0/300831 "2022-03-29T07:51:23Z")
We have recently upgraded our Elasticsearch to 8.1.0. We have a some Python scripts which perform some searching/computations on data in the Elasticsearch cluster which use elasticsearch-py. Due to systems loads, during… --- ## [First time with grok](https://discuss.elastic.co/t/first-time-with-grok/300867)
**Author:** [@fabek.75](https://discuss.elastic.co/u/fabek.75)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 7:43am UTC](https://discuss.elastic.co/t/first-time-with-grok/300867 "2022-03-29T07:43:10Z")
Hi there. I'm trying to use grok for the first time to parse a line log like this: Mar 15 10:45:13 myapp.com myapp: \[Info\] \<99999999999999\> /path/path1: \[10.255.255.255:99999\] POST /our\_queue/worker/import? 204 In th… --- ## [Java 17 Compatibility](https://discuss.elastic.co/t/java-17-compatibility/300915)
**Author:** [@shivaraj\_eric](https://discuss.elastic.co/u/shivaraj_eric)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 7:16am UTC](https://discuss.elastic.co/t/java-17-compatibility/300915 "2022-03-29T07:16:14Z")
Does latest version of file beat is compatible with java 17?.Need to know on the same compatibility for the following ELK component as well. Logstash --- ## [How to Increase Kibana 8.1 Heap Size Limit?](https://discuss.elastic.co/t/how-to-increase-kibana-8-1-heap-size-limit/300908)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-increase-kibana-8-1-heap-size-limit/300908 "2022-03-29T06:31:34Z")
Hi, Any idea how to increase Kibana Heap Size Limit? Which Node.js configuration file should I change? My current default Kibana Heap Size is 2 GB only, plan to increase it to 4GB --- ## [Why Elasticsearch new version appending -000001 for index name](https://discuss.elastic.co/t/why-elasticsearch-new-version-appending-000001-for-index-name/300808)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 6\ **Last updated:** [March 29, 2022, 5:37am UTC](https://discuss.elastic.co/t/why-elasticsearch-new-version-appending-000001-for-index-name/300808 "2022-03-29T05:37:49Z")
We are getting index name appended with -000001 for index name. Just wanted to understand why Elasticsearch appending this value for index name in elastcsearch cluster 7.10? What is the significance of it? --- ## [ELK Product Upgrade](https://discuss.elastic.co/t/elk-product-upgrade/300905)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 4:46am UTC](https://discuss.elastic.co/t/elk-product-upgrade/300905 "2022-03-29T04:46:03Z")
Hi We are using Out of the box Logstash, Elasticsearch and customized Kibana. All are in 7.10.2 . We are in process in upgrade. In case upgrade delayed till May 2022 which will be EOL for 7.10.2, do we have any function… --- ## [Changue Colors on Kibana 7.15](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652)
**Author:** [@mvasqueznr](https://discuss.elastic.co/u/mvasqueznr)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 4:30am UTC](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652 "2022-03-29T04:30:27Z")
Hi. I'm follow the guide to personalize kibana from ManuelF and with a some changes in the folder structure in 7.15.1 version. The changes are successful. But now, I'm trying to change the color on the header where is … --- ## [Form the syslog\_pri field](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 3:25am UTC](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814 "2022-03-29T03:25:56Z")
I have the following syslog messages - Oct 18 16:11:54 1aen ai\_controller\[419\]: \[16:11:54.479933\] ERROR \[ntp\_client.cpp:113 fetch\_time()\] Can't get NTP response Oct 18 16:11:55 1aen ntpd\[442\]: bind(21) AF\_INET6 fe80… --- ## [Centralized management and monitoring of clusters](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 2:11am UTC](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903 "2022-03-29T02:11:39Z")
Is there a way to manage and monitor various cluster across different Data centers in version 7.x ? Specific need is to manage x-pack users from one location across different clusters. --- ## [Pokémon - match\_phrase fails with edge\_ngram & asciifolding](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901)
**Author:** [@omikron](https://discuss.elastic.co/u/omikron)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:40am UTC](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901 "2022-03-29T01:40:34Z")
Hi, I am having an issue with the match\_phrase query against the field with the edge\_ngram tokenizer and asciifolding filter (Elasticsearch v7.7). The field is: "mainTitle": { "type": "text", "fields": { "autocomp… --- ## [Missing Events in Logstash input SNMP](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900)
**Author:** [@Ygal\_Mizrachi](https://discuss.elastic.co/u/Ygal_Mizrachi)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:39am UTC](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900 "2022-03-29T01:39:27Z")
Hello im trying to get snmp documents but some events are missing and i am looking for help. thanks in advance snmp2.conf input{ snmp { tables =\> \[{ "name" =\> "ifTable" "columns" =\> \[ "1.3.6.1.2.1.2.2.1.1", "1.3.… --- ## [Filebeat timestamp processor no year](https://discuss.elastic.co/t/filebeat-timestamp-processor-no-year/300896)
**Author:** [@kdotson](https://discuss.elastic.co/u/kdotson)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 10:42pm UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-no-year/300896 "2022-03-28T22:42:03Z")
Hello, I am trying to get filebeats to update the @timestamp with the timestamp processor but I think because the log timestamp is missing the year I am having some trouble. example log: Mar 12 07:06:38 asdefg/xx.xx.x… --- ## [Failed to update snapshot in repository](https://discuss.elastic.co/t/failed-to-update-snapshot-in-repository/300879)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 5:06pm UTC](https://discuss.elastic.co/t/failed-to-update-snapshot-in-repository/300879 "2022-03-28T17:06:01Z")
I have a cluster that has 3 masters, 2 hot, 2 warms, 2 colds nodes. I am trying to take a snapshot but I got this error; "type": "snapshot\_exception", "reason": "\[cul-backup:cul-snap-2022.03.28-xxxxxxxxx/xxxxxxxxxx\] f… --- ## [Validating Rollup index](https://discuss.elastic.co/t/validating-rollup-index/300799)
**Author:** [@b-v](https://discuss.elastic.co/u/b-v)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 10:26pm UTC](https://discuss.elastic.co/t/validating-rollup-index/300799 "2022-03-28T22:26:41Z")
How to validate if the rolled up index has all the data from the source index. I have a rollup job scheduled to run everyday. I will be deleting the source index after the rollup schedule is done, I want to know if the r… [Previous page](https://discuss.elastic.co/latest.md?page=1196) [Next page](https://discuss.elastic.co/latest.md?page=1198)