# Latest **URL:** https://discuss.elastic.co/latest.md?page=1628 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1629 --- ## [Cannot merge \[properties\] mappings error](https://discuss.elastic.co/t/cannot-merge-properties-mappings-error/275506)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 10:26pm UTC](https://discuss.elastic.co/t/cannot-merge-properties-mappings-error/275506 "2021-06-09T22:26:37Z")
Hello, I'm having a hard time with my running my ML Job due to my fields. Can I correct this by modifying my mappings? I've pasted my error below: "statusCode": 400, "error": "Bad Request", "message": "\[status\_exce… --- ## [After kubernetes node restart, data pods couldn't join the cluster again](https://discuss.elastic.co/t/after-kubernetes-node-restart-data-pods-couldnt-join-the-cluster-again/242959)
**Author:** [@igoragueme](https://discuss.elastic.co/u/igoragueme)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/after-kubernetes-node-restart-data-pods-couldnt-join-the-cluster-again/242959 "2020-07-29T08:52:08Z")
Hello, I'm facing an issue with my elasticsearch cluster. I have 9 pods running in 3 nodes on my kubernetes cluster. 3 elasticsearch-client pod, 3 elasticsearch-data pod, 3 elasticsearch-master pod. Here my YAML's … --- ## [Whats the meaning of "gt" and "lte" in the field called "monitor.timespan"?](https://discuss.elastic.co/t/whats-the-meaning-of-gt-and-lte-in-the-field-called-monitor-timespan/275667)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 2:43pm UTC](https://discuss.elastic.co/t/whats-the-meaning-of-gt-and-lte-in-the-field-called-monitor-timespan/275667 "2021-06-11T14:43:18Z")
Hello! I just see in "heartbeat" index a field called "monitor.timespan" which contains the following: { "lt": "2021-06-11T09:58:59.034Z", "gte": "2021-06-11T09:58:54.034Z" } What's the meaning of "lt" and "gte"? … --- ## [Logstash Key store](https://discuss.elastic.co/t/logstash-key-store/275633)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 7\ **Last updated:** [June 11, 2021, 12:42pm UTC](https://discuss.elastic.co/t/logstash-key-store/275633 "2021-06-11T12:42:24Z")
I am trying to improve my ELK security with logstash keystore. I am following instruction from this article: https://www.elastic.co/guide/en/logstash/current/keystore.html All instructions seems to be straight forward… --- ## [FTP repository](https://discuss.elastic.co/t/ftp-repository/274508)
**Author:** [@Chinedum\_Nwuzor](https://discuss.elastic.co/u/Chinedum_Nwuzor)\ **Replies:** 4\ **Last updated:** [June 11, 2021, 11:53am UTC](https://discuss.elastic.co/t/ftp-repository/274508 "2021-06-11T11:53:36Z")
Hello, I am trying to setup an FTP repository for my snapshots. However, it fails with an access denied error message. Please the ftp url I used ftp://username:password@host/ Kindly assist. --- ## [Сортировка результатов по максимальному числу совпадащих фильтров](https://discuss.elastic.co/t/topic/275406)
**Author:** [@itmariacchi](https://discuss.elastic.co/u/itmariacchi)\ **Replies:** 4\ **Last updated:** [June 11, 2021, 11:17am UTC](https://discuss.elastic.co/t/topic/275406 "2021-06-11T11:17:22Z")
Здравствуйте! Есть индекс специалистов, у специалистов есть, например, ключевые навыки (множественное поле). Пользователь в фильтре выбирает ключевые навыки - например, PHP, JS, Java. Так вот специалисты, у которых напр… --- ## [Elastic pipeline](https://discuss.elastic.co/t/elastic-pipeline/275679)
**Author:** [@stefanskv](https://discuss.elastic.co/u/stefanskv)\ **Replies:** 2\ **Last updated:** [June 11, 2021, 11:11am UTC](https://discuss.elastic.co/t/elastic-pipeline/275679 "2021-06-11T11:11:19Z")
Why after upgrade to 7.13 version, Elastic started using new Ingest Node Pipelines (for example filebeat-7.13.1-cisco-asa-asa-ftd-pipeline ). The thing is i have problem with parsing source ip field. Can I configure tha… --- ## [Is there a way of preventing all primary shards of an idex to be placed on the same ES node](https://discuss.elastic.co/t/is-there-a-way-of-preventing-all-primary-shards-of-an-idex-to-be-placed-on-the-same-es-node/275555)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 2\ **Last updated:** [June 11, 2021, 10:52am UTC](https://discuss.elastic.co/t/is-there-a-way-of-preventing-all-primary-shards-of-an-idex-to-be-placed-on-the-same-es-node/275555 "2021-06-11T10:52:06Z")
Hello, I have a 49 node ES cluster with roughly the same size storage on each node (900GB). Most indices have 3-5 primary shards. Indices and shards can be of very variable size. Every so often, all primary shards of o… --- ## [Getting \_split\_type\_failure and \_jsonparsefailure in my logstash pipeline using only 1 filter (elasticsearch)](https://discuss.elastic.co/t/getting-split-type-failure-and-jsonparsefailure-in-my-logstash-pipeline-using-only-1-filter-elasticsearch/275671)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 10:35am UTC](https://discuss.elastic.co/t/getting-split-type-failure-and-jsonparsefailure-in-my-logstash-pipeline-using-only-1-filter-elasticsearch/275671 "2021-06-11T10:35:59Z")
Hi, i have 2 pipelines Pipeline 1: input { elasticsearch {}} filter { split {} json {} } output { pipeline {} } Pipeline 2: input { pipeline {}} filter { elasticsearch {} } output { stdout {} } Pipelin 1 where … --- ## [Watchguard Firebox to Logstash](https://discuss.elastic.co/t/watchguard-firebox-to-logstash/275672)
**Author:** [@gygrill](https://discuss.elastic.co/u/gygrill)\ **Replies:** 0\ **Last updated:** [June 11, 2021, 10:24am UTC](https://discuss.elastic.co/t/watchguard-firebox-to-logstash/275672 "2021-06-11T10:24:08Z")
Hi, total newbie here. How do I send Firebox logs to logstash? Do a specific beat exists or is it another method required? thanks for any help --- ## [Rook ceph for Elastic Search](https://discuss.elastic.co/t/rook-ceph-for-elastic-search/275647)
**Author:** [@Sangamesh\_Patil](https://discuss.elastic.co/u/Sangamesh_Patil)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 9:50am UTC](https://discuss.elastic.co/t/rook-ceph-for-elastic-search/275647 "2021-06-11T09:50:19Z")
Hello, We are deploying elastic search on kubernetes farm and we have rook ceph as our distributed storage. I was going through earlier topic and there was enough reason than with ES being heavy used for File system. Bu… --- ## [How to use the visualization plugin in a react component?](https://discuss.elastic.co/t/how-to-use-the-visualization-plugin-in-a-react-component/275484)
**Author:** [@Manuel\_Pedro\_Gomez\_C](https://discuss.elastic.co/u/Manuel_Pedro_Gomez_C)\ **Replies:** 2\ **Last updated:** [June 11, 2021, 8:47am UTC](https://discuss.elastic.co/t/how-to-use-the-visualization-plugin-in-a-react-component/275484 "2021-06-11T08:47:29Z")
Hello! I recently joined a project which is developing a plugin for Kibana, in this project, we use the Visualizations plugin to generate some presentations using data stored in ES indices. I'm trying to understand bett… --- ## [Avoid too many useless field on elastic search - kibana](https://discuss.elastic.co/t/avoid-too-many-useless-field-on-elastic-search-kibana/274357)
**Author:** [@rebug](https://discuss.elastic.co/u/rebug)\ **Replies:** 9\ **Last updated:** [June 11, 2021, 7:30am UTC](https://discuss.elastic.co/t/avoid-too-many-useless-field-on-elastic-search-kibana/274357 "2021-06-11T07:30:03Z")
Hi, I am pretty new to this but, I have setup a elastic stack for starting a log centralization. I have just tested with Nginx log and syslog. My problem is the number of fields created (and many of them are useless a… --- ## [Top-hits on aggregations](https://discuss.elastic.co/t/top-hits-on-aggregations/274959)
**Author:** [@romathonat](https://discuss.elastic.co/u/romathonat)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 7:25am UTC](https://discuss.elastic.co/t/top-hits-on-aggregations/274959 "2021-06-11T07:25:19Z")
Hello, I need to get the top-hits over an aggregation. In my use case I store SQL queries as documents (with different statistics like the time it tooks). Each querie is hashed, so that I can make an aggregation term o… --- ## [What is the price of Elasticsearch licence](https://discuss.elastic.co/t/what-is-the-price-of-elasticsearch-licence/275636)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 5\ **Last updated:** [June 11, 2021, 7:01am UTC](https://discuss.elastic.co/t/what-is-the-price-of-elasticsearch-licence/275636 "2021-06-11T07:01:51Z")
Hello Folks, I have planned to setup ELK stack on-premise, I checked Subscriptions | Elastic Stack Products & Support | Elastic, they have mentioned Basic - free and open 2. I would like to know is really Elasticsearc… --- ## [Facing issue on kibana](https://discuss.elastic.co/t/facing-issue-on-kibana/275652)
**Author:** [@SHRIANSH\_RASEKAR](https://discuss.elastic.co/u/SHRIANSH_RASEKAR)\ **Replies:** 0\ **Last updated:** [June 11, 2021, 7:02am UTC](https://discuss.elastic.co/t/facing-issue-on-kibana/275652 "2021-06-11T07:02:32Z")
HI, I am facing issue on kibana dashboard, charts are blank , also from 1 week data is not coming, can anyone help to get cause. Error: Too Many Requests at Fetch.\_callee3$ (http://1\*\*.\*\*\*.\*\*.\*\*:5601/31997/bundles/commo… --- ## [Can i use modules and input at same time with different tag?](https://discuss.elastic.co/t/can-i-use-modules-and-input-at-same-time-with-different-tag/275651)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 0\ **Last updated:** [June 11, 2021, 6:17am UTC](https://discuss.elastic.co/t/can-i-use-modules-and-input-at-same-time-with-different-tag/275651 "2021-06-11T06:17:58Z")
Hi, I am using filebeat. i use apache module to collect log from apache. but want to collect the log from tomcat and index it in another index. can i use filebeat input in filebeat.yml and module in same time? but i wa… --- ## [Configure filebeat to read log with frequent events](https://discuss.elastic.co/t/configure-filebeat-to-read-log-with-frequent-events/275644)
**Author:** [@SulRin](https://discuss.elastic.co/u/SulRin)\ **Replies:** 0\ **Last updated:** [June 11, 2021, 5:32am UTC](https://discuss.elastic.co/t/configure-filebeat-to-read-log-with-frequent-events/275644 "2021-06-11T05:32:50Z")
Добрый день! Подскажите как настроить filebeat, чтобы он мог работать с логом, у которого частота событий 10-20 сообщений в секунду. дебаг filebeat -e -c filebeat.yml -d "\*", так повторяется очень долго, и нет сбро… --- ## [How to parse message use ELK+Kafka](https://discuss.elastic.co/t/how-to-parse-message-use-elk-kafka/275642)
**Author:** [@tod-yangyd](https://discuss.elastic.co/u/tod-yangyd)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 5:52am UTC](https://discuss.elastic.co/t/how-to-parse-message-use-elk-kafka/275642 "2021-06-11T05:52:25Z")
Recently I tried to analyzed the log with the stream：filebeat -\> kafka -\>logstash -\> ES The data stored in ES becomes the structure shown below： { “\_source”:{ “@timestamp” : "YYYY-MM-DDTHH:mm:ss.sss" … --- ## [How to do lookup based on Ip ranges](https://discuss.elastic.co/t/how-to-do-lookup-based-on-ip-ranges/275397)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 5:38am UTC](https://discuss.elastic.co/t/how-to-do-lookup-based-on-ip-ranges/275397 "2021-06-11T05:38:00Z")
Hi Team, I have requirement where I have to do lookup on ranges like, If Ip 10.10.x.xx to 10.10x.xxx matches then add fileds Firewall 10.12.xx.xx to 10.12.x.xxx matches then add fileds Application. Below is my logst… --- ## [NPX is giving npm ERR! cb.apply is not a function when making gz and br files](https://discuss.elastic.co/t/npx-is-giving-npm-err-cb-apply-is-not-a-function-when-making-gz-and-br-files/275285)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 3\ **Last updated:** [June 11, 2021, 5:18am UTC](https://discuss.elastic.co/t/npx-is-giving-npm-err-cb-apply-is-not-a-function-when-making-gz-and-br-files/275285 "2021-06-11T05:18:43Z")
Whenever I try to run the following command to customize ELK 7.10.0 npx gzip-cli /usr/share/kibana/x-pack/plugins/security/target/public/security.chunk.4.js -e=gz -e=b I got the following error. npm ERR! cb.apply is n… --- ## [Logstash taking wrong url for Elasticserach](https://discuss.elastic.co/t/logstash-taking-wrong-url-for-elasticserach/275527)
**Author:** [@Shubham\_Dhote](https://discuss.elastic.co/u/Shubham_Dhote)\ **Replies:** 5\ **Last updated:** [June 11, 2021, 4:12am UTC](https://discuss.elastic.co/t/logstash-taking-wrong-url-for-elasticserach/275527 "2021-06-11T04:12:57Z")
Hi, I have deployed elasticserach and logstash in kubernetes cluster. And my logstash is unable to connect to elasticserach. Problem is:- my elasticserach url is:- https://my-server.com/elasticsearch And logstash is ta… --- ## [Create Field in field](https://discuss.elastic.co/t/create-field-in-field/275566)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 2\ **Last updated:** [June 11, 2021, 2:04am UTC](https://discuss.elastic.co/t/create-field-in-field/275566 "2021-06-11T02:04:51Z")
I have a field called "request header" I want to create another field in this field. what should i do? --- ## [Dead letter queueのメタデータをelasticsearchに転送する際にエラー発生](https://discuss.elastic.co/t/dead-letter-queue-elasticsearch/275635)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [June 11, 2021, 1:55am UTC](https://discuss.elastic.co/t/dead-letter-queue-elasticsearch/275635 "2021-06-11T01:55:52Z")
dead letter queueの中身をElasticsearchにて可視化したいです。 エラー理由も可視化したいので、以下のconfファイルにて試したのですが、エラーが出力されます。 input { dead\_letter\_queue { commit\_offsets =\> true path =\> "/var/lib/logstash/dead\_letter\_queue" pipeline\_id =\>… --- ## [Kibana REST API documentation lacking](https://discuss.elastic.co/t/kibana-rest-api-documentation-lacking/275521)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [June 11, 2021, 12:07am UTC](https://discuss.elastic.co/t/kibana-rest-api-documentation-lacking/275521 "2021-06-11T00:07:31Z")
Hello, I'm trying to use the REST API to import dashboards. It seems this shouldn't be that difficult but the due to the poor state of the documentation this is proving a lot harder than it should be. The query param… --- ## [Watcher does not get triggered properly](https://discuss.elastic.co/t/watcher-does-not-get-triggered-properly/275630)
**Author:** [@mhmtsvr](https://discuss.elastic.co/u/mhmtsvr)\ **Replies:** 0\ **Last updated:** [June 10, 2021, 10:45pm UTC](https://discuss.elastic.co/t/watcher-does-not-get-triggered-properly/275630 "2021-06-10T22:45:49Z")
Hi, I have a watcher notifying the slack channel once elastic receives any logs regarding the query I set. It usually triggers, but I sometimes observe that the watcher does not get triggered even though logs are availa… --- ## [Creating PDF report via watcher - 404 error](https://discuss.elastic.co/t/creating-pdf-report-via-watcher-404-error/275557)
**Author:** [@anmmok](https://discuss.elastic.co/u/anmmok)\ **Replies:** 2\ **Last updated:** [June 10, 2021, 9:49pm UTC](https://discuss.elastic.co/t/creating-pdf-report-via-watcher-404-error/275557 "2021-06-10T21:49:58Z")
I'm trying to create and send a pdf report from the dashboard via watcher. The dashboard contains two simple visuals and the generation of the report directly in the dashboard works fine. Now after coping the url and s… --- ## [API and or Query to Poll for latest Alerts](https://discuss.elastic.co/t/api-and-or-query-to-poll-for-latest-alerts/275596)
**Author:** [@Robin\_Elliott](https://discuss.elastic.co/u/Robin_Elliott)\ **Replies:** 2\ **Last updated:** [June 10, 2021, 9:16pm UTC](https://discuss.elastic.co/t/api-and-or-query-to-poll-for-latest-alerts/275596 "2021-06-10T21:16:26Z")
Have a customer with a mature Elastic/Kibana environment with a large number of alerts defined. As such I am not wanting them to have to add additional actions/make changes to these alerts with regards to my request bel… --- ## [Is it possible to do combSum in similarity?](https://discuss.elastic.co/t/is-it-possible-to-do-combsum-in-similarity/275040)
**Author:** [@rabbit0v0](https://discuss.elastic.co/u/rabbit0v0)\ **Replies:** 1\ **Last updated:** [June 10, 2021, 9:08pm UTC](https://discuss.elastic.co/t/is-it-possible-to-do-combsum-in-similarity/275040 "2021-06-10T21:08:56Z")
I wonder if I can calculate the similarity by adding up tf-idf score and BM25 score, is there a way to do it? --- ## [Mapping for versioned K,V pairs](https://discuss.elastic.co/t/mapping-for-versioned-k-v-pairs/275354)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 1\ **Last updated:** [June 10, 2021, 9:06pm UTC](https://discuss.elastic.co/t/mapping-for-versioned-k-v-pairs/275354 "2021-06-10T21:06:17Z")
Hi, I'm trying to come up with a mapping for a document storing versioned custom key value pairs. Eg. version : "1" =\> \[{key : "customkey1", value : "val1"}, {key : "customkey2", value : "val2"}..\] version: "2" =\> \[{k… [Previous page](https://discuss.elastic.co/latest.md?page=1627) [Next page](https://discuss.elastic.co/latest.md?page=1629)