# Latest **URL:** https://discuss.elastic.co/latest.md?page=1461 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1462 --- ## [How to parse a string json type field](https://discuss.elastic.co/t/how-to-parse-a-string-json-type-field/285162)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 2\ **Last updated:** [September 27, 2021, 2:39am UTC](https://discuss.elastic.co/t/how-to-parse-a-string-json-type-field/285162 "2021-09-27T02:39:01Z")
hi, i have a text type filed(index: false) -- detail , how to parse it into a geo\_shape field? { "took" : 23, "timed\_out" : false, "\_shards" : { "total" : 10, "successful" : 10, "skipped" : 0, "fai… --- ## [Elastic for Appointment Availability](https://discuss.elastic.co/t/elastic-for-appointment-availability/285176)
**Author:** [@updev](https://discuss.elastic.co/u/updev)\ **Replies:** 1\ **Last updated:** [September 27, 2021, 1:47am UTC](https://discuss.elastic.co/t/elastic-for-appointment-availability/285176 "2021-09-27T01:47:03Z")
Hi everyone, I'm in the process of evaluating the best technology stack for an appointment booking system, similar to that of Acuity and Calendly. Does anyone have any experience using ES for this sort of thing? Would… --- ## [Does a node can be at the same time cold\_tier and freeze tier?](https://discuss.elastic.co/t/does-a-node-can-be-at-the-same-time-cold-tier-and-freeze-tier/285097)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 3:58pm UTC](https://discuss.elastic.co/t/does-a-node-can-be-at-the-same-time-cold-tier-and-freeze-tier/285097 "2021-09-24T15:58:16Z")
Hello, Until now (v 7.9.1), I use the following ilm policy : Day 1 = hot Day 30 = cold + freeze Day 60 = delete With the recent releases (v 7.14), I noticed the introduction of data tiers, and also a new phase : the… --- ## [Formatting a field as a link to a filtered view on its value](https://discuss.elastic.co/t/formatting-a-field-as-a-link-to-a-filtered-view-on-its-value/284357)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 5\ **Last updated:** [September 27, 2021, 12:12am UTC](https://discuss.elastic.co/t/formatting-a-field-as-a-link-to-a-filtered-view-on-its-value/284357 "2021-09-27T00:12:27Z")
I have a field in my index called "labels" that contains an array of strings that is used as tags for the documents. Is there a way to format this field as a link that when a user click on it in the Discover area it lin… --- ## [It is a good idea to implement Ha Proxy in front of Elasticsearch 7?](https://discuss.elastic.co/t/it-is-a-good-idea-to-implement-ha-proxy-in-front-of-elasticsearch-7/285133)
**Author:** [@jeanpl](https://discuss.elastic.co/u/jeanpl)\ **Replies:** 1\ **Last updated:** [September 27, 2021, 12:03am UTC](https://discuss.elastic.co/t/it-is-a-good-idea-to-implement-ha-proxy-in-front-of-elasticsearch-7/285133 "2021-09-27T00:03:36Z")
From my understanding, adding HaProxy on top of Elasticsearch might bring some High Availability, and Load Balancing. Moreover, it is also possible to communicate a single entry point URL (the Ha Proxy host endpoint), fo… --- ## [Curl call for PUT and GET query on multi-node es cluster](https://discuss.elastic.co/t/curl-call-for-put-and-get-query-on-multi-node-es-cluster/284942)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 7\ **Last updated:** [September 27, 2021, 12:01am UTC](https://discuss.elastic.co/t/curl-call-for-put-and-get-query-on-multi-node-es-cluster/284942 "2021-09-27T00:01:40Z")
Hi Team, I would like to know on a multi-node Elasticsearch cluster (3 nodes), to which node we can send PUT curl call (say for creating ILM policy) or to fetch some results (by running query)? In a single node cluste… --- ## [Filebeat module Juniper SRX](https://discuss.elastic.co/t/filebeat-module-juniper-srx/285172)
**Author:** [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\ **Replies:** 0\ **Last updated:** [September 26, 2021, 4:08pm UTC](https://discuss.elastic.co/t/filebeat-module-juniper-srx/285172 "2021-09-26T16:08:09Z")
Hi. guys For using filebeat module juniper what scenario do I need ? 1- should I send all logs to independent server that has filebaet installed? HOW ? 2- how can I use filebeat module Juniper ? 3-. I have two… --- ## [Logstash fails on startup](https://discuss.elastic.co/t/logstash-fails-on-startup/285170)
**Author:** [@hazenvs](https://discuss.elastic.co/u/hazenvs)\ **Replies:** 2\ **Last updated:** [September 26, 2021, 7:36pm UTC](https://discuss.elastic.co/t/logstash-fails-on-startup/285170 "2021-09-26T19:36:16Z")
So I've narrowed this issue down to this line in my example.conf (/etc/logstash/conf.d/example.conf) input { tcp { port =\> 5002 type =\> syslog } udp { port =\> 5002 type =\> syslog } beats { … --- ## [Weird rebalancing strategy](https://discuss.elastic.co/t/weird-rebalancing-strategy/285034)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 3\ **Last updated:** [September 25, 2021, 9:25pm UTC](https://discuss.elastic.co/t/weird-rebalancing-strategy/285034 "2021-09-25T21:25:17Z")
I am seeing several active recovery tasks where 1 shard is moving from Node A -\> Node B, but at the same time for a different shard, it's moving from Node C to Node A. Wouldn't this cause rebalancing to never end? Why… --- ## [Elasticsearch setup did not complete normally, please review previously logged errors {:message=\>"No Available connections", :exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError}](https://discuss.elastic.co/t/elasticsearch-setup-did-not-complete-normally-please-review-previously-logged-errors-message-no-available-connections-exception-logstash-noconnectionavailableerror/285167)
**Author:** [@Bzpo](https://discuss.elastic.co/u/Bzpo)\ **Replies:** 3\ **Last updated:** [September 26, 2021, 6:45pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-did-not-complete-normally-please-review-previously-logged-errors-message-no-available-connections-exception-logstash-noconnectionavailableerror/285167 "2021-09-26T18:45:50Z")
Hello, I am running Logstash and Elasticsearch both in docker. Elasticsearch takes some time to set up after very first build. Logstash at some moment starts to log errors like the one in topic title and even if Elastics… --- ## [Attempting to start Fleet Server fails](https://discuss.elastic.co/t/attempting-to-start-fleet-server-fails/282859)
**Author:** [@Aiden\_Mitchell](https://discuss.elastic.co/u/Aiden_Mitchell)\ **Replies:** 5\ **Last updated:** [September 26, 2021, 6:13pm UTC](https://discuss.elastic.co/t/attempting-to-start-fleet-server-fails/282859 "2021-09-26T18:13:03Z")
Hi there! I'm trying to install Fleet Server using the Quick Start deployment mode on an Ubuntu 20.04 instance and it's failing: 2021-08-30T22:47:54.988Z INFO cmd/enroll\_cmd.go:354 Generating self-signed ce… --- ## [Create index template with K8S CRD](https://discuss.elastic.co/t/create-index-template-with-k8s-crd/285143)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [September 26, 2021, 6:01pm UTC](https://discuss.elastic.co/t/create-index-template-with-k8s-crd/285143 "2021-09-26T18:01:50Z")
Is there a CRD to create an index template? I know rabbitMQ operator allow to declare queue like this: apiVersion: rabbitmq.com/v1beta1 kind: Queue metadata: name: test namespace: rabbitmq-system spec: name: test… --- ## [Elastic platinum + gold subscription](https://discuss.elastic.co/t/elastic-platinum-gold-subscription/285059)
**Author:** [@Faycal\_B](https://discuss.elastic.co/u/Faycal_B)\ **Replies:** 3\ **Last updated:** [September 26, 2021, 5:53pm UTC](https://discuss.elastic.co/t/elastic-platinum-gold-subscription/285059 "2021-09-26T17:53:15Z")
Hi, Is it possible to have multiple clusters, platinum license cluster, and free gold license clusters in the same solution destined to be used as a SaaS (commercial) ? with the recent license changes, I am not sure if… --- ## [Runtime Fields](https://discuss.elastic.co/t/runtime-fields/285142)
**Author:** [@Swapnadeep\_Mondal](https://discuss.elastic.co/u/Swapnadeep_Mondal)\ **Replies:** 4\ **Last updated:** [September 26, 2021, 4:27pm UTC](https://discuss.elastic.co/t/runtime-fields/285142 "2021-09-26T16:27:01Z")
According to documentation runtime fields are not indexed. Now if one field is not indexed then it will not searchable or queryable. but then I query on a runtime field it returned me results instead showing "Cannot sear… --- ## [Filebeat unable to connect logstash server](https://discuss.elastic.co/t/filebeat-unable-to-connect-logstash-server/285137)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 23\ **Last updated:** [September 26, 2021, 12:43pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-connect-logstash-server/285137 "2021-09-26T12:43:42Z")
Hi Team, I have installed filebeat on a server which is having IP as 192.168.x.x and filebeat is trying to send events to two logstash servers which are having IPs as 10.20.x.x. Currently i see filebeat service is fai… --- ## [Geoip error while deploying elasticsearch](https://discuss.elastic.co/t/geoip-error-while-deploying-elasticsearch/284080)
**Author:** [@ssen85](https://discuss.elastic.co/u/ssen85)\ **Replies:** 10\ **Last updated:** [September 26, 2021, 6:34am UTC](https://discuss.elastic.co/t/geoip-error-while-deploying-elasticsearch/284080 "2021-09-26T06:34:04Z")
Hi, I'm trying to start a single node elasticsearch cluster using Docker. I get the following error in the startup logs "type": "server", "timestamp": "2021-09-13T13:41:29,255Z", "level": "ERROR", "component": "o.e.i.… --- ## [GET \_doc request not working as expected with routing aliases](https://discuss.elastic.co/t/get-doc-request-not-working-as-expected-with-routing-aliases/285039)
**Author:** [@vineethsuhas](https://discuss.elastic.co/u/vineethsuhas)\ **Replies:** 3\ **Last updated:** [September 26, 2021, 3:55am UTC](https://discuss.elastic.co/t/get-doc-request-not-working-as-expected-with-routing-aliases/285039 "2021-09-26T03:55:28Z")
Hi, Here is the scenario: 1. We created an index (routing\_test) =\> (with 2 Shards) 2. We created a couple of aliases on that index (routing\_test\_100 and routing\_test\_200) using: PUT routing\_test/\_alias/routing\_test\_100… --- ## [Elasticsearch cluster architecture with 6 nodes](https://discuss.elastic.co/t/elasticsearch-cluster-architecture-with-6-nodes/285147)
**Author:** [@dooger21](https://discuss.elastic.co/u/dooger21)\ **Replies:** 1\ **Last updated:** [September 26, 2021, 3:43am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-architecture-with-6-nodes/285147 "2021-09-26T03:43:58Z")
Hi everyone, Please I need your recommendations regarding the following architectures for a 6-node Elasticsearch cluster, based on the following characteristics: I have 2 zones (zn1, zn2) I have 3 nodes or servers in … --- ## [API keys not enabled in Elasticsearch Contact your system administrator and refer to the docs(opens in a new tab or window) to enable API keys](https://discuss.elastic.co/t/api-keys-not-enabled-in-elasticsearch-contact-your-system-administrator-and-refer-to-the-docs-opens-in-a-new-tab-or-window-to-enable-api-keys/285043)
**Author:** [@savan820](https://discuss.elastic.co/u/savan820)\ **Replies:** 5\ **Last updated:** [September 25, 2021, 8:43pm UTC](https://discuss.elastic.co/t/api-keys-not-enabled-in-elasticsearch-contact-your-system-administrator-and-refer-to-the-docs-opens-in-a-new-tab-or-window-to-enable-api-keys/285043 "2021-09-25T20:43:51Z")
API keys not enabled in Elasticsearch Contact your system administrator to enable API keys. how to resolve this? --- ## [Obtaining each field score in the same document](https://discuss.elastic.co/t/obtaining-each-field-score-in-the-same-document/285132)
**Author:** [@ahmadnabil](https://discuss.elastic.co/u/ahmadnabil)\ **Replies:** 0\ **Last updated:** [September 25, 2021, 12:22pm UTC](https://discuss.elastic.co/t/obtaining-each-field-score-in-the-same-document/285132 "2021-09-25T12:22:22Z")
Assuming I have a document with three fields: name, company, email each one mapped with edge-ngram { "name": "John", "company": "John's company", "email": "johndoe@gmail.com" } When searching for "john" I want … --- ## [How to Ingest data into Elasticsearch with URL Callback?](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003)
**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\ **Replies:** 4\ **Last updated:** [September 25, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003 "2021-09-25T12:10:33Z")
Hello, thanks for your great community I want to logging some data from some mobile app attribution service (such as Adjust or Appsflyer) into Elasticsearch the admin panel of attribution service allow me to set an url… --- ## [Terms query without sort](https://discuss.elastic.co/t/terms-query-without-sort/285126)
**Author:** [@sathiez](https://discuss.elastic.co/u/sathiez)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 7:54am UTC](https://discuss.elastic.co/t/terms-query-without-sort/285126 "2021-09-25T07:54:52Z")
My document: { "\_index": "comb\_index", "\_type": "\_doc", "\_id": "i\_ZFO3sB\_48g2JrGjt9P", "\_version": 2, "\_seq\_no": 5057859, "\_primary\_term": 1, "found": true, "\_source": { "row": "54,9658", "value": 1481985587… --- ## [Issue parsing db2diag log using grok filter](https://discuss.elastic.co/t/issue-parsing-db2diag-log-using-grok-filter/281957)
**Author:** [@Atta](https://discuss.elastic.co/u/Atta)\ **Replies:** 3\ **Last updated:** [August 28, 2021, 2:13pm UTC](https://discuss.elastic.co/t/issue-parsing-db2diag-log-using-grok-filter/281957 "2021-08-28T14:13:09Z")
Hi all, I am new in ELK solution and currently I am working on Logstash -\> Elasticsearch -\> Kibana. I need to parse db2diag.log. I am using grok filter for this. The problem is when I use grok debugger website everythi… --- ## [Error with elasricsearch](https://discuss.elastic.co/t/error-with-elasricsearch/285113)
**Author:** [@ahaashoor](https://discuss.elastic.co/u/ahaashoor)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 6:16am UTC](https://discuss.elastic.co/t/error-with-elasricsearch/285113 "2021-09-25T06:16:42Z")
i run this line sudo -i service elasticsearch start i got this error Job for elasticsearch.service failed because a fatal signal was delivered to the control process. See "systemctl status elasticsearch.service" and "… --- ## [I cannot login Kibana](https://discuss.elastic.co/t/i-cannot-login-kibana/285110)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 3:19am UTC](https://discuss.elastic.co/t/i-cannot-login-kibana/285110 "2021-09-25T03:19:26Z")
On the kibana https://127.0.0.1:5601 page, I log in by username elastic and password, but I got an error: Username or password is incorrect. Please try again. Http response: {"statusCode":401,"error":"Unauthorized","mes… --- ## [Nested fields Visualization - Examples](https://discuss.elastic.co/t/nested-fields-visualization-examples/284500)
**Author:** [@Vishal\_Patil](https://discuss.elastic.co/u/Vishal_Patil)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 9:14pm UTC](https://discuss.elastic.co/t/nested-fields-visualization-examples/284500 "2021-09-24T21:14:08Z")
Can someone please point me to some examples of Kibana visualizations utilized nested fields in elasticsearch documents ? --- ## [(Watcher) send emails separately via a single alert](https://discuss.elastic.co/t/watcher-send-emails-separately-via-a-single-alert/284113)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 3\ **Last updated:** [September 24, 2021, 8:44pm UTC](https://discuss.elastic.co/t/watcher-send-emails-separately-via-a-single-alert/284113 "2021-09-24T20:44:32Z")
is there any way the emails are sent separately for each alert notification in the watcher? as we received several alerts on our team, we preferred that they come separately. --- ## [Kibana Table Visualization of documents with nested array of JSON](https://discuss.elastic.co/t/kibana-table-visualization-of-documents-with-nested-array-of-json/284740)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 5\ **Last updated:** [September 24, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-table-visualization-of-documents-with-nested-array-of-json/284740 "2021-09-24T20:42:13Z")
Hi, I have the following json documents stored in Elasticsearch. It is a json with a nested array with json items: { "took": 40, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "faile… --- ## [What is the definition of Client Requests in Stack Monitoring?](https://discuss.elastic.co/t/what-is-the-definition-of-client-requests-in-stack-monitoring/284538)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 7:31pm UTC](https://discuss.elastic.co/t/what-is-the-definition-of-client-requests-in-stack-monitoring/284538 "2021-09-24T19:31:40Z")
Hello. Kibana metrics has item called Client Requests . Tooltip describes as below but I would like to know more in depth. From UX perspective, is it per elasticsearch query ? Total number client requests received… --- ## [How to add custom Logo's and Icons in Elastic cloud platform](https://discuss.elastic.co/t/how-to-add-custom-logos-and-icons-in-elastic-cloud-platform/284893)
**Author:** [@Mannem\_Saikiran](https://discuss.elastic.co/u/Mannem_Saikiran)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 5:53pm UTC](https://discuss.elastic.co/t/how-to-add-custom-logos-and-icons-in-elastic-cloud-platform/284893 "2021-09-24T17:53:17Z")
In standalone we can customize the elastic UI using "Elastic UI framework (EUI)", But we are looking for custom changes in the Elastic Cloud environment. So, is there any way to customize the Elastic Cloud UI? If yes, c… [Previous page](https://discuss.elastic.co/latest.md?page=1460) [Next page](https://discuss.elastic.co/latest.md?page=1462)