# Latest **URL:** https://discuss.elastic.co/latest.md?page=1762 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1763 --- ## [Delete field mapping is impossible, but what is the technical restriction to add this feature?](https://discuss.elastic.co/t/delete-field-mapping-is-impossible-but-what-is-the-technical-restriction-to-add-this-feature/268572)
**Author:** [@timotta](https://discuss.elastic.co/u/timotta)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 11:47pm UTC](https://discuss.elastic.co/t/delete-field-mapping-is-impossible-but-what-is-the-technical-restriction-to-add-this-feature/268572 "2021-03-27T23:47:47Z")
I have no knowledge yet in Elastic Search source code, so I don't know if i'm too much naive thinking that if we had a feature to delete a field mapping, the only think to do would be to delete the inverted index for thi… --- ## [Logstash not starting properly](https://discuss.elastic.co/t/logstash-not-starting-properly/268549)
**Author:** [@snobysmake](https://discuss.elastic.co/u/snobysmake)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 4:34pm UTC](https://discuss.elastic.co/t/logstash-not-starting-properly/268549 "2021-03-27T16:34:49Z")
For some strange reason, starting logstash manually seems to work like, bin/logstash -f proj.conf It doesn't start if I run, systemctl start logstash Nothing on the logs since the 25th as shown below, \[2021-03-25T20… --- ## [Kibana dashboard not updating when panels are edited](https://discuss.elastic.co/t/kibana-dashboard-not-updating-when-panels-are-edited/267020)
**Author:** [@BoomBoomPow](https://discuss.elastic.co/u/BoomBoomPow)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 3:54pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-updating-when-panels-are-edited/267020 "2021-03-27T15:54:39Z")
I already have my Kibana dashboard set up for some time now. Just recently, I had to update a panel and add a couple visualization. Then after saving the dashboard, everything seems normal. But when I access the dashb… --- ## [Send data kibana via curl post](https://discuss.elastic.co/t/send-data-kibana-via-curl-post/268531)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 4\ **Last updated:** [March 27, 2021, 3:49pm UTC](https://discuss.elastic.co/t/send-data-kibana-via-curl-post/268531 "2021-03-27T15:49:10Z")
Hi, I'm trying to send data to my Elastic Cloud instance via CURL POST, in this way: curl -v -X POST -u XXX:XXX -H "Content-Type: application/json" "https://XXX.es.europe-west3.gcp.cloud.es.io:9243/test/\_doc " -d' { "f… --- ## [New Settings for Cluster Replication on Multiple VMs](https://discuss.elastic.co/t/new-settings-for-cluster-replication-on-multiple-vms/268335)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 1:01pm UTC](https://discuss.elastic.co/t/new-settings-for-cluster-replication-on-multiple-vms/268335 "2021-03-25T13:01:00Z")
Guys, Can you please provide an updated post with regards on how can I set 3 ES VMs that can communicate with one another? I found on the web or here some old settings that do not work. With the new files some settings… --- ## [Reset, Reinitialize Enterprise Search](https://discuss.elastic.co/t/reset-reinitialize-enterprise-search/268551)
**Author:** [@roman.huesler](https://discuss.elastic.co/u/roman.huesler)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 1:08pm UTC](https://discuss.elastic.co/t/reset-reinitialize-enterprise-search/268551 "2021-03-27T13:08:44Z")
I use an on premise deployment of elastic search 7.10.2. Recently I have migrated all my indices to another onpremise cluster and everything is working fine so far. Cluster State green, all indices green. But my enterpri… --- ## [Select columns in a Date Histogram visualization chart](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149)
**Author:** [@Arieh\_Tal](https://discuss.elastic.co/u/Arieh_Tal)\ **Replies:** 11\ **Last updated:** [March 27, 2021, 1:05pm UTC](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149 "2021-03-27T13:05:53Z")
I want to select some columns of the following date histogram based on date range e.g 18:00 daily Added: The columns represent the sum of documents per 6 hour interval See required result below Thanks, Arieh Tal … --- ## [Shard Size is 50gb](https://discuss.elastic.co/t/shard-size-is-50gb/268441)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [March 27, 2021, 5:58am UTC](https://discuss.elastic.co/t/shard-size-is-50gb/268441 "2021-03-27T05:58:38Z")
I have an index called log-wlb-sysmon-2021.03.20-00002 and i am using ILM Policy for this index { "winlogbeat\_sysmon\_policy" : { "version" : 8, "modified\_date" : "2021-03-26T05:06:42.599Z", "policy" : { … --- ## [Es docker 10.2 version is upgraded to 12.0, log "SearchPhaseExecutionException: all shards failed"](https://discuss.elastic.co/t/es-docker-10-2-version-is-upgraded-to-12-0-log-searchphaseexecutionexception-all-shards-failed/268547)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 5:37am UTC](https://discuss.elastic.co/t/es-docker-10-2-version-is-upgraded-to-12-0-log-searchphaseexecutionexception-all-shards-failed/268547 "2021-03-27T05:37:37Z")
{"type": "server", "timestamp": "2021-03-27T00:33:09,519Z", "level": "WARN", "component": "r.suppressed", "cluster.name": "es-single-node", "node.name": "es-docker", "message": "path: /elastalert\_status\_test/\_search, pa… --- ## [How to create SLA breach graph](https://discuss.elastic.co/t/how-to-create-sla-breach-graph/268525)
**Author:** [@Flavio\_Cadete](https://discuss.elastic.co/u/Flavio_Cadete)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 5:21am UTC](https://discuss.elastic.co/t/how-to-create-sla-breach-graph/268525 "2021-03-27T05:21:59Z")
Product Team requires a graph in Kibana for find SLA breaches. In each document of our index we have 2 dates: created, modified There are 2 scenarios that we want to detect: Pending Checks (documents) where Created \> … --- ## [Filebeat - Logstash SSL not working](https://discuss.elastic.co/t/filebeat-logstash-ssl-not-working/268476)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 5:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-ssl-not-working/268476 "2021-03-27T05:06:08Z")
Problem Statement - Unable to transfer filebeat logs to logstash when SSL is enabled. Logstash keeps on complaining about incorrect OpenSSL version number PS - Filebeat works fine when SSL is disabled & able to transfer… --- ## [Elasticsearch API for Updating multiple fields for multiple documents that belongs to an index in Elasticsearch](https://discuss.elastic.co/t/elasticsearch-api-for-updating-multiple-fields-for-multiple-documents-that-belongs-to-an-index-in-elasticsearch/268515)
**Author:** [@Srikanth\_Choppara](https://discuss.elastic.co/u/Srikanth_Choppara)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 2:05am UTC](https://discuss.elastic.co/t/elasticsearch-api-for-updating-multiple-fields-for-multiple-documents-that-belongs-to-an-index-in-elasticsearch/268515 "2021-03-27T02:05:19Z")
I have a requirement to update fields of all the documents that were fetched based on come criteria or filter. There is one particular field which should be updated as appending to the existing content. Is there any w… --- ## [How to compare the sums of multiple columns?](https://discuss.elastic.co/t/how-to-compare-the-sums-of-multiple-columns/268491)
**Author:** [@saintjohn](https://discuss.elastic.co/u/saintjohn)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 12:08am UTC](https://discuss.elastic.co/t/how-to-compare-the-sums-of-multiple-columns/268491 "2021-03-27T00:08:54Z")
Hi, I have datasets like below. { count\_A: 10, count\_B: 5 } { count\_A: 20, count\_: 5 } I would to create a Kibana pie chart that compares the sums of each columns. In this case, 30 vs 10 for count\_A and count\_… --- ## [How to include specific field values in Kibana mail action](https://discuss.elastic.co/t/how-to-include-specific-field-values-in-kibana-mail-action/268305)
**Author:** [@vkoukou](https://discuss.elastic.co/u/vkoukou)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 10:51pm UTC](https://discuss.elastic.co/t/how-to-include-specific-field-values-in-kibana-mail-action/268305 "2021-03-26T22:51:25Z")
Is there a way to include one or more of the event fields in the message of a Kibana Mail alert? Thanks in advance for your help. --- ## [Send data via mqtt](https://discuss.elastic.co/t/send-data-via-mqtt/268372)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 11\ **Last updated:** [March 26, 2021, 9:40pm UTC](https://discuss.elastic.co/t/send-data-via-mqtt/268372 "2021-03-26T21:40:19Z")
Hello, I am using an Elastic Cloud instance and I was wondering if there was the possibility to send data via MQTT from a Linux system device in the cloud. How can I do? Thank you --- ## [Problem with filter](https://discuss.elastic.co/t/problem-with-filter/268466)
**Author:** [@modesto](https://discuss.elastic.co/u/modesto)\ **Replies:** 6\ **Last updated:** [March 26, 2021, 8:19pm UTC](https://discuss.elastic.co/t/problem-with-filter/268466 "2021-03-26T20:19:16Z")
Hi community I'm quite new to Elastic and have run into some obstacles. I want to do a search on a specific company id, with filters, but can't it to work, although it works with query. Why is that? curl --location -… --- ## [Duration field formatter hh:mm:ss](https://discuss.elastic.co/t/duration-field-formatter-hhss/268533)
**Author:** [@Carl\_Schneidinger](https://discuss.elastic.co/u/Carl_Schneidinger)\ **Replies:** 2\ **Last updated:** [March 26, 2021, 8:14pm UTC](https://discuss.elastic.co/t/duration-field-formatter-hhss/268533 "2021-03-26T20:14:01Z")
I have a number field that represents a time duration in seconds. I set this field as duration in an index pattern. My end users want to see the time duration in hh:mm:ss instead of number of seconds/minutes/hours. Th… --- ## [Elastic SaaS on Azure - Securing data and communication](https://discuss.elastic.co/t/elastic-saas-on-azure-securing-data-and-communication/268222)
**Author:** [@ceiche](https://discuss.elastic.co/u/ceiche)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 7:59pm UTC](https://discuss.elastic.co/t/elastic-saas-on-azure-securing-data-and-communication/268222 "2021-03-26T19:59:36Z")
One of my client is planning to use Elastic SaaS Solution from Elastic on Azure (native Elasticsearch) for document search. It will be storing very sensitive data. So the question is how "secure" an Elastic SaaS solutio… --- ## [7.11.0 Detections need permissions](https://discuss.elastic.co/t/7-11-0-detections-need-permissions/266610)
**Author:** [@mlove](https://discuss.elastic.co/u/mlove)\ **Replies:** 13\ **Last updated:** [March 26, 2021, 6:46pm UTC](https://discuss.elastic.co/t/7-11-0-detections-need-permissions/266610 "2021-03-26T18:46:59Z")
Hi All, I'm using docker-compose to deploy 5 elastic nodes and 1 kibana. I followed the guide here: Additionally, I have set the following fields: xpack.encryptedSavedObjects.encryptionKey: xpack.reporting.encrypt… --- ## [Logstash http output basic auth base64 encode not parsed](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432)
**Author:** [@lemoncodes91](https://discuss.elastic.co/u/lemoncodes91)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 5:02pm UTC](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432 "2021-03-26T17:02:53Z")
Hello i followed some guides on how to do basic auth in logstash. However, when i check the outgoing packet from logstash, the HTTP protocol contains "Authorization: Basic %{password}" instead of "Authorization: Basic \ **Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [March 26, 2021, 4:58pm UTC](https://discuss.elastic.co/t/replay-old-events-as-if-they-were-new/268218 "2021-03-26T16:58:01Z") Suppose I have: A Kibana dashboard that shows the last few minutes, automatically refreshing every few seconds A Logstash config that reads JSON Lines from a file (via stdin), sets the event timestamp to the value of a… --- ## [Elasticsearch Output Plugin - Batching, How?](https://discuss.elastic.co/t/elasticsearch-output-plugin-batching-how/268469)
**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 4:51pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-batching-how/268469 "2021-03-26T16:51:51Z")
In the Logstash elastic search output documentation it mentions... Batch Sizes: This plugin attempts to send batches of events to the \[Elasticsearch Bulk API\] I can't find any information on how the batches are buffere… --- ## [Is case-insensitive sort on keyword aggregation. ES 7.7.0](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-es-7-7-0/268198)
**Author:** [@Cular](https://discuss.elastic.co/u/Cular)\ **Replies:** 3\ **Last updated:** [March 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-es-7-7-0/268198 "2021-03-26T16:44:49Z")
I have similar case like here and here2. I am trying to achive alphabetical sorting (case insensitive) with original value from aggregation. Simplified example mapping: PUT test\_data { "mappings": { "prope… --- ## [Logstash does not pick up all gzip log files](https://discuss.elastic.co/t/logstash-does-not-pick-up-all-gzip-log-files/268446)
**Author:** [@erictung](https://discuss.elastic.co/u/erictung)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 4:39pm UTC](https://discuss.elastic.co/t/logstash-does-not-pick-up-all-gzip-log-files/268446 "2021-03-26T16:39:25Z")
Hi community, this is my first post in this forum and I would like to seek help regarding Logstash. So here's the scenario: I have a Python script to pull logs from Cloudflare ELS and then save it into local folder as … --- ## [Filter documents prior to bucketing using GeoTile Aggregation](https://discuss.elastic.co/t/filter-documents-prior-to-bucketing-using-geotile-aggregation/268517)
**Author:** [@jvanulde](https://discuss.elastic.co/u/jvanulde)\ **Replies:** 0\ **Last updated:** [March 26, 2021, 4:10pm UTC](https://discuss.elastic.co/t/filter-documents-prior-to-bucketing-using-geotile-aggregation/268517 "2021-03-26T16:10:57Z")
Hi all, I am looking for an example where documents are filtered prior to bucketing via the GeoTile aggregation. For example I would like to have buckets that hold the number of documents where some value is greater than… --- ## [Как достать вложенные объекты в скрипте при агрегации. How get object in script](https://discuss.elastic.co/t/how-get-object-in-script/268075)
**Author:** [@Marina\_S](https://discuss.elastic.co/u/Marina_S)\ **Replies:** 17\ **Last updated:** [March 26, 2021, 4:19pm UTC](https://discuss.elastic.co/t/how-get-object-in-script/268075 "2021-03-26T16:19:35Z")
Есть объект такой вложенности "sizeData" : { "id" : 1, "elasticSizeScale" : { "id" : 3, "sizes" : \[ { "id" : 321, "sizeOrd… --- ## [Unable to tesselate shape error on indexing ES 7.11.1](https://discuss.elastic.co/t/unable-to-tesselate-shape-error-on-indexing-es-7-11-1/268356)
**Author:** [@mario.l](https://discuss.elastic.co/u/mario.l)\ **Replies:** 8\ **Last updated:** [March 26, 2021, 4:18pm UTC](https://discuss.elastic.co/t/unable-to-tesselate-shape-error-on-indexing-es-7-11-1/268356 "2021-03-26T16:18:33Z")
Dear all, I'm tring to save the following geometry MULTIPOLYGON(((177.59 59.9735,180 62.288856810085,180 63.763900213475,178.731 64.0348,177.44 64.2967,176.148 64.5406,174.809 64.7792,173.45 65.005,172.047 65.2202,170.… --- ## [Extract value from regex with parentheses in if condition](https://discuss.elastic.co/t/extract-value-from-regex-with-parentheses-in-if-condition/268190)
**Author:** [@Romanian\_Coder](https://discuss.elastic.co/u/Romanian_Coder)\ **Replies:** 8\ **Last updated:** [March 26, 2021, 4:14pm UTC](https://discuss.elastic.co/t/extract-value-from-regex-with-parentheses-in-if-condition/268190 "2021-03-26T16:14:24Z")
I have next input in logstash { logstash | "sourceRecordPosition" =\> 11, logstash | "rejectionReason" =\> "", logstash | "key" =\> 2251799813685255, logstash … --- ## [Filebeat Azure Activity Logs fail to index when field azure.activitylogs.identity.claims is string instead of json](https://discuss.elastic.co/t/filebeat-azure-activity-logs-fail-to-index-when-field-azure-activitylogs-identity-claims-is-string-instead-of-json/268516)
**Author:** [@tobias.berg](https://discuss.elastic.co/u/tobias.berg)\ **Replies:** 0\ **Last updated:** [March 26, 2021, 4:02pm UTC](https://discuss.elastic.co/t/filebeat-azure-activity-logs-fail-to-index-when-field-azure-activitylogs-identity-claims-is-string-instead-of-json/268516 "2021-03-26T16:02:47Z")
Hi, We have noticed that sometimes, the Azure Activity logs contains serilaized json instead of pure json in the azure.activitylogs.identity field. Thus, these logs fail to index with a mapping parsing exception. We ha… --- ## [Apm has many null points in "Time spent by span type" dashboards](https://discuss.elastic.co/t/apm-has-many-null-points-in-time-spent-by-span-type-dashboards/268440)
**Author:** [@peng\_xing](https://discuss.elastic.co/u/peng_xing)\ **Replies:** 1\ **Last updated:** [March 26, 2021, 3:56pm UTC](https://discuss.elastic.co/t/apm-has-many-null-points-in-time-spent-by-span-type-dashboards/268440 "2021-03-26T15:56:22Z")
I found some error logs in apm, but can not understand the reasons，how should i solve it？ apm-server-apm-server-685fcfc89d-rr8wn apm-server 2021-03-26T03:39:00.753Z ERROR \[request\] middleware/log\_middleware.go:95 int… [Previous page](https://discuss.elastic.co/latest.md?page=1761) [Next page](https://discuss.elastic.co/latest.md?page=1763)