# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1726

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1727

---

## [Exists query for field that has only 1 nested child not working](https://discuss.elastic.co/t/exists-query-for-field-that-has-only-1-nested-child-not-working/268897)

<div class="topic-metadata">

**Author:** [@MiDe](https://discuss.elastic.co/u/MiDe)\
**Replies:** 4\
**Last updated:** [April 19, 2021, 7:39am UTC](https://discuss.elastic.co/t/exists-query-for-field-that-has-only-1-nested-child-not-working/268897 "2021-04-19T07:39:20Z")

</div>

Trying to query entries based on a mapping like this: {"top": { "properties": { "doc": { "properties": { "A": { "properties": { "B": { "type…

---

## [Permission to generate CSV report](https://discuss.elastic.co/t/permission-to-generate-csv-report/270443)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 1\
**Last updated:** [April 19, 2021, 7:21am UTC](https://discuss.elastic.co/t/permission-to-generate-csv-report/270443 "2021-04-19T07:21:13Z")

</div>

How can I add access to generating CSV? Reporting error You don't have permission to generate this report. But I can't find such privilege...

---

## [Pipelines disappeared](https://discuss.elastic.co/t/pipelines-disappeared/269806)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 5\
**Last updated:** [April 19, 2021, 6:31am UTC](https://discuss.elastic.co/t/pipelines-disappeared/269806 "2021-04-19T06:31:54Z")

</div>

Hi I had to restart Logstash service for some reason. In Kibana - Stack Monitoring - I had all the pipelines that was in pipeline.yml. But now(after restart) they don\`t appear in this page: I had at least 20 pipelin…

---

## [Getting exception while storing the date field format as strict\_hour\_minute](https://discuss.elastic.co/t/getting-exception-while-storing-the-date-field-format-as-strict-hour-minute/270540)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [April 19, 2021, 6:26am UTC](https://discuss.elastic.co/t/getting-exception-while-storing-the-date-field-format-as-strict-hour-minute/270540 "2021-04-19T06:26:29Z")

</div>

Hi, Created a field with mapping strict\_hour\_minute. running transform with group by field as below. "PeriodStartDateTime": { "date\_histogram": { "field": "StartDateTime", "fixed\_interval": "15m" } },after runnin…

---

## [Elasticsearch-plugin install repository-gcs is stuck](https://discuss.elastic.co/t/elasticsearch-plugin-install-repository-gcs-is-stuck/270537)

<div class="topic-metadata">

**Author:** [@rolandgroza](https://discuss.elastic.co/u/rolandgroza)\
**Replies:** 0\
**Last updated:** [April 19, 2021, 5:35am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-repository-gcs-is-stuck/270537 "2021-04-19T05:35:51Z")

</div>

I'm trying to install the repository-gcs plugin after upgrading elasticsearch from 7.0 -\> 7.12, but it looks like it gets stuck: time sudo /usr/share/elasticsearch/bin/elasticsearch-plugin install --batch repository-gcs…

---

## [Is index sorting beneficial in the following cases of (constantly updated) indexes?](https://discuss.elastic.co/t/is-index-sorting-beneficial-in-the-following-cases-of-constantly-updated-indexes/270501)

<div class="topic-metadata">

**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\
**Replies:** 2\
**Last updated:** [April 19, 2021, 4:59am UTC](https://discuss.elastic.co/t/is-index-sorting-beneficial-in-the-following-cases-of-constantly-updated-indexes/270501 "2021-04-19T04:59:47Z")

</div>

I have a "products" index with ~750.000 documents. When displaying the products I allow the users to sort them by price ( asc, desc ) or 1-2 other metrics. The prices are constantly updated, as well as products constant…

---

## [Not able to create indexes using multiple logs files in filebeat tags](https://discuss.elastic.co/t/not-able-to-create-indexes-using-multiple-logs-files-in-filebeat-tags/270328)

<div class="topic-metadata">

**Author:** [@balaji\_pal](https://discuss.elastic.co/u/balaji_pal)\
**Replies:** 3\
**Last updated:** [April 19, 2021, 4:51am UTC](https://discuss.elastic.co/t/not-able-to-create-indexes-using-multiple-logs-files-in-filebeat-tags/270328 "2021-04-19T04:51:31Z")

</div>

Hi Guys, I'm not able to create custom indexes in elastic search using logstash and filebeat. Log flow (Filebeat ==\> logstash ==\> elasticsearch) I have two custom logs files such as /var/log/app1/app1.log and /var/log…

---

## [How to exlude \`org.elasticsearch.test.framework\` dependency from Gradle \`esplugin\`?](https://discuss.elastic.co/t/how-to-exlude-org-elasticsearch-test-framework-dependency-from-gradle-esplugin/270526)

<div class="topic-metadata">

**Author:** [@BruceCL0407](https://discuss.elastic.co/u/BruceCL0407)\
**Replies:** 0\
**Last updated:** [April 19, 2021, 4:29am UTC](https://discuss.elastic.co/t/how-to-exlude-org-elasticsearch-test-framework-dependency-from-gradle-esplugin/270526 "2021-04-19T04:29:40Z")

</div>

Gradle esplugin introducing the dependency org.elasticsearch.test.framework requires RandomizedRunner to run tests(both Unit Tests and Integration Tests). In comparison, Maven doesn't introduce org.elasticsearch.test.fr…

---

## [Questions about ElasticSearch memory improvement](https://discuss.elastic.co/t/questions-about-elasticsearch-memory-improvement/270345)

<div class="topic-metadata">

**Author:** [@HalimKim](https://discuss.elastic.co/u/HalimKim)\
**Replies:** 3\
**Last updated:** [April 19, 2021, 4:29am UTC](https://discuss.elastic.co/t/questions-about-elasticsearch-memory-improvement/270345 "2021-04-19T04:29:21Z")

</div>

Hi, i've been researching ElasticSearch's improvement in terms of memory usage. Today, I've read this article(https://www.elastic.co/kr/blog/significantly-decrease-your-elasticsearch-heap-memory-usage). This article s…

---

## [Упорядоченный список в painless](https://discuss.elastic.co/t/painless/270125)

<div class="topic-metadata">

**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\
**Replies:** 26\
**Last updated:** [April 19, 2021, 2:31am UTC](https://discuss.elastic.co/t/painless/270125 "2021-04-19T02:31:54Z")

</div>

Есть поле типа keyword. Там хранится массив. \["40","1","11","4","7","10"\] В скрипте хочу выдрать часть массива начиная с какого то элемента. Но, до этого не доходит, т.к. когда я хочу получить ArrayList меняется сортир…

---

## [How to set include\_type\_name to be true or false by Java rest High client APM](https://discuss.elastic.co/t/how-to-set-include-type-name-to-be-true-or-false-by-java-rest-high-client-apm/270365)

<div class="topic-metadata">

**Author:** [@SomberOfShadow](https://discuss.elastic.co/u/SomberOfShadow)\
**Replies:** 2\
**Last updated:** [April 19, 2021, 1:56am UTC](https://discuss.elastic.co/t/how-to-set-include-type-name-to-be-true-or-false-by-java-rest-high-client-apm/270365 "2021-04-19T01:56:59Z")

</div>

How to set include\_type\_name to be true or false by Java rest High client APM in order to solve follwing issue : Elasticsearch error: Types cannot be provided in get mapping requests, unless include\_type\_name is set…

---

## [Index creation does not work](https://discuss.elastic.co/t/index-creation-does-not-work/269395)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 8\
**Last updated:** [April 19, 2021, 1:03am UTC](https://discuss.elastic.co/t/index-creation-does-not-work/269395 "2021-04-19T01:03:23Z")

</div>

I'm trying to create an index from Kibana since I already have logs in elasitcsearch. If I go to Stack Management \> Index ptterns, give it an index pattern name, and then run Create index pattern, I am taken to a page s…

---

## [Query on multiple indexes and generate the dashboard in Kibana](https://discuss.elastic.co/t/query-on-multiple-indexes-and-generate-the-dashboard-in-kibana/270433)

<div class="topic-metadata">

**Author:** [@ajaay\_kannan\_Vr](https://discuss.elastic.co/u/ajaay_kannan_Vr)\
**Replies:** 4\
**Last updated:** [April 18, 2021, 11:44pm UTC](https://discuss.elastic.co/t/query-on-multiple-indexes-and-generate-the-dashboard-in-kibana/270433 "2021-04-18T23:44:06Z")

</div>

My requirement is to build Dashboards to monitor the transaction flow between Two system with middleware as interface to connect both the systems. Each event is captured in elastic search indexes. System 1 Interface (…

---

## ["missing required email account setting for account \[gmail\]. 'smtp.host' must be configured](https://discuss.elastic.co/t/missing-required-email-account-setting-for-account-gmail-smtp-host-must-be-configured/270512)

<div class="topic-metadata">

**Author:** [@Dhyanesh\_Naik](https://discuss.elastic.co/u/Dhyanesh_Naik)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 9:22pm UTC](https://discuss.elastic.co/t/missing-required-email-account-setting-for-account-gmail-smtp-host-must-be-configured/270512 "2021-04-18T21:22:02Z")

</div>

I have added below lines in elasticsearch.yml file xpack.notification.email.account: gmail\_account: profile: gmail smtp: auth: true starttls.enable: true host: smt…

---

## [Failed to validate incoming join request from node](https://discuss.elastic.co/t/failed-to-validate-incoming-join-request-from-node/270515)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 9:20pm UTC](https://discuss.elastic.co/t/failed-to-validate-incoming-join-request-from-node/270515 "2021-04-18T21:20:58Z")

</div>

Hello, With Elasticsearch 7.6.0, I'm trying to set up a simple master-1 node with data-1 and data-2 nodes but when I look at the log I get the below error. I'd really appreciate if you could help me understand why I ge…

---

## [How to create Ai ML job in test space using api](https://discuss.elastic.co/t/how-to-create-ai-ml-job-in-test-space-using-api/270446)

<div class="topic-metadata">

**Author:** [@Dhyanesh\_Naik](https://discuss.elastic.co/u/Dhyanesh_Naik)\
**Replies:** 1\
**Last updated:** [April 18, 2021, 8:53pm UTC](https://discuss.elastic.co/t/how-to-create-ai-ml-job-in-test-space-using-api/270446 "2021-04-18T20:53:48Z")

</div>

HI, I want to create anomaly detection job in test space using api. Can you guide me to do so ? By default created jobs are placed in default space. Thank you in advance.

---

## [7.12 No longer move warm indexes to the warm node](https://discuss.elastic.co/t/7-12-no-longer-move-warm-indexes-to-the-warm-node/270510)

<div class="topic-metadata">

**Author:** [@luigius](https://discuss.elastic.co/u/luigius)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 8:48pm UTC](https://discuss.elastic.co/t/7-12-no-longer-move-warm-indexes-to-the-warm-node/270510 "2021-04-18T20:48:41Z")

</div>

Hi, since upgrading to elastic 7.12 indices get marked warm but are not moved to the warm node. This of course uses all the space on the hot node. Any suggestion Luigi

---

## [Mutate - using the value of one field to set the name of another](https://discuss.elastic.co/t/mutate-using-the-value-of-one-field-to-set-the-name-of-another/270462)

<div class="topic-metadata">

**Author:** [@timshaw](https://discuss.elastic.co/u/timshaw)\
**Replies:** 3\
**Last updated:** [April 18, 2021, 8:45pm UTC](https://discuss.elastic.co/t/mutate-using-the-value-of-one-field-to-set-the-name-of-another/270462 "2021-04-18T20:45:22Z")

</div>

The following fields come from an extract of a CEF format event in which is is possible to create custom fields and include labels for those fields relevant to a specific event. Labels may be different for different eve…

---

## [Reindex thousands of indices into a shared stream](https://discuss.elastic.co/t/reindex-thousands-of-indices-into-a-shared-stream/270507)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 7:11pm UTC](https://discuss.elastic.co/t/reindex-thousands-of-indices-into-a-shared-stream/270507 "2021-04-18T19:11:57Z")

</div>

Hello I'm trying to achieve the following: reindex 3000 indices (between 100 mb to 5gb), which contains data for the years 2019-2021, into a shared stream. Ideally the target stream needs to be sorted by date, so the …

---

## [Mapper Parsing Exception](https://discuss.elastic.co/t/mapper-parsing-exception/270050)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 6:35pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/270050 "2021-04-18T18:35:22Z")

</div>

Hello, I am trying to add mappings to the index named ecommerce. But this throws "mapper\_parsing\_exception" error. Any help on rectifying this error would be appreciated. Elastic Search version is 7.12.0 PUT /ecommerc…

---

## [Want. Best practices to solve the sort question with ES](https://discuss.elastic.co/t/want-best-practices-to-solve-the-sort-question-with-es/270502)

<div class="topic-metadata">

**Author:** [@yout0703](https://discuss.elastic.co/u/yout0703)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 4:35pm UTC](https://discuss.elastic.co/t/want-best-practices-to-solve-the-sort-question-with-es/270502 "2021-04-18T16:35:10Z")

</div>

I want to sort some entities(A)，each of them is related to another kind of entity(B). Different A has different relation score with B。I want to query A by B and sort them by relation scores。 some samples for A： { "n…

---

## ["No field found for \["..."\] in mapping" error with correct mapping](https://discuss.elastic.co/t/no-field-found-for-in-mapping-error-with-correct-mapping/270499)

<div class="topic-metadata">

**Author:** [@Marco\_R](https://discuss.elastic.co/u/Marco_R)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 4:31pm UTC](https://discuss.elastic.co/t/no-field-found-for-in-mapping-error-with-correct-mapping/270499 "2021-04-18T16:31:49Z")

</div>

Hello, new to elastic here. I am trying to run this: GET /test/\_search { "query": { "match": { "doc\_type": "test" } }, "sort": { "\_script" : { "type" : "number", "script" : { …

---

## [Elastic basic version - visualize bulk data aggregations in Tableau](https://discuss.elastic.co/t/elastic-basic-version-visualize-bulk-data-aggregations-in-tableau/270484)

<div class="topic-metadata">

**Author:** [@Rasool\_Shaik](https://discuss.elastic.co/u/Rasool_Shaik)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 4:14pm UTC](https://discuss.elastic.co/t/elastic-basic-version-visualize-bulk-data-aggregations-in-tableau/270484 "2021-04-18T16:14:51Z")

</div>

Hi All We plan to leverage Tableau for visualization of large data indexed in Elasticsearch basic version. Need help with options to aggregate huge data from elasticsearch & visualize within Tableau. Explored ODBC/JDB…

---

## [Elastic cloud bytes received](https://discuss.elastic.co/t/elastic-cloud-bytes-received/270259)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 11\
**Last updated:** [April 18, 2021, 3:21pm UTC](https://discuss.elastic.co/t/elastic-cloud-bytes-received/270259 "2021-04-18T15:21:53Z")

</div>

Hello, I'm using Elastic, Cloud version. Is it possible to view a graph showing the amount of bytes received by the field? For example, the size of the contents of the indexes? Thanks

---

## [Unable to restore to an index in a newer Elastic Version](https://discuss.elastic.co/t/unable-to-restore-to-an-index-in-a-newer-elastic-version/270496)

<div class="topic-metadata">

**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 2:26pm UTC](https://discuss.elastic.co/t/unable-to-restore-to-an-index-in-a-newer-elastic-version/270496 "2021-04-18T14:26:29Z")

</div>

I have taken a snapshot in the version 7.8 and uploaded to AWS S3. After which, I have downloaded a newer version of elastic 7.12 and configured AWS S3. I am able to see the snapshots in kibana, and the restoring is als…

---

## [Heartbeat showing my nodes as down but they are up](https://discuss.elastic.co/t/heartbeat-showing-my-nodes-as-down-but-they-are-up/270406)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 4\
**Last updated:** [April 18, 2021, 1:24pm UTC](https://discuss.elastic.co/t/heartbeat-showing-my-nodes-as-down-but-they-are-up/270406 "2021-04-18T13:24:21Z")

</div>

I set up heartbeat with my cluster ELK 7.12 (2 nodes) running on separate VMs, everything working fine, but when I enabled transport ssl and generated certificates for each node, heartbeat keeps showing that my nodes are…

---

## [Fix unmatched quote and non-whitespaces in csv fields (Filebeat and Ingest Pipeline)](https://discuss.elastic.co/t/fix-unmatched-quote-and-non-whitespaces-in-csv-fields-filebeat-and-ingest-pipeline/270492)

<div class="topic-metadata">

**Author:** [@rawartani](https://discuss.elastic.co/u/rawartani)\
**Replies:** 0\
**Last updated:** [April 18, 2021, 12:00pm UTC](https://discuss.elastic.co/t/fix-unmatched-quote-and-non-whitespaces-in-csv-fields-filebeat-and-ingest-pipeline/270492 "2021-04-18T12:00:19Z")

</div>

I am shipping csv data using Filebeat to the Elasticsearch output, I have an ingest pipeline in place to process the events but I am encountering two events failure: (status=400): {"type":"illegal\_argument\_exception","…

---

## [Post and Comments Mapping](https://discuss.elastic.co/t/post-and-comments-mapping/268007)

<div class="topic-metadata">

**Author:** [@Ignacio\_Fernandez](https://discuss.elastic.co/u/Ignacio_Fernandez)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 12:04pm UTC](https://discuss.elastic.co/t/post-and-comments-mapping/268007 "2021-04-18T12:04:47Z")

</div>

Hello, I need to create a mapping for a forum website, where you have Post (with some properties) and each Post can have multiple comment (with more or less same properties). For this scenario is it better to have Ne…

---

## [Create a mapping that makes all fields type as keyword type](https://discuss.elastic.co/t/create-a-mapping-that-makes-all-fields-type-as-keyword-type/270481)

<div class="topic-metadata">

**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Replies:** 1\
**Last updated:** [April 18, 2021, 7:58am UTC](https://discuss.elastic.co/t/create-a-mapping-that-makes-all-fields-type-as-keyword-type/270481 "2021-04-18T07:58:21Z")

</div>

Hi Is there way to create an index that accept all dynamic fields as keyword type in case of type conflict ? For example: doc 1, { "id":1, "name":"Li" } doc 2, { "id":"uedjks", "name":"Wu…

---

## [Syslog to ECK](https://discuss.elastic.co/t/syslog-to-eck/270010)

<div class="topic-metadata">

**Author:** [@msmill](https://discuss.elastic.co/u/msmill)\
**Replies:** 1\
**Last updated:** [April 17, 2021, 8:52pm UTC](https://discuss.elastic.co/t/syslog-to-eck/270010 "2021-04-17T20:52:04Z")

</div>

Hi! We are running an ECK instance to gather logs from multiple K8s Clusters (not only the one it's running on), Winlogbeats agent on Windows VMs, and would like to send logs from network devices (syslog) to Elastic as …

[Previous page](https://discuss.elastic.co/latest.md?page=1725)

[Next page](https://discuss.elastic.co/latest.md?page=1727)
