# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1738

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1739

---

## [Mapping Conflict Issue](https://discuss.elastic.co/t/mapping-conflict-issue/269719)

<div class="topic-metadata">

**Author:** [@Shivani92](https://discuss.elastic.co/u/Shivani92)\
**Replies:** 1\
**Last updated:** [April 11, 2021, 6:23pm UTC](https://discuss.elastic.co/t/mapping-conflict-issue/269719 "2021-04-11T18:23:10Z")

</div>

If data type of field is changed in logstash configuration then is it required to create new index every time to get the changes apply? Ex. Field "pauseTime" is extracted using KV filter. Data type of the field is chang…

---

## [Best workflow to update integrations](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 0\
**Last updated:** [April 11, 2021, 6:08pm UTC](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819 "2021-04-11T18:08:32Z")

</div>

Hey, When upgrading the stack, integrations aren't automatically updated. After updating the integration manually in fleet, all existing policies remain with their current integration version. What's the best way to up…

---

## [Whether multiple shard refresh is atomic state](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811)

<div class="topic-metadata">

**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\
**Replies:** 1\
**Last updated:** [April 11, 2021, 5:28pm UTC](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811 "2021-04-11T17:28:45Z")

</div>

Suppose I have 3 data nodes, in the process of refreshing, if a search occurs, will there be an intermediate state, for example, node A can search for the latest content, but nodes B and C see the same old content

---

## [Eval script inside field](https://discuss.elastic.co/t/eval-script-inside-field/269816)

<div class="topic-metadata">

**Author:** [@opak](https://discuss.elastic.co/u/opak)\
**Replies:** 0\
**Last updated:** [April 11, 2021, 3:29pm UTC](https://discuss.elastic.co/t/eval-script-inside-field/269816 "2021-04-11T15:29:46Z")

</div>

Hello, i have a question how to eval script which can be stored inside a field. For example, i want to define rules for calculation inside documents. Let's see on this mapping: index: rules { "properties": { "pr…

---

## [Getting Case insensitive Response in Hits](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776)

<div class="topic-metadata">

**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\
**Replies:** 8\
**Last updated:** [April 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776 "2021-04-11T14:05:37Z")

</div>

Hi all I am getting case Insensitive Data in Hits(SearchResponse ) even I am having Case Sensitive Data in Elasticsearch index like index contains { customerName :"David", departmentName:"IT", applicantName:"Raju"} b…

---

## [Get xml node name](https://discuss.elastic.co/t/get-xml-node-name/269775)

<div class="topic-metadata">

**Author:** [@Petr\_Vancl\_Hochberge](https://discuss.elastic.co/u/Petr_Vancl_Hochberge)\
**Replies:** 3\
**Last updated:** [April 11, 2021, 2:35pm UTC](https://discuss.elastic.co/t/get-xml-node-name/269775 "2021-04-11T14:35:51Z")

</div>

Hello, I am little lost with one problem when parsing xml files to ES with Logstash. Due to unfortunate xml structure which I can't change, I need to get string name of specific nodes. Example of xml structure: \<Parent\>…

---

## [Kibana export issues (xpack.reporting.encryptionKey, timeout and data too large)](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 4\
**Last updated:** [April 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408 "2021-04-11T14:30:07Z")

</div>

I have a three node cluster running in my homelab. It is a virtualised environment (ESXi) with Ubuntu server OS (LTS) & two nodes being data nodes & the third one being a voting only node. Both the data nodes run a Kiban…

---

## [Winlogbeats remove @metadata, agent and ecs fields](https://discuss.elastic.co/t/winlogbeats-remove-metadata-agent-and-ecs-fields/269764)

<div class="topic-metadata">

**Author:** [@witkacy](https://discuss.elastic.co/u/witkacy)\
**Replies:** 1\
**Last updated:** [April 11, 2021, 1:35pm UTC](https://discuss.elastic.co/t/winlogbeats-remove-metadata-agent-and-ecs-fields/269764 "2021-04-11T13:35:40Z")

</div>

Hello, Is it possible to not include in exported log fields: @metadata, agent and ecs? I added processor - drop\_fields: fields: \["host", "log", "event", "agent", "ecs", "winlog", "@metadata"\] and most of…

---

## [Elasticsearch syntax for e-commerce type project](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793)

<div class="topic-metadata">

**Author:** [@Ugnius\_V](https://discuss.elastic.co/u/Ugnius_V)\
**Replies:** 2\
**Last updated:** [April 11, 2021, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793 "2021-04-11T13:04:26Z")

</div>

Hello! First of all, I'm a beginner Elasticsearch. Now we are creating a web system that requires a search feature (yah, first time, earlier we created static content systems :grinning\_face\_with\_smiling\_eyes: ), so we ch…

---

## [Kubernetes pods stdout logs](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802)

<div class="topic-metadata">

**Author:** [@dogan](https://discuss.elastic.co/u/dogan)\
**Replies:** 0\
**Last updated:** [April 11, 2021, 11:03am UTC](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802 "2021-04-11T11:03:26Z")

</div>

Hello, I installed a kubernetes cluster. I want the stdout logs of these cluster pots to be sent to elasticsearch. how can I do it

---

## [Elastic search is not using data path setting](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796)

<div class="topic-metadata">

**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\
**Replies:** 5\
**Last updated:** [April 11, 2021, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796 "2021-04-11T10:45:57Z")

</div>

I am trying to run 2 elastic search instances in single VM machine with the below configuration. Both are started successfully. But both are using same data store I have given the different path in data store but its n…

---

## [Ignore gobal filter not found](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769)

<div class="topic-metadata">

**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\
**Replies:** 2\
**Last updated:** [April 11, 2021, 9:22am UTC](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769 "2021-04-11T09:22:37Z")

</div>

Hi guys, I would like to have a dashboard with two maps (identical) on which I can indipendently slect filters from the + sign in one tooltip and have them filtered indipendently to compare visually what happens. Is it…

---

## [Elastic Search Single Node Cluster not working](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785)

<div class="topic-metadata">

**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 7:44pm UTC](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785 "2021-04-10T19:44:06Z")

</div>

I am trying to set up single node elastic search. But master node is not at all discovering. If I start with cluster.initial\_master\_nodes as one node. Master is elected but cluster formation is not happening and RemoteT…

---

## [Kibana error - Internal Server Error](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 6:36pm UTC](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780 "2021-04-10T18:36:04Z")

</div>

Whenever I try to export data from Kibana, I am getting internal service error. Following is the log entry in kibana.log. Could I kindly request someone to help me resolve this please. {"type":"log","@timestamp":"2021-…

---

## [ElasticSearch stops working after sometime](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373)

<div class="topic-metadata">

**Author:** [@Devendra\_Deshmukh](https://discuss.elastic.co/u/Devendra_Deshmukh)\
**Replies:** 9\
**Last updated:** [April 10, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373 "2021-04-10T15:30:55Z")

</div>

My ElasticSearch server works fine for a few hours or a day and suddenly stops working. It has 1 shard and 1 replica on a single node installed on VPS along with the application server and has only 1 index with 30,000 do…

---

## [Case insensitive search on keyword](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773)

<div class="topic-metadata">

**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\
**Replies:** 3\
**Last updated:** [April 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773 "2021-04-10T15:24:46Z")

</div>

My index looks something like this: { "mappings": { "properties": { "id": { "type": "integer" }, "clientId": { "type": "integer"}, "status": { "type": "keyword" }, "r…

---

## [How to print out %{host.ip} using line codec?](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750)

<div class="topic-metadata">

**Author:** [@hmiti](https://discuss.elastic.co/u/hmiti)\
**Replies:** 6\
**Last updated:** [April 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750 "2021-04-10T15:09:32Z")

</div>

I am using the line codec to output the logs into a text file. Requested to include only the IP and log entry itself. Tried different combination of %{host}.{ip} like this, nothing works so far. output { file { p…

---

## [Changing the Login screen logo and text](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636)

<div class="topic-metadata">

**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 12:53pm UTC](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636 "2021-04-10T12:53:26Z")

</div>

Hi, How can I change the login screen logo and text of kibana version 7.11. I tried with some already available post but they seems deprecated.

---

## [How to Sum two or more integer from different logs](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 4\
**Last updated:** [April 10, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767 "2021-04-10T11:56:11Z")

</div>

Hi I have 2logs: { "\_index": "monitoring", "\_type": "\_doc", "\_id": "1", "\_version": 1, "\_score": null, "\_source": { "jobtypedescription": "Monitor", "@version": "1", "jobtypeid": 1, "jobacti…

---

## [ElasticSearch - Nest - Mapping hits nested in lists and dictionaries](https://discuss.elastic.co/t/elasticsearch-nest-mapping-hits-nested-in-lists-and-dictionaries/269772)

<div class="topic-metadata">

**Author:** [@h4tle](https://discuss.elastic.co/u/h4tle)\
**Replies:** 0\
**Last updated:** [April 10, 2021, 11:51am UTC](https://discuss.elastic.co/t/elasticsearch-nest-mapping-hits-nested-in-lists-and-dictionaries/269772 "2021-04-10T11:51:46Z")

</div>

TLDR: How do I get the data I need to sit inside source like my timestamp and not inside a million lists and dictionaries? I'm trying to create Data objects from this Nest query. The data comes from MetricBeats and ends…

---

## [How to upload csv files with high speed to Elasticsearch ( bulk copy , block copy )](https://discuss.elastic.co/t/how-to-upload-csv-files-with-high-speed-to-elasticsearch-bulk-copy-block-copy/269770)

<div class="topic-metadata">

**Author:** [@siyavusak](https://discuss.elastic.co/u/siyavusak)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-upload-csv-files-with-high-speed-to-elasticsearch-bulk-copy-block-copy/269770 "2021-04-10T11:24:43Z")

</div>

How to upload csv files with high speed / best performance to Elasticsearch ( bulk copy , block copy ) ? we have got csv format files every with 1TB size . regards

---

## [How how use aggregations and pagination in java High Level Rest Client](https://discuss.elastic.co/t/how-how-use-aggregations-and-pagination-in-java-high-level-rest-client/269765)

<div class="topic-metadata">

**Author:** [@adelDz](https://discuss.elastic.co/u/adelDz)\
**Replies:** 0\
**Last updated:** [April 10, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-how-use-aggregations-and-pagination-in-java-high-level-rest-client/269765 "2021-04-10T08:36:07Z")

</div>

Hello, I'm using es version 7.1, and i want to paginate records with aggregation, the probleme is, i dont found tag from for controlling number of page for my aggregation Here is my code @Override public Maybe\<Sea…

---

## [Is the bulk thread pool bounded by n. processors?](https://discuss.elastic.co/t/is-the-bulk-thread-pool-bounded-by-n-processors/268840)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 5\
**Last updated:** [April 10, 2021, 7:19am UTC](https://discuss.elastic.co/t/is-the-bulk-thread-pool-bounded-by-n-processors/268840 "2021-04-10T07:19:53Z")

</div>

Hey there, I am trying to increase the number of the thread pool size related to bulk but when I try nothing happens. The only way to do it is to use processor settings. Can you explain it to me the reason?

---

## [Upgrade the Elasticsearch to 7.10 version warning](https://discuss.elastic.co/t/upgrade-the-elasticsearch-to-7-10-version-warning/269756)

<div class="topic-metadata">

**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\
**Replies:** 4\
**Last updated:** [April 10, 2021, 7:06am UTC](https://discuss.elastic.co/t/upgrade-the-elasticsearch-to-7-10-version-warning/269756 "2021-04-10T07:06:35Z")

</div>

I have a elasticsearch cluster about 6 node(3 masters , 3 data,the version is 6.6, running through the docker), and then, I want to upgrade it from 6.6 to 7.10 , accronding to the Official document ， I must upgrade my c…

---

## [Zero like result in canvas](https://discuss.elastic.co/t/zero-like-result-in-canvas/269694)

<div class="topic-metadata">

**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\
**Replies:** 3\
**Last updated:** [April 10, 2021, 4:56am UTC](https://discuss.elastic.co/t/zero-like-result-in-canvas/269694 "2021-04-10T04:56:05Z")

</div>

I have a question, on Metric, I can have the "0" like result because I have this symbol: and i want to have "0" instead of this symbol. Could anyone help me ? I can not it solve. filters | essql query="SELECT SUM…

---

## [Rally give different report on different clusters. Some metrics are missing](https://discuss.elastic.co/t/rally-give-different-report-on-different-clusters-some-metrics-are-missing/269758)

<div class="topic-metadata">

**Author:** [@Harvey\_Hepburn](https://discuss.elastic.co/u/Harvey_Hepburn)\
**Replies:** 0\
**Last updated:** [April 10, 2021, 3:43am UTC](https://discuss.elastic.co/t/rally-give-different-report-on-different-clusters-some-metrics-are-missing/269758 "2021-04-10T03:43:25Z")

</div>

I'm using the latest docker version of rally. My rally gives me different reports on different clusters. One type looks like Metric,Task,Value,Unit Total Young Gen GC time,,0,s Total Young Gen GC count,,0, Total Old Gen…

---

## [I have this error bash: ./metricbeat: cannot execute binary file: Exec format error](https://discuss.elastic.co/t/i-have-this-error-bash-metricbeat-cannot-execute-binary-file-exec-format-error/269157)

<div class="topic-metadata">

**Author:** [@muradazz](https://discuss.elastic.co/u/muradazz)\
**Replies:** 29\
**Last updated:** [April 10, 2021, 2:56am UTC](https://discuss.elastic.co/t/i-have-this-error-bash-metricbeat-cannot-execute-binary-file-exec-format-error/269157 "2021-04-10T02:56:45Z")

</div>

root@mu:/home/murad/metricbeat-7.12.0-darwin-x86\_64# uname -m x86\_64 root@mu:/home/murad/metricbeat-7.12.0-darwin-x86\_64# file metricbeat metricbeat: Mach-O 64-bit x86\_64 executable, flags:\<|DYLDLINK\> root@mu:/home/m…

---

## [Canvas multiple pages](https://discuss.elastic.co/t/canvas-multiple-pages/269754)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 1:01am UTC](https://discuss.elastic.co/t/canvas-multiple-pages/269754 "2021-04-10T01:01:01Z")

</div>

Hi there! Is it possible to have multiple pages in Canvas? if so, how? R

---

## [Retraining ML jobs](https://discuss.elastic.co/t/retraining-ml-jobs/269381)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 3\
**Last updated:** [April 10, 2021, 12:36am UTC](https://discuss.elastic.co/t/retraining-ml-jobs/269381 "2021-04-10T00:36:15Z")

</div>

I'm currently using ML to track anomalies in my system. I'm wondering if it's possible to mark certain anomalies as incorrect results and have ML use that in its future predictions? I saw the rule functionality but that …

---

## [How can I disable coordination in a bool query in Elasticsearch 7](https://discuss.elastic.co/t/how-can-i-disable-coordination-in-a-bool-query-in-elasticsearch-7/269755)

<div class="topic-metadata">

**Author:** [@MountainMoon](https://discuss.elastic.co/u/MountainMoon)\
**Replies:** 0\
**Last updated:** [April 9, 2021, 11:51pm UTC](https://discuss.elastic.co/t/how-can-i-disable-coordination-in-a-bool-query-in-elasticsearch-7/269755 "2021-04-09T23:51:41Z")

</div>

Hi there, I'm trying to upgrade the search system from elasticsearch 5 to 7. But i found that "disable\_coord" feature in BoolQueryDescriptor has been deprecated since elasticsearch version 6. Is there a same faeture in e…

[Previous page](https://discuss.elastic.co/latest.md?page=1737)

[Next page](https://discuss.elastic.co/latest.md?page=1739)
