# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1204

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1205

---

## [Elasticsearch "data": { "type": "float" } returns incorrect results](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335)

<div class="topic-metadata">

**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335 "2022-03-24T08:54:11Z")

</div>

I have a query like below and when date\_partition field is "type" =\> "float" it returns 20220109, 20220108, 20220107 query. When field "type" =\> "long", it only returns the 20220109 query. Which is what I want. Each qu…

---

## [How to aggregate based on another aggregation?](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 5\
**Last updated:** [March 24, 2022, 8:34am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947 "2022-03-24T08:34:48Z")

</div>

Hi folks, I have a certain amount of user transactions per day. My final goal is to have the average of daily sums of transactions per week. What I have done so far is the first step (the easy one). I created a chart …

---

## [Question regarding ES upgrade to 8.1](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 8:31am UTC](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372 "2022-03-24T08:31:10Z")

</div>

We are using ES version 6.8.12 and would want to upgrade to ES version 8.1. As per our architecture we can have Elasticsearch deployed on either one node or two nodes. Since 8.1 doesn't allow forming a cluster with two…

---

## [Setting JVM Heap size for Elasticsearch container](https://discuss.elastic.co/t/setting-jvm-heap-size-for-elasticsearch-container/300374)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 8:21am UTC](https://discuss.elastic.co/t/setting-jvm-heap-size-for-elasticsearch-container/300374 "2022-03-24T08:21:37Z")

</div>

I recently ran into an error where my cluster would turn red due to exceeding the maximum allocated heap. Once it returned back to below the threshold, I saw that by default, only 512mb was allocated. name id node.rol…

---

## [Snapshot Policy Change not Deleting Old Snapshots](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 5\
**Last updated:** [March 24, 2022, 8:17am UTC](https://discuss.elastic.co/t/snapshot-policy-change-not-deleting-old-snapshots/300531 "2022-03-24T08:17:42Z")

</div>

Elastic 7.6.2 We changed our snapshot policy to only keep max 5 snapshots (down from 14). Nothing happened. We ran the snapshot (from Kibana) and a new snapshot was generated. Nothing was deleted and no errors were show…

---

## [Build IndexRequest with elastic in 8.1.0](https://discuss.elastic.co/t/build-indexrequest-with-elastic-in-8-1-0/300146)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 3\
**Last updated:** [March 24, 2022, 8:09am UTC](https://discuss.elastic.co/t/build-indexrequest-with-elastic-in-8-1-0/300146 "2022-03-24T08:09:01Z")

</div>

Hi, I am migrating from HLRC to Elasticsearch Java API Client. I need to transform below code private IndexRequest buildIndex(String indexName, CacheObject cacheObject) { IndexRequest indexRequest = new IndexReq…

---

## [Error : java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448)

<div class="topic-metadata">

**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 7:40am UTC](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448 "2022-03-24T07:40:27Z")

</div>

We are getting this error java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer on server. Application is working fine on local without any exception. We are using java 11 + Hibernate Search 6 + E…

---

## [Kibana 8.0 is not starting up- it says server not ready .. Looking at the logs it says Fatal Error unable to complete Saved Objects migrations](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526)

<div class="topic-metadata">

**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\
**Replies:** 1\
**Last updated:** [March 24, 2022, 7:22am UTC](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526 "2022-03-24T07:22:30Z")

</div>

\[2022-03-24T07:14:44.988+00:00\]\[INFO \]\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations... \[2022-03-24T07:14:44.990+00:00\]\[INFO \]\[savedobjec…

---

## [The provided corpus does not match any of the corpora](https://discuss.elastic.co/t/the-provided-corpus-does-not-match-any-of-the-corpora/300385)

<div class="topic-metadata">

**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\
**Replies:** 3\
**Last updated:** [March 24, 2022, 6:48am UTC](https://discuss.elastic.co/t/the-provided-corpus-does-not-match-any-of-the-corpora/300385 "2022-03-24T06:48:51Z")

</div>

I've defined one corpus in my track, and when I run the track, I get the message RallyAssertionError: The provided corpus \['tag-data'\] does not match any of the corpora \['tag-data'\]. This happens whether or not I explic…

---

## [Logstash set up issue](https://discuss.elastic.co/t/logstash-set-up-issue/300160)

<div class="topic-metadata">

**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\
**Replies:** 4\
**Last updated:** [March 24, 2022, 6:06am UTC](https://discuss.elastic.co/t/logstash-set-up-issue/300160 "2022-03-24T06:06:33Z")

</div>

Hello, I am struggling with my logstash set up, which doesn't seem to be connected to the ELK stack. I cannot see Logstash under Stack Monitoring: However, I can see my custom log data which is ingested using logst…

---

## [Can max document size for Json plugin be increased? Seems to be 32768 now](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227)

<div class="topic-metadata">

**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\
**Replies:** 2\
**Last updated:** [March 23, 2022, 8:44pm UTC](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227 "2022-03-23T20:44:26Z")

</div>

When using a Json filter in a logstash pipeline, I run into a size problem. I get an error indicating a max size of 32769 (2^15): :exception=\>#\<LogStash::Json::ParserError: Unexpected end-of-input in VALUE\_STRING at \[S…

---

## [Only one of dozens of log indexes won't rollover: "source alias does not exist"](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 5\
**Last updated:** [March 23, 2022, 7:52pm UTC](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673 "2022-03-23T19:52:23Z")

</div>

ES: 6.8.13 NEST 6.8.6 We have a number of indexes for which we have a programmatic process that checks rollover criteria (ie. max age, max size, etc.) every night. They all have essentially identical template rules, e…

---

## [How to add Script Params and Language using SortDescriptor in ElasticSearch Nest client](https://discuss.elastic.co/t/how-to-add-script-params-and-language-using-sortdescriptor-in-elasticsearch-nest-client/300498)

<div class="topic-metadata">

**Author:** [@aashini](https://discuss.elastic.co/u/aashini)\
**Replies:** 0\
**Last updated:** [March 23, 2022, 7:51pm UTC](https://discuss.elastic.co/t/how-to-add-script-params-and-language-using-sortdescriptor-in-elasticsearch-nest-client/300498 "2022-03-23T19:51:13Z")

</div>

I am using Elasticsearch Nest client in .Net application and looking for a syntax to add Params and Language in script based sorting with Sort Descriptor. Below is the code with SortDescriptor : string shortestDistance…

---

## [Snapshot repository - Unable to refresh Azure sas\_token](https://discuss.elastic.co/t/snapshot-repository-unable-to-refresh-azure-sas-token/300380)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 6:19pm UTC](https://discuss.elastic.co/t/snapshot-repository-unable-to-refresh-azure-sas-token/300380 "2022-03-23T18:19:10Z")

</div>

Hi all, Our test cluster (3 nodes, version 8.1.1, on RHEL 7.9 VMs) shows "Some repositories contain errors" message. Using the option "Verify repository" I got "Not connected" and details shows that Azure sas\_token has…

---

## [Logstash not sending logs to Elasticsearch](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037)

<div class="topic-metadata">

**Author:** [@wallace84](https://discuss.elastic.co/u/wallace84)\
**Replies:** 11\
**Last updated:** [March 23, 2022, 5:46pm UTC](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037 "2022-03-23T17:46:32Z")

</div>

Hello, I have been trying for some time to send a simple log to Elasticsearch and after trying a very simple example, the logs are not been sent to Elasticsearch from logstash. Services: In same server for this test O…

---

## [Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435)

<div class="topic-metadata">

**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\
**Replies:** 3\
**Last updated:** [March 23, 2022, 5:16pm UTC](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435 "2022-03-23T17:16:57Z")

</div>

Hi, There are some Vulnerabilities in Elasticsearch 7.16.3 version. Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli. While installing Elasticsearch all of t…

---

## [Chorus, the reference implementation for e-commerce, now supports Elasticsearch!](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489)

<div class="topic-metadata">

**Author:** [@flaxsearch](https://discuss.elastic.co/u/flaxsearch)\
**Replies:** 0\
**Last updated:** [March 23, 2022, 5:11pm UTC](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489 "2022-03-23T17:11:22Z")

</div>

Hi all, We've been working hard to improve support for Elasticsearch as part of the Chorus stack, an open source reference implementation for tunable, measurable e-commerce search. My colleague Daniel Wrigley has writte…

---

## [Upgrade assistant - node.attributes.data](https://discuss.elastic.co/t/upgrade-assistant-node-attributes-data/300488)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 0\
**Last updated:** [March 23, 2022, 4:55pm UTC](https://discuss.elastic.co/t/upgrade-assistant-node-attributes-data/300488 "2022-03-23T16:55:59Z")

</div>

Im looking at the warnings for Elasticsearch depreciation in Elastic Cloud and its warning that i have servers that have node.attributes.data set I am using the new tiering, ive not been able to see how or where this is…

---

## [Need to add doc to an index with default values](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326)

<div class="topic-metadata">

**Author:** [@Anika\_Mehrotra](https://discuss.elastic.co/u/Anika_Mehrotra)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 4:42pm UTC](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326 "2022-03-23T16:42:06Z")

</div>

Suppose i have an index with 2 fields as firstname and lastname both having default values as "test" Now if I insert a new record in that index POST my-index-000001/general { "firstname": "harry", "lastname": "pott…

---

## [Filter, sum and nested fields](https://discuss.elastic.co/t/filter-sum-and-nested-fields/300486)

<div class="topic-metadata">

**Author:** [@Martin.Br](https://discuss.elastic.co/u/Martin.Br)\
**Replies:** 0\
**Last updated:** [March 23, 2022, 4:11pm UTC](https://discuss.elastic.co/t/filter-sum-and-nested-fields/300486 "2022-03-23T16:11:09Z")

</div>

Hello, I am facing some difficulties to execute a search query with filter, sum and nested fields. I wish to search within my data all the documents containing positions with assetId 42 and 43. Moreover, I want to fil…

---

## [Show only duplicate documents data table](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 4:05pm UTC](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328 "2022-03-23T16:05:07Z")

</div>

Hi all, I'm trying to show only duplicate data table for a set of documents. So I want to show count of records \> 1. But I can't filter to show metric as count \> 1. How to show only duplicates data table with fields? …

---

## [Revit Event / Timestamp field problem](https://discuss.elastic.co/t/revit-event-timestamp-field-problem/300341)

<div class="topic-metadata">

**Author:** [@bailarch](https://discuss.elastic.co/u/bailarch)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 3:57pm UTC](https://discuss.elastic.co/t/revit-event-timestamp-field-problem/300341 "2022-03-23T15:57:15Z")

</div>

Hello, Not sure if anyone is familiar with Revit but I have a problem with '@timestamp' field from Revit Event. Basically I want to see all the projects that have been opened during past 7 days and I did set my Dev too…

---

## [Kibana cannot authenticate with Elasticsearch, stuck in "Kibana server is not ready yet" phase](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397)

<div class="topic-metadata">

**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\
**Replies:** 2\
**Last updated:** [March 23, 2022, 3:27pm UTC](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397 "2022-03-23T15:27:43Z")

</div>

Quick rundown of what led to my current issue: Index filled EC2 completely, manually deleted nodes, no longer able to start Elasticsearch After wiping the node (i.e Deleting everything inside the /var/lib/elasticsearch …

---

## [Warning 'Relying on default value of \`pipeline.ecs\_compatibility' after updating to logstash 7.16.1](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018)

<div class="topic-metadata">

**Author:** [@d71247](https://discuss.elastic.co/u/d71247)\
**Replies:** 22\
**Last updated:** [March 23, 2022, 2:52pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018 "2022-03-23T14:52:31Z")

</div>

Hello, I just updated my Logstash to 7.16.1... but I noticed errors in my conf when starting Logstash.\* the same conf of Logstash works well in version 7.9.1 How do to fix this warning ? Anyone else experienced this? …

---

## [Where did ParseField and XContentParser go?](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348)

<div class="topic-metadata">

**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\
**Replies:** 1\
**Last updated:** [March 23, 2022, 3:05pm UTC](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348 "2022-03-23T15:05:13Z")

</div>

I'm trying to change an ES plugin that worked with ES v7.3.0 to work with ES v7.16.3, but it seems like common.ParseField was removed in ES v7.14.0 and common.xcontent.XContentBuilder & common.xcontent.XContentParser wer…

---

## [Metricbeat MSSQL module has a really high batch req/sec number](https://discuss.elastic.co/t/metricbeat-mssql-module-has-a-really-high-batch-req-sec-number/297859)

<div class="topic-metadata">

**Author:** [@ohs](https://discuss.elastic.co/u/ohs)\
**Replies:** 8\
**Last updated:** [March 23, 2022, 3:01pm UTC](https://discuss.elastic.co/t/metricbeat-mssql-module-has-a-really-high-batch-req-sec-number/297859 "2022-03-23T15:01:59Z")

</div>

I have a question about metricbeat mssql module. The server I use it on has an on average batch req/sec like 5 and max about 60, but the value I receive in elastic and see in Kibana is over 19 millions. I can't figure ou…

---

## [Parsing array of elements](https://discuss.elastic.co/t/parsing-array-of-elements/300462)

<div class="topic-metadata">

**Author:** [@eliz](https://discuss.elastic.co/u/eliz)\
**Replies:** 3\
**Last updated:** [March 23, 2022, 3:01pm UTC](https://discuss.elastic.co/t/parsing-array-of-elements/300462 "2022-03-23T15:01:01Z")

</div>

Hello, I am looking for a way to go from this message { "parent\_field": \[ "Key 1:red", "Key 1:blue", "Key 2:this is green" \] } to: { "key#1": \["red", "blue"\], "key#2": "this is green" } Tried …

---

## [Building a cluster for the first time](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 9\
**Last updated:** [March 23, 2022, 2:54pm UTC](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322 "2022-03-23T14:54:01Z")

</div>

Hi All, So i'm trying to build a cluster for the first time, I've always been working in standalone mode, but i now need to step up into a cluster. So I have 3 instances setup and all are going to be master eligible. I…

---

## [Documentation for Fleet API usage](https://discuss.elastic.co/t/documentation-for-fleet-api-usage/300390)

<div class="topic-metadata">

**Author:** [@trudyc](https://discuss.elastic.co/u/trudyc)\
**Replies:** 2\
**Last updated:** [March 23, 2022, 2:53pm UTC](https://discuss.elastic.co/t/documentation-for-fleet-api-usage/300390 "2022-03-23T14:53:46Z")

</div>

Hello all, I am looking for better documentation about using the Fleet API in Elastic/Kibana 7.17. I have looked at https://github.com/elastic/kibana/blob/7.17/x-pack/plugins/fleet/common/openapi/README.md https://pe…

---

## [Snapshot Repository with Minio](https://discuss.elastic.co/t/snapshot-repository-with-minio/300475)

<div class="topic-metadata">

**Author:** [@peterON](https://discuss.elastic.co/u/peterON)\
**Replies:** 0\
**Last updated:** [March 23, 2022, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-repository-with-minio/300475 "2022-03-23T14:51:58Z")

</div>

Hey, I have tried multiple days to get elastic and Minio to talk to each other. For Dev purpose I currently run a docker-compose with Elasticsearch 8.1.1 and the latest Minio. The docker-compose.yml is as basic as it get…

[Previous page](https://discuss.elastic.co/latest.md?page=1203)

[Next page](https://discuss.elastic.co/latest.md?page=1205)
