# Latest **URL:** https://discuss.elastic.co/latest.md?page=1755 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1756 --- ## [400 error from \_reindex](https://discuss.elastic.co/t/400-error-from-reindex/268926)
**Author:** [@drdwilcox](https://discuss.elastic.co/u/drdwilcox)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 2:54pm UTC](https://discuss.elastic.co/t/400-error-from-reindex/268926 "2021-03-31T14:54:23Z")
I am attempting to use reindex to effect the conversion of a single field from a string to a float. I have run this on several indices without issue, but in my most recent attempt, I get the following error after 29,000 … --- ## [APM java agent request timeout logs](https://discuss.elastic.co/t/apm-java-agent-request-timeout-logs/268695)
**Author:** [@EdeV](https://discuss.elastic.co/u/EdeV)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 3:50pm UTC](https://discuss.elastic.co/t/apm-java-agent-request-timeout-logs/268695 "2021-03-31T15:50:38Z")
I have a question regarding the following information noted in the APM Java Agent Reference \[1.x\] Troubleshooting guide. Since none of these continuously repeating DEBUG logs appear to be associated with an other WARN o… --- ## [Default log paths used for beats](https://discuss.elastic.co/t/default-log-paths-used-for-beats/268907)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 3:50pm UTC](https://discuss.elastic.co/t/default-log-paths-used-for-beats/268907 "2021-03-31T15:50:04Z")
Hi, I have an AIX server and cant install beats on it so as a workaround want to forward logs in another server and install beats and read from there. I wanted to know the default paths used by: Metricbeat system mod… --- ## [Preventing specific events from being indexed](https://discuss.elastic.co/t/preventing-specific-events-from-being-indexed/268522)
**Author:** [@tsmori](https://discuss.elastic.co/u/tsmori)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 3:48pm UTC](https://discuss.elastic.co/t/preventing-specific-events-from-being-indexed/268522 "2021-03-31T15:48:30Z")
Is there a way to prevent specific events from being indexed? I don't mean specific fields, but conditionals for a field. For example, we're ingesting netflow traffic data and I want to exclude all events that have both… --- ## [Tabelle in Vega](https://discuss.elastic.co/t/tabelle-in-vega/268793)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 5\ **Last updated:** [March 31, 2021, 3:35pm UTC](https://discuss.elastic.co/t/tabelle-in-vega/268793 "2021-03-31T15:35:36Z")
hello guys, I have a requirement, looks like this scenario, from a CSV file 5 columns are imported into kibana and the expected visualization of it data is to create kind of table Visia.. where the values of the fields… --- ## [Logstash Kafka input : conditonnal consuming?](https://discuss.elastic.co/t/logstash-kafka-input-conditonnal-consuming/268664)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 12\ **Last updated:** [March 31, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-conditonnal-consuming/268664 "2021-03-31T15:27:08Z")
Hello ! I have multiple firewall log sources. All these sources push the logs in a dedicated topic named "firewall". In logstash, I would like to have a different pipeline for each of these sources to apply different p… --- ## [Kibana change of decimal values in colour](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327 "2021-03-31T15:12:08Z")
Hi all, I'm a float numeric field which i have values like 21.283774493. I have managed to limit to 2 digits like 21.28. Now the problem is when i use conditional colour for my number in edit field option, format goes… --- ## [Kibana (7.11.1) isn't showing logs](https://discuss.elastic.co/t/kibana-7-11-1-isnt-showing-logs/268399)
**Author:** [@AnneHermann](https://discuss.elastic.co/u/AnneHermann)\ **Replies:** 13\ **Last updated:** [March 31, 2021, 3:11pm UTC](https://discuss.elastic.co/t/kibana-7-11-1-isnt-showing-logs/268399 "2021-03-31T15:11:44Z")
Hi, I have an index, that is containing log data, but the data can't be seen under Observability -\> Logs. I have also created an index pattern and choose a time field. I adjusted the settings of Observability -\> Logs t… --- ## [Metricbeat extreme memory usage](https://discuss.elastic.co/t/metricbeat-extreme-memory-usage/268850)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 3:07pm UTC](https://discuss.elastic.co/t/metricbeat-extreme-memory-usage/268850 "2021-03-31T15:07:51Z")
I'm getting serius metricbeat memory spikes. i'm currently using metricbeat 7.11 in my server as we can see in the next screenshot the memory usage is just to high. i din't found any error log in the service , i'm no… --- ## [Strange ILM error "Mapping definition for ... has unsupported parameters: \[normalizer : my\_normalizer\]"](https://discuss.elastic.co/t/strange-ilm-error-mapping-definition-for-has-unsupported-parameters-normalizer-my-normalizer/268092)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 2:52pm UTC](https://discuss.elastic.co/t/strange-ilm-error-mapping-definition-for-has-unsupported-parameters-normalizer-my-normalizer/268092 "2021-03-31T14:52:38Z")
Hey guys, i've got strange ILM error during an ILM phase: ... policy \[p-ilm\] for index \[p-auditbeat-000009\] failed on step \[{"phase":"hot","action":"rollover","name":"attempt-rollover"}\]. Moving to ERROR step Mapping d… --- ## [Could not dynamically add mapping for field \[stats.something.else\]. Existing mapping for \[stats.something\] must be of type object but found \[long\]](https://discuss.elastic.co/t/could-not-dynamically-add-mapping-for-field-stats-something-else-existing-mapping-for-stats-something-must-be-of-type-object-but-found-long/268919)
**Author:** [@szabgab](https://discuss.elastic.co/u/szabgab)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 2:48pm UTC](https://discuss.elastic.co/t/could-not-dynamically-add-mapping-for-field-stats-something-else-existing-mapping-for-stats-something-must-be-of-type-object-but-found-long/268919 "2021-03-31T14:48:44Z")
The problem seems to be that we have both a field called stats.something and another field called stats.something.else. I get the above error when I try to submit the second piece of data. I could replace each dot with … --- ## [Heatmap with custom space](https://discuss.elastic.co/t/heatmap-with-custom-space/268902)
**Author:** [@Eddie\_Adams](https://discuss.elastic.co/u/Eddie_Adams)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 2:42pm UTC](https://discuss.elastic.co/t/heatmap-with-custom-space/268902 "2021-03-31T14:42:54Z")
{"timestamp": "2021-03-31T14:07:50.465", "key": "h", "code": "4", "type": "\[down\]"} {"timestamp": "2021-03-31T14:07:50.592", "key": "e", "code": "14", "type": "\[down\]"} {"timestamp": "2021-03-31T14:07:50.697", "key": "… --- ## [Best approach to apply Fine Grained Access Control to index documents](https://discuss.elastic.co/t/best-approach-to-apply-fine-grained-access-control-to-index-documents/268817)
**Author:** [@grugna](https://discuss.elastic.co/u/grugna)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 1:31pm UTC](https://discuss.elastic.co/t/best-approach-to-apply-fine-grained-access-control-to-index-documents/268817 "2021-03-31T13:31:55Z")
I have a service that apply fine grained access control to ES index document and I am facing some ES limitation / performance issue. For this reason I am not sure if my approach is correct, of if there is a better way to… --- ## [I wrote a book with practical Elasticsearch examples](https://discuss.elastic.co/t/i-wrote-a-book-with-practical-elasticsearch-examples/268910)
**Author:** [@JoeSorocin](https://discuss.elastic.co/u/JoeSorocin)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 1:09pm UTC](https://discuss.elastic.co/t/i-wrote-a-book-with-practical-elasticsearch-examples/268910 "2021-03-31T13:09:16Z")
Hey guys! After hundreds of hours spent on answering questions on Stackoverflow, I observed a few barriers of entry that ES newbies struggle with. It's first and foremost the formidable query language. Now, most of us … --- ## [Bucket Path to access Top-hits aggregation in elasticsearch query](https://discuss.elastic.co/t/bucket-path-to-access-top-hits-aggregation-in-elasticsearch-query/268904)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 12:34pm UTC](https://discuss.elastic.co/t/bucket-path-to-access-top-hits-aggregation-in-elasticsearch-query/268904 "2021-03-31T12:34:27Z")
Hello, I have an index "jmx\_metrics-\*" that contains JVM monitoring data from Jconsole. Following it the mapping of index. { "jmx\_metrics-2021.03" : { "aliases" : { }, "mappings" : { "properties" : { … --- ## [ElasticSearch performance trouble when indexing data](https://discuss.elastic.co/t/elasticsearch-performance-trouble-when-indexing-data/268745)
**Author:** [@nicolaipre](https://discuss.elastic.co/u/nicolaipre)\ **Replies:** 10\ **Last updated:** [March 31, 2021, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-performance-trouble-when-indexing-data/268745 "2021-03-31T11:01:41Z")
Hi. I have about 4 TB of data I want to index in Elasticsearch. The amount of data per index will vary, depending on the source data file. These are only static files containing old data that will be ingested and made s… --- ## [Search multiple values for a single field](https://discuss.elastic.co/t/search-multiple-values-for-a-single-field/268327)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 12\ **Last updated:** [March 31, 2021, 11:52am UTC](https://discuss.elastic.co/t/search-multiple-values-for-a-single-field/268327 "2021-03-31T11:52:42Z")
Hii.. All , I am pretty new in elk search, I want to find out multiple values for a single field (diseases:” fever,covid\_19”) with in a must with wildcard condition here the data is like this Diseases: “fever, headache… --- ## [Date Range Not Working with Now](https://discuss.elastic.co/t/date-range-not-working-with-now/268825)
**Author:** [@rohan\_5894](https://discuss.elastic.co/u/rohan_5894)\ **Replies:** 8\ **Last updated:** [March 31, 2021, 11:50am UTC](https://discuss.elastic.co/t/date-range-not-working-with-now/268825 "2021-03-31T11:50:38Z")
I am trying to show only those documents where published\_at date is less than now-7d/d. #It seems ES is not working correctly here. I tried with an example of showing documents which are having published\_at filed greater… --- ## [Flare.json not loading for TREEMAP](https://discuss.elastic.co/t/flare-json-not-loading-for-treemap/268869)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 11:50am UTC](https://discuss.elastic.co/t/flare-json-not-loading-for-treemap/268869 "2021-03-31T11:50:13Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [Winlogbeat keystore windows](https://discuss.elastic.co/t/winlogbeat-keystore-windows/268769)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 6\ **Last updated:** [March 31, 2021, 11:12am UTC](https://discuss.elastic.co/t/winlogbeat-keystore-windows/268769 "2021-03-31T11:12:29Z")
I have created a keystore for winlogbeats as the administrator and modified winlogbeat.yml When i try and start the service it fails (running as local system) if i run winlogbeat manually it starts I can see the issue… --- ## [High level concepts of elastic stack in containerized environment](https://discuss.elastic.co/t/high-level-concepts-of-elastic-stack-in-containerized-environment/268750)
**Author:** [@siplsag](https://discuss.elastic.co/u/siplsag)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 11:08am UTC](https://discuss.elastic.co/t/high-level-concepts-of-elastic-stack-in-containerized-environment/268750 "2021-03-31T11:08:34Z")
We think about using an Elastic (ELK) stack to process logs from our servers. We have about ten virtual Ubuntu servers that run on prem. All of those servers run some docker images, currently orchestrated by docker-compo… --- ## [Install elasticsearch on apache](https://discuss.elastic.co/t/install-elasticsearch-on-apache/268875)
**Author:** [@alexkr](https://discuss.elastic.co/u/alexkr)\ **Replies:** 5\ **Last updated:** [March 31, 2021, 10:40am UTC](https://discuss.elastic.co/t/install-elasticsearch-on-apache/268875 "2021-03-31T10:40:30Z")
Hey I try to install elasticsearch on my centos 7 but all the installation guide are using ngxin and I need to install it on apache server. Someone did it and please can send me how to do it? --- ## [Exact phrase near other terms](https://discuss.elastic.co/t/exact-phrase-near-other-terms/268893)
**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 10:20am UTC](https://discuss.elastic.co/t/exact-phrase-near-other-terms/268893 "2021-03-31T10:20:34Z")
Is there a way to search for one or more exact phrases near one or more other terms/phrases? I'm using MatchPhrase with slop zero to find exact phrases fine and using Match to find two or more terms near each other but … --- ## [Elasticsearch or Kibana How to merge two \_id data](https://discuss.elastic.co/t/elasticsearch-or-kibana-how-to-merge-two-id-data/268887)
**Author:** [@Ivan\_chen](https://discuss.elastic.co/u/Ivan_chen)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-or-kibana-how-to-merge-two-id-data/268887 "2021-03-31T09:21:35Z")
Hi I use metricbeat redis moduls My data have two event.dataset in one index I want merge data , Show on kibana data table 1.redis.info Host version 127.0.0.1 5.0.8 127.0.0.2 3.2.0 127.0.0.3 5.0.8 2.re… --- ## [Shrink unable to allocate index due to initial\_recovery setting](https://discuss.elastic.co/t/shrink-unable-to-allocate-index-due-to-initial-recovery-setting/268813)
**Author:** [@toby\_jn](https://discuss.elastic.co/u/toby_jn)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 9:38am UTC](https://discuss.elastic.co/t/shrink-unable-to-allocate-index-due-to-initial-recovery-setting/268813 "2021-03-31T09:38:43Z")
We ran into a very strange issue with index shrink following recovery from a complete cluster network outage. The outage appears to have taken place in the middle of a shrink operation and following the restart the shrin… --- ## [Trying to build a table visualization with multiple aggregations](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288 "2021-03-31T09:28:18Z")
I want to build a table of alerts from and IDS where the rows are keyed on a term (alert name) then in the first column, the second column I want the alert category then I want then number of unique src IP addresses and … --- ## [Issue with query\_string query](https://discuss.elastic.co/t/issue-with-query-string-query/268889)
**Author:** [@arthur\_th](https://discuss.elastic.co/u/arthur_th)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/issue-with-query-string-query/268889 "2021-03-31T09:28:17Z")
Hello, I am new to the Elastic stack, I want to do a specific search and it doesn't seem to work. I want to search for a regex respecting word order. For example this would be a query with query\_string: '(/Cytochrome\[… --- ## [Certificate issue with elasticsearch SSL](https://discuss.elastic.co/t/certificate-issue-with-elasticsearch-ssl/268659)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 9:07am UTC](https://discuss.elastic.co/t/certificate-issue-with-elasticsearch-ssl/268659 "2021-03-31T09:07:23Z")
Hi All, We have created a self signed certificate for elasticsearch to use elastic through https, all working good with self signed certificate ( which is not a trusted certificate) Now we got a trusted certificate and… --- ## [Multi tenant cluster architecture](https://discuss.elastic.co/t/multi-tenant-cluster-architecture/268841)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 6:15am UTC](https://discuss.elastic.co/t/multi-tenant-cluster-architecture/268841 "2021-03-31T06:15:22Z")
How would you design a multi tenant cluster in eladtic 7.12? Should support 5000 tenants . Some have less than 100mb of data and some 150 gb or more. I thought of having shared datastream for the small ones, and dedicat… --- ## [How to assign one value to another](https://discuss.elastic.co/t/how-to-assign-one-value-to-another/268824)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 5\ **Last updated:** [March 31, 2021, 8:52am UTC](https://discuss.elastic.co/t/how-to-assign-one-value-to-another/268824 "2021-03-31T08:52:13Z")
Hi , I am new to logstash I have below data in JSON. "attributes": \[ { "name": "test1", "value": "test1\_value" }, { "name": "test2", "value": "test2\_value" } \] I want this data in below format : "attributes": … [Previous page](https://discuss.elastic.co/latest.md?page=1754) [Next page](https://discuss.elastic.co/latest.md?page=1756)