# Latest **URL:** https://discuss.elastic.co/latest.md?page=1663 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1664 --- ## [Allocate index on the hot \_tier](https://discuss.elastic.co/t/allocate-index-on-the-hot-tier/273420)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 6:12pm UTC](https://discuss.elastic.co/t/allocate-index-on-the-hot-tier/273420 "2021-05-24T18:12:31Z")
hey there, I was trying to use ILM policies with a hot/warm/cold infrastructure. My indices are not data stream so I have to bootstrap the index with an alias. Is there a way to assign it at the \_hot tier nodes at the … --- ## [Reason for Scale 1000000 for IIS event.duration](https://discuss.elastic.co/t/reason-for-scale-1000000-for-iis-event-duration/273762)
**Author:** [@danielw](https://discuss.elastic.co/u/danielw)\ **Replies:** 6\ **Last updated:** [May 24, 2021, 5:43pm UTC](https://discuss.elastic.co/t/reason-for-scale-1000000-for-iis-event-duration/273762 "2021-05-24T17:43:26Z")
I'm trying to figure out what is the reason for the scale of 1000000 when using the filebeat module for iis for the duration field. Seems a bit strange when trying to build a dashboard for Reponse Times where every value… --- ## [Automatically index from an Elasticsearch index](https://discuss.elastic.co/t/automatically-index-from-an-elasticsearch-index/273666)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 5:33pm UTC](https://discuss.elastic.co/t/automatically-index-from-an-elasticsearch-index/273666 "2021-05-24T17:33:02Z")
I realize there is no way to use an Elasticsearch index as a source for Enterprise Search (App or Workplace). That's unfortunate and hopefully that changes in the future. Is there an "easy" way to re-index an existing … --- ## [Problem with shipping configuration (auditbeat)](https://discuss.elastic.co/t/problem-with-shipping-configuration-auditbeat/273729)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 1:30pm UTC](https://discuss.elastic.co/t/problem-with-shipping-configuration-auditbeat/273729 "2021-05-24T13:30:45Z")
I have implemented ELK on a single node with basic security (win server 2016). Elastic search, logstash and kibana are working fine. Now I want to start shipping some data and setting up dashboards. I have win 10 machin… --- ## [Better search result with relevant data with prioritization](https://discuss.elastic.co/t/better-search-result-with-relevant-data-with-prioritization/273849)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 4:32pm UTC](https://discuss.elastic.co/t/better-search-result-with-relevant-data-with-prioritization/273849 "2021-05-24T16:32:21Z")
Hi , I am trying to improve relevant search. I have list of fields (around 21) with priority order(total fields in document arnd 120). Those fields need to get more priority as compare to others during search. I am usi… --- ## [Kibana print to PDF issues after upgrading to 7.11.1](https://discuss.elastic.co/t/kibana-print-to-pdf-issues-after-upgrading-to-7-11-1/273070)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 5\ **Last updated:** [May 24, 2021, 4:02pm UTC](https://discuss.elastic.co/t/kibana-print-to-pdf-issues-after-upgrading-to-7-11-1/273070 "2021-05-24T16:02:12Z")
Hi team, I've upgraded my environment from 7.9.2 to 7.11.1 and I'm seeing some error while trying to print to PDF my Canvas projects. {"type":"log","@timestamp":"2021-05-14T22:23:20+00:00","tags":\["error","plugins","re… --- ## [Has anyone tried to load edifact or x12 messages](https://discuss.elastic.co/t/has-anyone-tried-to-load-edifact-or-x12-messages/273689)
**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 3:56pm UTC](https://discuss.elastic.co/t/has-anyone-tried-to-load-edifact-or-x12-messages/273689 "2021-05-24T15:56:37Z")
hello all , has anyone tried to load x12 or edifact message using logstash/kibana. basically my requirement is simple.. I have the x12 or edifact messaged saved in a directory. i just need to pull that file and load t… --- ## [Joining JSON Array Values](https://discuss.elastic.co/t/joining-json-array-values/273702)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 3:16pm UTC](https://discuss.elastic.co/t/joining-json-array-values/273702 "2021-05-24T15:16:14Z")
I have data coming in as JSON structured like below. The JSON is parsed and the data under Charlie is displayed as an array of JSON. I'd like to concatenate all the values in URL to a single field, but can't seem to fi… --- ## [Logstash Error - RuntimeError: entity expansion has grown too large](https://discuss.elastic.co/t/logstash-error-runtimeerror-entity-expansion-has-grown-too-large/273808)
**Author:** [@Rosanna\_Staiano](https://discuss.elastic.co/u/Rosanna_Staiano)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 3:06pm UTC](https://discuss.elastic.co/t/logstash-error-runtimeerror-entity-expansion-has-grown-too-large/273808 "2021-05-24T15:06:07Z")
Hello, I've a lot of xml-file containing log events and some of them are pretty large. I'm trying to parse them with Logstash, but when the xml is too large, I get an xmlparsefailure and I got this error: RuntimeError… --- ## [Compostable index templates](https://discuss.elastic.co/t/compostable-index-templates/273841)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 3:05pm UTC](https://discuss.elastic.co/t/compostable-index-templates/273841 "2021-05-24T15:05:57Z")
Is there a 10,000 foot description of the new template changes somewhere? --- ## [GROUP BY BASED ON MULTIPLE FIELDS](https://discuss.elastic.co/t/group-by-based-on-multiple-fields/273620)
**Author:** [@Keerthika](https://discuss.elastic.co/u/Keerthika)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 3:05pm UTC](https://discuss.elastic.co/t/group-by-based-on-multiple-fields/273620 "2021-05-24T15:05:17Z")
Hi.. We need to load the data from Kafka to elastic search using logstash configuration. And also need to group by based on multiple fields (Last 1 hour data only(Millions of data) ) in logstash configuration. Kindly … --- ## [Exiting: error connecting to Kibana: fail to get the Kibana version:0](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-0/273734)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 2:44pm UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-0/273734 "2021-05-24T14:44:42Z")
Hello, i'm a newbie trying to send my second dataset, sitting inside my downloads folder (extracted) to kibana. Filebeat, elasticsearch, kibana are all running locahost:5601 is running filebeat.yml config as follow: (… --- ## [How can i overcome this error](https://discuss.elastic.co/t/how-can-i-overcome-this-error/273836)
**Author:** [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 2:44pm UTC](https://discuss.elastic.co/t/how-can-i-overcome-this-error/273836 "2021-05-24T14:44:01Z")
Hi, I am having issues with the error attached in the thread. I did try many solutions, but nothing worked. Can you please share the steps or changes I need to do to overcome this error --- ## [Unable to upload file using EuiFilePicker](https://discuss.elastic.co/t/unable-to-upload-file-using-euifilepicker/271955)
**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\ **Replies:** 11\ **Last updated:** [May 24, 2021, 2:34pm UTC](https://discuss.elastic.co/t/unable-to-upload-file-using-euifilepicker/271955 "2021-05-24T14:34:28Z")
Hi Team, I have created a custom plugin and i have a requirement to upload file to server. I am trying to do it using EuiFilePicker. API which I am using to upload file is accepting data in form-data format. Below is my… --- ## [Import Saved Object API Issue](https://discuss.elastic.co/t/import-saved-object-api-issue/273695)
**Author:** [@Rini\_Singh](https://discuss.elastic.co/u/Rini_Singh)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 2:31pm UTC](https://discuss.elastic.co/t/import-saved-object-api-issue/273695 "2021-05-24T14:31:15Z")
I am trying to use API - curl -X POST "localhost:5601/api/saved\_objects/\_import?createNewCopies=true -H "kbn-xsrf: true" --form file=@file.ndjson" -H 'kbn-xsrf: true' But i am getting error {"statusCode":400,"error":"Ba… --- ## [Index Lifecycle Management (ILM) based on a document field](https://discuss.elastic.co/t/index-lifecycle-management-ilm-based-on-a-document-field/273701)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 2:13pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-ilm-based-on-a-document-field/273701 "2021-05-24T14:13:41Z")
Hello, I would like to know if there is any way to partition and index based on a field of documents within it. I don't want to use the index size (like "max\_size"), nor the index time (like "max\_age") and nor max numbe… --- ## [Shard size issue in elastic](https://discuss.elastic.co/t/shard-size-issue-in-elastic/273760)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 1:51pm UTC](https://discuss.elastic.co/t/shard-size-issue-in-elastic/273760 "2021-05-24T13:51:11Z")
How to configure the optimal shard size in elastic search? I've gone through multiple posts in this forum and I'm not able to find an exact way to calculate the optimal value for cluster.max\_shards\_per\_node Increasing … --- ## [Nest client not retrying with other nodes when master node abruptly crashes](https://discuss.elastic.co/t/nest-client-not-retrying-with-other-nodes-when-master-node-abruptly-crashes/273131)
**Author:** [@Johan\_Lindberg](https://discuss.elastic.co/u/Johan_Lindberg)\ **Replies:** 8\ **Last updated:** [May 24, 2021, 1:04pm UTC](https://discuss.elastic.co/t/nest-client-not-retrying-with-other-nodes-when-master-node-abruptly-crashes/273131 "2021-05-24T13:04:51Z")
We're using a three node Elasticsearch cluster v6.5.4 which seems to work fine. All master eligible. The clients use NEST for communication. But when our at the time master node died because of power shortage all clie… --- ## [Uncaught ChunkLoadError: Loading chunk 2 failed. (error: http://localhost:5601/nrd/9007199254740991/bundles/plugin/data/data.chunk.2.js)](https://discuss.elastic.co/t/uncaught-chunkloaderror-loading-chunk-2-failed-error-http-localhost-5601-nrd-9007199254740991-bundles-plugin-data-data-chunk-2-js/273720)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 12:41pm UTC](https://discuss.elastic.co/t/uncaught-chunkloaderror-loading-chunk-2-failed-error-http-localhost-5601-nrd-9007199254740991-bundles-plugin-data-data-chunk-2-js/273720 "2021-05-24T12:41:09Z")
Hi Team I am trying to run kibana development v7.10.2. But when navigating to http://localhost:5601/nrd/app/visualize#/edit/9886b410-4c8b-11e8-b3d7-01146121b73d?\_g=(filters:!(),refreshInterval:(pause:!t,value:0),time… --- ## [Elastic index name with enterprise app search engine names](https://discuss.elastic.co/t/elastic-index-name-with-enterprise-app-search-engine-names/273637)
**Author:** [@somil\_kulshreshtha](https://discuss.elastic.co/u/somil_kulshreshtha)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 12:33pm UTC](https://discuss.elastic.co/t/elastic-index-name-with-enterprise-app-search-engine-names/273637 "2021-05-24T12:33:34Z")
What is elastic index name with can provide me enterprise app search engine names. I need to use those names in Kibana panel --- ## [Are the aggregations in the response of an aggs search query ordered?](https://discuss.elastic.co/t/are-the-aggregations-in-the-response-of-an-aggs-search-query-ordered/273816)
**Author:** [@ashwinbhaskar](https://discuss.elastic.co/u/ashwinbhaskar)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 11:48am UTC](https://discuss.elastic.co/t/are-the-aggregations-in-the-response-of-an-aggs-search-query-ordered/273816 "2021-05-24T11:48:14Z")
I could not find any explicit statement in the documentation of data range aggregation that talks about the ordering of the elements inside the aggregations field. But I noticed that the results are always reverse of th… --- ## [How to get counts / stats for different periods of time?](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799)
**Author:** [@ashwinbhaskar](https://discuss.elastic.co/u/ashwinbhaskar)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799 "2021-05-24T10:46:22Z")
I am trying to get the count of documents that were created for the last 10 weeks grouped by week. To get the count for the last week, I would do something like this GET my\_index/\_count { "query": { "range": { … --- ## [Delete\_by\_query increases the storage size](https://discuss.elastic.co/t/delete-by-query-increases-the-storage-size/273806)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 10:22am UTC](https://discuss.elastic.co/t/delete-by-query-increases-the-storage-size/273806 "2021-05-24T10:22:13Z")
Hi All, I have used following "delete\_by\_query" to delete large number of documents from an index of my ES. POST /winlogbeat-7.12.0-2021.05.20-000029/\_delete\_by\_query { "query": { "match": { "event.code": "… --- ## [Does Workplace search 7.12 confluence server supports only these versions of confluence server?](https://discuss.elastic.co/t/does-workplace-search-7-12-confluence-server-supports-only-these-versions-of-confluence-server/273146)
**Author:** [@vjerts](https://discuss.elastic.co/u/vjerts)\ **Replies:** 9\ **Last updated:** [May 24, 2021, 10:02am UTC](https://discuss.elastic.co/t/does-workplace-search-7-12-confluence-server-supports-only-these-versions-of-confluence-server/273146 "2021-05-24T10:02:23Z")
As documentation for Elastic workplace search states: Workplace Search supports Confluence Server versions: 7.2.1 , 6.15.x So basically if i have confluence server version 7.11.1 i should use Custom API source instead … --- ## [Why multiline pattern merge lines that don't respect the regex?](https://discuss.elastic.co/t/why-multiline-pattern-merge-lines-that-dont-respect-the-regex/273656)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 9:12am UTC](https://discuss.elastic.co/t/why-multiline-pattern-merge-lines-that-dont-respect-the-regex/273656 "2021-05-24T09:12:20Z")
i want my filebeat.yml to combine only the lines that respect the regex multiline.pattern: '^Server \[\[:graph:\]\]\* Line' multiline.negate: true multiline.match: after but actually it combines the other lines that don't… --- ## [Connecting google sheets to elasticsearch](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758)
**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\ **Replies:** 0\ **Last updated:** [May 23, 2021, 11:48am UTC](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758 "2021-05-23T11:48:55Z")
I'm trying to connect a few sheets saved in my google drive to visualize in Kibana, I tried using Google sheets to elasticsearch add-on and it looks like the add-on no longer exists. Is there an alternative for this ? T… --- ## [Role mappings will not be applied to any users](https://discuss.elastic.co/t/role-mappings-will-not-be-applied-to-any-users/273219)
**Author:** [@cporte01](https://discuss.elastic.co/u/cporte01)\ **Replies:** 5\ **Last updated:** [May 24, 2021, 8:32am UTC](https://discuss.elastic.co/t/role-mappings-will-not-be-applied-to-any-users/273219 "2021-05-24T08:32:23Z")
I'm getting the following message in the Role Mappings page of Kibana: No compatible realms are enabled in Elasticsearch Role mappings will not be applied to any users. Contact your system administrator and refer to the… --- ## [Logstash logs are not generating](https://discuss.elastic.co/t/logstash-logs-are-not-generating/273504)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 8:31am UTC](https://discuss.elastic.co/t/logstash-logs-are-not-generating/273504 "2021-05-24T08:31:06Z")
Hi, I setup logstash on centos7. I done some work on it. now logstash logs is not generating. It could not able to find logstash.yml and log4j2.properties. There are warning; sudo /usr/share/logstash/bin/logstash -f… --- ## [Edge ngram for numeric value](https://discuss.elastic.co/t/edge-ngram-for-numeric-value/273793)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 8:28am UTC](https://discuss.elastic.co/t/edge-ngram-for-numeric-value/273793 "2021-05-24T08:28:52Z")
Hi, I am implementing edge ngram on a text field for letters and digits. But it is not able to search numeric value. My code is: PUT my-index-00001 { "settings": { "analysis": { "analyzer": { "aut… --- ## [Can metricbeat print multiple logs within one event?](https://discuss.elastic.co/t/can-metricbeat-print-multiple-logs-within-one-event/273791)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 8:19am UTC](https://discuss.elastic.co/t/can-metricbeat-print-multiple-logs-within-one-event/273791 "2021-05-24T08:19:10Z")
Hi experts, I'm using metricbeat to log some metrics of my system with http module, output is json style. Somehow there's a data size limitation on single log in my system, is there any way I can have metricbeat output… [Previous page](https://discuss.elastic.co/latest.md?page=1662) [Next page](https://discuss.elastic.co/latest.md?page=1664)